react-native-msal2 1.0.16 → 1.0.18

package/README.md

@@ -1,94 +1,456 @@
 # react-native-msal2
 
-
 [![npm latest version](https://img.shields.io/npm/v/react-native-msal2/latest.svg)](https://www.npmjs.com/package/react-native-msal2)
-[![npm beta version](https://img.shields.io/npm/v/react-native-msal2/beta.svg)](https://www.npmjs.com/package/react-native-msal2)
 [![semantic-release](https://img.shields.io/badge/%20%20%F0%9F%93%A6%F0%9F%9A%80-semantic--release-e10079.svg)](https://github.com/semantic-release/semantic-release)
 
-MSAL React Native wrapper for iOS and Android
+A React Native wrapper around Microsoft Authentication Library (MSAL) for iOS and Android. Enables authentication with Microsoft identity platform (Azure AD, Azure AD B2C, Microsoft personal accounts) in your React Native apps.
+
+## Table of Contents
+
+- [Features](#features)
+- [Prerequisites](#prerequisites)
+- [Installation](#installation)
+- [Platform Setup](#platform-setup)
+  - [iOS Setup](#ios-setup)
+  - [Android Setup](#android-setup)
+- [Usage](#usage)
+  - [Configuration](#configuration)
+  - [Initialization](#initialization)
+  - [Acquire Token Interactively](#acquire-token-interactively)
+  - [Acquire Token Silently](#acquire-token-silently)
+  - [Get Accounts](#get-accounts)
+  - [Remove Account / Sign Out](#remove-account--sign-out)
+- [API Reference](#api-reference)
+  - [PublicClientApplication](#publicclientapplication)
+  - [Types](#types)
+- [B2C Example](#b2c-example)
+- [Troubleshooting](#troubleshooting)
+- [Development](#development)
+- [License](#license)
+
+## Features
+
+- Interactive and silent token acquisition
+- Azure AD and Azure AD B2C support
+- Multiple account management
+- Customizable webview parameters (iOS)
+- Android Custom Tabs browser configuration
+- TypeScript support out of the box
+
+## Prerequisites
+
+- React Native >= 0.70
+- iOS >= 12.0
+- Android minSdkVersion >= 21
+- An app registered in the [Azure Portal](https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade)
 
 ## Installation
 
+```bash
+npm install react-native-msal2
+```
+
+### iOS
+
+```bash
+cd ios && pod install
+```
+
+### Android
+
+No additional install steps required — autolinking handles it.
+
+## Platform Setup
+
+### iOS Setup
+
+#### 1. Register a Redirect URI
+
+In the Azure Portal, add a redirect URI for iOS:
+
+```
+msauth.<your.bundle.id>://auth
+```
+
+#### 2. Configure URL Scheme
+
+Add the following to your `Info.plist`:
+
+```xml
+<key>CFBundleURLTypes</key>
+<array>
+  <dict>
+    <key>CFBundleURLSchemes</key>
+    <array>
+      <string>msauth.$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+    </array>
+  </dict>
+</array>
+```
+
+#### 3. Handle Auth Redirects
+
+In your `AppDelegate.m` (or `AppDelegate.mm`), add:
+
+```objc
+#import <MSAL/MSAL.h>
+
+- (BOOL)application:(UIApplication *)app openURL:(NSURL *)url options:(NSDictionary<UIApplicationOpenURLOptionsKey,id> *)options
+{
+  return [MSALPublicClientApplication handleMSALResponse:url sourceApplication:options[UIApplicationOpenURLOptionsSourceApplicationKey]];
+}
+```
+
+#### 4. Keychain Sharing (Optional)
+
+If you need keychain sharing, add the `Keychain Sharing` capability in Xcode and add your bundle identifier as a keychain group.
+
+### Android Setup
+
+#### 1. Register a Redirect URI
+
+The library automatically generates a redirect URI in the format:
+
 ```
-npm i react-native-msal2
+msauth://<your.package.name>/<base64-encoded-signature-hash>
 ```
 
+You can also provide a custom `redirectUri` in the config. Register whichever URI you use in the Azure Portal.
+
+#### 2. Configure BrowserTabActivity
+
+Add the following activity to your `AndroidManifest.xml` inside the `<application>` tag:
+
+```xml
+<activity android:name="com.microsoft.identity.client.BrowserTabActivity">
+  <intent-filter>
+    <action android:name="android.intent.action.VIEW" />
+    <category android:name="android.intent.category.DEFAULT" />
+    <category android:name="android.intent.category.BROWSABLE" />
+    <data
+      android:scheme="msauth"
+      android:host="<your.package.name>"
+      android:path="/<url-encoded-signature-hash>" />
+  </intent-filter>
+</activity>
+```
+
+#### 3. Get Your Signature Hash
+
+To find your signature hash for the redirect URI:
+
+```bash
+keytool -exportcert -alias androiddebugkey -keystore ~/.android/debug.keystore | openssl sha1 -binary | openssl base64
+```
+
+Default debug keystore password is `android`.
+
 ## Usage
 
+### Configuration
+
 ```typescript
 import PublicClientApplication from 'react-native-msal2';
-import type { MSALConfiguration /*, etc */ } from 'react-native-msal2';
+import type { MSALConfiguration } from 'react-native-msal2';
+import { Platform } from 'react-native';
 
 const config: MSALConfiguration = {
   auth: {
-    clientId: 'your-client-id',
-    // This authority is used as the default in `acquireToken` and `acquireTokenSilent` if not provided to those methods.
+    clientId: '<your-client-id>',
     // Defaults to 'https://login.microsoftonline.com/common'
-    authority: 'https://<authority url>',
+    authority: 'https://login.microsoftonline.com/<tenant-id>',
+    knownAuthorities: ['https://login.microsoftonline.com/<tenant-id>'],
+    redirectUri: Platform.select({
+      ios: 'msauth.<your.bundle.id>://auth',
+      android: 'msauth://<your.package.name>/<signature-hash>',
+    }),
+  },
+  // Android-specific options (optional)
+  androidConfigOptions: {
+    authorization_user_agent: 'DEFAULT',
+    broker_redirect_uri_registered: false,
+    logging: {
+      pii_enabled: false,
+      log_level: 'ERROR',
+      logcat_enabled: true,
+    },
   },
 };
-const scopes = ['scope1', 'scope2'];
+```
+
+### Initialization
 
-// Initialize the public client application:
+You must call `init()` before using any other method:
+
+```typescript
 const pca = new PublicClientApplication(config);
+
 try {
   await pca.init();
 } catch (error) {
-  console.error('Error initializing the pca, check your config.', error);
+  console.error('Error initializing MSAL:', error);
 }
+```
+
+### Acquire Token Interactively
+
+Use this for the first-time login or when a silent token acquisition fails:
+
+```typescript
+import type { MSALInteractiveParams, MSALResult } from 'react-native-msal2';
+
+const params: MSALInteractiveParams = {
+  scopes: ['User.Read'],
+  promptType: MSALPromptType.SELECT_ACCOUNT,
+  loginHint: '<email>',
+};
 
-// Acquiring a token for the first time, you must call pca.acquireToken
-const params: MSALInteractiveParams = { scopes };
 const result: MSALResult | undefined = await pca.acquireToken(params);
+console.log('Access token:', result?.accessToken);
+```
+
+### Acquire Token Silently
+
+Use this for subsequent token acquisitions using a cached account:
+
+```typescript
+import type { MSALSilentParams } from 'react-native-msal2';
 
-// On subsequent token acquisitions, you can call `pca.acquireTokenSilent`
-// Force the token to refresh with the `forceRefresh` option
 const params: MSALSilentParams = {
-  account: result!.account, // or get this by filtering the result from `pca.getAccounts` (see below)
-  scopes,
-  forceRefresh: true,
+  scopes: ['User.Read'],
+  account: result!.account,
+  forceRefresh: false,
 };
-const result: MSALResult | undefined = await pca.acquireTokenSilent(params);
 
-// Get all accounts for which this application has refresh tokens
-const accounts: MSALAccount[] = await pca.getAccounts();
+const silentResult = await pca.acquireTokenSilent(params);
+```
 
-// Retrieve the account matching the identifier
-const account: MSALAccount | undefined = await pca.getAccount(result!.account.identifier);
+### Get Accounts
 
-// Remove all tokens from the cache for this application for the provided account
-const success: boolean = await pca.removeAccount(result!.account);
+```typescript
+// Get all accounts with cached refresh tokens
+const accounts = await pca.getAccounts();
 
-// Same as `pca.removeAccount` with the exception that, if called on iOS with the `signoutFromBrowser` option set to true, it will additionally remove the account from the system browser
-const params: MSALSignoutParams = {
-  account: result!.account,
+// Get a specific account by identifier
+const account = await pca.getAccount(accountIdentifier);
+```
+
+### Remove Account / Sign Out
+
+```typescript
+// Remove account from cache (works on both platforms)
+await pca.removeAccount(account);
+
+// Sign out with browser session cleanup (iOS only — falls back to removeAccount on Android)
+import type { MSALSignoutParams } from 'react-native-msal2';
+
+await pca.signOut({
+  account,
   signoutFromBrowser: true,
+});
+```
+
+## API Reference
+
+### PublicClientApplication
+
+| Method | Returns | Description |
+|---|---|---|
+| `init()` | `Promise<this>` | Initializes the native MSAL client. Must be called first. |
+| `acquireToken(params)` | `Promise<MSALResult \| undefined>` | Acquires a token interactively via a webview/browser. |
+| `acquireTokenSilent(params)` | `Promise<MSALResult \| undefined>` | Acquires a token silently from cache or by refreshing. |
+| `getAccounts()` | `Promise<MSALAccount[]>` | Returns all accounts with cached refresh tokens. |
+| `getAccount(identifier)` | `Promise<MSALAccount \| undefined>` | Returns the account matching the given identifier. |
+| `removeAccount(account)` | `Promise<boolean>` | Removes all cached tokens for the given account. |
+| `signOut(params)` | `Promise<boolean>` | Removes cached tokens and optionally signs out from the browser (iOS). |
+| `getSelectedBrowser()` | `Promise<string>` | Returns the browser used for auth. Android only (returns `'N/A'` on iOS). |
+| `getSafeCustomTabsBrowsers()` | `Promise<MSALAndroidPreferredBrowser[]>` | Returns installed browsers supporting Custom Tabs. Android only. |
+
+### Types
+
+#### MSALConfiguration
+
+```typescript
+interface MSALConfiguration {
+  auth: {
+    clientId: string;
+    authority?: string;           // Default: 'https://login.microsoftonline.com/common'
+    knownAuthorities?: string[];
+    redirectUri?: string;         // Platform-specific, auto-generated on Android if omitted
+  };
+  androidConfigOptions?: MSALAndroidConfigOptions;
+}
+```
+
+#### MSALInteractiveParams
+
+```typescript
+interface MSALInteractiveParams {
+  scopes: string[];
+  authority?: string;
+  promptType?: MSALPromptType;
+  loginHint?: string;
+  extraQueryParameters?: Record<string, string>;
+  extraScopesToConsent?: string[];
+  webviewParameters?: MSALWebviewParams;
+}
+```
+
+#### MSALSilentParams
+
+```typescript
+interface MSALSilentParams {
+  scopes: string[];
+  account: MSALAccount;
+  authority?: string;
+  forceRefresh?: boolean;
+}
+```
+
+#### MSALSignoutParams
+
+```typescript
+interface MSALSignoutParams {
+  account: MSALAccount;
+  signoutFromBrowser?: boolean;   // iOS only, default: false
+  webviewParameters?: MSALWebviewParams;
+}
+```
+
+#### MSALResult
+
+```typescript
+interface MSALResult {
+  accessToken: string;
+  account: MSALAccount;
+  expiresOn: number;              // Unix timestamp (seconds)
+  idToken?: string;
+  scopes: string[];
+  tenantId?: string;
+}
+```
+
+#### MSALAccount
+
+```typescript
+interface MSALAccount {
+  identifier: string;
+  environment?: string;
+  tenantId: string;
+  username: string;
+  claims?: object;
+}
+```
+
+#### MSALPromptType
+
+```typescript
+enum MSALPromptType {
+  SELECT_ACCOUNT = 0,
+  LOGIN = 1,
+  CONSENT = 2,
+  WHEN_REQUIRED = 3,
+  DEFAULT = WHEN_REQUIRED,
+}
+```
+
+#### MSALWebviewParams (iOS)
+
+```typescript
+interface MSALWebviewParams {
+  ios_prefersEphemeralWebBrowserSession?: boolean;  // iOS 13+
+  ios_webviewType?: Ios_MSALWebviewType;
+  ios_presentationStyle?: Ios_ModalPresentationStyle;
+}
+```
+
+#### MSALAndroidConfigOptions
+
+```typescript
+interface MSALAndroidConfigOptions {
+  authorization_user_agent?: 'DEFAULT' | 'BROWSER' | 'WEBVIEW';
+  broker_redirect_uri_registered?: boolean;
+  preferred_browser?: MSALAndroidPreferredBrowser;
+  browser_safelist?: {
+    browser_package_name: string;
+    browser_signature_hashes: string[];
+    browser_use_customTab: boolean;
+  }[];
+  http?: { connect_timeout?: number; read_timeout?: number };
+  logging?: {
+    pii_enabled?: boolean;
+    log_level?: 'ERROR' | 'WARNING' | 'INFO' | 'VERBOSE';
+    logcat_enabled?: boolean;
+  };
+  multiple_clouds_supported?: boolean;
+}
+```
+
+## B2C Example
+
+```typescript
+import PublicClientApplication, {
+  MSALConfiguration,
+  MSALInteractiveParams,
+} from 'react-native-msal2';
+
+const b2cConfig: MSALConfiguration = {
+  auth: {
+    clientId: '<your-client-id>',
+    authority: 'https://<tenant>.b2clogin.com/tfp/<tenant>.onmicrosoft.com/<sign-in-policy>',
+    knownAuthorities: ['https://<tenant>.b2clogin.com'],
+  },
 };
-const success: boolean = await pca.signOut(params);
+
+const pca = new PublicClientApplication(b2cConfig);
+await pca.init();
+
+const result = await pca.acquireToken({
+  scopes: ['https://<tenant>.onmicrosoft.com/<api-id>/access_as_user'],
+});
 ```
 
+## Troubleshooting
+
+- **"PublicClientApplication is not initialized"** — Ensure you call `await pca.init()` before any other method.
+- **iOS redirect issues** — Verify your URL scheme in `Info.plist` matches the redirect URI registered in Azure Portal, and that `AppDelegate` handles the MSAL response.
+- **Android signature hash mismatch** — Regenerate your signature hash and ensure it matches the redirect URI in Azure Portal. Debug and release builds use different keystores.
+- **B2C authority not recognized** — Make sure the authority URL follows the pattern `https://<tenant>.b2clogin.com/tfp/<tenant>.onmicrosoft.com/<policy>` and is included in `knownAuthorities`.
+- **Silent token acquisition fails** — The refresh token may have expired. Fall back to `acquireToken` (interactive) and catch the error from `acquireTokenSilent`.
+
 ## Development
 
 ### Build
 
-Run a single build with `npm run build` and find the output in `/dist`.
+```bash
+npm run build
+```
+
+Output is in `/dist`.
 
 ### Tests
 
-Tests configured for React Native can be run with `npm test` or `npm run test:watch` in watch mode.
+```bash
+npm test
+npm run test:watch   # watch mode
+```
 
 ### Preview App
 
-To test your plugin on a device run the following to create a React Native app using it.
+Create a test app and run it on a device:
 
-```
+```bash
 npm run app
 cd app
-npm run ios / npm run android
+npm run ios    # or npm run android
 ```
 
-The following command will automatically copy over changes made to the plugin to the app.
+Auto-copy plugin changes to the app:
 
-```
+```bash
 npm run watch
 ```
+
+## License
+
+MIT

package/android/src/main/java/com/reactnativemsal/RNMSALModule.kt

@@ -175,6 +175,16 @@ class RNMSALModule(reactContext: ReactApplicationContext?) :
                 }
 
                 val packageInfo = getPackageInfoCompat(pm, packageName) ?: continue
+
+                // Guard against null signing info which causes NPE in PackageHelper.generateSignatureHashes
+                val hasSigningInfo = if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.P) {
+                    packageInfo.signingInfo != null
+                } else {
+                    @Suppress("DEPRECATION")
+                    packageInfo.signatures != null
+                }
+                if (!hasSigningInfo) continue
+
                 val version = packageInfo.versionName
                     ?: if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.P) {
                         packageInfo.longVersionCode.toString()

package/dist/index.js

@@ -51,7 +51,7 @@ var PublicClientApplication = class {
   async getSafeCustomTabsBrowsers() {
     this.validateIsInitialized();
     return await Platform.select({
-      android: async () => [await RNMSAL.getSafeCustomTabsBrowsers()],
+      android: async () => await RNMSAL.getSafeCustomTabsBrowsers(),
       default: async () => []
     })();
   }

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/publicClientApplication.ts", "../src/types.ts", "../index.tsx"],
-  "sourcesContent": ["import { Platform } from 'react-native'\n\nimport type {\n  MSALConfiguration,\n  MSALInteractiveParams,\n  MSALSilentParams,\n  MSALAccount,\n  MSALSignoutParams,\n  IPublicClientApplication,\n  MSALResult,\n  MSALAndroidPreferredBrowser,\n} from './types'\n\nimport { NativeModules } from 'react-native'\n\ntype RNMSALNativeModule = {\n  createPublicClientApplication(config: MSALConfiguration): Promise<void>\n  acquireToken(params: MSALInteractiveParams): Promise<MSALResult | undefined>\n  acquireTokenSilent(params: MSALSilentParams): Promise<MSALResult | undefined>\n  getAccounts(): Promise<MSALAccount[]>\n  getAccount(accountIdentifier: string): Promise<MSALAccount | undefined>\n  removeAccount(account: MSALAccount): Promise<boolean>\n  signout(params: MSALSignoutParams): Promise<boolean>\n  getSelectedBrowser(): Promise<string>\n  getSafeCustomTabsBrowsers(): Promise<MSALAndroidPreferredBrowser>\n}\n\nconst RNMSAL: RNMSALNativeModule = NativeModules.RNMSAL\n\n// export default RNMSAL\n\nexport class PublicClientApplication implements IPublicClientApplication {\n  private isInitialized: boolean = false\n\n  constructor(private readonly config: MSALConfiguration) {}\n\n  public async init() {\n    if (!this.isInitialized) {\n      await RNMSAL.createPublicClientApplication(this.config)\n      this.isInitialized = true\n    }\n    return this\n  }\n\n  public async acquireToken(params: MSALInteractiveParams) {\n    this.validateIsInitialized()\n    return await RNMSAL.acquireToken(params)\n  }\n\n  public async acquireTokenSilent(params: MSALSilentParams) {\n    this.validateIsInitialized()\n    return await RNMSAL.acquireTokenSilent(params)\n  }\n\n  public async getAccounts() {\n    this.validateIsInitialized()\n    return await RNMSAL.getAccounts()\n  }\n\n  public async getAccount(accountIdentifier: string) {\n    this.validateIsInitialized()\n    return await RNMSAL.getAccount(accountIdentifier)\n  }\n\n  public async removeAccount(account: MSALAccount) {\n    this.validateIsInitialized()\n    return await RNMSAL.removeAccount(account)\n  }\n\n  public async signOut(params: MSALSignoutParams) {\n    this.validateIsInitialized()\n    return await Platform.select({\n      ios: async () => await RNMSAL.signout(params),\n      default: async () => await RNMSAL.removeAccount(params.account),\n    })()\n  }\n\n  public async getSelectedBrowser() {\n    this.validateIsInitialized()\n    return await Platform.select({\n      android: async () => await RNMSAL.getSelectedBrowser(),\n      default: async () => 'N/A',\n    })()\n  }\n\n  async getSafeCustomTabsBrowsers() {\n    this.validateIsInitialized()\n    return await Platform.select({\n      android: async () => [await RNMSAL.getSafeCustomTabsBrowsers()],\n      default: async () => [],\n    })()\n  }\n\n  private validateIsInitialized() {\n    if (!this.isInitialized) {\n      throw new Error(\n        'PublicClientApplication is not initialized. You must call the `init` method before any other method.',\n      )\n    }\n  }\n}\n", "export interface IPublicClientApplication {\n  /**\n   * Acquire a token interactively\n   * @param {MSALInteractiveParams} params\n   * @return Result containing an access token and account identifier\n   * used for acquiring subsequent tokens silently\n   */\n  acquireToken(params: MSALInteractiveParams): Promise<MSALResult | undefined>\n\n  /**\n   * Acquire a token silently\n   * @param {MSALSilentParams} params - Includes the account identifer retrieved from a\n   * previous interactive login\n   * @return Result containing an access token and account identifier\n   * used for acquiring subsequent tokens silently\n   */\n  acquireTokenSilent(params: MSALSilentParams): Promise<MSALResult | undefined>\n\n  /**\n   * Get all accounts for which this application has refresh tokens\n   * @return Promise containing array of MSALAccount objects for which this application\n   * has refresh tokens.\n   */\n  getAccounts(): Promise<MSALAccount[]>\n\n  /**\n   * Retrieve the account matching the identifier\n   * @return Promise containing MSALAccount object\n   */\n  getAccount(accountIdentifier: string): Promise<MSALAccount | undefined>\n\n  /**\n   * Removes all tokens from the cache for this application for the provided\n   * account.\n   * @param {MSALAccount} account\n   * @return A promise containing a boolean = true if account removal was successful\n   * otherwise rejects\n   */\n  removeAccount(account: MSALAccount): Promise<boolean>\n\n  /**\n   * Removes all tokens from the cache for this application for the provided\n   * account. Additionally, this will remove the account from the system browser.\n   * NOTE: iOS only. On Android and web this is the same as `removeAccount`.\n   * @param {MSALSignoutParams} params\n   * @return A promise which resolves if sign out is successful,\n   * otherwise rejects\n   * @platform ios\n   */\n  signOut(params: MSALSignoutParams): Promise<boolean>\n\n  /**\n   * Returns the browser that will be used for interactive authentication.\n   * NOTE: Android only. On iOS this will always return 'N/A'.\n   * @return Promise resolving to the package name and version of the browser that will be used\n   * for interactive authentication.\n   * @platform android\n   */\n  getSelectedBrowser(): Promise<string>\n\n  /**\n   * Returns a array of installed browsers found in the configured safe list that support customTab.\n   * NOTE: Android only. On iOS this will always return N/A.\n   * @return Promise resolving to an array of installed browsers that support customTab\n   * @platform android\n   */\n  getSafeCustomTabsBrowsers(): Promise<MSALAndroidPreferredBrowser[]>\n}\n\nexport interface MSALConfiguration {\n  auth: {\n    /**\n     * The client ID of the application, this should come from the app developer portal.\n     */\n    clientId: string\n    /**\n     * The authority the application will use to obtain tokens.\n     */\n    authority?: string\n    /**\n     * List of known authorities that the application should trust.\n     */\n    knownAuthorities?: string[]\n    /**\n     * The redirect URI of the application.\n     *\n     * If you are providing this property, you should probably use `Platform.select`,\n     * because the redirect uris will be different for each platform.\n     */\n    redirectUri?: string\n  }\n  /**\n   * Options as described here: {@link https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-configuration}\n   * @platform android\n   */\n  androidConfigOptions?: MSALAndroidConfigOptions\n}\n\nexport interface MSALAndroidPreferredBrowser {\n  browser_package_name: string;\n  browser_signature_hashes: string[];\n  browser_version_lower_bound?: string;\n  browser_version_upper_bound?: string;\n}\n\nexport interface MSALAndroidConfigOptions {\n  authorization_user_agent?: 'DEFAULT' | 'BROWSER' | 'WEBVIEW'\n  broker_redirect_uri_registered?: boolean\n  preferred_browser?: MSALAndroidPreferredBrowser;\n  browser_safelist?: {\n    browser_package_name: string\n    browser_signature_hashes: string[]\n    browser_use_customTab: boolean\n  }[]\n  http?: {\n    connect_timeout?: number\n    read_timeout?: number\n  }\n  logging?: {\n    pii_enabled?: boolean\n    log_level?: 'ERROR' | 'WARNING' | 'INFO' | 'VERBOSE'\n    logcat_enabled?: boolean\n  }\n  multiple_clouds_supported?: boolean\n}\n\nexport interface MSALInteractiveParams {\n  /**\n   * Permissions you want included in the access token received in the result.\n   * Not all scopes are guaranteed to be included in the access token returned.\n   */\n  scopes: string[]\n  /**\n   * The authority that MSAL will use to obtain tokens. If not included, authority from\n   * MSALConfiguration will be used.\n   */\n  authority?: string\n  /**\n   * A specific prompt type for the interactive authentication flow.\n   */\n  promptType?: MSALPromptType\n  /**\n   * A loginHint (usually an email) to pass to the service at the beginning of the\n   * interactive authentication flow. The account returned is not guaranteed to match\n   * the loginHint.\n   */\n  loginHint?: string\n  /**\n   * Key-value pairs to pass to the /authorize and /token endpoints.\n   */\n  extraQueryParameters?: Record<string, string>\n  /**\n   * Permissions you want the account to consent to in the same authentication flow,\n   * but won\u2019t be included in the returned access token.\n   */\n  extraScopesToConsent?: string[]\n  /**\n   * User Interface configuration that MSAL uses when getting a token interactively or\n   * authorizing an end user.\n   */\n  webviewParameters?: MSALWebviewParams\n}\n\n/**\n * OIDC prompt parameter that specifies whether the Authorization Server prompts the\n * End-User for reauthentication and consent.\n */\nexport enum MSALPromptType {\n  /**\n   * If no user is specified the authentication webview will present a list of users\n   * currently signed in for the user to select among.\n   */\n  SELECT_ACCOUNT,\n  /**\n   * Require the user to authenticate in the webview.\n   */\n  LOGIN,\n  /**\n   * Require the user to consent to the current set of scopes for the request.\n   */\n  CONSENT,\n  /**\n   * The SSO experience will be determined by the presence of cookies in the webview and\n   * account type. User won\u2019t be prompted unless necessary. If multiple users are signed in,\n   * select account experience will be presented.\n   */\n  WHEN_REQUIRED,\n  /**\n   * Default is MSALPromptType.WHEN_REQUIRED.\n   */\n  DEFAULT = WHEN_REQUIRED,\n}\n\nexport interface MSALSilentParams {\n  /**\n   * Permissions you want included in the access token received in the result.\n   * Not all scopes are guaranteed to be included in the access token returned.\n   */\n  scopes: string[]\n  /**\n   * An account object for which tokens should be returned.\n   */\n  account: MSALAccount\n  /**\n   * The authority that MSAL will use to obtain tokens. If not included, authority from\n   * MSALConfiguration will be used.\n   */\n  authority?: string\n  /**\n   * Ignore any existing access token in the cache and force MSAL to get a new access token\n   * from the service.\n   */\n  forceRefresh?: boolean\n}\n\nexport interface MSALSignoutParams {\n  /**\n   * The account object for which to sign out of.\n   */\n  account: MSALAccount\n  /**\n   * Specifies whether signout should also open the browser and send a network request to the end_session_endpoint.\n   * false by default.\n   */\n  signoutFromBrowser?: boolean\n  /**\n   * User Interface configuration that MSAL uses when getting a token interactively or\n   * authorizing an end user.\n   */\n  webviewParameters?: MSALWebviewParams\n}\n\nexport interface MSALResult {\n  /**\n   * The Access Token requested, or empty string if no access token is returned in response\n   */\n  accessToken: string\n  /**\n   * The account object that holds account information.\n   */\n  account: MSALAccount\n  /**\n   * The time that the access token returned in the accessToken property ceases to be valid.\n   * This value is calculated based on current UTC time measured locally and the value expiresIn returned from the service\n   */\n  expiresOn: number\n  /**\n   * The raw id token if it\u2019s returned by the service or undefined if no id token is returned.\n   */\n  idToken?: string\n  /**\n   * The scope values returned from the service.\n   */\n  scopes: string[]\n  /**\n   * Identifier for the directory where account is locally represented\n   */\n  tenantId?: string\n}\n\nexport interface MSALAccount {\n  /**\n   * Unique identifier for the account.\n   */\n  identifier: string\n  /**\n   * Host part of the authority string used for authentication based on the issuer identifier.\n   */\n  environment?: string\n  /**\n   * An identifier for the AAD tenant that the account was acquired from.\n   */\n  tenantId: string\n  /**\n   * Shorthand name by which the End-User wishes to be referred to at the RP, such as janedoe or j.doe.\n   */\n  username: string\n  /**\n   * ID token claims for the account. Can be used to read additional information about the account, e.g. name.\n   */\n  claims?: object\n}\n\n/**\n * Mostly, if not all, iOS webview parameters\n * See https://azuread.github.io/microsoft-authentication-library-for-objc/Classes/MSALWebviewParameters.html\n */\nexport interface MSALWebviewParams {\n  /**\n   * A Boolean value that indicates whether the ASWebAuthenticationSession should ask the\n   * browser for a private authentication session.\n   * For more info see here: https://developer.apple.com/documentation/authenticationservices/aswebauthenticationsession/3237231-prefersephemeralwebbrowsersessio?language=objc\n   * @platform iOS 13+\n   */\n  ios_prefersEphemeralWebBrowserSession?: boolean\n  /**\n   * MSAL requires a web browser for interactive authentication.\n   * There are multiple web browsers available to complete authentication.\n   * MSAL will default to the web browser that provides best security and user experience for a given platform.\n   * Ios_MSALWebviewType allows changing the experience by customizing the configuration to other options for\n   * displaying web content\n   * @platform iOS\n   */\n  ios_webviewType?: Ios_MSALWebviewType\n  /**\n   * Note: Has no effect when ios_webviewType === `Ios_MSALWebviewType.DEFAULT` or\n   * ios_webviewType === `Ios_MSALWebviewType.AUTHENTICATION_SESSION`\n   * @platform iOS\n   */\n  ios_presentationStyle?: Ios_ModalPresentationStyle\n}\n\n/**\n * See https://developer.apple.com/documentation/uikit/uimodalpresentationstyle\n */\nexport enum Ios_ModalPresentationStyle {\n  fullScreen = 0,\n  pageSheet,\n  formSheet,\n  currentContext,\n  custom,\n  overFullScreen,\n  overCurrentContext,\n  popover,\n  blurOverFullScreen,\n  none = -1,\n  automatic = -2,\n}\n\n/**\n * See https://azuread.github.io/microsoft-authentication-library-for-objc/Enums/MSALWebviewType.html\n */\nexport enum Ios_MSALWebviewType {\n  DEFAULT = 0,\n  AUTHENTICATION_SESSION,\n  SAFARI_VIEW_CONTROLLER,\n  WK_WEB_VIEW,\n}\n", "import { PublicClientApplication } from './src/publicClientApplication'\nexport default PublicClientApplication\nexport * from './src/types'\n"],
-  "mappings": ";AAAA,SAAS,gBAAgB;AAazB,SAAS,qBAAqB;AAc9B,IAAM,SAA6B,cAAc;AAI1C,IAAM,0BAAN,MAAkE;AAAA,EAGvE,YAA6B,QAA2B;AAA3B;AAAA,EAA4B;AAAA,EAFjD,gBAAyB;AAAA,EAIjC,MAAa,OAAO;AAClB,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,OAAO,8BAA8B,KAAK,MAAM;AACtD,WAAK,gBAAgB;AAAA,IACvB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,aAAa,QAA+B;AACvD,SAAK,sBAAsB;AAC3B,WAAO,MAAM,OAAO,aAAa,MAAM;AAAA,EACzC;AAAA,EAEA,MAAa,mBAAmB,QAA0B;AACxD,SAAK,sBAAsB;AAC3B,WAAO,MAAM,OAAO,mBAAmB,MAAM;AAAA,EAC/C;AAAA,EAEA,MAAa,cAAc;AACzB,SAAK,sBAAsB;AAC3B,WAAO,MAAM,OAAO,YAAY;AAAA,EAClC;AAAA,EAEA,MAAa,WAAW,mBAA2B;AACjD,SAAK,sBAAsB;AAC3B,WAAO,MAAM,OAAO,WAAW,iBAAiB;AAAA,EAClD;AAAA,EAEA,MAAa,cAAc,SAAsB;AAC/C,SAAK,sBAAsB;AAC3B,WAAO,MAAM,OAAO,cAAc,OAAO;AAAA,EAC3C;AAAA,EAEA,MAAa,QAAQ,QAA2B;AAC9C,SAAK,sBAAsB;AAC3B,WAAO,MAAM,SAAS,OAAO;AAAA,MAC3B,KAAK,YAAY,MAAM,OAAO,QAAQ,MAAM;AAAA,MAC5C,SAAS,YAAY,MAAM,OAAO,cAAc,OAAO,OAAO;AAAA,IAChE,CAAC,EAAE;AAAA,EACL;AAAA,EAEA,MAAa,qBAAqB;AAChC,SAAK,sBAAsB;AAC3B,WAAO,MAAM,SAAS,OAAO;AAAA,MAC3B,SAAS,YAAY,MAAM,OAAO,mBAAmB;AAAA,MACrD,SAAS,YAAY;AAAA,IACvB,CAAC,EAAE;AAAA,EACL;AAAA,EAEA,MAAM,4BAA4B;AAChC,SAAK,sBAAsB;AAC3B,WAAO,MAAM,SAAS,OAAO;AAAA,MAC3B,SAAS,YAAY,CAAC,MAAM,OAAO,0BAA0B,CAAC;AAAA,MAC9D,SAAS,YAAY,CAAC;AAAA,IACxB,CAAC,EAAE;AAAA,EACL;AAAA,EAEQ,wBAAwB;AAC9B,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACmEO,IAAK,iBAAL,kBAAKA,oBAAL;AAKL,EAAAA,gCAAA;AAIA,EAAAA,gCAAA;AAIA,EAAAA,gCAAA;AAMA,EAAAA,gCAAA;AAIA,EAAAA,gCAAA,aAAU,yBAAV;AAvBU,SAAAA;AAAA,GAAA;AAoJL,IAAK,6BAAL,kBAAKC,gCAAL;AACL,EAAAA,wDAAA,gBAAa,KAAb;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA,UAAO,MAAP;AACA,EAAAA,wDAAA,eAAY,MAAZ;AAXU,SAAAA;AAAA,GAAA;AAiBL,IAAK,sBAAL,kBAAKC,yBAAL;AACL,EAAAA,0CAAA,aAAU,KAAV;AACA,EAAAA,0CAAA;AACA,EAAAA,0CAAA;AACA,EAAAA,0CAAA;AAJU,SAAAA;AAAA,GAAA;;;AC3UZ,IAAO,6BAAQ;",
+  "sourcesContent": ["import { Platform } from 'react-native'\n\nimport type {\n  MSALConfiguration,\n  MSALInteractiveParams,\n  MSALSilentParams,\n  MSALAccount,\n  MSALSignoutParams,\n  IPublicClientApplication,\n  MSALResult,\n  MSALAndroidPreferredBrowser,\n} from './types'\n\nimport { NativeModules } from 'react-native'\n\ntype RNMSALNativeModule = {\n  createPublicClientApplication(config: MSALConfiguration): Promise<void>\n  acquireToken(params: MSALInteractiveParams): Promise<MSALResult | undefined>\n  acquireTokenSilent(params: MSALSilentParams): Promise<MSALResult | undefined>\n  getAccounts(): Promise<MSALAccount[]>\n  getAccount(accountIdentifier: string): Promise<MSALAccount | undefined>\n  removeAccount(account: MSALAccount): Promise<boolean>\n  signout(params: MSALSignoutParams): Promise<boolean>\n  getSelectedBrowser(): Promise<string>\n  getSafeCustomTabsBrowsers(): Promise<MSALAndroidPreferredBrowser[]>\n}\n\nconst RNMSAL: RNMSALNativeModule = NativeModules.RNMSAL\n\n// export default RNMSAL\n\nexport class PublicClientApplication implements IPublicClientApplication {\n  private isInitialized: boolean = false\n\n  constructor(private readonly config: MSALConfiguration) {}\n\n  public async init() {\n    if (!this.isInitialized) {\n      await RNMSAL.createPublicClientApplication(this.config)\n      this.isInitialized = true\n    }\n    return this\n  }\n\n  public async acquireToken(params: MSALInteractiveParams) {\n    this.validateIsInitialized()\n    return await RNMSAL.acquireToken(params)\n  }\n\n  public async acquireTokenSilent(params: MSALSilentParams) {\n    this.validateIsInitialized()\n    return await RNMSAL.acquireTokenSilent(params)\n  }\n\n  public async getAccounts() {\n    this.validateIsInitialized()\n    return await RNMSAL.getAccounts()\n  }\n\n  public async getAccount(accountIdentifier: string) {\n    this.validateIsInitialized()\n    return await RNMSAL.getAccount(accountIdentifier)\n  }\n\n  public async removeAccount(account: MSALAccount) {\n    this.validateIsInitialized()\n    return await RNMSAL.removeAccount(account)\n  }\n\n  public async signOut(params: MSALSignoutParams) {\n    this.validateIsInitialized()\n    return await Platform.select({\n      ios: async () => await RNMSAL.signout(params),\n      default: async () => await RNMSAL.removeAccount(params.account),\n    })()\n  }\n\n  public async getSelectedBrowser() {\n    this.validateIsInitialized()\n    return await Platform.select({\n      android: async () => await RNMSAL.getSelectedBrowser(),\n      default: async () => 'N/A',\n    })()\n  }\n\n  async getSafeCustomTabsBrowsers() {\n    this.validateIsInitialized()\n    return await Platform.select({\n      android: async () => await RNMSAL.getSafeCustomTabsBrowsers(),\n      default: async () => [],\n    })()\n  }\n\n  private validateIsInitialized() {\n    if (!this.isInitialized) {\n      throw new Error(\n        'PublicClientApplication is not initialized. You must call the `init` method before any other method.',\n      )\n    }\n  }\n}\n", "export interface IPublicClientApplication {\n  /**\n   * Acquire a token interactively\n   * @param {MSALInteractiveParams} params\n   * @return Result containing an access token and account identifier\n   * used for acquiring subsequent tokens silently\n   */\n  acquireToken(params: MSALInteractiveParams): Promise<MSALResult | undefined>\n\n  /**\n   * Acquire a token silently\n   * @param {MSALSilentParams} params - Includes the account identifer retrieved from a\n   * previous interactive login\n   * @return Result containing an access token and account identifier\n   * used for acquiring subsequent tokens silently\n   */\n  acquireTokenSilent(params: MSALSilentParams): Promise<MSALResult | undefined>\n\n  /**\n   * Get all accounts for which this application has refresh tokens\n   * @return Promise containing array of MSALAccount objects for which this application\n   * has refresh tokens.\n   */\n  getAccounts(): Promise<MSALAccount[]>\n\n  /**\n   * Retrieve the account matching the identifier\n   * @return Promise containing MSALAccount object\n   */\n  getAccount(accountIdentifier: string): Promise<MSALAccount | undefined>\n\n  /**\n   * Removes all tokens from the cache for this application for the provided\n   * account.\n   * @param {MSALAccount} account\n   * @return A promise containing a boolean = true if account removal was successful\n   * otherwise rejects\n   */\n  removeAccount(account: MSALAccount): Promise<boolean>\n\n  /**\n   * Removes all tokens from the cache for this application for the provided\n   * account. Additionally, this will remove the account from the system browser.\n   * NOTE: iOS only. On Android and web this is the same as `removeAccount`.\n   * @param {MSALSignoutParams} params\n   * @return A promise which resolves if sign out is successful,\n   * otherwise rejects\n   * @platform ios\n   */\n  signOut(params: MSALSignoutParams): Promise<boolean>\n\n  /**\n   * Returns the browser that will be used for interactive authentication.\n   * NOTE: Android only. On iOS this will always return 'N/A'.\n   * @return Promise resolving to the package name and version of the browser that will be used\n   * for interactive authentication.\n   * @platform android\n   */\n  getSelectedBrowser(): Promise<string>\n\n  /**\n   * Returns a array of installed browsers found in the configured safe list that support customTab.\n   * NOTE: Android only. On iOS this will always return N/A.\n   * @return Promise resolving to an array of installed browsers that support customTab\n   * @platform android\n   */\n  getSafeCustomTabsBrowsers(): Promise<MSALAndroidPreferredBrowser[]>\n}\n\nexport interface MSALConfiguration {\n  auth: {\n    /**\n     * The client ID of the application, this should come from the app developer portal.\n     */\n    clientId: string\n    /**\n     * The authority the application will use to obtain tokens.\n     */\n    authority?: string\n    /**\n     * List of known authorities that the application should trust.\n     */\n    knownAuthorities?: string[]\n    /**\n     * The redirect URI of the application.\n     *\n     * If you are providing this property, you should probably use `Platform.select`,\n     * because the redirect uris will be different for each platform.\n     */\n    redirectUri?: string\n  }\n  /**\n   * Options as described here: {@link https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-configuration}\n   * @platform android\n   */\n  androidConfigOptions?: MSALAndroidConfigOptions\n}\n\nexport interface MSALAndroidPreferredBrowser {\n  browser_package_name: string\n  browser_signature_hashes: string[]\n  browser_version_lower_bound?: string\n  browser_version_upper_bound?: string\n}\n\nexport interface MSALAndroidConfigOptions {\n  authorization_user_agent?: 'DEFAULT' | 'BROWSER' | 'WEBVIEW'\n  broker_redirect_uri_registered?: boolean\n  preferred_browser?: MSALAndroidPreferredBrowser\n  browser_safelist?: {\n    browser_package_name: string\n    browser_signature_hashes: string[]\n    browser_use_customTab: boolean\n  }[]\n  http?: {\n    connect_timeout?: number\n    read_timeout?: number\n  }\n  logging?: {\n    pii_enabled?: boolean\n    log_level?: 'ERROR' | 'WARNING' | 'INFO' | 'VERBOSE'\n    logcat_enabled?: boolean\n  }\n  multiple_clouds_supported?: boolean\n}\n\nexport interface MSALInteractiveParams {\n  /**\n   * Permissions you want included in the access token received in the result.\n   * Not all scopes are guaranteed to be included in the access token returned.\n   */\n  scopes: string[]\n  /**\n   * The authority that MSAL will use to obtain tokens. If not included, authority from\n   * MSALConfiguration will be used.\n   */\n  authority?: string\n  /**\n   * A specific prompt type for the interactive authentication flow.\n   */\n  promptType?: MSALPromptType\n  /**\n   * A loginHint (usually an email) to pass to the service at the beginning of the\n   * interactive authentication flow. The account returned is not guaranteed to match\n   * the loginHint.\n   */\n  loginHint?: string\n  /**\n   * Key-value pairs to pass to the /authorize and /token endpoints.\n   */\n  extraQueryParameters?: Record<string, string>\n  /**\n   * Permissions you want the account to consent to in the same authentication flow,\n   * but won\u2019t be included in the returned access token.\n   */\n  extraScopesToConsent?: string[]\n  /**\n   * User Interface configuration that MSAL uses when getting a token interactively or\n   * authorizing an end user.\n   */\n  webviewParameters?: MSALWebviewParams\n}\n\n/**\n * OIDC prompt parameter that specifies whether the Authorization Server prompts the\n * End-User for reauthentication and consent.\n */\nexport enum MSALPromptType {\n  /**\n   * If no user is specified the authentication webview will present a list of users\n   * currently signed in for the user to select among.\n   */\n  SELECT_ACCOUNT,\n  /**\n   * Require the user to authenticate in the webview.\n   */\n  LOGIN,\n  /**\n   * Require the user to consent to the current set of scopes for the request.\n   */\n  CONSENT,\n  /**\n   * The SSO experience will be determined by the presence of cookies in the webview and\n   * account type. User won\u2019t be prompted unless necessary. If multiple users are signed in,\n   * select account experience will be presented.\n   */\n  WHEN_REQUIRED,\n  /**\n   * Default is MSALPromptType.WHEN_REQUIRED.\n   */\n  DEFAULT = WHEN_REQUIRED,\n}\n\nexport interface MSALSilentParams {\n  /**\n   * Permissions you want included in the access token received in the result.\n   * Not all scopes are guaranteed to be included in the access token returned.\n   */\n  scopes: string[]\n  /**\n   * An account object for which tokens should be returned.\n   */\n  account: MSALAccount\n  /**\n   * The authority that MSAL will use to obtain tokens. If not included, authority from\n   * MSALConfiguration will be used.\n   */\n  authority?: string\n  /**\n   * Ignore any existing access token in the cache and force MSAL to get a new access token\n   * from the service.\n   */\n  forceRefresh?: boolean\n}\n\nexport interface MSALSignoutParams {\n  /**\n   * The account object for which to sign out of.\n   */\n  account: MSALAccount\n  /**\n   * Specifies whether signout should also open the browser and send a network request to the end_session_endpoint.\n   * false by default.\n   */\n  signoutFromBrowser?: boolean\n  /**\n   * User Interface configuration that MSAL uses when getting a token interactively or\n   * authorizing an end user.\n   */\n  webviewParameters?: MSALWebviewParams\n}\n\nexport interface MSALResult {\n  /**\n   * The Access Token requested, or empty string if no access token is returned in response\n   */\n  accessToken: string\n  /**\n   * The account object that holds account information.\n   */\n  account: MSALAccount\n  /**\n   * The time that the access token returned in the accessToken property ceases to be valid.\n   * This value is calculated based on current UTC time measured locally and the value expiresIn returned from the service\n   */\n  expiresOn: number\n  /**\n   * The raw id token if it\u2019s returned by the service or undefined if no id token is returned.\n   */\n  idToken?: string\n  /**\n   * The scope values returned from the service.\n   */\n  scopes: string[]\n  /**\n   * Identifier for the directory where account is locally represented\n   */\n  tenantId?: string\n}\n\nexport interface MSALAccount {\n  /**\n   * Unique identifier for the account.\n   */\n  identifier: string\n  /**\n   * Host part of the authority string used for authentication based on the issuer identifier.\n   */\n  environment?: string\n  /**\n   * An identifier for the AAD tenant that the account was acquired from.\n   */\n  tenantId: string\n  /**\n   * Shorthand name by which the End-User wishes to be referred to at the RP, such as janedoe or j.doe.\n   */\n  username: string\n  /**\n   * ID token claims for the account. Can be used to read additional information about the account, e.g. name.\n   */\n  claims?: object\n}\n\n/**\n * Mostly, if not all, iOS webview parameters\n * See https://azuread.github.io/microsoft-authentication-library-for-objc/Classes/MSALWebviewParameters.html\n */\nexport interface MSALWebviewParams {\n  /**\n   * A Boolean value that indicates whether the ASWebAuthenticationSession should ask the\n   * browser for a private authentication session.\n   * For more info see here: https://developer.apple.com/documentation/authenticationservices/aswebauthenticationsession/3237231-prefersephemeralwebbrowsersessio?language=objc\n   * @platform iOS 13+\n   */\n  ios_prefersEphemeralWebBrowserSession?: boolean\n  /**\n   * MSAL requires a web browser for interactive authentication.\n   * There are multiple web browsers available to complete authentication.\n   * MSAL will default to the web browser that provides best security and user experience for a given platform.\n   * Ios_MSALWebviewType allows changing the experience by customizing the configuration to other options for\n   * displaying web content\n   * @platform iOS\n   */\n  ios_webviewType?: Ios_MSALWebviewType\n  /**\n   * Note: Has no effect when ios_webviewType === `Ios_MSALWebviewType.DEFAULT` or\n   * ios_webviewType === `Ios_MSALWebviewType.AUTHENTICATION_SESSION`\n   * @platform iOS\n   */\n  ios_presentationStyle?: Ios_ModalPresentationStyle\n}\n\n/**\n * See https://developer.apple.com/documentation/uikit/uimodalpresentationstyle\n */\nexport enum Ios_ModalPresentationStyle {\n  fullScreen = 0,\n  pageSheet,\n  formSheet,\n  currentContext,\n  custom,\n  overFullScreen,\n  overCurrentContext,\n  popover,\n  blurOverFullScreen,\n  none = -1,\n  automatic = -2,\n}\n\n/**\n * See https://azuread.github.io/microsoft-authentication-library-for-objc/Enums/MSALWebviewType.html\n */\nexport enum Ios_MSALWebviewType {\n  DEFAULT = 0,\n  AUTHENTICATION_SESSION,\n  SAFARI_VIEW_CONTROLLER,\n  WK_WEB_VIEW,\n}\n", "import { PublicClientApplication } from './src/publicClientApplication'\nexport default PublicClientApplication\nexport * from './src/types'\n"],
+  "mappings": ";AAAA,SAAS,gBAAgB;AAazB,SAAS,qBAAqB;AAc9B,IAAM,SAA6B,cAAc;AAI1C,IAAM,0BAAN,MAAkE;AAAA,EAGvE,YAA6B,QAA2B;AAA3B;AAAA,EAA4B;AAAA,EAFjD,gBAAyB;AAAA,EAIjC,MAAa,OAAO;AAClB,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,OAAO,8BAA8B,KAAK,MAAM;AACtD,WAAK,gBAAgB;AAAA,IACvB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,aAAa,QAA+B;AACvD,SAAK,sBAAsB;AAC3B,WAAO,MAAM,OAAO,aAAa,MAAM;AAAA,EACzC;AAAA,EAEA,MAAa,mBAAmB,QAA0B;AACxD,SAAK,sBAAsB;AAC3B,WAAO,MAAM,OAAO,mBAAmB,MAAM;AAAA,EAC/C;AAAA,EAEA,MAAa,cAAc;AACzB,SAAK,sBAAsB;AAC3B,WAAO,MAAM,OAAO,YAAY;AAAA,EAClC;AAAA,EAEA,MAAa,WAAW,mBAA2B;AACjD,SAAK,sBAAsB;AAC3B,WAAO,MAAM,OAAO,WAAW,iBAAiB;AAAA,EAClD;AAAA,EAEA,MAAa,cAAc,SAAsB;AAC/C,SAAK,sBAAsB;AAC3B,WAAO,MAAM,OAAO,cAAc,OAAO;AAAA,EAC3C;AAAA,EAEA,MAAa,QAAQ,QAA2B;AAC9C,SAAK,sBAAsB;AAC3B,WAAO,MAAM,SAAS,OAAO;AAAA,MAC3B,KAAK,YAAY,MAAM,OAAO,QAAQ,MAAM;AAAA,MAC5C,SAAS,YAAY,MAAM,OAAO,cAAc,OAAO,OAAO;AAAA,IAChE,CAAC,EAAE;AAAA,EACL;AAAA,EAEA,MAAa,qBAAqB;AAChC,SAAK,sBAAsB;AAC3B,WAAO,MAAM,SAAS,OAAO;AAAA,MAC3B,SAAS,YAAY,MAAM,OAAO,mBAAmB;AAAA,MACrD,SAAS,YAAY;AAAA,IACvB,CAAC,EAAE;AAAA,EACL;AAAA,EAEA,MAAM,4BAA4B;AAChC,SAAK,sBAAsB;AAC3B,WAAO,MAAM,SAAS,OAAO;AAAA,MAC3B,SAAS,YAAY,MAAM,OAAO,0BAA0B;AAAA,MAC5D,SAAS,YAAY,CAAC;AAAA,IACxB,CAAC,EAAE;AAAA,EACL;AAAA,EAEQ,wBAAwB;AAC9B,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACmEO,IAAK,iBAAL,kBAAKA,oBAAL;AAKL,EAAAA,gCAAA;AAIA,EAAAA,gCAAA;AAIA,EAAAA,gCAAA;AAMA,EAAAA,gCAAA;AAIA,EAAAA,gCAAA,aAAU,yBAAV;AAvBU,SAAAA;AAAA,GAAA;AAoJL,IAAK,6BAAL,kBAAKC,gCAAL;AACL,EAAAA,wDAAA,gBAAa,KAAb;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA;AACA,EAAAA,wDAAA,UAAO,MAAP;AACA,EAAAA,wDAAA,eAAY,MAAZ;AAXU,SAAAA;AAAA,GAAA;AAiBL,IAAK,sBAAL,kBAAKC,yBAAL;AACL,EAAAA,0CAAA,aAAU,KAAV;AACA,EAAAA,0CAAA;AACA,EAAAA,0CAAA;AACA,EAAAA,0CAAA;AAJU,SAAAA;AAAA,GAAA;;;AC3UZ,IAAO,6BAAQ;",
   "names": ["MSALPromptType", "Ios_ModalPresentationStyle", "Ios_MSALWebviewType"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-msal2",
-  "version": "1.0.16",
+  "version": "1.0.18",
   "license": "MIT",
   "description": "MSAL React Native wrapper for iOS and Android",
   "homepage": "https://github.com/bittu/react-native-msal2#readme",

package/src/publicClientApplication.ts

@@ -22,7 +22,7 @@ type RNMSALNativeModule = {
   removeAccount(account: MSALAccount): Promise<boolean>
   signout(params: MSALSignoutParams): Promise<boolean>
   getSelectedBrowser(): Promise<string>
-  getSafeCustomTabsBrowsers(): Promise<MSALAndroidPreferredBrowser>
+  getSafeCustomTabsBrowsers(): Promise<MSALAndroidPreferredBrowser[]>
 }
 
 const RNMSAL: RNMSALNativeModule = NativeModules.RNMSAL
@@ -86,7 +86,7 @@ export class PublicClientApplication implements IPublicClientApplication {
   async getSafeCustomTabsBrowsers() {
     this.validateIsInitialized()
     return await Platform.select({
-      android: async () => [await RNMSAL.getSafeCustomTabsBrowsers()],
+      android: async () => await RNMSAL.getSafeCustomTabsBrowsers(),
       default: async () => [],
     })()
   }

package/src/types.ts

@@ -97,16 +97,16 @@ export interface MSALConfiguration {
 }
 
 export interface MSALAndroidPreferredBrowser {
-  browser_package_name: string;
-  browser_signature_hashes: string[];
-  browser_version_lower_bound?: string;
-  browser_version_upper_bound?: string;
+  browser_package_name: string
+  browser_signature_hashes: string[]
+  browser_version_lower_bound?: string
+  browser_version_upper_bound?: string
 }
 
 export interface MSALAndroidConfigOptions {
   authorization_user_agent?: 'DEFAULT' | 'BROWSER' | 'WEBVIEW'
   broker_redirect_uri_registered?: boolean
-  preferred_browser?: MSALAndroidPreferredBrowser;
+  preferred_browser?: MSALAndroidPreferredBrowser
   browser_safelist?: {
     browser_package_name: string
     browser_signature_hashes: string[]