plugin-data-source-mssql 2.0.11 → 2.0.12

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/lib/index.cjs

@@ -0,0 +1,91 @@
+/*! @azure/msal-common v16.6.1 2026-05-11 */
+'use strict';
+'use strict';
+
+var indexNode = require('./index-node-Cr_rbZzO.js');
+var indexBrowser = require('./index-browser.cjs');
+
+
+
+exports.AADServerParamKeys = indexNode.AADServerParamKeys;
+exports.AccountEntityUtils = indexNode.AccountEntityUtils;
+exports.AuthError = indexNode.AuthError;
+exports.AuthErrorCodes = indexNode.AuthErrorCodes;
+exports.AuthToken = indexNode.AuthToken;
+exports.AuthenticationHeaderParser = indexNode.AuthenticationHeaderParser;
+exports.Authority = indexNode.Authority;
+exports.AuthorityFactory = indexNode.AuthorityFactory;
+exports.AuthorityType = indexNode.AuthorityType;
+exports.AuthorizationCodeClient = indexNode.AuthorizationCodeClient;
+exports.AuthorizeProtocol = indexNode.Authorize;
+exports.AzureCloudInstance = indexNode.AzureCloudInstance;
+exports.CacheError = indexNode.CacheError;
+exports.CacheErrorCodes = indexNode.CacheErrorCodes;
+exports.CacheHelpers = indexNode.CacheHelpers;
+exports.CacheManager = indexNode.CacheManager;
+exports.CcsCredentialType = indexNode.CcsCredentialType;
+exports.ClientAssertionUtils = indexNode.ClientAssertionUtils;
+exports.ClientAuthError = indexNode.ClientAuthError;
+exports.ClientAuthErrorCodes = indexNode.ClientAuthErrorCodes;
+exports.ClientConfigurationError = indexNode.ClientConfigurationError;
+exports.ClientConfigurationErrorCodes = indexNode.ClientConfigurationErrorCodes;
+exports.Constants = indexNode.Constants;
+exports.DEFAULT_CRYPTO_IMPLEMENTATION = indexNode.DEFAULT_CRYPTO_IMPLEMENTATION;
+exports.DEFAULT_SYSTEM_OPTIONS = indexNode.DEFAULT_SYSTEM_OPTIONS;
+exports.DefaultStorageClass = indexNode.DefaultStorageClass;
+exports.IntFields = indexNode.IntFields;
+exports.InteractionRequiredAuthError = indexNode.InteractionRequiredAuthError;
+exports.InteractionRequiredAuthErrorCodes = indexNode.InteractionRequiredAuthErrorCodes;
+Object.defineProperty(exports, "LogLevel", {
+	enumerable: true,
+	get: function () { return indexNode.LogLevel; }
+});
+exports.Logger = indexNode.Logger;
+exports.NetworkError = indexNode.NetworkError;
+exports.PerformanceEventStatus = indexNode.PerformanceEventStatus;
+exports.PerformanceEvents = indexNode.PerformanceEvents;
+exports.PlatformBrokerError = indexNode.PlatformBrokerError;
+exports.PopTokenGenerator = indexNode.PopTokenGenerator;
+exports.ProtocolMode = indexNode.ProtocolMode;
+exports.ProtocolUtils = indexNode.ProtocolUtils;
+exports.RefreshTokenClient = indexNode.RefreshTokenClient;
+exports.RequestParameterBuilder = indexNode.RequestParameterBuilder;
+exports.ResponseHandler = indexNode.ResponseHandler;
+exports.ScopeSet = indexNode.ScopeSet;
+exports.ServerError = indexNode.ServerError;
+exports.ServerTelemetryManager = indexNode.ServerTelemetryManager;
+exports.SilentFlowClient = indexNode.SilentFlowClient;
+exports.StringUtils = indexNode.StringUtils;
+exports.StubPerformanceClient = indexNode.StubPerformanceClient;
+exports.StubbedNetworkModule = indexNode.StubbedNetworkModule;
+exports.ThrottlingUtils = indexNode.ThrottlingUtils;
+exports.TimeUtils = indexNode.TimeUtils;
+exports.TokenCacheContext = indexNode.TokenCacheContext;
+exports.TokenProtocol = indexNode.Token;
+exports.UrlString = indexNode.UrlString;
+exports.UrlUtils = indexNode.UrlUtils;
+exports.buildAccountToCache = indexNode.buildAccountToCache;
+exports.buildClientConfiguration = indexNode.buildClientConfiguration;
+exports.buildClientInfo = indexNode.buildClientInfo;
+exports.buildClientInfoFromHomeAccountId = indexNode.buildClientInfoFromHomeAccountId;
+exports.buildStaticAuthorityOptions = indexNode.buildStaticAuthorityOptions;
+exports.buildTenantProfile = indexNode.buildTenantProfile;
+exports.createAuthError = indexNode.createAuthError;
+exports.createCacheError = indexNode.createCacheError;
+exports.createClientAuthError = indexNode.createClientAuthError;
+exports.createClientConfigurationError = indexNode.createClientConfigurationError;
+exports.createInteractionRequiredAuthError = indexNode.createInteractionRequiredAuthError;
+exports.createNetworkError = indexNode.createNetworkError;
+exports.enforceResourceParameter = indexNode.enforceResourceParameter;
+exports.formatAuthorityUri = indexNode.formatAuthorityUri;
+exports.getClientAssertion = indexNode.getClientAssertion;
+exports.getRequestThumbprint = indexNode.getRequestThumbprint;
+exports.getTenantIdFromIdTokenClaims = indexNode.getTenantIdFromIdTokenClaims;
+exports.invoke = indexNode.invoke;
+exports.invokeAsync = indexNode.invokeAsync;
+exports.tenantIdMatchesHomeTenant = indexNode.tenantIdMatchesHomeTenant;
+exports.updateAccountTenantProfileData = indexNode.updateAccountTenantProfileData;
+exports.version = indexNode.version;
+exports.JoseHeader = indexBrowser.JoseHeader;
+exports.PerformanceClient = indexBrowser.PerformanceClient;
+//# sourceMappingURL=index.cjs.map

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/lib/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/lib/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/node/README.md

@@ -0,0 +1 @@
+Do not remove or rename. This folder allows subpath imports in environments that don't understand the exports field.

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/node/package.json

@@ -0,0 +1,5 @@
+{
+  "main": "../lib/index-node.cjs",
+  "module": "../dist/index-node.mjs",
+  "types": "../types/index-node.d.ts"
+}

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/package.json

@@ -0,0 +1,133 @@
+{
+  "name": "@azure/msal-common",
+  "author": {
+    "name": "Microsoft",
+    "email": "nugetaad@microsoft.com",
+    "url": "https://www.microsoft.com"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/AzureAD/microsoft-authentication-library-for-js.git"
+  },
+  "version": "16.6.1",
+  "description": "Microsoft Authentication Library for js",
+  "keywords": [
+    "implicit",
+    "authorization code",
+    "PKCE",
+    "js",
+    "AAD",
+    "msal",
+    "oauth"
+  ],
+  "sideEffects": false,
+  "type": "module",
+  "main": "./lib/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./types/index.d.ts",
+  "exports": {
+    "./browser": {
+      "import": {
+        "types": "./types/index-browser.d.ts",
+        "default": "./dist-browser/index-browser.mjs"
+      },
+      "require": {
+        "types": "./types/index-browser.d.cts",
+        "default": "./lib/index-browser.cjs"
+      }
+    },
+    "./node": {
+      "import": {
+        "types": "./types/index-node.d.ts",
+        "default": "./dist/index-node.mjs"
+      },
+      "require": {
+        "types": "./types/index-node.d.cts",
+        "default": "./lib/index-node.cjs"
+      }
+    },
+    ".": {
+      "import": {
+        "types": "./types/index.d.ts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./types/index.d.cts",
+        "default": "./lib/index.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "engines": {
+    "node": ">=0.8.0"
+  },
+  "directories": {
+    "test": "test"
+  },
+  "files": [
+    "dist",
+    "dist-browser",
+    "types",
+    "lib",
+    "src",
+    "node",
+    "browser"
+  ],
+  "scripts": {
+    "clean": "shx rm -rf dist dist-browser types lib",
+    "clean:coverage": "rimraf ../../.nyc_output/*",
+    "lint": "eslint src --ext .ts",
+    "lint:fix": "npm run lint -- --fix",
+    "test": "jest",
+    "test:coverage": "jest --coverage",
+    "test:coverage:only": "npm run clean:coverage && npm run test:coverage",
+    "build:modules": "rollup -c --strictDeprecations --bundleConfigAsCjs && npm run build:types",
+    "build:types": "tsc -p tsconfig.build.types.json",
+    "build:modules:watch": "rollup -cw --bundleConfigAsCjs",
+    "build": "npm run clean && npm run build:modules",
+    "build:debug": "npm run clean && cross-env MSAL_MINIFY_LOGS=false npm run build:modules",
+    "build:all": "npm run build",
+    "build:all:debug": "cross-env MSAL_MINIFY_LOGS=false npm run build",
+    "prepack": "npm run build",
+    "metadata:check": "ts-node scripts/metadata.ts",
+    "format:check": "prettier --ignore-path .gitignore --check src test",
+    "format:fix": "prettier --ignore-path .gitignore --write src test",
+    "apiExtractor": "api-extractor run"
+  },
+  "beachball": {
+    "disallowedChangeTypes": [
+      "major"
+    ]
+  },
+  "devDependencies": {
+    "@babel/core": "^7.7.2",
+    "@babel/plugin-proposal-class-properties": "^7.7.0",
+    "@babel/plugin-proposal-object-rest-spread": "^7.6.2",
+    "@babel/preset-env": "^7.7.1",
+    "@babel/preset-typescript": "^7.7.2",
+    "@microsoft/api-extractor": "^7.43.4",
+    "@rollup/plugin-typescript": "^11.0.0",
+    "@types/debug": "^4.1.5",
+    "@types/jest": "^29.5.0",
+    "@types/lodash": "^4.14.182",
+    "@types/node": "^20.3.1",
+    "cross-env": "^10.1.0",
+    "eslint-config-msal": "file:../../shared-configs/eslint-config-msal",
+    "jest": "^29.5.0",
+    "jest-junit": "^16.0.0",
+    "lodash": "^4.17.21",
+    "msal-test-utils": "file:../../shared-test-utils",
+    "prettier": "2.8.7",
+    "rimraf": "^3.0.2",
+    "rollup": "^4.22.4",
+    "rollup-msal": "file:../../shared-configs/rollup-msal",
+    "shx": "^0.3.2",
+    "ts-jest": "^29.1.0",
+    "ts-jest-resolver": "^2.0.1",
+    "ts-node": "^10.9.1",
+    "tslib": "^1.10.0",
+    "typescript": "^4.9.5",
+    "yargs": "^17.5.1"
+  }
+}

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/src/account/AccountInfo.ts

@@ -0,0 +1,183 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+import { TokenClaims } from "./TokenClaims.js";
+
+export type DataBoundary = "EU" | "None";
+
+/**
+ * Account object with the following signature:
+ * - homeAccountId          - Home account identifier for this account object
+ * - environment            - Entity which issued the token represented by the domain of the issuer (e.g. login.microsoftonline.com)
+ * - tenantId               - Full tenant or organizational id that this account belongs to
+ * - username               - preferred_username claim of the id_token that represents this account
+ * - upn                    - The user's UPN used to populate the account username in cases where preferred_username is not present in the ID token claims.
+ * - localAccountId         - Local, tenant-specific account identifer for this account object, usually used in legacy cases
+ * - name                   - Full name for the account, including given name and family name
+ * - idToken                - raw ID token
+ * - idTokenClaims          - Object contains claims from ID token
+ * - nativeAccountId        - The user's native account ID
+ * - tenantProfiles         - Map of tenant profile objects for each tenant that the account has authenticated with in the browser
+ * - dataBoundary           - Data boundary extracted from clientInfo
+ */
+export type AccountInfo = {
+    homeAccountId: string;
+    environment: string;
+    tenantId: string;
+    username: string;
+    localAccountId: string;
+    loginHint?: string;
+    name?: string;
+    upn?: string;
+    idToken?: string;
+    idTokenClaims?: TokenClaims & {
+        [key: string]:
+            | string
+            | number
+            | string[]
+            | object
+            | undefined
+            | unknown;
+    };
+    nativeAccountId?: string;
+    authorityType?: string;
+    tenantProfiles?: Map<string, TenantProfile>;
+    dataBoundary?: DataBoundary;
+};
+
+/**
+ * Account details that vary across tenants for the same user
+ */
+export type TenantProfile = Pick<
+    AccountInfo,
+    "tenantId" | "localAccountId" | "name" | "username" | "loginHint" | "upn"
+> & {
+    /**
+     * - isHomeTenant           - True if this is the home tenant profile of the account, false if it's a guest tenant profile
+     */
+    isHomeTenant?: boolean;
+};
+
+export type ActiveAccountFilters = {
+    homeAccountId: string;
+    localAccountId: string;
+    tenantId?: string;
+};
+
+/**
+ * Returns true if tenantId matches the utid portion of homeAccountId
+ * @param tenantId
+ * @param homeAccountId
+ * @returns
+ */
+export function tenantIdMatchesHomeTenant(
+    tenantId?: string,
+    homeAccountId?: string
+): boolean {
+    return (
+        !!tenantId &&
+        !!homeAccountId &&
+        tenantId === homeAccountId.split(".")[1]
+    );
+}
+
+/**
+ * Build tenant profile
+ * @param homeAccountId - Home account identifier for this account object
+ * @param localAccountId - Local account identifer for this account object
+ * @param tenantId - Full tenant or organizational id that this account belongs to
+ * @param idTokenClaims - Claims from the ID token
+ * @returns
+ */
+export function buildTenantProfile(
+    homeAccountId: string,
+    localAccountId: string,
+    tenantId: string,
+    idTokenClaims?: TokenClaims
+): TenantProfile {
+    if (idTokenClaims) {
+        const {
+            oid,
+            sub,
+            tid,
+            name,
+            tfp,
+            acr,
+            preferred_username,
+            upn,
+            login_hint,
+        } = idTokenClaims;
+
+        /**
+         * Since there is no way to determine if the authority is AAD or B2C, we exhaust all the possible claims that can serve as tenant ID with the following precedence:
+         * tid - TenantID claim that identifies the tenant that issued the token in AAD. Expected in all AAD ID tokens, not present in B2C ID Tokens.
+         * tfp - Trust Framework Policy claim that identifies the policy that was used to authenticate the user. Functions as tenant for B2C scenarios.
+         * acr - Authentication Context Class Reference claim used only with older B2C policies. Fallback in case tfp is not present, but likely won't be present anyway.
+         */
+        const tenantId = tid || tfp || acr || "";
+
+        return {
+            tenantId: tenantId,
+            localAccountId: oid || sub || "",
+            name: name,
+            username: preferred_username || upn || "",
+            loginHint: login_hint,
+            isHomeTenant: tenantIdMatchesHomeTenant(tenantId, homeAccountId),
+            upn: upn,
+        };
+    } else {
+        return {
+            tenantId,
+            localAccountId,
+            username: "",
+            isHomeTenant: tenantIdMatchesHomeTenant(tenantId, homeAccountId),
+        };
+    }
+}
+
+/**
+ * Replaces account info that varies by tenant profile sourced from the ID token claims passed in with the tenant-specific account info
+ * @param baseAccountInfo
+ * @param idTokenClaims
+ * @returns
+ */
+export function updateAccountTenantProfileData(
+    baseAccountInfo: AccountInfo,
+    tenantProfile?: TenantProfile,
+    idTokenClaims?: TokenClaims,
+    idTokenSecret?: string
+): AccountInfo {
+    let updatedAccountInfo = baseAccountInfo;
+    // Tenant Profile overrides passed in account info
+    if (tenantProfile) {
+        // eslint-disable-next-line @typescript-eslint/no-unused-vars
+        const { isHomeTenant, ...tenantProfileOverride } = tenantProfile;
+        updatedAccountInfo = { ...baseAccountInfo, ...tenantProfileOverride };
+    }
+
+    // ID token claims override passed in account info and tenant profile
+    if (idTokenClaims) {
+        // Ignore isHomeTenant which is a utility property of tenant profile but not required in base account info
+        // eslint-disable-next-line @typescript-eslint/no-unused-vars
+        const { isHomeTenant, ...claimsSourcedTenantProfile } =
+            buildTenantProfile(
+                baseAccountInfo.homeAccountId,
+                baseAccountInfo.localAccountId,
+                baseAccountInfo.tenantId,
+                idTokenClaims
+            );
+
+        updatedAccountInfo = {
+            ...updatedAccountInfo,
+            ...claimsSourcedTenantProfile,
+            idTokenClaims: idTokenClaims,
+            idToken: idTokenSecret,
+        };
+
+        return updatedAccountInfo;
+    }
+
+    return updatedAccountInfo;
+}

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/src/account/AuthToken.ts

@@ -0,0 +1,93 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+import { TokenClaims } from "./TokenClaims.js";
+import {
+    createClientAuthError,
+    ClientAuthErrorCodes,
+} from "../error/ClientAuthError.js";
+
+/**
+ * Extract token by decoding the rawToken
+ *
+ * @param encodedToken
+ */
+export function extractTokenClaims(
+    encodedToken: string,
+    base64Decode: (input: string) => string
+): TokenClaims {
+    const jswPayload = getJWSPayload(encodedToken);
+
+    // token will be decoded to get the username
+    try {
+        // base64Decode() should throw an error if there is an issue
+        const base64Decoded = base64Decode(jswPayload);
+        return JSON.parse(base64Decoded) as TokenClaims;
+    } catch (err) {
+        throw createClientAuthError(ClientAuthErrorCodes.tokenParsingError);
+    }
+}
+
+/**
+ * Check if the signin_state claim contains "kmsi"
+ * @param idTokenClaims
+ * @returns
+ */
+export function isKmsi(idTokenClaims: TokenClaims): boolean {
+    if (!idTokenClaims.signin_state) {
+        return false;
+    }
+    /**
+     * Signin_state claim known values:
+     * dvc_mngd - device is managed
+     * dvc_dmjd - device is domain joined
+     * kmsi - user opted to "keep me signed in"
+     * inknownntwk - Request made inside a known network. Don't use this, use CAE instead.
+     */
+    const kmsiClaims = ["kmsi", "dvc_dmjd"]; // There are some cases where kmsi may not be returned but persistent storage is still OK - allow dvc_dmjd as well
+    return idTokenClaims.signin_state.some((value) =>
+        kmsiClaims.includes(value.trim().toLowerCase())
+    );
+}
+
+/**
+ * decode a JWT
+ *
+ * @param authToken
+ */
+export function getJWSPayload(authToken: string): string {
+    if (!authToken) {
+        throw createClientAuthError(ClientAuthErrorCodes.nullOrEmptyToken);
+    }
+    const tokenPartsRegex = /^([^\.\s]*)\.([^\.\s]+)\.([^\.\s]*)$/;
+    const matches = tokenPartsRegex.exec(authToken);
+    if (!matches || matches.length < 4) {
+        throw createClientAuthError(ClientAuthErrorCodes.tokenParsingError);
+    }
+    /**
+     * const crackedToken = {
+     *  header: matches[1],
+     *  JWSPayload: matches[2],
+     *  JWSSig: matches[3],
+     * };
+     */
+
+    return matches[2];
+}
+
+/**
+ * Determine if the token's max_age has transpired
+ */
+export function checkMaxAge(authTime: number, maxAge: number): void {
+    /*
+     * per https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest
+     * To force an immediate re-authentication: If an app requires that a user re-authenticate prior to access,
+     * provide a value of 0 for the max_age parameter and the AS will force a fresh login.
+     */
+    const fiveMinuteSkew = 300000; // five minutes in milliseconds
+    if (maxAge === 0 || Date.now() - fiveMinuteSkew > authTime + maxAge) {
+        throw createClientAuthError(ClientAuthErrorCodes.maxAgeTranspired);
+    }
+}

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/src/account/CcsCredential.ts

@@ -0,0 +1,16 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+export type CcsCredential = {
+    credential: string;
+    type: CcsCredentialType;
+};
+
+export const CcsCredentialType = {
+    HOME_ACCOUNT_ID: "home_account_id",
+    UPN: "UPN",
+} as const;
+export type CcsCredentialType =
+    (typeof CcsCredentialType)[keyof typeof CcsCredentialType];

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/src/account/ClientCredentials.ts

@@ -0,0 +1,29 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+export type ClientAssertionConfig = {
+    clientId: string;
+    tokenEndpoint?: string;
+};
+
+export type ClientAssertionCallback = (
+    config: ClientAssertionConfig
+) => Promise<string>;
+
+/**
+ * Client Assertion credential for Confidential Clients
+ */
+export type ClientAssertion = {
+    assertion: string | ClientAssertionCallback;
+    assertionType: string;
+};
+
+/**
+ * Client Credentials set for Confidential Clients
+ */
+export type ClientCredentials = {
+    clientSecret?: string;
+    clientAssertion?: ClientAssertion;
+};

package/dist/tedious/node_modules/@azure/msal-browser/node_modules/@azure/msal-common/src/account/ClientInfo.ts

@@ -0,0 +1,67 @@
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+
+import {
+    createClientAuthError,
+    ClientAuthErrorCodes,
+} from "../error/ClientAuthError.js";
+import * as Constants from "../utils/Constants.js";
+
+/**
+ * Client info object which consists of:
+ * uid: user id
+ * utid: tenant id
+ * xms_tdbr: optional, only for non-US tenants
+ */
+export type ClientInfo = {
+    uid: string;
+    utid: string;
+    xms_tdbr?: string;
+};
+
+/**
+ * Function to build a client info object from server clientInfo string
+ * @param rawClientInfo
+ * @param crypto
+ */
+export function buildClientInfo(
+    rawClientInfo: string,
+    base64Decode: (input: string) => string
+): ClientInfo {
+    if (!rawClientInfo) {
+        throw createClientAuthError(ClientAuthErrorCodes.clientInfoEmptyError);
+    }
+
+    try {
+        const decodedClientInfo: string = base64Decode(rawClientInfo);
+        return JSON.parse(decodedClientInfo) as ClientInfo;
+    } catch (e) {
+        throw createClientAuthError(
+            ClientAuthErrorCodes.clientInfoDecodingError
+        );
+    }
+}
+
+/**
+ * Function to build a client info object from cached homeAccountId string
+ * @param homeAccountId
+ */
+export function buildClientInfoFromHomeAccountId(
+    homeAccountId: string
+): ClientInfo {
+    if (!homeAccountId) {
+        throw createClientAuthError(
+            ClientAuthErrorCodes.clientInfoDecodingError
+        );
+    }
+    const clientInfoParts: string[] = homeAccountId.split(
+        Constants.CLIENT_INFO_SEPARATOR,
+        2
+    );
+    return {
+        uid: clientInfoParts[0],
+        utid: clientInfoParts.length < 2 ? "" : clientInfoParts[1],
+    };
+}