@microsoft/teamsfx 0.4.1 → 0.4.2-alpha.096c8289.0

package/dist/index.esm5.js

@@ -1,11 +1,11 @@
-import { __extends, __awaiter, __generator } from 'tslib';
 import jwt_decode from 'jwt-decode';
+import { __awaiter } from 'tslib';
 import * as microsoftTeams from '@microsoft/teams-js';
-import axios from 'axios';
+import { PublicClientApplication } from '@azure/msal-browser';
 import { Client } from '@microsoft/microsoft-graph-client';
-import { ManagedIdentityCredential } from '@azure/identity';
 
 // Copyright (c) Microsoft Corporation.
+// Licensed under the MIT license.
 /**
  * Error code to trace the error types.
  * @beta
@@ -56,35 +56,35 @@ var ErrorCode;
      * Operation failed.
      */
     ErrorCode["FailedOperation"] = "FailedOperation";
+    /**
+     * Invalid response error.
+     */
+    ErrorCode["InvalidResponse"] = "InvalidResponse";
 })(ErrorCode || (ErrorCode = {}));
 /**
  * @internal
  */
-var ErrorMessage = /** @class */ (function () {
-    function ErrorMessage() {
-    }
-    // InvalidConfiguration Error
-    ErrorMessage.InvalidConfiguration = "{0} in configuration is invalid: {1}.";
-    ErrorMessage.ConfigurationNotExists = "Configuration does not exist. {0}";
-    ErrorMessage.ResourceConfigurationNotExists = "{0} resource configuration does not exist.";
-    ErrorMessage.MissingResourceConfiguration = "Missing resource configuration with type: {0}, name: {1}.";
-    ErrorMessage.AuthenticationConfigurationNotExists = "Authentication configuration does not exist.";
-    // RuntimeNotSupported Error
-    ErrorMessage.BrowserRuntimeNotSupported = "{0} is not supported in browser.";
-    ErrorMessage.NodejsRuntimeNotSupported = "{0} is not supported in Node.";
-    // Internal Error
-    ErrorMessage.FailToAcquireTokenOnBehalfOfUser = "Failed to acquire access token on behalf of user: {0}";
-    // ChannelNotSupported Error
-    ErrorMessage.OnlyMSTeamsChannelSupported = "{0} is only supported in MS Teams Channel";
-    return ErrorMessage;
-}());
+class ErrorMessage {
+}
+// InvalidConfiguration Error
+ErrorMessage.InvalidConfiguration = "{0} in configuration is invalid: {1}.";
+ErrorMessage.ConfigurationNotExists = "Configuration does not exist. {0}";
+ErrorMessage.ResourceConfigurationNotExists = "{0} resource configuration does not exist.";
+ErrorMessage.MissingResourceConfiguration = "Missing resource configuration with type: {0}, name: {1}.";
+ErrorMessage.AuthenticationConfigurationNotExists = "Authentication configuration does not exist.";
+// RuntimeNotSupported Error
+ErrorMessage.BrowserRuntimeNotSupported = "{0} is not supported in browser.";
+ErrorMessage.NodejsRuntimeNotSupported = "{0} is not supported in Node.";
+// Internal Error
+ErrorMessage.FailToAcquireTokenOnBehalfOfUser = "Failed to acquire access token on behalf of user: {0}";
+// ChannelNotSupported Error
+ErrorMessage.OnlyMSTeamsChannelSupported = "{0} is only supported in MS Teams Channel";
 /**
  * Error class with code and message thrown by the SDK.
  *
  * @beta
  */
-var ErrorWithCode = /** @class */ (function (_super) {
-    __extends(ErrorWithCode, _super);
+class ErrorWithCode extends Error {
     /**
      * Constructor of ErrorWithCode.
      *
@@ -93,21 +93,17 @@ var ErrorWithCode = /** @class */ (function (_super) {
      *
      * @beta
      */
-    function ErrorWithCode(message, code) {
-        var _newTarget = this.constructor;
-        var _this = this;
+    constructor(message, code) {
         if (!code) {
-            _this = _super.call(this, message) || this;
-            return _this;
+            super(message);
+            return this;
         }
-        _this = _super.call(this, message) || this;
-        Object.setPrototypeOf(_this, ErrorWithCode.prototype);
-        _this.name = _newTarget.name + "." + code;
-        _this.code = code;
-        return _this;
+        super(message);
+        Object.setPrototypeOf(this, ErrorWithCode.prototype);
+        this.name = `${new.target.name}.${code}`;
+        this.code = code;
     }
-    return ErrorWithCode;
-}(Error));
+}
 
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT license.
@@ -175,8 +171,8 @@ function setLogLevel(level) {
 function getLogLevel() {
     return internalLogger.level;
 }
-var InternalLogger = /** @class */ (function () {
-    function InternalLogger() {
+class InternalLogger {
+    constructor(name, logLevel) {
         this.level = undefined;
         this.defaultLogger = {
             verbose: console.debug,
@@ -184,26 +180,34 @@ var InternalLogger = /** @class */ (function () {
             warn: console.warn,
             error: console.error,
         };
+        this.name = name;
+        this.level = logLevel;
     }
-    InternalLogger.prototype.error = function (message) {
-        this.log(LogLevel.Error, function (x) { return x.error; }, message);
-    };
-    InternalLogger.prototype.warn = function (message) {
-        this.log(LogLevel.Warn, function (x) { return x.warn; }, message);
-    };
-    InternalLogger.prototype.info = function (message) {
-        this.log(LogLevel.Info, function (x) { return x.info; }, message);
-    };
-    InternalLogger.prototype.verbose = function (message) {
-        this.log(LogLevel.Verbose, function (x) { return x.verbose; }, message);
-    };
-    InternalLogger.prototype.log = function (logLevel, logFunction, message) {
+    error(message) {
+        this.log(LogLevel.Error, (x) => x.error, message);
+    }
+    warn(message) {
+        this.log(LogLevel.Warn, (x) => x.warn, message);
+    }
+    info(message) {
+        this.log(LogLevel.Info, (x) => x.info, message);
+    }
+    verbose(message) {
+        this.log(LogLevel.Verbose, (x) => x.verbose, message);
+    }
+    log(logLevel, logFunction, message) {
         if (message.trim() === "") {
             return;
         }
-        var timestamp = new Date().toUTCString();
-        var logHeader = "[" + timestamp + "] : @microsoft/teamsfx : " + LogLevel[logLevel] + " - ";
-        var logMessage = "" + logHeader + message;
+        const timestamp = new Date().toUTCString();
+        let logHeader;
+        if (this.name) {
+            logHeader = `[${timestamp}] : @microsoft/teamsfx - ${this.name} : ${LogLevel[logLevel]} - `;
+        }
+        else {
+            logHeader = `[${timestamp}] : @microsoft/teamsfx : ${LogLevel[logLevel]} - `;
+        }
+        const logMessage = `${logHeader}${message}`;
         if (this.level !== undefined && this.level <= logLevel) {
             if (this.customLogger) {
                 logFunction(this.customLogger)(logMessage);
@@ -215,15 +219,14 @@ var InternalLogger = /** @class */ (function () {
                 logFunction(this.defaultLogger)(logMessage);
             }
         }
-    };
-    return InternalLogger;
-}());
+    }
+}
 /**
  * Logger instance used internally
  *
  * @internal
  */
-var internalLogger = new InternalLogger();
+const internalLogger = new InternalLogger();
 /**
  * Set custom logger. Use the output functions if it's set. Priority is higher than setLogFunction.
  *
@@ -276,14 +279,14 @@ function setLogFunction(logFunction) {
  */
 function parseJwt(token) {
     try {
-        var tokenObj = jwt_decode(token);
+        const tokenObj = jwt_decode(token);
         if (!tokenObj || !tokenObj.exp) {
             throw new ErrorWithCode("Decoded token is null or exp claim does not exists.", ErrorCode.InternalError);
         }
         return tokenObj;
     }
     catch (err) {
-        var errorMsg = "Parse jwt token failed in node env with error: " + err.message;
+        const errorMsg = "Parse jwt token failed in node env with error: " + err.message;
         internalLogger.error(errorMsg);
         throw new ErrorWithCode(errorMsg, ErrorCode.InternalError);
     }
@@ -293,12 +296,12 @@ function parseJwt(token) {
  */
 function getUserInfoFromSsoToken(ssoToken) {
     if (!ssoToken) {
-        var errorMsg = "SSO token is undefined.";
+        const errorMsg = "SSO token is undefined.";
         internalLogger.error(errorMsg);
         throw new ErrorWithCode(errorMsg, ErrorCode.InvalidParameter);
     }
-    var tokenObject = parseJwt(ssoToken);
-    var userInfo = {
+    const tokenObject = parseJwt(ssoToken);
+    const userInfo = {
         displayName: tokenObject.name,
         objectId: tokenObject.oid,
         preferredUserName: "",
@@ -311,6 +314,57 @@ function getUserInfoFromSsoToken(ssoToken) {
     }
     return userInfo;
 }
+/**
+ * @internal
+ */
+function getTenantIdAndLoginHintFromSsoToken(ssoToken) {
+    if (!ssoToken) {
+        const errorMsg = "SSO token is undefined.";
+        internalLogger.error(errorMsg);
+        throw new ErrorWithCode(errorMsg, ErrorCode.InvalidParameter);
+    }
+    const tokenObject = parseJwt(ssoToken);
+    const userInfo = {
+        tid: tokenObject.tid,
+        loginHint: tokenObject.ver === "2.0"
+            ? tokenObject.preferred_username
+            : tokenObject.upn,
+    };
+    return userInfo;
+}
+/**
+ * @internal
+ */
+function parseAccessTokenFromAuthCodeTokenResponse(tokenResponse) {
+    try {
+        const tokenResponseObject = typeof tokenResponse == "string"
+            ? JSON.parse(tokenResponse)
+            : tokenResponse;
+        if (!tokenResponseObject || !tokenResponseObject.accessToken) {
+            const errorMsg = "Get empty access token from Auth Code token response.";
+            internalLogger.error(errorMsg);
+            throw new Error(errorMsg);
+        }
+        const token = tokenResponseObject.accessToken;
+        const tokenObject = parseJwt(token);
+        if (tokenObject.ver !== "1.0" && tokenObject.ver !== "2.0") {
+            const errorMsg = "SSO token is not valid with an unknown version: " + tokenObject.ver;
+            internalLogger.error(errorMsg);
+            throw new Error(errorMsg);
+        }
+        const accessToken = {
+            token: token,
+            expiresOnTimestamp: tokenObject.exp * 1000,
+        };
+        return accessToken;
+    }
+    catch (error) {
+        const errorMsg = "Parse access token failed from Auth Code token response in node env with error: " +
+            error.message;
+        internalLogger.error(errorMsg);
+        throw new ErrorWithCode(errorMsg, ErrorCode.InternalError);
+    }
+}
 /**
  * Format string template with replacements
  *
@@ -325,12 +379,8 @@ function getUserInfoFromSsoToken(ssoToken) {
  *
  * @internal
  */
-function formatString(str) {
-    var replacements = [];
-    for (var _i = 1; _i < arguments.length; _i++) {
-        replacements[_i - 1] = arguments[_i];
-    }
-    var args = replacements;
+function formatString(str, ...replacements) {
+    const args = replacements;
     return str.replace(/{(\d+)}/g, function (match, number) {
         return typeof args[number] != "undefined" ? args[number] : match;
     });
@@ -348,17 +398,17 @@ function validateScopesType(value) {
         return;
     }
     // string array
-    if (Array.isArray(value) && value.length > 0 && value.every(function (item) { return typeof item === "string"; })) {
+    if (Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === "string")) {
         return;
     }
-    var errorMsg = "The type of scopes is not valid, it must be string or string array";
+    const errorMsg = "The type of scopes is not valid, it must be string or string array";
     internalLogger.error(errorMsg);
     throw new ErrorWithCode(errorMsg, ErrorCode.InvalidParameter);
 }
 /**
  * @internal
  */
-var isNode = typeof process !== "undefined" &&
+const isNode = typeof process !== "undefined" &&
     !!process.version &&
     !!process.versions &&
     !!process.versions.node;
@@ -368,7 +418,7 @@ var isNode = typeof process !== "undefined" &&
  * Global configuration instance
  *
  */
-var config;
+let config;
 /**
  * Initialize configuration from environment variables or configuration object and set the global instance
  *
@@ -383,7 +433,7 @@ function loadConfiguration(configuration) {
     // browser environment
     if (!isNode) {
         if (!configuration) {
-            var errorMsg = "You are running the code in browser. Configuration must be passed in.";
+            const errorMsg = "You are running the code in browser. Configuration must be passed in.";
             internalLogger.error(errorMsg);
             throw new ErrorWithCode(errorMsg, ErrorCode.InvalidParameter);
         }
@@ -391,9 +441,9 @@ function loadConfiguration(configuration) {
         return;
     }
     // node environment
-    var newAuthentication;
-    var newResources = [];
-    var defaultResourceName = "default";
+    let newAuthentication;
+    let newResources = [];
+    const defaultResourceName = "default";
     if (configuration === null || configuration === void 0 ? void 0 : configuration.authentication) {
         newAuthentication = configuration.authentication;
     }
@@ -451,15 +501,14 @@ function loadConfiguration(configuration) {
  *
  * @beta
  */
-function getResourceConfiguration(resourceType, resourceName) {
+function getResourceConfiguration(resourceType, resourceName = "default") {
     var _a;
-    if (resourceName === void 0) { resourceName = "default"; }
-    internalLogger.info("Get resource configuration of " + ResourceType[resourceType] + " from " + resourceName);
-    var result = (_a = config.resources) === null || _a === void 0 ? void 0 : _a.find(function (item) { return item.type === resourceType && item.name === resourceName; });
+    internalLogger.info(`Get resource configuration of ${ResourceType[resourceType]} from ${resourceName}`);
+    const result = (_a = config.resources) === null || _a === void 0 ? void 0 : _a.find((item) => item.type === resourceType && item.name === resourceName);
     if (result) {
         return result.properties;
     }
-    var errorMsg = formatString(ErrorMessage.MissingResourceConfiguration, ResourceType[resourceType], resourceName);
+    const errorMsg = formatString(ErrorMessage.MissingResourceConfiguration, ResourceType[resourceType], resourceName);
     internalLogger.error(errorMsg);
     throw new ErrorWithCode(errorMsg, ErrorCode.InvalidConfiguration);
 }
@@ -477,7 +526,7 @@ function getAuthenticationConfiguration() {
     if (config) {
         return config.authentication;
     }
-    var errorMsg = "Please call loadConfiguration() first before calling getAuthenticationConfiguration().";
+    const errorMsg = "Please call loadConfiguration() first before calling getAuthenticationConfiguration().";
     internalLogger.error(errorMsg);
     throw new ErrorWithCode(formatString(ErrorMessage.ConfigurationNotExists, errorMsg), ErrorCode.InvalidConfiguration);
 }
@@ -491,7 +540,7 @@ function getAuthenticationConfiguration() {
  *
  * @beta
  */
-var M365TenantCredential = /** @class */ (function () {
+class M365TenantCredential {
     /**
      * Constructor of M365TenantCredential.
      *
@@ -499,7 +548,7 @@ var M365TenantCredential = /** @class */ (function () {
      * Only works in in server side.
      * @beta
      */
-    function M365TenantCredential() {
+    constructor() {
         throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "M365TenantCredential"), ErrorCode.RuntimeNotSupported);
     }
     /**
@@ -509,15 +558,12 @@ var M365TenantCredential = /** @class */ (function () {
      * Only works in in server side.
      * @beta
      */
-    M365TenantCredential.prototype.getToken = function (scopes, options) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "M365TenantCredential"), ErrorCode.RuntimeNotSupported);
-            });
+    getToken(scopes, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "M365TenantCredential"), ErrorCode.RuntimeNotSupported);
         });
-    };
-    return M365TenantCredential;
-}());
+    }
+}
 
 // Copyright (c) Microsoft Corporation.
 /**
@@ -528,7 +574,7 @@ var M365TenantCredential = /** @class */ (function () {
  *
  * @beta
  */
-var OnBehalfOfUserCredential = /** @class */ (function () {
+class OnBehalfOfUserCredential {
     /**
      * Constructor of OnBehalfOfUserCredential
      *
@@ -536,7 +582,7 @@ var OnBehalfOfUserCredential = /** @class */ (function () {
      * Can Only works in in server side.
      * @beta
      */
-    function OnBehalfOfUserCredential(ssoToken) {
+    constructor(ssoToken) {
         throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "OnBehalfOfUserCredential"), ErrorCode.RuntimeNotSupported);
     }
     /**
@@ -545,66 +591,27 @@ var OnBehalfOfUserCredential = /** @class */ (function () {
      * Can only be used in server side.
      * @beta
      */
-    OnBehalfOfUserCredential.prototype.getToken = function (scopes, options) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "OnBehalfOfUserCredential"), ErrorCode.RuntimeNotSupported);
-            });
+    getToken(scopes, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "OnBehalfOfUserCredential"), ErrorCode.RuntimeNotSupported);
         });
-    };
+    }
     /**
      * Get basic user info from SSO token.
      * @remarks
      * Can only be used in server side.
      * @beta
      */
-    OnBehalfOfUserCredential.prototype.getUserInfo = function () {
+    getUserInfo() {
         throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "OnBehalfOfUserCredential"), ErrorCode.RuntimeNotSupported);
-    };
-    return OnBehalfOfUserCredential;
-}());
-
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT license.
-/**
- * Configuration used in initialization.
- * @internal
- */
-var Cache = /** @class */ (function () {
-    function Cache() {
     }
-    Cache.get = function (key) {
-        return sessionStorage.getItem(key);
-    };
-    Cache.set = function (key, value) {
-        sessionStorage.setItem(key, value);
-    };
-    Cache.remove = function (key) {
-        sessionStorage.removeItem(key);
-    };
-    return Cache;
-}());
-
-// Copyright (c) Microsoft Corporation.
-// Licensed under the MIT license.
-/**
- * @internal
- */
-var GrantType;
-(function (GrantType) {
-    GrantType["authCode"] = "authorization_code";
-    GrantType["ssoToken"] = "sso_token";
-})(GrantType || (GrantType = {}));
+}
 
 // Copyright (c) Microsoft Corporation.
-var accessTokenCacheKeyPrefix = "accessToken";
-var separator = "-";
-var tokenRefreshTimeSpanInMillisecond = 5 * 60 * 1000;
-var initializeTeamsSdkTimeoutInMillisecond = 5000;
-var loginPageWidth = 600;
-var loginPageHeight = 535;
-var maxRetryCount = 3;
-var retryTimeSpanInMillisecond = 3000;
+const tokenRefreshTimeSpanInMillisecond = 5 * 60 * 1000;
+const initializeTeamsSdkTimeoutInMillisecond = 5000;
+const loginPageWidth = 600;
+const loginPageHeight = 535;
 /**
  * Represent Teams current user's identity, and it is used within Teams tab application.
  *
@@ -613,7 +620,7 @@ var retryTimeSpanInMillisecond = 3000;
  *
  * @beta
  */
-var TeamsUserCredential = /** @class */ (function () {
+class TeamsUserCredential {
     /**
      * Constructor of TeamsUserCredential.
      * Developer need to call loadConfiguration(config) before using this class.
@@ -622,7 +629,6 @@ var TeamsUserCredential = /** @class */ (function () {
      * ```typescript
      * const config = {
      *  authentication: {
-     *    runtimeConnectorEndpoint: "https://xxx.xxx.com",
      *    initiateLoginEndpoint: "https://localhost:3000/auth-start.html",
      *    clientId: "xxx"
      *   }
@@ -636,10 +642,11 @@ var TeamsUserCredential = /** @class */ (function () {
      *
      * @beta
      */
-    function TeamsUserCredential() {
+    constructor() {
         internalLogger.info("Create teams user credential");
         this.config = this.loadAndValidateConfig();
         this.ssoToken = null;
+        this.initialized = false;
     }
     /**
      * Popup login page to get user's access token with specific scopes.
@@ -657,66 +664,67 @@ var TeamsUserCredential = /** @class */ (function () {
      * @param scopes - The list of scopes for which the token will have access, before that, we will request user to consent.
      *
      * @throws {@link ErrorCode|InternalError} when failed to login with unknown error.
-     * @throws {@link ErrorCode|ServiceError} when simple auth server failed to exchange access token.
      * @throws {@link ErrorCode|ConsentFailed} when user canceled or failed to consent.
      * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
      * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
      *
      * @beta
      */
-    TeamsUserCredential.prototype.login = function (scopes) {
-        return __awaiter(this, void 0, void 0, function () {
-            var scopesStr;
-            var _this = this;
-            return __generator(this, function (_a) {
-                validateScopesType(scopes);
-                scopesStr = typeof scopes === "string" ? scopes : scopes.join(" ");
-                internalLogger.info("Popup login page to get user's access token with scopes: " + scopesStr);
-                return [2 /*return*/, new Promise(function (resolve, reject) {
-                        microsoftTeams.initialize(function () {
-                            microsoftTeams.authentication.authenticate({
-                                url: _this.config.initiateLoginEndpoint + "?clientId=" + _this.config.clientId + "&scope=" + encodeURI(scopesStr),
-                                width: loginPageWidth,
-                                height: loginPageHeight,
-                                successCallback: function (result) { return __awaiter(_this, void 0, void 0, function () {
-                                    var errorMsg, authCodeResult, err_1;
-                                    return __generator(this, function (_a) {
-                                        switch (_a.label) {
-                                            case 0:
-                                                if (!result) {
-                                                    errorMsg = "Get empty authentication result from Teams";
-                                                    internalLogger.error(errorMsg);
-                                                    reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
-                                                    return [2 /*return*/];
-                                                }
-                                                authCodeResult = JSON.parse(result);
-                                                _a.label = 1;
-                                            case 1:
-                                                _a.trys.push([1, 3, , 4]);
-                                                return [4 /*yield*/, this.exchangeAccessTokenFromSimpleAuthServer(scopesStr, authCodeResult)];
-                                            case 2:
-                                                _a.sent();
-                                                resolve();
-                                                return [3 /*break*/, 4];
-                                            case 3:
-                                                err_1 = _a.sent();
-                                                reject(this.generateAuthServerError(err_1));
-                                                return [3 /*break*/, 4];
-                                            case 4: return [2 /*return*/];
-                                        }
-                                    });
-                                }); },
-                                failureCallback: function (reason) {
-                                    var errorMsg = "Consent failed for the scope " + scopesStr + " with error: " + reason;
-                                    internalLogger.error(errorMsg);
-                                    reject(new ErrorWithCode(errorMsg, ErrorCode.ConsentFailed));
-                                },
-                            });
-                        });
-                    })];
+    login(scopes) {
+        return __awaiter(this, void 0, void 0, function* () {
+            validateScopesType(scopes);
+            const scopesStr = typeof scopes === "string" ? scopes : scopes.join(" ");
+            internalLogger.info(`Popup login page to get user's access token with scopes: ${scopesStr}`);
+            if (!this.initialized) {
+                yield this.init();
+            }
+            return new Promise((resolve, reject) => {
+                microsoftTeams.initialize(() => {
+                    microsoftTeams.authentication.authenticate({
+                        url: `${this.config.initiateLoginEndpoint}?clientId=${this.config.clientId}&scope=${encodeURI(scopesStr)}&loginHint=${this.loginHint}`,
+                        width: loginPageWidth,
+                        height: loginPageHeight,
+                        successCallback: (result) => __awaiter(this, void 0, void 0, function* () {
+                            if (!result) {
+                                const errorMsg = "Get empty authentication result from MSAL";
+                                internalLogger.error(errorMsg);
+                                reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
+                                return;
+                            }
+                            let resultJson = {};
+                            try {
+                                resultJson = JSON.parse(result);
+                            }
+                            catch (error) {
+                                // If can not parse result as Json, will throw error.
+                                const failedToParseResult = "Failed to parse response to Json.";
+                                internalLogger.error(failedToParseResult);
+                                reject(new ErrorWithCode(failedToParseResult, ErrorCode.InvalidResponse));
+                            }
+                            // If code exists in result, user may using previous auth-start and auth-end page.
+                            if (resultJson.code) {
+                                const helpLink = "https://aka.ms/teamsfx-auth-code-flow";
+                                const usingPreviousAuthPage = "Found auth code in response. Auth code is not support for current version of SDK. " +
+                                    `Please refer to the help link for how to fix the issue: ${helpLink}.`;
+                                internalLogger.error(usingPreviousAuthPage);
+                                reject(new ErrorWithCode(usingPreviousAuthPage, ErrorCode.InvalidResponse));
+                            }
+                            // If sessionStorage exists in result, set the values in current session storage.
+                            if (resultJson.sessionStorage) {
+                                this.setSessionStorage(resultJson.sessionStorage);
+                            }
+                            resolve();
+                        }),
+                        failureCallback: (reason) => {
+                            const errorMsg = `Consent failed for the scope ${scopesStr} with error: ${reason}`;
+                            internalLogger.error(errorMsg);
+                            reject(new ErrorWithCode(errorMsg, ErrorCode.ConsentFailed));
+                        },
+                    });
+                });
             });
         });
-    };
+    }
     /**
      * Get access token from credential.
      *
@@ -741,7 +749,6 @@ var TeamsUserCredential = /** @class */ (function () {
      *
      * @throws {@link ErrorCode|InternalError} when failed to get access token with unknown error.
      * @throws {@link ErrorCode|UiRequiredError} when need user consent to get access token.
-     * @throws {@link ErrorCode|ServiceError} when failed to get access token from simple auth server.
      * @throws {@link ErrorCode|InvalidParameter} when scopes is not a valid string or string array.
      * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is nodeJS.
      *
@@ -752,46 +759,62 @@ var TeamsUserCredential = /** @class */ (function () {
      *
      * @beta
      */
-    TeamsUserCredential.prototype.getToken = function (scopes, options) {
-        return __awaiter(this, void 0, void 0, function () {
-            var ssoToken, scopeStr, cachedKey, cachedToken, accessToken;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        validateScopesType(scopes);
-                        return [4 /*yield*/, this.getSSOToken()];
-                    case 1:
-                        ssoToken = _a.sent();
-                        scopeStr = typeof scopes === "string" ? scopes : scopes.join(" ");
-                        if (!(scopeStr === "")) return [3 /*break*/, 2];
-                        internalLogger.info("Get SSO token");
-                        return [2 /*return*/, ssoToken];
-                    case 2:
-                        internalLogger.info("Get access token with scopes: " + scopeStr);
-                        return [4 /*yield*/, this.getAccessTokenCacheKey(scopeStr)];
-                    case 3:
-                        cachedKey = _a.sent();
-                        cachedToken = this.getTokenCache(cachedKey);
-                        if (cachedToken) {
-                            if (!this.isAccessTokenNearExpired(cachedToken)) {
-                                internalLogger.verbose("Get access token from cache");
-                                return [2 /*return*/, cachedToken];
-                            }
-                            else {
-                                internalLogger.verbose("Cached access token is expired");
-                            }
-                        }
-                        else {
-                            internalLogger.verbose("No cached access token");
-                        }
-                        return [4 /*yield*/, this.getAndCacheAccessTokenFromSimpleAuthServer(scopeStr)];
-                    case 4:
-                        accessToken = _a.sent();
-                        return [2 /*return*/, accessToken];
+    getToken(scopes, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            validateScopesType(scopes);
+            const ssoToken = yield this.getSSOToken();
+            const scopeStr = typeof scopes === "string" ? scopes : scopes.join(" ");
+            if (scopeStr === "") {
+                internalLogger.info("Get SSO token");
+                return ssoToken;
+            }
+            else {
+                internalLogger.info("Get access token with scopes: " + scopeStr);
+                if (!this.initialized) {
+                    yield this.init();
                 }
-            });
+                let tokenResponse;
+                const scopesArray = typeof scopes === "string" ? scopes.split(" ") : scopes;
+                const domain = window.location.origin;
+                // First try to get Access Token from cache.
+                try {
+                    const account = this.msalInstance.getAccountByUsername(this.loginHint);
+                    const scopesRequestForAcquireTokenSilent = {
+                        scopes: scopesArray,
+                        account: account !== null && account !== void 0 ? account : undefined,
+                        redirectUri: `${domain}/blank-auth-end.html`,
+                    };
+                    tokenResponse = yield this.msalInstance.acquireTokenSilent(scopesRequestForAcquireTokenSilent);
+                }
+                catch (error) {
+                    const acquireTokenSilentFailedMessage = `Failed to call acquireTokenSilent. Reason: ${error === null || error === void 0 ? void 0 : error.message}. `;
+                    internalLogger.verbose(acquireTokenSilentFailedMessage);
+                }
+                if (!tokenResponse) {
+                    // If fail to get Access Token from cache, try to get Access token by silent login.
+                    try {
+                        const scopesRequestForSsoSilent = {
+                            scopes: scopesArray,
+                            loginHint: this.loginHint,
+                            redirectUri: `${domain}/blank-auth-end.html`,
+                        };
+                        tokenResponse = yield this.msalInstance.ssoSilent(scopesRequestForSsoSilent);
+                    }
+                    catch (error) {
+                        const ssoSilentFailedMessage = `Failed to call ssoSilent. Reason: ${error === null || error === void 0 ? void 0 : error.message}. `;
+                        internalLogger.verbose(ssoSilentFailedMessage);
+                    }
+                }
+                if (!tokenResponse) {
+                    const errorMsg = `Failed to get access token cache silently, please login first: you need login first before get access token.`;
+                    internalLogger.error(errorMsg);
+                    throw new ErrorWithCode(errorMsg, ErrorCode.UiRequiredError);
+                }
+                const accessToken = parseAccessTokenFromAuthCodeTokenResponse(tokenResponse);
+                return accessToken;
+            }
         });
-    };
+    }
     /**
      * Get basic user info from SSO token
      *
@@ -808,153 +831,73 @@ var TeamsUserCredential = /** @class */ (function () {
      *
      * @beta
      */
-    TeamsUserCredential.prototype.getUserInfo = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var ssoToken;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        internalLogger.info("Get basic user info from SSO token");
-                        return [4 /*yield*/, this.getSSOToken()];
-                    case 1:
-                        ssoToken = _a.sent();
-                        return [2 /*return*/, getUserInfoFromSsoToken(ssoToken.token)];
-                }
-            });
-        });
-    };
-    TeamsUserCredential.prototype.exchangeAccessTokenFromSimpleAuthServer = function (scopesStr, authCodeResult) {
-        var _a, _b;
-        return __awaiter(this, void 0, void 0, function () {
-            var axiosInstance, retryCount, response, tokenResult, key, err_2;
-            return __generator(this, function (_c) {
-                switch (_c.label) {
-                    case 0: return [4 /*yield*/, this.getAxiosInstance()];
-                    case 1:
-                        axiosInstance = _c.sent();
-                        retryCount = 0;
-                        _c.label = 2;
-                    case 2:
-                        _c.label = 3;
-                    case 3:
-                        _c.trys.push([3, 6, , 9]);
-                        return [4 /*yield*/, axiosInstance.post("/auth/token", {
-                                scope: scopesStr,
-                                code: authCodeResult.code,
-                                code_verifier: authCodeResult.codeVerifier,
-                                redirect_uri: authCodeResult.redirectUri,
-                                grant_type: GrantType.authCode,
-                            })];
-                    case 4:
-                        response = _c.sent();
-                        tokenResult = response.data;
-                        return [4 /*yield*/, this.getAccessTokenCacheKey(scopesStr)];
-                    case 5:
-                        key = _c.sent();
-                        // Important: tokens are stored in sessionStorage, read more here: https://aka.ms/teamsfx-session-storage-notice
-                        this.setTokenCache(key, {
-                            token: tokenResult.access_token,
-                            expiresOnTimestamp: tokenResult.expires_on,
-                        });
-                        return [2 /*return*/];
-                    case 6:
-                        err_2 = _c.sent();
-                        if (!(((_b = (_a = err_2.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.type) && err_2.response.data.type === "AadUiRequiredException")) return [3 /*break*/, 8];
-                        internalLogger.warn("Exchange access token failed, retry...");
-                        if (!(retryCount < maxRetryCount)) return [3 /*break*/, 8];
-                        return [4 /*yield*/, this.sleep(retryTimeSpanInMillisecond)];
-                    case 7:
-                        _c.sent();
-                        retryCount++;
-                        return [3 /*break*/, 2];
-                    case 8: throw err_2;
-                    case 9: return [3 /*break*/, 2];
-                    case 10: return [2 /*return*/];
-                }
-            });
+    getUserInfo() {
+        return __awaiter(this, void 0, void 0, function* () {
+            internalLogger.info("Get basic user info from SSO token");
+            const ssoToken = yield this.getSSOToken();
+            return getUserInfoFromSsoToken(ssoToken.token);
         });
-    };
-    /**
-     * Get access token cache from authentication server
-     * @returns Access token
-     */
-    TeamsUserCredential.prototype.getAndCacheAccessTokenFromSimpleAuthServer = function (scopesStr) {
-        return __awaiter(this, void 0, void 0, function () {
-            var axiosInstance, response, accessTokenResult, accessToken, cacheKey, err_3;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        _a.trys.push([0, 4, , 5]);
-                        internalLogger.verbose("Get access token from authentication server with scopes: " + scopesStr);
-                        return [4 /*yield*/, this.getAxiosInstance()];
-                    case 1:
-                        axiosInstance = _a.sent();
-                        return [4 /*yield*/, axiosInstance.post("/auth/token", {
-                                scope: scopesStr,
-                                grant_type: GrantType.ssoToken,
-                            })];
-                    case 2:
-                        response = _a.sent();
-                        accessTokenResult = response.data;
-                        accessToken = {
-                            token: accessTokenResult.access_token,
-                            expiresOnTimestamp: accessTokenResult.expires_on,
-                        };
-                        return [4 /*yield*/, this.getAccessTokenCacheKey(scopesStr)];
-                    case 3:
-                        cacheKey = _a.sent();
-                        this.setTokenCache(cacheKey, accessToken);
-                        return [2 /*return*/, accessToken];
-                    case 4:
-                        err_3 = _a.sent();
-                        throw this.generateAuthServerError(err_3);
-                    case 5: return [2 /*return*/];
-                }
-            });
+    }
+    init() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const ssoToken = yield this.getSSOToken();
+            const info = getTenantIdAndLoginHintFromSsoToken(ssoToken.token);
+            this.loginHint = info.loginHint;
+            this.tid = info.tid;
+            const msalConfig = {
+                auth: {
+                    clientId: this.config.clientId,
+                    authority: `https://login.microsoftonline.com/${this.tid}`,
+                },
+                cache: {
+                    cacheLocation: "sessionStorage",
+                },
+            };
+            this.msalInstance = new PublicClientApplication(msalConfig);
+            this.initialized = true;
         });
-    };
+    }
     /**
      * Get SSO token using teams SDK
      * It will try to get SSO token from memory first, if SSO token doesn't exist or about to expired, then it will using teams SDK to get SSO token
      * @returns SSO token
      */
-    TeamsUserCredential.prototype.getSSOToken = function () {
-        var _this = this;
-        return new Promise(function (resolve, reject) {
-            if (_this.ssoToken) {
-                if (_this.ssoToken.expiresOnTimestamp - Date.now() > tokenRefreshTimeSpanInMillisecond) {
+    getSSOToken() {
+        return new Promise((resolve, reject) => {
+            if (this.ssoToken) {
+                if (this.ssoToken.expiresOnTimestamp - Date.now() > tokenRefreshTimeSpanInMillisecond) {
                     internalLogger.verbose("Get SSO token from memory cache");
-                    resolve(_this.ssoToken);
+                    resolve(this.ssoToken);
                     return;
                 }
             }
-            var initialized = false;
-            microsoftTeams.initialize(function () {
+            let initialized = false;
+            microsoftTeams.initialize(() => {
                 initialized = true;
                 microsoftTeams.authentication.getAuthToken({
-                    successCallback: function (token) {
+                    successCallback: (token) => {
                         if (!token) {
-                            var errorMsg = "Get empty SSO token from Teams";
+                            const errorMsg = "Get empty SSO token from Teams";
                             internalLogger.error(errorMsg);
                             reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
                             return;
                         }
-                        var tokenObject = parseJwt(token);
+                        const tokenObject = parseJwt(token);
                         if (tokenObject.ver !== "1.0" && tokenObject.ver !== "2.0") {
-                            var errorMsg = "SSO token is not valid with an unknown version: " + tokenObject.ver;
+                            const errorMsg = "SSO token is not valid with an unknown version: " + tokenObject.ver;
                             internalLogger.error(errorMsg);
                             reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
                             return;
                         }
-                        var ssoToken = {
-                            token: token,
+                        const ssoToken = {
+                            token,
                             expiresOnTimestamp: tokenObject.exp * 1000,
                         };
-                        _this.ssoToken = ssoToken;
+                        this.ssoToken = ssoToken;
                         resolve(ssoToken);
                     },
-                    failureCallback: function (errMessage) {
-                        var errorMsg = "Get SSO token failed with error: " + errMessage;
+                    failureCallback: (errMessage) => {
+                        const errorMsg = "Get SSO token failed with error: " + errMessage;
                         internalLogger.error(errorMsg);
                         reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
                     },
@@ -962,178 +905,65 @@ var TeamsUserCredential = /** @class */ (function () {
                 });
             });
             // If the code not running in Teams, the initialize callback function would never trigger
-            setTimeout(function () {
+            setTimeout(() => {
                 if (!initialized) {
-                    var errorMsg = "Initialize teams sdk timeout, maybe the code is not running inside Teams";
+                    const errorMsg = "Initialize teams sdk timeout, maybe the code is not running inside Teams";
                     internalLogger.error(errorMsg);
                     reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
                 }
             }, initializeTeamsSdkTimeoutInMillisecond);
         });
-    };
+    }
     /**
      * Load and validate authentication configuration
      * @returns Authentication configuration
      */
-    TeamsUserCredential.prototype.loadAndValidateConfig = function () {
+    loadAndValidateConfig() {
         internalLogger.verbose("Validate authentication configuration");
-        var config = getAuthenticationConfiguration();
+        const config = getAuthenticationConfiguration();
         if (!config) {
             internalLogger.error(ErrorMessage.AuthenticationConfigurationNotExists);
             throw new ErrorWithCode(ErrorMessage.AuthenticationConfigurationNotExists, ErrorCode.InvalidConfiguration);
         }
-        if (config.initiateLoginEndpoint && config.simpleAuthEndpoint && config.clientId) {
+        if (config.initiateLoginEndpoint && config.clientId) {
             return config;
         }
-        var missingValues = [];
+        const missingValues = [];
         if (!config.initiateLoginEndpoint) {
             missingValues.push("initiateLoginEndpoint");
         }
-        if (!config.simpleAuthEndpoint) {
-            missingValues.push("simpleAuthEndpoint");
-        }
         if (!config.clientId) {
             missingValues.push("clientId");
         }
-        var errorMsg = formatString(ErrorMessage.InvalidConfiguration, missingValues.join(", "), "undefined");
+        const errorMsg = formatString(ErrorMessage.InvalidConfiguration, missingValues.join(", "), "undefined");
         internalLogger.error(errorMsg);
         throw new ErrorWithCode(errorMsg, ErrorCode.InvalidConfiguration);
-    };
-    /**
-     * Get axios instance with sso token bearer header
-     * @returns AxiosInstance
-     */
-    TeamsUserCredential.prototype.getAxiosInstance = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var ssoToken, axiosInstance;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSSOToken()];
-                    case 1:
-                        ssoToken = _a.sent();
-                        axiosInstance = axios.create({
-                            baseURL: this.config.simpleAuthEndpoint,
-                        });
-                        axiosInstance.interceptors.request.use(function (config) {
-                            config.headers.Authorization = "Bearer " + ssoToken.token;
-                            return config;
-                        });
-                        return [2 /*return*/, axiosInstance];
-                }
-            });
-        });
-    };
-    /**
-     * Set access token to cache
-     * @param key
-     * @param token
-     */
-    TeamsUserCredential.prototype.setTokenCache = function (key, token) {
-        Cache.set(key, JSON.stringify(token));
-    };
-    /**
-     * Get access token from cache.
-     * If there is no cache or cannot be parsed, then it will return null
-     * @param key
-     * @returns Access token or null
-     */
-    TeamsUserCredential.prototype.getTokenCache = function (key) {
-        var value = Cache.get(key);
-        if (value === null) {
-            return null;
-        }
-        var accessToken = this.validateAndParseJson(value);
-        return accessToken;
-    };
-    /**
-     * Parses passed value as JSON access token, if value is not a valid json string JSON.parse() will throw an error.
-     * @param jsonValue
-     */
-    TeamsUserCredential.prototype.validateAndParseJson = function (jsonValue) {
+    }
+    setSessionStorage(sessonStorageValues) {
         try {
-            var parsedJson = JSON.parse(jsonValue);
-            /**
-             * There are edge cases in which JSON.parse will successfully parse a non-valid JSON object
-             * (e.g. JSON.parse will parse an escaped string into an unescaped string), so adding a type check
-             * of the parsed value is necessary in order to be certain that the string represents a valid JSON object.
-             *
-             */
-            return parsedJson && typeof parsedJson === "object" ? parsedJson : null;
-        }
-        catch (error) {
-            return null;
-        }
-    };
-    /**
-     * Generate cache key
-     * @param scopesStr
-     * @returns Access token cache key, a key example: accessToken-userId-clientId-tenantId-scopes
-     */
-    TeamsUserCredential.prototype.getAccessTokenCacheKey = function (scopesStr) {
-        return __awaiter(this, void 0, void 0, function () {
-            var ssoToken, ssoTokenObj, clientId, userObjectId, tenantId, key;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getSSOToken()];
-                    case 1:
-                        ssoToken = _a.sent();
-                        ssoTokenObj = parseJwt(ssoToken.token);
-                        clientId = this.config.clientId;
-                        userObjectId = ssoTokenObj.oid;
-                        tenantId = ssoTokenObj.tid;
-                        key = [accessTokenCacheKeyPrefix, userObjectId, clientId, tenantId, scopesStr]
-                            .join(separator)
-                            .replace(/" "/g, "_");
-                        return [2 /*return*/, key];
-                }
+            const sessionStorageKeys = Object.keys(sessonStorageValues);
+            sessionStorageKeys.forEach((key) => {
+                sessionStorage.setItem(key, sessonStorageValues[key]);
             });
-        });
-    };
-    /**
-     * Check whether the token is about to expire (within 5 minutes)
-     * @returns Boolean value indicate whether the token is about to expire
-     */
-    TeamsUserCredential.prototype.isAccessTokenNearExpired = function (token) {
-        var expireDate = new Date(token.expiresOnTimestamp);
-        if (expireDate.getTime() - Date.now() > tokenRefreshTimeSpanInMillisecond) {
-            return false;
         }
-        return true;
-    };
-    TeamsUserCredential.prototype.generateAuthServerError = function (err) {
-        var _a, _b;
-        var errorMessage = err.message;
-        if ((_b = (_a = err.response) === null || _a === void 0 ? void 0 : _a.data) === null || _b === void 0 ? void 0 : _b.type) {
-            errorMessage = err.response.data.detail;
-            if (err.response.data.type === "AadUiRequiredException") {
-                var fullErrorMsg_1 = "Failed to get access token from authentication server, please login first: " +
-                    errorMessage;
-                internalLogger.warn(fullErrorMsg_1);
-                return new ErrorWithCode(fullErrorMsg_1, ErrorCode.UiRequiredError);
-            }
-            else {
-                var fullErrorMsg_2 = "Failed to get access token from authentication server: " + errorMessage;
-                internalLogger.error(fullErrorMsg_2);
-                return new ErrorWithCode(fullErrorMsg_2, ErrorCode.ServiceError);
-            }
+        catch (error) {
+            // Values in result.sessionStorage can not be set into session storage.
+            // Throw error since this may block user.
+            const errorMessage = `Failed to set values in session storage. Error: ${error.message}`;
+            internalLogger.error(errorMessage);
+            throw new ErrorWithCode(errorMessage, ErrorCode.InternalError);
         }
-        var fullErrorMsg = "Failed to get access token with error: " + errorMessage;
-        return new ErrorWithCode(fullErrorMsg, ErrorCode.InternalError);
-    };
-    TeamsUserCredential.prototype.sleep = function (ms) {
-        return new Promise(function (resolve) { return setTimeout(resolve, ms); });
-    };
-    return TeamsUserCredential;
-}());
+    }
+}
 
 // Copyright (c) Microsoft Corporation.
-var defaultScope = "https://graph.microsoft.com/.default";
+const defaultScope = "https://graph.microsoft.com/.default";
 /**
  * Microsoft Graph auth provider for Teams Framework
  *
  * @beta
  */
-var MsGraphAuthProvider = /** @class */ (function () {
+class MsGraphAuthProvider {
     /**
      * Constructor of MsGraphAuthProvider.
      *
@@ -1146,9 +976,9 @@ var MsGraphAuthProvider = /** @class */ (function () {
      *
      * @beta
      */
-    function MsGraphAuthProvider(credential, scopes) {
+    constructor(credential, scopes) {
         this.credential = credential;
-        var scopesStr = defaultScope;
+        let scopesStr = defaultScope;
         if (scopes) {
             validateScopesType(scopes);
             scopesStr = typeof scopes === "string" ? scopes : scopes.join(" ");
@@ -1156,7 +986,7 @@ var MsGraphAuthProvider = /** @class */ (function () {
                 scopesStr = defaultScope;
             }
         }
-        internalLogger.info("Create Microsoft Graph Authentication Provider with scopes: '" + scopesStr + "'");
+        internalLogger.info(`Create Microsoft Graph Authentication Provider with scopes: '${scopesStr}'`);
         this.scopes = scopesStr;
     }
     /**
@@ -1171,32 +1001,23 @@ var MsGraphAuthProvider = /** @class */ (function () {
      * @returns Access token from the credential.
      *
      */
-    MsGraphAuthProvider.prototype.getAccessToken = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var accessToken;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        internalLogger.info("Get Graph Access token with scopes: '" + this.scopes + "'");
-                        return [4 /*yield*/, this.credential.getToken(this.scopes)];
-                    case 1:
-                        accessToken = _a.sent();
-                        return [2 /*return*/, new Promise(function (resolve, reject) {
-                                if (accessToken) {
-                                    resolve(accessToken.token);
-                                }
-                                else {
-                                    var errorMsg = "Graph access token is undefined or empty";
-                                    internalLogger.error(errorMsg);
-                                    reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
-                                }
-                            })];
+    getAccessToken() {
+        return __awaiter(this, void 0, void 0, function* () {
+            internalLogger.info(`Get Graph Access token with scopes: '${this.scopes}'`);
+            const accessToken = yield this.credential.getToken(this.scopes);
+            return new Promise((resolve, reject) => {
+                if (accessToken) {
+                    resolve(accessToken.token);
+                }
+                else {
+                    const errorMsg = "Graph access token is undefined or empty";
+                    internalLogger.error(errorMsg);
+                    reject(new ErrorWithCode(errorMsg, ErrorCode.InternalError));
                 }
             });
         });
-    };
-    return MsGraphAuthProvider;
-}());
+    }
+}
 
 // Copyright (c) Microsoft Corporation.
 /**
@@ -1252,208 +1073,35 @@ var MsGraphAuthProvider = /** @class */ (function () {
  */
 function createMicrosoftGraphClient(credential, scopes) {
     internalLogger.info("Create Microsoft Graph Client");
-    var authProvider = new MsGraphAuthProvider(credential, scopes);
-    var graphClient = Client.initWithMiddleware({
-        authProvider: authProvider,
+    const authProvider = new MsGraphAuthProvider(credential, scopes);
+    const graphClient = Client.initWithMiddleware({
+        authProvider,
     });
     return graphClient;
 }
 
-// Copyright (c) Microsoft Corporation.
 /**
- * SQL connection configuration instance.
+ * Generate connection configuration consumed by tedious.
  * @remarks
  * Only works in in server side.
- *
  * @beta
- *
  */
-var DefaultTediousConnectionConfiguration = /** @class */ (function () {
-    function DefaultTediousConnectionConfiguration() {
-        /**
-         * MSSQL default scope
-         * https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-connect-msi
-         */
-        this.defaultSQLScope = "https://database.windows.net/";
+class DefaultTediousConnectionConfiguration {
+    constructor() {
+        throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "DefaultTediousConnectionConfiguration"), ErrorCode.RuntimeNotSupported);
     }
     /**
      * Generate connection configuration consumed by tedious.
-     *
-     * @returns Connection configuration of tedious for the SQL.
-     *
-     * @throws {@link ErrorCode|InvalidConfiguration} when SQL config resource configuration is invalid.
-     * @throws {@link ErrorCode|InternalError} when get user MSI token failed or MSI token is invalid.
-     * @throws {@link ErrorCode|RuntimeNotSupported} when runtime is browser.
-     *
+     * @remarks
+     * Only works in in server side.
      * @beta
      */
-    DefaultTediousConnectionConfiguration.prototype.getConfig = function () {
-        return __awaiter(this, void 0, void 0, function () {
-            var configuration, errMsg, configWithUPS, configWithToken, error_1;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        internalLogger.info("Get SQL configuration");
-                        configuration = getResourceConfiguration(ResourceType.SQL);
-                        if (!configuration) {
-                            errMsg = "SQL resource configuration not exist";
-                            internalLogger.error(errMsg);
-                            throw new ErrorWithCode(errMsg, ErrorCode.InvalidConfiguration);
-                        }
-                        try {
-                            this.isSQLConfigurationValid(configuration);
-                        }
-                        catch (err) {
-                            throw err;
-                        }
-                        if (!this.isMsiAuthentication()) {
-                            configWithUPS = this.generateDefaultConfig(configuration);
-                            internalLogger.verbose("SQL configuration with username and password generated");
-                            return [2 /*return*/, configWithUPS];
-                        }
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.generateTokenConfig(configuration)];
-                    case 2:
-                        configWithToken = _a.sent();
-                        internalLogger.verbose("SQL configuration with MSI token generated");
-                        return [2 /*return*/, configWithToken];
-                    case 3:
-                        error_1 = _a.sent();
-                        throw error_1;
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
-    };
-    /**
-     * Check SQL use MSI identity or username and password.
-     *
-     * @returns false - login with SQL MSI identity, true - login with username and password.
-     * @internal
-     */
-    DefaultTediousConnectionConfiguration.prototype.isMsiAuthentication = function () {
-        internalLogger.verbose("Check connection config using MSI access token or username and password");
-        var configuration = getResourceConfiguration(ResourceType.SQL);
-        if ((configuration === null || configuration === void 0 ? void 0 : configuration.sqlUsername) != null && (configuration === null || configuration === void 0 ? void 0 : configuration.sqlPassword) != null) {
-            internalLogger.verbose("Login with username and password");
-            return false;
-        }
-        internalLogger.verbose("Login with MSI identity");
-        return true;
-    };
-    /**
-     * check configuration is an available configurations.
-     * @param { SqlConfiguration } sqlConfig
-     *
-     * @returns true - SQL configuration has a valid SQL endpoints, SQL username with password or identity ID.
-     *          false - configuration is not valid.
-     * @internal
-     */
-    DefaultTediousConnectionConfiguration.prototype.isSQLConfigurationValid = function (sqlConfig) {
-        internalLogger.verbose("Check SQL configuration if valid");
-        if (!sqlConfig.sqlServerEndpoint) {
-            internalLogger.error("SQL configuration is not valid without SQL server endpoint exist");
-            throw new ErrorWithCode("SQL configuration error without SQL server endpoint exist", ErrorCode.InvalidConfiguration);
-        }
-        if (!(sqlConfig.sqlUsername && sqlConfig.sqlPassword) && !sqlConfig.sqlIdentityId) {
-            var errMsg = "SQL configuration is not valid without " + (sqlConfig.sqlIdentityId ? "" : "identity id ") + " " + (sqlConfig.sqlUsername ? "" : "SQL username ") + " " + (sqlConfig.sqlPassword ? "" : "SQL password") + " exist";
-            internalLogger.error(errMsg);
-            throw new ErrorWithCode(errMsg, ErrorCode.InvalidConfiguration);
-        }
-        internalLogger.verbose("SQL configuration is valid");
-    };
-    /**
-     * Generate tedious connection configuration with default authentication type.
-     *
-     * @param { SqlConfiguration } SQL configuration with username and password.
-     *
-     * @returns Tedious connection configuration with username and password.
-     * @internal
-     */
-    DefaultTediousConnectionConfiguration.prototype.generateDefaultConfig = function (sqlConfig) {
-        internalLogger.verbose("SQL server " + sqlConfig.sqlServerEndpoint + ", user name " + sqlConfig.sqlUsername + ", database name " + sqlConfig.sqlDatabaseName);
-        var config = {
-            server: sqlConfig.sqlServerEndpoint,
-            authentication: {
-                type: TediousAuthenticationType.default,
-                options: {
-                    userName: sqlConfig.sqlUsername,
-                    password: sqlConfig.sqlPassword,
-                },
-            },
-            options: {
-                database: sqlConfig.sqlDatabaseName,
-                encrypt: true,
-            },
-        };
-        return config;
-    };
-    /**
-     * Generate tedious connection configuration with azure-active-directory-access-token authentication type.
-     *
-     * @param { SqlConfiguration } SQL configuration with AAD access token.
-     *
-     * @returns Tedious connection configuration with access token.
-     * @internal
-     */
-    DefaultTediousConnectionConfiguration.prototype.generateTokenConfig = function (sqlConfig) {
-        return __awaiter(this, void 0, void 0, function () {
-            var token, credential, errMsg, config;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        internalLogger.verbose("Generate tedious config with MSI token");
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        credential = new ManagedIdentityCredential(sqlConfig.sqlIdentityId);
-                        return [4 /*yield*/, credential.getToken(this.defaultSQLScope)];
-                    case 2:
-                        token = _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        _a.sent();
-                        errMsg = "Get user MSI token failed";
-                        internalLogger.error(errMsg);
-                        throw new ErrorWithCode(errMsg, ErrorCode.InternalError);
-                    case 4:
-                        if (token) {
-                            config = {
-                                server: sqlConfig.sqlServerEndpoint,
-                                authentication: {
-                                    type: TediousAuthenticationType.MSI,
-                                    options: {
-                                        token: token.token,
-                                    },
-                                },
-                                options: {
-                                    database: sqlConfig.sqlDatabaseName,
-                                    encrypt: true,
-                                },
-                            };
-                            internalLogger.verbose("Generate token configuration success, server endpoint is " + sqlConfig.sqlServerEndpoint + ", database name is " + sqlConfig.sqlDatabaseName);
-                            return [2 /*return*/, config];
-                        }
-                        internalLogger.error("Generate token configuration, server endpoint is " + sqlConfig.sqlServerEndpoint + ", MSI token is not valid");
-                        throw new ErrorWithCode("MSI token is not valid", ErrorCode.InternalError);
-                }
-            });
+    getConfig(databaseName) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "DefaultTediousConnectionConfiguration"), ErrorCode.RuntimeNotSupported);
         });
-    };
-    return DefaultTediousConnectionConfiguration;
-}());
-/**
- * tedious connection config authentication type.
- * https://tediousjs.github.io/tedious/api-connection.html
- * @internal
- */
-var TediousAuthenticationType;
-(function (TediousAuthenticationType) {
-    TediousAuthenticationType["default"] = "default";
-    TediousAuthenticationType["MSI"] = "azure-active-directory-access-token";
-})(TediousAuthenticationType || (TediousAuthenticationType = {}));
+    }
+}
 
 // Copyright (c) Microsoft Corporation.
 /**
@@ -1507,7 +1155,7 @@ var TediousAuthenticationType;
  *
  * @beta
  */
-var TeamsBotSsoPrompt = /** @class */ (function () {
+class TeamsBotSsoPrompt {
     /**
      * Constructor of TeamsBotSsoPrompt.
      *
@@ -1519,7 +1167,7 @@ var TeamsBotSsoPrompt = /** @class */ (function () {
      *
      * @beta
      */
-    function TeamsBotSsoPrompt(dialogId, settings) {
+    constructor(dialogId, settings) {
         this.settings = settings;
         throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "TeamsBotSsoPrompt"), ErrorCode.RuntimeNotSupported);
     }
@@ -1539,13 +1187,11 @@ var TeamsBotSsoPrompt = /** @class */ (function () {
      *
      * @beta
      */
-    TeamsBotSsoPrompt.prototype.beginDialog = function (dc) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "TeamsBotSsoPrompt"), ErrorCode.RuntimeNotSupported);
-            });
+    beginDialog(dc) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "TeamsBotSsoPrompt"), ErrorCode.RuntimeNotSupported);
         });
-    };
+    }
     /**
      * Called when a prompt dialog is the active dialog and the user replied with a new activity.
      *
@@ -1564,15 +1210,12 @@ var TeamsBotSsoPrompt = /** @class */ (function () {
      *
      * @beta
      */
-    TeamsBotSsoPrompt.prototype.continueDialog = function (dc) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "TeamsBotSsoPrompt"), ErrorCode.RuntimeNotSupported);
-            });
+    continueDialog(dc) {
+        return __awaiter(this, void 0, void 0, function* () {
+            throw new ErrorWithCode(formatString(ErrorMessage.BrowserRuntimeNotSupported, "TeamsBotSsoPrompt"), ErrorCode.RuntimeNotSupported);
         });
-    };
-    return TeamsBotSsoPrompt;
-}());
+    }
+}
 
 export { DefaultTediousConnectionConfiguration, ErrorCode, ErrorWithCode, LogLevel, M365TenantCredential, MsGraphAuthProvider, OnBehalfOfUserCredential, ResourceType, TeamsBotSsoPrompt, TeamsUserCredential, createMicrosoftGraphClient, getAuthenticationConfiguration, getLogLevel, getResourceConfiguration, loadConfiguration, setLogFunction, setLogLevel, setLogger };
 //# sourceMappingURL=index.esm5.js.map