evals-lab 0.1.2

package/lab/web/dist/assets/dist-DI3ewZYj.js

@@ -0,0 +1 @@
+var e=`client_id`,t=`redirect_uri`,n=`token_type`,r=`req_cnf`,i=`brk_client_id`,a=`brk_redirect_uri`,o=`attribute_tokens`,s=`msal.js.common`,c=`https://login.microsoftonline.com/common/`,l=`common`,u=`${c}discovery/instance?api-version=1.1&authorization_endpoint=`,d=`.ciamlogin.com`,f=`.onmicrosoft.com`,p=`openid`,m=`profile`,h=`offline_access`,g=`email`,_=`S256`,ee=`application/x-www-form-urlencoded;charset=utf-8`,te=`http://169.254.169.254/metadata/instance/compute`,ne=`2021-02-01`,re=2e3,ie=`login.microsoft.com`,ae=[`login.microsoftonline.com`,`login.windows.net`,`login.microsoft.com`,`sts.windows.net`],oe={GET:`GET`,POST:`POST`},se=[p,m,h],ce=[...se,g],v={CONTENT_TYPE:`Content-Type`,CONTENT_LENGTH:`Content-Length`,DPOP:`DPoP`,RETRY_AFTER:`Retry-After`,CCS_HEADER:`X-AnchorMailbox`,WWWAuthenticate:`WWW-Authenticate`,AuthenticationInfo:`Authentication-Info`,X_MS_REQUEST_ID:`x-ms-request-id`,X_MS_HTTP_VERSION:`x-ms-httpver`},le={ACTIVE_ACCOUNT_FILTERS:`active-account-filters`},ue={COMMON:`common`,ORGANIZATIONS:`organizations`,CONSUMERS:`consumers`},y={ACCESS_TOKEN:`access_token`,XMS_CC:`xms_cc`,ID_TOKEN:`id_token`,SIGNIN_STATE:`signin_state`,LOGIN_HINT:`login_hint`,TENANT_REGION_SUB_SCOPE:`tenant_region_sub_scope`},b={LOGIN:`login`,SELECT_ACCOUNT:`select_account`,CONSENT:`consent`,NONE:`none`,CREATE:`create`,NO_SESSION:`no_session`},de={CODE:`code`,IDTOKEN_TOKEN:`id_token token`,IDTOKEN_TOKEN_REFRESHTOKEN:`id_token token refresh_token`},fe={QUERY:`query`,FRAGMENT:`fragment`,FORM_POST:`form_post`},pe={IMPLICIT_GRANT:`implicit`,AUTHORIZATION_CODE_GRANT:`authorization_code`,CLIENT_CREDENTIALS_GRANT:`client_credentials`,RESOURCE_OWNER_PASSWORD_GRANT:`password`,REFRESH_TOKEN_GRANT:`refresh_token`,DEVICE_CODE_GRANT:`device_code`,JWT_BEARER:`urn:ietf:params:oauth:grant-type:jwt-bearer`,USER_FIC:`user_fic`},me=`MSSTS`,he=`ADFS`,ge=`Generic`,x={ID_TOKEN:`IdToken`,ACCESS_TOKEN:`AccessToken`,ACCESS_TOKEN_WITH_AUTH_SCHEME:`AccessToken_With_AuthScheme`,REFRESH_TOKEN:`RefreshToken`},_e=`appmetadata`,ve=`client_info`,ye=`authority-metadata`,be=86400,S={CONFIG:`config`,CACHE:`cache`,NETWORK:`network`,HARDCODED_VALUES:`hardcoded_values`},xe=`server-telemetry`,Se=`unknown_error`,C={BEARER:`Bearer`,POP:`pop`,DPOP:`DPoP`,SSH:`ssh-cert`},Ce=3600,we=`throttling`,Te=`retry-after, h429`,Ee={FAILED_AUTO_DETECTION:`1`,INTERNAL_CACHE:`2`,ENVIRONMENT_VARIABLE:`3`,IMDS:`4`},De={CONFIGURED_MATCHES_DETECTED:`1`,CONFIGURED_NO_AUTO_DETECTION:`2`,CONFIGURED_NOT_DETECTED:`3`,AUTO_DETECTION_REQUESTED_SUCCESSFUL:`4`,AUTO_DETECTION_REQUESTED_FAILED:`5`},Oe={NOT_APPLICABLE:`0`,FORCE_REFRESH_OR_CLAIMS:`1`,NO_CACHED_ACCESS_TOKEN:`2`,CACHED_ACCESS_TOKEN_EXPIRED:`3`,PROACTIVELY_REFRESHED:`4`},ke={Jwt:`JWT`,Jwk:`JWK`,Pop:`pop`,Dpop:`dpop+jwt`};function Ae(e){return`See https://aka.ms/msal.js.errors#${e} for details`}var w=class e extends Error{constructor(t,n,r,i){let a=r||(t?Ae(t):``),o=a?`${t}: ${a}`:t;super(o),Object.setPrototypeOf(this,e.prototype),this.errorCode=t||``,this.errorMessage=a||``,this.subError=i||``,this.correlationId=n,this.name=`AuthError`}};function je(e,t,n){return new w(e,t,n||Ae(e))}var Me=class e extends w{constructor(t,n,r){super(t,n,r),this.name=`ClientAuthError`,Object.setPrototypeOf(this,e.prototype)}};function T(e,t,n){return new Me(e,t,n)}var Ne=`client_info_decoding_error`,Pe=`client_info_empty_error`,Fe=`token_parsing_error`,Ie=`null_or_empty_token`,Le=`endpoints_resolution_error`,Re=`network_error`,ze=`openid_config_error`,Be=`hash_not_deserialized`,Ve=`invalid_state`,He=`state_mismatch`,Ue=`state_not_found`,We=`nonce_mismatch`,Ge=`multiple_matching_appMetadata`,Ke=`request_cannot_be_made`,qe=`cannot_remove_empty_scope`,Je=`cannot_append_scopeset`,Ye=`empty_input_scopeset`,Xe=`no_account_in_silent_request`,Ze=`invalid_cache_record`,Qe=`invalid_cache_environment`,$e=`no_account_found`,et=`no_crypto_object`,tt=`dpop_token_type_mismatch`,nt=`token_refresh_required`,rt=`token_claims_cnf_required_for_signedjwt`,it=`authorization_code_missing_from_server_response`,at=`binding_key_not_removed`,ot=`end_session_endpoint_not_supported`,st=`key_id_missing`,E=`method_not_implemented`,ct=`resource_parameter_required`,lt=`misplaced_resource_parameter`;function ut(e,t){if(!e)throw T(Pe,``);try{let n=t(e);return JSON.parse(n)}catch{throw T(Ne,``)}}function dt(e){if(!e)throw T(Ne,``);let t=e.split(`.`,2);return{uid:t[0],utid:t.length<2?``:t[1]}}function D(e,t,n){let r=ft(e,n);try{let e=t(r);return JSON.parse(e)}catch{throw T(Fe,n)}}function O(e){if(!e.signin_state)return!1;let t=[`kmsi`,`dvc_dmjd`];return e.signin_state.some(e=>t.includes(e.trim().toLowerCase()))}function ft(e,t){if(!e)throw T(Ie,t);let n=/^([^\.\s]*)\.([^\.\s]+)\.([^\.\s]*)$/.exec(e);if(!n||n.length<4)throw T(Fe,t);return n[2]}function pt(e,t){return!!e&&!!t&&e===t.split(`.`)[1]}function mt(e,t,n,r,i){if(i){let{oid:t,sub:n,tid:a,name:o,tfp:s,acr:c,preferred_username:l,upn:u,login_hint:d}=i,f=a||s||c||``;return{tenantId:f,localAccountId:t||n||``,name:o,username:l||u||``,loginHint:d,isHomeTenant:pt(f,e),upn:u,...r&&{nativeAccountId:r}}}return{tenantId:n,localAccountId:t,username:``,isHomeTenant:pt(n,e),...r&&{nativeAccountId:r}}}function ht(e,t,n,r){let i=e;if(t){let{isHomeTenant:n,...r}=t;i={...e,...r}}if(n){let{isHomeTenant:t,...a}=mt(e.homeAccountId,e.localAccountId,e.tenantId,i.nativeAccountId,n);return i={...i,...a,idTokenClaims:n,idToken:r,kmsi:O(n)},i}return i}var gt={Default:0,Adfs:1,Ciam:3};function _t(e){return e&&(e.tid||e.tfp||e.acr)||null}var k={AAD:`AAD`,OIDC:`OIDC`,EAR:`EAR`};function vt(e){let t=e.tenantProfiles||[];t.length===0&&e.realm&&e.localAccountId&&t.push(mt(e.homeAccountId,e.localAccountId,e.realm,e.nativeAccountId));let n=t.find(t=>t.tenantId===e.realm)?.nativeAccountId||e.nativeAccountId;return{homeAccountId:e.homeAccountId,environment:e.environment,tenantId:e.realm,username:e.username,localAccountId:e.localAccountId,loginHint:e.loginHint,name:e.name,nativeAccountId:n,authorityType:e.authorityType,tenantProfiles:new Map(t.map(e=>[e.tenantId,e])),dataBoundary:e.dataBoundary}}function yt(e,t,n,r){let i;i=t.authorityType===gt.Adfs?he:t.protocolMode===k.OIDC?ge:me;let a,o;e.clientInfo&&r&&(a=ut(e.clientInfo,r),a.xms_tdbr&&(o=a.xms_tdbr===`EU`?`EU`:`None`));let s=e.environment||t&&t.getPreferredCache();if(!s)throw T(Qe,n);let c=e.idTokenClaims?.preferred_username||e.idTokenClaims?.upn,l=e.idTokenClaims?.emails?e.idTokenClaims.emails[0]:null,u=c||l||``,d=e.idTokenClaims?.login_hint,f=a?.utid||_t(e.idTokenClaims)||``,p=a?.uid||e.idTokenClaims?.oid||e.idTokenClaims?.sub||``,m;return m=e.tenantProfiles?e.tenantProfiles:[mt(e.homeAccountId,p,f,e.nativeAccountId,e.idTokenClaims)],{homeAccountId:e.homeAccountId,environment:s,realm:f,localAccountId:p,username:u,authorityType:i,loginHint:d,clientInfo:e.clientInfo,name:e.idTokenClaims?.name||``,lastModificationTime:void 0,lastModificationApp:void 0,cloudGraphHostName:e.cloudGraphHostName,msGraphHost:e.msGraphHost,nativeAccountId:e.nativeAccountId,tenantProfiles:m,dataBoundary:o}}function bt(e,t,n){let r=Array.from(e.tenantProfiles?.values()||[]);if(r.length===0&&e.tenantId&&e.localAccountId)r.push(mt(e.homeAccountId,e.localAccountId,e.tenantId,e.nativeAccountId,e.idTokenClaims));else if(e.nativeAccountId){let t=r.find(t=>t.tenantId===e.tenantId);t&&!t.nativeAccountId&&(t.nativeAccountId=e.nativeAccountId)}return{authorityType:e.authorityType||`Generic`,homeAccountId:e.homeAccountId,localAccountId:e.localAccountId,nativeAccountId:e.nativeAccountId,realm:e.tenantId,environment:e.environment,username:e.username,loginHint:e.loginHint,name:e.name,cloudGraphHostName:t,msGraphHost:n,tenantProfiles:r,dataBoundary:e.dataBoundary}}function xt(e,t,n,r,i,a){if(t!==gt.Adfs){if(e)try{let t=ut(e,r.base64Decode);if(t.uid&&t.utid)return`${t.uid}.${t.utid}`}catch{}n.warning(`1ub6wv`,i)}return a?.sub||``}function St(e){return e?e.hasOwnProperty(`homeAccountId`)&&e.hasOwnProperty(`environment`)&&e.hasOwnProperty(`realm`)&&e.hasOwnProperty(`localAccountId`)&&e.hasOwnProperty(`username`)&&e.hasOwnProperty(`authorityType`):!1}var Ct=`unexpected_error`,wt=class e extends w{constructor(t,n){super(t,n),this.name=`ClientConfigurationError`,Object.setPrototypeOf(this,e.prototype)}};function A(e,t){return new wt(e,t)}var Tt=`redirect_uri_empty`,Et=`authority_uri_insecure`,Dt=`url_parse_error`,Ot=`empty_url_error`,kt=`empty_input_scopes_error`,At=`invalid_claims`,jt=`token_request_empty`,Mt=`logout_request_empty`,Nt=`pkce_params_missing`,Pt=`invalid_cloud_discovery_metadata`,Ft=`invalid_authority_metadata`,It=`untrusted_authority`,Lt=`missing_ssh_jwk`,Rt=`missing_ssh_kid`,zt=`unsupported_authentication_scheme`,Bt=`cannot_set_OIDCOptions`,Vt=`cannot_allow_platform_broker`,Ht=`authority_mismatch`,Ut=`invalid_request_method_for_EAR`,Wt=`invalid_platform_broker_configuration`,Gt=`issuer_validation_failed`,Kt=`invalid_dpop_htm`,qt=`invalid_dpop_htu`,Jt=`invalid_dpop_nonce`,Yt=`dpop_missing_resource_context`;function Xt(e){return e.hasOwnProperty(`authorization_endpoint`)&&e.hasOwnProperty(`token_endpoint`)&&e.hasOwnProperty(`issuer`)&&e.hasOwnProperty(`jwks_uri`)}var Zt=class{static isEmptyObj(e){if(e)try{let t=JSON.parse(e);return Object.keys(t).length===0}catch{}return!0}static startsWith(e,t){return e.indexOf(t)===0}static endsWith(e,t){return e.length>=t.length&&e.lastIndexOf(t)===e.length-t.length}static queryStringToObject(e){let t={},n=e.split(`&`),r=e=>decodeURIComponent(e.replace(/\+/g,` `));return n.forEach(e=>{if(e.trim()){let[n,i]=e.split(/=(.+)/g,2);n&&i&&(t[r(n)]=r(i))}}),t}static trimArrayEntries(e){return e.map(e=>e.trim())}static removeEmptyStringsFromArray(e){return e.filter(e=>!!e)}static jsonParseHelper(e){try{return JSON.parse(e)}catch{return null}}},j=class e{get urlString(){return this._urlString}constructor(t,n){if(this._urlString=t,this.correlationId=n,!this._urlString)throw A(Ot,n);t.includes(`#`)||(this._urlString=e.canonicalizeUri(t))}static canonicalizeUri(e){if(e){let t=e.toLowerCase();return Zt.endsWith(t,`?`)?t=t.slice(0,-1):Zt.endsWith(t,`?/`)&&(t=t.slice(0,-2)),Zt.endsWith(t,`/`)||(t+=`/`),t}return e}validateAsUri(){let e;try{e=this.getUrlComponents()}catch{throw A(Dt,this.correlationId)}if(!e.HostNameAndPort||!e.PathSegments)throw A(Dt,this.correlationId);if(!e.Protocol||e.Protocol.toLowerCase()!==`https:`)throw A(Et,this.correlationId)}static appendQueryString(e,t){return t?e.indexOf(`?`)<0?`${e}?${t}`:`${e}&${t}`:e}static removeHashFromUrl(t){return e.canonicalizeUri(t.split(`#`)[0])}replaceTenantPath(t){let n=this.getUrlComponents(),r=n.PathSegments;return t&&r.length!==0&&(r[0]===ue.COMMON||r[0]===ue.ORGANIZATIONS)&&(r[0]=t),e.constructAuthorityUriFromObject(n,this.correlationId)}getUrlComponents(){let e=RegExp(`^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?`),t=this.urlString.match(e);if(!t)throw A(Dt,this.correlationId);let n={Protocol:t[1],HostNameAndPort:t[4],AbsolutePath:t[5],QueryString:t[7]},r=n.AbsolutePath.split(`/`);return r=r.filter(e=>e&&e.length>0),n.PathSegments=r,n.QueryString&&n.QueryString.endsWith(`/`)&&(n.QueryString=n.QueryString.substring(0,n.QueryString.length-1)),n}static getDomainFromUrl(e,t){let n=RegExp(`^([^:/?#]+://)?([^/?#]*)`),r=e.match(n);if(!r)throw A(Dt,t);return r[2]}static getAbsoluteUrl(t,n,r){if(t[0]===`/`){let i=new e(n,r).getUrlComponents();return i.Protocol+`//`+i.HostNameAndPort+t}return t}static constructAuthorityUriFromObject(t,n){return new e(t.Protocol+`//`+t.HostNameAndPort+`/`+t.PathSegments.join(`/`),n)}},Qt=[{host:`login.microsoftonline.com`},{host:`login.partner.microsoftonline.cn`},{host:`login.microsoftonline.us`},{host:`login.sovcloud-identity.fr`},{host:`login.sovcloud-identity.de`},{host:`login.sovcloud-identity.sg`}];function $t(e,t){return{token_endpoint:`https://${e}/{tenantid}/oauth2/v2.0/token`,jwks_uri:`https://${e}/{tenantid}/discovery/v2.0/keys`,issuer:`https://${t}/{tenantid}/v2.0`,authorization_endpoint:`https://${e}/{tenantid}/oauth2/v2.0/authorize`,end_session_endpoint:`https://${e}/{tenantid}/oauth2/v2.0/logout`}}var en={endpointMetadata:Qt.reduce((e,{host:t,issuerHost:n})=>(e[t]=$t(t,n||t),e),{}),instanceDiscoveryMetadata:{metadata:[{preferred_network:`login.microsoftonline.com`,preferred_cache:`login.windows.net`,aliases:[`login.microsoftonline.com`,`login.windows.net`,`login.microsoft.com`,`sts.windows.net`]},{preferred_network:`login.partner.microsoftonline.cn`,preferred_cache:`login.partner.microsoftonline.cn`,aliases:[`login.partner.microsoftonline.cn`,`login.chinacloudapi.cn`]},{preferred_network:`login.microsoftonline.de`,preferred_cache:`login.microsoftonline.de`,aliases:[`login.microsoftonline.de`]},{preferred_network:`login.microsoftonline.us`,preferred_cache:`login.microsoftonline.us`,aliases:[`login.microsoftonline.us`,`login.usgovcloudapi.net`]},{preferred_network:`login-us.microsoftonline.com`,preferred_cache:`login-us.microsoftonline.com`,aliases:[`login-us.microsoftonline.com`]},{preferred_network:`login.sovcloud-identity.fr`,preferred_cache:`login.sovcloud-identity.fr`,aliases:[`login.sovcloud-identity.fr`]},{preferred_network:`login.sovcloud-identity.de`,preferred_cache:`login.sovcloud-identity.de`,aliases:[`login.sovcloud-identity.de`]},{preferred_network:`login.sovcloud-identity.sg`,preferred_cache:`login.sovcloud-identity.sg`,aliases:[`login.sovcloud-identity.sg`]}]}},tn=en.endpointMetadata,nn=en.instanceDiscoveryMetadata,rn=new Set;nn.metadata.forEach(e=>{e.aliases.forEach(e=>{rn.add(e)})});function an(e,t,n){let r,i=e.canonicalAuthority;if(i){let a=new j(i,n).getUrlComponents().HostNameAndPort;r=on(t,n,a,e.cloudDiscoveryMetadata?.metadata,S.CONFIG)||on(t,n,a,nn.metadata,S.HARDCODED_VALUES)||e.knownAuthorities}return r||[]}function on(e,t,n,r,i){if(e.trace(`1bmquz ${i}`,t),n&&r){let a=cn(r,n);if(a)return e.trace(`1fotbt ${i}`,t),a.aliases;e.trace(`14avvj ${i}`,t)}return null}function sn(e){return cn(nn.metadata,e)}function cn(e,t){for(let n=0;n<e.length;n++){let r=e[n];if(r.aliases.includes(t))return r}return null}var ln={None:`none`,AzurePublic:`https://login.microsoftonline.com`,AzureChina:`https://login.chinacloudapi.cn`,AzureGermany:`https://login.microsoftonline.de`,AzureUsGovernment:`https://login.microsoftonline.us`};function un(e){return e.hasOwnProperty(`tenant_discovery_endpoint`)&&e.hasOwnProperty(`metadata`)}function dn(e){return e.hasOwnProperty(`error`)&&e.hasOwnProperty(`error_description`)}var fn=`networkClientSendPostRequestAsync`,pn=`refreshTokenClientExecutePostToTokenEndpoint`,mn=`authorizationCodeClientExecutePostToTokenEndpoint`,hn=`refreshTokenClientExecuteTokenRequest`,gn=`refreshTokenClientAcquireToken`,_n=`refreshTokenClientAcquireTokenWithCachedRefreshToken`,vn=`refreshTokenClientCreateTokenRequestBody`,yn=`silentFlowClientGenerateResultFromCacheRecord`,bn=`getAuthCodeUrl`,xn=`handleCodeResponseFromServer`,Sn=`authClientExecuteTokenRequest`,Cn=`authClientCreateTokenRequestBody`,wn=`updateTokenEndpointAuthority`,Tn=`popTokenGenerateCnf`,En=`handleServerTokenResponse`,Dn=`authorityResolveEndpointsAsync`,On=`authorityGetCloudDiscoveryMetadataFromNetwork`,kn=`authorityUpdateCloudDiscoveryMetadata`,An=`authorityGetEndpointMetadataFromNetwork`,jn=`authorityUpdateEndpointMetadata`,Mn=`authorityUpdateMetadataWithRegionalInformation`,Nn=`regionDiscoveryDetectRegion`,Pn=`regionDiscoveryGetRegionFromIMDS`,Fn=`regionDiscoveryGetCurrentVersion`,In=`cacheManagerGetRefreshToken`,Ln=`setUserData`,M=(e,t,n,r,i)=>(...a)=>{n.trace(`1plfzx ${t}`,i);let o=r.startMeasurement(t,i);i&&r.incrementFields({[`ext.${t}CallCount`]:1},i);try{let r=e(...a);return o.end({success:!0}),n.trace(`1g8n6a ${t}`,i),r}catch(e){n.trace(`0cfd8i ${t}`,i);try{n.trace(JSON.stringify(e),i)}catch{n.trace(`00dty7`,i)}throw o.end({success:!1},e),e}},N=(e,t,n,r,i)=>(...a)=>{n.trace(`1plfzx ${t}`,i);let o=r.startMeasurement(t,i);return i&&r.incrementFields({[`ext.${t}CallCount`]:1},i),e(...a).then(e=>(n.trace(`1g8n6a ${t}`,i),o.end({success:!0}),e)).catch(e=>{n.trace(`0cfd8i ${t}`,i);try{n.trace(JSON.stringify(e),i)}catch{n.trace(`00dty7`,i)}throw o.end({success:!1},e),e})},Rn=class e{constructor(e,t,n,r){this.networkInterface=e,this.logger=t,this.performanceClient=n,this.correlationId=r}async detectRegion(t,n){let r=t;if(r)n.region_source=Ee.ENVIRONMENT_VARIABLE;else{let t=e.IMDS_OPTIONS;try{let e=await N(this.getRegionFromIMDS.bind(this),Pn,this.logger,this.performanceClient,this.correlationId)(ne,t);if(e.status===200&&(r=e.body?.location,r&&(n.region_source=Ee.IMDS)),e.status===400){let e=await N(this.getCurrentVersion.bind(this),Fn,this.logger,this.performanceClient,this.correlationId)(t);if(!e)return n.region_source=Ee.FAILED_AUTO_DETECTION,null;let i=await N(this.getRegionFromIMDS.bind(this),Pn,this.logger,this.performanceClient,this.correlationId)(e,t);i.status===200&&(r=i.body?.location,r&&(n.region_source=Ee.IMDS))}}catch{return n.region_source=Ee.FAILED_AUTO_DETECTION,null}}return r||(n.region_source=Ee.FAILED_AUTO_DETECTION),r||null}async getRegionFromIMDS(e,t){return this.networkInterface.sendGetRequestAsync(`${te}?api-version=${e}`,t,re)}async getCurrentVersion(e){try{let t=await this.networkInterface.sendGetRequestAsync(`${te}?format=json`,e);return t.status===400&&t.body&&t.body[`newest-versions`]&&t.body[`newest-versions`].length>0?t.body[`newest-versions`][0]:null}catch{return null}}};Rn.IMDS_OPTIONS={headers:{Metadata:`true`}};function P(){return Math.round(new Date().getTime()/1e3)}function zn(e){return e.getTime()/1e3}function Bn(e){return e?new Date(Number(e)*1e3):new Date}function Vn(e,t){let n=Number(e)||0;return P()+t>n}function Hn(e,t){let n=Number(e)+t*24*60*60*1e3;return Date.now()>n}function Un(e){return Number(e)>P()}function Wn(e,t,n,r,i){return{credentialType:x.ID_TOKEN,homeAccountId:e,environment:t,clientId:r,secret:n,realm:i,lastUpdatedAt:Date.now().toString()}}function Gn(e,t,n,r,i,a,o,s,c,l,u,d,f,p,m){let h={homeAccountId:e,credentialType:x.ACCESS_TOKEN,secret:n,cachedAt:P().toString(),expiresOn:o.toString(),extendedExpiresOn:s.toString(),environment:t,clientId:r,realm:i,target:a,tokenType:d||C.BEARER,lastUpdatedAt:Date.now().toString()};f&&(h.userAssertionHash=f),u&&(h.refreshOn=u.toString());let g=h.tokenType?.toLowerCase();if(h.tokenType?.toLowerCase()!==C.BEARER.toLowerCase())switch(h.credentialType=x.ACCESS_TOKEN_WITH_AUTH_SCHEME,g){case C.POP:let e=D(n,c,l);if(!e?.cnf?.kid)throw T(rt,l);h.keyId=e.cnf.kid;break;case`dpop`:if(!p)throw T(st,l);h.keyId=p;break;case C.SSH:h.keyId=p}return m&&Object.keys(m).length>0&&(h.additionalCacheKeyComponents=m),h}function Kn(e,t,n,r,i,a,o){let s={credentialType:x.REFRESH_TOKEN,homeAccountId:e,environment:t,clientId:r,secret:n,lastUpdatedAt:Date.now().toString()};return a&&(s.userAssertionHash=a),i&&(s.familyId=i),o&&(s.expiresOn=o.toString()),s}function qn(e){return e.hasOwnProperty(`homeAccountId`)&&e.hasOwnProperty(`environment`)&&e.hasOwnProperty(`credentialType`)&&e.hasOwnProperty(`clientId`)&&e.hasOwnProperty(`secret`)}function Jn(e){return e?qn(e)&&e.hasOwnProperty(`realm`)&&e.hasOwnProperty(`target`)&&(e.credentialType===x.ACCESS_TOKEN||e.credentialType===x.ACCESS_TOKEN_WITH_AUTH_SCHEME):!1}function Yn(e){return e?qn(e)&&e.hasOwnProperty(`realm`)&&e.credentialType===x.ID_TOKEN:!1}function Xn(e){return e?qn(e)&&e.credentialType===x.REFRESH_TOKEN:!1}function Zn(e,t){let n=e.indexOf(xe)===0,r=!0;return t&&(r=t.hasOwnProperty(`failedRequests`)&&t.hasOwnProperty(`errors`)&&t.hasOwnProperty(`cacheHits`)),n&&r}function Qn(e,t){let n=!1;e&&(n=e.indexOf(we)===0);let r=!0;return t&&(r=t.hasOwnProperty(`throttleTime`)),n&&r}function $n({environment:e,clientId:t}){return[_e,e,t].join(`-`).toLowerCase()}function er(e,t){return t?e.indexOf(`appmetadata`)===0&&t.hasOwnProperty(`clientId`)&&t.hasOwnProperty(`environment`):!1}function tr(e,t){return t?e.indexOf(`authority-metadata`)===0&&t.hasOwnProperty(`aliases`)&&t.hasOwnProperty(`preferred_cache`)&&t.hasOwnProperty(`preferred_network`)&&t.hasOwnProperty(`canonical_authority`)&&t.hasOwnProperty(`authorization_endpoint`)&&t.hasOwnProperty(`token_endpoint`)&&t.hasOwnProperty(`issuer`)&&t.hasOwnProperty(`aliasesFromNetwork`)&&t.hasOwnProperty(`endpointsFromNetwork`)&&t.hasOwnProperty(`expiresAt`)&&t.hasOwnProperty(`jwks_uri`):!1}function nr(){return P()+be}function rr(e,t,n){e.authorization_endpoint=t.authorization_endpoint,e.token_endpoint=t.token_endpoint,e.end_session_endpoint=t.end_session_endpoint,e.issuer=t.issuer,e.endpointsFromNetwork=n,e.jwks_uri=t.jwks_uri}function ir(e,t,n){e.aliases=t.aliases,e.preferred_cache=t.preferred_cache,e.preferred_network=t.preferred_network,e.aliasesFromNetwork=n}function ar(e){return e.expiresAt<=P()}function or(e){if(e&&e.length!==0)return[...e].sort().join(` `)}var sr=class e{constructor(e,t,n,r,i,a,o,s){this.canonicalAuthority=e,this._canonicalAuthority.validateAsUri(),this.networkInterface=t,this.cacheManager=n,this.authorityOptions=r,this.regionDiscoveryMetadata={region_used:void 0,region_source:void 0,region_outcome:void 0},this.logger=i,this.performanceClient=o,this.correlationId=a,this.managedIdentity=s||!1,this.regionDiscovery=new Rn(t,this.logger,this.performanceClient,this.correlationId)}getAuthorityType(e){if(e.HostNameAndPort.endsWith(`.ciamlogin.com`))return gt.Ciam;let t=e.PathSegments;if(t.length)switch(t[0].toLowerCase()){case`adfs`:return gt.Adfs}return gt.Default}get authorityType(){return this.getAuthorityType(this.canonicalAuthorityUrlComponents)}get protocolMode(){return this.authorityOptions.protocolMode}get options(){return this.authorityOptions}get canonicalAuthority(){return this._canonicalAuthority.urlString}set canonicalAuthority(e){this._canonicalAuthority=new j(e,this.correlationId),this._canonicalAuthority.validateAsUri(),this._canonicalAuthorityUrlComponents=null}get canonicalAuthorityUrlComponents(){return this._canonicalAuthorityUrlComponents||=this._canonicalAuthority.getUrlComponents(),this._canonicalAuthorityUrlComponents}get hostnameAndPort(){return this.canonicalAuthorityUrlComponents.HostNameAndPort.toLowerCase()}get tenant(){return this.canonicalAuthorityUrlComponents.PathSegments[0]}get authorizationEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.authorization_endpoint);throw T(Le,this.correlationId)}get tokenEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.token_endpoint);throw T(Le,this.correlationId)}get deviceCodeEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.token_endpoint.replace(`/token`,`/devicecode`));throw T(Le,this.correlationId)}get endSessionEndpoint(){if(this.discoveryComplete()){if(!this.metadata.end_session_endpoint)throw T(ot,this.correlationId);return this.replacePath(this.metadata.end_session_endpoint)}throw T(Le,this.correlationId)}get selfSignedJwtAudience(){if(this.discoveryComplete())return this.replacePath(this.metadata.issuer);throw T(Le,this.correlationId)}get jwksUri(){if(this.discoveryComplete())return this.replacePath(this.metadata.jwks_uri);throw T(Le,this.correlationId)}canReplaceTenant(t){return t.PathSegments.length===1&&!e.reservedTenantDomains.has(t.PathSegments[0])&&this.getAuthorityType(t)===gt.Default&&this.protocolMode!==k.OIDC}replaceTenant(e){return e.replace(/{tenant}|{tenantid}/g,this.tenant)}replacePath(e){let t=e,n=new j(this.metadata.canonical_authority,this.correlationId).getUrlComponents(),r=n.PathSegments;return this.canonicalAuthorityUrlComponents.PathSegments.forEach((e,i)=>{let a=r[i];if(i===0&&this.canReplaceTenant(n)){let e=new j(this.metadata.authorization_endpoint,this.correlationId).getUrlComponents().PathSegments[0];a!==e&&(this.logger.verbose(`1q3g2x ${a} ${e}`,this.correlationId),a=e)}e!==a&&(t=t.replace(`/${a}/`,`/${e}/`))}),this.replaceTenant(t)}get defaultOpenIdConfigurationEndpoint(){let e=this.hostnameAndPort;return this.canonicalAuthority.endsWith(`v2.0/`)||this.authorityType===gt.Adfs||this.protocolMode===k.OIDC&&!this.isAliasOfKnownMicrosoftAuthority(e)?`${this.canonicalAuthority}.well-known/openid-configuration`:`${this.canonicalAuthority}v2.0/.well-known/openid-configuration`}discoveryComplete(){return!!this.metadata}async resolveEndpointsAsync(){let e=this.getCurrentMetadataEntity(),t=await N(this.updateCloudDiscoveryMetadata.bind(this),kn,this.logger,this.performanceClient,this.correlationId)(e);this.canonicalAuthority=this.canonicalAuthority.replace(this.hostnameAndPort,e.preferred_network);let n=await N(this.updateEndpointMetadata.bind(this),jn,this.logger,this.performanceClient,this.correlationId)(e);this.updateCachedMetadata(e,t,{source:n}),this.performanceClient?.addFields({cloudDiscoverySource:t,authorityEndpointSource:n},this.correlationId)}getCurrentMetadataEntity(){let e=this.cacheManager.getAuthorityMetadataByAlias(this.hostnameAndPort,this.correlationId);return e||={aliases:[],preferred_cache:this.hostnameAndPort,preferred_network:this.hostnameAndPort,canonical_authority:this.canonicalAuthority,authorization_endpoint:``,token_endpoint:``,end_session_endpoint:``,issuer:``,aliasesFromNetwork:!1,endpointsFromNetwork:!1,expiresAt:nr(),jwks_uri:``},e}updateCachedMetadata(e,t,n){t!==S.CACHE&&n?.source!==S.CACHE&&(e.expiresAt=nr(),e.canonical_authority=this.canonicalAuthority);let r=this.cacheManager.generateAuthorityMetadataCacheKey(e.preferred_cache,this.correlationId);this.cacheManager.setAuthorityMetadata(r,e,this.correlationId),this.metadata=e}async updateEndpointMetadata(e){let t=this.updateEndpointMetadataFromLocalSources(e);if(t)return t.source===S.HARDCODED_VALUES&&this.authorityOptions.azureRegionConfiguration?.azureRegion&&t.metadata&&(rr(e,await N(this.updateMetadataWithRegionalInformation.bind(this),Mn,this.logger,this.performanceClient,this.correlationId)(t.metadata),!1),e.canonical_authority=this.canonicalAuthority),t.source;let n=await N(this.getEndpointMetadataFromNetwork.bind(this),An,this.logger,this.performanceClient,this.correlationId)();if(n)return this.validateIssuer(n.issuer),this.authorityOptions.azureRegionConfiguration?.azureRegion&&(n=await N(this.updateMetadataWithRegionalInformation.bind(this),Mn,this.logger,this.performanceClient,this.correlationId)(n)),rr(e,n,!0),S.NETWORK;throw T(ze,this.defaultOpenIdConfigurationEndpoint,this.correlationId)}updateEndpointMetadataFromLocalSources(e){this.logger.verbose(`1fi0kc`,this.correlationId);let t=this.getEndpointMetadataFromConfig();if(t)return this.logger.verbose(`06t0uj`,this.correlationId),rr(e,t,!1),{source:S.CONFIG};this.logger.verbose(`151k0p`,this.correlationId);let n=this.getEndpointMetadataFromHardcodedValues();if(n)return rr(e,n,!1),{source:S.HARDCODED_VALUES,metadata:n};this.logger.verbose(`1imop5`,this.correlationId);let r=ar(e);return this.isAuthoritySameType(e)&&e.endpointsFromNetwork&&!r?(this.logger.verbose(`16uq31`,``),{source:S.CACHE}):(r&&this.logger.verbose(`0uoibc`,``),null)}isAuthoritySameType(e){return new j(e.canonical_authority,this.correlationId).getUrlComponents().PathSegments.length===this.canonicalAuthorityUrlComponents.PathSegments.length}getEndpointMetadataFromConfig(){if(this.authorityOptions.authorityMetadata)try{return JSON.parse(this.authorityOptions.authorityMetadata)}catch{throw A(Ft,this.correlationId)}return null}async getEndpointMetadataFromNetwork(){let e={},t=this.defaultOpenIdConfigurationEndpoint;this.logger.verbose(`1y65x6 ${t}`,this.correlationId);try{let n=await this.networkInterface.sendGetRequestAsync(t,e);return Xt(n.body)?n.body:(this.logger.verbose(`1koyv8`,this.correlationId),null)}catch(e){return this.logger.verbose(`0a9wik ${e}`,this.correlationId),null}}getEndpointMetadataFromHardcodedValues(){return this.hostnameAndPort in tn?tn[this.hostnameAndPort]:null}async updateMetadataWithRegionalInformation(t){let n=this.authorityOptions.azureRegionConfiguration?.azureRegion;if(n){if(n!==`TryAutoDetect`)return this.regionDiscoveryMetadata.region_outcome=De.CONFIGURED_NO_AUTO_DETECTION,this.regionDiscoveryMetadata.region_used=n,e.replaceWithRegionalInformation(t,n,this.correlationId);let r=await N(this.regionDiscovery.detectRegion.bind(this.regionDiscovery),Nn,this.logger,this.performanceClient,this.correlationId)(this.authorityOptions.azureRegionConfiguration?.environmentRegion,this.regionDiscoveryMetadata);if(r)return this.regionDiscoveryMetadata.region_outcome=De.AUTO_DETECTION_REQUESTED_SUCCESSFUL,this.regionDiscoveryMetadata.region_used=r,e.replaceWithRegionalInformation(t,r,this.correlationId);this.regionDiscoveryMetadata.region_outcome=De.AUTO_DETECTION_REQUESTED_FAILED}return t}async updateCloudDiscoveryMetadata(e){let t=this.updateCloudDiscoveryMetadataFromLocalSources(e);if(t)return t;let n=await N(this.getCloudDiscoveryMetadataFromNetwork.bind(this),On,this.logger,this.performanceClient,this.correlationId)();if(n)return ir(e,n,!0),S.NETWORK;throw A(It,this.correlationId)}updateCloudDiscoveryMetadataFromLocalSources(e){this.logger.verbose(`1tpqlr`,this.correlationId),this.logger.verbosePii(`1fy7uz ${this.authorityOptions.knownAuthorities||`N/A`}`,this.correlationId),this.logger.verbosePii(`08zabj ${this.authorityOptions.authorityMetadata||`N/A`}`,this.correlationId),this.logger.verbosePii(`1o1kv3 ${e.canonical_authority||`N/A`}`,this.correlationId);let t=this.getCloudDiscoveryMetadataFromConfig();if(t)return this.logger.verbose(`1nakio`,this.correlationId),ir(e,t,!1),S.CONFIG;this.logger.verbose(`1x74aj`,this.correlationId);let n=sn(this.hostnameAndPort);if(n)return this.logger.verbose(`0by47c`,this.correlationId),ir(e,n,!1),S.HARDCODED_VALUES;this.logger.verbose(`0r2fzy`,this.correlationId);let r=ar(e);return this.isAuthoritySameType(e)&&e.aliasesFromNetwork&&!r?(this.logger.verbose(`1uffgh`,``),S.CACHE):(r&&this.logger.verbose(`0uoibc`,``),null)}getCloudDiscoveryMetadataFromConfig(){if(this.authorityType===gt.Ciam)return this.logger.verbose(`04y84h`,this.correlationId),e.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);if(this.authorityOptions.cloudDiscoveryMetadata){this.logger.verbose(`0gszr3`,this.correlationId);try{this.logger.verbose(`1iifkx`,this.correlationId);let e=cn(JSON.parse(this.authorityOptions.cloudDiscoveryMetadata).metadata,this.hostnameAndPort);if(this.logger.verbose(`0q67e3`,``),e)return this.logger.verbose(`0hzfao`,this.correlationId),e;this.logger.verbose(`1ajz3u`,this.correlationId)}catch{throw this.logger.verbose(`1wq5tu`,this.correlationId),A(Pt,this.correlationId)}}return this.isInKnownAuthorities(this.hostnameAndPort)?(this.logger.verbose(`0mt9al`,this.correlationId),e.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort)):null}async getCloudDiscoveryMetadataFromNetwork(){let t=`${u}${this.canonicalAuthority}oauth2/v2.0/authorize`,n={},r=null;try{let e=await this.networkInterface.sendGetRequestAsync(t,n),i,a;if(un(e.body))i=e.body,a=i.metadata,this.logger.verbosePii(`1vglyt ${i.tenant_discovery_endpoint}`,this.correlationId);else if(dn(e.body)){if(this.logger.warning(`062uto ${e.status}`,this.correlationId),i=e.body,i.error===`invalid_instance`)return this.logger.error(`1x90tm`,this.correlationId),null;this.logger.warning(`0wchdm ${i.error}`,this.correlationId),this.logger.warning(`1s5mpv ${i.error_description}`,this.correlationId),this.logger.warning(`1yhqpw`,this.correlationId),a=[]}else return this.logger.error(`0768g0`,this.correlationId),null;this.logger.verbose(`1lrobr`,this.correlationId),r=cn(a,this.hostnameAndPort)}catch(e){if(e instanceof w)this.logger.error(`0vwhc7 ${e.errorCode} ${e.errorMessage}`,this.correlationId);else{let t=e;this.logger.error(`0s2z41 ${t.name} ${t.message}`,this.correlationId)}return null}return r||=(this.logger.warning(`0jp28q`,this.correlationId),this.logger.verbose(`130sd8`,this.correlationId),e.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort)),r}isInKnownAuthorities(e){let t=e.toLowerCase();return this.authorityOptions.knownAuthorities.filter(e=>e&&j.getDomainFromUrl(e,this.correlationId).toLowerCase()===t).length>0}static generateAuthority(e,t){let n;if(t&&t.azureCloudInstance!==ln.None){let e=t.tenant?t.tenant:l;n=`${t.azureCloudInstance}/${e}/`}return n||e}static createCloudDiscoveryMetadataFromHost(e){return{preferred_network:e,preferred_cache:e,aliases:[e]}}getPreferredCache(){if(this.managedIdentity)return`login.microsoftonline.com`;if(this.discoveryComplete())return this.metadata.preferred_cache;throw T(Le,this.correlationId)}isAlias(e){return this.metadata.aliases.indexOf(e)>-1}isAliasOfKnownMicrosoftAuthority(e){return rn.has(e)}validateIssuer(e){if(!e)throw A(Gt,this.correlationId);let t;try{t=new URL(e)}catch{throw A(Gt,this.correlationId)}let n=t.protocol,r=t.host,i=(this.canonicalAuthorityUrlComponents.Protocol||``).toLowerCase(),a=(this.canonicalAuthorityUrlComponents.HostNameAndPort||``).toLowerCase(),o=this.matchesAuthorityOrigin(n,r,i,a),s=n===`https:`&&this.isAliasOfKnownMicrosoftAuthority(r),c=n===`https:`&&this.matchesRegionalMicrosoftHost(r),l=this.matchesCiamTenantPattern(t,a,this.canonicalAuthorityUrlComponents.PathSegments),u=n===`https:`&&this.isInKnownAuthorities(r);if(!(o||s||c||l||u))throw A(Gt,this.correlationId)}matchesAuthorityOrigin(e,t,n,r){return e===n&&t===r}matchesRegionalMicrosoftHost(e){let t=e.indexOf(`.`);if(t>0&&t<e.length-1){let n=e.substring(t+1);return this.isAliasOfKnownMicrosoftAuthority(n)}return!1}matchesCiamTenantPattern(e,t,n){let r=n[0],i=r?r.endsWith(`.onmicrosoft.com`)?r.slice(0,-f.length):r:t.split(`.`)[0];if(!i)return!1;let a=`https://${i}${d}`,o=[a,`${a}/${i}`,`${a}/${i}/v2.0`,`${a}/${i}${f}`,`${a}/${i}${f}/v2.0`],s=e.pathname.replace(/\/+$/,``),c=`${e.protocol}//${e.host}${s}`;return o.some(e=>e===c)}static isPublicCloudAuthority(e){return ae.indexOf(e)>=0}static buildRegionalAuthorityString(e,t,n,r){let i=new j(e,n);i.validateAsUri();let a=i.getUrlComponents(),o=`${t}.${a.HostNameAndPort}`;this.isPublicCloudAuthority(a.HostNameAndPort)&&(o=`${t}.${ie}`);let s=j.constructAuthorityUriFromObject({...i.getUrlComponents(),HostNameAndPort:o},n).urlString;return r?`${s}?${r}`:s}static replaceWithRegionalInformation(t,n,r){let i={...t};return i.authorization_endpoint=e.buildRegionalAuthorityString(i.authorization_endpoint,n,r),i.token_endpoint=e.buildRegionalAuthorityString(i.token_endpoint,n,r),i.end_session_endpoint&&=e.buildRegionalAuthorityString(i.end_session_endpoint,n,r),i}static transformCIAMAuthority(e,t){let n=e,r=new j(e,t).getUrlComponents();if(r.PathSegments.length===0&&r.HostNameAndPort.endsWith(`.ciamlogin.com`)){let e=r.HostNameAndPort.split(`.`)[0];n=`${n}${e}${f}`}return n}};sr.reservedTenantDomains=new Set([`{tenant}`,`{tenantid}`,ue.COMMON,ue.CONSUMERS,ue.ORGANIZATIONS]);function cr(e,t){let n=new j(e,t).getUrlComponents().PathSegments.slice(-1)[0]?.toLowerCase();switch(n){case ue.COMMON:case ue.ORGANIZATIONS:case ue.CONSUMERS:return;default:return n}}function lr(e){return e.endsWith(`/`)?e:`${e}/`}function ur(e){let t=e.cloudDiscoveryMetadata,n;if(t)try{n=JSON.parse(t)}catch{throw A(Pt,``)}return{canonicalAuthority:e.authority?lr(e.authority):void 0,knownAuthorities:e.knownAuthorities,cloudDiscoveryMetadata:n}}async function dr(e,t,n,r,i,a,o){let s=new sr(sr.transformCIAMAuthority(lr(e),a),t,n,r,i,a,o);try{return await N(s.resolveEndpointsAsync.bind(s),Dn,i,o,a)(),s}catch{throw T(Le,a)}}var F=class e{constructor(e,t){this.correlationId=t;let n=e?Zt.trimArrayEntries([...e]):[],r=n?Zt.removeEmptyStringsFromArray(n):[];if(!r||!r.length)throw A(kt,t);this.scopes=new Set,r.forEach(e=>this.scopes.add(e))}static fromString(t,n){let r=(t||``).split(` `);return new e(r,n)}static createSearchScopes(t,n){let r=t&&t.length>0?t:[...se],i=new e(r,n);return i.containsOnlyOIDCScopes()?i.removeScope(h):i.removeOIDCScopes(),i}containsScope(t){let n=this.printScopesLowerCase().split(` `),r=new e(n,this.correlationId);return t?r.scopes.has(t.toLowerCase()):!1}containsScopeSet(e){return!e||e.scopes.size<=0?!1:this.scopes.size>=e.scopes.size&&e.asArray().every(e=>this.containsScope(e))}containsOnlyOIDCScopes(){let e=0;return ce.forEach(t=>{this.containsScope(t)&&(e+=1)}),this.scopes.size===e}appendScope(e){e&&this.scopes.add(e.trim())}appendScopes(e){try{e.forEach(e=>this.appendScope(e))}catch{throw T(Je,this.correlationId)}}removeScope(e){if(!e)throw T(qe,this.correlationId);this.scopes.delete(e.trim())}removeOIDCScopes(){ce.forEach(e=>{this.scopes.delete(e)})}unionScopeSets(e){if(!e)throw T(Ye,this.correlationId);let t=new Set;return e.scopes.forEach(e=>t.add(e.toLowerCase())),this.scopes.forEach(e=>t.add(e.toLowerCase())),t}intersectingScopeSets(e){if(!e)throw T(Ye,this.correlationId);e.containsOnlyOIDCScopes()||e.removeOIDCScopes();let t=this.unionScopeSets(e),n=e.getScopeCount(),r=this.getScopeCount();return t.size<r+n}getScopeCount(){return this.scopes.size}asArray(){let e=[];return this.scopes.forEach(t=>e.push(t)),e}printScopes(){return this.scopes?this.asArray().join(` `):``}printScopesLowerCase(){return this.printScopes().toLowerCase()}};function fr(n,r,i){if(!r)return;let a=n.get(e);a&&n.has(`brk_client_id`)&&i?.addFields({embeddedClientId:a,embeddedRedirectUri:n.get(t)},r)}function pr(e,t){e.set(`response_type`,t)}function mr(e,t){e.set(`response_mode`,t||fe.QUERY)}function hr(e){e.set(`nativebroker`,`1`)}function gr(e,t,n,r=!0,i=se){r&&!i.includes(`openid`)&&!t.includes(`openid`)&&i.push(`openid`);let a=new F(r?[...t||[],...i]:t||[],n);e.set(`scope`,a.printScopes())}function _r(t,n){t.set(e,n)}function vr(e,n){e.set(t,n)}function yr(e,t){e.set(`post_logout_redirect_uri`,t)}function br(e,t){e.set(`id_token_hint`,t)}function xr(e,t){e.set(`domain_hint`,t)}function Sr(e,t){e.set(`login_hint`,t)}function Cr(e,t){e.set(v.CCS_HEADER,`UPN:${t}`)}function wr(e,t){e.set(v.CCS_HEADER,`Oid:${t.uid}@${t.utid}`)}function Tr(e,t){e.set(`sid`,t)}function Er(e,t,n,r,i,a){let o=Jr(n,i&&e.has(`brk_client_id`)?void 0:r,t,a);e.set(`claims`,o)}function Dr(e,t){e.set(`client-request-id`,t)}function Or(e,t){e.set(`x-client-SKU`,t.sku),e.set(`x-client-VER`,t.version),t.os&&e.set(`x-client-OS`,t.os),t.cpu&&e.set(`x-client-CPU`,t.cpu)}function kr(e,t){t?.appName&&e.set(`x-app-name`,t.appName),t?.appVersion&&e.set(`x-app-ver`,t.appVersion)}function Ar(e,t){e.set(`prompt`,t)}function jr(e,t){t&&e.set(`state`,t)}function Mr(e,t){e.set(`nonce`,t)}function Nr(e,t,n){if(t&&n)e.set(`code_challenge`,t),e.set(`code_challenge_method`,n);else throw A(Nt,``)}function Pr(e,t){e.set(`code`,t)}function Fr(e,t){e.set(`refresh_token`,t)}function Ir(e,t){e.set(`code_verifier`,t)}function Lr(e,t){e.set(`client_secret`,t)}function Rr(e,t){t&&e.set(`client_assertion`,t)}function zr(e,t){t&&e.set(`client_assertion_type`,t)}function Br(e,t){e.set(`grant_type`,t)}function Vr(e){e.set(ve,`1`)}function Hr(e){e.set(`clidata`,`1`)}function Ur(e){e.has(`instance_aware`)||e.set(`instance_aware`,`true`)}function I(e,t){Object.entries(t).forEach(([t,n])=>{!e.has(t)&&n&&e.set(t,n)})}var Wr={[y.SIGNIN_STATE]:{essential:!1},[y.LOGIN_HINT]:{essential:!1},[y.TENANT_REGION_SUB_SCOPE]:{essential:!1}};function Gr(e,t=``){let n;try{n=JSON.parse(e)}catch{throw A(At,t)}if(!Kr(n))throw A(At,t);return n}function Kr(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function qr(e,t){let n={...e};for(let[e,r]of Object.entries(t)){let t=n[e];n[e]=Kr(t)&&Kr(r)?qr(t,r):r}return n}function Jr(e,t,n=``,r){let i=e?Gr(e,n):{};r?.trim()&&(i=qr(i,Gr(r,n))),Object.prototype.hasOwnProperty.call(i,y.ID_TOKEN)||(i[y.ID_TOKEN]={});let a=i[y.ID_TOKEN];for(let[e,t]of Object.entries(Wr))e in a||(a[e]=t);return t&&t.length>0&&(Object.prototype.hasOwnProperty.call(i,y.ACCESS_TOKEN)||(i[y.ACCESS_TOKEN]={}),i[y.ACCESS_TOKEN][y.XMS_CC]={values:t}),JSON.stringify(i)}function Yr(e,t){t&&(e.set(n,C.POP),e.set(r,t))}function Xr(e,t){t&&(e.set(n,C.SSH),e.set(r,t))}function Zr(e,t){e.set(`x-client-current-telemetry`,t.generateCurrentRequestHeaderValue()),e.set(`x-client-last-telemetry`,t.generateLastRequestHeaderValue())}function Qr(e){e.set(`x-ms-lib-capability`,Te)}function $r(e,t){e.set(`logout_hint`,t)}function ei(e,t,n){e.has(`brk_client_id`)||e.set(i,t),e.has(`brk_redirect_uri`)||e.set(a,n)}function ti(e,t){e.set(`ear_jwk`,encodeURIComponent(t)),e.set(`ear_jwe_crypto`,`eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0`)}function ni(e,t){t&&e.set(`resource`,t)}function ri(e,t){let n=or(t);n?e.set(o,n):e.delete(o)}function ii(e){return e.startsWith(`#/`)?e.substring(2):e.startsWith(`#`)||e.startsWith(`?`)?e.substring(1):e}function ai(e){if(!e||e.indexOf(`=`)<0)return null;try{let t=ii(e),n=Object.fromEntries(new URLSearchParams(t));if(n.code||n.ear_jwe||n.error||n.error_description||n.state)return n}catch{throw T(Be,``)}return null}function oi(e){let t=[];return e.forEach((e,n)=>{t.push(`${n}=${encodeURIComponent(e)}`)}),t.join(`&`)}function si(e,t,n){if(!e)return e;let r=e.split(`#`)[0];if(!r)return r;try{let e=new URL(r);e.search||=``;let t;try{t=decodeURIComponent(e.pathname)}catch{t=e.pathname}return t.endsWith(`/`)||(t+=`/`),e.pathname=t,e.href}catch(e){throw t?.error(`15apdm ${e}`,n||``),A(Dt,n||``)}}function ci(e,t,n){try{new URL(e)}catch(e){throw t?.error(`1lrjz7 ${e}`,n||``),A(Dt,n||``)}}var li={ES256:`ES256`,RS256:`RS256`},ui={createNewGuid:()=>{throw T(E,``)},base64Decode:()=>{throw T(E,``)},base64Encode:()=>{throw T(E,``)},base64UrlEncode:()=>{throw T(E,``)},encodeKid:()=>{throw T(E,``)},async removeTokenBindingKey(e,t){throw T(E,t)},async clearKeystore(e){throw T(E,e)},async signTokenBindingJwt(e,t,n,r){throw T(E,r)},async hashString(){throw T(E,``)}},di={async provisionTokenBindingKey(e){throw T(E,e.correlationId)},async removeTokenBindingKey(e,t){throw T(E,t)},async getTokenBindingPublicKeyJwk(e,t){throw T(E,t)}},L;(function(e){e[e.Error=0]=`Error`,e[e.Warning=1]=`Warning`,e[e.Info=2]=`Info`,e[e.Verbose=3]=`Verbose`,e[e.Trace=4]=`Trace`})(L||={});var fi=50,pi=500,mi=new Map;function hi(e,t){mi.delete(e),mi.set(e,t)}function gi(e,t){let n=Date.now(),r=mi.get(e);if(r)hi(e,r);else if(r={logs:[],firstEventTime:n},mi.set(e,r),mi.size>fi){let e=mi.keys().next().value;e!==void 0&&mi.delete(e)}r.logs.push({...t,milliseconds:n-r.firstEventTime}),r.logs.length>pi&&r.logs.shift()}function _i(e){if(e.length<6||e.length>6&&e[6]!==` `)return null;for(let t=0;t<6;t++){let n=e[t];if(!(n>=`a`&&n<=`z`||n>=`A`&&n<=`Z`||n>=`0`&&n<=`9`))return null}return e.substring(0,6)}var vi=class e{constructor(t,n,r){this.level=L.Info;let i=()=>{},a=t||e.createDefaultLoggerOptions();this.localCallback=a.loggerCallback||i,this.piiLoggingEnabled=a.piiLoggingEnabled||!1,this.level=typeof a.logLevel==`number`?a.logLevel:L.Info,this.packageName=n||``,this.packageVersion=r||``}static createDefaultLoggerOptions(){return{loggerCallback:()=>{},piiLoggingEnabled:!1,logLevel:L.Info}}clone(t,n){return new e({loggerCallback:this.localCallback,piiLoggingEnabled:this.piiLoggingEnabled,logLevel:this.level},t,n)}logMessage(e,t){let n=t.correlationId,r=_i(e);if(r&&gi(n,{hash:r,level:t.logLevel,containsPii:t.containsPii||!1,milliseconds:0}),t.logLevel>this.level||!this.piiLoggingEnabled&&t.containsPii)return;let i=`${`[${new Date().toUTCString()}] : [${n}]`} : ${this.packageName}@${this.packageVersion} : ${L[t.logLevel]} - ${e}`;this.executeCallback(t.logLevel,i,t.containsPii||!1)}executeCallback(e,t,n){this.localCallback&&this.localCallback(e,t,n)}error(e,t){this.logMessage(e,{logLevel:L.Error,containsPii:!1,correlationId:t})}errorPii(e,t){this.logMessage(e,{logLevel:L.Error,containsPii:!0,correlationId:t})}warning(e,t){this.logMessage(e,{logLevel:L.Warning,containsPii:!1,correlationId:t})}warningPii(e,t){this.logMessage(e,{logLevel:L.Warning,containsPii:!0,correlationId:t})}info(e,t){this.logMessage(e,{logLevel:L.Info,containsPii:!1,correlationId:t})}infoPii(e,t){this.logMessage(e,{logLevel:L.Info,containsPii:!0,correlationId:t})}verbose(e,t){this.logMessage(e,{logLevel:L.Verbose,containsPii:!1,correlationId:t})}verbosePii(e,t){this.logMessage(e,{logLevel:L.Verbose,containsPii:!0,correlationId:t})}trace(e,t){this.logMessage(e,{logLevel:L.Trace,containsPii:!1,correlationId:t})}tracePii(e,t){this.logMessage(e,{logLevel:L.Trace,containsPii:!0,correlationId:t})}isPiiLoggingEnabled(){return this.piiLoggingEnabled||!1}},yi=`@azure/msal-common`,bi=`16.14.1`,xi=`cache_quota_exceeded`,Si=`cache_error_unknown`,Ci=class e extends Error{constructor(t,n){let r=n||Ae(t);super(r),Object.setPrototypeOf(this,e.prototype),this.name=`CacheError`,this.errorCode=t,this.errorMessage=r}};function wi(e){return e instanceof Error?e.name===`QuotaExceededError`||e.name===`NS_ERROR_DOM_QUOTA_REACHED`||e.message.includes(`exceeded the quota`)?new Ci(xi):new Ci(e.name,e.message):new Ci(Si)}var Ti=class{constructor(e,t,n,r,i,a){this.clientId=e,this.cryptoImpl=t,this.tokenBindingKeyManager=a,this.commonLogger=n.clone(yi,bi),this.staticAuthorityOptions=i,this.performanceClient=r}getAllAccounts(e={},t){return this.buildTenantProfiles(this.getAccountsFilteredBy(e,t),t,e)}getAccountInfoFilteredBy(e,t){if(Object.keys(e).length===0||Object.values(e).every(e=>e==null||e===``))return this.commonLogger.warning(`1skb02`,t),null;let n=this.getAllAccounts(e,t);return n.length>1?n.sort((e,t)=>{let n=+!!e.idTokenClaims;return+!!t.idTokenClaims-n})[0]:n.length===1?n[0]:null}getBaseAccountInfo(e,t){let n=this.getAccountsFilteredBy(e,t);return n.length>0?vt(n[0]):null}buildTenantProfiles(e,t,n){return e.flatMap(e=>this.getTenantProfilesFromAccountEntity(e,t,n?.tenantId,n))}getTenantedAccountInfoByFilter(e,t,n,r,i){let a=null,o;if(i&&!this.tenantProfileMatchesFilter(n,i))return null;let s=this.getIdToken(e,r,t,n.tenantId);return s&&(o=D(s.secret,this.cryptoImpl.base64Decode,r),!this.idTokenClaimsMatchTenantProfileFilter(o,i))?null:(a=ht(e,n,o,s?.secret),a)}getTenantProfilesFromAccountEntity(e,t,n,r){let i=vt(e),a=i.tenantProfiles||new Map,o=this.getTokenKeys();if(n){let e=a.get(n);if(e)a=new Map([[n,e]]);else return[]}let s=[];return a.forEach(e=>{let n=this.getTenantedAccountInfoByFilter(i,o,e,t,r);n&&s.push(n)}),s}tenantProfileMatchesFilter(e,t){return!(t.localAccountId&&!this.matchLocalAccountIdFromTenantProfile(e,t.localAccountId)||t.name&&e.name!==t.name||t.isHomeTenant!==void 0&&e.isHomeTenant!==t.isHomeTenant||t.username&&!this.matchUsername(e.username,t.username)&&!this.matchUsername(e.upn,t.username)||t.loginHint&&!this.matchLoginHintWithTenantProfile(e,t.loginHint)||t.upn&&e.upn!==t.upn||t.nativeAccountId&&e.nativeAccountId!==t.nativeAccountId)}idTokenClaimsMatchTenantProfileFilter(e,t){return!(t&&(t.localAccountId&&!this.matchLocalAccountIdFromTokenClaims(e,t.localAccountId)||t.loginHint&&!this.matchLoginHintFromTokenClaims(e,t.loginHint)||t.username&&!this.matchUsername(e.preferred_username,t.username)&&!this.matchUsername(e.upn,t.username)||t.name&&!this.matchName(e,t.name)||t.sid&&!this.matchSid(e,t.sid)))}async saveCacheRecord(e,t,n,r,i){if(!e)throw T(Ze,t);try{e.account&&await this.setAccount(e.account,t,n,r),e.idToken&&i?.idToken!==!1&&await this.setIdTokenCredential(e.idToken,t,n),e.accessToken&&i?.accessToken!==!1&&await this.saveAccessToken(e.accessToken,t,n),e.refreshToken&&i?.refreshToken!==!1&&await this.setRefreshTokenCredential(e.refreshToken,t,n),e.appMetadata&&this.setAppMetadata(e.appMetadata,t)}catch(e){throw this.commonLogger?.error(`0j476p`,t),e instanceof w?e:wi(e)}}async saveAccessToken(e,t,n){let r;e.additionalCacheKeyComponents&&Object.keys(e.additionalCacheKeyComponents).length>0&&(r=await this.cryptoImpl.hashString(JSON.stringify(e.additionalCacheKeyComponents)));let i={clientId:e.clientId,credentialType:e.credentialType,environment:e.environment,homeAccountId:e.homeAccountId,realm:e.realm,tokenType:e.tokenType},a=this.getTokenKeys(),o=F.fromString(e.target,t);a.accessToken.forEach(e=>{if(!this.accessTokenKeyMatchesFilter(e,i,!1))return;let n=this.getAccessTokenCredential(e,t);n&&this.credentialMatchesFilter(n,i,t)&&F.fromString(n.target,t).intersectingScopeSets(o)&&this.removeAccessToken(e,t)}),await this.setAccessTokenCredential(e,t,n,r)}getAccountsFilteredBy(e,t){let n=this.getAccountKeys(),r=[];return n.forEach(n=>{let i=this.getAccount(n,t);if(!i||e.homeAccountId&&!this.matchHomeAccountId(i,e.homeAccountId)||e.environment&&!this.matchEnvironment(i,e.environment,t)||e.realm&&!this.matchRealm(i,e.realm)||e.authorityType&&!this.matchAuthorityType(i,e.authorityType))return;let a={localAccountId:e?.localAccountId,name:e?.name,username:e?.username,loginHint:e?.loginHint,upn:e?.upn,nativeAccountId:e?.nativeAccountId},o=i.tenantProfiles?.filter(e=>this.tenantProfileMatchesFilter(e,a));o&&o.length===0||r.push(i)}),r}credentialMatchesFilter(e,t,n){if(t.clientId&&!this.matchClientId(e,t.clientId)||t.userAssertionHash&&!this.matchUserAssertionHash(e,t.userAssertionHash)||typeof t.homeAccountId==`string`&&!this.matchHomeAccountId(e,t.homeAccountId)||t.environment&&!this.matchEnvironment(e,t.environment,n)||t.realm&&!this.matchRealm(e,t.realm)||t.credentialType&&!this.matchCredentialType(e,t.credentialType)||t.familyId&&!this.matchFamilyId(e,t.familyId)||t.target&&!this.matchTarget(e,t.target,n)||e.credentialType===x.ACCESS_TOKEN_WITH_AUTH_SCHEME&&!this.matchAccessTokenWithAuthScheme(e,t))return!1;let r=e.additionalCacheKeyComponents,i=t.additionalCacheKeyComponents,a=!!r&&Object.keys(r).length>0,o=!!i&&Object.keys(i).length>0;if(a!==o)return!1;if(a&&o){let e=Object.keys(r).sort(),t=Object.keys(i).sort();if(e.length!==t.length)return!1;for(let n=0;n<e.length;n++)if(e[n]!==t[n]||r[e[n]]!==i[t[n]])return!1}return!0}getAppMetadataFilteredBy(e,t){let n=this.getKeys(),r={};return n.forEach(n=>{if(!this.isAppMetadata(n))return;let i=this.getAppMetadata(n,t);i&&(!e.environment||this.matchEnvironment(i,e.environment,t))&&(!e.clientId||this.matchClientId(i,e.clientId))&&(r[n]=i)}),r}getAuthorityMetadataByAlias(e,t){let n=this.getAuthorityMetadataKeys(),r=null;return n.forEach(n=>{if(!this.isAuthorityMetadata(n)||n.indexOf(this.clientId)===-1)return;let i=this.getAuthorityMetadata(n,t);i&&i.aliases.indexOf(e)!==-1&&(r=i)}),r}removeAllAccounts(e){this.getAllAccounts({},e).forEach(t=>{this.removeAccount(t,e)})}removeAccount(e,t){this.removeAccountContext(e,t),this.getAccountKeys().filter(t=>t.includes(e.homeAccountId)&&t.includes(e.environment)).forEach(e=>{this.removeItem(e,t),this.performanceClient.incrementFields({accountsRemoved:1},t)})}removeAccountContext(e,t){let n=this.getTokenKeys(),r=t=>t.includes(e.homeAccountId)&&t.includes(e.environment);n.idToken.filter(r).forEach(e=>{this.removeIdToken(e,t)}),n.accessToken.filter(r).forEach(e=>{this.removeAccessToken(e,t)}),n.refreshToken.filter(r).forEach(e=>{this.removeRefreshToken(e,t)})}removeAccessToken(e,t){let n=this.getAccessTokenCredential(e,t);if(n&&(this.removeItem(e,t),this.performanceClient.incrementFields({accessTokensRemoved:1},t),n.credentialType.toLowerCase()===x.ACCESS_TOKEN_WITH_AUTH_SCHEME.toLowerCase()))switch(n.tokenType?.toLowerCase()){case C.POP:case C.DPOP.toLowerCase():{let e=n.keyId;e&&this.tokenBindingKeyManager.removeTokenBindingKey(e,t).catch(()=>{this.commonLogger.error(`0id34f`,t),this.performanceClient?.incrementFields({removeTokenBindingKeyFailure:1},t)});break}}}removeAppMetadata(e){return this.getKeys().forEach(t=>{this.isAppMetadata(t)&&this.removeItem(t,e)}),!0}getIdToken(e,t,n,r){this.commonLogger.trace(`1drz22`,t);let i={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:x.ID_TOKEN,clientId:this.clientId,realm:r},a=this.getIdTokensByFilter(i,t,n),o=a.size;if(o<1)return this.commonLogger.info(`1atvtd`,t),null;if(o>1){let n=a;if(!r){let r=new Map;a.forEach((t,n)=>{t.realm===e.tenantId&&r.set(n,t)});let i=r.size;if(i<1)return this.commonLogger.info(`0ooalx`,t),a.values().next().value??null;if(i===1)return this.commonLogger.info(`1eq2vc`,t),r.values().next().value??null;n=r}return this.commonLogger.info(`1ws328`,t),n.forEach((e,n)=>{this.removeIdToken(n,t)}),this.performanceClient.addFields({multiMatchedID:a.size},t),null}return this.commonLogger.info(`1sm769`,t),a.values().next().value??null}getIdTokensByFilter(e,t,n){let r=n&&n.idToken||this.getTokenKeys().idToken,i=new Map;return r.forEach(n=>{if(!this.idTokenKeyMatchesFilter(n,{clientId:this.clientId,...e}))return;let r=this.getIdTokenCredential(n,t);r&&this.credentialMatchesFilter(r,e,t)&&i.set(n,r)}),i}idTokenKeyMatchesFilter(e,t){let n=e.toLowerCase();return!(t.clientId&&n.indexOf(t.clientId.toLowerCase())===-1||t.homeAccountId&&n.indexOf(t.homeAccountId.toLowerCase())===-1)}removeIdToken(e,t){this.removeItem(e,t)}removeRefreshToken(e,t){this.removeItem(e,t)}getAccessToken(e,t,n,r){let i=t.correlationId;this.commonLogger.trace(`1t7hz1`,i);let a=F.createSearchScopes(t.scopes,i),o=t.authenticationScheme||C.BEARER,s=o&&o.toLowerCase()!==C.BEARER.toLowerCase()?x.ACCESS_TOKEN_WITH_AUTH_SCHEME:x.ACCESS_TOKEN,c=or(t.attributeTokens),l=c?{attribute_tokens:c}:void 0,u={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:s,clientId:this.clientId,realm:r||e.tenantId,target:a,tokenType:o,keyId:o===C.SSH?t.sshKid:void 0,additionalCacheKeyComponents:l},d=n&&n.accessToken||this.getTokenKeys().accessToken,f=[],p=[];return d.forEach(e=>{if(this.accessTokenKeyMatchesFilter(e,u,!0)){let t=this.getAccessTokenCredential(e,i);t&&this.credentialMatchesFilter(t,u,i)&&(f.push(t),p.push(e))}}),f.length<1?(this.commonLogger.info(`1nckna`,i),null):f.length>1?(this.commonLogger.info(`1wkfwp`,i),p.forEach(e=>{this.removeAccessToken(e,i)}),this.performanceClient.addFields({multiMatchedAT:f.length},i),null):(this.commonLogger.info(`06yt98`,i),f[0])}accessTokenKeyMatchesFilter(e,t,n){let r=e.toLowerCase();if(t.clientId&&r.indexOf(t.clientId.toLowerCase())===-1||t.homeAccountId&&r.indexOf(t.homeAccountId.toLowerCase())===-1||t.realm&&r.indexOf(t.realm.toLowerCase())===-1)return!1;if(t.target){let e=t.target.asArray();for(let t=0;t<e.length;t++)if(n&&!r.includes(e[t].toLowerCase()))return!1;else if(!n&&r.includes(e[t].toLowerCase()))return!0}return!0}getAccessTokensByFilter(e,t){let n=this.getTokenKeys(),r=[];return n.accessToken.forEach(n=>{if(!this.accessTokenKeyMatchesFilter(n,e,!0))return;let i=this.getAccessTokenCredential(n,t);i&&this.credentialMatchesFilter(i,e,t)&&r.push(i)}),r}getRefreshToken(e,t,n,r){this.commonLogger.trace(`0x53vi`,n);let i=t?`1`:void 0,a={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:x.REFRESH_TOKEN,clientId:this.clientId,familyId:i},o=r&&r.refreshToken||this.getTokenKeys().refreshToken,s=[];o.forEach(e=>{if(this.refreshTokenKeyMatchesFilter(e,a)){let t=this.getRefreshTokenCredential(e,n);t&&this.credentialMatchesFilter(t,a,n)&&s.push(t)}});let c=s.length;return c<1?(this.commonLogger.info(`0dlw11`,n),null):(c>1&&this.performanceClient.addFields({multiMatchedRT:c},n),this.commonLogger.info(`0wcnep`,n),s[0])}refreshTokenKeyMatchesFilter(e,t){let n=e.toLowerCase();return!(t.familyId&&n.indexOf(t.familyId.toLowerCase())===-1||!t.familyId&&t.clientId&&n.indexOf(t.clientId.toLowerCase())===-1||t.homeAccountId&&n.indexOf(t.homeAccountId.toLowerCase())===-1)}readAppMetadataFromCache(e,t){let n={environment:e,clientId:this.clientId},r=this.getAppMetadataFilteredBy(n,t),i=Object.keys(r).map(e=>r[e]),a=i.length;if(a<1)return null;if(a>1)throw T(Ge,t);return i[0]}isAppMetadataFOCI(e,t){let n=this.readAppMetadataFromCache(e,t);return!!(n&&n.familyId===`1`)}matchHomeAccountId(e,t){return typeof e.homeAccountId==`string`&&t===e.homeAccountId}matchLocalAccountIdFromTokenClaims(e,t){return t===(e.oid||e.sub)}matchLocalAccountIdFromTenantProfile(e,t){return e.localAccountId===t}matchName(e,t){return t.toLowerCase()===e.name?.toLowerCase()}matchUsername(e,t){return!!(e&&typeof e==`string`&&t?.toLowerCase()===e.toLowerCase())}matchLoginHintWithTenantProfile(e,t){return e.loginHint===t||e.username===t||e.upn===t}matchUserAssertionHash(e,t){return!!(e.userAssertionHash&&t===e.userAssertionHash)}matchEnvironment(e,t,n){if(this.staticAuthorityOptions){let r=an(this.staticAuthorityOptions,this.commonLogger,n);if(r.includes(t)&&r.includes(e.environment))return!0}let r=this.getAuthorityMetadataByAlias(t,n);return!!(r&&r.aliases.indexOf(e.environment)>-1)}matchCredentialType(e,t){return e.credentialType&&t.toLowerCase()===e.credentialType.toLowerCase()}matchClientId(e,t){return!!(e.clientId&&t===e.clientId)}matchFamilyId(e,t){return!!(e.familyId&&t===e.familyId)}matchRealm(e,t){return e.realm?.toLowerCase()===t.toLowerCase()}matchLoginHintFromTokenClaims(e,t){return!!(e.login_hint===t||e.preferred_username===t||e.upn===t||e.emails&&e.emails.includes(t))}matchSid(e,t){return e.sid===t}matchAuthorityType(e,t){return!!(e.authorityType&&t.toLowerCase()===e.authorityType.toLowerCase())}matchTarget(e,t,n){return e.credentialType!==x.ACCESS_TOKEN&&e.credentialType!==x.ACCESS_TOKEN_WITH_AUTH_SCHEME||!e.target?!1:F.fromString(e.target,n).containsScopeSet(t)}matchTokenType(e,t){return!!(e.tokenType&&e.tokenType.toLowerCase()===t.toLowerCase())}matchAccessTokenWithAuthScheme(e,t){let n=t.tokenType?.toLowerCase();if(t.tokenType&&!this.matchTokenType(e,t.tokenType))return!1;switch(n){case`dpop`:case C.SSH:return this.matchKeyBoundAccessToken(e,t);default:return!0}}matchKeyBoundAccessToken(e,t){return!t.keyId||this.matchKeyId(e,t.keyId)}matchKeyId(e,t){return!!(e.keyId&&e.keyId===t)}isAppMetadata(e){return e.indexOf(_e)!==-1}isAuthorityMetadata(e){return e.indexOf(ye)!==-1}generateAuthorityMetadataCacheKey(e){return`${ye}-${this.clientId}-${e}`}static toObject(e,t){for(let n in t)e[n]=t[n];return e}},Ei=class extends Ti{async setAccount(){throw T(E,``)}getAccount(){throw T(E,``)}async setIdTokenCredential(){throw T(E,``)}getIdTokenCredential(){throw T(E,``)}async setAccessTokenCredential(){throw T(E,``)}getAccessTokenCredential(){throw T(E,``)}async setRefreshTokenCredential(){throw T(E,``)}getRefreshTokenCredential(){throw T(E,``)}setAppMetadata(){throw T(E,``)}getAppMetadata(){throw T(E,``)}setServerTelemetry(){throw T(E,``)}getServerTelemetry(){throw T(E,``)}setAuthorityMetadata(){throw T(E,``)}getAuthorityMetadata(){throw T(E,``)}getAuthorityMetadataKeys(){throw T(E,``)}setThrottlingCache(){throw T(E,``)}getThrottlingCache(){throw T(E,``)}removeItem(){throw T(E,``)}getKeys(){throw T(E,``)}getAccountKeys(){throw T(E,``)}getTokenKeys(){throw T(E,``)}generateCredentialKey(e,t){throw T(E,``)}generateAccountKey(){throw T(E,``)}},Di={NotStarted:0,InProgress:1,Completed:2},Oi=class{generateId(){return`callback-id`}startMeasurement(e,t){return{end:()=>null,discard:()=>{},add:()=>{},increment:()=>{},event:{eventId:this.generateId(),status:Di.InProgress,authority:``,libraryName:``,libraryVersion:``,clientId:``,name:e,startTimeMs:Date.now(),correlationId:t||``}}}endMeasurement(){return null}discardMeasurements(){}removePerformanceCallback(){return!0}addPerformanceCallback(){return``}emitEvents(){}addFields(){}addGlobalFields(){}incrementFields(){}cacheEventByCorrelationId(){}},ki={tokenRenewalOffsetSeconds:300,preventCorsPreflight:!1},Ai={loggerCallback:()=>{},piiLoggingEnabled:!1,logLevel:L.Info,correlationId:``},ji={async sendGetRequestAsync(){throw T(E,``)},async sendPostRequestAsync(){throw T(E,``)}},Mi={sku:s,version:bi,cpu:``,os:``},Ni={clientSecret:``,clientAssertion:void 0},Pi={azureCloudInstance:ln.None,tenant:`${l}`},Fi={application:{appName:``,appVersion:``}};function Ii({authOptions:e,systemOptions:t,loggerOptions:n,storageInterface:r,networkInterface:i,cryptoInterface:a,tokenBindingKeyManager:o,clientCredentials:s,libraryInfo:c,telemetry:l,serverTelemetryManager:u,persistencePlugin:d,serializableCache:f}){let p={...Ai,...n},m=o||di;return{authOptions:Li(e),systemOptions:{...ki,...t},loggerOptions:p,storageInterface:r||new Ei(e.clientId,ui,new vi(p,`@azure/msal-common`,`16.14.1`),new Oi,void 0,m),networkInterface:i||ji,cryptoInterface:a||ui,tokenBindingKeyManager:m,clientCredentials:s||Ni,libraryInfo:{...Mi,...c},telemetry:{...Fi,...l},serverTelemetryManager:u||null,persistencePlugin:d||null,serializableCache:f||null}}function Li(e){return{clientCapabilities:[],azureCloudOptions:Pi,instanceAware:!1,isMcp:!1,...e}}function Ri(e){return e.authOptions.authority.options.protocolMode===k.OIDC}var zi=class{constructor(e,t){this.cache=e,this.hasChanged=t}get cacheHasChanged(){return this.hasChanged}get tokenCache(){return this.cache}},Bi=class e extends w{constructor(t,n,r){super(t,n,r),this.name=`JoseHeaderError`,Object.setPrototypeOf(this,e.prototype)}};function Vi(e,t){return new Bi(e,t)}function Hi(e){if(typeof e!=`object`||!e||Object.prototype.toString.call(e)!==`[object Object]`)return!1;if(Object.getPrototypeOf(e)===null)return!0;let t=e;for(;Object.getPrototypeOf(t)!==null;)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}var Ui=`missing_kid_error`,Wi=`missing_alg_error`,Gi=`missing_jwk_error`,Ki=`invalid_jwk_error`,qi=class e{constructor(e,t){if(typeof e.alg!=`string`||!e.alg)throw Vi(Wi,t);this.typ=e.typ,this.alg=e.alg,this.kid=e.kid,this.jwk=e.jwk}static getShrHeader(t,n){if(!t.kid)throw Vi(Ui,n);if(!t.alg)throw Vi(Wi,n);return new e({typ:t.typ||ke.Pop,kid:t.kid,alg:t.alg},n)}static getDpopHeader(t,n){if(!Hi(t.jwk))throw Vi(Gi,n);if(!t.alg)throw Vi(Wi,n);if(Object.keys(t.jwk).length===0)throw Vi(Ki,n);return new e({typ:ke.Dpop,alg:t.alg,jwk:t.jwk},n)}},Ji={SW:`sw`},Yi=`shr`,Xi=li.RS256,Zi=class{constructor(e,t,n){this.cryptoUtils=e,this.tokenBindingKeyManager=t,this.performanceClient=n}async generateCnf(e,t){let n=await N(this.generateKid.bind(this),Tn,t,this.performanceClient,e.correlationId)(e),r=this.cryptoUtils.base64UrlEncode(JSON.stringify(n));return{kid:n.kid,reqCnfString:r}}async generateKid(e){return{kid:await this.tokenBindingKeyManager.provisionTokenBindingKey({correlationId:e.correlationId,tokenBindingKeyType:Yi,tokenBindingKeyAlgorithm:Xi}),xms_ksl:Ji.SW}}async signPopToken(e,t,n){return this.signPayload(e,t,n)}async signPayload(e,t,n,r){let{resourceRequestMethod:i,resourceRequestUri:a,shrClaims:o,shrNonce:s,shrOptions:c}=n,l=(a?new j(a,n.correlationId):void 0)?.getUrlComponents(),u=await this.tokenBindingKeyManager.getTokenBindingPublicKeyJwk(t,n.correlationId),d=this.cryptoUtils.base64UrlEncode(JSON.stringify({kid:t})),f=c?.header?.alg||u.alg||Xi,p=qi.getShrHeader({...c?.header,alg:f,kid:d},n.correlationId),m={at:e,ts:P(),m:i?.toUpperCase(),u:l?.HostNameAndPort,nonce:s||this.cryptoUtils.createNewGuid(),p:l?.AbsolutePath,q:l?.QueryString?[[],l.QueryString]:void 0,client_claims:o||void 0,...r,cnf:{jwk:u}};return this.cryptoUtils.signTokenBindingJwt(p,m,t,n.correlationId)}},Qi=/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/,$i=`dpop`,ea=li.ES256;function ta(e,t){return qi.getDpopHeader({alg:ea,jwk:e},t)}function na(e,t){if(typeof e!=`string`||!Qi.test(e))throw A(Kt,t);return e.toUpperCase()}function ra(e,t){let n;try{n=new URL(e)}catch{throw A(Dt,t)}if(!/^https:\/\//i.test(e)||n.protocol!==`https:`||n.username||n.password)throw A(qt,t);return n.search=``,n.hash=``,n.href}function ia(e,t){if(e!==void 0&&e.trim().length===0)throw A(Jt,t)}var aa=class{constructor(e,t){this.cryptoUtils=e,this.tokenBindingKeyManager=t}async generateJkt(e=``){return this.tokenBindingKeyManager.provisionTokenBindingKey({tokenBindingKeyType:$i,tokenBindingKeyAlgorithm:ea,correlationId:e})}buildTokenProofClaims(e,t=``){ia(e.nonce,t);let n={jti:this.cryptoUtils.createNewGuid(),htm:`POST`,htu:ra(e.tokenEndpoint,t),iat:P()};return e.nonce!==void 0&&(n.nonce=e.nonce),n}async generateTokenProof(e,t,n=``){return this.generateProof(this.buildTokenProofClaims(e,n),t,n)}buildResourceProofClaims(e,t=``){ia(e.nonce,t);let n={jti:this.cryptoUtils.createNewGuid(),htm:na(e.htm,t),htu:ra(e.htu,t),ath:e.ath,iat:P()};return e.nonce!==void 0&&(n.nonce=e.nonce),n}async generateResourceProof(e,t,n=``){let{htu:r,htm:i,nonce:a}=e;if(!r||!i)throw A(Yt,n);let o=await this.cryptoUtils.hashString(e.accessToken);return this.generateProof(this.buildResourceProofClaims({htu:r,htm:i,ath:o,nonce:a},n),t,n)}async generateProof(e,t,n){let r=await this.tokenBindingKeyManager.getTokenBindingPublicKeyJwk(t,n);return this.cryptoUtils.signTokenBindingJwt(ta(r,n),e,t,n)}},oa=`no_tokens_found`,sa=`native_account_unavailable`,ca=`refresh_token_expired`,la=`ui_not_allowed`,ua=[`interaction_required`,`consent_required`,`login_required`,`bad_token`,la,`interrupted_user`],da=[`message_only`,`additional_action`,`basic_action`,`user_password_expired`,`consent_required`,`bad_token`,`ui_not_allowed`,`interrupted_user`],R=class e extends w{constructor(t,n,r,i,a,o,s,c){super(t,n,r,i),Object.setPrototypeOf(this,e.prototype),this.timestamp=a||``,this.traceId=o||``,this.claims=s||``,this.name=`InteractionRequiredAuthError`,this.errorNo=c}};function fa(e,t,n){let r=!!e&&ua.indexOf(e)>-1,i=!!n&&da.indexOf(n)>-1,a=!!t&&ua.some(e=>t.indexOf(e)>-1);return r||a||i}function pa(e,t,n){return new R(e,t,n)}var ma=class e extends w{constructor(t,n,r,i,a,o){super(t,n,r,i),this.name=`ServerError`,this.errorNo=a,this.status=o,Object.setPrototypeOf(this,e.prototype)}};function ha(e,t,n,r){let i=ga(e,r,n);return t?`${i}|${t}`:i}function ga(e,t,n){if(!e)throw T(et,t);let r={id:e.createNewGuid()};n&&(r.meta=n);let i=JSON.stringify(r);return e.base64Encode(i)}function _a(e,t,n){if(!e)throw T(et,n);if(!t)throw T(Ve,n);try{let n=t.split(`|`),r=n[0],i=n.length>1?n.slice(1).join(`|`):``,a=e(r),o=JSON.parse(a);return{userRequestState:i||``,libraryState:o}}catch{throw T(Ve,n)}}var va=class e{constructor(e,t,n,r,i,a,o,s=di){this.clientId=e,this.cacheStorage=t,this.cryptoObj=n,this.tokenBindingKeyManager=s,this.logger=r,this.performanceClient=i,this.serializableCache=a,this.persistencePlugin=o}validateTokenResponse(e,t,n){if(e.error||e.error_description||e.suberror){let r=`Error(s): ${e.error_codes||`Not Available`} - Timestamp: ${e.timestamp||`Not Available`} - Description: ${e.error_description||`Not Available`} - Correlation ID: ${e.correlation_id||`Not Available`} - Trace ID: ${e.trace_id||`Not Available`}`,i=e.error_codes?.length?e.error_codes[0]:void 0,a=new ma(e.error||``,e.correlation_id||``,r,e.suberror,i,e.status);if(n&&e.status&&e.status>=500&&e.status<=599){this.logger.warning(`16ks7j ${a}`,t);return}if(n&&e.status&&e.status>=400&&e.status<=499){this.logger.warning(`0g61x3 ${a}`,t);return}throw fa(e.error,e.error_description,e.suberror)?new R(e.error||``,e.correlation_id||``,e.error_description,e.suberror,e.timestamp||``,e.trace_id||``,e.claims||``,i):a}}async handleServerTokenResponse(t,n,r,i,a,o,s,c,l,u,d){let f;if(t.id_token&&(f=D(t.id_token||``,this.cryptoObj.base64Decode,i.correlationId)),o&&Object.prototype.hasOwnProperty.call(o,`nonce`)){let e=o.nonce,t=f?.nonce;if(t!==void 0&&e===void 0)throw this.logger.warning(`0thba9`,i.correlationId),T(We,i.correlationId);if(e!==void 0&&(typeof e!=`string`||typeof t!=`string`||e!==t))throw T(We,i.correlationId)}this.homeAccountIdentifier=xt(t.client_info||``,n.authorityType,this.logger,this.cryptoObj,i.correlationId,f);let p;if(o&&o.state&&(p=_a(this.cryptoObj.base64Decode,o.state,i.correlationId)),t.key_id=t.key_id||i.dpopJkt||i.sshKid||void 0,i.authenticationScheme===C.DPOP){if(t.token_type?.toLowerCase()!==C.DPOP.toLowerCase())throw this.performanceClient?.addFields({dpopTokenTypeMismatch:t.token_type},i.correlationId),T(tt,i.correlationId);t.token_type=C.DPOP}let m=or(i.attributeTokens),h=d??(m?{attribute_tokens:m}:void 0),g=this.generateCacheRecord(t,n,r,i,f,s,o,h),_;try{if(this.persistencePlugin&&this.serializableCache&&(this.logger.verbose(`0jbz5k`,i.correlationId),_=new zi(this.serializableCache,!0),await this.persistencePlugin.beforeCacheAccess(_)),c&&!l&&g.account&&this.cacheStorage.getAllAccounts({homeAccountId:g.account.homeAccountId,environment:g.account.environment},i.correlationId).length<1)return this.logger.warning(`1gmt66`,i.correlationId),this.performanceClient?.addFields({acntLoggedOut:!0},i.correlationId),await e.generateAuthenticationResult(this.cryptoObj,n,g,!1,i,this.performanceClient,{idTokenClaims:f,requestState:p,requestId:u,tokenBindingKeyManager:this.tokenBindingKeyManager});await this.cacheStorage.saveCacheRecord(g,i.correlationId,O(f||{}),a,i.storeInCache)}finally{this.persistencePlugin&&this.serializableCache&&_&&(this.logger.verbose(`1bh17u`,i.correlationId),await this.persistencePlugin.afterCacheAccess(_))}return e.generateAuthenticationResult(this.cryptoObj,n,g,!1,i,this.performanceClient,{idTokenClaims:f,requestState:p,serverTokenResponse:t,requestId:u,tokenBindingKeyManager:this.tokenBindingKeyManager})}generateCacheRecord(e,t,n,r,i,a,o,s){let c=t.getPreferredCache();if(!c)throw T(Qe,r.correlationId);let l=_t(i),u,d;e.id_token&&i&&(u=Wn(this.homeAccountIdentifier,c,e.id_token,this.clientId,l||``),d=ya(this.cacheStorage,t,this.homeAccountIdentifier,this.cryptoObj.base64Decode,r.correlationId,i,e.client_info,c,l,o,void 0,this.logger,this.performanceClient));let f=null;if(e.access_token){let i=e.scope?F.fromString(e.scope,r.correlationId):new F(r.scopes||[],r.correlationId),o=(typeof e.expires_in==`string`?parseInt(e.expires_in,10):e.expires_in)||0,u=(typeof e.ext_expires_in==`string`?parseInt(e.ext_expires_in,10):e.ext_expires_in)||0,d=(typeof e.refresh_in==`string`?parseInt(e.refresh_in,10):e.refresh_in)||void 0,p=n+o,m=p+u,h=d&&d>0?n+d:void 0;f=Gn(this.homeAccountIdentifier,c,e.access_token,this.clientId,l||t.tenant||``,i.printScopes(),p,m,this.cryptoObj.base64Decode,r.correlationId,h,e.token_type,a,e.key_id,s);let g=r.resource||null;g&&(f.resource=g)}let p=null;if(e.refresh_token){let t;e.refresh_token_expires_in&&(t=n+(typeof e.refresh_token_expires_in==`string`?parseInt(e.refresh_token_expires_in,10):e.refresh_token_expires_in),this.performanceClient?.addFields({ntwkRtExpiresOnSeconds:t},r.correlationId)),p=Kn(this.homeAccountIdentifier,c,e.refresh_token,this.clientId,e.foci,a,t)}let m=null;return e.foci&&(m={clientId:this.clientId,environment:c,familyId:e.foci}),{account:d,idToken:u,accessToken:f,refreshToken:p,appMetadata:m}}static async generateAuthenticationResult(e,t,n,r,i,a,o={}){let{idTokenClaims:s,requestState:c,serverTokenResponse:l,requestId:u,tokenBindingKeyManager:d=di}=o,f=``,p=[],m=null,h,g,_=``,ee;if(n.accessToken){let t=n.accessToken.tokenType?.toLowerCase();if(n.accessToken.tokenType===C.POP&&!i.popKid){let t=new Zi(e,d,a),{secret:r,keyId:o}=n.accessToken;if(!o)throw T(st,i.correlationId);f=await t.signPopToken(r,o,i)}else f=n.accessToken.secret;if(t===C.DPOP.toLowerCase()){if(!n.accessToken.keyId)throw T(st,i.correlationId);ee=await new aa(e,d).generateResourceProof({htu:i.resourceRequestUri,htm:i.resourceRequestMethod,accessToken:n.accessToken.secret},n.accessToken.keyId,i.correlationId)}p=F.fromString(n.accessToken.target,i.correlationId).asArray(),m=Bn(n.accessToken.expiresOn),h=Bn(n.accessToken.extendedExpiresOn),n.accessToken.refreshOn&&(g=Bn(n.accessToken.refreshOn))}n.appMetadata&&(_=n.appMetadata.familyId===`1`?`1`:``);let te=s?.oid||s?.sub||``,ne=s?.tid||``,re=s?.tenant_region_sub_scope;if(typeof re==`string`&&a?.addFields({regionSubScope:re},i.correlationId),l?.spa_accountid&&n.account){n.account.nativeAccountId=l?.spa_accountid;let e=ne||n.account.realm;if(n.account.tenantProfiles){let t=n.account.tenantProfiles.find(t=>t.tenantId===e);t&&(t.nativeAccountId=l.spa_accountid)}}let ie=n.account?ht(vt(n.account),void 0,s,n.idToken?.secret):null;return{authority:t.canonicalAuthority,uniqueId:te,tenantId:ne,scopes:p,account:ie,idToken:n?.idToken?.secret||``,idTokenClaims:s||{},accessToken:f,dpopProof:ee,fromCache:r,expiresOn:m,extExpiresOn:h,refreshOn:g,correlationId:i.correlationId,requestId:u||``,familyId:_,tokenType:n.accessToken?.tokenType?.toLowerCase()===C.DPOP.toLowerCase()?C.DPOP:n.accessToken?.tokenType||``,state:c?c.userRequestState:``,cloudGraphHostName:n.account?.cloudGraphHostName||``,msGraphHost:n.account?.msGraphHost||``,code:l?.spa_code,fromPlatformBroker:!1}}};function ya(e,t,n,r,i,a,o,s,c,l,u,d,f){d?.verbose(`09jz0t`,i);let p=s||t.getPreferredCache(),m=e.getAccountsFilteredBy({homeAccountId:n,environment:p},i);f?.addFields({cacheMatchedAccounts:m.length},i),m.length>1&&d?.warning(`0x7ad1`,i);let h=(m.length===1?m[0]:null)||yt({homeAccountId:n,idTokenClaims:a,clientInfo:o,environment:s,cloudGraphHostName:l?.cloud_graph_host_name,msGraphHost:l?.msgraph_host,nativeAccountId:u},t,i,r),g=h.tenantProfiles||[],_=c||h.realm;if(_&&!g.find(e=>e.tenantId===_)){let e=mt(n,h.localAccountId,_,u,a);g.push(e)}return h.tenantProfiles=g,h}var z={HOME_ACCOUNT_ID:`home_account_id`,UPN:`UPN`};async function ba(e,t,n,r){return typeof e==`string`?e:e({clientId:t,tokenEndpoint:n,fmiPath:r})}function xa(e,t,n){return{clientId:e,authority:t.authority,scopes:t.scopes,homeAccountIdentifier:n,claims:t.claims,authenticationScheme:t.authenticationScheme,resourceRequestMethod:t.resourceRequestMethod,resourceRequestUri:t.resourceRequestUri,shrClaims:t.shrClaims,sshKid:t.sshKid,embeddedClientId:t.embeddedClientId||t.extraParameters?.clientId,resource:t.resource,attributeTokens:or(t.attributeTokens)}}var Sa=class e{static generateThrottlingStorageKey(e){return`${we}.${JSON.stringify(e)}`}static preProcess(t,n,r){let i=e.generateThrottlingStorageKey(n),a=t.getThrottlingCache(i,r);if(a){if(a.throttleTime<Date.now()){t.removeItem(i,r);return}throw new ma(a.errorCodes?.join(` `)||``,r,a.errorMessage,a.subError)}}static postProcess(t,n,r,i){if(e.checkResponseStatus(r)||e.checkResponseForRetryAfter(r)){let a={throttleTime:e.calculateThrottleTime(parseInt(r.headers[v.RETRY_AFTER])),error:r.body.error,errorCodes:r.body.error_codes,errorMessage:r.body.error_description,subError:r.body.suberror};t.setThrottlingCache(e.generateThrottlingStorageKey(n),a,i)}}static checkResponseStatus(e){return e.status===429||e.status>=500&&e.status<600}static checkResponseForRetryAfter(e){return e.headers?e.headers.hasOwnProperty(v.RETRY_AFTER)&&(e.status<200||e.status>=300):!1}static calculateThrottleTime(e){let t=e<=0?0:e,n=Date.now()/1e3;return Math.floor(Math.min(n+(t||60),n+Ce)*1e3)}static removeThrottle(e,t,n,r){let i=xa(t,n,r),a=this.generateThrottlingStorageKey(i);e.removeItem(a,n.correlationId)}},Ca=class e extends w{constructor(t,n,r){super(t.errorCode,t.correlationId,t.errorMessage,t.subError),Object.setPrototypeOf(this,e.prototype),this.name=`NetworkError`,this.error=t,this.httpStatus=n,this.responseHeaders=r}};function wa(e,t,n,r){return e.errorMessage=`${e.errorMessage}, additionalErrorInfo: error.name:${r?.name}, error.message:${r?.message}`,new Ca(e,t,n)}function Ta(e,t,n){let r={};if(r[v.CONTENT_TYPE]=ee,!t&&n)switch(n.type){case z.HOME_ACCOUNT_ID:try{let e=dt(n.credential);r[v.CCS_HEADER]=`Oid:${e.uid}@${e.utid}`}catch(t){e.verbose(`1qhtee ${t}`,``)}break;case z.UPN:r[v.CCS_HEADER]=`UPN: ${n.credential}`}return r}async function Ea(e,t,n,r,i){if(t.authenticationScheme!==C.DPOP)return;let a=new aa(r,i),o=t.dpopJkt;if(!o?.trim())throw T(st,t.correlationId);e[v.DPOP]=await a.generateTokenProof({tokenEndpoint:n},o,t.correlationId)}function Da(e,t,n,r){let i=new Map;return e.embeddedClientId&&ei(i,t,n),e.extraQueryParameters&&I(i,e.extraQueryParameters),Dr(i,e.correlationId),fr(i,e.correlationId,r),oi(i)}async function Oa(e,t,n,r,i,a,o,s,c,l){let u=await ka(r,e,{body:t,headers:n},i,a,o,s,c);return l&&u.status<500&&u.status!==429&&l.clearTelemetryCache(),u}async function ka(e,t,n,r,i,a,o,s){Sa.preProcess(i,e,r);let c;try{c=await N(a.sendPostRequestAsync.bind(a),fn,o,s,r)(t,{...n,correlationId:r,performanceClient:s});let e=c.headers||{};s?.addFields({refreshTokenSize:c.body.refresh_token?.length||0,httpVerToken:e[v.X_MS_HTTP_VERSION]||``,requestId:e[v.X_MS_REQUEST_ID]||``},r)}catch(e){if(e instanceof Ca){let t=e.responseHeaders;throw t&&s?.addFields({httpVerToken:t[v.X_MS_HTTP_VERSION]||``,requestId:t[v.X_MS_REQUEST_ID]||``,contentTypeHeader:t[v.CONTENT_TYPE]||void 0,contentLengthHeader:t[v.CONTENT_LENGTH]||void 0,httpStatus:e.httpStatus},r),e.error}throw e instanceof w?e:T(Re,r)}return Sa.postProcess(i,e,c,r),c}var Aa=class{constructor(e,t){this.includeRedirectUri=!0,this.config=Ii(e),this.logger=new vi(this.config.loggerOptions,yi,bi),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t,this.oidcDefaultScopes=this.config.authOptions.authority.options.OIDCOptions?.defaultScopes}async acquireToken(e,t,n){if(!e.code)throw T(Ke,e.correlationId);n&&n.cloud_instance_host_name&&await N(this.updateTokenEndpointAuthority.bind(this),wn,this.logger,this.performanceClient,e.correlationId)(n.cloud_instance_host_name,e.correlationId);let r=P(),i=await N(this.executeTokenRequest.bind(this),Sn,this.logger,this.performanceClient,e.correlationId)(this.authority,e,this.serverTelemetryManager),a=i.headers?.[v.X_MS_REQUEST_ID],o=new va(this.config.authOptions.clientId,this.cacheManager,this.cryptoUtils,this.logger,this.performanceClient,this.config.serializableCache,this.config.persistencePlugin,this.config.tokenBindingKeyManager);return o.validateTokenResponse(i.body,e.correlationId),N(o.handleServerTokenResponse.bind(o),En,this.logger,this.performanceClient,e.correlationId)(i.body,this.authority,r,e,t,n,void 0,void 0,void 0,a)}getLogoutUri(e){if(!e)throw A(Mt,``);let t=this.createLogoutUrlQueryString(e);return j.appendQueryString(this.authority.endSessionEndpoint,t)}async executeTokenRequest(e,t,n){let r=Da(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri,this.performanceClient),i=j.appendQueryString(e.tokenEndpoint,r),a=await N(this.createTokenRequestBody.bind(this),Cn,this.logger,this.performanceClient,t.correlationId)(t),o;if(t.clientInfo)try{let e=ut(t.clientInfo,this.cryptoUtils.base64Decode);o={credential:`${e.uid}.${e.utid}`,type:z.HOME_ACCOUNT_ID}}catch(e){this.logger.verbose(`0wznt3 ${e}`,t.correlationId)}let s=Ta(this.logger,this.config.systemOptions.preventCorsPreflight,o||t.ccsCredential);await Ea(s,t,i,this.cryptoUtils,this.config.tokenBindingKeyManager);let c=xa(this.config.authOptions.clientId,t);return N(Oa,mn,this.logger,this.performanceClient,t.correlationId)(i,a,s,c,t.correlationId,this.cacheManager,this.networkClient,this.logger,this.performanceClient,n)}async createTokenRequestBody(e){let t=new Map;if(_r(t,e.embeddedClientId||e.extraParameters?.client_id||this.config.authOptions.clientId),this.includeRedirectUri)vr(t,e.redirectUri);else if(!e.redirectUri)throw A(Tt,e.correlationId);if(gr(t,e.scopes,e.correlationId,!0,this.oidcDefaultScopes),ni(t,e.resource),e.attributeTokens&&ri(t,e.attributeTokens),this.performanceClient?.addFields({hasAttributeTokens:!!e.attributeTokens?.length},e.correlationId),Pr(t,e.code),Or(t,this.config.libraryInfo),kr(t,this.config.telemetry.application),Qr(t),this.serverTelemetryManager&&!Ri(this.config)&&Zr(t,this.serverTelemetryManager),e.codeVerifier&&Ir(t,e.codeVerifier),this.config.clientCredentials.clientSecret&&Lr(t,this.config.clientCredentials.clientSecret),this.config.clientCredentials.clientAssertion){let n=this.config.clientCredentials.clientAssertion;Rr(t,await ba(n.assertion,this.config.authOptions.clientId,e.resourceRequestUri)),zr(t,n.assertionType)}if(Br(t,pe.AUTHORIZATION_CODE_GRANT),Vr(t),e.authenticationScheme===C.POP){let n=new Zi(this.cryptoUtils,this.config.tokenBindingKeyManager,this.performanceClient),r;r=e.popKid?this.cryptoUtils.encodeKid(e.popKid):(await N(n.generateCnf.bind(n),Tn,this.logger,this.performanceClient,e.correlationId)(e,this.logger)).reqCnfString,Yr(t,r)}else if(e.authenticationScheme===C.SSH){if(e.sshJwk)Xr(t,e.sshJwk);else throw A(Lt,e.correlationId)}let n;if(e.clientInfo)try{let t=ut(e.clientInfo,this.cryptoUtils.base64Decode);n={credential:`${t.uid}.${t.utid}`,type:z.HOME_ACCOUNT_ID}}catch(t){this.logger.verbose(`0wznt3 ${t}`,e.correlationId)}else n=e.ccsCredential;if(this.config.systemOptions.preventCorsPreflight&&n)switch(n.type){case z.HOME_ACCOUNT_ID:try{wr(t,dt(n.credential))}catch(t){this.logger.verbose(`1qhtee ${t}`,e.correlationId)}break;case z.UPN:Cr(t,n.credential)}return e.embeddedClientId&&ei(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.extraParameters&&I(t,e.extraParameters),e.enableSpaAuthorizationCode&&(!e.extraParameters||!e.extraParameters.return_spa_code)&&I(t,{return_spa_code:`1`}),fr(t,e.correlationId,this.performanceClient),Er(t,e.correlationId,e.claims,this.config.authOptions.clientCapabilities,e.skipBrokerClaims),oi(t)}createLogoutUrlQueryString(e){let t=new Map;return e.postLogoutRedirectUri&&yr(t,e.postLogoutRedirectUri),e.correlationId&&Dr(t,e.correlationId),e.idTokenHint&&br(t,e.idTokenHint),e.state&&jr(t,e.state),e.logoutHint&&$r(t,e.logoutHint),e.extraQueryParameters&&I(t,e.extraQueryParameters),this.config.authOptions.instanceAware&&Ur(t),oi(t)}async updateTokenEndpointAuthority(e,t){let n=await dr(`https://${e}/${this.authority.tenant}/`,this.networkClient,this.cacheManager,this.authority.options,this.logger,t,this.performanceClient);this.authority=n}};function ja(e,t,n,r){let i=t.correlationId,a=new Map;if(_r(a,t.embeddedClientId||t.extraQueryParameters?.client_id||e.clientId),gr(a,[...t.scopes||[],...t.extraScopesToConsent||[]],t.correlationId,!0,e.authority.options.OIDCOptions?.defaultScopes),ni(a,t.resource),vr(a,t.redirectUri),Dr(a,i),mr(a,t.responseMode),Vr(a),Hr(a),t.prompt&&(Ar(a,t.prompt),r?.addFields({prompt:t.prompt},i)),t.domainHint&&(xr(a,t.domainHint),r?.addFields({domainHintFromRequest:!0},i)),t.prompt!==b.SELECT_ACCOUNT){if(t.sid&&t.prompt===b.NONE)n.verbose(`1tvqyx`,t.correlationId),Tr(a,t.sid),r?.addFields({sidFromRequest:!0},i);else if(t.account){let e=Ia(t.account),o=La(t.account);if(o&&t.domainHint&&(n.warning(`0wkg3v`,t.correlationId),o=null),o){n.verbose(`1eyfsw`,t.correlationId),Sr(a,o),r?.addFields({loginHintFromClaim:!0},i);try{wr(a,dt(t.account.homeAccountId))}catch{n.verbose(`12ugck`,t.correlationId)}}else if(e&&t.prompt===b.NONE){n.verbose(`1rmd8s`,t.correlationId),Tr(a,e),r?.addFields({sidFromClaim:!0},i);try{wr(a,dt(t.account.homeAccountId))}catch{n.verbose(`12ugck`,t.correlationId)}}else if(t.loginHint)n.verbose(`0y3007`,t.correlationId),Sr(a,t.loginHint),Cr(a,t.loginHint),r?.addFields({loginHintFromRequest:!0},i);else if(t.account.username){n.verbose(`02f507`,t.correlationId),Sr(a,t.account.username),r?.addFields({loginHintFromUpn:!0},i);try{wr(a,dt(t.account.homeAccountId))}catch{n.verbose(`12ugck`,t.correlationId)}}}else t.loginHint&&(n.verbose(`0g01ey`,t.correlationId),Sr(a,t.loginHint),Cr(a,t.loginHint),r?.addFields({loginHintFromRequest:!0},i))}else n.verbose(`169k9v`,t.correlationId);return t.nonce&&Mr(a,t.nonce),t.state&&jr(a,t.state),t.embeddedClientId&&ei(a,e.clientId,e.redirectUri),Er(a,t.correlationId,t.claims,e.clientCapabilities,t.skipBrokerClaims),e.instanceAware&&(!t.extraQueryParameters||!Object.keys(t.extraQueryParameters).includes(`instance_aware`))&&Ur(a),a}function Ma(e,t){let n=oi(t);return j.appendQueryString(e.authorizationEndpoint,n)}function Na(e,t,n){if(Pa(e,t,n),!e.code)throw T(it,n);return e}function Pa(e,t,n){if(!e.state||!t)throw e.state?T(Ue,n,`Cached State`):T(Ue,n,`Server State`);let r,i;try{r=decodeURIComponent(e.state)}catch{throw T(Ve,n,e.state)}try{i=decodeURIComponent(t)}catch{throw T(Ve,n,e.state)}if(r!==i)throw T(He,n);if(e.error||e.error_description||e.suberror){let t=Fa(e);throw fa(e.error,e.error_description,e.suberror)?new R(e.error||``,e.correlation_id||n,e.error_description,e.suberror,e.timestamp||``,e.trace_id||``,e.claims||``,t):new ma(e.error||``,e.correlation_id||n,e.error_description,e.suberror,t)}}function Fa(e){let t=e.error_uri?.lastIndexOf(`code=`);return t&&t>=0?e.error_uri?.substring(t+5):void 0}function Ia(e){return e.idTokenClaims?.sid||null}function La(e){return e.loginHint||e.idTokenClaims?.login_hint||null}var Ra=300,za=class{constructor(e,t){this.config=Ii(e),this.logger=new vi(this.config.loggerOptions,yi,bi),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t}async acquireToken(e,t){let n=P(),r=await N(this.executeTokenRequest.bind(this),hn,this.logger,this.performanceClient,e.correlationId)(e,this.authority),i=r.headers?.[v.X_MS_REQUEST_ID],a=new va(this.config.authOptions.clientId,this.cacheManager,this.cryptoUtils,this.logger,this.performanceClient,this.config.serializableCache,this.config.persistencePlugin,this.config.tokenBindingKeyManager);return a.validateTokenResponse(r.body,e.correlationId),N(a.handleServerTokenResponse.bind(a),En,this.logger,this.performanceClient,e.correlationId)(r.body,this.authority,n,e,t,void 0,void 0,!0,e.forceCache,i)}async acquireTokenByRefreshToken(e,t){if(!e)throw A(jt,``);if(!e.account)throw T(Xe,e.correlationId);if(this.cacheManager.isAppMetadataFOCI(e.account.environment,e.correlationId))try{return await N(this.acquireTokenWithCachedRefreshToken.bind(this),_n,this.logger,this.performanceClient,e.correlationId)(e,!0,t)}catch(n){let r=n instanceof R&&n.errorCode===`no_tokens_found`,i=n instanceof ma&&n.errorCode===`invalid_grant`&&n.subError===`client_mismatch`;if(r||i)return N(this.acquireTokenWithCachedRefreshToken.bind(this),_n,this.logger,this.performanceClient,e.correlationId)(e,!1,t);throw n}return N(this.acquireTokenWithCachedRefreshToken.bind(this),_n,this.logger,this.performanceClient,e.correlationId)(e,!1,t)}async acquireTokenWithCachedRefreshToken(e,t,n){let r=M(this.cacheManager.getRefreshToken.bind(this.cacheManager),In,this.logger,this.performanceClient,e.correlationId)(e.account,t,e.correlationId,void 0);if(!r)throw pa(oa,e.correlationId);if(r.expiresOn){let t=e.refreshTokenExpirationOffsetSeconds||Ra;if(this.performanceClient?.addFields({cacheRtExpiresOnSeconds:Number(r.expiresOn),rtOffsetSeconds:t},e.correlationId),Vn(r.expiresOn,t))throw pa(ca,e.correlationId)}let i={...e,refreshToken:r.secret,authenticationScheme:e.authenticationScheme||C.BEARER,ccsCredential:{credential:e.account.homeAccountId,type:z.HOME_ACCOUNT_ID}};i.authenticationScheme===C.DPOP&&!i.dpopJkt&&(i.dpopJkt=await new aa(this.cryptoUtils,this.config.tokenBindingKeyManager).generateJkt(e.correlationId));try{return await N(this.acquireToken.bind(this),gn,this.logger,this.performanceClient,e.correlationId)(i,n)}catch(t){if(t instanceof R&&t.subError===`bad_token`){this.logger.verbose(`1pg3ap`,e.correlationId);let t=this.cacheManager.generateCredentialKey(r);this.cacheManager.removeRefreshToken(t,e.correlationId)}throw t}}async executeTokenRequest(e,t){let n=Da(e,this.config.authOptions.clientId,this.config.authOptions.redirectUri,this.performanceClient),r=j.appendQueryString(t.tokenEndpoint,n),i=await N(this.createTokenRequestBody.bind(this),vn,this.logger,this.performanceClient,e.correlationId)(e),a=Ta(this.logger,this.config.systemOptions.preventCorsPreflight,e.ccsCredential);await Ea(a,e,r,this.cryptoUtils,this.config.tokenBindingKeyManager);let o=xa(this.config.authOptions.clientId,e);return N(Oa,pn,this.logger,this.performanceClient,e.correlationId)(r,i,a,o,e.correlationId,this.cacheManager,this.networkClient,this.logger,this.performanceClient,this.serverTelemetryManager)}async createTokenRequestBody(e){let t=new Map;if(_r(t,e.embeddedClientId||e.extraParameters?.client_id||this.config.authOptions.clientId),e.redirectUri&&vr(t,e.redirectUri),gr(t,e.scopes,e.correlationId,!0,this.config.authOptions.authority.options.OIDCOptions?.defaultScopes),Br(t,pe.REFRESH_TOKEN_GRANT),Vr(t),Or(t,this.config.libraryInfo),kr(t,this.config.telemetry.application),Qr(t),this.serverTelemetryManager&&!Ri(this.config)&&Zr(t,this.serverTelemetryManager),Fr(t,e.refreshToken),e.attributeTokens&&ri(t,e.attributeTokens),this.performanceClient?.addFields({hasAttributeTokens:!!e.attributeTokens?.length},e.correlationId),this.config.clientCredentials.clientSecret&&Lr(t,this.config.clientCredentials.clientSecret),this.config.clientCredentials.clientAssertion){let n=this.config.clientCredentials.clientAssertion;Rr(t,await ba(n.assertion,this.config.authOptions.clientId,e.resourceRequestUri)),zr(t,n.assertionType)}if(e.authenticationScheme===C.POP){let n=new Zi(this.cryptoUtils,this.config.tokenBindingKeyManager,this.performanceClient),r;r=e.popKid?this.cryptoUtils.encodeKid(e.popKid):(await N(n.generateCnf.bind(n),Tn,this.logger,this.performanceClient,e.correlationId)(e,this.logger)).reqCnfString,Yr(t,r)}else if(e.authenticationScheme===C.SSH){if(e.sshJwk)Xr(t,e.sshJwk);else throw A(Lt,e.correlationId)}if(this.config.systemOptions.preventCorsPreflight&&e.ccsCredential)switch(e.ccsCredential.type){case z.HOME_ACCOUNT_ID:try{wr(t,dt(e.ccsCredential.credential))}catch(t){this.logger.verbose(`1qhtee ${t}`,e.correlationId)}break;case z.UPN:Cr(t,e.ccsCredential.credential)}return e.embeddedClientId&&ei(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.extraParameters&&I(t,{...e.extraParameters}),fr(t,e.correlationId,this.performanceClient),Er(t,e.correlationId,e.claims,this.config.authOptions.clientCapabilities,e.skipBrokerClaims),oi(t)}},Ba=`,`,Va=`|`;function Ha(e){let{skus:t,libraryName:n,libraryVersion:r,extensionName:i,extensionVersion:a}=e,o=new Map([[0,[n,r]],[2,[i,a]]]),s=[];if(t?.length){if(s=t.split(Ba),s.length<4)return t}else s=Array.from({length:4},()=>Va);return o.forEach((e,t)=>{e.length===2&&e[0]?.length&&e[1]?.length&&Ua({skuArr:s,index:t,skuName:e[0],skuVersion:e[1]})}),s.join(Ba)}function Ua(e){let{skuArr:t,index:n,skuName:r,skuVersion:i}=e;n>=t.length||(t[n]=[r,i].join(Va))}var Wa=class e{constructor(e,t){this.cacheOutcome=Oe.NOT_APPLICABLE,this.cacheManager=t,this.apiId=e.apiId,this.correlationId=e.correlationId,this.wrapperSKU=e.wrapperSKU||``,this.wrapperVer=e.wrapperVer||``,this.telemetryCacheKey=xe+`-`+e.clientId}generateCurrentRequestHeaderValue(){let e=`${this.apiId},${this.cacheOutcome}`,t=[this.wrapperSKU,this.wrapperVer],n=this.getNativeBrokerErrorCode();n?.length&&t.push(`broker_error=${n}`);let r=t.join(`,`);return[5,[e,this.getRegionDiscoveryFields()].join(`,`),r].join(`|`)}generateLastRequestHeaderValue(){let t=this.getLastRequests(),n=e.maxErrorsToSend(t),r=t.failedRequests.slice(0,2*n).join(`,`),i=t.errors.slice(0,n).join(`,`),a=t.errors.length,o=[a,n<a?`1`:`0`].join(`,`);return[5,t.cacheHits,r,i,o].join(`|`)}cacheFailedRequest(e){try{let t=this.getLastRequests();t.errors.length>=50&&(t.failedRequests.shift(),t.failedRequests.shift(),t.errors.shift()),t.failedRequests.push(this.apiId,this.correlationId),e instanceof Error&&e&&e.toString()?e instanceof w?e.subError?t.errors.push(e.subError):e.errorCode?t.errors.push(e.errorCode):t.errors.push(e.toString()):t.errors.push(e.toString()):t.errors.push(Se),this.cacheManager.setServerTelemetry(this.telemetryCacheKey,t,this.correlationId)}catch{}}incrementCacheHits(){let e=this.getLastRequests();return e.cacheHits+=1,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId),e.cacheHits}getLastRequests(){return this.cacheManager.getServerTelemetry(this.telemetryCacheKey,this.correlationId)||{failedRequests:[],errors:[],cacheHits:0}}clearTelemetryCache(){let t=this.getLastRequests(),n=e.maxErrorsToSend(t);if(n===t.errors.length)this.cacheManager.removeItem(this.telemetryCacheKey,this.correlationId);else{let e={failedRequests:t.failedRequests.slice(n*2),errors:t.errors.slice(n),cacheHits:0};this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId)}}static maxErrorsToSend(e){let t,n=0,r=0,i=e.errors.length;for(t=0;t<i;t++){let i=e.failedRequests[2*t]||``,a=e.failedRequests[2*t+1]||``,o=e.errors[t]||``;if(r+=i.toString().length+a.toString().length+o.length+3,r<330)n+=1;else break}return n}getRegionDiscoveryFields(){let e=[];return e.push(this.regionUsed||``),e.push(this.regionSource||``),e.push(this.regionOutcome||``),e.join(`,`)}updateRegionDiscoveryMetadata(e){this.regionUsed=e.region_used,this.regionSource=e.region_source,this.regionOutcome=e.region_outcome}setCacheOutcome(e){this.cacheOutcome=e}setNativeBrokerErrorCode(e){let t=this.getLastRequests();t.nativeBrokerErrorCode=e,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,t,this.correlationId)}getNativeBrokerErrorCode(){return this.getLastRequests().nativeBrokerErrorCode}clearNativeBrokerErrorCode(){let e=this.getLastRequests();delete e.nativeBrokerErrorCode,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId)}static makeExtraSkuString(e){return Ha(e)}},Ga=class extends Wa{constructor(){super({clientId:``,apiId:0,correlationId:``,forceRefresh:!1},{})}generateCurrentRequestHeaderValue(){return``}generateLastRequestHeaderValue(){return``}cacheFailedRequest(){}incrementCacheHits(){return 0}clearTelemetryCache(){}getRegionDiscoveryFields(){return``}updateRegionDiscoveryMetadata(){}setCacheOutcome(){}setNativeBrokerErrorCode(){}getNativeBrokerErrorCode(){}clearNativeBrokerErrorCode(){}},Ka=class{constructor(e,t){this.config=Ii(e),this.logger=new vi(this.config.loggerOptions,yi,bi),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t}async acquireCachedToken(e){let t=Oe.NOT_APPLICABLE;if(e.forceRefresh||!Zt.isEmptyObj(e.claims))throw this.setCacheOutcome(Oe.FORCE_REFRESH_OR_CLAIMS,e.correlationId),T(nt,e.correlationId);if(!e.account)throw T(Xe,e.correlationId);let n=e.account.tenantId||cr(e.authority,e.correlationId),r=this.cacheManager.getTokenKeys(),i=this.cacheManager.getAccessToken(e.account,e,r,n);if(!i)throw this.setCacheOutcome(Oe.NO_CACHED_ACCESS_TOKEN,e.correlationId),T(nt,e.correlationId);if(Un(i.cachedAt)||Vn(i.expiresOn,this.config.systemOptions.tokenRenewalOffsetSeconds))throw this.setCacheOutcome(Oe.CACHED_ACCESS_TOKEN_EXPIRED,e.correlationId),T(nt,e.correlationId);if(e.resource){if(i.resource!==e.resource)throw this.setCacheOutcome(Oe.NO_CACHED_ACCESS_TOKEN,e.correlationId),T(nt,e.correlationId)}else i.refreshOn&&Vn(i.refreshOn,0)&&(t=Oe.PROACTIVELY_REFRESHED);if(i.tokenType?.toLowerCase()===C.DPOP.toLowerCase()){if(!i.keyId)throw this.logger.info(`1enswf`,e.correlationId),this.setCacheOutcome(Oe.NO_CACHED_ACCESS_TOKEN,e.correlationId),T(nt,e.correlationId);try{await this.config.tokenBindingKeyManager.getTokenBindingPublicKeyJwk(i.keyId,e.correlationId)}catch{throw this.logger.info(`14djth`,e.correlationId),this.setCacheOutcome(Oe.NO_CACHED_ACCESS_TOKEN,e.correlationId),T(nt,e.correlationId)}}let a=e.authority||this.authority.getPreferredCache(),o={account:this.cacheManager.getAccount(this.cacheManager.generateAccountKey(e.account),e.correlationId),accessToken:i,idToken:this.cacheManager.getIdToken(e.account,e.correlationId,r,n),refreshToken:null,appMetadata:this.cacheManager.readAppMetadataFromCache(a,e.correlationId)};return this.setCacheOutcome(t,e.correlationId),this.config.serverTelemetryManager&&this.config.serverTelemetryManager.incrementCacheHits(),[await N(this.generateResultFromCacheRecord.bind(this),yn,this.logger,this.performanceClient,e.correlationId)(o,e),t]}setCacheOutcome(e,t){this.serverTelemetryManager?.setCacheOutcome(e),this.performanceClient?.addFields({cacheOutcome:e},t),e!==Oe.NOT_APPLICABLE&&this.logger.info(`09ingz ${e}`,t)}async generateResultFromCacheRecord(e,t){let n;return e.idToken&&(n=D(e.idToken.secret,this.config.cryptoInterface.base64Decode,t.correlationId)),va.generateAuthenticationResult(this.cryptoUtils,this.authority,e,!0,t,this.performanceClient,{idTokenClaims:n,tokenBindingKeyManager:this.config.tokenBindingKeyManager})}},qa={sendGetRequestAsync:()=>Promise.reject(T(E,``)),sendPostRequestAsync:()=>Promise.reject(T(E,``))};function Ja(e,t){if(e){if(t.resource&&(Ya(t.extraParameters)||Ya(t.extraQueryParameters)))throw T(lt,t.correlationId||``);if(!t.resource)throw T(ct,t.correlationId||``)}}function Ya(e){return e?Object.prototype.hasOwnProperty.call(e,`resource`):!1}var Xa=`acquireTokenFromCache`,Za=`acquireTokenByRefreshToken`,Qa=`acquireTokenSilentAsync`,$a=`cryptoOptsGetPublicKeyThumbprint`,eo=`cryptoOptsSignJwt`,to=`silentCacheClientAcquireToken`,no=`silentIframeClientAcquireToken`,ro=`awaitConcurrentIframe`,io=`silentRefreshClientAcquireToken`,ao=`standardInteractionClientGetDiscoveredAuthority`,oo=`nativeInteractionClientAcquireToken`,so=`nativeInteractionClientAcquireToken`,co=`refreshTokenClientAcquireTokenByRefreshToken`,lo=`acquireTokenBySilentIframe`,uo=`initializeBaseRequest`,fo=`initializeSilentRequest`,po=`initializeCache`,mo=`silentIframeClientTokenHelper`,ho=`silentHandlerInitiateAuthRequest`,go=`silentHandlerMonitorIframeForHash`,_o=`standardInteractionClientCreateAuthCodeClient`,vo=`standardInteractionClientGetClientConfiguration`,yo=`standardInteractionClientInitializeAuthorizationRequest`,bo=`silentFlowClientAcquireCachedToken`,xo=`getStandardParams`,So=`handleCodeResponse`,Co=`handleResponseEar`,wo=`handleResponsePlatformBroker`,To=`handleResponseCode`,Eo=`authClientAcquireToken`,Do=`deserializeResponse`,Oo=`authorityFactoryCreateDiscoveredInstance`,ko=`acquireTokenByCodeAsync`,Ao=`handleRedirectPromise`,jo=`handleNativeRedirectPromise`,Mo=`nativeMessageHandlerHandshake`,No=`removeHiddenIframe`,Po=`importExistingCache`,Fo=`generatePkceCodes`,Io=`generateCodeVerifier`,Lo=`generateCodeChallengeFromVerifier`,Ro=`sha256Digest`,zo=`getRandomValues`,Bo=`generateHKDF`,Vo=`generateBaseKey`,Ho=`base64Decode`,Uo=`urlEncodeArr`,Wo=`encrypt`,Go=`decrypt`,Ko=`generateEarKey`,qo=`decryptEarResponse`,Jo=`waitForBridgeLateResponse`;function Yo(e){return`See https://aka.ms/msal.js.errors#${e} for details`}var Xo=class e extends w{constructor(t,n,r){super(t,n,Yo(t),r),Object.setPrototypeOf(this,e.prototype),this.name=`BrowserAuthError`}};function B(e,t,n){return new Xo(e,t,n)}var Zo=`pkce_not_created`,Qo=`ear_jwk_empty`,$o=`ear_jwe_empty`,es=`crypto_nonexistent`,ts=`empty_navigate_uri`,ns=`hash_empty_error`,rs=`no_state_in_hash`,is=`hash_does_not_contain_known_properties`,as=`unable_to_parse_state`,os=`state_interaction_type_mismatch`,ss=`interaction_in_progress`,cs=`interaction_in_progress_cancelled`,ls=`popup_window_error`,us=`empty_window_error`,ds=`user_cancelled`,fs=`redirect_bridge_empty_response`,ps=`redirect_in_iframe`,ms=`block_iframe_reload`,hs=`block_nested_popups`,gs=`popup_relay_unsupported_flow`,_s=`silent_logout_unsupported`,vs=`no_account_error`,ys=`no_token_request_cache_error`,bs=`unable_to_parse_token_request_cache_error`,xs=`non_browser_environment`,Ss=`database_not_open`,Cs=`no_network_connectivity`,ws=`post_request_failed`,Ts=`get_request_failed`,Es=`failed_to_parse_response`,Ds=`crypto_key_not_found`,Os=`invalid_public_jwk`,ks=`auth_code_required`,As=`auth_code_or_nativeAccountId_required`,js=`spa_code_and_nativeAccountId_present`,Ms=`database_unavailable`,Ns=`unable_to_acquire_token_from_native_platform`,Ps=`native_handshake_timeout`,Fs=`native_extension_not_installed`,Is=`native_connection_not_established`,Ls=`uninitialized_public_client_application`,Rs=`native_prompt_not_supported`,zs=`invalid_base64_string`,Bs=`invalid_pop_token_request`,Vs=`unsupported_token_binding_algorithm`,Hs=`token_binding_key_algorithm_mismatch`,Us=`token_binding_key_jwk_thumbprint_mismatch`,Ws=`failed_to_build_headers`,Gs=`failed_to_parse_headers`,Ks=`failed_to_decrypt_ear_response`,qs=`timed_out`,Js=`empty_response`;function V(e){return new TextDecoder().decode(Ys(e))}function Ys(e){let t=e.replace(/-/g,`+`).replace(/_/g,`/`);switch(t.length%4){case 0:break;case 2:t+=`==`;break;case 3:t+=`=`;break;default:throw B(zs,``)}let n=atob(t);return Uint8Array.from(n,e=>e.codePointAt(0)||0)}var H={INVALID_GRANT_ERROR:`invalid_grant`,POPUP_WIDTH:483,POPUP_HEIGHT:600,POPUP_NAME_PREFIX:`msal`,MSAL_SKU:`msal.js.browser`},U={CHANNEL_ID:`53ee284d-920a-4b59-9d30-a60315b26836`,PREFERRED_EXTENSION_ID:`ppnbnpeolgkicgegkbkbjmhlideopiji`,MATS_TELEMETRY:`MATS`,MICROSOFT_ENTRA_BROKERID:`MicrosoftEntra`,DOM_API_NAME:`DOM API`,PLATFORM_DOM_APIS:`get-token-and-sign-out`,PLATFORM_DOM_PROVIDER:`PlatformAuthDOMHandler`,PLATFORM_EXTENSION_PROVIDER:`PlatformAuthExtensionHandler`},Xs={HandshakeRequest:`Handshake`,HandshakeResponse:`HandshakeResponse`,GetToken:`GetToken`,Response:`Response`},W={LocalStorage:`localStorage`,SessionStorage:`sessionStorage`,MemoryStorage:`memoryStorage`},Zs={GET:`GET`,POST:`POST`},Qs={SIGNIN:`signin`,SIGNOUT:`signout`},G={ORIGIN_URI:`request.origin`,URL_HASH:`urlHash`,REQUEST_PARAMS:`request.params`,VERIFIER:`code.verifier`,INTERACTION_STATUS_KEY:`interaction.status`,NATIVE_REQUEST:`request.native`},$s={WRAPPER_SKU:`wrapper.sku`,WRAPPER_VER:`wrapper.version`},K={acquireTokenRedirect:861,acquireTokenPopup:862,ssoSilent:863,acquireTokenSilent_authCode:864,handleRedirectPromise:865,acquireTokenByCode:866,acquireTokenSilent_silentFlow:61,logout:961,logoutPopup:962,hydrateCache:963,loadExternalTokens:964},ec={861:`acquireTokenRedirect`,862:`acquireTokenPopup`,863:`ssoSilent`,864:`acquireTokenSilent_authCode`,865:`handleRedirectPromise`,866:`acquireTokenByCode`,61:`acquireTokenSilent_silentFlow`,961:`logout`,962:`logoutPopup`,963:`hydrateCache`,964:`loadExternalTokens`},tc=e=>typeof e==`number`&&e in ec?ec[e]:`unknown`,q;(function(e){e.Redirect=`redirect`,e.Popup=`popup`,e.Silent=`silent`,e.None=`none`})(q||={});var nc={scopes:se},rc=`msal.db`,ic=`${rc}.keys`,J={Default:0,AccessToken:1,AccessTokenAndRefreshToken:2,RefreshToken:3,RefreshTokenAndNetwork:4,Skip:5},ac=[J.Default,J.Skip,J.RefreshTokenAndNetwork];function oc(e){return encodeURIComponent(cc(e).replace(/=/g,``).replace(/\+/g,`-`).replace(/\//g,`_`))}function sc(e){return lc(e).replace(/=/g,``).replace(/\+/g,`-`).replace(/\//g,`_`)}function cc(e){return lc(new TextEncoder().encode(e))}function lc(e){let t=Array.from(e,e=>String.fromCodePoint(e)).join(``);return btoa(t)}var uc=`RSASSA-PKCS1-v1_5`,dc=`AES-GCM`,fc=`HKDF`,pc=`SHA-256`,mc=`P-256`,hc=`EC`,gc=`RSA`,_c=`missing_jwk_kty`,vc=`unsupported_jwk_kty`,yc=`missing_jwk_member`,bc=`empty_jwk_member`,xc=2048,Sc=new Uint8Array([1,0,1]),Cc=`0123456789abcdef`,wc=new Uint32Array(1),Tc=`raw`,Ec=`encrypt`,Dc=`decrypt`,Oc=`deriveKey`,kc=`crypto_subtle_undefined`,Ac={name:uc,hash:pc,modulusLength:xc,publicExponent:Sc},jc={name:uc},Mc={name:`ECDSA`,namedCurve:mc},Nc={name:`ECDSA`,hash:{name:pc}};function Pc(e){if(!window)throw B(xs,``);if(!window.crypto)throw B(es,``);if(!e&&!window.crypto.subtle)throw B(es,``,kc)}async function Fc(e){let t=new TextEncoder().encode(e);return window.crypto.subtle.digest(pc,t)}function Ic(e){return window.crypto.getRandomValues(e)}function Lc(){return window.crypto.getRandomValues(wc),wc[0]}function Rc(){let e=Date.now(),t=Lc()*1024+(Lc()&1023),n=new Uint8Array(16),r=Math.trunc(t/2**30),i=t&2**30-1,a=Lc();n[0]=e/2**40,n[1]=e/2**32,n[2]=e/2**24,n[3]=e/2**16,n[4]=e/256,n[5]=e,n[6]=112|r>>>8,n[7]=r,n[8]=128|i>>>24,n[9]=i>>>16,n[10]=i>>>8,n[11]=i,n[12]=a>>>24,n[13]=a>>>16,n[14]=a>>>8,n[15]=a;let o=``;for(let e=0;e<n.length;e++)o+=Cc.charAt(n[e]>>>4),o+=Cc.charAt(n[e]&15),(e===3||e===5||e===7||e===9)&&(o+=`-`);return o}async function zc(e,t,n){return window.crypto.subtle.generateKey(n,e,t)}async function Bc(e){return window.crypto.subtle.exportKey(`jwk`,e)}async function Vc(e,t,n){return window.crypto.subtle.sign(n,e,t)}async function Hc(){let e=await Gc(),t={alg:`dir`,kty:`oct`,k:sc(new Uint8Array(e))};return cc(JSON.stringify(t))}async function Uc(e){let t=V(e),n=JSON.parse(t).k,r=Ys(n);return window.crypto.subtle.importKey(Tc,r,dc,!1,[Dc])}async function Wc(e,t){let n=t.split(`.`);if(n.length!==5)throw B(Ks,``,`jwe_length`);let r=await Uc(e).catch(()=>{throw B(Ks,``,`import_key`)});try{let e=new TextEncoder().encode(n[0]),t=Ys(n[2]),i=Ys(n[3]),a=Ys(n[4]),o=a.byteLength*8,s=new Uint8Array(i.length+a.length);s.set(i),s.set(a,i.length);let c=await window.crypto.subtle.decrypt({name:dc,iv:t,tagLength:o,additionalData:e},r,s);return new TextDecoder().decode(c)}catch{throw B(Ks,``,`decrypt`)}}async function Gc(){let e=await window.crypto.subtle.generateKey({name:dc,length:256},!0,[Ec,Dc]);return window.crypto.subtle.exportKey(Tc,e)}async function Kc(e){return window.crypto.subtle.importKey(Tc,e,fc,!1,[Oc])}async function qc(e,t,n){return window.crypto.subtle.deriveKey({name:fc,salt:t,hash:pc,info:new TextEncoder().encode(n)},e,{name:dc,length:256},!1,[Ec,Dc])}async function Jc(e,t,n){let r=new TextEncoder().encode(t),i=window.crypto.getRandomValues(new Uint8Array(16)),a=await qc(e,i,n),o=await window.crypto.subtle.encrypt({name:dc,iv:new Uint8Array(12)},a,r);return{data:sc(new Uint8Array(o)),nonce:sc(i)}}async function Yc(e,t,n,r){let i=Ys(r),a=await qc(e,Ys(t),n),o=await window.crypto.subtle.decrypt({name:dc,iv:new Uint8Array(12)},a,i);return new TextDecoder().decode(o)}async function Xc(e){let t=await Fc(e);return sc(new Uint8Array(t))}var Zc={[hc]:[`crv`,`kty`,`x`,`y`],[gc]:[`e`,`kty`,`n`]};function Qc(e,t){let n=e.kty;if(typeof n!=`string`||n.length===0)throw B(Os,t,_c);let r=Zc[n];if(!r)throw B(Os,t,vc);return r.reduce((n,r)=>{let i=e[r];if(typeof i!=`string`)throw B(Os,t,yc);if(i.length===0)throw B(Os,t,bc);return n[r]=i,n},{})}async function $c(e,t){let n=Qc(e,t);return Xc(JSON.stringify(n,Object.keys(n).sort()))}var el=class e extends w{constructor(t,n,r){super(t,n,r),this.name=`BrowserConfigurationAuthError`,Object.setPrototypeOf(this,e.prototype)}};function tl(e,t){return new el(e,t,Yo(e))}var nl=`storage_not_supported`,rl=`in_mem_redirect_unavailable`;function il(){let e=window.location.hash,t=window.location.search,n=!1,r=!1,i=``,a;if(e&&e.length>1){let t=e.charAt(0)===`#`?e.substring(1):e,r=new URLSearchParams(t);r.has(`state`)&&(n=!0,i=t,a=r)}if(t&&t.length>1){let e=t.charAt(0)===`?`?t.substring(1):t,n=new URLSearchParams(e);n.has(`state`)&&(r=!0,i=e,a=n)}if(n&&r&&(i=`${t.charAt(0)===`?`?t.substring(1):t}${e.charAt(0)===`#`?e.substring(1):e}`,a=new URLSearchParams(i)),!i||!a)throw B(Js,``);let o=a.get(`state`);if(!o)throw B(rs,``);let{libraryState:s}=_a(V,o,``),{id:c,meta:l}=s;if(!c||!l)throw B(as,``,`missing_library_state`);return{params:a,payload:i,urlHash:e,urlQuery:t,hasResponseInHash:n,hasResponseInQuery:r,libraryState:{id:c,meta:l}}}function al(e){e.location.hash=``,typeof e.history.replaceState==`function`&&e.history.replaceState(null,``,`${e.location.origin}${e.location.pathname}${e.location.search}`)}function ol(e){let t=e.split(`#`);t.shift(),window.location.hash=t.length>0?t.join(`#`):``}function sl(){return window.parent!==window}function cl(){if(sl())return!1;try{let{libraryState:e}=il(),{meta:t}=e;return t.interactionType===q.Popup}catch{return!1}}var ll=null;function ul(e,t){ll&&=(e.verbose(`18y01k`,t),clearTimeout(ll.timeoutId),ll.channel.close(),ll.reject(B(cs,``)),null)}async function dl(e,t,n,r,i){return new Promise((a,o)=>{t.verbose(`1rf6em`,n.correlationId);let s=n.correlationId;r.addFields({redirectBridgeTimeoutMs:e,lateResponseExperimentEnabled:i?.iframeTimeoutTelemetry||!1},s);let{libraryState:c}=_a(V,n.state||``,n.correlationId),l=new BroadcastChannel(c.id),u,d=!1,f,p,m=window.setTimeout(()=>{ll=null,i?.iframeTimeoutTelemetry?(p=r.startMeasurement(Jo,s),d=!0,f=window.setTimeout(()=>{p?.end({success:!1}),clearTimeout(f),l.close()},6e4)):l.close(),o(B(qs,``,`redirect_bridge_timeout`))},e);ll={timeoutId:m,channel:l,reject:o},l.onmessage=e=>{u=e.data.payload;let t=e?.data&&typeof e.data.v==`number`?e.data.v:void 0;if(d){p?.end({success:!!u}),clearTimeout(f),l.close();return}r.addFields({redirectBridgeMessageVersion:t},s),ll=null,clearTimeout(m),l.close(),u?a(u):o(B(fs,s))}})}function fl(){return typeof window<`u`&&window.location?window.location.href.split(`?`)[0].split(`#`)[0]:``}function pl(e){let t=new j(window.location.href,e||``).getUrlComponents();return`${t.Protocol}//${t.HostNameAndPort}/`}function ml(){if(ai(window.location.hash)&&sl())throw B(ms,``)}function hl(e){if(sl()&&!e)throw B(ps,``)}function gl(){if(cl())throw B(hs,``)}function _l(){if(typeof window>`u`)throw B(xs,``)}function vl(e){if(!e)throw B(Ls,``)}function yl(e){_l(),ml(),gl(),vl(e)}function bl(e,t){if(yl(e),hl(t.system.allowRedirectInIframe),t.cache.cacheLocation===W.MemoryStorage)throw tl(rl,``)}function xl(e){let t=document.createElement(`link`);t.rel=`preconnect`,t.href=new URL(e).origin,t.crossOrigin=`anonymous`,document.head.appendChild(t),window.setTimeout(()=>{try{document.head.removeChild(t)}catch{}},1e4)}function Sl(){return Rc()}var Cl=class{constructor(){this.dbName=rc,this.version=1,this.tableName=ic,this.dbOpen=!1}async open(){return new Promise((e,t)=>{let n=window.indexedDB.open(this.dbName,this.version);n.addEventListener(`upgradeneeded`,e=>{e.target.result.createObjectStore(this.tableName)}),n.addEventListener(`success`,t=>{let n=t;this.db=n.target.result,this.dbOpen=!0,e()}),n.addEventListener(`error`,()=>t(B(Ms,``)))})}closeConnection(){let e=this.db;e&&this.dbOpen&&(e.close(),this.dbOpen=!1)}async validateDbIsOpen(){if(!this.dbOpen)return this.open()}async getItem(e){return await this.validateDbIsOpen(),new Promise((t,n)=>{if(!this.db)return n(B(Ss,``));let r=this.db.transaction([this.tableName],`readonly`).objectStore(this.tableName).get(e);r.addEventListener(`success`,e=>{let n=e;this.closeConnection(),t(n.target.result)}),r.addEventListener(`error`,e=>{this.closeConnection(),n(e)})})}async setItem(e,t){return await this.validateDbIsOpen(),new Promise((n,r)=>{if(!this.db)return r(B(Ss,``));let i=this.db.transaction([this.tableName],`readwrite`).objectStore(this.tableName).put(t,e);i.addEventListener(`success`,()=>{this.closeConnection(),n()}),i.addEventListener(`error`,e=>{this.closeConnection(),r(e)})})}async removeItem(e){return await this.validateDbIsOpen(),new Promise((t,n)=>{if(!this.db)return n(B(Ss,``));let r=this.db.transaction([this.tableName],`readwrite`).objectStore(this.tableName).delete(e);r.addEventListener(`success`,()=>{this.closeConnection(),t()}),r.addEventListener(`error`,e=>{this.closeConnection(),n(e)})})}async getKeys(){return await this.validateDbIsOpen(),new Promise((e,t)=>{if(!this.db)return t(B(Ss,``));let n=this.db.transaction([this.tableName],`readonly`).objectStore(this.tableName).getAllKeys();n.addEventListener(`success`,t=>{let n=t;this.closeConnection(),e(n.target.result)}),n.addEventListener(`error`,e=>{this.closeConnection(),t(e)})})}async containsKey(e){return await this.validateDbIsOpen(),new Promise((t,n)=>{if(!this.db)return n(B(Ss,``));let r=this.db.transaction([this.tableName],`readonly`).objectStore(this.tableName).count(e);r.addEventListener(`success`,e=>{let n=e;this.closeConnection(),t(n.target.result===1)}),r.addEventListener(`error`,e=>{this.closeConnection(),n(e)})})}async deleteDatabase(){return this.db&&this.dbOpen&&this.closeConnection(),new Promise((e,t)=>{let n=window.indexedDB.deleteDatabase(rc),r=setTimeout(()=>t(!1),200);n.addEventListener(`success`,()=>(clearTimeout(r),e(!0))),n.addEventListener(`blocked`,()=>(clearTimeout(r),e(!0))),n.addEventListener(`error`,()=>(clearTimeout(r),t(!1)))})}},wl=class{constructor(){this.cache=new Map}async initialize(){}getItem(e){return this.cache.get(e)||null}getUserData(e){return this.getItem(e)}setItem(e,t){this.cache.set(e,t)}async setUserData(e,t){this.setItem(e,t)}removeItem(e){this.cache.delete(e)}getKeys(){let e=[];return this.cache.forEach((t,n)=>{e.push(n)}),e}containsKey(e){return this.cache.has(e)}clear(){this.cache.clear()}decryptData(){return Promise.resolve(null)}},Tl=class{constructor(e){this.inMemoryCache=new wl,this.indexedDBCache=new Cl,this.logger=e}handleDatabaseAccessError(e,t){if(e instanceof Xo&&e.errorCode===`database_unavailable`)this.logger.error(`1wx7zz`,t);else throw e}async getItem(e,t){let n=this.inMemoryCache.getItem(e);if(!n)try{return this.logger.verbose(`0naxpl`,t),await this.indexedDBCache.getItem(e)}catch(e){this.handleDatabaseAccessError(e,t)}return n}async setItem(e,t,n){this.inMemoryCache.setItem(e,t);try{await this.indexedDBCache.setItem(e,t)}catch(e){this.handleDatabaseAccessError(e,n)}}async removeItem(e,t){this.inMemoryCache.removeItem(e);try{await this.indexedDBCache.removeItem(e)}catch(e){this.handleDatabaseAccessError(e,t)}}async getKeys(e){let t=this.inMemoryCache.getKeys();try{let e=await this.indexedDBCache.getKeys();return Array.from(new Set([...t,...e]))}catch(n){return this.handleDatabaseAccessError(n,e),t}}async containsKey(e,t){let n=this.inMemoryCache.containsKey(e);if(!n)try{return this.logger.verbose(`03zl2j`,t),await this.indexedDBCache.containsKey(e)}catch(e){this.handleDatabaseAccessError(e,t)}return n}clearInMemory(e){this.logger.verbose(`03r21p`,e),this.inMemoryCache.clear(),this.logger.verbose(`0uksk1`,e)}async clearPersistent(e){try{this.logger.verbose(`0rdqut`,e);let t=await this.indexedDBCache.deleteDatabase();return t&&this.logger.verbose(`149ouc`,e),t}catch(t){return this.handleDatabaseAccessError(t,e),!1}}},El=class e{constructor(t,n){this.logger=t,this.cache=e.getTokenBindingKeyStorage(this.logger),this.performanceClient=n}static getTokenBindingKeyStorage(t){return e.tokenBindingKeyStorage||=new Tl(t),e.tokenBindingKeyStorage}async provisionTokenBindingKey(e){let t=this.performanceClient?.startMeasurement($a,e.correlationId);try{let n=await this.createTokenBindingKey(e);return t?.end({success:!0,...this.getTokenBindingKeyTelemetry(n)}),n.keyId}catch(n){throw t?.end({success:!1,tokenBindingKeyType:e.tokenBindingKeyType,tokenBindingKeyAlgorithm:e.tokenBindingKeyAlgorithm}),n}}async removeTokenBindingKey(e,t){if(await this.cache.removeItem(e,t),await this.cache.containsKey(e,t))throw T(at,t)}async clearKeystore(e){this.cache.clearInMemory(e);try{return await this.cache.clearPersistent(e),!0}catch(t){return t instanceof Error?this.logger.error(`1owpn8 ${t.message}`,e):this.logger.error(`0yrmwo`,e),!1}}async getTokenBindingPublicKeyJwk(e,t){return Bc((await this.getTokenBindingKeyPair(e,t)).publicKey)}async createTokenBindingKey(t){let n=this.getTokenBindingKeyGenAlgorithmOptions(t.tokenBindingKeyAlgorithm,t.correlationId),r=await this.generateKeyPairAndThumbprint(e.TOKEN_BINDING_KEY_USAGES,n,t.correlationId);return await this.cache.setItem(r.keyId,{...r,tokenBindingKeyType:t.tokenBindingKeyType,tokenBindingKeyAlgorithm:t.tokenBindingKeyAlgorithm},t.correlationId),{...r,tokenBindingKeyType:t.tokenBindingKeyType,tokenBindingKeyAlgorithm:t.tokenBindingKeyAlgorithm}}async generateKeyPairAndThumbprint(e,t,n){let r=await zc(!1,e,t),i=await $c(await Bc(r.publicKey),n);return{publicKey:r.publicKey,privateKey:r.privateKey,keyId:i}}async getTokenBindingKeyPair(e,t){let n=await this.cache.getItem(e,t);if(!n)throw B(Ds,t);return n}getTokenBindingKeyTelemetry(e,t){return{...e.tokenBindingKeyType&&{tokenBindingKeyType:e.tokenBindingKeyType},...e.tokenBindingKeyAlgorithm||t?{tokenBindingKeyAlgorithm:e.tokenBindingKeyAlgorithm||t}:{}}}getTokenBindingKeyGenAlgorithmOptions(e,t){if(e===li.RS256)return Ac;if(e===li.ES256)return Mc;throw B(Vs,t)}};El.TOKEN_BINDING_KEY_USAGES=[`sign`,`verify`];var Dl=class{constructor(e,t,n){this.logger=e,Pc(n??!1),this.performanceClient=t,this.tokenBindingKeyManager=new El(this.logger,this.performanceClient)}createNewGuid(){return Rc()}base64Encode(e){return cc(e)}base64Decode(e){return V(e)}base64UrlEncode(e){return oc(e)}encodeKid(e){return this.base64UrlEncode(JSON.stringify({kid:e}))}async removeTokenBindingKey(e,t){await this.tokenBindingKeyManager.removeTokenBindingKey(e,t)}async clearKeystore(e){return this.tokenBindingKeyManager.clearKeystore(e)}async signTokenBindingJwt(e,t,n,r){let i={},a=this.performanceClient?.startMeasurement(eo,r);try{let o=await this.tokenBindingKeyManager.getTokenBindingKeyPair(n,r);await this.validateTokenBindingJwtHeaderKey(e,n,r),i=this.tokenBindingKeyManager.getTokenBindingKeyTelemetry(o,e.alg);let s=this.getTokenBindingKeySigningAlgorithm(o,e.alg,r),c=`${oc(JSON.stringify(e))}.${oc(JSON.stringify(t))}`,l=await this.signInput(o,c,s);return a?.end({success:!0,...i}),`${c}.${l}`}catch(e){throw a?.end({success:!1,...i}),e}}async hashString(e){return Xc(e)}async signInput(e,t,n){let r=new TextEncoder,i=await Vc(e.privateKey,r.encode(t),n);return sc(new Uint8Array(i))}getTokenBindingKeySigningAlgorithm(e,t,n){let r=e.privateKey.algorithm;if(t===li.RS256&&r.name===jc.name)return jc;if(t===li.ES256&&r.name===Nc.name&&r.namedCurve===Mc.namedCurve)return Nc;throw t===li.RS256||t===li.ES256?B(Vs,n,Hs):B(Vs,n)}async validateTokenBindingJwtHeaderKey(e,t,n){if(e.jwk&&await $c(e.jwk,n)!==t)throw B(Os,n,Us)}},Ol=`acquireTokenSilent`,kl=`acquireTokenByCode`,Al=`acquireTokenPopup`,jl=`acquireTokenPreRedirect`,Ml=`acquireTokenRedirect`,Nl=`ssoSilent`,Pl=`initializeClientApplication`,Fl=`localStorageUpdated`,Il=`ssoCapable`,Y=`msal`,Ll=`browser`,Rl=`${Y}.${Ll}.log.level`,zl=`${Y}.${Ll}.log.pii`;`${Y}${Ll}`;var Bl=`${Y}.version`,Vl=`account.keys`,Hl=`token.keys`,Ul=`${Y}.${Ll}.sso.capable`;function Wl(e=3){return e<1?`${Y}.${Vl}`:`${Y}.${e}.${Vl}`}function Gl(e,t=3){return t<1?`${Y}.${Hl}.${e}`:`${Y}.${t}.${Hl}.${e}`}var Kl=864e5,ql={Lax:`Lax`,None:`None`},Jl=class{initialize(){return Promise.resolve()}getItem(e){let t=encodeURIComponent(e),n=document.cookie.split(`;`);for(let e=0;e<n.length;e++){let r=n[e].trim(),i=r.indexOf(`=`);if((i===-1?r:r.substring(0,i))===t){let e=i===-1?``:r.substring(i+1);try{return decodeURIComponent(e)}catch{return e}}}return``}getUserData(){throw T(E,``)}setItem(e,t,n,r=!0,i=ql.Lax){let a=`${encodeURIComponent(e)}=${encodeURIComponent(t)};path=/;SameSite=${i};`;if(n){let e=Yl(n);a+=`expires=${e};`}(r||i===ql.None)&&(a+=`Secure;`),document.cookie=a}async setUserData(e,t,n){return Promise.reject(T(E,n))}removeItem(e){this.setItem(e,``,-1)}getKeys(){let e=document.cookie.split(`;`),t=[];return e.forEach(e=>{let n=e.trim(),r=n.indexOf(`=`),i=r===-1?n:n.substring(0,r);try{t.push(decodeURIComponent(i))}catch{}}),t}containsKey(e){return this.getKeys().includes(e)}decryptData(){return Promise.resolve(null)}};function Yl(e){return new Date(new Date().getTime()+e*Kl).toUTCString()}function Xl(e,t){let n=e.getItem(Wl(t));return n?JSON.parse(n):[]}function X(e,t,n){let r=t.getItem(Gl(e,n));if(r){let e=JSON.parse(r);if(e&&e.hasOwnProperty(`idToken`)&&e.hasOwnProperty(`accessToken`)&&e.hasOwnProperty(`refreshToken`))return e}return{idToken:[],accessToken:[],refreshToken:[]}}function Zl(e){return e.hasOwnProperty(`id`)&&e.hasOwnProperty(`nonce`)&&e.hasOwnProperty(`data`)}var Ql=`msal.cache.encryption`,$l=`msal.broadcast.cache`,eu=class{constructor(e,t,n){if(!window.localStorage)throw tl(nl,``);this.memoryStorage=new wl,this.initialized=!1,this.clientId=e,this.logger=t,this.performanceClient=n,this.broadcast=new BroadcastChannel($l)}async initialize(e){let t=new Jl,n=t.getItem(Ql),r={key:``,id:``};if(n)try{r=JSON.parse(n)}catch{}if(r.key&&r.id){let t=M(Ys,Ho,this.logger,this.performanceClient,e)(r.key);this.encryptionCookie={id:r.id,key:await N(Kc,Bo,this.logger,this.performanceClient,e)(t)}}else{let n=Rc(),r=await N(Gc,Vo,this.logger,this.performanceClient,e)(),i=M(sc,Uo,this.logger,this.performanceClient,e)(new Uint8Array(r));this.encryptionCookie={id:n,key:await N(Kc,Bo,this.logger,this.performanceClient,e)(r)};let a={id:n,key:i};t.setItem(Ql,JSON.stringify(a),0,!0,ql.None)}await N(this.importExistingCache.bind(this),Po,this.logger,this.performanceClient,e)(e),this.broadcast.addEventListener(`message`,t=>{this.updateCache(t,e)}),this.initialized=!0}getItem(e){return window.localStorage.getItem(e)}getUserData(e){if(!this.initialized)throw B(Ls,``);return this.memoryStorage.getItem(e)}async decryptData(e,t,n){if(!this.initialized||!this.encryptionCookie)throw B(Ls,``);if(t.id!==this.encryptionCookie.id)return this.performanceClient.incrementFields({encryptedCacheExpiredCount:1},n),null;let r=await N(Yc,Go,this.logger,this.performanceClient,n)(this.encryptionCookie.key,t.nonce,this.getContext(e),t.data);if(!r)return null;try{return{...JSON.parse(r),lastUpdatedAt:t.lastUpdatedAt}}catch{return this.performanceClient.incrementFields({encryptedCacheCorruptionCount:1},n),null}}setItem(e,t){window.localStorage.setItem(e,t)}async setUserData(e,t,n,r,i){if(!this.initialized||!this.encryptionCookie)throw B(Ls,``);if(i)this.setItem(e,t);else{let{data:i,nonce:a}=await N(Jc,Wo,this.logger,this.performanceClient,n)(this.encryptionCookie.key,t,this.getContext(e)),o={id:this.encryptionCookie.id,nonce:a,data:i,lastUpdatedAt:r};this.setItem(e,JSON.stringify(o))}this.memoryStorage.setItem(e,t),this.broadcast.postMessage({key:e,value:t,context:this.getContext(e)})}removeItem(e){this.memoryStorage.containsKey(e)&&(this.memoryStorage.removeItem(e),this.broadcast.postMessage({key:e,value:null,context:this.getContext(e)})),window.localStorage.removeItem(e)}getKeys(){return Object.keys(window.localStorage)}containsKey(e){return window.localStorage.hasOwnProperty(e)}clear(){this.memoryStorage.clear(),Xl(this).forEach(e=>this.removeItem(e));let e=X(this.clientId,this);e.idToken.forEach(e=>this.removeItem(e)),e.accessToken.forEach(e=>this.removeItem(e)),e.refreshToken.forEach(e=>this.removeItem(e)),this.getKeys().forEach(e=>{(e.startsWith(`msal`)||e.indexOf(this.clientId)!==-1)&&this.removeItem(e)})}async importExistingCache(e){if(!this.encryptionCookie)return;let t=Xl(this);t=await this.importArray(t,e),t.length?this.setItem(Wl(),JSON.stringify(t)):this.removeItem(Wl());let n=X(this.clientId,this);n.idToken=await this.importArray(n.idToken,e),n.accessToken=await this.importArray(n.accessToken,e),n.refreshToken=await this.importArray(n.refreshToken,e),n.idToken.length||n.accessToken.length||n.refreshToken.length?this.setItem(Gl(this.clientId),JSON.stringify(n)):this.removeItem(Gl(this.clientId))}async getItemFromEncryptedCache(e,t){if(!this.encryptionCookie)return null;let n=this.getItem(e);if(!n)return null;let r;try{r=JSON.parse(n)}catch{return null}return Zl(r)?r.id===this.encryptionCookie.id?(this.performanceClient.incrementFields({encryptedCacheCount:1},t),N(Yc,Go,this.logger,this.performanceClient,t)(this.encryptionCookie.key,r.nonce,this.getContext(e),r.data)):(this.performanceClient.incrementFields({encryptedCacheExpiredCount:1},t),null):(this.performanceClient.incrementFields({unencryptedCacheCount:1},t),n)}async importArray(e,t){let n=[],r=[];return e.forEach(e=>{let i=this.getItemFromEncryptedCache(e,t).then(t=>{t?(this.memoryStorage.setItem(e,t),n.push(e)):this.removeItem(e)});r.push(i)}),await Promise.all(r),n}getContext(e){let t=``;return e.includes(this.clientId)&&(t=this.clientId),t}updateCache(e,t){this.logger.trace(`17cxcm`,t);let n=this.performanceClient.startMeasurement(Fl);n.add({isBackground:!0});let{key:r,value:i,context:a}=e.data;if(!r){this.logger.error(`0e10qr`,t),n.end({success:!1,errorCode:`noKey`});return}if(a&&a!==this.clientId){this.logger.trace(`04rtdy ${a}`,t),n.discard();return}i?(this.memoryStorage.setItem(r,i),this.logger.verbose(`1vzsgt`,t)):(this.memoryStorage.removeItem(r),this.logger.verbose(`04ypih`,t)),n.end({success:!0})}},tu=class{constructor(){if(!window.sessionStorage)throw tl(nl,``)}async initialize(){}getItem(e){return window.sessionStorage.getItem(e)}getUserData(e){return this.getItem(e)}setItem(e,t){window.sessionStorage.setItem(e,t)}async setUserData(e,t){this.setItem(e,t)}removeItem(e){window.sessionStorage.removeItem(e)}getKeys(){return Object.keys(window.sessionStorage)}containsKey(e){return window.sessionStorage.hasOwnProperty(e)}decryptData(){return Promise.resolve(null)}},Z={INITIALIZE_START:`msal:initializeStart`,INITIALIZE_END:`msal:initializeEnd`,ACTIVE_ACCOUNT_CHANGED:`msal:activeAccountChanged`,LOGIN_SUCCESS:`msal:loginSuccess`,ACQUIRE_TOKEN_START:`msal:acquireTokenStart`,BROKERED_REQUEST_START:`msal:brokeredRequestStart`,ACQUIRE_TOKEN_SUCCESS:`msal:acquireTokenSuccess`,BROKERED_REQUEST_SUCCESS:`msal:brokeredRequestSuccess`,ACQUIRE_TOKEN_FAILURE:`msal:acquireTokenFailure`,BROKERED_REQUEST_FAILURE:`msal:brokeredRequestFailure`,ACQUIRE_TOKEN_NETWORK_START:`msal:acquireTokenFromNetworkStart`,HANDLE_REDIRECT_START:`msal:handleRedirectStart`,HANDLE_REDIRECT_END:`msal:handleRedirectEnd`,POPUP_OPENED:`msal:popupOpened`,LOGOUT_START:`msal:logoutStart`,LOGOUT_SUCCESS:`msal:logoutSuccess`,LOGOUT_FAILURE:`msal:logoutFailure`,LOGOUT_END:`msal:logoutEnd`,RESTORE_FROM_BFCACHE:`msal:restoreFromBFCache`,BROKER_CONNECTION_ESTABLISHED:`msal:brokerConnectionEstablished`},nu=`@azure/msal-browser`,ru=`5.23.0`;function iu(e,t){let n=e.indexOf(t);n>-1&&e.splice(n,1)}var Q={Invalid:`invalid`,TtlExpired:`ttlExpired`,DecryptFailed:`decryptFailed`,Expired:`expired`},au=class extends Ti{constructor(e,t,n,r,i,a,o,s=di){super(e,n,r,i,o,s),this.cacheConfig=t,this.logger=r,this.internalStorage=new wl,this.browserStorage=ou(e,t.cacheLocation,r,i),this.temporaryCacheStorage=ou(e,W.SessionStorage,r,i),this.cookieStorage=new Jl,this.eventHandler=a}async initialize(e){this.performanceClient.addFields({cacheLocation:this.cacheConfig.cacheLocation,cacheRetentionDays:this.cacheConfig.cacheRetentionDays},e),await this.browserStorage.initialize(e),await this.migrateExistingCache(e),this.trackVersionChanges(e)}async migrateExistingCache(e){let t=Xl(this.browserStorage),n=X(this.clientId,this.browserStorage);this.performanceClient.addFields({preMigrateAcntCount:t.length,preMigrateATCount:n.accessToken.length,preMigrateITCount:n.idToken.length,preMigrateRTCount:n.refreshToken.length},e);for(let t=0;t<3;t++){let n=t;await this.removeStaleAccounts(t,n,e)}for(let t=0;t<3;t++){let n=t;await this.migrateIdTokens(t,n,e)}let r=this.getKMSIValues();for(let t=0;t<3;t++)await this.migrateAccessTokens(t,r,e),await this.migrateRefreshTokens(t,r,e);t=Xl(this.browserStorage),n=X(this.clientId,this.browserStorage),this.performanceClient.addFields({postMigrateAcntCount:t.length,postMigrateATCount:n.accessToken.length,postMigrateITCount:n.idToken.length,postMigrateRTCount:n.refreshToken.length},e)}async updateOldEntry(e,t){let n=this.browserStorage.getItem(e),r=this.validateAndParseJson(n||``);if(!r)return this.browserStorage.removeItem(e),{entry:null,removalReason:Q.Invalid};if(!r.lastUpdatedAt)r.lastUpdatedAt=Date.now().toString(),this.setItem(e,JSON.stringify(r),t);else if(Hn(r.lastUpdatedAt,this.cacheConfig.cacheRetentionDays))return this.browserStorage.removeItem(e),{entry:null,removalReason:Q.TtlExpired};let i=Zl(r),a=i?await this.browserStorage.decryptData(e,r,t):r;return a?qn(a)?(Jn(a)||Xn(a))&&a.expiresOn&&Vn(a.expiresOn,300)?(this.browserStorage.removeItem(e),{entry:null,removalReason:Q.Expired}):{entry:a}:(this.browserStorage.removeItem(e),{entry:null,removalReason:Q.Invalid}):(this.browserStorage.removeItem(e),{entry:null,removalReason:i?Q.DecryptFailed:Q.Invalid})}async removeStaleAccounts(e,t,n){let r=Xl(this.browserStorage,e);if(r.length!==0){for(let e of[...r]){this.performanceClient.incrementFields({oldAcntCount:1},n);let i=this.browserStorage.getItem(e),a=this.validateAndParseJson(i||``);if(!a){this.browserStorage.removeItem(e),this.performanceClient.incrementFields({invalidAcntCount:1},n),iu(r,e);continue}if(a.lastUpdatedAt)Hn(a.lastUpdatedAt,this.cacheConfig.cacheRetentionDays)?(await this.removeAccountOldSchema(e,a,t,n),this.performanceClient.incrementFields({ttlExpiredAcntCount:1},n),iu(r,e)):Zl(a)&&(await this.browserStorage.decryptData(e,a,n)||(this.browserStorage.removeItem(e),this.performanceClient.incrementFields({decryptFailedAcntCount:1},n),iu(r,e)));else{a.lastUpdatedAt=Date.now().toString(),this.setItem(e,JSON.stringify(a),n);continue}}this.setAccountKeys(r,n,e)}}async removeAccountOldSchema(e,t,n,r){let i=(Zl(t)?await this.browserStorage.decryptData(e,t,r):t)?.homeAccountId;if(i){let e=this.getTokenKeys(n);[...e.idToken].filter(e=>e.includes(i)).forEach(t=>{this.browserStorage.removeItem(t),iu(e.idToken,t)}),[...e.accessToken].filter(e=>e.includes(i)).forEach(t=>{this.browserStorage.removeItem(t),iu(e.accessToken,t)}),[...e.refreshToken].filter(e=>e.includes(i)).forEach(t=>{this.browserStorage.removeItem(t),iu(e.refreshToken,t)}),this.setTokenKeys(e,r,n)}this.browserStorage.removeItem(e)}getKMSIValues(){let e={},t=this.getTokenKeys().idToken;for(let n of t){let t=this.browserStorage.getUserData(n);if(t){let n=JSON.parse(t),r=D(n.secret,V,``);r&&(e[n.homeAccountId]=O(r))}}return e}async migrateIdTokens(e,t,n){let r=X(this.clientId,this.browserStorage,e);if(r.idToken.length===0)return;let i=X(this.clientId,this.browserStorage,3),a=Xl(this.browserStorage),o=Xl(this.browserStorage,t);for(let e of[...r.idToken]){this.performanceClient.incrementFields({oldITCount:1},n);let t=await this.updateOldEntry(e,n),s=t.entry;if(!s){switch(t.removalReason){case Q.TtlExpired:this.performanceClient.incrementFields({ttlExpiredITCount:1},n);break;case Q.DecryptFailed:this.performanceClient.incrementFields({decryptFailedITCount:1},n);break;case Q.Invalid:this.performanceClient.incrementFields({invalidITCount:1},n)}iu(r.idToken,e);continue}let c=a.find(e=>e.includes(s.homeAccountId)),l=o.find(e=>e.includes(s.homeAccountId)),u=null;if(c)u=this.getAccount(c,n);else if(l){let e=this.browserStorage.getItem(l),t=this.validateAndParseJson(e||``);u=t&&Zl(t)?await this.browserStorage.decryptData(l,t,n):t}if(!u){this.performanceClient.incrementFields({skipITMigrateCount:1},n);continue}let d=D(s.secret,V,n),f=this.generateCredentialKey(s),p=this.getIdTokenCredential(f,n),m=Object.keys(d).includes(`signin_state`),h=p&&Object.keys(D(p.secret,V,n)||{}).includes(`signin_state`);if(!p||s.lastUpdatedAt>p.lastUpdatedAt&&(m||!h)){let e=u.tenantProfiles||[],t=_t(d)||u.realm;if(t&&!e.find(e=>e.tenantId===t)){let n=mt(u.homeAccountId,u.localAccountId,t,u.nativeAccountId,d);e.push(n)}u.tenantProfiles=e;let r=this.generateAccountKey(vt(u)),o=O(d);await this.setUserData(r,JSON.stringify(u),n,u.lastUpdatedAt,o),a.includes(r)||a.push(r),await this.setUserData(f,JSON.stringify(s),n,s.lastUpdatedAt,o),this.performanceClient.incrementFields({migratedITCount:1},n),i.idToken.includes(f)||i.idToken.push(f)}}this.setTokenKeys(r,n,e),this.setTokenKeys(i,n),this.setAccountKeys(a,n)}async migrateAccessTokens(e,t,n){let r=X(this.clientId,this.browserStorage,e);if(r.accessToken.length===0)return;let i=X(this.clientId,this.browserStorage,3);for(let e of[...r.accessToken]){this.performanceClient.incrementFields({oldATCount:1},n);let a=await this.updateOldEntry(e,n),o=a.entry;if(!o){switch(a.removalReason){case Q.TtlExpired:this.performanceClient.incrementFields({ttlExpiredATCount:1},n);break;case Q.DecryptFailed:this.performanceClient.incrementFields({decryptFailedATCount:1},n);break;case Q.Expired:this.performanceClient.incrementFields({expiredATCount:1},n);break;case Q.Invalid:this.performanceClient.incrementFields({invalidATCount:1},n)}iu(r.accessToken,e);continue}if(!(o.homeAccountId in t)){this.performanceClient.incrementFields({skipATMigrateCount:1},n);continue}let s=this.generateCredentialKey(o),c=t[o.homeAccountId];if(!i.accessToken.includes(s))await this.setUserData(s,JSON.stringify(o),n,o.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedATCount:1},n),i.accessToken.push(s);else{let e=this.getAccessTokenCredential(s,n);(!e||o.lastUpdatedAt>e.lastUpdatedAt)&&(await this.setUserData(s,JSON.stringify(o),n,o.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedATCount:1},n))}}this.setTokenKeys(r,n,e),this.setTokenKeys(i,n)}async migrateRefreshTokens(e,t,n){let r=X(this.clientId,this.browserStorage,e);if(r.refreshToken.length===0)return;let i=X(this.clientId,this.browserStorage,3);for(let e of[...r.refreshToken]){this.performanceClient.incrementFields({oldRTCount:1},n);let a=await this.updateOldEntry(e,n),o=a.entry;if(!o){switch(a.removalReason){case Q.TtlExpired:this.performanceClient.incrementFields({ttlExpiredRTCount:1},n);break;case Q.DecryptFailed:this.performanceClient.incrementFields({decryptFailedRTCount:1},n);break;case Q.Expired:this.performanceClient.incrementFields({expiredRTCount:1},n);break;case Q.Invalid:this.performanceClient.incrementFields({invalidRTCount:1},n)}iu(r.refreshToken,e);continue}if(!(o.homeAccountId in t)){this.performanceClient.incrementFields({skipRTMigrateCount:1},n);continue}let s=this.generateCredentialKey(o),c=t[o.homeAccountId];if(!i.refreshToken.includes(s))await this.setUserData(s,JSON.stringify(o),n,o.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedRTCount:1},n),i.refreshToken.push(s);else{let e=this.getRefreshTokenCredential(s,n);(!e||o.lastUpdatedAt>e.lastUpdatedAt)&&(await this.setUserData(s,JSON.stringify(o),n,o.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedRTCount:1},n))}}this.setTokenKeys(r,n,e),this.setTokenKeys(i,n)}trackVersionChanges(e){let t=this.browserStorage.getItem(Bl);t&&(this.logger.info(`1wuc87 ${t}`,e),this.performanceClient.addGlobalFields({previousLibraryVersion:t})),t!==`5.23.0`&&this.setItem(Bl,ru,e)}validateAndParseJson(e){if(!e)return null;try{let t=JSON.parse(e);return t&&typeof t==`object`?t:null}catch{return null}}setItem(e,t,n){let r=[,,,,].fill(0),i=[];for(let a=0;a<=20;a++)try{if(this.browserStorage.setItem(e,t),a>0)for(let e=0;e<=3;e++){let t=r.slice(0,e).reduce((e,t)=>e+t,0);if(t>=a)break;let o=a>t+r[e]?t+r[e]:a;a>t&&r[e]>0&&this.removeAccessTokenKeys(i.slice(t,o),n,e)}break}catch(o){let s=wi(o);if(s.errorCode===`cache_quota_exceeded`&&a<20){if(!i.length)for(let n=0;n<=3;n++)if(e===Gl(this.clientId,n)){let e=JSON.parse(t).accessToken;i.push(...e),r[n]=e.length}else{let e=this.getTokenKeys(n).accessToken;i.push(...e),r[n]=e.length}if(i.length<=a)throw s;this.removeAccessToken(i[a],n,!1)}else throw s}}async setUserData(e,t,n,r,i){let a=[,,,,].fill(0),o=[];for(let s=0;s<=20;s++)try{if(await N(this.browserStorage.setUserData.bind(this.browserStorage),Ln,this.logger,this.performanceClient,n)(e,t,n,r,i),s>0)for(let e=0;e<=3;e++){let t=a.slice(0,e).reduce((e,t)=>e+t,0);if(t>=s)break;let r=s>t+a[e]?t+a[e]:s;s>t&&a[e]>0&&this.removeAccessTokenKeys(o.slice(t,r),n,e)}break}catch(e){let t=wi(e);if(t.errorCode===`cache_quota_exceeded`&&s<20){if(!o.length)for(let e=0;e<=3;e++){let t=this.getTokenKeys(e).accessToken;o.push(...t),a[e]=t.length}if(o.length<=s)throw t;this.removeAccessToken(o[s],n,!1)}else throw t}}getAccount(e,t){this.logger.trace(`1lfvm6`,t);let n=this.browserStorage.getUserData(e);if(!n)return this.removeAccountKeyFromMap(e,t),null;let r=this.validateAndParseJson(n);if(!r||!St(r))return null;let i=Ti.toObject({},r);return this.performanceClient.addFields({accountCachedBy:tc(i.cachedByApiId)},t),i}async setAccount(e,t,n,r){this.logger.trace(`1bz3wr`,t);let i=this.generateAccountKey(vt(e)),a=Date.now().toString();e.lastUpdatedAt=a,e.cachedByApiId=r,await this.setUserData(i,JSON.stringify(e),t,a,n),this.addAccountKeyToMap(i,t),this.performanceClient.addFields({kmsi:n},t)}setAccountKeys(e,t,n=3){e.length===0?this.removeItem(Wl(n)):this.setItem(Wl(n),JSON.stringify(e),t)}getAccountKeys(){return Xl(this.browserStorage)}addAccountKeyToMap(e,t){this.logger.trace(`0rb85k`,t),this.logger.tracePii(`1l9bdo ${e}`,t);let n=this.getAccountKeys();return n.indexOf(e)===-1?(n.push(e),this.setItem(Wl(),JSON.stringify(n),t),this.logger.verbose(`0xia39`,t),!0):(this.logger.verbose(`0161kk`,t),!1)}removeAccountKeyFromMap(e,t){this.logger.trace(`1jpigu`,t),this.logger.tracePii(`1xzspl ${e}`,t);let n=this.getAccountKeys(),r=n.indexOf(e);r>-1?(n.splice(r,1),this.setAccountKeys(n,t)):this.logger.trace(`1dytu2`,t)}removeAccount(e,t){let n=this.getActiveAccount(t);n?.homeAccountId===e.homeAccountId&&n?.environment===e.environment&&this.setActiveAccount(null,t),super.removeAccount(e,t),this.removeAccountKeyFromMap(this.generateAccountKey(e),t),this.browserStorage.getKeys().forEach(t=>{t.includes(e.homeAccountId)&&t.includes(e.environment)&&this.browserStorage.removeItem(t)})}removeIdToken(e,t){super.removeIdToken(e,t);let n=this.getTokenKeys(),r=n.idToken.indexOf(e);r>-1&&(this.logger.info(`05udv9`,t),n.idToken.splice(r,1),this.setTokenKeys(n,t))}removeAccessToken(e,t,n=!0){super.removeAccessToken(e,t),n&&this.removeAccessTokenKeys([e],t)}removeAccessTokenKeys(e,t,n=3){this.logger.trace(`17o18n`,t);let r=this.getTokenKeys(n),i=0;if(e.forEach(e=>{let t=r.accessToken.indexOf(e);t>-1&&(r.accessToken.splice(t,1),i++)}),i>0){this.logger.info(`15i5d5 ${i}`,t),this.setTokenKeys(r,t,n);return}}removeRefreshToken(e,t){super.removeRefreshToken(e,t);let n=this.getTokenKeys(),r=n.refreshToken.indexOf(e);r>-1&&(this.logger.info(`1f4fq3`,t),n.refreshToken.splice(r,1),this.setTokenKeys(n,t))}getTokenKeys(e=3){return X(this.clientId,this.browserStorage,e)}setTokenKeys(e,t,n=3){if(e.idToken.length===0&&e.accessToken.length===0&&e.refreshToken.length===0){this.removeItem(Gl(this.clientId,n));return}this.setItem(Gl(this.clientId,n),JSON.stringify(e),t)}getIdTokenCredential(e,t){let n=this.browserStorage.getUserData(e);if(!n)return this.logger.trace(`1jukz6`,t),this.removeIdToken(e,t),null;let r=this.validateAndParseJson(n);return!r||!Yn(r)?(this.logger.trace(`1jukz6`,t),null):(this.logger.trace(`01ju66`,t),r)}async setIdTokenCredential(e,t,n){this.logger.trace(`13hjll`,t);let r=this.generateCredentialKey(e),i=Date.now().toString();e.lastUpdatedAt=i,await this.setUserData(r,JSON.stringify(e),t,i,n);let a=this.getTokenKeys();a.idToken.indexOf(r)===-1&&(this.logger.info(`07jy92`,t),a.idToken.push(r),this.setTokenKeys(a,t))}getAccessTokenCredential(e,t){let n=this.browserStorage.getUserData(e);if(!n)return this.logger.trace(`0bqvx8`,t),this.removeAccessTokenKeys([e],t),null;let r=this.validateAndParseJson(n);return!r||!Jn(r)?(this.logger.trace(`0bqvx8`,t),null):(this.logger.trace(`1o81rl`,t),r)}async setAccessTokenCredential(e,t,n,r){this.logger.trace(`1pondb`,t);let i=this.generateCredentialKey(e,r),a=Date.now().toString();e.lastUpdatedAt=a,await this.setUserData(i,JSON.stringify(e),t,a,n);let o=this.getTokenKeys(),s=o.accessToken.indexOf(i);s!==-1&&o.accessToken.splice(s,1),this.logger.trace(`1onhey ${s===-1?`added to`:`updated in`}`,t),o.accessToken.push(i),this.setTokenKeys(o,t)}getRefreshTokenCredential(e,t){let n=this.browserStorage.getUserData(e);if(!n)return this.logger.trace(`0jlizt`,t),this.removeRefreshToken(e,t),null;let r=this.validateAndParseJson(n);return!r||!Xn(r)?(this.logger.trace(`0jlizt`,t),null):(this.logger.trace(`0nokxi`,t),r)}async setRefreshTokenCredential(e,t,n){this.logger.trace(`0tcg8d`,t);let r=this.generateCredentialKey(e),i=Date.now().toString();e.lastUpdatedAt=i,await this.setUserData(r,JSON.stringify(e),t,i,n);let a=this.getTokenKeys();a.refreshToken.indexOf(r)===-1&&(this.logger.info(`0eckjs`,t),a.refreshToken.push(r),this.setTokenKeys(a,t))}getAppMetadata(e,t){let n=this.browserStorage.getItem(e);if(!n)return this.logger.trace(`1q101h`,t),null;let r=this.validateAndParseJson(n);return!r||!er(e,r)?(this.logger.trace(`1q101h`,t),null):(this.logger.trace(`19pvg2`,t),r)}setAppMetadata(e,t){this.logger.trace(`0cyma6`,t);let n=$n(e);this.setItem(n,JSON.stringify(e),t)}getServerTelemetry(e,t){let n=this.browserStorage.getItem(e);if(!n)return this.logger.trace(`0jk19c`,t),null;let r=this.validateAndParseJson(n);return!r||!Zn(e,r)?(this.logger.trace(`0jk19c`,t),null):(this.logger.trace(`12jguk`,t),r)}setServerTelemetry(e,t,n){this.logger.trace(`1poh61`,n),this.setItem(e,JSON.stringify(t),n)}getAuthorityMetadata(e,t){let n=this.internalStorage.getItem(e);if(!n)return this.logger.trace(`1r39oe`,t),null;let r=this.validateAndParseJson(n);return r&&tr(e,r)?(this.logger.trace(`1ohvk3`,t),r):null}getAuthorityMetadataKeys(){return this.internalStorage.getKeys().filter(e=>this.isAuthorityMetadata(e))}setWrapperMetadata(e,t){this.internalStorage.setItem($s.WRAPPER_SKU,e),this.internalStorage.setItem($s.WRAPPER_VER,t)}getWrapperMetadata(){return[this.internalStorage.getItem($s.WRAPPER_SKU)||``,this.internalStorage.getItem($s.WRAPPER_VER)||``]}setAuthorityMetadata(e,t,n){this.logger.trace(`07w8n2`,n),this.internalStorage.setItem(e,JSON.stringify(t))}getActiveAccount(e){let t=this.generateCacheKey(le.ACTIVE_ACCOUNT_FILTERS),n=this.browserStorage.getItem(t);if(!n)return this.logger.trace(`08gw0e`,e),null;let r=this.validateAndParseJson(n);return r?(this.logger.trace(`1t3ch7`,e),this.getAccountInfoFilteredBy({homeAccountId:r.homeAccountId,localAccountId:r.localAccountId,tenantId:r.tenantId},e)):(this.logger.trace(`0me1up`,e),null)}setActiveAccount(e,t){let n=this.generateCacheKey(le.ACTIVE_ACCOUNT_FILTERS);if(e){this.logger.verbose(`0rsj80`,t);let r={homeAccountId:e.homeAccountId,localAccountId:e.localAccountId,tenantId:e.tenantId};this.setItem(n,JSON.stringify(r),t)}else this.logger.verbose(`1bp5z5`,t),this.browserStorage.removeItem(n);this.eventHandler.emitEvent(Z.ACTIVE_ACCOUNT_CHANGED,t)}getThrottlingCache(e,t){let n=this.browserStorage.getItem(e);if(!n)return this.logger.trace(`1h4wa6`,t),null;let r=this.validateAndParseJson(n);return!r||!Qn(e,r)?(this.logger.trace(`1h4wa6`,t),null):(this.logger.trace(`0of6n8`,t),r)}setThrottlingCache(e,t,n){this.logger.trace(`0wfgh6`,n),this.setItem(e,JSON.stringify(t),n)}getTemporaryCache(e,t,n){this.logger.trace(`1ordf8`,t);let r=n?this.generateCacheKey(e):e;return this.temporaryCacheStorage.getItem(r)}setTemporaryCache(e,t,n){let r=n?this.generateCacheKey(e):e;this.temporaryCacheStorage.setItem(r,t)}removeItem(e){this.browserStorage.removeItem(e)}removeTemporaryItem(e){this.temporaryCacheStorage.removeItem(e)}getKeys(){return this.browserStorage.getKeys()}clear(e){this.removeAllAccounts(e),this.removeAppMetadata(e),this.temporaryCacheStorage.getKeys().forEach(e=>{(e.indexOf(`msal`)!==-1||e.indexOf(this.clientId)!==-1)&&this.removeTemporaryItem(e)}),this.browserStorage.getKeys().forEach(e=>{(e.indexOf(`msal`)!==-1||e.indexOf(this.clientId)!==-1)&&this.browserStorage.removeItem(e)}),this.internalStorage.clear()}generateCacheKey(e){return Zt.startsWith(e,`msal`)?e:`${Y}.${this.clientId}.${e}`}generateCredentialKey(e,t){let n=e.credentialType===x.REFRESH_TOKEN&&e.familyId||e.clientId,r=e.tokenType&&e.tokenType.toLowerCase()!==C.BEARER.toLowerCase()?e.tokenType.toLowerCase():``,i=[`${Y}.3`,e.homeAccountId,e.environment,e.credentialType,n,e.realm||``,e.target||``,r];return e.additionalCacheKeyComponents&&Object.keys(e.additionalCacheKeyComponents).length>0&&t&&i.push(t),i.join(`|`).toLowerCase()}generateAccountKey(e){let t=e.homeAccountId.split(`.`)[1];return[`${Y}.3`,e.homeAccountId,e.environment,t||e.tenantId||``].join(`|`).toLowerCase()}resetRequestCache(e){this.logger.trace(`0h0ynu`,e),this.removeTemporaryItem(this.generateCacheKey(G.REQUEST_PARAMS)),this.removeTemporaryItem(this.generateCacheKey(G.VERIFIER)),this.removeTemporaryItem(this.generateCacheKey(G.ORIGIN_URI)),this.removeTemporaryItem(this.generateCacheKey(G.URL_HASH)),this.removeTemporaryItem(this.generateCacheKey(G.NATIVE_REQUEST)),this.setInteractionInProgress(!1,void 0)}cacheAuthorizeRequest(e,t,n){this.logger.trace(`1tzef5`,t);let r=cc(JSON.stringify(e));if(this.setTemporaryCache(G.REQUEST_PARAMS,r,!0),n){let e=cc(n);this.setTemporaryCache(G.VERIFIER,e,!0)}}getCachedRequest(e){this.logger.trace(`0uen20`,e);let t=this.getTemporaryCache(G.REQUEST_PARAMS,e,!0);if(!t)throw B(ys,``);let n=this.getTemporaryCache(G.VERIFIER,e,!0),r,i=``;try{r=JSON.parse(V(t)),n&&(i=V(n))}catch(n){throw this.logger.errorPii(`0ewsey ${t}`,e),this.logger.error(`0tvdic ${n}`,e),B(bs,``)}return[r,i]}getCachedNativeRequest(){this.logger.trace(`1yxcdm`,``);let e=this.getTemporaryCache(G.NATIVE_REQUEST,``,!0);return e?this.validateAndParseJson(e)||(this.logger.error(`0rrkip`,``),null):(this.logger.trace(`0mnxd4`,``),null)}isInteractionInProgress(e){let t=this.getInteractionInProgress()?.clientId;return e?t===this.clientId:!!t}getInteractionInProgress(){let e=`${Y}.${G.INTERACTION_STATUS_KEY}`,t=this.getTemporaryCache(e,``,!1);try{return t?JSON.parse(t):null}catch{return this.logger.error(`0jjyys`,``),this.removeTemporaryItem(e),this.resetRequestCache(``),al(window),null}}setInteractionInProgress(e,t=Qs.SIGNIN,n=!1,r=``){let i=`${Y}.${G.INTERACTION_STATUS_KEY}`;if(e){let e=this.getInteractionInProgress();if(e){if(n)this.logger.warning(`1pmscr ${e.clientId} ${e.type}`,r),ul(this.logger,r),this.removeTemporaryItem(i);else throw B(ss,``)}this.setTemporaryCache(i,JSON.stringify({clientId:this.clientId,type:t}),!1)}else!e&&this.getInteractionInProgress()?.clientId===this.clientId&&this.removeTemporaryItem(i)}async hydrateCache(e,t){let n=Wn(e.account.homeAccountId,e.account.environment,e.idToken,this.clientId,e.tenantId),r=Gn(e.account.homeAccountId,e.account.environment,e.accessToken,this.clientId,e.tenantId,e.scopes.join(` `),e.expiresOn?zn(e.expiresOn):0,e.extExpiresOn?zn(e.extExpiresOn):0,V,t.correlationId||``,void 0,e.tokenType,void 0,t.sshKid);t.resource&&(r.resource=t.resource);let i={idToken:n,accessToken:r};return this.saveCacheRecord(i,e.correlationId,O(D(e.idToken,V,e.correlationId)),K.hydrateCache)}async saveCacheRecord(e,t,n,r,i){try{await super.saveCacheRecord(e,t,n,r,i)}catch(e){if(e instanceof Ci&&this.performanceClient&&t)try{let e=this.getTokenKeys();this.performanceClient.addFields({cacheRtCount:e.refreshToken.length,cacheIdCount:e.idToken.length,cacheAtCount:e.accessToken.length},t)}catch{}throw e}}};function ou(e,t,n,r){try{switch(t){case W.LocalStorage:return new eu(e,n,r);case W.SessionStorage:return new tu;case W.MemoryStorage:}}catch(e){n.error(e,``)}return new wl}var su=(e,t,n,r,i,a=di)=>new au(e,{cacheLocation:W.MemoryStorage,cacheRetentionDays:5},ui,t,n,r,i,a);function cu(e,t,n,r,i){return e.verbose(`1yd030`,r),n?t.getAllAccounts(i,r):[]}function lu(e,t,n,r){t.trace(`0u7b90`,r);let i=n.getAccountInfoFilteredBy(e,r);return i?(t.verbose(`0btgll`,r),i):(t.verbose(`0ltaj5`,r),null)}function uu(e,t,n){t.setActiveAccount(e,n)}function du(e,t){return e.getActiveAccount(t)}var fu=`msal.broadcast.event`,pu=class{constructor(e){this.eventCallbacks=new Map,this.logger=e||new vi({},`@azure/msal-browser`,`5.23.0`),typeof BroadcastChannel<`u`&&(this.broadcastChannel=new BroadcastChannel(fu)),this.invokeCrossTabCallbacks=this.invokeCrossTabCallbacks.bind(this)}addEventCallback(e,t,n){if(typeof window<`u`){let r=n||Sl();return this.eventCallbacks.has(r)?(this.logger.error(`1578i0 ${r}`,``),null):(this.eventCallbacks.set(r,[e,t||[]]),this.logger.verbose(`1cnec4 ${r}`,``),r)}return null}removeEventCallback(e){this.eventCallbacks.delete(e),this.logger.verbose(`12zotd ${e}`,``)}emitEvent(e,t,n,r,i){let a={eventType:e,interactionType:n||null,payload:r||null,error:i||null,correlationId:t,timestamp:Date.now()};switch(e){case Z.LOGIN_SUCCESS:case Z.LOGOUT_SUCCESS:case Z.ACTIVE_ACCOUNT_CHANGED:this.broadcastChannel?.postMessage(a)}this.invokeCallbacks(a)}invokeCallbacks(e){this.eventCallbacks.forEach(([t,n],r)=>{(n.length===0||n.includes(e.eventType))&&(this.logger.verbose(`15jpwk ${r} ${e.eventType}`,``),t.apply(null,[e]))})}invokeCrossTabCallbacks(e){let t=e.data;this.invokeCallbacks(t)}subscribeCrossTab(){this.broadcastChannel?.addEventListener(`message`,this.invokeCrossTabCallbacks)}unsubscribeCrossTab(){this.broadcastChannel?.removeEventListener(`message`,this.invokeCrossTabCallbacks)}},mu=class{constructor(e,t,n,r,i,a,o,s,c,l){this.config=e,this.browserStorage=t,this.browserCrypto=n,this.networkClient=this.config.system.networkClient,this.eventHandler=i,this.navigationClient=a,this.platformAuthProvider=c,this.correlationId=s,this.logger=r.clone(nu,ru),this.performanceClient=o,this.tokenBindingKeyManager=l||new El(this.logger,this.performanceClient)}};function hu(e,t,n,r){n.verbose(`0bd1la`,r);let i=e||t||``;return j.getAbsoluteUrl(i,fl(),r)}function $(e,t,n,r,i,a,o=!0){return i.verbose(`1p12tq`,n),o?new Wa({clientId:t,correlationId:n,apiId:e,forceRefresh:a||!1,wrapperSKU:r.getWrapperMetadata()[0],wrapperVer:r.getWrapperMetadata()[1]},r):(i.verbose(`0tajnr`,n),new Ga)}async function gu(e,t,n,r,i,a,o,s,c){let l=s&&s.hasOwnProperty(`instance_aware`)?s.instance_aware:void 0,u={protocolMode:e.system.protocolMode,OIDCOptions:e.auth.OIDCOptions,knownAuthorities:e.auth.knownAuthorities,cloudDiscoveryMetadata:e.auth.cloudDiscoveryMetadata,authorityMetadata:e.auth.authorityMetadata},d=a||e.auth.authority,f=l?.length?l===`true`:e.auth.instanceAware,p=c&&f?e.auth.authority.replace(j.getDomainFromUrl(d,t),c.environment):d,m=sr.generateAuthority(p,o||e.auth.azureCloudOptions),h=await N(dr,Oo,i,n,t)(m,e.system.networkClient,r,u,i,t,n);if(c&&!h.isAlias(c.environment))throw A(Ht,t);return h}async function _u(e,t,n,r,i){if(i)try{e.removeAccount(i,r),n.verbose(`0s4z6h`,r)}catch{n.error(`0mgg1d`,r)}else try{n.verbose(`0zj631`,r),e.clear(r),await t.clearKeystore(r)}catch{n.error(`12ih0c`,r)}}var vu=new Set([C.BEARER,C.POP,C.DPOP,C.SSH]);function yu(e,t){if(!e.sshJwk)throw A(Lt,t);if(!e.sshKid)throw A(Rt,t)}function bu(e,t){if(!e.resourceRequestMethod?.trim()||!e.resourceRequestUri?.trim())throw A(Yt,t)}async function xu(e,t,n,r){switch(e.authenticationScheme){case C.DPOP:return e.platformBroker?{}:e.dpopJkt?{dpopJkt:e.dpopJkt}:{dpopJkt:await t.provisionTokenBindingKey({tokenBindingKeyType:C.DPOP.toLowerCase(),tokenBindingKeyAlgorithm:li.ES256,correlationId:e.correlationId})};case C.POP:if(!e.platformBroker)return{};let i=new Dl(n,r);if(e.popKid)return{reqCnf:i.encodeKid(e.popKid)};let a=new Zi(i,t,r);return{reqCnf:(await N(a.generateCnf.bind(a),Tn,n,r,e.correlationId)(e,n)).reqCnfString};default:return{}}}async function Su(e,t,n,r,i){let a=e.authority||t.auth.authority,o=[...e&&e.scopes||[]],s={...e,correlationId:e.correlationId,authority:a,scopes:o};if(!s.authenticationScheme)s.authenticationScheme=C.BEARER,r.verbose(`1l4fwv`,i);else{if(!vu.has(s.authenticationScheme))throw A(zt,i);switch(s.authenticationScheme){case C.SSH:yu(e,i);break;case C.DPOP:bu(e,i)}r.verbose(`1ecmns ${s.authenticationScheme}`,i)}return s}async function Cu(e,t,n,r,i){let a=await N(Su,uo,i,r,e.correlationId)(e,n,r,i,e.correlationId);return{...e,...a,account:t,forceRefresh:e.forceRefresh||!1}}function wu(e,t){let n,r=e.httpMethod;if(t===k.EAR){if(r&&r!==oe.POST)throw A(Ut,``);n=oe.POST}else n=r||oe.GET;return n}var Tu=class extends mu{initializeLogoutRequest(e){this.logger.verbose(`0546u4`,this.correlationId);let t={correlationId:this.correlationId,...e};if(e){if(e.logoutHint)this.logger.verbose(`12k4l4`,this.correlationId);else if(e.account){let n=e.account.loginHint||this.getLogoutHintFromIdTokenClaims(e.account);n&&(this.logger.verbose(`0d7s8p`,this.correlationId),t.logoutHint=n)}else this.logger.verbose(`0pdtc3`,this.correlationId)}else this.logger.verbose(`07ndze`,this.correlationId);return!e||e.postLogoutRedirectUri!==null?e&&e.postLogoutRedirectUri?(this.logger.verbose(`1vamm6`,t.correlationId),t.postLogoutRedirectUri=j.getAbsoluteUrl(e.postLogoutRedirectUri,fl(),t.correlationId)):this.config.auth.postLogoutRedirectUri===null?this.logger.verbose(`15m5g7`,t.correlationId):this.config.auth.postLogoutRedirectUri?(this.logger.verbose(`1f4xlz`,t.correlationId),t.postLogoutRedirectUri=j.getAbsoluteUrl(this.config.auth.postLogoutRedirectUri,fl(),t.correlationId)):(this.logger.verbose(`17s5rf`,t.correlationId),t.postLogoutRedirectUri=j.getAbsoluteUrl(fl(),fl(),t.correlationId)):this.logger.verbose(`0ljv63`,t.correlationId),t}getLogoutHintFromIdTokenClaims(e){let t=e.idTokenClaims;if(t){if(t.login_hint)return this.logger.verbose(`0u5bmc`,this.correlationId),t.login_hint;this.logger.verbose(`0mvp54`,this.correlationId)}else this.logger.verbose(`1e7bdp`,this.correlationId);return null}async createAuthCodeClient(e){return new Aa(await N(this.getClientConfiguration.bind(this),vo,this.logger,this.performanceClient,this.correlationId)(e),this.performanceClient)}async getClientConfiguration(e){let{serverTelemetryManager:t,requestAuthority:n,requestAzureCloudOptions:r,requestExtraQueryParameters:i,account:a}=e,o=e.authority||await N(gu,`standardInteractionClientGetDiscoveredAuthority`,this.logger,this.performanceClient,this.correlationId)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,n,r,i,a),s=this.config.system.loggerOptions;return{authOptions:{clientId:this.config.auth.clientId,authority:o,clientCapabilities:this.config.auth.clientCapabilities,redirectUri:this.config.auth.redirectUri,isMcp:this.config.auth.isMcp},systemOptions:{tokenRenewalOffsetSeconds:this.config.system.tokenRenewalOffsetSeconds,preventCorsPreflight:!0},loggerOptions:{loggerCallback:s.loggerCallback,piiLoggingEnabled:s.piiLoggingEnabled,logLevel:s.logLevel,correlationId:this.correlationId},cryptoInterface:this.browserCrypto,tokenBindingKeyManager:this.tokenBindingKeyManager,networkInterface:this.networkClient,storageInterface:this.browserStorage,serverTelemetryManager:t,libraryInfo:{sku:H.MSAL_SKU,version:ru,cpu:``,os:``},telemetry:this.config.telemetry}}};async function Eu(e,t,n,r,i,a,o,s){let c=hu(e.redirectUri,n.auth.redirectUri,a,s);new URL(c).origin!==new URL(window.location.href).origin&&(a.warning(`08qbvw`,s),o.addFields({isRedirectUriCrossOrigin:!0},s));let l={interactionType:t},u=ha(r,e&&e.state||``,l,s),d={...await N(Su,uo,a,o,s)({...e,correlationId:s},n,o,a,s),redirectUri:c,state:u,nonce:e.nonce||Rc(),responseMode:n.auth.OIDCOptions.responseMode},f={...d,httpMethod:wu(d,n.system.protocolMode)};if(e.loginHint||e.sid)return f;let p=e.account||i.getActiveAccount(s);return p&&(a.verbose(`1eqlb3`,s),a.verbosePii(`0tf99t ${p.homeAccountId}`,s),f.account=p),f}function Du(e,t,n,r){let i={id:t,...n},a=new URL(e,window.location.origin);if(a.origin!==window.location.origin)throw B(gs,r,`popup_relay_cross_origin`);let o=new URLSearchParams;return o.set(`req`,JSON.stringify(i)),a.hash=o.toString(),a.toString()}async function Ou(e,t,n,r,i){return new Promise((a,o)=>{let s=n.correlationId;t.verbose(`1d05g9`,s),i.addFields({redirectBridgeTimeoutMs:e},s);let{libraryState:c}=_a(V,n.state||``,s),l=c.id,u=window.location.origin,d=!1,f=()=>{window.removeEventListener(`message`,p),clearTimeout(m),clearInterval(h)},p=e=>{if(e.origin!==u||e.source!==r)return;let t=e.data;t&&t.type===`msal:popup-relay-response:v1`&&t.id===l&&(d||(d=!0,f(),t.error?o(B(t.error,s)):t.payload?a(t.payload):o(B(fs,s))))};window.addEventListener(`message`,p);let m=window.setTimeout(()=>{d||(d=!0,f(),o(B(qs,s,`popup_relay_timeout`)))},e),h=window.setInterval(()=>{r.closed&&!d&&(d=!0,f(),o(B(ds,s)))},500)})}function ku(e,t,n){if(!t)return null;try{return _a(e.base64Decode,t,n).libraryState.meta}catch{throw T(Ve,n)}}function Au(e,t,n,r){let i=ai(e);if(!i)throw ii(e)?(n.error(`13pl0s ${t} ${t}`,r),n.errorPii(`1097vx ${t} ${e}`,r),B(is,r)):(n.error(`18h0l1 ${t} ${t}`,r),B(ns,r));return i}function ju(e,t,n,r){if(!e.state)throw B(rs,r);let i=ku(t,e.state,r);if(!i)throw B(as,r);if(i.interactionType!==n)throw B(os,r)}var Mu=class{constructor(e,t,n,r,i){this.authModule=e,this.browserStorage=t,this.authCodeRequest=n,this.logger=r,this.performanceClient=i}async handleCodeResponse(e,t,n){let r;try{r=Na(e,t.state,t.correlationId)}catch(e){throw e instanceof ma&&e.subError===`user_cancelled`?B(ds,t.correlationId):e}return N(this.handleCodeResponseFromServer.bind(this),xn,this.logger,this.performanceClient,t.correlationId)(r,t,n)}async handleCodeResponseFromServer(e,t,n,r=!0){if(this.logger.trace(`0mf2hb`,t.correlationId),this.authCodeRequest.code=e.code,r&&(e.nonce=t.nonce||void 0),e.state=t.state,e.client_info)this.authCodeRequest.clientInfo=e.client_info;else{let e=this.createCcsCredentials(t);e&&(this.authCodeRequest.ccsCredential=e)}return await N(this.authModule.acquireToken.bind(this.authModule),Eo,this.logger,this.performanceClient,t.correlationId)(this.authCodeRequest,n,e)}createCcsCredentials(e){return e.account?{credential:e.account.homeAccountId,type:z.HOME_ACCOUNT_ID}:e.loginHint?{credential:e.loginHint,type:z.UPN}:null}},Nu=[C.POP,C.DPOP,{DPOP_WITH_PROOF:`dpop+proof`}.DPOP_WITH_PROOF];function Pu(e){return e!==void 0&&Nu.includes(e)}function Fu(e,t,n,r,i){return t?{...e,...n&&{pop_method:n},...r&&{pop_url:r},...i&&{pop_nonce:i}}:e}var Iu=`ContentError`,Lu=`PageException`,Ru=`user_switch`,zu=`USER_INTERACTION_REQUIRED`,Bu=`USER_CANCEL`,Vu=`NO_NETWORK`,Hu=`ACCOUNT_UNAVAILABLE`,Uu=`UI_NOT_ALLOWED`,Wu=-2147186943,Gu=class e extends w{constructor(t,n,r,i){super(t,n,r||Yo(t)),Object.setPrototypeOf(this,e.prototype),this.name=`NativeAuthError`,this.ext=i}};function Ku(e){if(e.ext&&e.ext.status&&e.ext.status===`DISABLED`||e.ext&&e.ext.error&&e.ext.error===Wu)return!0;switch(e.errorCode){case Iu:case Lu:return!0;default:return!1}}function qu(e,t,n,r){let i;if(r&&r.status){switch(r.status){case Hu:i=pa(sa,t,Yo(e));break;case zu:i=new R(e,t,n);break;case Bu:i=B(ds,t);break;case Vu:i=B(Cs,t);break;case Uu:i=pa(la,t);break;default:i=new Gu(e,t,n,r)}return i}return i=new Gu(e,t,n,r),i}var Ju=class extends Tu{async acquireToken(e){let t=$(K.acquireTokenSilent_silentFlow,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),n=new Ka(await N(this.getClientConfiguration.bind(this),vo,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:t,requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,account:e.account}),this.performanceClient);this.logger.verbose(`0wa871`,this.correlationId);try{let t=(await N(n.acquireCachedToken.bind(n),bo,this.logger,this.performanceClient,e.correlationId)(e))[0];return this.performanceClient.addFields({fromCache:!0},e.correlationId),t}catch(e){throw e instanceof Xo&&e.errorCode===`crypto_key_not_found`&&this.logger.verbose(`06wena`,this.correlationId),e}}logout(e){this.logger.verbose(`1rkurh`,this.correlationId);let t=this.initializeLogoutRequest(e);return _u(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,t.account)}},Yu=class extends mu{constructor(e,t,n,r,i,a,o,s,c,l,u,d,f){super(e,t,n,r,i,a,s,d,c,f),this.apiId=o,this.accountId=l,this.platformAuthProvider=c,this.nativeStorageManager=u,this.silentCacheClient=new Ju(e,this.nativeStorageManager,n,r,i,a,s,d,c,this.tokenBindingKeyManager);let p=this.platformAuthProvider.getExtensionName();this.skus=Wa.makeExtraSkuString({libraryName:H.MSAL_SKU,libraryVersion:ru,extensionName:p,extensionVersion:this.platformAuthProvider.getExtensionVersion()})}addRequestSKUs(e){e.extraParameters={...e.extraParameters,"x-client-xtra-sku":this.skus}}async acquireToken(e,t){this.logger.trace(`03qeos`,this.correlationId);let n=this.performanceClient.startMeasurement(oo,this.correlationId),r=P(),i=$(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),a;try{a=await this.initializePlatformRequest(e)}catch(e){throw n.add({isNativeBroker:!1}),n.end({success:!1},e),e}try{let e=await this.acquireTokensFromCache(this.accountId,a);return n.add({isNativeBroker:!1}),n.end({success:!0,fromCache:!0}),e}catch(e){if(t===J.AccessToken)throw this.logger.info(`0eitbc`,this.correlationId),n.add({isNativeBroker:!1}),n.end({success:!1}),e;this.logger.info(`0957j1`,this.correlationId)}try{let t=await this.platformAuthProvider.sendMessage(a),o=await this.handleNativeResponse(t,a,r,e.storeInCache);return n.end({success:!0,requestId:o.requestId}),i.clearNativeBrokerErrorCode(),o}catch(e){throw e instanceof Gu&&i.setNativeBrokerErrorCode(e.errorCode),n.end({success:!1},e),this.setBrokerErrorTelemetry(e),e}}setBrokerErrorTelemetry(e){e instanceof w&&this.performanceClient.addFields({isNativeBroker:!0,brokerErrorName:e.name,brokerErrorCode:e.errorCode},this.correlationId)}createSilentCacheRequest(e,t){let n={authority:e.authority,correlationId:this.correlationId,scopes:F.fromString(e.scope,this.correlationId).asArray(),account:t,forceRefresh:!1,resource:e.extraParameters?.resource};return e.attributeTokens&&(n.attributeTokens=e.attributeTokens.split(` `)),n}async acquireTokensFromCache(e,t){if(!e)throw this.logger.warning(`1ndf3e`,this.correlationId),T($e,this.correlationId);let n=this.browserStorage.getBaseAccountInfo({nativeAccountId:e},this.correlationId);if(!n)throw T($e,this.correlationId);try{let e=this.createSilentCacheRequest(t,n),r=await this.silentCacheClient.acquireToken(e),i=this.browserStorage.getIdToken(n,this.correlationId,this.browserStorage.getTokenKeys(),n.tenantId),a=D(i?.secret||``,V,this.correlationId),o=ht(n,void 0,a,i?.secret);return{...r,idToken:i?.secret||``,idTokenClaims:a,account:o}}catch(e){throw e}}async acquireTokenRedirect(e,t,n){this.logger.trace(`0luikq`,this.correlationId);let r=await this.initializePlatformRequest(e),i=n?.navigateToLoginRequestUrl??!0;try{await this.platformAuthProvider.sendMessage(r)}catch(e){if(e instanceof Gu&&($(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled).setNativeBrokerErrorCode(e.errorCode),Ku(e)))throw this.setBrokerErrorTelemetry(e),e}this.browserStorage.setTemporaryCache(G.NATIVE_REQUEST,JSON.stringify({...r,storeInCache:e.storeInCache}),!0);let a={apiId:K.acquireTokenRedirect,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},o=i?j.getAbsoluteUrl(e.redirectStartPage||window.location.href,fl(),this.correlationId):hu(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId);t.end({success:!0}),await this.navigationClient.navigateExternal(o,a)}async handleRedirectPromise(){if(this.logger.trace(`1c5lhw`,this.correlationId),!this.browserStorage.isInteractionInProgress(!0))return this.logger.info(`0le6uv`,this.correlationId),null;let e=this.browserStorage.getCachedNativeRequest();if(!e)return this.logger.verbose(`0a6zjb`,this.correlationId),this.performanceClient?.addFields({errorCode:`no_cached_request`},this.correlationId),null;let{prompt:t,storeInCache:n,...r}=e;t&&this.logger.verbose(`0ac34v`,this.correlationId),this.browserStorage.removeItem(this.browserStorage.generateCacheKey(G.NATIVE_REQUEST));let i=P();try{this.logger.verbose(`003x5a`,this.correlationId);let e=await this.platformAuthProvider.sendMessage(r),t=await this.handleNativeResponse(e,r,i,n);return $(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled).clearNativeBrokerErrorCode(),t}catch(e){throw this.setBrokerErrorTelemetry(e),e}}logout(){return this.logger.trace(`0u2sjm`,this.correlationId),Promise.reject(`Logout not implemented yet`)}async handleNativeResponse(e,t,n,r){this.logger.trace(`1bojln`,this.correlationId);let i=D(e.id_token,V,this.correlationId),a=this.createHomeAccountIdentifier(e,i),o=this.browserStorage.getAccountInfoFilteredBy({nativeAccountId:t.accountId},this.correlationId)?.homeAccountId;if(t.extraParameters?.child_client_id&&e.account.id!==t.accountId)this.logger.info(`1ub1in`,this.correlationId);else if(a!==o&&e.account.id!==t.accountId)throw qu(Ru,this.correlationId);let s=await gu(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,t.authority),c=ya(this.browserStorage,s,a,V,this.correlationId,i,e.client_info,s.getPreferredCache(),i.tid,void 0,e.account.id,this.logger,this.performanceClient);e.expires_in=Number(e.expires_in);let l=await this.generateAuthenticationResult(e,t,i,c,s.canonicalAuthority,n);return await this.cacheAccount(c,O(i)),await this.cacheNativeTokens(e,t,a,i,l.tenantId,n,s.getPreferredCache(),r),l}createHomeAccountIdentifier(e,t){return xt(e.client_info||``,gt.Default,this.logger,this.browserCrypto,this.correlationId,t)}generateScopes(e,t){return t?F.fromString(t,this.correlationId):F.fromString(e,this.correlationId)}async generatePopAccessToken(e,t){if(t.tokenType===C.POP&&t.signPopToken){if(e.shr)return this.logger.trace(`0coqhu`,this.correlationId),e.shr;let n=new Zi(this.browserCrypto,this.tokenBindingKeyManager,this.performanceClient),r={resourceRequestMethod:t.resourceRequestMethod,resourceRequestUri:t.resourceRequestUri,shrClaims:t.shrClaims,shrNonce:t.shrNonce,correlationId:this.correlationId};if(!t.keyId)throw T(st,this.correlationId);return n.signPopToken(e.access_token,t.keyId,r)}return e.access_token}async generateAuthenticationResult(e,t,n,r,i,a){let o=this.addTelemetryFromNativeResponse(e.properties.MATS),s=this.generateScopes(t.scope,e.scope),c=e.account.properties||{},l=c.UID||n.oid||n.sub||``,u=c.TenantId||n.tid||``,d=ht(vt(r),void 0,n,e.id_token);if(d.nativeAccountId!==e.account.id){d.nativeAccountId=e.account.id;let t=u||d.tenantId,n=d.tenantProfiles?.get(t);n&&(n.nativeAccountId=e.account.id)}let f=await this.generatePopAccessToken(e,t),p=t.tokenType===C.POP?C.POP:C.BEARER;return{authority:i,uniqueId:l,tenantId:u,scopes:s.asArray(),account:d,idToken:e.id_token,idTokenClaims:n,accessToken:f,fromCache:o?this.isResponseFromCache(o):!1,expiresOn:Bn(a+e.expires_in),tokenType:p,correlationId:this.correlationId,state:e.state,fromPlatformBroker:!0,...t.extraParameters?.resource&&{resource:t.extraParameters.resource}}}async cacheAccount(e,t){await this.browserStorage.setAccount(e,this.correlationId,t,this.apiId),this.browserStorage.removeAccountContext(vt(e),this.correlationId)}async cacheNativeTokens(e,t,n,r,i,a,o,s){let c=Wn(n,o,e.id_token||``,t.clientId,r.tid||``),l=a+(t.tokenType===C.POP?240:(typeof e.expires_in==`string`?parseInt(e.expires_in,10):e.expires_in)||0),u=this.generateScopes(e.scope,t.scope),d=t.attributeTokens?{attribute_tokens:t.attributeTokens}:void 0,f=Gn(n,o,e.access_token,t.clientId,r.tid||i,u.printScopes(),l,0,V,t.correlationId,void 0,t.tokenType,void 0,t.keyId,d);t.extraParameters?.resource&&(f.resource=t.extraParameters.resource),c&&s?.idToken!==!1&&await this.browserStorage.setIdTokenCredential(c,this.correlationId,O(r));let p={accessToken:f};return this.nativeStorageManager.saveCacheRecord(p,this.correlationId,O(r),this.apiId,s)}getExpiresInValue(e,t){return e===C.POP?240:(typeof t==`string`?parseInt(t,10):t)||0}addTelemetryFromNativeResponse(e){let t=this.getMATSFromResponse(e);return t?(this.performanceClient.addFields({extensionId:this.platformAuthProvider.getExtensionId(),extensionVersion:this.platformAuthProvider.getExtensionVersion(),matsBrokerVersion:t.broker_version,matsAccountJoinOnStart:t.account_join_on_start,matsAccountJoinOnEnd:t.account_join_on_end,matsDeviceJoin:t.device_join,matsPromptBehavior:t.prompt_behavior,matsApiErrorCode:t.api_error_code,matsUiVisible:t.ui_visible,matsSilentCode:t.silent_code,matsSilentBiSubCode:t.silent_bi_sub_code,matsSilentMessage:t.silent_message,matsSilentStatus:t.silent_status,matsHttpStatus:t.http_status,matsHttpEventCount:t.http_event_count},this.correlationId),t):null}getMATSFromResponse(e){if(e)try{return JSON.parse(e)}catch{this.logger.error(`0b3l57`,this.correlationId)}return null}isResponseFromCache(e){return e.is_cached===void 0?(this.logger.verbose(`1okqev`,this.correlationId),!1):!!e.is_cached}async initializePlatformRequest(e){this.logger.trace(`1xdm2a`,this.correlationId);let t=await this.getCanonicalAuthority(e),n=e.skipBrokerClaims&&e.embeddedClientId?void 0:this.config.auth.clientCapabilities,{scopes:r,claims:i,extraParametersNoCache:a,dpopNonce:o}=e,s=new F(r||[],this.correlationId);s.appendScopes(se);let c=Jr(i,n?.length?n:void 0),l=!!e.attributeTokens?.length;this.performanceClient?.addFields({hasAttributeTokens:l},this.correlationId);let u={claims:c,accountId:this.accountId,clientId:this.config.auth.clientId,authority:t.urlString,scope:s.printScopes(),redirectUri:hu(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId),prompt:this.getPrompt(e.prompt),correlationId:this.correlationId,isSts:!1,tokenType:e.authenticationScheme,windowTitleSubstring:document.title,nonce:e.nonce,state:e.state,loginHint:e.loginHint,extraParameters:{...e.extraParameters,...e.resource&&{resource:e.resource}},extendedExpiryToken:!1,keyId:e.popKid,resourceRequestMethod:e.resourceRequestMethod,resourceRequestUri:e.resourceRequestUri,shrClaims:e.shrClaims,shrNonce:e.shrNonce,extraParametersNoCache:Fu(a,Pu(e.authenticationScheme),e.resourceRequestMethod,e.resourceRequestUri,o)};if(l&&(u.attributeTokens=or(e.attributeTokens)),u.signPopToken&&e.popKid)throw B(Bs,this.correlationId);if(this.handleExtraBrokerParams(u,e.embeddedClientId),u.extraParameters=u.extraParameters||{},u.extraParameters.telemetry=U.MATS_TELEMETRY,e.authenticationScheme===C.POP){let t={resourceRequestUri:e.resourceRequestUri,resourceRequestMethod:e.resourceRequestMethod,shrClaims:e.shrClaims,shrNonce:e.shrNonce,correlationId:this.correlationId},n=new Zi(this.browserCrypto,this.tokenBindingKeyManager,this.performanceClient),r;if(u.keyId)r=this.browserCrypto.base64UrlEncode(JSON.stringify({kid:u.keyId})),u.signPopToken=!1;else{let e=await N(n.generateCnf.bind(n),Tn,this.logger,this.performanceClient,this.correlationId)(t,this.logger);r=e.reqCnfString,u.keyId=e.kid,u.signPopToken=!0}u.reqCnf=r}return this.addRequestSKUs(u),u}async getCanonicalAuthority(e){let t=e.authority||this.config.auth.authority,{azureCloudOptions:n,account:r}=e;r&&await gu(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,t,n,void 0,r);let i=new j(t,this.correlationId);return i.validateAsUri(),i}getPrompt(e){switch(this.apiId){case K.ssoSilent:case K.acquireTokenSilent_silentFlow:return this.logger.trace(`12n1y2`,this.correlationId),b.NONE}if(!e){this.logger.trace(`0uid1p`,this.correlationId);return}switch(e){case b.NONE:case b.CONSENT:case b.LOGIN:return this.logger.trace(`0i0hco`,this.correlationId),e;default:throw this.logger.trace(`0w3tpw ${e}`,this.correlationId),B(Rs,this.correlationId)}}handleExtraBrokerParams(t,n){let r=t.extraParameters&&t.extraParameters.hasOwnProperty(`brk_client_id`)&&t.extraParameters.hasOwnProperty(`brk_redirect_uri`)&&t.extraParameters.hasOwnProperty(`client_id`);if(!n&&!r)return;let o=``,s=t.redirectUri;n?(t.redirectUri=this.config.auth.redirectUri,o=n):t.extraParameters&&(t.redirectUri=t.extraParameters[a],o=t.extraParameters[e]);let{[i]:c,[a]:l,[e]:u,...d}=t.extraParameters||{};t.extraParameters={...d,child_client_id:o,child_redirect_uri:s},this.performanceClient?.addFields({embeddedClientId:o,embeddedRedirectUri:s},this.correlationId)}},Xu=new Map([[`e`,`AAD`],[`m`,`MSA`]]);function Zu(e){if(!e)return null;try{let t=(/%(?:[0-9A-Fa-f]{2})/.test(e)?decodeURIComponent(e):e).split(`|`);return t.length<5?null:{accountType:Xu.get(t[0]?.trim()||``)||``,error:t[1]?.trim()||``,subError:t[2]?.trim()||``,cloudInstance:t[3]?.trim()||``,callerDataBoundary:t[4]?.trim()||``}}catch{return null}}function Qu(e,t,n){let r=Zu(e.clientdata);r?.accountType&&n.addFields({accountType:r.accountType},t),r?.error&&n.addFields({serverErrorNo:r.error},t),r?.subError&&n.addFields({serverSubErrorNo:r.subError},t)}async function $u(e,t,n,r,i){let a=ja({...e.auth,authority:t},n,r,i);return Or(a,{sku:H.MSAL_SKU,version:ru,os:``,cpu:``}),e.system.protocolMode!==k.OIDC&&kr(a,e.telemetry.application),n.platformBroker&&(hr(a),i.addFields({isPlatformAuthorizeRequest:!0},n.correlationId),n.authenticationScheme===C.POP&&n.reqCnf&&Yr(a,n.reqCnf)),n.authenticationScheme===C.DPOP&&n.dpopJkt&&a.set(`dpop_jkt`,n.dpopJkt),fr(a,n.correlationId,i),a}async function ed(e,t,n,r,i){if(!n.codeChallenge)throw A(Nt,n.correlationId);let a=await N($u,xo,r,i,n.correlationId)(e,t,n,r,i);return pr(a,de.CODE),Nr(a,n.codeChallenge,_),I(a,{...n.extraQueryParameters,...n.extraParameters}),Ma(t,a)}async function td(e,t,n,r,i){if(!n.earJwk)throw B(Qo,n.correlationId);let a=await $u(e,t,n,r,i);pr(a,de.IDTOKEN_TOKEN_REFRESHTOKEN),ti(a,n.earJwk),Nr(a,n.codeChallenge,_),I(a,{...n.extraParameters});let o=new Map;return I(o,n.extraQueryParameters||{}),Dr(o,n.correlationId),{action:Ma(t,o),fields:Object.fromEntries(a)}}async function nd(e,t,n,r,i,a){let{action:o,fields:s}=await td(t,n,r,i,a);return ad(e,o,s)}async function rd(e,t,n,r,i){let a=await $u(e,t,n,r,i);pr(a,de.CODE),Nr(a,n.codeChallenge,n.codeChallengeMethod||`S256`),I(a,{...n.extraParameters});let o=new Map;return I(o,n.extraQueryParameters||{}),Dr(o,n.correlationId),{action:Ma(t,o),fields:Object.fromEntries(a)}}async function id(e,t,n,r,i,a){let{action:o,fields:s}=await rd(t,n,r,i,a);return ad(e,o,s)}function ad(e,t,n){let r=e.createElement(`form`);return r.method=`post`,r.action=t,Object.keys(n).forEach(t=>{let i=e.createElement(`input`);i.hidden=!0,i.name=t,i.value=n[t],r.appendChild(i)}),e.body.appendChild(r),r}async function od(e,t,n,r,i,a,o,s,c,l){if(s.verbose(`11qcow`,e.correlationId),!l)throw B(Is,e.correlationId);let u=new Dl(s,c),d=new Yu(r,i,u,s,o,r.system.navigationClient,n,c,l,t,a,e.correlationId),{userRequestState:f}=_a(u.base64Decode,e.state,e.correlationId);return N(d.acquireToken.bind(d),oo,s,c,e.correlationId)({...e,state:f,prompt:void 0})}async function sd(e,t,n,r,i,a,o,s,c,l,u,d){if(Sa.removeThrottle(o,i.auth.clientId,e),Qu(t,e.correlationId,u),t.accountId)return N(od,wo,l,u,e.correlationId)(e,t.accountId,r,i,o,s,c,l,u,d);let f=new Mu(a,o,{...e,code:t.code||``,codeVerifier:n},l,u);return await N(f.handleCodeResponse.bind(f),So,l,u,e.correlationId)(t,e,r)}async function cd(e,t,n,r,i,a,o,s,c,l,u){if(Sa.removeThrottle(a,r.auth.clientId,e),Qu(t,e.correlationId,l),Pa(t,e.state,e.correlationId),!t.ear_jwe)throw B($o,e.correlationId);if(!e.earJwk)throw B(Qo,e.correlationId);let d=JSON.parse(await N(Wc,qo,c,l,e.correlationId)(e.earJwk,t.ear_jwe));if(d.accountId)return N(od,wo,c,l,e.correlationId)(e,d.accountId,n,r,a,o,s,c,l,u);let f=new va(r.auth.clientId,a,new Dl(c,l),c,l,null,null,new El(c,l));f.validateTokenResponse(d,e.correlationId);let p={code:``,state:e.state,nonce:e.nonce,client_info:d.client_info,cloud_graph_host_name:d.cloud_graph_host_name,cloud_instance_host_name:d.cloud_instance_host_name,cloud_instance_name:d.cloud_instance_name,msgraph_host:d.msgraph_host};return await N(f.handleServerTokenResponse.bind(f),En,c,l,e.correlationId)(d,i,P(),e,n,p,void 0,void 0,void 0,void 0)}var ld=32;async function ud(e,t,n){let r=M(dd,Io,t,e,n)(e,t,n);return{verifier:r,challenge:await N(fd,Lo,t,e,n)(r,e,t,n)}}function dd(e,t,n){try{let r=new Uint8Array(ld);return M(Ic,zo,t,e,n)(r),sc(r)}catch{throw B(Zo,n)}}async function fd(e,t,n,r){try{let i=await N(Fc,Ro,n,t,r)(e);return sc(new Uint8Array(i))}catch{throw B(Zo,r)}}var pd=class e{navigateInternal(t,n){return e.defaultNavigateWindow(t,n)}navigateExternal(t,n){return e.defaultNavigateWindow(t,n)}static defaultNavigateWindow(e,t){return t.noHistory?window.location.replace(e):window.location.assign(e),new Promise((e,n)=>{setTimeout(()=>{n(B(qs,``,`failed_to_redirect`))},t.timeout)})}},md=1,hd=100,gd=class{async sendGetRequestAsync(e,t){let n,r={},i=0,a=vd(t);try{n=await fetch(e,{method:Zs.GET,headers:a})}catch(e){throw wa(B(window.navigator.onLine?Ts:Cs,``),void 0,void 0,e)}r=yd(n.headers);try{return i=n.status,{headers:r,body:await n.json(),status:i}}catch(e){throw wa(B(Es,``),i,r,e)}}async sendPostRequestAsync(e,t){let n=t&&t.body||``,r=vd(t),i=t?.correlationId,a=t?.performanceClient,o,s;for(let t=1;t<=2;t++)try{o=await fetch(e,{method:Zs.POST,headers:r,body:n});break}catch(e){if(s=e,!_d(s,t))throw wa(B(window.navigator.onLine===!1?Cs:ws,i||``),void 0,void 0,s);await new Promise(e=>setTimeout(e,hd)),i&&a?.incrementFields({fetchRetryCount:1},i)}if(!o)throw wa(B(window.navigator.onLine===!1?Cs:ws,i||``),void 0,void 0,s);let c=0,l={};l=yd(o.headers);try{return c=o.status,{headers:l,body:await o.json(),status:c}}catch(e){throw wa(B(Es,i||``),c,l,e)}}};function _d(e,t){return t<=md&&window.navigator.onLine!==!1&&e.name!==`AbortError`}function vd(e){try{let t=new Headers;if(!(e&&e.headers))return t;let n=e.headers;return Object.entries(n).forEach(([e,n])=>{t.append(e,n)}),t}catch(e){throw wa(B(Ws,``),void 0,void 0,e)}}function yd(e){try{let t={};return e.forEach((e,n)=>{t[n]=e}),t}catch{throw B(Gs,``)}}var bd=3e4;function xd({auth:e,cache:t,system:n,experimental:r,telemetry:i},a){let o={clientId:``,authority:`${c}`,knownAuthorities:[],cloudDiscoveryMetadata:``,authorityMetadata:``,redirectUri:typeof window<`u`&&window.location?window.location.href.split(`?`)[0].split(`#`)[0]:``,postLogoutRedirectUri:``,popupRelayUri:``,clientCapabilities:[],OIDCOptions:{responseMode:fe.FRAGMENT,defaultScopes:[p,m,h]},azureCloudOptions:{azureCloudInstance:ln.None,tenant:``},instanceAware:!1,isMcp:!1,verifySSO:!1},s={cacheLocation:W.SessionStorage,cacheRetentionDays:5},l={loggerCallback:()=>{},logLevel:L.Info,piiLoggingEnabled:!1},u={...ki,loggerOptions:l,networkClient:a?new gd:qa,navigationClient:new pd,popupBridgeTimeout:n?.popupBridgeTimeout||6e4,iframeBridgeTimeout:n?.iframeBridgeTimeout||1e4,redirectNavigationTimeout:bd,allowRedirectInIframe:!1,navigatePopups:!0,allowPlatformBroker:!1,nativeBrokerHandshakeTimeout:n?.nativeBrokerHandshakeTimeout||2e3,protocolMode:k.AAD,serverTelemetryEnabled:!1,...n,loggerOptions:n?.loggerOptions||l},d={application:{appName:``,appVersion:``},client:new Oi},f={iframeTimeoutTelemetry:!1,allowPlatformBrokerWithDOM:!1};if(n?.protocolMode!==k.OIDC&&e?.OIDCOptions&&new vi(u.loggerOptions,nu,ru).warning(JSON.stringify(A(Bt,``)),``),n?.protocolMode&&n.protocolMode===k.OIDC&&u?.allowPlatformBroker)throw A(Vt,``);return{auth:{...o,...e,OIDCOptions:{...o.OIDCOptions,...e?.OIDCOptions}},cache:{...s,...t},system:u,experimental:{...f,...r},telemetry:{...d,...i}}}var Sd=class e{constructor(e,t,n,r){this.logger=e,this.handshakeTimeoutMs=t,this.extensionId=r,this.resolvers=new Map,this.handshakeResolvers=new Map,this.messageChannel=new MessageChannel,this.windowListener=this.onWindowMessage.bind(this),this.performanceClient=n,this.handshakeEvent=this.performanceClient.startMeasurement(Mo),this.platformAuthType=U.PLATFORM_EXTENSION_PROVIDER}async sendMessage(e){this.logger.trace(`0on4p2 ${this.platformAuthType}`,e.correlationId);let t={...e};delete t.resourceRequestMethod,delete t.resourceRequestUri;let n={method:Xs.GetToken,request:t},r={channel:U.CHANNEL_ID,extensionId:this.extensionId,responseId:Rc(),body:n};this.logger.trace(`1qadfi ${this.platformAuthType}`,e.correlationId),this.logger.tracePii(`1xm533 ${this.platformAuthType} ${JSON.stringify(r)}`,e.correlationId),this.messageChannel.port1.postMessage(r);let i=await new Promise((e,t)=>{this.resolvers.set(r.responseId,{resolve:e,reject:t})});return this.validatePlatformBrokerResponse(i)}static async createProvider(t,n,r,i){t.trace(`15zfnw`,i);try{let a=new e(t,n,r,U.PREFERRED_EXTENSION_ID);return await a.sendHandshakeRequest(i),a}catch{let a=new e(t,n,r);return await a.sendHandshakeRequest(i),a}}async sendHandshakeRequest(e){this.logger.trace(`1dpg9o ${this.platformAuthType}`,e),window.addEventListener(`message`,this.windowListener,!1);let t={channel:U.CHANNEL_ID,extensionId:this.extensionId,responseId:Rc(),body:{method:Xs.HandshakeRequest}};return this.handshakeEvent.add({extensionId:this.extensionId,extensionHandshakeTimeoutMs:this.handshakeTimeoutMs}),this.messageChannel.port1.onmessage=e=>{this.onChannelMessage(e)},window.postMessage(t,window.origin,[this.messageChannel.port2]),new Promise((e,n)=>{this.handshakeResolvers.set(t.responseId,{resolve:e,reject:n}),this.timeoutId=window.setTimeout(()=>{window.removeEventListener(`message`,this.windowListener,!1),this.messageChannel.port1.close(),this.messageChannel.port2.close(),this.handshakeEvent.end({extensionHandshakeTimedOut:!0,success:!1}),n(B(Ps,``)),this.handshakeResolvers.delete(t.responseId)},this.handshakeTimeoutMs)})}onWindowMessage(e){let t=Sl();if(this.logger.trace(`0jpn5u ${this.platformAuthType}`,t),e.source!==window)return;let n=e.data;if(n.channel&&n.channel===U.CHANNEL_ID&&!(n.extensionId&&n.extensionId!==this.extensionId)&&n.body.method===Xs.HandshakeRequest){let e=this.handshakeResolvers.get(n.responseId);if(!e){this.logger.trace(`07buhm ${this.platformAuthType} ${n.responseId}`,t);return}this.logger.verbose(n.extensionId?`0xrkug ${n.extensionId}`:`No extension installed`,t),clearTimeout(this.timeoutId),this.messageChannel.port1.close(),this.messageChannel.port2.close(),window.removeEventListener(`message`,this.windowListener,!1),this.handshakeEvent.end({success:!1,extensionInstalled:!1}),e.reject(B(Fs,``))}}onChannelMessage(e){let t=Sl();this.logger.trace(`1py8yf ${this.platformAuthType}`,t);let n=e.data,r=this.resolvers.get(n.responseId),i=this.handshakeResolvers.get(n.responseId);try{let e=n.body.method;if(e===Xs.Response){if(!r)return;let e=n.body.response;if(this.logger.trace(`19hpgm ${this.platformAuthType}`,t),this.logger.tracePii(`179a24 ${this.platformAuthType} ${JSON.stringify(e)}`,t),e.status!==`Success`)r.reject(qu(e.code,t,e.description,e.ext));else if(e.result)e.result.code&&e.result.description?r.reject(qu(e.result.code,t,e.result.description,e.result.ext)):r.resolve(e.result);else throw je(Ct,t,`Event does not contain result.`);this.resolvers.delete(n.responseId)}else if(e===Xs.HandshakeResponse){if(!i){this.logger.trace(`082qnt ${this.platformAuthType} ${n.responseId}`,t);return}clearTimeout(this.timeoutId),window.removeEventListener(`message`,this.windowListener,!1),this.extensionId=n.extensionId,this.extensionVersion=n.body.version,this.logger.verbose(`0yf5ib ${this.platformAuthType} ${this.extensionId}`,t),this.handshakeEvent.end({extensionInstalled:!0,success:!0}),i.resolve(),this.handshakeResolvers.delete(n.responseId)}}catch(n){this.logger.error(`0xf978`,t),this.logger.errorPii(`04i99o ${n}`,t),this.logger.errorPii(`0xdvsy ${e}`,t),r?r.reject(n):i&&i.reject(n)}}validatePlatformBrokerResponse(e){if(e.hasOwnProperty(`access_token`)&&e.hasOwnProperty(`id_token`)&&e.hasOwnProperty(`client_info`)&&e.hasOwnProperty(`account`)&&e.hasOwnProperty(`scope`)&&e.hasOwnProperty(`expires_in`))return e;throw je(Ct,``,`Response missing expected properties.`)}getExtensionId(){return this.extensionId}getExtensionVersion(){return this.extensionVersion}getExtensionName(){return this.getExtensionId()===U.PREFERRED_EXTENSION_ID?`chrome`:this.getExtensionId()?.length?`unknown`:void 0}},Cd=class e{constructor(e,t,n){this.logger=e,this.performanceClient=t,this.correlationId=n,this.platformAuthType=U.PLATFORM_DOM_PROVIDER}static async createProvider(t,n,r){if(t.trace(`12mj4a`,r),window.navigator?.platformAuthentication&&(await window.navigator.platformAuthentication.getSupportedContracts(U.MICROSOFT_ENTRA_BROKERID))?.includes(U.PLATFORM_DOM_APIS))return t.trace(`1h5q1r`,r),new e(t,n,r)}getExtensionId(){return U.MICROSOFT_ENTRA_BROKERID}getExtensionVersion(){return``}getExtensionName(){return U.DOM_API_NAME}async sendMessage(e){this.logger.trace(`02bcil ${this.platformAuthType}`,e.correlationId);try{let t=this.initializePlatformDOMRequest(e),n=await window.navigator.platformAuthentication.executeGetToken(t);return this.validatePlatformBrokerResponse(n,e.correlationId)}catch(t){throw this.logger.error(`11im7g ${this.platformAuthType}`,e.correlationId),t}}initializePlatformDOMRequest(e){this.logger.trace(`15d6yv ${this.platformAuthType}`,e.correlationId);let{accountId:t,clientId:n,authority:r,scope:i,redirectUri:a,correlationId:o,state:s,preferBinding:c,enclave:l,reqCnf:u,extraParametersNoCache:d,extraParameters:f,...p}=e;delete p.resourceRequestMethod,delete p.resourceRequestUri;let m=this.getDOMExtraParams(p,o);return{accountId:t,brokerId:this.getExtensionId(),authority:r,clientId:n,correlationId:o||this.correlationId,extraParameters:{...f,...m},isSecurityTokenService:!1,redirectUri:a,scope:i,state:s,preferBinding:c,enclave:l,requestConfirmation:u,extraParametersNoCache:d}}validatePlatformBrokerResponse(e,t){if(e.hasOwnProperty(`isSuccess`)){if(e.hasOwnProperty(`accessToken`)&&e.hasOwnProperty(`idToken`)&&e.hasOwnProperty(`clientInfo`)&&e.hasOwnProperty(`account`)&&e.hasOwnProperty(`scopes`)&&e.hasOwnProperty(`expiresIn`))return this.logger.trace(`0h4vei ${this.platformAuthType}`,t),this.convertToPlatformBrokerResponse(e,t);if(e.hasOwnProperty(`error`)){let n=e;if(n.isSuccess===!1&&n.error&&n.error.code)throw this.logger.trace(`0g92vm ${this.platformAuthType}`,t),qu(n.error.code,t,n.error.description,{error:parseInt(n.error.errorCode),protocol_error:n.error.protocolError,status:n.error.status,properties:n.error.properties})}}throw je(Ct,t,`Response missing expected properties.`)}convertToPlatformBrokerResponse(e,t){this.logger.trace(`14913t ${this.platformAuthType}`,t);let n=e.properties||{},r=this.parseDOMBoolean(n.binding_attested,`binding_attested`,t);return{access_token:e.accessToken,id_token:e.idToken,client_info:e.clientInfo,account:e.account,expires_in:e.expiresIn,scope:e.scopes,state:e.state||``,properties:n,extendedLifetimeToken:e.extendedLifetimeToken??!1,shr:e.proofOfPossessionPayload,token_type:n.token_type,DPoP:n.dpop_proof,binding_attested:r}}parseDOMBoolean(e,t,n){if(e!==void 0){if(e===`true`||e===`false`)return e===`true`;throw je(Ct,n,`Platform broker returned invalid ${t} value.`)}}getDOMExtraParams(e,t){try{let t={};for(let[n,r]of Object.entries(e))r&&(t[n]=typeof r==`object`?JSON.stringify(r):String(r));return t}catch(e){return this.logger.error(`0eu9o3 ${this.platformAuthType}`,t),this.logger.errorPii(`17rpl5 ${this.platformAuthType} ${e}`,t),{}}}};async function wd(e,t,n,r,i){e.trace(`134j0v`,n),e.trace(`04c81g ${i}`,n);let a;try{i&&(a=await Cd.createProvider(e,t,n)),a||=(e.trace(`0l3na8`,n),await Sd.createProvider(e,r||2e3,t,n))}catch(t){e.trace(`0icbd7`,t)}return a}function Td(e,t,n,r,i){if(t.trace(`0uko3r`,n),!e.system.allowPlatformBroker&&e.experimental.allowPlatformBrokerWithDOM)throw A(Wt,``);if(!e.system.allowPlatformBroker)return t.trace(`04hozs`,n),!1;if(!r)return t.trace(`0kvv1r`,n),!1;if(i)switch(i){case C.BEARER:case C.POP:return t.trace(`18tev1`,n),!0;default:return t.trace(`1dd2nh`,n),!1}return!0}var Ed=class extends Tu{constructor(e,t,n,r,i,a,o,s,c,l,u,d){super(e,t,n,r,i,a,o,c,l,d),this.nativeStorage=s,this.eventHandler=i,this.waitForPopupResponseHook=u}acquireToken(e,t){let n;try{if(n={popupName:this.generatePopupName(e.scopes||se,e.authority||this.config.auth.authority),popupWindowAttributes:e.popupWindowAttributes||{},popupWindowParent:e.popupWindowParent??window},this.performanceClient.addFields({isAsyncPopup:!this.config.system.navigatePopups},this.correlationId),this.config.system.navigatePopups){let r={...e,httpMethod:wu(e,this.config.system.protocolMode)};return this.logger.verbose(`1f9ok3`,this.correlationId),n.popup=this.openSizedPopup(`about:blank`,n),this.acquireTokenPopupAsync(r,n,t)}return this.logger.verbose(`162h4u`,this.correlationId),this.acquireTokenPopupAsync(e,n,t)}catch(e){return Promise.reject(e)}}logout(e){try{this.logger.verbose(`068rup`,this.correlationId);let t=this.initializeLogoutRequest(e),n={popupName:this.generateLogoutPopupName(t),popupWindowAttributes:e?.popupWindowAttributes||{},popupWindowParent:e?.popupWindowParent??window},r=e&&e.authority,i=e&&e.mainWindowRedirectUri;return this.config.system.navigatePopups?(this.logger.verbose(`1a28da`,this.correlationId),n.popup=this.openSizedPopup(`about:blank`,n),this.logoutPopupAsync(t,n,r,i)):(this.logger.verbose(`1phd8u`,this.correlationId),this.logoutPopupAsync(t,n,r,i))}catch(e){return Promise.reject(e)}}async acquireTokenPopupAsync(e,t,n){this.logger.verbose(`1g77pg`,this.correlationId);let r=await N(Eu,yo,this.logger,this.performanceClient,this.correlationId)(e,q.Popup,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);return t.popup&&xl(r.authority),r.platformBroker=Td(this.config,this.logger,this.correlationId,this.platformAuthProvider,e.authenticationScheme),this.config.system.protocolMode===k.EAR?this.executeEarFlow(r,t,n):this.executeCodeFlow(r,t,n)}async executeCodeFlow(e,t,n){let r=e.correlationId,i=$(K.acquireTokenPopup,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),a=n||await N(ud,`generatePkceCodes`,this.logger,this.performanceClient,r)(this.performanceClient,this.logger,r),o=await xu(e,this.tokenBindingKeyManager,this.logger,this.performanceClient),s={...e,codeChallenge:a.challenge,...o};try{let n=await N(this.createAuthCodeClient.bind(this),_o,this.logger,this.performanceClient,r)({serverTelemetryManager:i,requestAuthority:s.authority,requestAzureCloudOptions:s.azureCloudOptions,requestExtraQueryParameters:s.extraQueryParameters,account:s.account});if(s.httpMethod===oe.POST)return await this.executeCodeFlowWithPost(s,t,n,a.verifier);{let i=await N(ed,bn,this.logger,this.performanceClient,r)(this.config,n.authority,s,this.logger,this.performanceClient),o=this.config.auth.popupRelayUri,c=o?Du(o,this.getRelayStateId(e.state,r),{method:`GET`,url:i},r):i,l=this.initiateAuthRequest(c,t);this.eventHandler.emitEvent(Z.POPUP_OPENED,r,q.Popup,{popupWindow:l},null);let u=await this.waitForPopupResponse(e,l,t.popupWindowParent),d=M(Au,Do,this.logger,this.performanceClient,this.correlationId)(u,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);return await N(sd,To,this.logger,this.performanceClient,r)(s,d,a.verifier,K.acquireTokenPopup,this.config,n,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}}catch(e){throw t.popup?.close(),e instanceof w&&(e.correlationId=this.correlationId,i.cacheFailedRequest(e)),e}}async executeEarFlow(e,t,n){let{correlationId:r,authority:i,azureCloudOptions:a,extraQueryParameters:o,account:s}=e,c=await N(gu,ao,this.logger,this.performanceClient,r)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,i,a,o,s),l=await N(Hc,Ko,this.logger,this.performanceClient,r)(),u=n||await N(ud,`generatePkceCodes`,this.logger,this.performanceClient,r)(this.performanceClient,this.logger,r),d=await xu(e,this.tokenBindingKeyManager,this.logger,this.performanceClient),f={...e,earJwk:l,codeChallenge:u.challenge,...d},p=await this.openPostFormPopup(f,c,t,r,!0),m=await N(this.waitForPopupResponse.bind(this),go,this.logger,this.performanceClient,r)(f,p,t.popupWindowParent),h=M(Au,Do,this.logger,this.performanceClient,this.correlationId)(m,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);if(!h.ear_jwe&&h.code){let t=await N(this.createAuthCodeClient.bind(this),_o,this.logger,this.performanceClient,r)({serverTelemetryManager:$(K.acquireTokenPopup,this.config.auth.clientId,r,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account,authority:c});return N(sd,To,this.logger,this.performanceClient,r)(f,h,u.verifier,K.acquireTokenPopup,this.config,t,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}return N(cd,Co,this.logger,this.performanceClient,r)(f,h,K.acquireTokenPopup,this.config,c,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async executeCodeFlowWithPost(e,t,n,r){let i=e.correlationId,a=await N(gu,ao,this.logger,this.performanceClient,i)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger),o=await this.openPostFormPopup(e,a,t,i,!1),s=await N(this.waitForPopupResponse.bind(this),go,this.logger,this.performanceClient,i)(e,o,t.popupWindowParent),c=M(Au,Do,this.logger,this.performanceClient,this.correlationId)(s,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);return N(sd,To,this.logger,this.performanceClient,i)(e,c,r,K.acquireTokenPopup,this.config,n,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async logoutPopupAsync(e,t,n,r){this.logger.verbose(`0b7yrk`,this.correlationId),this.eventHandler.emitEvent(Z.LOGOUT_START,this.correlationId,q.Popup,e);let i=$(K.logoutPopup,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{await _u(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,e.account);let a=await N(this.createAuthCodeClient.bind(this),_o,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:i,requestAuthority:n,account:e.account||void 0});try{a.authority.endSessionEndpoint}catch{if(e.account?.homeAccountId&&e.postLogoutRedirectUri&&a.authority.protocolMode===k.OIDC){if(this.eventHandler.emitEvent(Z.LOGOUT_SUCCESS,e.correlationId,q.Popup,e),r){let e={apiId:K.logoutPopup,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},t=j.getAbsoluteUrl(r,fl(),this.correlationId);await this.navigationClient.navigateInternal(t,e)}t.popup?.close();return}}e.state=ha(this.browserCrypto,e.state||``,{interactionType:q.Popup},e.correlationId);let o=a.getLogoutUri(e);this.eventHandler.emitEvent(Z.LOGOUT_SUCCESS,e.correlationId,q.Popup,e);let s=this.config.auth.popupRelayUri,c=s?Du(s,this.getRelayStateId(e.state||``,this.correlationId),{method:`GET`,url:o},this.correlationId):o,l=this.openPopup(c,t);if(this.eventHandler.emitEvent(Z.POPUP_OPENED,e.correlationId,q.Popup,{popupWindow:l},null),await this.waitForPopupResponse(e,l,t.popupWindowParent).catch(()=>{}),r){let e={apiId:K.logoutPopup,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},t=j.getAbsoluteUrl(r,fl(),this.correlationId);this.logger.verbose(`0qcur2`,this.correlationId),this.logger.verbosePii(`0oj7lk ${t}`,this.correlationId),await this.navigationClient.navigateInternal(t,e)}else this.logger.verbose(`03zgcf`,this.correlationId)}catch(e){throw t.popup?.close(),e instanceof w&&(e.correlationId=this.correlationId,i.cacheFailedRequest(e)),this.eventHandler.emitEvent(Z.LOGOUT_FAILURE,this.correlationId,q.Popup,null,e),this.eventHandler.emitEvent(Z.LOGOUT_END,this.correlationId,q.Popup),e}this.eventHandler.emitEvent(Z.LOGOUT_END,this.correlationId,q.Popup)}initiateAuthRequest(e,t){if(e)return this.logger.infoPii(`1kcr9k ${e}`,this.correlationId),this.openPopup(e,t);throw this.logger.error(`1l7hyp`,this.correlationId),B(ts,this.correlationId)}openPopup(e,t){try{let n;if(t.popup?(n=t.popup,this.logger.verbosePii(`0cgeo7 ${e}`,this.correlationId),n.location.assign(e)):t.popup===void 0&&(this.logger.verbosePii(`0c2awd ${e}`,this.correlationId),n=this.openSizedPopup(e,t)),!n)throw B(us,this.correlationId);try{n.document.title=`Microsoft Authentication`}catch(e){typeof DOMException<`u`&&e instanceof DOMException&&e.name===`SecurityError`||this.logger.verbose(`1s1yfs`,this.correlationId)}return n.focus&&n.focus(),this.currentWindow=n,n}catch(e){throw this.logger.error(`0dxfb9 ${e.message}`,this.correlationId),B(ls,this.correlationId)}}openSizedPopup(e,{popupName:t,popupWindowAttributes:n,popupWindowParent:r}){let i=r.screenLeft?r.screenLeft:r.screenX,a=r.screenTop?r.screenTop:r.screenY,o=r.innerWidth||document.documentElement.clientWidth||document.body.clientWidth,s=r.innerHeight||document.documentElement.clientHeight||document.body.clientHeight,c=n.popupSize?.width,l=n.popupSize?.height,u=n.popupPosition?.top,d=n.popupPosition?.left;return(!c||c<0||c>o)&&(this.logger.verbose(`08vfmo`,this.correlationId),c=H.POPUP_WIDTH),(!l||l<0||l>s)&&(this.logger.verbose(`09cxa0`,this.correlationId),l=H.POPUP_HEIGHT),(!u||u<0||u>s)&&(this.logger.verbose(`1qh4wo`,this.correlationId),u=Math.max(0,s/2-H.POPUP_HEIGHT/2+a)),(!d||d<0||d>o)&&(this.logger.verbose(`1sz3en`,this.correlationId),d=Math.max(0,o/2-H.POPUP_WIDTH/2+i)),r.open(e,t,`width=${c}, height=${l}, top=${u}, left=${d}, scrollbars=yes`)}generatePopupName(e,t){return`${H.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${e.join(`-`)}.${t}.${this.correlationId}`}generateLogoutPopupName(e){let t=e.account&&e.account.homeAccountId;return`${H.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${t}.${this.correlationId}`}getRelayStateId(e,t){return _a(V,e,t).libraryState.id}async openPostFormPopup(e,t,n,r,i){let a=this.config.auth.popupRelayUri;if(a){let o=await(i?td:rd)(this.config,t,e,this.logger,this.performanceClient),s=Du(a,this.getRelayStateId(e.state,r),{method:`POST`,action:o.action,fields:o.fields},r);return this.initiateAuthRequest(s,n)}let o=n.popup||this.openPopup(`about:blank`,n);return(await(i?nd:id)(o.document,this.config,t,e,this.logger,this.performanceClient)).submit(),o}async waitForPopupResponse(e,t,n){return this.config.auth.popupRelayUri?Ou(this.config.system.popupBridgeTimeout,this.logger,e,t,this.performanceClient):this.waitForPopupResponseHook?this.waitForPopupResponseHook(e,t,n):dl(this.config.system.popupBridgeTimeout,this.logger,e,this.performanceClient)}};function Dd(){if(typeof window>`u`||window.performance===void 0||typeof window.performance.getEntriesByType!=`function`)return;let e=window.performance.getEntriesByType(`navigation`);return(e.length?e[0]:void 0)?.type}var Od=class extends Tu{constructor(e,t,n,r,i,a,o,s,c,l,u){super(e,t,n,r,i,a,o,c,l,u),this.nativeStorage=s}async acquireToken(e){let t=await N(Eu,yo,this.logger,this.performanceClient,this.correlationId)(e,q.Redirect,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);t.platformBroker=Td(this.config,this.logger,this.correlationId,this.platformAuthProvider,e.authenticationScheme);let n,r=new Promise((e,t)=>{n=t}),i=e=>{e.persisted&&(this.logger.verbose(`0udvtt`,this.correlationId),this.browserStorage.resetRequestCache(this.correlationId),this.eventHandler.emitEvent(Z.RESTORE_FROM_BFCACHE,this.correlationId,q.Redirect),n(B(ds,this.correlationId)))},a=this.getRedirectStartPage(e.redirectStartPage);this.logger.verbosePii(`0zao0a ${a}`,this.correlationId),this.browserStorage.setTemporaryCache(G.ORIGIN_URI,a,!0),window.addEventListener(`pageshow`,i);try{let e=this.config.system.protocolMode===k.EAR?this.executeEarFlow(t):this.executeCodeFlow(t);await Promise.race([e,r])}catch(e){throw e instanceof w&&(e.correlationId=this.correlationId),window.removeEventListener(`pageshow`,i),e}}async executeCodeFlow(e){let t=e.correlationId,n=$(K.acquireTokenRedirect,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),r=await N(ud,Fo,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),i=await xu(e,this.tokenBindingKeyManager,this.logger,this.performanceClient),a={...e,codeChallenge:r.challenge,...i};this.browserStorage.cacheAuthorizeRequest(a,this.correlationId,r.verifier);try{if(a.httpMethod===oe.POST)return await this.executeCodeFlowWithPost(a);{let t=await N(this.createAuthCodeClient.bind(this),_o,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:n,requestAuthority:a.authority,requestAzureCloudOptions:a.azureCloudOptions,requestExtraQueryParameters:a.extraQueryParameters,account:a.account}),r=await N(ed,bn,this.logger,this.performanceClient,e.correlationId)(this.config,t.authority,a,this.logger,this.performanceClient);return await this.initiateAuthRequest(r)}}catch(e){throw e instanceof w&&(e.correlationId=this.correlationId,n.cacheFailedRequest(e)),e}}async executeEarFlow(e){let{correlationId:t,authority:n,azureCloudOptions:r,extraQueryParameters:i,account:a}=e,o=await N(gu,ao,this.logger,this.performanceClient,t)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,n,r,i,a),s=await N(Hc,Ko,this.logger,this.performanceClient,t)(),c=await N(ud,Fo,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),l=await xu(e,this.tokenBindingKeyManager,this.logger,this.performanceClient),u={...e,earJwk:s,codeChallenge:c.challenge,...l};return this.browserStorage.cacheAuthorizeRequest(u,this.correlationId,c.verifier),(await nd(document,this.config,o,u,this.logger,this.performanceClient)).submit(),new Promise((e,t)=>{setTimeout(()=>{t(B(qs,``,`failed_to_redirect`))},this.config.system.redirectNavigationTimeout)})}async executeCodeFlowWithPost(e){let t=e.correlationId,n=await N(gu,ao,this.logger,this.performanceClient,t)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger);return this.browserStorage.cacheAuthorizeRequest(e,this.correlationId),(await id(document,this.config,n,e,this.logger,this.performanceClient)).submit(),new Promise((e,t)=>{setTimeout(()=>{t(B(qs,``,`failed_to_redirect`))},this.config.system.redirectNavigationTimeout)})}async handleRedirectPromise(e,t,n,r){let i=document.title;document.title=`Microsoft Authentication`;let a=$(K.handleRedirectPromise,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),o=r?.navigateToLoginRequestUrl??!0;try{let[i,s]=this.getRedirectResponse(r?.hash||``);if(!i)return this.logger.info(`1qmv0q`,this.correlationId),this.browserStorage.resetRequestCache(this.correlationId),Dd()===`back_forward`?this.logger.verbose(`1eqegq`,this.correlationId):n.event.errorCode=`no_server_response`,null;let c=this.browserStorage.getTemporaryCache(G.ORIGIN_URI,this.correlationId,!0)||``;if(si(c,this.logger,this.correlationId)===si(window.location.href,this.logger,this.correlationId)&&o)return this.logger.verbose(`11yred`,this.correlationId),c.indexOf(`#`)>-1&&ol(c),await this.handleResponse(i,e,t,a);if(!o)return this.logger.verbose(`0v4sdv`,this.correlationId),await this.handleResponse(i,e,t,a);if(!sl()||this.config.system.allowRedirectInIframe){this.browserStorage.setTemporaryCache(G.URL_HASH,s,!0);let n={apiId:K.handleRedirectPromise,timeout:this.config.system.redirectNavigationTimeout,noHistory:!0},r=!0;if(c)this.logger.verbose(`08jpy1 ${c}`,this.correlationId),r=await this.navigationClient.navigateInternal(c,n);else{let e=pl(this.correlationId);this.browserStorage.setTemporaryCache(G.ORIGIN_URI,e,!0),this.logger.warning(`1dutq1`,this.correlationId),r=await this.navigationClient.navigateInternal(e,n)}if(!r)return await this.handleResponse(i,e,t,a)}return null}catch(e){throw e instanceof w&&(e.correlationId=this.correlationId,a.cacheFailedRequest(e)),e}finally{document.title=i}}getRedirectResponse(e){this.logger.verbose(`1c5i8m`,this.correlationId);let t=e;t||=this.config.auth.OIDCOptions.responseMode===fe.QUERY?window.location.search:window.location.hash;let n=ai(t);if(n){try{ju(n,this.browserCrypto,q.Redirect,this.correlationId)}catch(e){return e instanceof w&&this.logger.error(`0bkq6p ${e.errorCode} ${e.errorMessage}`,this.correlationId),[null,``]}return al(window),this.logger.verbose(`00uvho`,this.correlationId),[n,t]}let r=this.browserStorage.getTemporaryCache(G.URL_HASH,this.correlationId,!0);return this.browserStorage.removeItem(this.browserStorage.generateCacheKey(G.URL_HASH)),r&&(n=ai(r),n)?(this.logger.verbose(`001671`,this.correlationId),[n,r]):[null,``]}async handleResponse(e,t,n,r){if(!e.state)throw B(rs,t.correlationId);let{authority:i,azureCloudOptions:a,extraQueryParameters:o,account:s}=t;if(e.ear_jwe){let n=await N(gu,ao,this.logger,this.performanceClient,t.correlationId)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,i,a,o,s);return N(cd,Co,this.logger,this.performanceClient,t.correlationId)(t,e,K.acquireTokenRedirect,this.config,n,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}let c=await N(this.createAuthCodeClient.bind(this),_o,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:r,requestAuthority:t.authority});return N(sd,To,this.logger,this.performanceClient,t.correlationId)(t,e,n,K.acquireTokenRedirect,this.config,c,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async initiateAuthRequest(e){if(this.logger.verbose(`0yaw2e`,this.correlationId),e){this.logger.infoPii(`1luf83 ${e}`,this.correlationId);let t={apiId:K.acquireTokenRedirect,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},n=this.config.auth.onRedirectNavigate;if(typeof n==`function`){if(this.logger.verbose(`1nehvl`,this.correlationId),n(e)!==!1){this.logger.verbose(`1a0jxh`,this.correlationId),await this.navigationClient.navigateExternal(e,t);return}this.logger.verbose(`09k5h5`,this.correlationId);return}this.logger.verbose(`0klwf7`,this.correlationId),await this.navigationClient.navigateExternal(e,t);return}throw this.logger.info(`0rlh4e`,this.correlationId),B(ts,this.correlationId)}async logout(e){this.logger.verbose(`1rkurh`,this.correlationId);let t=this.initializeLogoutRequest(e),n=$(K.logout,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{this.eventHandler.emitEvent(Z.LOGOUT_START,this.correlationId,q.Redirect,e),await _u(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,t.account);let r={apiId:K.logout,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},i=await N(this.createAuthCodeClient.bind(this),_o,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:n,requestAuthority:e&&e.authority,requestExtraQueryParameters:e?.extraQueryParameters,account:e&&e.account||void 0});if(i.authority.protocolMode===k.OIDC)try{i.authority.endSessionEndpoint}catch{if(t.account?.homeAccountId){this.eventHandler.emitEvent(Z.LOGOUT_SUCCESS,this.correlationId,q.Redirect,t);return}}t.state=ha(this.browserCrypto,t.state||``,{interactionType:q.Redirect},t.correlationId);let a=i.getLogoutUri(t);t.account?.homeAccountId&&this.eventHandler.emitEvent(Z.LOGOUT_SUCCESS,this.correlationId,q.Redirect,t);let o=this.config.auth.onRedirectNavigate;if(typeof o==`function`){if(o(a)!==!1){this.logger.verbose(`06v57e`,this.correlationId),this.browserStorage.getInteractionInProgress()||this.browserStorage.setInteractionInProgress(!0,Qs.SIGNOUT),await this.navigationClient.navigateExternal(a,r);return}this.browserStorage.setInteractionInProgress(!1),this.logger.verbose(`0xqes1`,this.correlationId)}else{this.browserStorage.getInteractionInProgress()||this.browserStorage.setInteractionInProgress(!0,Qs.SIGNOUT),await this.navigationClient.navigateExternal(a,r);return}}catch(e){throw e instanceof w&&(e.correlationId=this.correlationId,n.cacheFailedRequest(e)),this.eventHandler.emitEvent(Z.LOGOUT_FAILURE,this.correlationId,q.Redirect,null,e),this.eventHandler.emitEvent(Z.LOGOUT_END,this.correlationId,q.Redirect),e}this.eventHandler.emitEvent(Z.LOGOUT_END,this.correlationId,q.Redirect)}getRedirectStartPage(e){let t=e||window.location.href,n=j.getAbsoluteUrl(t,fl(),this.correlationId);return ci(n,this.logger,this.correlationId),n}};async function kd(e,t,n,r){if(!t)throw n.info(`1l7hyp`,r),B(ts,r);return e.src=t,e}async function Ad(e,t,n,r,i,a){if(!e.contentDocument)throw`No document associated with iframe!`;return(await id(e.contentDocument,t,n,r,i,a)).submit(),e}async function jd(e,t,n,r,i,a){if(!e.contentDocument)throw`No document associated with iframe!`;return(await nd(e.contentDocument,t,n,r,i,a)).submit(),e}function Md(){let e=document.createElement(`iframe`);return e.className=`msalSilentIframe`,e.title=`Microsoft Authentication`,e.style.visibility=`hidden`,e.style.position=`absolute`,e.style.width=e.style.height=`0`,e.style.border=`0`,e.setAttribute(`sandbox`,`allow-scripts allow-same-origin allow-forms`),e.setAttribute(`allow`,`local-network-access *`),document.body.appendChild(e),e}function Nd(e){document.body===e.parentNode&&document.body.removeChild(e)}var Pd=class extends Tu{constructor(e,t,n,r,i,a,o,s,c,l,u,d,f){super(e,t,n,r,i,a,s,l,u,f),this.apiId=o,this.nativeStorage=c,this.waitForIframeResponseHook=d}async acquireToken(e){!e.loginHint&&!e.sid&&(!e.account||!e.account.username)&&this.logger.warning(`1kl318`,this.correlationId);let t={...e};t.prompt?t.prompt!==b.NONE&&t.prompt!==b.NO_SESSION&&(this.logger.warning(`0bmctg ${t.prompt} ${b.NONE}`,this.correlationId),t.prompt=b.NONE):t.prompt=b.NONE;let n=await N(Eu,yo,this.logger,this.performanceClient,this.correlationId)(t,q.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);return n.platformBroker=Td(this.config,this.logger,this.correlationId,this.platformAuthProvider,n.authenticationScheme),xl(n.authority),this.config.system.protocolMode===k.EAR?this.executeEarFlow(n):this.executeCodeFlow(n)}async executeCodeFlow(e){let t,n=$(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{return t=await N(this.createAuthCodeClient.bind(this),_o,this.logger,this.performanceClient,e.correlationId)({serverTelemetryManager:n,requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),await N(this.silentTokenHelper.bind(this),mo,this.logger,this.performanceClient,e.correlationId)(t,e)}catch(r){if(r instanceof w&&(r.correlationId=this.correlationId,n.cacheFailedRequest(r)),!t||!(r instanceof w)||r.errorCode!==H.INVALID_GRANT_ERROR)throw r;return this.performanceClient.addFields({retryError:r.errorCode},this.correlationId),await N(this.silentTokenHelper.bind(this),mo,this.logger,this.performanceClient,this.correlationId)(t,e)}}async executeEarFlow(e){let{correlationId:t,authority:n,azureCloudOptions:r,extraQueryParameters:i,account:a}=e,o=await N(gu,ao,this.logger,this.performanceClient,t)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,n,r,i,a),s=await N(Hc,Ko,this.logger,this.performanceClient,t)(),c=await N(ud,Fo,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),l={...e,earJwk:s,codeChallenge:c.challenge},u=Md(),d=this.config.auth.OIDCOptions.responseMode,f;try{let n=N(this.waitForIframeResponse.bind(this),go,this.logger,this.performanceClient,t)(u,e);n.catch(()=>{}),await N(jd,ho,this.logger,this.performanceClient,t)(u,this.config,o,l,this.logger,this.performanceClient),f=await n}finally{M(Nd,No,this.logger,this.performanceClient,t)(u)}let p=M(Au,Do,this.logger,this.performanceClient,t)(f,d,this.logger,this.correlationId);if(!p.ear_jwe&&p.code){let n=await N(this.createAuthCodeClient.bind(this),_o,this.logger,this.performanceClient,t)({serverTelemetryManager:$(this.apiId,this.config.auth.clientId,t,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account,authority:o});return N(sd,To,this.logger,this.performanceClient,t)(l,p,c.verifier,this.apiId,this.config,n,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}return N(cd,Co,this.logger,this.performanceClient,t)(l,p,this.apiId,this.config,o,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async verifySso(e){let t={...e};t.prompt||=b.NONE;let n=await N(Eu,yo,this.logger,this.performanceClient,this.correlationId)(t,q.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId),r=await N(this.createAuthCodeClient.bind(this),_o,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:$(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:n.authority,requestAzureCloudOptions:n.azureCloudOptions,requestExtraQueryParameters:n.extraQueryParameters,account:n.account}),{serverParams:i}=await this.silentAuthorizeHelper(r,n),a=n.correlationId;return Pa(i,n.state,a),i.code?(this.logger.verbose(`0kkkcj`,a),!0):(this.logger.warning(`0y34ti`,a),!1)}logout(){return Promise.reject(B(_s,``))}async silentTokenHelper(e,t){let{serverParams:n,pkceCodes:r,silentRequest:i}=await this.silentAuthorizeHelper(e,t);return N(sd,To,this.logger,this.performanceClient,t.correlationId)(i,n,r.verifier,this.apiId,this.config,e,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async silentAuthorizeHelper(e,t){let n=t.correlationId,r=await N(ud,Fo,this.logger,this.performanceClient,n)(this.performanceClient,this.logger,n),i=await xu(t,this.tokenBindingKeyManager,this.logger,this.performanceClient),a={...t,codeChallenge:r.challenge,...i},o=Md(),s=this.config.auth.OIDCOptions.responseMode,c;try{let r=N(this.waitForIframeResponse.bind(this),go,this.logger,this.performanceClient,n)(o,t);if(r.catch(()=>{}),t.httpMethod===oe.POST)await N(Ad,ho,this.logger,this.performanceClient,n)(o,this.config,e.authority,a,this.logger,this.performanceClient);else{let t=await N(ed,bn,this.logger,this.performanceClient,n)(this.config,e.authority,a,this.logger,this.performanceClient);await N(kd,ho,this.logger,this.performanceClient,n)(o,t,this.logger,n)}c=await r}finally{M(Nd,No,this.logger,this.performanceClient,n)(o)}return{serverParams:M(Au,Do,this.logger,this.performanceClient,n)(c,s,this.logger,this.correlationId),pkceCodes:r,silentRequest:a}}async waitForIframeResponse(e,t){return this.waitForIframeResponseHook?this.waitForIframeResponseHook(e,t):dl(this.config.system.iframeBridgeTimeout,this.logger,t,this.performanceClient,this.config.experimental)}},Fd=class extends Tu{async acquireToken(e){let t=await N(Su,uo,this.logger,this.performanceClient,e.correlationId)(e,this.config,this.performanceClient,this.logger,this.correlationId),n=await xu(t,this.tokenBindingKeyManager,this.logger,this.performanceClient),r={...e,...t,...n};e.redirectUri&&(r.redirectUri=hu(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId));let i=$(K.acquireTokenSilent_silentFlow,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),a=await this.createRefreshTokenClient({serverTelemetryManager:i,authorityUrl:r.authority,azureCloudOptions:r.azureCloudOptions,account:r.account});return N(a.acquireTokenByRefreshToken.bind(a),co,this.logger,this.performanceClient,e.correlationId)(r,K.acquireTokenSilent_silentFlow).catch(e=>{throw e.correlationId=this.correlationId,i.cacheFailedRequest(e),e})}logout(){return Promise.reject(B(_s,``))}async createRefreshTokenClient(e){return new za(await N(this.getClientConfiguration.bind(this),vo,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:e.serverTelemetryManager,requestAuthority:e.authorityUrl,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),this.performanceClient)}},Id=class extends Aa{constructor(e,t){super(e,t),this.includeRedirectUri=!1}},Ld=class extends Tu{constructor(e,t,n,r,i,a,o,s,c,l,u){super(e,t,n,r,i,a,s,c,l,u),this.apiId=o}async acquireToken(e){if(!e.code)throw B(ks,this.correlationId);let t=await N(Eu,yo,this.logger,this.performanceClient,this.correlationId)(e,q.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId),n=$(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{let r=await xu(t,this.tokenBindingKeyManager,this.logger,this.performanceClient),i={...t,code:e.code,...r},a=new Id(await N(this.getClientConfiguration.bind(this),vo,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:n,requestAuthority:t.authority,requestAzureCloudOptions:t.azureCloudOptions,requestExtraQueryParameters:t.extraQueryParameters,account:t.account}),this.performanceClient);this.logger.verbose(`1uic5e`,this.correlationId);let o=new Mu(a,this.browserStorage,i,this.logger,this.performanceClient);return await N(o.handleCodeResponseFromServer.bind(o),xn,this.logger,this.performanceClient,this.correlationId)({code:e.code,msgraph_host:e.msGraphHost,cloud_graph_host_name:e.cloudGraphHostName,cloud_instance_host_name:e.cloudInstanceHostName},t,this.apiId,!1)}catch(e){throw e instanceof w&&(e.correlationId=this.correlationId,n.cacheFailedRequest(e)),e}}logout(){return Promise.reject(B(_s,``))}};function Rd(e,t,n,r){let i=window.msal?.clientIds||[],a=i.length,o=i.filter(t=>t===e).length;o>1&&n.warning(`1e88vg`,r),t.add({msalInstanceCount:a,sameClientIdInstanceCount:o})}function zd(e,t,n,r){try{yl(e),Ja(n.auth.isMcp,r)}catch(e){throw t.end({success:!1},e,r.account),e}}var Bd=class e{constructor(e){this.operatingContext=e,this.isBrowserEnvironment=this.operatingContext.isBrowserEnvironment(),this.config=e.getConfig(),this.initialized=!1,this.logger=this.operatingContext.getLogger(),this.networkClient=this.config.system.networkClient,this.navigationClient=this.config.system.navigationClient,this.redirectResponse=new Map,this.hybridAuthCodeResponses=new Map,this.performanceClient=this.config.telemetry.client,this.isBrowserEnvironment?(this.browserCrypto=new Dl(this.logger,this.performanceClient),this.tokenBindingKeyManager=new El(this.logger,this.performanceClient)):(this.browserCrypto=ui,this.tokenBindingKeyManager=di),this.eventHandler=new pu(this.logger),this.browserStorage=this.isBrowserEnvironment?new au(this.config.auth.clientId,this.config.cache,this.browserCrypto,this.logger,this.performanceClient,this.eventHandler,ur(this.config.auth),this.tokenBindingKeyManager):su(this.config.auth.clientId,this.logger,this.performanceClient,this.eventHandler,void 0,this.tokenBindingKeyManager);let t={cacheLocation:W.MemoryStorage,cacheRetentionDays:5};this.nativeInternalStorage=new au(this.config.auth.clientId,t,this.browserCrypto,this.logger,this.performanceClient,this.eventHandler,void 0,this.tokenBindingKeyManager),this.activeSilentTokenRequests=new Map,this.trackStateChange=this.trackStateChange.bind(this),this.trackStateChangeWithMeasurement=this.trackStateChangeWithMeasurement.bind(this)}static async createController(t,n){let r=new e(t);return await r.initialize(n),r}trackStateChange(e,t){e&&(t.type===`visibilitychange`?(this.logger.info(`16v6hv`,e),this.performanceClient.incrementFields({visibilityChangeCount:1},e)):t.type===`online`?(this.logger.info(`0zirfd`,e),this.performanceClient.incrementFields({onlineStatusChangeCount:1},e)):t.type===`offline`&&(this.logger.info(`1xk9ef`,e),this.performanceClient.incrementFields({onlineStatusChangeCount:1},e)))}async initialize(e){let t=this.getRequestCorrelationId(e);if(this.logger.trace(`1f7joy`,t),this.initialized){this.logger.info(`061m5x`,t);return}if(!this.isBrowserEnvironment){this.logger.info(`19fvpi`,t),this.initialized=!0,this.eventHandler.emitEvent(Z.INITIALIZE_END,t);return}let n=this.config.system.allowPlatformBroker,r=this.performanceClient.startMeasurement(Pl,t);if(this.eventHandler.emitEvent(Z.INITIALIZE_START,t),this.logMultipleInstances(r,t),r.add({isMcp:this.config.auth.isMcp}),await N(this.browserStorage.initialize.bind(this.browserStorage),po,this.logger,this.performanceClient,t)(t),n)try{this.platformAuthProvider=await wd(this.logger,this.performanceClient,t,this.config.system.nativeBrokerHandshakeTimeout,this.config.experimental.allowPlatformBrokerWithDOM)}catch(e){this.logger.verbose(e,t)}this.config.cache.cacheLocation===W.LocalStorage&&this.eventHandler.subscribeCrossTab(),!this.config.system.navigatePopups&&await this.preGeneratePkceCodes(t),this.initialized=!0,this.eventHandler.emitEvent(Z.INITIALIZE_END,t),r.end({allowPlatformBroker:n,success:!0})}async handleRedirectPromise(e){if(this.logger.verbose(`02l8bm`,``),vl(this.initialized),this.isBrowserEnvironment){let t=e?.hash||``,n=this.redirectResponse.get(t);return n===void 0?(n=this.handleRedirectPromiseInternal(e),this.redirectResponse.set(t,n),this.logger.verbose(`1wn9kp`,``)):this.logger.verbose(`0w0gm3`,``),n}return this.logger.verbose(`12xi63`,``),null}async handleRedirectPromiseInternal(e){if(!this.browserStorage.isInteractionInProgress(!0))return this.logger.info(`0le6uv`,``),null;if(this.browserStorage.getInteractionInProgress()?.type===Qs.SIGNOUT)return this.logger.verbose(`1ywcv2`,``),this.browserStorage.setInteractionInProgress(!1),Promise.resolve(null);let t=this.getAllAccounts(),n=this.browserStorage.getCachedNativeRequest(),r=n&&!e?.hash,i,a,o;try{if(r&&this.platformAuthProvider){let e=n?.correlationId||``;this.eventHandler.emitEvent(Z.HANDLE_REDIRECT_START,e,q.Redirect),i=this.performanceClient.startMeasurement(Ml,e),this.logger.trace(`12v7is`,e),i.add({isPlatformBrokerRequest:!0});let t=new Yu(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,K.handleRedirectPromise,this.performanceClient,this.platformAuthProvider,n.accountId,this.nativeInternalStorage,n.correlationId,this.tokenBindingKeyManager);a=N(t.handleRedirectPromise.bind(t),jo,this.logger,this.performanceClient,i.event.correlationId)()}else{let[t,n]=this.browserStorage.getCachedRequest(``);o=t;let r=t.correlationId;this.eventHandler.emitEvent(Z.HANDLE_REDIRECT_START,r,q.Redirect),i=this.performanceClient.startMeasurement(Ml,r),this.logger.trace(`0znzs5`,r);let s=this.createRedirectClient(r);a=N(s.handleRedirectPromise.bind(s),Ao,this.logger,this.performanceClient,i.event.correlationId)(t,n,i,e)}}catch(e){throw this.browserStorage.resetRequestCache(``),e}return a.then(e=>(e?(this.browserStorage.resetRequestCache(e.correlationId),this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_SUCCESS,e.correlationId,q.Redirect,e),this.logger.verbose(`0ui8f5`,e.correlationId),t.length<this.getAllAccounts().length&&(this.eventHandler.emitEvent(Z.LOGIN_SUCCESS,e.correlationId,q.Redirect,e.account),this.logger.verbose(`16im3l`,e.correlationId)),i.end({success:!0,isNativeBroker:e.fromPlatformBroker??!1},void 0,e.account),this.verifySsoCapability(o,q.Redirect)):i.event.errorCode?i.end({success:!1}):i.discard(),this.eventHandler.emitEvent(Z.HANDLE_REDIRECT_END,i.event.correlationId,q.Redirect),e)).catch(e=>{this.browserStorage.resetRequestCache(i.event.correlationId);let t=e;throw this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_FAILURE,i.event.correlationId,q.Redirect,null,t),this.eventHandler.emitEvent(Z.HANDLE_REDIRECT_END,i.event.correlationId,q.Redirect),i.end({success:!1},t),e})}async acquireTokenRedirect(e){let t=this.getRequestCorrelationId(e);this.logger.verbose(`0os66p`,t),bl(this.initialized,this.config),this.browserStorage.setInteractionInProgress(!0,Qs.SIGNIN);let n=this.performanceClient.startMeasurement(jl,t);n.add({scenarioId:e.scenarioId});let r=this.config.auth.onRedirectNavigate;this.config.auth.onRedirectNavigate=t=>{let i=typeof r==`function`?r(t):void 0;return n.add({navigateCallbackResult:i!==!1}),n.event=n.end({success:!0},void 0,e.account)||n.event,i};try{Ja(this.config.auth.isMcp,e),this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_START,t,q.Redirect,e);let r;if(this.platformAuthProvider&&this.canUsePlatformBroker(e)){let i=new Yu(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,K.acquireTokenRedirect,this.performanceClient,this.platformAuthProvider,this.getNativeAccountId(e),this.nativeInternalStorage,t,this.tokenBindingKeyManager);r=N(i.acquireTokenRedirect.bind(i),so,this.logger,this.performanceClient,t)(e,n).catch(n=>{if(n instanceof Gu&&Ku(n))return this.platformAuthProvider=void 0,this.createRedirectClient(t).acquireToken(e);if(n instanceof R)return this.logger.verbose(`1ipyz4`,t),this.createRedirectClient(t).acquireToken(e);throw n})}else r=this.createRedirectClient(t).acquireToken(e);return await r}catch(r){throw this.browserStorage.resetRequestCache(t),n.event.status===2?this.performanceClient.startMeasurement(Ml,t).end({success:!1},r,e.account):n.end({success:!1},r,e.account),this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_FAILURE,t,q.Redirect,null,r),r}}acquireTokenPopup(e){let t=this.getRequestCorrelationId(e),n=this.performanceClient.startMeasurement(Al,t);n.add({scenarioId:e.scenarioId});try{this.logger.verbose(`0ch87b`,t),zd(this.initialized,n,this.config,e),this.browserStorage.setInteractionInProgress(!0,Qs.SIGNIN,e.overrideInteractionInProgress,t)}catch(e){return Promise.reject(e)}let r=this.getAllAccounts();this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_START,t,q.Popup,e);let i,a=this.getPreGeneratedPkceCodes(t);return this.canUsePlatformBroker(e)?(n.add({isPlatformBrokerRequest:!0}),i=this.acquireTokenNative({...e,correlationId:t},K.acquireTokenPopup).then(e=>(n.end({success:!0,isNativeBroker:e.fromPlatformBroker??!1},void 0,e.account),e)).catch(n=>{if(n instanceof Gu&&Ku(n))return this.platformAuthProvider=void 0,this.createPopupClient(t).acquireToken(e,a);if(n instanceof R)return this.logger.verbose(`0yy5fw`,t),this.createPopupClient(t).acquireToken(e,a);throw n})):i=this.createPopupClient(t).acquireToken(e,a),i.then(i=>{let a=r.length<this.getAllAccounts().length;return this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_SUCCESS,t,q.Popup,i),a&&this.eventHandler.emitEvent(Z.LOGIN_SUCCESS,t,q.Popup,i.account),n.end({success:!0,isNativeBroker:i.fromPlatformBroker??!1,accessTokenSize:i.accessToken.length,idTokenSize:i.idToken.length},void 0,i.account),this.verifySsoCapability(e,q.Popup),i}).catch(r=>(this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_FAILURE,t,q.Popup,null,r),n.end({success:!1},r,e.account),Promise.reject(r))).finally(async()=>{this.browserStorage.setInteractionInProgress(!1),this.config.system.navigatePopups||await this.preGeneratePkceCodes(t)})}trackStateChangeWithMeasurement(e){let t=this.ssoSilentMeasurement||this.acquireTokenByCodeAsyncMeasurement;t&&(e.type===`visibilitychange`?(this.logger.info(`0yzimq ${t.event.name}`,t.event.correlationId),t.increment({visibilityChangeCount:1})):e.type===`online`?(this.logger.info(`1caf53 ${t.event.name}`,t.event.correlationId),t.increment({onlineStatusChangeCount:1})):e.type===`offline`&&(this.logger.info(`0fdyk7 ${t.event.name}`,t.event.correlationId),t.increment({onlineStatusChangeCount:1})))}addStateChangeListeners(e){document.addEventListener(`visibilitychange`,e),window.addEventListener(`online`,e),window.addEventListener(`offline`,e)}removeStateChangeListeners(e){document.removeEventListener(`visibilitychange`,e),window.removeEventListener(`online`,e),window.removeEventListener(`offline`,e)}getCachedSsoCapable(){try{let e=window.localStorage.getItem(Ul);if(e){let t=JSON.parse(e);if(t&&typeof t.ssoCapable==`boolean`&&t.expiresOn&&Date.now()<t.expiresOn)return t.ssoCapable}}catch{}}verifySsoCapability(e,t){if(!this.config.auth.verifySSO)return;let n=Ul;if(this.getCachedSsoCapable()!==void 0){this.logger.verbose(`13poou ${t}`,``);return}let r=Rc(),i=this.performanceClient.startMeasurement(Il,r);i.add({"ext.interactionType":t}),this.logger.verbose(`0pbr0i ${t}`,r),setTimeout(()=>{let a={...e,correlationId:r};this.createSilentIframeClient(r).verifySso(a).then(e=>{this.logger.verbose(`1gd1iv ${t} ${e}`,r);try{let t=JSON.stringify({ssoCapable:e,expiresOn:Date.now()+864e5});window.localStorage.setItem(n,t)}catch{this.logger.warning(`18lmoj ${t}`,r)}i.end({fromCache:!1,success:e},void 0)}).catch(e=>{this.logger.warning(`05g83w ${t} ${e.message}`,r);try{window.localStorage.removeItem(n)}catch{this.logger.warning(`0nlf9q ${t}`,r)}i.end({fromCache:!1,success:!1},e)})},0)}async ssoSilent(e){let t=this.getRequestCorrelationId(e),n={...e,correlationId:t};this.ssoSilentMeasurement=this.performanceClient.startMeasurement(Nl,t),this.ssoSilentMeasurement?.add({scenarioId:e.scenarioId,ssoCapable:this.getCachedSsoCapable()}),zd(this.initialized,this.ssoSilentMeasurement,this.config,n),this.ssoSilentMeasurement?.increment({visibilityChangeCount:0,onlineStatusChangeCount:0}),this.addStateChangeListeners(this.trackStateChangeWithMeasurement);let r=this.getAllAccounts();this.logger.verbose(`0w1b45`,t),this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_START,t,q.Silent,n);let i;return this.canUsePlatformBroker(n)?(this.ssoSilentMeasurement?.add({isPlatformBrokerRequest:!0}),i=this.acquireTokenNative(n,K.ssoSilent).catch(e=>{if(e instanceof Gu&&Ku(e))return this.platformAuthProvider=void 0,this.createSilentIframeClient(n.correlationId).acquireToken(n);throw e})):i=this.createSilentIframeClient(n.correlationId).acquireToken(n),i.then(e=>{let n=r.length<this.getAllAccounts().length;return this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_SUCCESS,t,q.Silent,e),n&&this.eventHandler.emitEvent(Z.LOGIN_SUCCESS,t,q.Silent,e.account),this.ssoSilentMeasurement?.end({success:!0,isNativeBroker:e.fromPlatformBroker??!1,accessTokenSize:e.accessToken.length,idTokenSize:e.idToken.length},void 0,e.account),e}).catch(n=>{throw this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_FAILURE,t,q.Silent,null,n),this.ssoSilentMeasurement?.end({success:!1},n,e.account),n}).finally(()=>{this.removeStateChangeListeners(this.trackStateChangeWithMeasurement)})}async acquireTokenByCode(e){let t=this.getRequestCorrelationId(e);this.logger.trace(`0ch6ga`,t);let n=this.performanceClient.startMeasurement(kl,t);zd(this.initialized,n,this.config,e),this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_START,t,q.Silent,e),n.add({scenarioId:e.scenarioId});try{if(e.code&&e.nativeAccountId)throw B(js,t);if(e.code){let r=e.code,i=this.hybridAuthCodeResponses.get(r);return i?(this.logger.verbose(`0qgp28`,t),n.discard()):(this.logger.verbose(`06eh73`,t),i=this.acquireTokenByCodeAsync({...e,correlationId:t}).then(e=>(this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_SUCCESS,t,q.Silent,e),this.hybridAuthCodeResponses.delete(r),n.end({success:!0,isNativeBroker:!1,accessTokenSize:e.accessToken.length,idTokenSize:e.idToken.length},void 0,e.account),e)).catch(e=>{throw this.hybridAuthCodeResponses.delete(r),this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_FAILURE,t,q.Silent,null,e),n.end({success:!1},e),e}),this.hybridAuthCodeResponses.set(r,i)),await i}if(e.nativeAccountId){if(this.canUsePlatformBroker(e,e.nativeAccountId)){n.add({isPlatformBrokerRequest:!0});let r=await this.acquireTokenNative({...e,correlationId:t},K.acquireTokenByCode,e.nativeAccountId).catch(e=>{throw e instanceof Gu&&Ku(e)&&(this.platformAuthProvider=void 0),e});return n.end({success:!0,isNativeBroker:r.fromPlatformBroker??!1},void 0,r.account),r}throw B(Ns,t)}throw B(As,t)}catch(e){throw this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_FAILURE,t,q.Silent,null,e),n.end({success:!1},e),e}}async acquireTokenByCodeAsync(e){let t=this.getRequestCorrelationId(e);return this.logger.trace(`10d9hy`,t),this.acquireTokenByCodeAsyncMeasurement=this.performanceClient.startMeasurement(ko,t),this.acquireTokenByCodeAsyncMeasurement?.increment({visibilityChangeCount:0,onlineStatusChangeCount:0}),this.addStateChangeListeners(this.trackStateChangeWithMeasurement),await this.createSilentAuthCodeClient(t).acquireToken(e).then(e=>(this.acquireTokenByCodeAsyncMeasurement?.end({success:!0,isNativeBroker:!1,fromCache:e.fromCache}),e)).catch(e=>{throw this.acquireTokenByCodeAsyncMeasurement?.end({success:!1},e),e}).finally(()=>{this.removeStateChangeListeners(this.trackStateChangeWithMeasurement)})}async acquireTokenFromCache(e,t){switch(t){case J.Default:case J.AccessToken:case J.AccessTokenAndRefreshToken:let t=this.createSilentCacheClient(e.correlationId);return N(t.acquireToken.bind(t),to,this.logger,this.performanceClient,e.correlationId)(e);default:throw T(nt,e.correlationId)}}async acquireTokenByRefreshToken(e,t){switch(t){case J.Default:case J.AccessTokenAndRefreshToken:case J.RefreshToken:case J.RefreshTokenAndNetwork:let t=this.createSilentRefreshClient(e.correlationId);return N(t.acquireToken.bind(t),io,this.logger,this.performanceClient,e.correlationId)(e);default:throw T(nt,e.correlationId)}}async acquireTokenBySilentIframe(e){let t=this.createSilentIframeClient(e.correlationId);return N(t.acquireToken.bind(t),no,this.logger,this.performanceClient,e.correlationId)(e)}async logoutRedirect(e){let t=this.getRequestCorrelationId(e);return bl(this.initialized,this.config),this.browserStorage.setInteractionInProgress(!0,Qs.SIGNOUT),this.createRedirectClient(t).logout(e)}logoutPopup(e){try{let t=this.getRequestCorrelationId(e);return yl(this.initialized),this.browserStorage.setInteractionInProgress(!0,Qs.SIGNOUT),this.createPopupClient(t).logout(e).finally(()=>{this.browserStorage.setInteractionInProgress(!1)})}catch(e){return Promise.reject(e)}}async clearCache(e){if(!this.isBrowserEnvironment)return;let t=this.getRequestCorrelationId(e);return this.createSilentCacheClient(t).logout(e)}getAllAccounts(e){return cu(this.logger,this.browserStorage,this.isBrowserEnvironment,this.getRequestCorrelationId(),e)}getAccount(e){return lu(e,this.logger,this.browserStorage,this.getRequestCorrelationId())}setActiveAccount(e){uu(e,this.browserStorage,this.getRequestCorrelationId())}getActiveAccount(){return du(this.browserStorage,this.getRequestCorrelationId())}async hydrateCache(e,t){this.logger.verbose(`16jycr`,e.correlationId);let n=bt(e.account,e.cloudGraphHostName,e.msGraphHost);if(await this.browserStorage.setAccount(n,e.correlationId,O(e.idTokenClaims),K.hydrateCache),e.fromPlatformBroker){this.logger.verbose(`1i5atf`,e.correlationId);let n=Wn(e.account.homeAccountId,e.account.environment,e.idToken,this.config.auth.clientId,e.tenantId),r=or(t.attributeTokens),i=r?{attribute_tokens:r}:void 0,a=Gn(e.account.homeAccountId,e.account.environment,e.accessToken,this.config.auth.clientId,e.tenantId,e.scopes.join(` `),e.expiresOn?zn(e.expiresOn):0,e.extExpiresOn?zn(e.extExpiresOn):0,V,t.correlationId||``,void 0,e.tokenType,void 0,t.sshKid,i);t.resource&&(a.resource=t.resource);let o=i,s=o?await this.browserCrypto.hashString(JSON.stringify(o)):void 0,c=O(e.idTokenClaims);await this.browserStorage.setIdTokenCredential(n,e.correlationId,c),await this.nativeInternalStorage.setAccessTokenCredential(a,e.correlationId,c,s)}else return this.browserStorage.hydrateCache(e,t)}async acquireTokenNative(e,t,n,r){let i=this.getRequestCorrelationId(e);if(this.logger.trace(`0b9y3p`,i),!this.platformAuthProvider)throw B(Is,i);let a=new Yu(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,t,this.performanceClient,this.platformAuthProvider,n||this.getNativeAccountId(e),this.nativeInternalStorage,i,this.tokenBindingKeyManager);return N(a.acquireToken.bind(a),oo,this.logger,this.performanceClient,i)(e,r)}canUsePlatformBroker(e,t){let n=this.getRequestCorrelationId(e);if(this.logger.trace(`1n9lbl`,n),!this.platformAuthProvider)return this.logger.trace(`0vnu11`,n),!1;if(!Td(this.config,this.logger,n,this.platformAuthProvider,e.authenticationScheme))return this.logger.trace(`0yoy1g`,n),!1;if(e.prompt)switch(e.prompt){case b.NONE:case b.CONSENT:case b.LOGIN:this.logger.trace(`0vdv8e`,n);break;default:return this.logger.trace(`0pdzw6 ${e.prompt}`,n),!1}return!t&&!this.getNativeAccountId(e)?(this.logger.trace(`16lbtk`,n),!1):!0}getNativeAccountId(e){let t=e.account||this.getAccount({loginHint:e.loginHint,sid:e.sid})||(!e.loginHint&&!e.sid?this.getActiveAccount():null);return t&&t.nativeAccountId||``}createPopupClient(e){return new Ed(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider,this.operatingContext.getResponseHandlers()?.waitForPopupResponse,this.tokenBindingKeyManager)}createRedirectClient(e){return new Od(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider,this.tokenBindingKeyManager)}createSilentIframeClient(e){return new Pd(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,K.ssoSilent,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider,this.operatingContext.getResponseHandlers()?.waitForIframeResponse,this.tokenBindingKeyManager)}createSilentCacheClient(e){return new Ju(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,e,this.platformAuthProvider,this.tokenBindingKeyManager)}createSilentRefreshClient(e){return new Fd(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,e,this.platformAuthProvider,this.tokenBindingKeyManager)}createSilentAuthCodeClient(e){return new Ld(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,K.acquireTokenByCode,this.performanceClient,e,this.platformAuthProvider,this.tokenBindingKeyManager)}addEventCallback(e,t){return this.eventHandler.addEventCallback(e,t)}removeEventCallback(e){this.eventHandler.removeEventCallback(e)}addPerformanceCallback(e){return _l(),this.performanceClient.addPerformanceCallback(e)}removePerformanceCallback(e){return this.performanceClient.removePerformanceCallback(e)}getLogger(){return this.logger}setLogger(e){this.logger=e}initializeWrapperLibrary(e,t){this.browserStorage.setWrapperMetadata(e,t)}setNavigationClient(e){this.navigationClient=e}getConfiguration(){return this.config}getPerformanceClient(){return this.performanceClient}isBrowserEnv(){return this.isBrowserEnvironment}getRequestCorrelationId(e){return e?.correlationId?e.correlationId:this.isBrowserEnvironment?Rc():``}async loginRedirect(e){let t=this.getRequestCorrelationId(e);return this.logger.verbose(`0lz9hf`,t),this.acquireTokenRedirect({correlationId:t,...e||nc})}loginPopup(e){let t=this.getRequestCorrelationId(e);return this.logger.verbose(`0qw7v5`,t),this.acquireTokenPopup({correlationId:t,...e||nc})}async acquireTokenSilent(e){let t=this.getRequestCorrelationId(e),n=this.performanceClient.startMeasurement(Ol,t);n.add({cacheLookupPolicy:e.cacheLookupPolicy,scenarioId:e.scenarioId,ssoCapable:this.getCachedSsoCapable()}),zd(this.initialized,n,this.config,e),this.logger.verbose(`0x1c4s`,t);let r=e.account||this.getActiveAccount();if(!r)throw B(vs,t);return this.acquireTokenSilentDeduped(e,r,t).then(r=>(n.end({success:!0,isNativeBroker:r.fromPlatformBroker??!1,fromCache:r.fromCache,accessTokenSize:r.accessToken.length,idTokenSize:r.idToken.length},void 0,r.account),{...r,state:e.state,correlationId:t})).catch(e=>{throw e instanceof w&&(e.correlationId=t),n.end({success:!1},e,r),e})}async acquireTokenSilentDeduped(e,t,n){let r=xa(this.config.auth.clientId,{...e,authority:e.authority||this.config.auth.authority,correlationId:n},t.homeAccountId),i=JSON.stringify(r),a=this.activeSilentTokenRequests.get(i);if(a===void 0){this.logger.verbose(`0fcjbk`,n),this.performanceClient.addFields({deduped:!1},n);let r=N(this.acquireTokenSilentAsync.bind(this),Qa,this.logger,this.performanceClient,n)({...e,correlationId:n},t);return this.activeSilentTokenRequests.set(i,r),r.finally(()=>{this.activeSilentTokenRequests.delete(i)})}return this.logger.verbose(`1yq7nb`,n),this.performanceClient.addFields({deduped:!0},n),a}async acquireTokenSilentAsync(e,t){let n=t=>this.trackStateChange(e.correlationId,t);this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_START,e.correlationId,q.Silent,e),e.correlationId&&this.performanceClient.incrementFields({visibilityChangeCount:0,onlineStatusChangeCount:0},e.correlationId),this.addStateChangeListeners(n);let r=await N(Cu,fo,this.logger,this.performanceClient,e.correlationId)(e,t,this.config,this.performanceClient,this.logger),i=e.cacheLookupPolicy||J.Default;return this.acquireTokenSilentNoIframe(r,i).catch(async t=>{if(Vd(t,i)){let n=`${t.errorCode}${t.subError?`|${t.subError}`:``}`;if(this.performanceClient.addFields({silentRefreshReason:n},e.correlationId),!this.activeIframeRequest){let e;return this.activeIframeRequest=[new Promise(t=>{e=t}),r.correlationId],this.logger.verbose(`0rh08z`,r.correlationId),N(this.acquireTokenBySilentIframe.bind(this),lo,this.logger,this.performanceClient,r.correlationId)(r).then(t=>(e(!0),t)).catch(t=>{throw e(!1),t}).finally(()=>{this.activeIframeRequest=void 0})}if(i!==J.Skip){let[e,n]=this.activeIframeRequest;this.logger.verbose(`1w8fso ${n}`,r.correlationId);let a=this.performanceClient.startMeasurement(ro,r.correlationId);a.add({awaitIframeCorrelationId:n});let o=await e;if(a.end({success:o}),o)return this.logger.verbose(`0ywzzi ${n}`,r.correlationId),this.acquireTokenSilentNoIframe(r,i);throw this.logger.info(`17y14q ${n}`,r.correlationId),t}return this.logger.warning(`1bd4p8`,r.correlationId),N(this.acquireTokenBySilentIframe.bind(this),lo,this.logger,this.performanceClient,r.correlationId)(r)}throw t}).then(t=>(this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_SUCCESS,e.correlationId,q.Silent,t),e.correlationId&&this.performanceClient.addFields({fromCache:t.fromCache,isNativeBroker:t.fromPlatformBroker??!1},e.correlationId),t)).catch(t=>{throw this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_FAILURE,e.correlationId,q.Silent,null,t),t}).finally(()=>{this.removeStateChangeListeners(n)})}async acquireTokenSilentNoIframe(e,t){return Td(this.config,this.logger,e.correlationId,this.platformAuthProvider,e.authenticationScheme)&&e.account.nativeAccountId?(this.logger.verbose(`0sczo4`,e.correlationId),this.performanceClient.addFields({isPlatformBrokerRequest:!0},e.correlationId),this.acquireTokenNative(e,K.acquireTokenSilent_silentFlow,e.account.nativeAccountId,t).catch(async t=>{throw t instanceof Gu&&Ku(t)?(this.logger.verbose(`07rkmb`,e.correlationId),this.platformAuthProvider=void 0,T(nt,e.correlationId)):t})):(this.logger.verbose(`0ox81t`,e.correlationId),t===J.AccessToken&&this.logger.verbose(`0fvwxe`,e.correlationId),N(this.acquireTokenFromCache.bind(this),Xa,this.logger,this.performanceClient,e.correlationId)(e,t).catch(n=>{if(t===J.AccessToken)throw n;return this.eventHandler.emitEvent(Z.ACQUIRE_TOKEN_NETWORK_START,e.correlationId,q.Silent,e),N(this.acquireTokenByRefreshToken.bind(this),Za,this.logger,this.performanceClient,e.correlationId)(e,t)}))}async preGeneratePkceCodes(e){return this.logger.verbose(`1x6uj6`,e),this.pkceCode=await N(ud,Fo,this.logger,this.performanceClient,e)(this.performanceClient,this.logger,e),Promise.resolve()}getPreGeneratedPkceCodes(e){let t=this.pkceCode?{...this.pkceCode}:void 0;return this.pkceCode=void 0,t?this.logger.verbose(`12js1o`,e):this.logger.verbose(`1oe9ci`,e),this.performanceClient.addFields({usePreGeneratedPkce:!!t},e),t}logMultipleInstances(e,t){let n=this.config.auth.clientId;window&&(window.msal=window.msal||{},window.msal.clientIds=window.msal.clientIds||[],window.msal.clientIds.length>0&&this.logger.verbose(`1qtz3l`,t),window.msal.clientIds.push(n),Rd(n,e,this.logger,t))}};function Vd(e,t){let n=!(e instanceof R&&e.subError!==`bad_token`),r=e.errorCode===H.INVALID_GRANT_ERROR||e.errorCode===`token_refresh_required`,i=n&&r||e.errorCode===`no_tokens_found`||e.errorCode===`refresh_token_expired`,a=ac.includes(t);return i&&a}var Hd=class e{static loggerCallback(e,t){switch(e){case L.Error:console.error(t);return;case L.Info:console.info(t);return;case L.Verbose:console.debug(t);return;case L.Warning:console.warn(t);return;default:console.log(t);return}}constructor(t,n){this.browserEnvironment=typeof window<`u`,this.config=xd(t,this.browserEnvironment),this.responseHandlers=n;let r;try{r=window[W.SessionStorage]}catch{}let i=r?.getItem(Rl),a=r?.getItem(zl)?.toLowerCase(),o=a===`true`||a!==`false`&&void 0,s={...this.config.system.loggerOptions},c=i&&Object.keys(L).includes(i)?L[i]:void 0;c&&(s.loggerCallback=e.loggerCallback,s.logLevel=c),o!==void 0&&(s.piiLoggingEnabled=o),this.logger=new vi(s,nu,ru),this.available=!1}getConfig(){return this.config}getResponseHandlers(){return this.responseHandlers}getLogger(){return this.logger}isAvailable(){return this.available}isBrowserEnvironment(){return this.browserEnvironment}},Ud=class e extends Hd{getModuleName(){return e.MODULE_NAME}getId(){return e.ID}async initialize(e){return this.available=typeof window<`u`,this.available}};Ud.MODULE_NAME=``,Ud.ID=`StandardOperatingContext`;var Wd=class{constructor(e,t){this.controller=t||new Bd(new Ud(e,{waitForPopupResponse:this.waitForPopupResponse.bind(this),waitForIframeResponse:this.waitForIframeResponse.bind(this)}))}async waitForPopupResponse(e,t,n){let r=this.controller;return dl(r.getConfiguration().system.popupBridgeTimeout,r.getLogger(),e,r.getPerformanceClient())}async waitForIframeResponse(e,t){let n=this.controller,r=n.getConfiguration();return dl(r.system.iframeBridgeTimeout,n.getLogger(),t,n.getPerformanceClient(),r.experimental)}async initialize(e){return this.controller.initialize(e)}async acquireTokenPopup(e){return this.controller.acquireTokenPopup(e)}acquireTokenRedirect(e){return this.controller.acquireTokenRedirect(e)}acquireTokenSilent(e){return this.controller.acquireTokenSilent(e)}acquireTokenByCode(e){return this.controller.acquireTokenByCode(e)}addEventCallback(e,t){return this.controller.addEventCallback(e,t)}removeEventCallback(e){return this.controller.removeEventCallback(e)}addPerformanceCallback(e){return this.controller.addPerformanceCallback(e)}removePerformanceCallback(e){return this.controller.removePerformanceCallback(e)}getAccount(e){return this.controller.getAccount(e)}getAllAccounts(e){return this.controller.getAllAccounts(e)}handleRedirectPromise(e){return this.controller.handleRedirectPromise(e)}loginPopup(e){return this.controller.loginPopup(e)}loginRedirect(e){return this.controller.loginRedirect(e)}logoutRedirect(e){return this.controller.logoutRedirect(e)}logoutPopup(e){return this.controller.logoutPopup(e)}ssoSilent(e){return this.controller.ssoSilent(e)}getLogger(){return this.controller.getLogger()}setLogger(e){this.controller.setLogger(e)}setActiveAccount(e){this.controller.setActiveAccount(e)}getActiveAccount(){return this.controller.getActiveAccount()}initializeWrapperLibrary(e,t){return this.controller.initializeWrapperLibrary(e,t)}setNavigationClient(e){this.controller.setNavigationClient(e)}getConfiguration(){return this.controller.getConfiguration()}async hydrateCache(e,t){return this.controller.hydrateCache(e,t)}clearCache(e){return this.controller.clearCache(e)}};async function Gd(e){let t=new Wd(e);return await t.initialize(),t}var Kd=fe;export{R as InteractionRequiredAuthError,Kd as ResponseMode,Gd as createStandardPublicClientApplication};