@azure/msal-common - npm Package Compare versions

Comparing version 6.3.0 to 6.4.0

dist/_virtual/_tslib.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*! *****************************************************************************

dist/account/AuthToken.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { ClientAuthError } from '../error/ClientAuthError.js';

dist/account/CcsCredential.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*

dist/account/ClientInfo.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { ClientAuthError } from '../error/ClientAuthError.js';

dist/account/TokenClaims.d.ts

@@ -50,3 +50,3 @@ /**
     };
-    x5c_ca?: string;
+    x5c_ca?: string[];
     ts?: number;
@@ -53,0 +53,0 @@ at?: string;

dist/authority/Authority.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __awaiter, __generator, __assign } from '../_virtual/_tslib.js';

dist/authority/AuthorityFactory.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __awaiter, __generator } from '../_virtual/_tslib.js';

dist/authority/AuthorityOptions.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*

dist/authority/AuthorityType.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*

dist/authority/CloudInstanceDiscoveryResponse.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*

dist/authority/OpenIdConfigResponse.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*

dist/authority/ProtocolMode.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*

dist/authority/RegionDiscovery.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __awaiter, __generator } from '../_virtual/_tslib.js';

dist/cache/CacheManager.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __awaiter, __generator, __extends } from '../_virtual/_tslib.js';

dist/cache/entities/AccessTokenEntity.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __extends } from '../../_virtual/_tslib.js';

dist/cache/entities/AccountEntity.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { Separators, CacheAccountType, CacheType, Constants } from '../../utils/Constants.js';

dist/cache/entities/AppMetadataEntity.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { Separators, APP_METADATA } from '../../utils/Constants.js';

dist/cache/entities/AuthorityMetadataEntity.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { AUTHORITY_METADATA_CONSTANTS } from '../../utils/Constants.js';

dist/cache/entities/CacheRecord.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*

dist/cache/entities/CredentialEntity.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { CredentialType, CacheType, Constants, Separators, AuthenticationScheme } from '../../utils/Constants.js';

dist/cache/entities/IdTokenEntity.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __extends } from '../../_virtual/_tslib.js';

dist/cache/entities/RefreshTokenEntity.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __extends } from '../../_virtual/_tslib.js';

dist/cache/entities/ServerTelemetryEntity.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { SERVER_TELEM_CONSTANTS } from '../../utils/Constants.js';

dist/cache/entities/ThrottlingEntity.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { ThrottlingConstants } from '../../utils/Constants.js';

dist/cache/persistence/TokenCacheContext.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*

dist/client/AuthorizationCodeClient.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -183,3 +183,3 @@ import { __extends, __awaiter, __generator, __assign, __spreadArrays } from '../_virtual/_tslib.js';
         return __awaiter(this, void 0, void 0, function () {
-            var parameterBuilder, clientAssertion, popTokenGenerator, cnfString, correlationId, ccsCred, clientInfo, clientInfo;
+            var parameterBuilder, clientAssertion, popTokenGenerator, reqCnfData, correlationId, ccsCred, clientInfo, clientInfo;
             var _a;
@@ -221,4 +221,4 @@ return __generator(this, function (_b) {
                         }
-                        if (this.config.clientCredentials.clientAssertion) {
-                            clientAssertion = this.config.clientCredentials.clientAssertion;
+                        clientAssertion = request.clientAssertion || this.config.clientCredentials.clientAssertion;
+                        if (clientAssertion) {
                             parameterBuilder.addClientAssertion(clientAssertion.assertion);
@@ -233,4 +233,5 @@ parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
                     case 1:
-                        cnfString = _b.sent();
-                        parameterBuilder.addPopToken(cnfString);
+                        reqCnfData = _b.sent();
+                        // SPA PoP requires full Base64Url encoded req_cnf string (unhashed)
+                        parameterBuilder.addPopToken(reqCnfData.reqCnfString);
                         return [3 /*break*/, 3];
@@ -306,3 +307,3 @@ case 2:
         return __awaiter(this, void 0, void 0, function () {
-            var parameterBuilder, requestScopes, correlationId, accountSid, clientInfo, clientInfo, popTokenGenerator, cnf, cnfHash;
+            var parameterBuilder, requestScopes, correlationId, accountSid, clientInfo, clientInfo, popTokenGenerator, reqCnfData;
             return __generator(this, function (_a) {
@@ -399,16 +400,13 @@ switch (_a.label) {
                         }
-                        if (!request.nativeBroker) return [3 /*break*/, 3];
+                        if (!request.nativeBroker) return [3 /*break*/, 2];
                         // signal ests that this is a WAM call
                         parameterBuilder.addNativeBroker();
-                        if (!(request.authenticationScheme === AuthenticationScheme.POP)) return [3 /*break*/, 3];
+                        if (!(request.authenticationScheme === AuthenticationScheme.POP)) return [3 /*break*/, 2];
                         popTokenGenerator = new PopTokenGenerator(this.cryptoUtils);
                         return [4 /*yield*/, popTokenGenerator.generateCnf(request)];
                     case 1:
-                        cnf = _a.sent();
-                        return [4 /*yield*/, popTokenGenerator.generateCnfHash(cnf)];
-                    case 2:
-                        cnfHash = _a.sent();
-                        parameterBuilder.addPopToken(cnfHash);
-                        _a.label = 3;
-                    case 3: return [2 /*return*/, parameterBuilder.createQueryString()];
+                        reqCnfData = _a.sent();
+                        parameterBuilder.addPopToken(reqCnfData.reqCnfHash);
+                        _a.label = 2;
+                    case 2: return [2 /*return*/, parameterBuilder.createQueryString()];
                 }
@@ -415,0 +413,0 @@ });

dist/client/BaseClient.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __awaiter, __generator } from '../_virtual/_tslib.js';

dist/client/ClientCredentialClient.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -162,4 +162,5 @@ import { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';
         }
-        if (this.config.clientCredentials.clientAssertion) {
-            var clientAssertion = this.config.clientCredentials.clientAssertion;
+        // Use clientAssertion from request, fallback to client assertion in base configuration
+        var clientAssertion = request.clientAssertion || this.config.clientCredentials.clientAssertion;
+        if (clientAssertion) {
             parameterBuilder.addClientAssertion(clientAssertion.assertion);
@@ -166,0 +167,0 @@ parameterBuilder.addClientAssertionType(clientAssertion.assertionType);

dist/client/DeviceCodeClient.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';

dist/client/OnBehalfOfClient.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -205,4 +205,5 @@ import { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';
         }
-        if (this.config.clientCredentials.clientAssertion) {
-            var clientAssertion = this.config.clientCredentials.clientAssertion;
+        // Use clientAssertion from request, fallback to client assertion in base configuration
+        var clientAssertion = request.clientAssertion || this.config.clientCredentials.clientAssertion;
+        if (clientAssertion) {
             parameterBuilder.addClientAssertion(clientAssertion.assertion);
@@ -209,0 +210,0 @@ parameterBuilder.addClientAssertionType(clientAssertion.assertionType);

dist/client/RefreshTokenClient.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -158,3 +158,3 @@ import { __extends, __awaiter, __generator, __assign } from '../_virtual/_tslib.js';
         return __awaiter(this, void 0, void 0, function () {
-            var parameterBuilder, correlationId, clientAssertion, popTokenGenerator, cnfString, clientInfo;
+            var parameterBuilder, correlationId, clientAssertion, popTokenGenerator, reqCnfData, clientInfo;
             return __generator(this, function (_a) {
@@ -180,4 +180,4 @@ switch (_a.label) {
                         }
-                        if (this.config.clientCredentials.clientAssertion) {
-                            clientAssertion = this.config.clientCredentials.clientAssertion;
+                        clientAssertion = request.clientAssertion || this.config.clientCredentials.clientAssertion;
+                        if (clientAssertion) {
                             parameterBuilder.addClientAssertion(clientAssertion.assertion);
@@ -190,4 +190,5 @@ parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
                     case 1:
-                        cnfString = _a.sent();
-                        parameterBuilder.addPopToken(cnfString);
+                        reqCnfData = _a.sent();
+                        // SPA PoP requires full Base64Url encoded req_cnf string (unhashed)
+                        parameterBuilder.addPopToken(reqCnfData.reqCnfString);
                         return [3 /*break*/, 3];
@@ -194,0 +195,0 @@ case 2:

dist/client/SilentFlowClient.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';

dist/client/UsernamePasswordClient.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -103,4 +103,5 @@ import { __extends, __awaiter, __generator } from '../_virtual/_tslib.js';
         }
-        if (this.config.clientCredentials.clientAssertion) {
-            var clientAssertion = this.config.clientCredentials.clientAssertion;
+        // Use clientAssertion from request, fallback to client assertion in base configuration
+        var clientAssertion = request.clientAssertion || this.config.clientCredentials.clientAssertion;
+        if (clientAssertion) {
             parameterBuilder.addClientAssertion(clientAssertion.assertion);
@@ -107,0 +108,0 @@ parameterBuilder.addClientAssertionType(clientAssertion.assertionType);

dist/config/ClientConfiguration.d.ts

@@ -104,8 +104,9 @@ import { INetworkModule } from "../network/INetworkModule";
  */
+export declare type ClientAssertion = {
+    assertion: string;
+    assertionType: string;
+};
 export declare type ClientCredentials = {
     clientSecret?: string;
-    clientAssertion?: {
-        assertion: string;
-        assertionType: string;
-    };
+    clientAssertion?: ClientAssertion;
 };
@@ -112,0 +113,0 @@ /**

dist/config/ClientConfiguration.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __assign, __awaiter, __generator } from '../_virtual/_tslib.js';

dist/crypto/ICrypto.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __awaiter, __generator } from '../_virtual/_tslib.js';

dist/crypto/PopTokenGenerator.d.ts

@@ -13,2 +13,7 @@ import { ICrypto, SignedHttpRequestParameters } from "./ICrypto";
 };
+export declare type ReqCnfData = {
+    kid: string;
+    reqCnfString: string;
+    reqCnfHash: string;
+};
 declare enum KeyLocation {
@@ -23,13 +28,8 @@ SW = "sw",
      * Generates the req_cnf validated at the RP in the POP protocol for SHR parameters
+     * and returns an object containing the keyid, the full req_cnf string and the req_cnf string hash
      * @param request
      * @returns
      */
-    generateCnf(request: SignedHttpRequestParameters): Promise<string>;
+    generateCnf(request: SignedHttpRequestParameters): Promise<ReqCnfData>;
     /**
-     * Generates the hash of the req_cnf
-     * @param cnf
-     * @returns
-     */
-    generateCnfHash(cnf: string): Promise<string>;
-    /**
      * Generates key_id for a SHR token request
@@ -46,3 +46,3 @@ * @param request
      */
-    signPopToken(accessToken: string, request: SignedHttpRequestParameters): Promise<string>;
+    signPopToken(accessToken: string, keyId: string, request: SignedHttpRequestParameters): Promise<string>;
     /**
@@ -56,5 +56,5 @@ * Utility function to generate the signed JWT for an access_token
      */
-    signPayload(payload: string, kid: string, request: SignedHttpRequestParameters, claims?: object): Promise<string>;
+    signPayload(payload: string, keyId: string, request: SignedHttpRequestParameters, claims?: object): Promise<string>;
 }
 export {};
 //# sourceMappingURL=PopTokenGenerator.d.ts.map

dist/crypto/PopTokenGenerator.js

@@ -1,8 +0,6 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
 import { __awaiter, __generator, __assign } from '../_virtual/_tslib.js';
-import { AuthToken } from '../account/AuthToken.js';
 import { TimeUtils } from '../utils/TimeUtils.js';
 import { UrlString } from '../url/UrlString.js';
-import { ClientAuthError } from '../error/ClientAuthError.js';
 
@@ -24,2 +22,3 @@ /*
      * Generates the req_cnf validated at the RP in the POP protocol for SHR parameters
+     * and returns an object containing the keyid, the full req_cnf string and the req_cnf string hash
      * @param request
@@ -30,9 +29,16 @@ * @returns
         return __awaiter(this, void 0, void 0, function () {
-            var reqCnf;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
+            var reqCnf, reqCnfString, _a;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
                     case 0: return [4 /*yield*/, this.generateKid(request)];
                     case 1:
-                        reqCnf = _a.sent();
-                        return [2 /*return*/, this.cryptoUtils.base64Encode(JSON.stringify(reqCnf))];
+                        reqCnf = _b.sent();
+                        reqCnfString = this.cryptoUtils.base64Encode(JSON.stringify(reqCnf));
+                        _a = {
+                            kid: reqCnf.kid,
+                            reqCnfString: reqCnfString
+                        };
+                        return [4 /*yield*/, this.cryptoUtils.hashString(reqCnfString)];
+                    case 2: return [2 /*return*/, (_a.reqCnfHash = _b.sent(),
+                            _a)];
                 }
@@ -43,14 +49,2 @@ });
     /**
-     * Generates the hash of the req_cnf
-     * @param cnf
-     * @returns
-     */
-    PopTokenGenerator.prototype.generateCnfHash = function (cnf) {
-        return __awaiter(this, void 0, void 0, function () {
-            return __generator(this, function (_a) {
-                return [2 /*return*/, this.cryptoUtils.hashString(cnf)];
-            });
-        });
-    };
-    /**
      * Generates key_id for a SHR token request
@@ -82,12 +76,6 @@ * @param request
      */
-    PopTokenGenerator.prototype.signPopToken = function (accessToken, request) {
-        var _a;
+    PopTokenGenerator.prototype.signPopToken = function (accessToken, keyId, request) {
         return __awaiter(this, void 0, void 0, function () {
-            var tokenClaims;
-            return __generator(this, function (_b) {
-                tokenClaims = AuthToken.extractTokenClaims(accessToken, this.cryptoUtils);
-                if (!((_a = tokenClaims === null || tokenClaims === void 0 ? void 0 : tokenClaims.cnf) === null || _a === void 0 ? void 0 : _a.kid)) {
-                    throw ClientAuthError.createTokenClaimsRequiredError();
-                }
-                return [2 /*return*/, this.signPayload(accessToken, tokenClaims.cnf.kid, request)];
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.signPayload(accessToken, keyId, request)];
             });
@@ -104,3 +92,3 @@ });
      */
-    PopTokenGenerator.prototype.signPayload = function (payload, kid, request, claims) {
+    PopTokenGenerator.prototype.signPayload = function (payload, keyId, request, claims) {
         return __awaiter(this, void 0, void 0, function () {
@@ -114,3 +102,3 @@ var resourceRequestMethod, resourceRequestUri, shrClaims, shrNonce, resourceUrlString, resourceUrlComponents;
                         resourceUrlComponents = resourceUrlString === null || resourceUrlString === void 0 ? void 0 : resourceUrlString.getUrlComponents();
-                        return [4 /*yield*/, this.cryptoUtils.signJwt(__assign({ at: payload, ts: TimeUtils.nowSeconds(), m: resourceRequestMethod === null || resourceRequestMethod === void 0 ? void 0 : resourceRequestMethod.toUpperCase(), u: resourceUrlComponents === null || resourceUrlComponents === void 0 ? void 0 : resourceUrlComponents.HostNameAndPort, nonce: shrNonce || this.cryptoUtils.createNewGuid(), p: resourceUrlComponents === null || resourceUrlComponents === void 0 ? void 0 : resourceUrlComponents.AbsolutePath, q: (resourceUrlComponents === null || resourceUrlComponents === void 0 ? void 0 : resourceUrlComponents.QueryString) ? [[], resourceUrlComponents.QueryString] : undefined, client_claims: shrClaims || undefined }, claims), kid, request.correlationId)];
+                        return [4 /*yield*/, this.cryptoUtils.signJwt(__assign({ at: payload, ts: TimeUtils.nowSeconds(), m: resourceRequestMethod === null || resourceRequestMethod === void 0 ? void 0 : resourceRequestMethod.toUpperCase(), u: resourceUrlComponents === null || resourceUrlComponents === void 0 ? void 0 : resourceUrlComponents.HostNameAndPort, nonce: shrNonce || this.cryptoUtils.createNewGuid(), p: resourceUrlComponents === null || resourceUrlComponents === void 0 ? void 0 : resourceUrlComponents.AbsolutePath, q: (resourceUrlComponents === null || resourceUrlComponents === void 0 ? void 0 : resourceUrlComponents.QueryString) ? [[], resourceUrlComponents.QueryString] : undefined, client_claims: shrClaims || undefined }, claims), keyId, request.correlationId)];
                     case 1: return [2 /*return*/, _a.sent()];
@@ -117,0 +105,0 @@ }

dist/error/AuthError.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __extends } from '../_virtual/_tslib.js';

dist/error/ClientAuthError.d.ts

@@ -186,2 +186,6 @@ import { AuthError } from "./AuthError";
     };
+    keyIdMissing: {
+        code: string;
+        desc: string;
+    };
 };
@@ -364,3 +368,7 @@ /**
     static createLogoutNotSupportedError(): ClientAuthError;
+    /**
+     * Create an error when kid attribute is missing from a PoP token's cache record
+     */
+    static createKeyIdMissingError(): ClientAuthError;
 }
 //# sourceMappingURL=ClientAuthError.d.ts.map

dist/error/ClientAuthError.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -194,2 +194,6 @@ import { __extends } from '../_virtual/_tslib.js';
         desc: "Provided authority does not support logout."
+    },
+    keyIdMissing: {
+        code: "key_id_missing",
+        desc: "A keyId value is missing from the requested bound token's cache record and is required to match the token to it's stored binding key."
     }
@@ -464,2 +468,8 @@ };
     };
+    /**
+     * Create an error when kid attribute is missing from a PoP token's cache record
+     */
+    ClientAuthError.createKeyIdMissingError = function () {
+        return new ClientAuthError(ClientAuthErrorMessage.keyIdMissing.code, ClientAuthErrorMessage.keyIdMissing.desc);
+    };
     return ClientAuthError;
@@ -466,0 +476,0 @@ }(AuthError));

dist/error/ClientConfigurationError.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __extends } from '../_virtual/_tslib.js';

dist/error/InteractionRequiredAuthError.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __extends } from '../_virtual/_tslib.js';

dist/error/ServerError.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __extends } from '../_virtual/_tslib.js';

dist/index.d.ts

@@ -48,2 +48,3 @@ /**
 export { IGuidGenerator } from "./crypto/IGuidGenerator";
+export { JoseHeader } from "./crypto/JoseHeader";
 export { BaseAuthRequest } from "./request/BaseAuthRequest";
@@ -50,0 +51,0 @@ export { CommonAuthorizationUrlRequest } from "./request/CommonAuthorizationUrlRequest";

dist/index.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -34,2 +34,3 @@ export { AuthorizationCodeClient } from './client/AuthorizationCodeClient.js';
 export { DEFAULT_CRYPTO_IMPLEMENTATION } from './crypto/ICrypto.js';
+export { JoseHeader } from './crypto/JoseHeader.js';
 export { ScopeSet } from './request/ScopeSet.js';
@@ -36,0 +37,0 @@ export { AuthenticationHeaderParser } from './request/AuthenticationHeaderParser.js';

dist/logger/Logger.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { StringUtils } from '../utils/StringUtils.js';

dist/network/INetworkModule.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { AuthError } from '../error/AuthError.js';

dist/network/NetworkManager.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __awaiter, __generator } from '../_virtual/_tslib.js';

dist/network/ThrottlingUtils.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { ThrottlingConstants, CacheSchemaType, Constants, HeaderNames } from '../utils/Constants.js';

dist/packageMetadata.d.ts

 export declare const name = "@azure/msal-common";
-export declare const version = "6.3.0";
+export declare const version = "6.4.0";
 //# sourceMappingURL=packageMetadata.d.ts.map

dist/packageMetadata.js

@@ -1,8 +0,8 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
 /* eslint-disable header/header */
 var name = "@azure/msal-common";
-var version = "6.3.0";
+var version = "6.4.0";
 
 export { name, version };
 //# sourceMappingURL=packageMetadata.js.map

dist/request/AuthenticationHeaderParser.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { ClientConfigurationError } from '../error/ClientConfigurationError.js';

dist/request/BaseAuthRequest.d.ts

 import { AuthenticationScheme } from "../utils/Constants";
-import { AzureCloudOptions } from "../config/ClientConfiguration";
+import { AzureCloudOptions, ClientAssertion } from "../config/ClientConfiguration";
 /**
@@ -16,4 +16,5 @@ * BaseAuthRequest
  * - sshKid                  - Key ID that uniquely identifies the SSH public key mentioned above.
- * - azureCloudOptions        - Convenience string enums for users to provide public/sovereign cloud ids
- * - requestedClaimsHash        - SHA 256 hash string of the requested claims string, used as part of an access token cache key so tokens can be filtered by requested claims
+ * - azureCloudOptions       - Convenience string enums for users to provide public/sovereign cloud ids
+ * - requestedClaimsHash     - SHA 256 hash string of the requested claims string, used as part of an access token cache key so tokens can be filtered by requested claims
+ * - clientAssertion         - Client assertion passed by the user for confidential client flows
  */
@@ -34,3 +35,4 @@ export declare type BaseAuthRequest = {
     requestedClaimsHash?: string;
+    clientAssertion?: ClientAssertion;
 };
 //# sourceMappingURL=BaseAuthRequest.d.ts.map

dist/request/RequestParameterBuilder.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -321,3 +321,3 @@ import { __spreadArrays } from '../_virtual/_tslib.js';
     RequestParameterBuilder.prototype.addUsername = function (username) {
-        this.parameters.set(PasswordGrantConstants.username, username);
+        this.parameters.set(PasswordGrantConstants.username, encodeURIComponent(username));
     };
@@ -329,3 +329,3 @@ /**
     RequestParameterBuilder.prototype.addPassword = function (password) {
-        this.parameters.set(PasswordGrantConstants.password, password);
+        this.parameters.set(PasswordGrantConstants.password, encodeURIComponent(password));
     };
@@ -332,0 +332,0 @@ /**

dist/request/RequestValidator.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { StringUtils } from '../utils/StringUtils.js';

dist/request/ScopeSet.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __spreadArrays } from '../_virtual/_tslib.js';

dist/response/ResponseHandler.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -230,5 +230,5 @@ import { __awaiter, __generator } from '../_virtual/_tslib.js';
         return __awaiter(this, void 0, void 0, function () {
-            var accessToken, responseScopes, expiresOn, extExpiresOn, familyId, popTokenGenerator, uid, tid;
-            return __generator(this, function (_d) {
-                switch (_d.label) {
+            var accessToken, responseScopes, expiresOn, extExpiresOn, familyId, popTokenGenerator, _d, secret, keyId, uid, tid;
+            return __generator(this, function (_e) {
+                switch (_e.label) {
                     case 0:
@@ -242,9 +242,13 @@ accessToken = Constants.EMPTY_STRING;
                         popTokenGenerator = new PopTokenGenerator(cryptoObj);
-                        return [4 /*yield*/, popTokenGenerator.signPopToken(cacheRecord.accessToken.secret, request)];
+                        _d = cacheRecord.accessToken, secret = _d.secret, keyId = _d.keyId;
+                        if (!keyId) {
+                            throw ClientAuthError.createKeyIdMissingError();
+                        }
+                        return [4 /*yield*/, popTokenGenerator.signPopToken(secret, keyId, request)];
                     case 1:
-                        accessToken = _d.sent();
+                        accessToken = _e.sent();
                         return [3 /*break*/, 3];
                     case 2:
                         accessToken = cacheRecord.accessToken.secret;
-                        _d.label = 3;
+                        _e.label = 3;
                     case 3:
@@ -254,3 +258,3 @@ responseScopes = ScopeSet.fromString(cacheRecord.accessToken.target).asArray();
                         extExpiresOn = new Date(Number(cacheRecord.accessToken.extendedExpiresOn) * 1000);
-                        _d.label = 4;
+                        _e.label = 4;
                     case 4:
@@ -257,0 +261,0 @@ if (cacheRecord.appMetadata) {

dist/telemetry/performance/PerformanceClient.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __assign } from '../../_virtual/_tslib.js';

dist/telemetry/performance/PerformanceEvent.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*

dist/telemetry/performance/StubPerformanceClient.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { __extends } from '../../_virtual/_tslib.js';

dist/telemetry/server/ServerTelemetryManager.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { SERVER_TELEM_CONSTANTS, CacheOutcome, Constants, Separators } from '../../utils/Constants.js';

dist/url/UrlString.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { ClientConfigurationError } from '../error/ClientConfigurationError.js';

dist/utils/Constants.d.ts

@@ -333,2 +333,6 @@ export declare const Constants: {
 }
+export declare enum JsonTypes {
+    Jwt = "JWT",
+    Jwk = "JWK"
+}
 //# sourceMappingURL=Constants.d.ts.map

dist/utils/Constants.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -371,4 +371,9 @@ import { __spreadArrays } from '../_virtual/_tslib.js';
 })(CacheOutcome || (CacheOutcome = {}));
+var JsonTypes;
+(function (JsonTypes) {
+    JsonTypes["Jwt"] = "JWT";
+    JsonTypes["Jwk"] = "JWK";
+})(JsonTypes || (JsonTypes = {}));
 
-export { AADAuthorityConstants, AADServerParamKeys, APP_METADATA, AUTHORITY_METADATA_CONSTANTS, AuthenticationScheme, AuthorityMetadataSource, CLIENT_INFO, CacheAccountType, CacheOutcome, CacheSchemaType, CacheType, ClaimsRequestKeys, CodeChallengeMethodValues, Constants, CredentialType, Errors, GrantType, HeaderNames, OIDC_DEFAULT_SCOPES, OIDC_SCOPES, PasswordGrantConstants, PersistentCacheKeys, PromptValue, RegionDiscoveryOutcomes, RegionDiscoverySources, ResponseCodes, ResponseMode, SERVER_TELEM_CONSTANTS, SSOTypes, Separators, THE_FAMILY_ID, ThrottlingConstants };
+export { AADAuthorityConstants, AADServerParamKeys, APP_METADATA, AUTHORITY_METADATA_CONSTANTS, AuthenticationScheme, AuthorityMetadataSource, CLIENT_INFO, CacheAccountType, CacheOutcome, CacheSchemaType, CacheType, ClaimsRequestKeys, CodeChallengeMethodValues, Constants, CredentialType, Errors, GrantType, HeaderNames, JsonTypes, OIDC_DEFAULT_SCOPES, OIDC_SCOPES, PasswordGrantConstants, PersistentCacheKeys, PromptValue, RegionDiscoveryOutcomes, RegionDiscoverySources, ResponseCodes, ResponseMode, SERVER_TELEM_CONSTANTS, SSOTypes, Separators, THE_FAMILY_ID, ThrottlingConstants };
 //# sourceMappingURL=Constants.js.map

dist/utils/ProtocolUtils.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { StringUtils } from './StringUtils.js';

dist/utils/StringUtils.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ import { ClientAuthError } from '../error/ClientAuthError.js';

dist/utils/TimeUtils.js

@@ -1,2 +0,2 @@
-/*! @azure/msal-common v6.3.0 2022-05-02 */
+/*! @azure/msal-common v6.4.0 2022-06-06 */
 'use strict';
@@ -3,0 +3,0 @@ /*

package.json

@@ -13,3 +13,3 @@ {
   },
-  "version": "6.3.0",
+  "version": "6.4.0",
   "description": "Microsoft Authentication Library for js",
@@ -16,0 +16,0 @@ "keywords": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2196655

increased by1.14%

Number of package files

325

increased by2.52%

Lines of code

21578

increased by1.21%

No dependency changes