https://app.vahti.ai/_next/static/chunks/0uoup_x9l33af.js

1(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,569118,696414,674112,697315,e=>{"use strict";var t=e.i(885098),r=e.i(417633),i=e.i(58678),o=e.i(199185),n=e.i(21951),s=e.i(253770),a=e.i(120510),c=e.i(399176),l=e.i(770496),h=e.i(732519),d=e.i(698962),u=e.i(251949),u=u,g=e.i(600969),p=e.i(900699),m=e.i(266644);class f{constructor(){this.dbName=p.DB_NAME,this.version=p.DB_VERSION,this.tableName=p.DB_TABLE_NAME,this.dbOpen=!1}async open(){return new Promise((e,t)=>{let r=window.indexedDB.open(this.dbName,this.version);r.addEventListener("upgradeneeded",e=>{e.target.result.createObjectStore(this.tableName)}),r.addEventListener("success",t=>{this.db=t.target.result,this.dbOpen=!0,e()}),r.addEventListener("error",()=>t((0,g.createBrowserAuthError)(m.databaseUnavailable,"")))})}closeConnection(){let e=this.db;e&&this.dbOpen&&(e.close(),this.dbOpen=!1)}async validateDbIsOpen(){if(!this.dbOpen)return this.open()}async getItem(e){return await this.validateDbIsOpen(),new Promise((t,r)=>{if(!this.db)return r((0,g.createBrowserAuthError)(m.databaseNotOpen,""));let i=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).get(e);i.addEventListener("success",e=>{this.closeConnection(),t(e.target.result)}),i.addEventListener("error",e=>{this.closeConnection(),r(e)})})}async setItem(e,t){return await this.validateDbIsOpen(),new Promise((r,i)=>{if(!this.db)return i((0,g.createBrowserAuthError)(m.databaseNotOpen,""));let o=this.db.transaction([this.tableName],"readwrite").objectStore(this.tableName).put(t,e);o.addEventListener("success",()=>{this.closeConnection(),r()}),o.addEventListener("error",e=>{this.closeConnection(),i(e)})})}async removeItem(e){return await this.validateDbIsOpen(),new Promise((t,r)=>{if(!this.db)return r((0,g.createBrowserAuthError)(m.databaseNotOpen,""));let i=this.db.transaction([this.tableName],"readwrite").objectStore(this.tableName).delete(e);i.addEventListener("success",()=>{this.closeConnection(),t()}),i.addEventListener("error",e=>{this.closeConnection(),r(e)})})}async getKeys(){return await this.validateDbIsOpen(),new Promise((e,t)=>{if(!this.db)return t((0,g.createBrowserAuthError)(m.databaseNotOpen,""));let r=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).getAllKeys();r.addEventListener("success",t=>{this.closeConnection(),e(t.target.result)}),r.addEventListener("error",e=>{this.closeConnection(),t(e)})})}async containsKey(e){return await this.validateDbIsOpen(),new Promise((t,r)=>{if(!this.db)return r((0,g.createBrowserAuthError)(m.databaseNotOpen,""));let i=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).count(e);i.addEventListener("success",e=>{this.closeConnection(),t(1===e.target.result)}),i.addEventListener("error",e=>{this.closeConnection(),r(e)})})}async deleteDatabase(){return this.db&&this.dbOpen&&this.closeConnection(),new Promise((e,t)=>{let r=window.indexedDB.deleteDatabase(p.DB_NAME),i=setTimeout(()=>t(!1),200);r.addEventListener("success",()=>(clearTimeout(i),e(!0))),r.addEventListener("blocked",()=>(clearTimeout(i),e(!0))),r.addEventListener("error",()=>(clearTimeout(i),t(!1)))})}}class C{constructor(){this.cache=new Map}async initialize(){}getItem(e){return this.cache.get(e)||null}getUserData(e){return this.getItem(e)}setItem(e,t){this.cache.set(e,t)}async setUserData(e,t){this.setItem(e,t)}removeItem(e){this.cache.delete(e)}getKeys(){let e=[];return this.cache.forEach((t,r)=>{e.push(r)}),e}containsKey(e){return this.cache.has(e)}clear(){this.cache.clear()}decryptData(){return Promise.resolve(null)}}class y{constructor(e){this.inMemoryCache=new C,this.indexedDBCache=new f,this.logger=e}handleDatabaseAccessError(e,t){if(e instanceof g.BrowserAuthError&&e.errorCode===m.databaseUnavailable)this.logger.error("1wx7zz",t);else throw e}async getItem(e,t){let r=this.inMemoryCache.getItem(e);if(!r)try{return this.logger.verbose("0naxpl",t),await this.indexedDBCache.getItem(e)}catch(e){this.handleDatabaseAccessError(e,t)}return r}async setItem(e,t,r){this.inMemoryCache.setItem(e,t);try{await this.indexedDBCache.setItem(e,t)}catch(e){this.handleDatabaseAccessError(e,r)}}async removeItem(e,t){this.inMemoryCache.removeItem(e);try{await this.indexedDBCache.removeItem(e)}catch(e){this.handleDatabaseAccessError(e,t)}}async getKeys(e){let t=this.inMemoryCache.getKeys();try{let e=await this.indexedDBCache.getKeys();return Array.from(new Set([...t,...e]))}catch(r){return this.handleDatabaseAccessError(r,e),t}}async containsKey(e,t){let r=this.inMemoryCache.containsKey(e);if(!r)try{return this.logger.verbose("03zl2j",t),await this.indexedDBCache.containsKey(e)}catch(e){this.handleDatabaseAccessError(e,t)}return r}clearInMemory(e){this.logger.verbose("03r21p",e),this.inMemoryCache.clear(),this.logger.verbose("0uksk1",e)}

1async clearPersistent(e){try{this.logger.verbose("0rdqut",e);let t=await this.indexedDBCache.deleteDatabase();return t&&this.logger.verbose("149ouc",e),t}catch(t){return this.handleDatabaseAccessError(t,e),!1}}}class I{constructor(e,t){this.logger=e,this.cache=I.getTokenBindingKeyStorage(this.logger),this.performanceClient=t}static getTokenBindingKeyStorage(e){return I.tokenBindingKeyStorage||(I.tokenBindingKeyStorage=new y(e)),I.tokenBindingKeyStorage}async provisionTokenBindingKey(e){let t=this.performanceClient?.startMeasurement(a.CryptoOptsGetPublicKeyThumbprint,e.correlationId);try{let r=await this.createTokenBindingKey(e);return t?.end({success:!0,...this.getTokenBindingKeyTelemetry(r)}),r.keyId}catch(r){throw t?.end({success:!1,tokenBindingKeyType:e.tokenBindingKeyType,tokenBindingKeyAlgorithm:e.tokenBindingKeyAlgorithm}),r}}async removeTokenBindingKey(e,t){if(await this.cache.removeItem(e,t),await this.cache.containsKey(e,t))throw(0,d.createClientAuthError)(u.bindingKeyNotRemoved,t)}async clearKeystore(e){this.cache.clearInMemory(e);try{return await this.cache.clearPersistent(e),!0}catch(t){return t instanceof Error?this.logger.error(`1owpn8 ${t.message}`,e):this.logger.error("0yrmwo",e),!1}}async getTokenBindingPublicKeyJwk(e,t){let r=await this.getTokenBindingKeyPair(e,t);return(0,h.exportJwk)(r.publicKey)}async createTokenBindingKey(e){let t=this.getTokenBindingKeyGenAlgorithmOptions(e.tokenBindingKeyAlgorithm,e.correlationId),r=await this.generateKeyPairAndThumbprint(I.TOKEN_BINDING_KEY_USAGES,t,e.correlationId);return await this.cache.setItem(r.keyId,{...r,tokenBindingKeyType:e.tokenBindingKeyType,tokenBindingKeyAlgorithm:e.tokenBindingKeyAlgorithm},e.correlationId),{...r,tokenBindingKeyType:e.tokenBindingKeyType,tokenBindingKeyAlgorithm:e.tokenBindingKeyAlgorithm}}async generateKeyPairAndThumbprint(e,t,r){let i=await (0,h.generateKeyPair)(!1,e,t),o=await (0,h.exportJwk)(i.publicKey),n=await (0,h.computeJwkThumbprint)(o,r);return{publicKey:i.publicKey,privateKey:i.privateKey,keyId:n}}async getTokenBindingKeyPair(e,t){let r=await this.cache.getItem(e,t);if(!r)throw(0,g.createBrowserAuthError)(m.cryptoKeyNotFound,t);return r}getTokenBindingKeyTelemetry(e,t){return{...e.tokenBindingKeyType&&{tokenBindingKeyType:e.tokenBindingKeyType},...e.tokenBindingKeyAlgorithm||t?{tokenBindingKeyAlgorithm:e.tokenBindingKeyAlgorithm||t}:{}}}getTokenBindingKeyGenAlgorithmOptions(e,t){if(e===s.JsonWebTokenAlgorithms.RS256)return h.RSA_KEYGEN_ALGORITHM_OPTIONS;if(e===s.JsonWebTokenAlgorithms.ES256)return h.ECDSA_P256_KEYGEN_ALGORITHM_OPTIONS;throw(0,g.createBrowserAuthError)(m.unsupportedTokenBindingAlgorithm,t)}}I.TOKEN_BINDING_KEY_USAGES=["sign","verify"];class A{constructor(e,t,r){this.logger=e,(0,h.validateCryptoAvailable)(r??!1),this.performanceClient=t,this.tokenBindingKeyM

1anager=new I(this.logger,this.performanceClient)}createNewGuid(){return(0,h.createNewGuid)()}base64Encode(e){return(0,c.base64Encode)(e)}base64Decode(e){return(0,l.base64Decode)(e)}base64UrlEncode(e){return(0,c.urlEncode)(e)}encodeKid(e){return this.base64UrlEncode(JSON.stringify({kid:e}))}async removeTokenBindingKey(e,t){await this.tokenBindingKeyManager.removeTokenBindingKey(e,t)}async clearKeystore(e){return this.tokenBindingKeyManager.clearKeystore(e)}async signTokenBindingJwt(e,t,r,i){let o={},n=this.performanceClient?.startMeasurement(a.CryptoOptsSignJwt,i);try{let s=await this.tokenBindingKeyManager.getTokenBindingKeyPair(r,i);await this.validateTokenBindingJwtHeaderKey(e,r,i),o=this.tokenBindingKeyManager.getTokenBindingKeyTelemetry(s,e.alg);let a=this.getTokenBindingKeySigningAlgorithm(s,e.alg,i),l=`${(0,c.urlEncode)(JSON.stringify(e))}.${(0,c.urlEncode)(JSON.stringify(t))}`,h=await this.signInput(s,l,a);return n?.end({success:!0,...o}),`${l}.${h}`}catch(e){throw n?.end({success:!1,...o}),e}}async hashString(e){return(0,h.hashString)(e)}async signInput(e,t,r){let i=new TextEncoder,o=await (0,h.sign)(e.privateKey,i.encode(t),r);return(0,c.urlEncodeArr)(new Uint8Array(o))}getTokenBindingKeySigningAlgorithm(e,t,r){let i=e.privateKey.algorithm;if(t===s.JsonWebTokenAlgorithms.RS256&&i.name===h.RSA_SIGN_ALGORITHM_OPTIONS.name)return h.RSA_SIGN_ALGORITHM_OPTIONS;if(t===s.JsonWebTokenAlgorithms.ES256&&i.name===h.ECDSA_SHA256_SIGN_ALGORITHM_OPTIONS.name&&i.namedCurve===h.ECDSA_P256_KEYGEN_ALGORITHM_OPTIONS.namedCurve)return h.ECDSA_SHA256_SIGN_ALGORITHM_OPTIONS;if(t===s.JsonWebTokenAlgorithms.RS256||t===s.JsonWebTokenAlgorithms.ES256)throw(0,g.createBrowserAuthError)(m.unsupportedTokenBindingAlgorithm,r,m.tokenBindingKeyAlgorithmMismatch);throw(0,g.createBrowserAuthError)(m.unsupportedTokenBindingAlgorithm,r)}async validateTokenBindingJwtHeaderKey(e,t,r){if(e.jwk&&await (0,h.computeJwkThumbprint)(e.jwk,r)!==t)throw(0,g.createBrowserAuthError)(m.invalidPublicJwk,r,m.tokenBindingKeyJwkThumbprintMismatch)}}var w=e.i(562756),T=e.i(852151),E=e.i(341205),v=e.i(625874),k=e.i(803778),S=e.i(72003),R=e.i(808342),b=e.i(644137);let P="networkClientSendPostRequestAsync",_="refreshTokenClientExecutePostToTokenEndpoint",O="authorizationCodeClientExecutePostToTokenEndpoint",N="refreshTokenClientExecuteTokenRequest",M="refreshTokenClientAcquireToken",q="refreshTokenClientAcquireTokenWithCachedRefreshToken",U="refreshTokenClientCreateTokenRequestBody",D="silentFlowClientGenerateResultFromCacheRecord",B="authClientExecuteTokenRequest",x="authClientCreateTokenRequestBody",L="updateTokenEndpointAuthority",K="popTokenGenerateCnf",H="handleServerTokenResponse",F="authorityResolveEndpointsAsync",z="authorityGetCloudDiscoveryMetadataFromNetwork",$="authorityUpdateCloudDiscoveryMetadata",G="authorityGetEndpointMetadataFromNetwork",V="authorityUpdateEndpointMetadata",j="authorityUpdateMetadataWithRegionalInformation",J="regionDiscoveryDetectRegion",W="regionDiscoveryGetRegionFromIMDS",Q="regionDiscoveryGetCurrentVersion",Y="cacheManagerGetRefreshToken";e.s(["AuthClientCreateTokenRequestBody",0,x,"AuthClientExecuteTokenRequest",0,B,"AuthorityGetCloudDiscoveryMetadataFromNetwork",0,z,"AuthorityGetEndpointMetadataFromNetwork",0,G,"AuthorityResolveEndpointsAsync",0,F,"AuthorityUpdateCloudDiscoveryMetadata",0,$,"AuthorityUpdateEndpointMetadata",0,V,"AuthorityUpdateMetadataWithRegionalInformation",0,j,"AuthorizationCodeClientExecutePostToTokenEndpoint",0,O,"CacheManagerGetRefreshToken",0,Y,"GetAuthCodeUrl",0,"getAuthCodeUrl","HandleCodeResponseFromServer",0,"handleCodeResponseFromServer","HandleServerTokenResponse",0,H,"NetworkClientSendPostRequestAsync",0,P,"PopTokenGenerateCnf",0,K,"RefreshTokenClientAcquireToken",0,M,"RefreshTokenClientAcquireTokenWithCachedRefreshToken",0,q,"RefreshTokenClientCreateTokenRequestBody",0,U,"RefreshTokenClientExecutePostToTokenEndpoint",0,_,"RefreshTokenClientExecuteTokenRequest",0,N,"RegionDiscoveryDetectRegion",0,J,"RegionDiscoveryGetCurrentVersion",0,Q,"RegionDiscoveryGetRegionFromIMDS",0,W,"SetUserData",0,"setUserData","SilentFlowClientGenerateResultFromCacheRecord",0,D,"UpdateTokenEndpointAuthority",0,L],367702);let X=(e,t,r,i,o)=>(...n)=>{r.trace(`1plfzx ${t}`,o);let s=i.startMeasurement(t,o);o&&i.incrementFields({[`ext.${t}CallCount`]:1},o);try{let i=e(...n);return s.end({success:!0}),r.trace(`1g8n6a ${t}`,o),i}catch(e){r.trace(`0cfd8i ${t}`,o);try{r.trace(JSON.stringify(e),o)}catch(e){r.trace("00dty7",o)}throw s.end({success:!1},e),e}},Z=(e,t,r,i,o)=>(...n)=>{r.trace(`1plfzx ${t}`,o);let s=i.startMeasurement(t,o);return o&&i.incrementFields({[`ext.${t}CallCount`]:1},o),e(...n).then(e=>(r.trace(`1g8n6a ${t}`,o),s.end({success:!0}),e)).catch(e=>{r.trace(`0cfd8i ${t}`,o);try{r.trace(JSON.stringify(e),o)}catch(e){r.trace("00dty7",o)}throw s.end({success:!1},e),e})};

1class ee{constructor(e,t,r,i){this.networkInterface=e,this.logger=t,this.performanceClient=r,this.correlationId=i}async detectRegion(e,t){let r=e;if(r)t.region_source=v.RegionDiscoverySources.ENVIRONMENT_VARIABLE;else{let e=ee.IMDS_OPTIONS;try{let i=await Z(this.getRegionFromIMDS.bind(this),W,this.logger,this.performanceClient,this.correlationId)(v.IMDS_VERSION,e);if(i.status===v.HTTP_SUCCESS&&(r=i.body?.location)&&(t.region_source=v.RegionDiscoverySources.IMDS),i.status===v.HTTP_BAD_REQUEST){let i=await Z(this.getCurrentVersion.bind(this),Q,this.logger,this.performanceClient,this.correlationId)(e);if(!i)return t.region_source=v.RegionDiscoverySources.FAILED_AUTO_DETECTION,null;let o=await Z(this.getRegionFromIMDS.bind(this),W,this.logger,this.performanceClient,this.correlationId)(i,e);o.status===v.HTTP_SUCCESS&&(r=o.body?.location)&&(t.region_source=v.RegionDiscoverySources.IMDS)}}catch(e){return t.region_source=v.RegionDiscoverySources.FAILED_AUTO_DETECTION,null}}return r||(t.region_source=v.RegionDiscoverySources.FAILED_AUTO_DETECTION),r||null}async getRegionFromIMDS(e,t){return this.networkInterface.sendGetRequestAsync(`${v.IMDS_ENDPOINT}?api-version=${e}`,t,v.IMDS_TIMEOUT)}async getCurrentVersion(e){try{let t=await this.networkInterface.sendGetRequestAsync(`${v.IMDS_ENDPOINT}?format=json`,e);if(t.status===v.HTTP_BAD_REQUEST&&t.body&&t.body["newest-versions"]&&t.body["newest-versions"].length>0)return t.body["newest-versions"][0];return null}catch(e){return null}}}ee.IMDS_OPTIONS={headers:{Metadata:"true"}};var et=e.i(27530),er=e.i(422072),ei=u,eo=e.i(205899);class en{constructor(e,t,r,i,o,n,s,a){this.canonicalAuthority=e,this._canonicalAuthority.validateAsUri(),this.networkInterface=t,this.cacheManager=r,this.authorityOptions=i,this.regionDiscoveryMetadata={region_used:void 0,region_source:void 0,region_outcome:void 0},this.logger=o,this.performanceClient=s,this.correlationId=n,this.managedIdentity=a||!1,this.regionDiscovery=new ee(t,this.logger,this.performanceClient,this.correlationId)}getAuthorityType(e){if(e.HostNameAndPort.endsWith(v.CIAM_AUTH_URL))return T.AuthorityType.Ciam;let t=e.PathSegments;return t.length&&t[0].toLowerCase()===v.ADFS?T.AuthorityType.Adfs:T.AuthorityType.Default}get authorityType(){return this.getAuthorityType(this.canonicalAuthorityUrlComponents)}get protocolMode(){return this.authorityOptions.protocolMode}get options(){return this.authorityOptions}get canonicalAuthority(){return this._canonicalAuthority.urlString}set canonicalAuthority(e){this._canonicalAuthority=new E.UrlString(e,this.correlationId),this._canonicalAuthority.validateAsUri(),this._canonicalAuthorityUrlComponents=null}get canonicalAuthorityUrlComponents(){return this._canonicalAuthorityUrlComponents||(this._canonicalAuthorityUrlComponents=this._canonicalAuthority.getUrlComponents()),this._canonicalAuthorityUrlComponents}get hostnameAndPort(){return this.canonicalAuthorityUrlComponents.HostNameAndPort.toLowerCase()}get tenant(){return this.canonicalAuthorityUrlComponents.PathSegments[0]}get authorizationEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.authorization_endpoint);throw(0,d.createClientAuthError)(ei.endpointResolutionError,this.correlationId)}get tokenEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.token_endpoint);throw(0,d.createClientAuthError)(ei.endpointResolutionError,this.correlationId)}get deviceCodeEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.token_endpoint.replace("/token","/devicecode"));throw(0,d.createClientAuthError)(ei.endpointResolutionError,this.correlationId)}get endSessionEndpoint(){if(this.discoveryComplete()){if(!this.metadata.end_session_endpoint)throw(0,d.createClientAuthError)(ei.endSessionEndpointNotSupported,this.correlationId);return this.replacePath(this.metadata.end_session_endpoint)}throw(0,d.createClientAuthError)(ei.endpointResolutionError,this.correlationId)}get selfSignedJwtAudience(){if(this.discoveryComplete())return this.replacePath(this.metadata.issuer);throw(0,d.createClientAuthError)(ei.endpointResolutionError,this.correlationId)}get jwksUri(){if(this.discoveryComplete())return this.replacePath(this.metadata.jwks_uri);throw(0,d.createClientAuthError)(ei.endpointResolutionError,this.correlationId)}canReplaceTenant(e){return 1===e.PathSegments.length&&!en.reservedTenantDomains.has(e.PathSegments[0])&&this.getAuthorityType(e)===T.AuthorityType.Default&&this.protocolMode!==R.ProtocolMode.OIDC}replaceTenant(e){return e.replace(/{tenant}|{tenantid}/g,this.tenant)}replacePath(e){let t=e,r=new E.UrlString(this.metadata.canonical_authority,this.correlationId).getUrlComponents(),i=r.PathSegments;

1return this.canonicalAuthorityUrlComponents.PathSegments.forEach((e,o)=>{let n=i[o];if(0===o&&this.canReplaceTenant(r)){let e=new E.UrlString(this.metadata.authorization_endpoint,this.correlationId).getUrlComponents().PathSegments[0];n!==e&&(this.logger.verbose(`1q3g2x ${n} ${e}`,this.correlationId),n=e)}e!==n&&(t=t.replace(`/${n}/`,`/${e}/`))}),this.replaceTenant(t)}get defaultOpenIdConfigurationEndpoint(){let e=this.hostnameAndPort;return this.canonicalAuthority.endsWith("v2.0/")||this.authorityType===T.AuthorityType.Adfs||this.protocolMode===R.ProtocolMode.OIDC&&!this.isAliasOfKnownMicrosoftAuthority(e)?`${this.canonicalAuthority}.well-known/openid-configuration`:`${this.canonicalAuthority}v2.0/.well-known/openid-configuration`}discoveryComplete(){return!!this.metadata}async resolveEndpointsAsync(){let e=this.getCurrentMetadataEntity(),t=await Z(this.updateCloudDiscoveryMetadata.bind(this),$,this.logger,this.performanceClient,this.correlationId)(e);this.canonicalAuthority=this.canonicalAuthority.replace(this.hostnameAndPort,e.preferred_network);let r=await Z(this.updateEndpointMetadata.bind(this),V,this.logger,this.performanceClient,this.correlationId)(e);this.updateCachedMetadata(e,t,{source:r}),this.performanceClient?.addFields({cloudDiscoverySource:t,authorityEndpointSource:r},this.correlationId)}getCurrentMetadataEntity(){let e=this.cacheManager.getAuthorityMetadataByAlias(this.hostnameAndPort,this.correlationId);return e||(e={aliases:[],preferred_cache:this.hostnameAndPort,preferred_network:this.hostnameAndPort,canonical_authority:this.canonicalAuthority,authorization_endpoint:"",token_endpoint:"",end_session_endpoint:"",issuer:"",aliasesFromNetwork:!1,endpointsFromNetwork:!1,expiresAt:(0,er.generateAuthorityMetadataExpiresAt)(),jwks_uri:""}),e}updateCachedMetadata(e,t,r){t!==v.AuthorityMetadataSource.CACHE&&r?.source!==v.AuthorityMetadataSource.CACHE&&(e.expiresAt=(0,er.generateAuthorityMetadataExpiresAt)(),e.canonical_authority=this.canonicalAuthority);let i=this.cacheManager.generateAuthorityMetadataCacheKey(e.preferred_cache,this.correlationId);this.cacheManager.setAuthorityMetadata(i,e,this.correlationId),this.metadata=e}async updateEndpointMetadata(e){let t=this.updateEndpointMetadataFromLocalSources(e);if(t){if(t.source===v.AuthorityMetadataSource.HARDCODED_VALUES&&this.authorityOptions.azureRegionConfiguration?.azureRegion&&t.metadata){let r=await Z(this.updateMetadataWithRegionalInformation.bind(this),j,this.logger,this.performanceClient,this.correlationId)(t.metadata);(0,er.updateAuthorityEndpointMetadata)(e,r,!1),e.canonical_authority=this.canonicalAuthority}return t.source}let r=await Z(this.getEndpointMetadataFromNetwork.bind(this),G,this.logger,this.performanceClient,this.correlationId)();if(r)return this.validateIssuer(r.issuer),this.authorityOptions.azureRegionConfiguration?.azureRegion&&(r=await Z(this.updateMetadataWithRegionalInformation.bind(this),j,this.logger,this.performanceClient,this.correlationId)(r)),(0,er.updateAuthorityEndpointMetadata)(e,r,!0),v.AuthorityMetadataSource.NETWORK;throw(0,d.createClientAuthError)(ei.openIdConfigError,this.defaultOpenIdConfigurationEndpoint,this.correlationId)}updateEndpointMetadataFromLocalSources(e){this.logger.verbose("1fi0kc",this.correlationId);let t=this.getEndpointMetadataFromConfig();if(t)return this.logger.verbose("06t0uj",this.correlationId),(0,er.updateAuthorityEndpointMetadata)(e,t,!1),{source:v.AuthorityMetadataSource.CONFIG};this.logger.verbose("151k0p",this.correlationId);let r=this.getEndpointMetadataFromHardcodedValues();if(r)return(0,er.updateAuthorityEndpointMetadata)(e,r,!1),{source:v.AuthorityMetadataSource.HARDCODED_VALUES,metadata:r};this.logger.verbose("1imop5",this.correlationId);let i=(0,er.isAuthorityMetadataExpired)(e);return this.isAuthoritySameType(e)&&e.endpointsFromNetwork&&!i?(this.logger.verbose("16uq31",""),{source:v.AuthorityMetadataSource.CACHE}):(i&&this.logger.verbose("0uoibc",""),null)}isAuthoritySameType(e){return new E.UrlString(e.canonical_authority,this.correlationId).getUrlComponents().PathSegments.length===this.canonicalAuthorityUrlComponents.PathSegments.length}getEndpointMetadataFromConfig(){if(this.authorityOptions.authorityMetadata)try{return JSON.parse(this.authorityOptions.authorityMetadata)}catch(e){throw(0,S.createClientConfigurationError)(eo.invalidAuthorityMetadata,this.correlationId)}return null}async getEndpointMetadataFromNetwork(){let e=this.defaultOpenIdConfigurationEndpoint;this.logger.verbose(`1y65x6 ${e}`,this.correlationId);try{var t;let r=await this.networkInterface.sendGetRequestAsync(e,{});if((t=r.body).hasOwnProperty("authorization_endpoint")&&t.hasOwnProperty("token_endpoint")&&t.hasOwnProperty("issuer")&&t.hasOwnProperty("jwks_uri"))return r.body;return this.logger.verbose("1koyv8",this.correlationId),null}catch(e){return this.logger.verbose(`0a9wik ${e}`,this.correlationId),null}}getEndpointMetadataFromHardcodedValues(){return this.hostnameAndPort in k.EndpointMetadata?k.EndpointMetadata[this.hostnameAndPort]:null}async updateMetadataWithRegionalInformation(e){let t=this.authorityOptions.azureRegionConfiguration?.azureRegion;if(t){if(t!==v.AZURE_REGION_AUTO_DISCOVER_FLAG)return this.regionDiscoveryMetadata.region_outcome=v.RegionDiscoveryOutcomes.CONFIGURED_NO_AUTO_DETECTION,this.regionDiscoveryMetadata.region_used=t,en.replaceWithRegionalInformation(e,t,this.correlationId);let r=await Z(this.regionDiscovery.detectRegion.bind(this.regionDiscovery),J,this.logger,this.performanceClient,this.correlationId)(this.authorityOptions.azureRegionConfiguration?.environmentRegion,this.regionDiscoveryMetadata);if(r)return this.regionDiscoveryMetadata.region_outcome=v.RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_SUCCESSFUL,this.regionDiscoveryMetadata.region_used=r,en.replaceWithRegionalInformation(e,r,this.correlationId);this.regionDiscoveryMetadata.region_outcome=v.RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_FAILED}return e}async updateCloudDiscoveryMetadata(e){let t=this.updateCloudDiscoveryMetadataFromLocalSources(e);if(t)return t;let r=await Z(this.getCloudDiscoveryMetadataFromNetwork.bind(this),z,this.logger,this.performanceClient,this.correlationId)();if(r)return(0,er.updateCloudDiscoveryMetadata)(e,r,!0),v.AuthorityMetadataSource.NETWORK;throw(0,S.createClientConfigurationError)(eo.untrustedAuthority,this.correlationId)}updateCloudDiscoveryMetadataFromLocalSources(e){this.logger.verbose("1tpqlr",this.correlationId),this.logger.verbosePii(`1fy7uz ${this.authorityOptions.knownAuthorities||v.NOT_APPLICABLE}`,this.correlationId),this.logger.verbosePii(`08zabj ${this.authorityOptions.authorityMetadata||v.NOT_APPLICABLE}`,this.correlationId),this.logger.verbosePii(`1o1kv3 ${e.canonical_authority||v.NOT_APPLICABLE}`,this.correlationId);let t=this.getCloudDiscoveryMetadataFromConfig();if(t)return this.logger.verbose("1nakio",this.correlationId),(0,er.updateCloudDiscoveryMetadata)(e,t,!1),v.AuthorityMetadataSource.CONFIG;this.logger.verbose("1x74aj",this.correlationId);let r=(0,k.getCloudDiscoveryMetadataFromHardcodedValues)(this.hostnameAndPort);if(r)return this.logger.verbose("0by47c",this.correlationId),(0,er.updateCloudDiscoveryMetadata)(e,r,!1),v.AuthorityMetadataSource.HARDCODED_VALUES;this.logger.verbose("0r2fzy",this.correlationId);let i=(0,er.isAuthorityMetadataExpired)(e);return this.isAuthoritySameType(e)&&e.aliasesFromNetwork&&!i?(this.logger.verbose("1uffgh",""),v.AuthorityMetadataSource.CACHE):(i&&this.logger.verbose("0uoibc",""),null)}getCloudDiscoveryMetadataFromConfig(){if(this.authorityType===T.AuthorityType.Ciam)return this.logger.verbose("04y84h",this.correlationId),en.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);if(this.authorityOptions.cloudDiscoveryMetadata){this.logger.verbose("0gszr3",this.correlationId);try{this.logger.verbose("1iifkx",this.correlationId);let e=JSON.parse(this.authorityOptions.cloudDiscoveryMetadata),t=(0,k.getCloudDiscoveryMetadataFromNetworkResponse)(e.metadata,this.hostnameAndPort);if(this.logger.verbose("0q67e3",""),t)return this.logger.verbose("0hzfao",this.correlationId),t;this.logger.verbose("1ajz3u",this.correlationId)}catch(e){throw this.logger.verbose("1wq5tu",this.correlationId),(0,S.createClientConfigurationError)(eo.invalidCloudDiscoveryMetadata,this.correlationId)}}return this.isInKnownAuthorities(this.hostnameAndPort)?(this.logger.verbose("0mt9al",this.correlationId),en.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort)):null}async getCloudDiscoveryMetadataFromNetwork(){let e=`${v.AAD_INSTANCE_DISCOVERY_ENDPT}${this.canonicalAuthority}oauth2/v2.0/authorize`,t=null;try{var r,i;let o,n,s=await this.networkInterface.sendGetRequestAsync(e,{});if((r=s.body).hasOwnProperty("tenant_discovery_endpoint")&&r.hasOwnProperty("metadata"))n=(o=s.body).metadata,this.logger.verbosePii(`1vglyt ${o.tenant_discovery_endpoint}`,this.correlationId);else{if(!((i=s.body).hasOwnProperty("error")&&i.hasOwnProperty("error_description")))return this.logger.error("0768g0",this.correlationId),null;if(this.logger.warning(`062uto ${s.status}

1`,this.correlationId),(o=s.body).error===v.INVALID_INSTANCE)return this.logger.error("1x90tm",this.correlationId),null;this.logger.warning(`0wchdm ${o.error}`,this.correlationId),this.logger.warning(`1s5mpv ${o.error_description}`,this.correlationId),this.logger.warning("1yhqpw",this.correlationId),n=[]}this.logger.verbose("1lrobr",this.correlationId),t=(0,k.getCloudDiscoveryMetadataFromNetworkResponse)(n,this.hostnameAndPort)}catch(e){return e instanceof et.AuthError?this.logger.error(`0vwhc7 ${e.errorCode} ${e.errorMessage}`,this.correlationId):this.logger.error(`0s2z41 ${e.name} ${e.message}`,this.correlationId),null}return t||(this.logger.warning("0jp28q",this.correlationId),this.logger.verbose("130sd8",this.correlationId),t=en.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort)),t}isInKnownAuthorities(e){let t=e.toLowerCase();return this.authorityOptions.knownAuthorities.filter(e=>e&&E.UrlString.getDomainFromUrl(e,this.correlationId).toLowerCase()===t).length>0}static generateAuthority(e,t){let r;if(t&&t.azureCloudInstance!==b.AzureCloudInstance.None){let e=t.tenant?t.tenant:v.DEFAULT_COMMON_TENANT;r=`${t.azureCloudInstance}/${e}/`}return r||e}static createCloudDiscoveryMetadataFromHost(e){return{preferred_network:e,preferred_cache:e,aliases:[e]}}getPreferredCache(){if(this.managedIdentity)return v.DEFAULT_AUTHORITY_HOST;if(this.discoveryComplete())return this.metadata.preferred_cache;throw(0,d.createClientAuthError)(ei.endpointResolutionError,this.correlationId)}isAlias(e){return this.metadata.aliases.indexOf(e)>-1}isAliasOfKnownMicrosoftAuthority(e){return k.InstanceDiscoveryMetadataAliases.has(e)}validateIssuer(e){let t;if(!e)throw(0,S.createClientConfigurationError)(eo.issuerValidationFailed,this.correlationId);try{t=new URL(e)}catch{throw(0,S.createClientConfigurationError)(eo.issuerValidationFailed,this.correlationId)}let r=t.protocol,i=t.host,o=(this.canonicalAuthorityUrlComponents.Protocol||"").toLowerCase(),n=(this.canonicalAuthorityUrlComponents.HostNameAndPort||"").toLowerCase(),s=this.matchesAuthorityOrigin(r,i,o,n),a="https:"===r&&this.isAliasOfKnownMicrosoftAuthority(i),c="https:"===r&&this.matchesRegionalMicrosoftHost(i),l=this.matchesCiamTenantPattern(t,n,this.canonicalAuthorityUrlComponents.PathSegments),h="https:"===r&&this.isInKnownAuthorities(i);if(!s&&!a&&!c&&!l&&!h)throw(0,S.createClientConfigurationError)(eo.issuerValidationFailed,this.correlationId)}matchesAuthorityOrigin(e,t,r,i){return e===r&&t===i}matchesRegionalMicrosoftHost(e){let t=e.indexOf(".");if(t>0&&t<e.length-1){let r=e.substring(t+1);return this.isAliasOfKnownMicrosoftAuthority(r)}return!1}matchesCiamTenantPattern(e,t,r){let i=r[0],o=i?i.endsWith(v.AAD_TENANT_DOMAIN_SUFFIX)?i.slice(0,-v.AAD_TENANT_DOMAIN_SUFFIX.length):i:t.split(".")[0];if(!o)return!1;let n=`https://${o}${v.CIAM_AUTH_URL}`,s=[n,`${n}/${o}`,`${n}/${o}/v2.0`,`${n}/${o}${v.AAD_TENANT_DOMAIN_SUFFIX}`,`${n}/${o}${v.AAD_TENANT_DOMAIN_SUFFIX}/v2.0`],a=e.pathname.replace(/\/+$/,""),c=`${e.protocol}//${e.host}${a}`;return s.some(e=>e===c)}static isPublicCloudAuthority(e){return v.KNOWN_PUBLIC_CLOUDS.indexOf(e)>=0}static buildRegionalAuthorityString(e,t,r,i){let o=new E.UrlString(e,r);o.validateAsUri();let n=o.getUrlComponents(),s=`${t}.${n.HostNameAndPort}`;this.isPublicCloudAuthority(n.HostNameAndPort)&&(s=`${t}.${v.REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX}`);let a=E.UrlString.constructAuthorityUriFromObject({...o.getUrlComponents(),HostNameAndPort:s},r).urlString;return i?`${a}?${i}`:a}static replaceWithRegionalInformation(e,t,r){let i={...e};return i.authorization_endpoint=en.buildRegionalAuthorityString(i.authorization_endpoint,t,r),i.token_endpoint=en.buildRegionalAuthorityString(i.token_endpoint,t,r),i.end_session_endpoint&&(i.end_session_endpoint=en.buildRegionalAuthorityString(i.end_session_endpoint,t,r)),i}static transformCIAMAuthority(e,t){let r=e,i=new E.UrlString(e,t).getUrlComponents();if(0===i.PathSegments.length&&i.HostNameAndPort.endsWith(v.CIAM_AUTH_URL)){let e=i.HostNameAndPort.split(".")[0];r=`${r}${e}${v.AAD_TENANT_DOMAIN_SUFFIX}`}return r}}function es(e){return e.endsWith(v.FORWARD_SLASH)?e:`${e}${v.FORWARD_SLASH}`}en.reservedTenantDomains=new Set(["{tenant}","{tenantid}",v.AADAuthority.COMMON,v.AADAuthority.CONSUMERS,v.AADAuthority.ORGANIZATIONS]);var ea=u;function ec(e,t){if(e){if(t.resource&&(el(t.extraParameters)||el(t.extraQueryParameters)))throw(0,d.createClientAuthError)(ea.misplacedResourceParam,t.correlationId||"");if(!t.resource)throw(0,d.createClientAuthError)(ea.resourceParameterRequired,t.correlationId||"")}}function el(e){return!!e&&Object.prototype.hasOwnProperty.call(e,"resource")}var u=u,eh=e.i(607729),eh=eh,ed=e.i(367062),ed=ed,eu=er,eg=e.i(833579),eg=eg,ep=e.i(98243);function em(e,t,r){return{clientId:e,authority:t.authority,scopes:t.scopes,homeAccountIdentifier:r,claims:t.claims,authenticationScheme:t.authenticationScheme,resourceRequestMethod:t.resourceRequestMethod,resourceRequestUri:t.resourceRequestUri,shrClaims:t.shrClaims,sshKid:t.sshKid,embeddedClientId:t.embeddedClientId||t.extraParameters?.clientId,resource:t.resource,attributeTokens:(0,er.serializeAttributeTokens)(t.attributeTokens)}}let ef="acquireTokenRedirect";var eC=e.i(159624),ey=w,eg=eg,eu=er,ed=ed,eI=e.i(499076),eA=e.i(683584),eh=eh,ew=e.i(14160),eT=e.i(977083),eT=eT,eE=e.i(367702),eE=eE,ev=e.i(362862),ek=e.i(666718),eS=e.i(854351),u=u;let eR="None";class eb{initialize(){return Promise.resolve()}getItem(e){let t=encodeURIComponent(e),r=document.cookie.split(";");for(let e=0;e<r.length;e++){let i=r[e].trim(),o=i.indexOf("=");if((-1===o?i:i.substring(0,o))===t){let e=-1===o?"":i.substring(o+1);try{return decodeURIComponent(e)}catch{return e}}}return""}getUserData(){throw(0,d.createClientAuthError)(u.methodNotImplemented,"")}setItem(e,t,r,i=!0,o="Lax"){let n=`${encodeURIComponent(e)}=${encodeURIComponent(t)};path=/;SameSite=${o};`;if(r){var s;let e=(s=r,new Date(new Date().getTime()+864e5*s).toUTCString());n+=`expires=${e};`}(i||o===eR)&&(n+="Secure;"),document.cookie=n}async setUserData(e,t,r){return Promise.reject((0,d.createClientAuthError)(u.methodNotImplemented,r))}removeItem(e){this.setItem(e,"",-1)}getKeys(){let e=document.cookie.split(";"),t=[];

1return e.forEach(e=>{let r=e.trim(),i=r.indexOf("="),o=-1===i?r:r.substring(0,i);try{t.push(decodeURIComponent(o))}catch{}}),t}containsKey(e){return this.getKeys().includes(e)}decryptData(){return Promise.resolve(null)}}function eP(e,t){let r=e.getItem((0,ek.getAccountKeysCacheKey)(t));return r?JSON.parse(r):[]}function e_(e,t,r){let i=t.getItem((0,ek.getTokenKeysCacheKey)(e,r));if(i){let e=JSON.parse(i);if(e&&e.hasOwnProperty("idToken")&&e.hasOwnProperty("accessToken")&&e.hasOwnProperty("refreshToken"))return e}return{idToken:[],accessToken:[],refreshToken:[]}}function eO(e){return e.hasOwnProperty("id")&&e.hasOwnProperty("nonce")&&e.hasOwnProperty("data")}var eN=e.i(703843);let eM="msal.cache.encryption";class eq{constructor(e,t,r){if(!window.localStorage)throw(0,eS.createBrowserConfigurationAuthError)(eN.storageNotSupported,"");this.memoryStorage=new C,this.initialized=!1,this.clientId=e,this.logger=t,this.performanceClient=r,this.broadcast=new BroadcastChannel("msal.broadcast.cache")}async initialize(e){let t=new eb,r=t.getItem(eM),i={key:"",id:""};if(r)try{i=JSON.parse(r)}catch(e){}if(i.key&&i.id){let t=X(l.base64DecToArr,a.Base64Decode,this.logger,this.performanceClient,e)(i.key);this.encryptionCookie={id:i.id,key:await Z(h.generateHKDF,a.GenerateHKDF,this.logger,this.performanceClient,e)(t)}}else{let r=(0,h.createNewGuid)(),i=await Z(h.generateBaseKey,a.GenerateBaseKey,this.logger,this.performanceClient,e)(),o=X(c.urlEncodeArr,a.UrlEncodeArr,this.logger,this.performanceClient,e)(new Uint8Array(i));this.encryptionCookie={id:r,key:await Z(h.generateHKDF,a.GenerateHKDF,this.logger,this.performanceClient,e)(i)},t.setItem(eM,JSON.stringify({id:r,key:o}),0,!0,eR)}await Z(this.importExistingCache.bind(this),a.ImportExistingCache,this.logger,this.performanceClient,e)(e),this.broadcast.addEventListener("message",t=>{this.updateCache(t,e)}),this.initialized=!0}getItem(e){return window.localStorage.getItem(e)}getUserData(e){if(!this.initialized)throw(0,g.createBrowserAuthError)(m.uninitializedPublicClientApplication,"");return this.memoryStorage.getItem(e)}async decryptData(e,t,r){if(!this.initialized||!this.encryptionCookie)throw(0,g.createBrowserAuthError)(m.uninitializedPublicClientApplication,"");if(t.id!==this.encryptionCookie.id)return this.performanceClient.incrementFields({encryptedCacheExpiredCount:1},r),null;let i=await Z(h.decrypt,a.Decrypt,this.logger,this.performanceClient,r)(this.encryptionCookie.key,t.nonce,this.getContext(e),t.data);if(!i)return null;try{return{...JSON.parse(i),lastUpdatedAt:t.lastUpdatedAt}}catch(e){return this.performanceClient.incrementFields({encryptedCacheCorruptionCount:1},r),null}}setItem(e,t){window.localStorage.setItem(e,t)}async setUserData(e,t,r,i,o){if(!this.initialized||!this.encryptionCookie)throw(0,g.createBrowserAuthError)(m.uninitializedPublicClientApplication,"");if(o)this.setItem(e,t);else{let{data:o,nonce:n}=await Z(h.encrypt,a.Encrypt,this.logger,this.performanceClient,r)(this.encryptionCookie.key,t,this.getContext(e)),s={id:this.encryptionCookie.id,nonce:n,data:o,lastUpdatedAt:i};this.setItem(e,JSON.stringify(s))}this.memoryStorage.setItem(e,t),this.broadcast.postMessage({key:e,value:t,context:this.getContext(e)})}removeItem(e){this.memoryStorage.containsKey(e)&&(this.memoryStorage.removeItem(e),this.broadcast.postMessage({key:e,value:null,context:this.getContext(e)})),window.localStorage.removeItem(e)}getKeys(){return Object.keys(window.localStorage)}containsKey(e){return window.localStorage.hasOwnProperty(e)}clear(){this.memoryStorage.clear(),eP(this).forEach(e=>this.removeItem(e));let e=e_(this.clientId,this);e.idToken.forEach(e=>this.removeItem(e)),e.accessToken.forEach(e=>this.removeItem(e)),e.refreshToken.forEach(e=>this.removeItem(e)),this.getKeys().forEach(e=>{(e.startsWith(ek.PREFIX)||-1!==e.indexOf(this.clientId))&&this.removeItem(e)})}async importExistingCache(e){if(!this.encryptionCookie)return;let t=eP(this);(t=await this.importArray(t,e)).length?this.setItem((0,ek.getAccountKeysCacheKey)(),JSON.stringify(t)):this.removeItem((0,ek.getAccountKeysCacheKey)());let r=e_(this.clientId,this);r.idToken=await this.importArray(r.idToken,e),r.accessToken=await this.importArray(r.accessToken,e),r.refreshToken=await this.importArray(r.refreshToken,e),r.idToken.length||r.accessToken.length||r.refreshToken.length?this.setItem((0,ek.getTokenKeysCacheKey)(this.clientId),JSON.stringify(r)):this.removeItem((0,ek.getTokenKeysCacheKey)(this.clientId))}async getItemFromEncryptedCache(e,t){let r;if(!this.encryptionCookie)return null;let i=this.getItem(e);if(!i)return null;try{r=JSON.parse(i)}catch(e){return null}return eO(r)?r.id!==this.encryptionCookie.id?(this.performanceClient.incrementFields({encryptedCacheExpiredCount:1},t),null):(this.performanceClient.incrementFields({encryptedCacheCount:1},t),Z(h.decrypt,a.Decrypt,this.logger,this.performanceClient,t)(this.encryptionCookie.ke

1y,r.nonce,this.getContext(e),r.data)):(this.performanceClient.incrementFields({unencryptedCacheCount:1},t),i)}async importArray(e,t){let r=[],i=[];return e.forEach(e=>{let o=this.getItemFromEncryptedCache(e,t).then(t=>{t?(this.memoryStorage.setItem(e,t),r.push(e)):this.removeItem(e)});i.push(o)}),await Promise.all(i),r}getContext(e){let t="";return e.includes(this.clientId)&&(t=this.clientId),t}updateCache(e,t){this.logger.trace("17cxcm",t);let r=this.performanceClient.startMeasurement("localStorageUpdated");r.add({isBackground:!0});let{key:i,value:o,context:n}=e.data;if(!i){this.logger.error("0e10qr",t),r.end({success:!1,errorCode:"noKey"});return}if(n&&n!==this.clientId){this.logger.trace(`04rtdy ${n}`,t),r.discard();return}o?(this.memoryStorage.setItem(i,o),this.logger.verbose("1vzsgt",t)):(this.memoryStorage.removeItem(i),this.logger.verbose("04ypih",t)),r.end({success:!0})}}class eU{constructor(){if(!window.sessionStorage)throw(0,eS.createBrowserConfigurationAuthError)(eN.storageNotSupported,"")}async initialize(){}getItem(e){return window.sessionStorage.getItem(e)}getUserData(e){return this.getItem(e)}setItem(e,t){window.sessionStorage.setItem(e,t)}async setUserData(e,t){this.setItem(e,t)}removeItem(e){window.sessionStorage.removeItem(e)}getKeys(){return Object.keys(window.sessionStorage)}containsKey(e){return window.sessionStorage.hasOwnProperty(e)}decryptData(){return Promise.resolve(null)}}let eD="msal:initializeEnd",eB="msal:activeAccountChanged",ex="msal:loginSuccess",eL="msal:acquireTokenStart",eK="msal:acquireTokenSuccess",eH="msal:acquireTokenFailure",eF="msal:handleRedirectStart",ez="msal:handleRedirectEnd",e$="msal:popupOpened",eG="msal:logoutStart",eV="msal:logoutSuccess",ej="msal:logoutFailure",eJ="msal:logoutEnd";var eW=e.i(564677),eQ=e.i(831623);function eY(e,t){let r=e.indexOf(t);r>-1&&e.splice(r,1)}let eX="invalid",eZ="ttlExpired",e0="decryptFailed",e1="expired";class e6 extends eC.CacheManager{constructor(e,t,r,i,o,n,s,a=ey.DEFAULT_TOKEN_BINDING_KEY_MANAGER){super(e,r,i,o,s,a),this.cacheConfig=t,this.logger=i,this.internalStorage=new C,this.browserStorage=e2(e,t.cacheLocation,i,o),this.temporaryCacheStorage=e2(e,p.BrowserCacheLocation.SessionStorage,i,o),this.cookieStorage=new eb,this.eventHandler=n}async initialize(e){this.performanceClient.addFields({cacheLocation:this.cacheConfig.cacheLocation,cacheRetentionDays:this.cacheConfig.cacheRetentionDays},e),await this.browserStorage.initialize(e),await this.migrateExistingCache(e),this.trackVersionChanges(e)}async migrateExistingCache(e){let t=eP(this.browserStorage),r=e_(this.clientId,this.browserStorage);this.performanceClient.addFields({preMigrateAcntCount:t.length,preMigrateATCount:r.accessToken.length,preMigrateITCount:r.idToken.length,preMigrateRTCount:r.refreshToken.length},e);for(let t=0;t<ek.ACCOUNT_SCHEMA_VERSION;t++){let r=t;await this.removeStaleAccounts(t,r,e)}for(let t=0;t<ek.CREDENTIAL_SCHEMA_VERSION;t++){let r=t;await this.migrateIdTokens(t,r,e)}let i=this.getKMSIValues();for(let t=0;t<ek.CREDENTIAL_SCHEMA_VERSION;t++)await this.migrateAccessTokens(t,i,e),await this.migrateRefreshTokens(t,i,e);t=eP(this.browserStorage),r=e_(this.clientId,this.browserStorage),this.performanceClient.addFields({postMigrateAcntCount:t.length,postMigrateATCount:r.accessToken.length,postMigrateITCount:r.idToken.length,postMigrateRTCount:r.refreshToken.length},e)}async updateOldEntry(e,t){let r=this.browserStorage.getItem(e),i=this.validateAndParseJson(r||"");if(!i)return this.browserStorage.removeItem(e),{entry:null,removalReason:eX};if(i.lastUpdatedAt){if(eg.isCacheExpired(i.lastUpdatedAt,this.cacheConfig.cacheRetentionDays))return this.browserStorage.removeItem(e),{entry:null,removalReason:eZ}}else i.lastUpdatedAt=Date.now().toString(),this.setItem(e,JSON.stringify(i),t);let o=eO(i),n=o?await this.browserStorage.decryptData(e,i,t):i;return n?eu.isCredentialEntity(n)?(eu.isAccessTokenEntity(n)||eu.isRefreshTokenEntity(n))&&n.expiresOn&&eg.isTokenExpired(n.expiresOn,ep.Constants.DEFAULT_TOKEN_RENEWAL_OFFSET_SEC)?(this.browserStorage.removeItem(e),{entry:null,removalReason:e1}):{entry:n}:(this.browserStorage.removeItem(e),{entry:null,removalReason:eX}):(this.browserStorage.removeItem(e),{entry:null,removalReason:o?e0:eX})}async removeStaleAccounts(e,t,r){let i=eP(this.browserStorage,e);if(0!==i.length){for(let e of[...i]){this.performanceClient.incrementFields({oldAcntCount:1},r);let o=this.browserStorage.getItem(e),n=this.validateAndParseJson(o||"");if(!n){this.browserStorage.removeItem(e),this.performanceClient.incrementFields({invalidAcntCount:1},r),eY(i,e);continue}if(n.lastUpdatedAt)eg.isCacheExpired(n.lastUpdatedAt,this.cacheConfig.cacheRetentionDays)?(await this.removeAccountOldSchema(e,n,t,r),this.performanceClient.incrementFields({ttlExpiredAcntCount:1},r),eY(i,e)):eO(n)&&(await this.browserStorage.decryptData(e,n,r)||(this.browserStorage.removeItem(e),this.performanceClient.incrementFields({decryptFailedAcntCount:1},r),eY(i,e)));else{n.lastUpdatedAt=Date.now().toString(),this.setItem(e,JSON.stringify(n),r);continue}}this.setAccountKeys(i,r,e)}}async removeAccountOldSchema(e,t,r,i){let o=eO(t)?await this.browserStorage.decryptData(e,t,i):t,n=o?.homeAccountId;if(n){let e=this.getTokenKeys(r);[...e.idToken].filter(e=>

1e.includes(n)).forEach(t=>{this.browserStorage.removeItem(t),eY(e.idToken,t)}),[...e.accessToken].filter(e=>e.includes(n)).forEach(t=>{this.browserStorage.removeItem(t),eY(e.accessToken,t)}),[...e.refreshToken].filter(e=>e.includes(n)).forEach(t=>{this.browserStorage.removeItem(t),eY(e.refreshToken,t)}),this.setTokenKeys(e,i,r)}this.browserStorage.removeItem(e)}getKMSIValues(){let e={};for(let t of this.getTokenKeys().idToken){let r=this.browserStorage.getUserData(t);if(r){let t=JSON.parse(r),i=ed.extractTokenClaims(t.secret,l.base64Decode,"");i&&(e[t.homeAccountId]=ed.isKmsi(i))}}return e}async migrateIdTokens(e,t,r){let i=e_(this.clientId,this.browserStorage,e);if(0===i.idToken.length)return;let o=e_(this.clientId,this.browserStorage,ek.CREDENTIAL_SCHEMA_VERSION),n=eP(this.browserStorage),s=eP(this.browserStorage,t);for(let e of[...i.idToken]){this.performanceClient.incrementFields({oldITCount:1},r);let t=await this.updateOldEntry(e,r),a=t.entry;if(!a){switch(t.removalReason){case eZ:this.performanceClient.incrementFields({ttlExpiredITCount:1},r);break;case e0:this.performanceClient.incrementFields({decryptFailedITCount:1},r);break;case eX:this.performanceClient.incrementFields({invalidITCount:1},r)}eY(i.idToken,e);continue}let c=n.find(e=>e.includes(a.homeAccountId)),h=s.find(e=>e.includes(a.homeAccountId)),d=null;if(c)d=this.getAccount(c,r);else if(h){let e=this.browserStorage.getItem(h),t=this.validateAndParseJson(e||"");d=t&&eO(t)?await this.browserStorage.decryptData(h,t,r):t}if(!d){this.performanceClient.incrementFields({skipITMigrateCount:1},r);continue}let u=ed.extractTokenClaims(a.secret,l.base64Decode,r),g=this.generateCredentialKey(a),p=this.getIdTokenCredential(g,r),m=Object.keys(u).includes("signin_state"),f=p&&Object.keys(ed.extractTokenClaims(p.secret,l.base64Decode,r)||{}).includes("signin_state");if(!p||a.lastUpdatedAt>p.lastUpdatedAt&&(m||!f)){let e=d.tenantProfiles||[],t=(0,eI.getTenantIdFromIdTokenClaims)(u)||d.realm;if(t&&!e.find(e=>e.tenantId===t)){let r=(0,eA.buildTenantProfile)(d.homeAccountId,d.localAccountId,t,d.nativeAccountId,u);e.push(r)}d.tenantProfiles=e;let i=this.generateAccountKey(eh.getAccountInfo(d)),s=ed.isKmsi(u);await this.setUserData(i,JSON.stringify(d),r,d.lastUpdatedAt,s),n.includes(i)||n.push(i),await this.setUserData(g,JSON.stringify(a),r,a.lastUpdatedAt,s),this.performanceClient.incrementFields({migratedITCount:1},r),o.idToken.includes(g)||o.idToken.push(g)}}this.setTokenKeys(i,r,e),this.setTokenKeys(o,r),this.setAccountKeys(n,r)}async migrateAccessTokens(e,t,r){let i=e_(this.clientId,this.browserStorage,e);if(0===i.accessToken.length)return;let o=e_(this.clientId,this.browserStorage,ek.CREDENTIAL_SCHEMA_VERSION);for(let e of[...i.accessToken]){this.performanceClient.incrementFields({oldATCount:1},r);let n=await this.updateOldEntry(e,r),s=n.entry;if(!s){switch(n.removalReason){case eZ:this.performanceClient.incrementFields({ttlExpiredATCount:1},r);break;case e0:this.performanceClient.incrementFields({decryptFailedATCount:1},r);break;case e1:this.performanceClient.incrementFields({expiredATCount:1},r);break;case eX:this.performanceClient.incrementFields({invalidATCount:1},r)}eY(i.accessToken,e);continue}if(!(s.homeAccountId in t)){this.performanceClient.incrementFields({skipATMigrateCount:1},r);continue}let a=this.generateCredentialKey(s),c=t[s.homeAccountId];if(o.accessToken.includes(a)){let e=this.getAccessTokenCredential(a,r);(!e||s.lastUpdatedAt>e.lastUpdatedAt)&&(await this.setUserData(a,JSON.stringify(s),r,s.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedATCount:1},r))}else await this.setUserData(a,JSON.stringify(s),r,s.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedATCount:1},r),o.accessToken.push(a)}this.setTokenKeys(i,r,e),this.setTokenKeys(o,r)}async migrateRefreshTokens(e,t,r){let i=e_(this.clientId,this.browserStorage,e);if(0===i.refreshToken.length)return;let o=e_(this.clientId,this.browserStorage,ek.CREDENTIAL_SCHEMA_VERSION);for(let e of[...i.refreshToken]){this.performanceClient.incrementFields({oldRTCount:1},r);let n=await this.updateOldEntry(e,r),s=n.entry;if(!s){switch(n.removalReason){case eZ:this.performanceClient.incrementFields({ttlExpiredRTCount:1},r);break;case e0:this.performanceClient.incrementFields({decryptFailedRTCount:1},r);break;case e1:this.performanceClient.incrementFields({expiredRTCount:1},r);break;case eX:this.performanceClient.incrementFields({invalidRTCount:1},r)}eY(i.refreshToken,e);continue}if(!(s.homeAccountId in t)){this.performanceClient.incrementFields({skipRTMigrateCount:1},r);continue}let a=this.generateCredentialKey(s),c=t[s.homeAccountId];if(o.refreshToken.includes(a)){let e=this.getRefreshTokenCredential(a,r);(!e||s.lastUpdatedAt>e.lastUpdatedAt)&&(await this.setUserData(a,JSON.stringify(s),r,s.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedRTCount:1},r))}else await this.setUserData(a,JSON.stringify(s),r,s.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedRTCount:1},r),o.refreshToken.push(a)}this.setTokenKeys(i,r,e),this.setTokenKeys(o,r)}trackVersionChanges(e){let t=this.browserStorage.getItem(ek.VERSION_CACHE_KEY);t&&(this.logger.info(`1wuc87 ${t}`,e),this.performanceClient.addGlobalFields({previousLibraryVersion:t})),t!==eQ.version&&this.setItem(ek.VERSION_CACHE_KEY,eQ.version,e)}validateAndParseJson(e){if(!e)return null;try{let t=JSON.parse(e);return t&&"object"==typeof t?t:null}catch(e){return null}}setItem(e,t,r){let i=Array(ek.CREDENTIAL_SCHEMA_VERSION+1).fill(0),o=[];for(let n=0;n<=20;n++)try{if(this.browserStorage.setItem(e,t),n>0)for(let e=0;e<=ek.CREDENTIAL_SCHEMA_VERSION;e++){let t=i.slice(0,e).reduce((e,t)=>

1e+t,0);if(t>=n)break;let s=n>t+i[e]?t+i[e]:n;n>t&&i[e]>0&&this.removeAccessTokenKeys(o.slice(t,s),r,e)}break}catch(a){let s=(0,ew.createCacheError)(a);if(s.errorCode===eT.cacheQuotaExceeded&&n<20){if(!o.length)for(let r=0;r<=ek.CREDENTIAL_SCHEMA_VERSION;r++)if(e===(0,ek.getTokenKeysCacheKey)(this.clientId,r)){let e=JSON.parse(t).accessToken;o.push(...e),i[r]=e.length}else{let e=this.getTokenKeys(r).accessToken;o.push(...e),i[r]=e.length}if(o.length<=n)throw s;this.removeAccessToken(o[n],r,!1)}else throw s}}async setUserData(e,t,r,i,o){let n=Array(ek.CREDENTIAL_SCHEMA_VERSION+1).fill(0),s=[];for(let a=0;a<=20;a++)try{if(await Z(this.browserStorage.setUserData.bind(this.browserStorage),eE.SetUserData,this.logger,this.performanceClient,r)(e,t,r,i,o),a>0)for(let e=0;e<=ek.CREDENTIAL_SCHEMA_VERSION;e++){let t=n.slice(0,e).reduce((e,t)=>e+t,0);if(t>=a)break;let i=a>t+n[e]?t+n[e]:a;a>t&&n[e]>0&&this.removeAccessTokenKeys(s.slice(t,i),r,e)}break}catch(t){let e=(0,ew.createCacheError)(t);if(e.errorCode===eT.cacheQuotaExceeded&&a<20){if(!s.length)for(let e=0;e<=ek.CREDENTIAL_SCHEMA_VERSION;e++){let t=this.getTokenKeys(e).accessToken;s.push(...t),n[e]=t.length}if(s.length<=a)throw e;this.removeAccessToken(s[a],r,!1)}else throw e}}getAccount(e,t){this.logger.trace("1lfvm6",t);let r=this.browserStorage.getUserData(e);if(!r)return this.removeAccountKeyFromMap(e,t),null;let i=this.validateAndParseJson(r);if(!i||!eh.isAccountEntity(i))return null;let o=eC.CacheManager.toObject({},i);return this.performanceClient.addFields({accountCachedBy:(0,p.apiIdToName)(o.cachedByApiId)},t),o}

1async setAccount(e,t,r,i){this.logger.trace("1bz3wr",t);let o=this.generateAccountKey(eh.getAccountInfo(e)),n=Date.now().toString();e.lastUpdatedAt=n,e.cachedByApiId=i,await this.setUserData(o,JSON.stringify(e),t,n,r),this.addAccountKeyToMap(o,t),this.performanceClient.addFields({kmsi:r},t)}setAccountKeys(e,t,r=ek.ACCOUNT_SCHEMA_VERSION){0===e.length?this.removeItem((0,ek.getAccountKeysCacheKey)(r)):this.setItem((0,ek.getAccountKeysCacheKey)(r),JSON.stringify(e),t)}getAccountKeys(){return eP(this.browserStorage)}addAccountKeyToMap(e,t){this.logger.trace("0rb85k",t),this.logger.tracePii(`1l9bdo ${e}`,t);let r=this.getAccountKeys();return -1===r.indexOf(e)?(r.push(e),this.setItem((0,ek.getAccountKeysCacheKey)(),JSON.stringify(r),t),this.logger.verbose("0xia39",t),!0):(this.logger.verbose("0161kk",t),!1)}removeAccountKeyFromMap(e,t){this.logger.trace("1jpigu",t),this.logger.tracePii(`1xzspl ${e}`,t);let r=this.getAccountKeys(),i=r.indexOf(e);i>-1?(r.splice(i,1),this.setAccountKeys(r,t)):this.logger.trace("1dytu2",t)}removeAccount(e,t){let r=this.getActiveAccount(t);r?.homeAccountId===e.homeAccountId&&r?.environment===e.environment&&this.setActiveAccount(null,t),super.removeAccount(e,t),this.removeAccountKeyFromMap(this.generateAccountKey(e),t),this.browserStorage.getKeys().forEach(t=>{t.includes(e.homeAccountId)&&t.includes(e.environment)&&this.browserStorage.removeItem(t)})}removeIdToken(e,t){super.removeIdToken(e,t);let r=this.getTokenKeys(),i=r.idToken.indexOf(e);i>-1&&(this.logger.info("05udv9",t),r.idToken.splice(i,1),this.setTokenKeys(r,t))}removeAccessToken(e,t,r=!0){super.removeAccessToken(e,t),r&&this.removeAccessTokenKeys([e],t)}removeAccessTokenKeys(e,t,r=ek.CREDENTIAL_SCHEMA_VERSION){this.logger.trace("17o18n",t);let i=this.getTokenKeys(r),o=0;if(e.forEach(e=>{let t=i.accessToken.indexOf(e);t>-1&&(i.accessToken.splice(t,1),o++)}),o>0){this.logger.info(`15i5d5 ${o}`,t),this.setTokenKeys(i,t,r);return}}removeRefreshToken(e,t){super.removeRefreshToken(e,t);let r=this.getTokenKeys(),i=r.refreshToken.indexOf(e);i>-1&&(this.logger.info("1f4fq3",t),r.refreshToken.splice(i,1),this.setTokenKeys(r,t))}getTokenKeys(e=ek.CREDENTIAL_SCHEMA_VERSION){return e_(this.clientId,this.browserStorage,e)}setTokenKeys(e,t,r=ek.CREDENTIAL_SCHEMA_VERSION){0===e.idToken.length&&0===e.accessToken.length&&0===e.refreshToken.length?this.removeItem((0,ek.getTokenKeysCacheKey)(this.clientId,r)):this.setItem((0,ek.getTokenKeysCacheKey)(this.clientId,r),JSON.stringify(e),t)}getIdTokenCredential(e,t){let r=this.browserStorage.getUserData(e);if(!r)return this.logger.trace("1jukz6",t),this.removeIdToken(e,t),null;let i=this.validateAndParseJson(r);return i&&eu.isIdTokenEntity(i)?(this.logger.trace("01ju66",t),i):(this.logger.trace("1jukz6",t),null)}async setIdTokenCredential(e,t,r){this.logger.trace("13hjll",t);let i=this.generateCredentialKey(e),o=Date.now().toString();e.lastUpdatedAt=o,await this.setUserData(i,JSON.stringify(e),t,o,r);let n=this.getTokenKeys();-1===n.idToken.indexOf(i)&&(this.logger.info("07jy92",t),n.idToken.push(i),this.setTokenKeys(n,t))}getAccessTokenCredential(e,t){let r=this.browserStorage.getUserData(e);if(!r)return this.logger.trace("0bqvx8",t),this.removeAccessTokenKeys([e],t),null;let i=this.validateAndParseJson(r);return i&&eu.isAccessTokenEntity(i)?(this.logger.trace("1o81rl",t),i):(this.logger.trace("0bqvx8",t),null)}async setAccessTokenCredential(e,t,r,i){this.logger.trace("1pondb",t);let o=this.generateCredentialKey(e,i),n=Date.now().toString();e.lastUpdatedAt=n,await this.setUserData(o,JSON.stringify(e),t,n,r);let s=this.getTokenKeys(),a=s.accessToken.indexOf(o);-1!==a&&s.accessToken.splice(a,1),this.logger.trace(`1onhey ${-1===a?"added to":"updated in"}`,t),s.accessToken.push(o),this.setTokenKeys(s,t)}getRefreshTokenCredential(e,t){let r=this.browserStorage.getUserData(e);if(!r)return this.logger.trace("0jlizt",t),this.removeRefreshToken(e,t),null;let i=this.validateAndParseJson(r);return i&&eu.isRefreshTokenEntity(i)?(this.logger.trace("0nokxi",t),i):(this.logger.trace("0jlizt",t),null)}async setRefreshTokenCredential(e,t,r){this.logger.trace("0tcg8d",t);let i=this.generateCredentialKey(e),o=Date.now().toString();e.lastUpdatedAt=o,await this.setUserData(i,JSON.stringify(e),t,o,r);let n=this.getTokenKeys();-1===n.refreshToken.indexOf(i)&&(this.logger.info("0eckjs",t),n.refreshToken.push(i),this.setTokenKeys(n,t))}getAppMetadata(e,t){let r=this.browserStorage.getItem(e);if(!r)return this.logger.trace("1q101h",t),null;let i=this.validateAndParseJson(r);return i&&eu.isAppMetadataEntity(e,i)?(this.logger.trace("19pvg2",t),i):(this.logger.trace("1q101h",t),null)}setAppMetadata(e,t){this.logger.trace("0cyma6",t);let r=eu.generateAppMetadataKey(e);this.setItem(r,JSON.stringify(e),t)}getServerTelemetry(e,t){let r=this.browserStorage.getItem(e);if(!r)return this.logger.trace("0jk19c",t),null;let i=this.validateAndParseJson(r);return i&&eu.isServerTelemetryEntity(e,i)?(this.logger.trace("12jguk",t),i):(this.logger.trace("0jk19c",t),null)}setServerTelemetry(e,t,r){this.logger.trace("1poh61",r),this.setItem(e,JSON.stringify(t),r)}getAuthorityMetadata(e,t){let r=this.internalStorage.getItem(e);if(!r)return this.logger.trace("1r39oe",t),null;let i=this.validateAndParseJson(r);return i&&eu.isAuthorityMetadataEntity(e,i)?(this.logger.trace("1ohvk3",t),i):null}getAuthorityMetadataKeys(){return this.internalStorage.getKeys().filter(e=>this.isAuthorityMetadata(e))}setWrapperMetadata(e,t){this.internalStorage.setItem(p.InMemoryCacheKeys.WRAPPER_SKU,e),this.internalStorage.setItem(p.InMemoryCacheKeys.WRAPPER_VER,t)}getWrapperMetadata(){return[this.internalStorage.getItem(p.InMemoryCacheKeys.WRAPPER_SKU)||"",this.internalStorage.getItem(p.InMemoryCacheKeys.WRAPPER_VER)||""]}

1setAuthorityMetadata(e,t,r){this.logger.trace("07w8n2",r),this.internalStorage.setItem(e,JSON.stringify(t))}getActiveAccount(e){let t=this.generateCacheKey(ep.Constants.PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS),r=this.browserStorage.getItem(t);if(!r)return this.logger.trace("08gw0e",e),null;let i=this.validateAndParseJson(r);return i?(this.logger.trace("1t3ch7",e),this.getAccountInfoFilteredBy({homeAccountId:i.homeAccountId,localAccountId:i.localAccountId,tenantId:i.tenantId},e)):(this.logger.trace("0me1up",e),null)}setActiveAccount(e,t){let r=this.generateCacheKey(ep.Constants.PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS);if(e){this.logger.verbose("0rsj80",t);let i={homeAccountId:e.homeAccountId,localAccountId:e.localAccountId,tenantId:e.tenantId};this.setItem(r,JSON.stringify(i),t)}else this.logger.verbose("1bp5z5",t),this.browserStorage.removeItem(r);this.eventHandler.emitEvent(eB,t)}getThrottlingCache(e,t){let r=this.browserStorage.getItem(e);if(!r)return this.logger.trace("1h4wa6",t),null;let i=this.validateAndParseJson(r);return i&&eu.isThrottlingEntity(e,i)?(this.logger.trace("0of6n8",t),i):(this.logger.trace("1h4wa6",t),null)}setThrottlingCache(e,t,r){this.logger.trace("0wfgh6",r),this.setItem(e,JSON.stringify(t),r)}getTemporaryCache(e,t,r){this.logger.trace("1ordf8",t);let i=r?this.generateCacheKey(e):e;return this.temporaryCacheStorage.getItem(i)}setTemporaryCache(e,t,r){let i=r?this.generateCacheKey(e):e;this.temporaryCacheStorage.setItem(i,t)}removeItem(e){this.browserStorage.removeItem(e)}removeTemporaryItem(e){this.temporaryCacheStorage.removeItem(e)}getKeys(){return this.browserStorage.getKeys()}clear(e){this.removeAllAccounts(e),this.removeAppMetadata(e),this.temporaryCacheStorage.getKeys().forEach(e=>{(-1!==e.indexOf(ek.PREFIX)||-1!==e.indexOf(this.clientId))&&this.removeTemporaryItem(e)}),this.browserStorage.getKeys().forEach(e=>{(-1!==e.indexOf(ek.PREFIX)||-1!==e.indexOf(this.clientId))&&this.browserStorage.removeItem(e)}),this.internalStorage.clear()}generateCacheKey(e){return ev.StringUtils.startsWith(e,ek.PREFIX)?e:`${ek.PREFIX}.${this.clientId}.${e}`}generateCredentialKey(e,t){let r=e.credentialType===ep.Constants.CredentialType.REFRESH_TOKEN&&e.familyId||e.clientId,i=e.tokenType&&e.tokenType.toLowerCase()!==ep.Constants.AuthenticationScheme.BEARER.toLowerCase()?e.tokenType.toLowerCase():"",o=[`${ek.PREFIX}.${ek.CREDENTIAL_SCHEMA_VERSION}`,e.homeAccountId,e.environment,e.credentialType,r,e.realm||"",e.target||"",i];return e.additionalCacheKeyComponents&&Object.keys(e.additionalCacheKeyComponents).length>0&&t&&o.push(t),o.join(ek.CACHE_KEY_SEPARATOR).toLowerCase()}generateAccountKey(e){let t=e.homeAccountId.split(".")[1];return[`${ek.PREFIX}.${ek.ACCOUNT_SCHEMA_VERSION}`,e.homeAccountId,e.environment,t||e.tenantId||""].join(ek.CACHE_KEY_SEPARATOR).toLowerCase()}resetRequestCache(e){this.logger.trace("0h0ynu",e),this.removeTemporaryItem(this.generateCacheKey(p.TemporaryCacheKeys.REQUEST_PARAMS)),this.removeTemporaryItem(this.generateCacheKey(p.TemporaryCacheKeys.VERIFIER)),this.removeTemporaryItem(this.generateCacheKey(p.TemporaryCacheKeys.ORIGIN_URI)),this.removeTemporaryItem(this.generateCacheKey(p.TemporaryCacheKeys.URL_HASH)),this.removeTemporaryItem(this.generateCacheKey(p.TemporaryCacheKeys.NATIVE_REQUEST)),this.setInteractionInProgress(!1,void 0)}cacheAuthorizeRequest(e,t,r){this.logger.trace("1tzef5",t);let i=(0,c.base64Encode)(JSON.stringify(e));if(this.setTemporaryCache(p.TemporaryCacheKeys.REQUEST_PARAMS,i,!0),r){let e=(0,c.base64Encode)(r);this.setTemporaryCache(p.TemporaryCacheKeys.VERIFIER,e,!0)}}getCachedRequest(e){let t;this.logger.trace("0uen20",e);let r=this.getTemporaryCache(p.TemporaryCacheKeys.REQUEST_PARAMS,e,!0);if(!r)throw(0,g.createBrowserAuthError)(m.noTokenRequestCacheError,"");let i=this.getTemporaryCache(p.TemporaryCacheKeys.VERIFIER,e,!0),o="";try{t=JSON.parse((0,l.base64Decode)(r)),i&&(o=(0,l.base64Decode)(i))}catch(t){throw this.logger.errorPii(`0ewsey ${r}`,e),this.logger.error(`0tvdic ${t}`,e),(0,g.createBrowserAuthError)(m.unableToParseTokenRequestCacheError,"")}return[t,o]}getCachedNativeRequest(){this.logger.trace("1yxcdm","");let e=this.getTemporaryCache(p.TemporaryCacheKeys.NATIVE_REQUEST,"",!0);if(!e)return this.logger.trace("0mnxd4",""),null;let t=this.validateAndParseJson(e);return t||(this.logger.error("0rrkip",""),null)}isInteractionInProgress(e){let t=this.getInteractionInProgress()?.clientId;return e?t===this.clientId:!!t}getInteractionInProgress(){let e=`${ek.PREFIX}.${p.TemporaryCacheKeys.INTERACTION_STATUS_KEY}`,t=this.getTemporaryCache(e,"",!1);try{return t?JSON.parse(t):null}catch(t){return this.logger.error("0jjyys",""),this.removeTemporaryItem(e),this.resetRequestCache(""),(0,eW.clearHash)(window),null}}setInteractionInProgress(e,t=p.INTERACTION_TYPE.SIGNIN,r=!1,i=""){let o=`${ek.PREFIX}.${p.TemporaryCacheKeys.INTERACTION_STATUS_KEY}`;if(e){let e=this.getInteractionInProgress();if(e)if(r)this.logger.warning(`1pmscr ${e.clientId} ${e.type}`,i),(0,eW.cancelPendingBridgeResponse)(this.logger,i),this.removeTemporaryItem(o);else throw(0,g.createBrowserAuthError)(m.interactionInProgress,"");this.setTemporaryCache(o,JSON.stringify({clientId:this.clientId,type:t}),!1)}else e||this.getInteractionInProgress()?.clientId!==this.clientId||this.removeTemporaryItem(o)}async hydrateCache(e,t){let r=eu.createIdTokenEntity(e.account.homeAccountId,e.account.environment,e.idToken,this.clientId,e.tenantId),i=eu.createAccessTokenEntity(e.account.homeAccountId,e.account.environment,e.accessToken,this.clientId,e.tenantId,e.scopes.join(" "),e.expiresOn?eg.toSecondsFromDate(e.expiresOn):0,e.extExpiresOn?eg.toSecondsFromDate(e.extExpiresOn):0,l.base64Decode,t.correlationId||"",void 0,e.tokenType,void 0,t.sshKid);

1return t.resource&&(i.resource=t.resource),this.saveCacheRecord({idToken:r,accessToken:i},e.correlationId,ed.isKmsi(ed.extractTokenClaims(e.idToken,l.base64Decode,e.correlationId)),p.ApiId.hydrateCache)}async saveCacheRecord(e,t,r,i,o){try{await super.saveCacheRecord(e,t,r,i,o)}catch(e){if(e instanceof ew.CacheError&&this.performanceClient&&t)try{let e=this.getTokenKeys();this.performanceClient.addFields({cacheRtCount:e.refreshToken.length,cacheIdCount:e.idToken.length,cacheAtCount:e.accessToken.length},t)}catch(e){}throw e}}}function e2(e,t,r,i){try{switch(t){case p.BrowserCacheLocation.LocalStorage:return new eq(e,r,i);case p.BrowserCacheLocation.SessionStorage:return new eU;case p.BrowserCacheLocation.MemoryStorage:}}catch(e){r.error(e,"")}return new C}var e4=e.i(583233);class e5{constructor(e){this.eventCallbacks=new Map,this.logger=e||new e4.Logger({},eQ.name,eQ.version),"u">typeof BroadcastChannel&&(this.broadcastChannel=new BroadcastChannel("msal.broadcast.event")),this.invokeCrossTabCallbacks=this.invokeCrossTabCallbacks.bind(this)}addEventCallback(e,t,r){if("u">typeof window){let i=r||(0,eW.createGuid)();return this.eventCallbacks.has(i)?(this.logger.error(`1578i0 ${i}`,""),null):(this.eventCallbacks.set(i,[e,t||[]]),this.logger.verbose(`1cnec4 ${i}`,""),i)}return null}removeEventCallback(e){this.eventCallbacks.delete(e),this.logger.verbose(`12zotd ${e}`,"")}emitEvent(e,t,r,i,o){let n={eventType:e,interactionType:r||null,payload:i||null,error:o||null,correlationId:t,timestamp:Date.now()};switch(e){case ex:case eV:case eB:this.broadcastChannel?.postMessage(n)}this.invokeCallbacks(n)}invokeCallbacks(e){this.eventCallbacks.forEach(([t,r],i)=>{(0===r.length||r.includes(e.eventType))&&(this.logger.verbose(`15jpwk ${i} ${e.eventType}`,""),t.apply(null,[e]))})}invokeCrossTabCallbacks(e){let t=e.data;this.invokeCallbacks(t)}subscribeCrossTab(){this.broadcastChannel?.addEventListener("message",this.invokeCrossTabCallbacks)}unsubscribeCrossTab(){this.broadcastChannel?.removeEventListener("message",this.invokeCrossTabCallbacks)}}var eE=eE,e3=e.i(966908),e8=e.i(880453),e7=e.i(136981),e9=e.i(671816),te=e.i(913087),tt=ed;class tr{constructor(e,t){this.cache=e,this.hasChanged=t}get cacheHasChanged(){return this.hasChanged}get tokenCache(){return this.cache}}var ti=eh,to=eg,tn=et;class ts extends tn.AuthError{constructor(e,t,r){super(e,t,r),this.name="JoseHeaderError",Object.setPrototypeOf(this,ts.prototype)}}function ta(e,t){return new ts(e,t)}let tc="missing_alg_error";class tl{constructor(e,t){if("string"!=typeof e.alg||!e.alg)throw ta(tc,t);this.typ=e.typ,this.alg=e.alg,this.kid=e.kid,this.jwk=e.jwk}static getShrHeader(e,t){if(!e.kid)throw ta("missing_kid_error",t);if(!e.alg)throw ta(tc,t);return new tl({typ:e.typ||v.JsonWebTokenTypes.Pop,kid:e.kid,alg:e.alg},t)}static getDpopHeader(e,t){if(!function(e){if("object"!=typeof e||null===e||"[object Object]"!==Object.prototype.toString.call(e))return!1;if(null===Object.getPrototypeOf(e))return!0;let t=e;for(;null!==Object.getPrototypeOf(t);)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}(e.jwk))throw ta("missing_jwk_error",t);if(!e.alg)throw ta(tc,t);if(0===Object.keys(e.jwk).length)throw ta("invalid_jwk_error",t);return new tl({typ:v.JsonWebTokenTypes.Dpop,alg:e.alg,jwk:e.jwk},t)}}let th=s.JsonWebTokenAlgorithms.RS256;class td{constructor(e,t,r){this.cryptoUtils=e,this.tokenBindingKeyM

1anager=t,this.performanceClient=r}async generateCnf(e,t){let r=await Z(this.generateKid.bind(this),K,t,this.performanceClient,e.correlationId)(e),i=this.cryptoUtils.base64UrlEncode(JSON.stringify(r));return{kid:r.kid,reqCnfString:i}}async generateKid(e){return{kid:await this.tokenBindingKeyManager.provisionTokenBindingKey({correlationId:e.correlationId,tokenBindingKeyType:"shr",tokenBindingKeyAlgorithm:th}),xms_ksl:"sw"}}async signPopToken(e,t,r){return this.signPayload(e,t,r)}async signPayload(e,t,r,i){let{resourceRequestMethod:o,resourceRequestUri:n,shrClaims:s,shrNonce:a,shrOptions:c}=r,l=n?new E.UrlString(n,r.correlationId):void 0,h=l?.getUrlComponents(),d=await this.tokenBindingKeyManager.getTokenBindingPublicKeyJwk(t,r.correlationId),u=this.cryptoUtils.base64UrlEncode(JSON.stringify({kid:t})),g=c?.header?.alg||d.alg||th,p=tl.getShrHeader({...c?.header,alg:g,kid:u},r.correlationId),m={at:e,ts:(0,to.nowSeconds)(),m:o?.toUpperCase(),u:h?.HostNameAndPort,nonce:a||this.cryptoUtils.createNewGuid(),p:h?.AbsolutePath,q:h?.QueryString?[[],h.QueryString]:void 0,client_claims:s||void 0,...i,cnf:{jwk:d}};return this.cryptoUtils.signTokenBindingJwt(p,m,t,r.correlationId)}}var tu=eg;let tg=/^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/,tp=s.JsonWebTokenAlgorithms.ES256;function tm(e,t){let r;try{r=new URL(e)}catch{throw(0,S.createClientConfigurationError)(eo.urlParseError,t)}if(!/^https:\/\//i.test(e)||"https:"!==r.protocol||r.username||r.password)throw(0,S.createClientConfigurationError)(eo.invalidDpopHtu,t);return r.search="",r.hash="",r.href}function tf(e,t){if(void 0!==e&&0===e.trim().length)throw(0,S.createClientConfigurationError)(eo.invalidDpopNonce,t)}class tC{constructor(e,t){this.cryptoUtils=e,this.tokenBindingKeyM

1anager=t}async generateJkt(e=""){return this.tokenBindingKeyManager.provisionTokenBindingKey({tokenBindingKeyType:"dpop",tokenBindingKeyAlgorithm:tp,correlationId:e})}buildTokenProofClaims(e,t=""){tf(e.nonce,t);let r={jti:this.cryptoUtils.createNewGuid(),htm:"POST",htu:tm(e.tokenEndpoint,t),iat:(0,tu.nowSeconds)()};return void 0!==e.nonce&&(r.nonce=e.nonce),r}async generateTokenProof(e,t,r=""){return this.generateProof(this.buildTokenProofClaims(e,r),t,r)}buildResourceProofClaims(e,t=""){tf(e.nonce,t);let r={jti:this.cryptoUtils.createNewGuid(),htm:function(e,t){if("string"!=typeof e||!tg.test(e))throw(0,S.createClientConfigurationError)(eo.invalidDpopHtm,t);return e.toUpperCase()}(e.htm,t),htu:tm(e.htu,t),ath:e.ath,iat:(0,tu.nowSeconds)()};return void 0!==e.nonce&&(r.nonce=e.nonce),r}async generateResourceProof(e,t,r=""){let{htu:i,htm:o,nonce:n}=e;if(!i||!o)throw(0,S.createClientConfigurationError)(eo.dpopMissingResourceContext,r);let s=await this.cryptoUtils.hashString(e.accessToken);return this.generateProof(this.buildResourceProofClaims({htu:i,htm:o,ath:s,nonce:n},r),t,r)}

1async generateProof(e,t,r){let i=await this.tokenBindingKeyManager.getTokenBindingPublicKeyJwk(t,r);return this.cryptoUtils.signTokenBindingJwt(tl.getDpopHeader({alg:tp,jwk:i},r),e,t,r)}}var ty=et;class tI extends ty.AuthError{constructor(e,t,r,i,o,n){super(e,t,r,i),this.name="ServerError",this.errorNo=o,this.status=n,Object.setPrototypeOf(this,tI.prototype)}}var tA=e.i(357764),tw=e.i(194354),tT=eg,tE=u;class tv{constructor(e,t,r,i,o,n,s,a=w.DEFAULT_TOKEN_BINDING_KEY_MANAGER){this.clientId=e,this.cacheStorage=t,this.cryptoObj=r,this.tokenBindingKeyManager=a,this.logger=i,this.performanceClient=o,this.serializableCache=n,this.persistencePlugin=s}validateTokenResponse(e,r,i){if(e.error||e.error_description||e.suberror){let o=`Error(s): ${e.error_codes||v.NOT_AVAILABLE} - Timestamp: ${e.timestamp||v.NOT_AVAILABLE} - Description: ${e.error_description||v.NOT_AVAILABLE} - Correlation ID: ${e.correlation_id||v.NOT_AVAILABLE} - Trace ID: ${e.trace_id||v.NOT_AVAILABLE}`,n=e.error_codes?.length?e.error_codes[0]:void 0,s=new tI(e.error||"",e.correlation_id||"",o,e.suberror,n,e.status);if(i&&e.status&&e.status>=v.HTTP_SERVER_ERROR_RANGE_START&&e.status<=v.HTTP_SERVER_ERROR_RANGE_END)return void this.logger.warning(`16ks7j ${s}`,r);if(i&&e.status&&e.status>=v.HTTP_CLIENT_ERROR_RANGE_START&&e.status<=v.HTTP_CLIENT_ERROR_RANGE_END)return void this.logger.warning(`0g61x3 ${s}`,r);if((0,t.isInteractionRequiredError)(e.error,e.error_description,e.suberror))throw new t.InteractionRequiredAuthError(e.error||"",e.correlation_id||"",e.error_description,e.suberror,e.timestamp||"",e.trace_id||"",e.claims||"",n);throw s}}async handleServerTokenResponse(e,t,r,i,o,n,s,a,c,l,h){let u,g,p;if(e.id_token&&(u=(0,tt.extractTokenClaims)(e.id_token||"",this.cryptoObj.base64Decode,i.correlationId),n&&n.nonce&&u.nonce!==n.nonce))throw(0,d.createClientAuthError)(tE.nonceMismatch,i.correlationId);if(this.homeAccountIdentifier=(0,ti.generateHomeAccountId)(e.client_info||"",t.authorityType,this.logger,this.cryptoObj,i.correlationId,u),n&&n.state&&(g=(0,tw.parseRequestState)(this.cryptoObj.base64Decode,n.state,i.correlationId)),e.key_id=e.key_id||i.dpopJkt||i.sshKid||void 0,i.authenticationScheme===v.AuthenticationScheme.DPOP){if(e.token_type?.toLowerCase()!==v.AuthenticationScheme.DPOP.toLowerCase())throw this.performanceClient?.addFields({dpopTokenTypeMismatch:e.token_type},i.correlationId),(0,d.createClientAuthError)(tE.dpopTokenTypeMismatch,i.correlationId);e.token_type=v.AuthenticationScheme.DPOP}let m=(0,er.serializeAttributeTokens)(i.attributeTokens),f=this.generateCacheRecord(e,t,r,i,u,s,n,h??(m?{attribute_tokens:m}:void 0));try{if(this.persistencePlugin&&this.serializableCache&&(this.logger.verbose("0jbz5k",i.correlationId),p=new tr(this.serializableCache,!0),await this.persistencePlugin.beforeCacheAccess(p)),a&&!c&&f.account&&this.cacheStorage.getAllAccounts({homeAccountId:f.account.homeAccountId,environment:f.account.environment},i.correlationId).length<1)return this.logger.warning("1gmt66",i.correlationId),this.performanceClient?.addFields({acntLoggedOut:!0},i.correlationId),await tv.generateAuthenticationResult(this.cryptoObj,t,f,!1,i,this.performanceClient,{idTokenClaims:u,requestState:g,requestId:l,tokenBindingKeyM

1anager:this.tokenBindingKeyManager});await this.cacheStorage.saveCacheRecord(f,i.correlationId,(0,tt.isKmsi)(u||{}),o,i.storeInCache)}finally{this.persistencePlugin&&this.serializableCache&&p&&(this.logger.verbose("1bh17u",i.correlationId),await this.persistencePlugin.afterCacheAccess(p))}return tv.generateAuthenticationResult(this.cryptoObj,t,f,!1,i,this.performanceClient,{idTokenClaims:u,requestState:g,serverTokenResponse:e,requestId:l,tokenBindingKeyManager:this.tokenBindingKeyManager})}generateCacheRecord(e,t,r,i,o,n,s,a){let c,l,h=t.getPreferredCache();if(!h)throw(0,d.createClientAuthError)(tE.invalidCacheEnvironment,i.correlationId);let u=(0,eI.getTenantIdFromIdTokenClaims)(o);e.id_token&&o&&(c=(0,er.createIdTokenEntity)(this.homeAccountIdentifier,h,e.id_token,this.clientId,u||""),l=tk(this.cacheStorage,t,this.homeAccountIdentifier,this.cryptoObj.base64Decode,i.correlationId,o,e.client_info,h,u,s,void 0,this.logger,this.performanceClient));let g=null;if(e.access_token){let o=e.scope?tA.ScopeSet.fromString(e.scope,i.correlationId):new tA.ScopeSet(i.scopes||[],i.correlationId),s=("string"==typeof e.expires_in?parseInt(e.expires_in,10):e.expires_in)||0,c=("string"==typeof e.ext_expires_in?parseInt(e.ext_expires_in,10):e.ext_expires_in)||0,l=("string"==typeof e.refresh_in?parseInt(e.refresh_in,10):e.refresh_in)||void 0,d=r+s;g=(0,er.createAccessTokenEntity)(this.homeAccountIdentifier,h,e.access_token,this.clientId,u||t.tenant||"",o.printScopes(),d,d+c,this.cryptoObj.base64Decode,i.correlationId,l&&l>0?r+l:void 0,e.token_type,n,e.key_id,a);let p=i.resource||null;p&&(g.resource=p)}let p=null;if(e.refresh_token){let t;e.refresh_token_expires_in&&(t=r+("string"==typeof e.refresh_token_expires_in?parseInt(e.refresh_token_expires_in,10):e.refresh_token_expires_in),this.performanceClient?.addFields({ntwkRtExpiresOnSeconds:t},i.correlationId)),p=(0,er.createRefreshTokenEntity)(this.homeAccountIdentifier,h,e.refresh_token,this.clientId,e.foci,n,t)}let m=null;return e.foci&&(m={clientId:this.clientId,environment:h,familyId:e.foci}),{account:l,idToken:c,accessToken:g,refreshToken:p,appMetadata:m}}static async generateAuthenticationResult(e,t,r,i,o,n,s={}){let a,c,l,{idTokenClaims:h,requestState:u,serverTokenResponse:g,requestId:p,tokenBindingKeyM

1anager:m=w.DEFAULT_TOKEN_BINDING_KEY_MANAGER}=s,f="",C=[],y=null,I="";if(r.accessToken){let t=r.accessToken.tokenType?.toLowerCase();if(r.accessToken.tokenType!==v.AuthenticationScheme.POP||o.popKid)f=r.accessToken.secret;else{let t=new td(e,m,n),{secret:i,keyId:s}=r.accessToken;if(!s)throw(0,d.createClientAuthError)(tE.keyIdMissing,o.correlationId);f=await t.signPopToken(i,s,o)}if(t===v.AuthenticationScheme.DPOP.toLowerCase()){if(!r.accessToken.keyId)throw(0,d.createClientAuthError)(tE.keyIdMissing,o.correlationId);let t=new tC(e,m);l=await t.generateResourceProof({htu:o.resourceRequestUri,htm:o.resourceRequestMethod,accessToken:r.accessToken.secret},r.accessToken.keyId,o.correlationId)}C=tA.ScopeSet.fromString(r.accessToken.target,o.correlationId).asArray(),y=(0,tT.toDateFromSeconds)(r.accessToken.expiresOn),a=(0,tT.toDateFromSeconds)(r.accessToken.extendedExpiresOn),r.accessToken.refreshOn&&(c=(0,tT.toDateFromSeconds)(r.accessToken.refreshOn))}r.appMetadata&&(I=r.appMetadata.familyId===v.THE_FAMILY_ID?v.THE_FAMILY_ID:"");let A=h?.oid||h?.sub||"",T=h?.tid||"",E=h?.tenant_region_sub_scope;if("string"==typeof E&&n?.addFields({regionSubScope:E},o.correlationId),g?.spa_accountid&&r.account){r.account.nativeAccountId=g?.spa_accountid;let e=T||r.account.realm;if(r.account.tenantProfiles){let t=r.account.tenantProfiles.find(t=>t.tenantId===e);t&&(t.nativeAccountId=g.spa_accountid)}}let k=r.account?(0,eA.updateAccountTenantProfileData)((0,ti.getAccountInfo)(r.account),void 0,h,r.idToken?.secret):null;return{authority:t.canonicalAuthority,uniqueId:A,tenantId:T,scopes:C,account:k,idToken:r?.idToken?.secret||"",idTokenClaims:h||{},accessToken:f,dpopProof:l,fromCache:i,expiresOn:y,extExpiresOn:a,refreshOn:c,correlationId:o.correlationId,requestId:p||"",familyId:I,tokenType:r.accessToken?.tokenType?.toLowerCase()===v.AuthenticationScheme.DPOP.toLowerCase()?v.AuthenticationScheme.DPOP:r.accessToken?.tokenType||"",state:u?u.userRequestState:"",cloudGraphHostName:r.account?.cloudGraphHostName||"",msGraphHost:r.account?.msGraphHost||"",code:g?.spa_code,fromPlatformBroker:!1}}}function tk(e,t,r,i,o,n,s,a,c,l,h,d,u){d?.verbose("09jz0t",o);let g=a||t.getPreferredCache(),p=e.getAccountsFilteredBy({homeAccountId:r,environment:g},o);u?.addFields({cacheMatchedAccounts:p.length},o),p.length>1&&d?.warning("0x7ad1",o);let m=(1===p.length?p[0]:null)||(0,ti.createAccountEntity)({homeAccountId:r,idTokenClaims:n,clientInfo:s,environment:a,cloudGraphHostName:l?.cloud_graph_host_name,msGraphHost:l?.msgraph_host,nativeAccountId:h},t,o,i),f=m.tenantProfiles||[],C=c||m.realm;if(C&&!f.find(e=>e.tenantId===C)){let e=(0,eA.buildTenantProfile)(r,m.localAccountId,C,h,n);f.push(e)}return m.tenantProfiles=f,m}var tS=eg,tR=e.i(93055);let tb="home_account_id";async function tP(e,t,r,i){return"string"==typeof e?e:e({clientId:t,tokenEndpoint:r,fmiPath:i})}class t_{static generateThrottlingStorageKey(e){return`${v.THROTTLING_PREFIX}.${JSON.stringify(e)}`}static preProcess(e,t,r){let i=t_.generateThrottlingStorageKey(t),o=e.getThrottlingCache(i,r);if(o){if(o.throttleTime<Date.now())return void e.removeItem(i,r);throw new tI(o.errorCodes?.join(" ")||"",r,o.errorMessage,o.subError)}}static postProcess(e,t,r,i){if(t_.checkResponseStatus(r)||t_.checkResponseForRetryAfter(r)){let o={throttleTime:t_.calculateThrottleTime(parseInt(r.headers[v.HeaderNames.RETRY_AFTER])),error:r.body.error,errorCodes:r.body.error_codes,errorMessage:r.body.error_description,subError:r.body.suberror};e.setThrottlingCache(t_.generateThrottlingStorageKey(t),o,i)}}static checkResponseStatus(e){return 429===e.status||e.status>=500&&e.status<600}static checkResponseForRetryAfter(e){return!!e.headers&&e.headers.hasOwnProperty(v.HeaderNames.RETRY_AFTER)&&(e.status<200||e.status>=300)}static calculateThrottleTime(e){let t=Date.now()/1e3;return Math.floor(1e3*Math.min(t+((e<=0?0:e)||v.DEFAULT_THROTTLE_TIME_SECONDS),t+v.DEFAULT_MAX_THROTTLE_TIME_SECONDS))}static removeThrottle(e,t,r,i){let o=em(t,r,i),n=this.generateThrottlingStorageKey(o);e.removeItem(n,r.correlationId)}}var tO=e.i(871458),tN=u;function tM(e,t,r){let i={};if(i[v.HeaderNames.CONTENT_TYPE]=v.URL_FORM_CONTENT_TYPE,!t&&r)switch(r.type){case tb:try{let e=(0,tR.buildClientInfoFromHomeAccountId)(r.credential);i[v.HeaderNames.CCS_HEADER]=`Oid:${e.uid}@${e.utid}`}catch(t){e.verbose(`1qhtee ${t}`,"")}break;case"UPN":i[v.HeaderNames.CCS_HEADER]=`UPN: ${r.credential}`}return i}async function tq(e,t,r,i,o){if(t.authenticationScheme!==v.AuthenticationScheme.DPOP)return;let n=new tC(i,o),s=t.dpopJkt;if(!s?.trim())throw(0,d.createClientAuthError)(tN.keyIdMissing,t.correlationId);e[v.HeaderNames.DPOP]=await n.generateTokenProof({tokenEndpoint:r},s,t.correlationId)}function tU(e,t,r,i){let o=new Map;return e.embeddedClientId&&(0,e8.addBrokerParameters)(o,t,r),e.extraQueryParameters&&(0,e8.addExtraParameters)(o,e.extraQueryParameters),(0,e8.addCorrelationId)(o,e.correlationId),(0,e8.instrumentBrokerParams)(o,e.correlationId,i),(0,e7.mapToQueryString)(o)}async function tD(e,t,r,i,o,n,s,a,c,l){let h=await tB(i,e,{body:t,headers:r},o,n,s,a,c);return l&&h.status<500&&429!==h.status&&l.clearTelemetryCache(),h}async function tB(e,t,r,i,o,n,s,a){let c;t_.preProcess(o,e,i);try{let e=(c=await Z(n.sendPostRequestAsync.bind(n),P,s,a,i)(t,{...r,correlationId:i,performanceClient:a})).headers||{};a?.addFields({refreshTokenSize:c.body.refresh_token?.length||0,httpVerToken:e[v.HeaderNames.X_MS_HTTP_VERSION]||"",requestId:e[v.HeaderNames.X_MS_REQUEST_ID]||""},i)}catch(e){if(e instanceof tO.NetworkError){let t=e.responseHeaders;throw t&&a?.addFields({httpVerToken:t[v.HeaderNames.X_MS_HTTP_VERSION]||"",requestId:t[v.HeaderNames.X_MS_REQUEST_ID]||"",contentTypeHeader:t[v.HeaderNames.CONTENT_TYPE]||void 0,contentLengthHeader:t[v.HeaderNames.CONTENT_LENGTH]||void 0,httpStatus:e.httpStatus},i),e.error}if(e instanceof et.AuthError)throw e;throw(0,d.createClientAuthError)(tN.networkError,i)}return t_.postProcess(o,e,c,i),c}var tx=u;async function tL(e,t,r,i,o,n,s){let a=en.transformCIAMAuthority(es(e),n),c=new en(a,t,r,i,o,n,s);try{return await Z(c.resolveEndpointsAsync.bind(c),F,o,s,n)(),c}catch(e){throw(0,d.createClientAuthError)(tx.endpointResolutionError,n)}}e.s(["createDiscoveredInstance",0,tL],516195);var tK=e.i(400231),tH=u;class tF{constructor(e,t){this.includeRedirectUri=!0,this.config=(0,te.buildClientConfiguration)(e),this.logger=new e4.L

1ogger(this.config.loggerOptions,tK.name,tK.version),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t,this.oidcDefaultScopes=this.config.authOptions.authority.options.OIDCOptions?.defaultScopes}async acquireToken(e,t,r){if(!e.code)throw(0,d.createClientAuthError)(tH.requestCannotBeMade,e.correlationId);r&&r.cloud_instance_host_name&&await Z(this.updateTokenEndpointAuthority.bind(this),L,this.logger,this.performanceClient,e.correlationId)(r.cloud_instance_host_name,e.correlationId);let i=(0,tS.nowSeconds)(),o=await Z(this.executeTokenRequest.bind(this),B,this.logger,this.performanceClient,e.correlationId)(this.authority,e,this.serverTelemetryManager),n=o.headers?.[v.HeaderNames.X_MS_REQUEST_ID],s=new tv(this.config.authOptions.clientId,this.cacheManager,this.cryptoUtils,this.logger,this.performanceClient,this.config.serializableCache,this.config.persistencePlugin,this.config.tokenBindingKeyM

1anager);return s.validateTokenResponse(o.body,e.correlationId),Z(s.handleServerTokenResponse.bind(s),H,this.logger,this.performanceClient,e.correlationId)(o.body,this.authority,i,e,t,r,void 0,void 0,void 0,n)}getLogoutUri(e){if(!e)throw(0,S.createClientConfigurationError)(eo.logoutRequestEmpty,"");let t=this.createLogoutUrlQueryString(e);return E.UrlString.appendQueryString(this.authority.endSessionEndpoint,t)}async executeTokenRequest(e,t,r){let i,o=tU(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri,this.performanceClient),n=E.UrlString.appendQueryString(e.tokenEndpoint,o),s=await Z(this.createTokenRequestBody.bind(this),x,this.logger,this.performanceClient,t.correlationId)(t);if(t.clientInfo)try{let e=(0,tR.buildClientInfo)(t.clientInfo,this.cryptoUtils.base64Decode);i={credential:`${e.uid}${v.CLIENT_INFO_SEPARATOR}${e.utid}`,type:tb}}catch(e){this.logger.verbose(`0wznt3 ${e}`,t.correlationId)}let a=tM(this.logger,this.config.systemOptions.preventCorsPreflight,i||t.ccsCredential);await tq(a,t,n,this.cryptoUtils,this.config.tokenBindingKeyM

1anager);let c=em(this.config.authOptions.clientId,t);return Z(tD,O,this.logger,this.performanceClient,t.correlationId)(n,s,a,c,t.correlationId,this.cacheManager,this.networkClient,this.logger,this.performanceClient,r)}async createTokenRequestBody(e){let t,r=new Map;if((0,e8.addClientId)(r,e.embeddedClientId||e.extraParameters?.[e9.CLIENT_ID]||this.config.authOptions.clientId),this.includeRedirectUri)(0,e8.addRedirectUri)(r,e.redirectUri);else if(!e.redirectUri)throw(0,S.createClientConfigurationError)(eo.redirectUriEmpty,e.correlationId);if((0,e8.addScopes)(r,e.scopes,e.correlationId,!0,this.oidcDefaultScopes),(0,e8.addResource)(r,e.resource),e.attributeTokens&&(0,e8.addAttributeTokens)(r,e.attributeTokens),this.performanceClient?.addFields({hasAttributeTokens:!!e.attributeTokens?.length},e.correlationId),(0,e8.addAuthorizationCode)(r,e.code),(0,e8.addLibraryInfo)(r,this.config.libraryInfo),(0,e8.addApplicationTelemetry)(r,this.config.telemetry.application),(0,e8.addThrottling)(r),this.serverTelemetryManager&&!(0,te.isOidcProtocolMode)(this.config)&&(0,e8.addServerTelemetry)(r,this.serverTelemetryManager),e.codeVerifier&&(0,e8.addCodeVerifier)(r,e.codeVerifier),this.config.clientCredentials.clientSecret&&(0,e8.addClientSecret)(r,this.config.clientCredentials.clientSecret),this.config.clientCredentials.clientAssertion){let t=this.config.clientCredentials.clientAssertion;(0,e8.addClientAssertion)(r,await tP(t.assertion,this.config.authOptions.clientId,e.resourceRequestUri)),(0,e8.addClientAssertionType)(r,t.assertionType)}if((0,e8.addGrantType)(r,v.GrantType.AUTHORIZATION_CODE_GRANT),(0,e8.addClientInfo)(r),e.authenticationScheme===v.AuthenticationScheme.POP){let t,i=new td(this.cryptoUtils,this.config.tokenBindingKeyM

1anager,this.performanceClient);t=e.popKid?this.cryptoUtils.encodeKid(e.popKid):(await Z(i.generateCnf.bind(i),K,this.logger,this.performanceClient,e.correlationId)(e,this.logger)).reqCnfString,(0,e8.addPopToken)(r,t)}else if(e.authenticationScheme===v.AuthenticationScheme.SSH)if(e.sshJwk)(0,e8.addSshJwk)(r,e.sshJwk);else throw(0,S.createClientConfigurationError)(eo.missingSshJwk,e.correlationId);if(e.clientInfo)try{let r=(0,tR.buildClientInfo)(e.clientInfo,this.cryptoUtils.base64Decode);t={credential:`${r.uid}${v.CLIENT_INFO_SEPARATOR}${r.utid}`,type:tb}}catch(t){this.logger.verbose(`0wznt3 ${t}`,e.correlationId)}else t=e.ccsCredential;if(this.config.systemOptions.preventCorsPreflight&&t)switch(t.type){case tb:try{let e=(0,tR.buildClientInfoFromHomeAccountId)(t.credential);(0,e8.addCcsOid)(r,e)}catch(t){this.logger.verbose(`1qhtee ${t}`,e.correlationId)}break;case"UPN":(0,e8.addCcsUpn)(r,t.credential)}return e.embeddedClientId&&(0,e8.addBrokerParameters)(r,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.extraParameters&&(0,e8.addExtraParameters)(r,e.extraParameters),!e.enableSpaAuthorizationCode||e.extraParameters&&e.extraParameters[e9.RETURN_SPA_CODE]||(0,e8.addExtraParameters)(r,{[e9.RETURN_SPA_CODE]:"1"}),(0,e8.instrumentBrokerParams)(r,e.correlationId,this.performanceClient),(0,e8.addClaims)(r,e.correlationId,e.claims,this.config.authOptions.clientCapabilities,e.skipBrokerClaims),(0,e7.mapToQueryString)(r)}createLogoutUrlQueryString(e){let t=new Map;return e.postLogoutRedirectUri&&(0,e8.addPostLogoutRedirectUri)(t,e.postLogoutRedirectUri),e.correlationId&&(0,e8.addCorrelationId)(t,e.correlationId),e.idTokenHint&&(0,e8.addIdTokenHint)(t,e.idTokenHint),e.state&&(0,e8.addState)(t,e.state),e.logoutHint&&(0,e8.addLogoutHint)(t,e.logoutHint),e.extraQueryParameters&&(0,e8.addExtraParameters)(t,e.extraQueryParameters),this.config.authOptions.instanceAware&&(0,e8.addInstanceAware)(t),(0,e7.mapToQueryString)(t)}async updateTokenEndpointAuthority(e,t){let r=`https://${e}/${this.authority.tenant}/`,i=await tL(r,this.networkClient,this.cacheManager,this.authority.options,this.logger,t,this.performanceClient);this.authority=i}}class tz{constructor(e,t){this.cacheOutcome=v.CacheOutcome.NOT_APPLICABLE,this.cacheManager=t,this.apiId=e.apiId,this.correlationId=e.correlationId,this.wrapperSKU=e.wrapperSKU||"",this.wrapperVer=e.wrapperVer||"",this.telemetryCacheKey=v.SERVER_TELEM_CACHE_KEY+v.CACHE_KEY_SEPARATOR+e.clientId}generateCurrentRequestHeaderValue(){let e=`${this.apiId}${v.SERVER_TELEM_VALUE_SEPARATOR}${this.cacheOutcome}`,t=[this.wrapperSKU,this.wrapperVer],r=this.getNativeBrokerErrorCode();r?.length&&t.push(`broker_error=${r}`);let i=t.join(v.SERVER_TELEM_VALUE_SEPARATOR),o=[e,this.getRegionDiscoveryFields()].join(v.SERVER_TELEM_VALUE_SEPARATOR);return[v.SERVER_TELEM_SCHEMA_VERSION,o,i].join(v.SERVER_TELEM_CATEGORY_SEPARATOR)}generateLastRequestHeaderValue(){let e=this.getLastRequests(),t=tz.maxErrorsToSend(e),r=e.failedRequests.slice(0,2*t).join(v.SERVER_TELEM_VALUE_SEPARATOR),i=e.errors.slice(0,t).join(v.SERVER_TELEM_VALUE_SEPARATOR),o=e.errors.length,n=t<o?v.SERVER_TELEM_OVERFLOW_TRUE:v.SERVER_TELEM_OVERFLOW_FALSE,s=[o,n].join(v.SERVER_TELEM_VALUE_SEPARATOR);return[v.SERVER_TELEM_SCHEMA_VERSION,e.cacheHits,r,i,s].join(v.SERVER_TELEM_CATEGORY_SEPARATOR)}cacheFailedRequest(e){try{let t=this.getLastRequests();t.errors.length>=v.SERVER_TELEM_MAX_CACHED_ERRORS&&(t.failedRequests.shift(),t.failedRequests.shift(),t.errors.shift()),t.failedRequests.push(this.apiId,this.correlationId),e instanceof Error&&e&&e.toString()?e instanceof et.AuthError?e.subError?t.errors.push(e.subError):e.errorCode?t.errors.push(e.errorCode):t.errors.push(e.toString()):t.errors.push(e.toString()):t.errors.push(v.SERVER_TELEM_UNKNOWN_ERROR),this.cacheManager.setServerTelemetry(this.telemetryCacheKey,t,this.correlationId)}catch{}}incrementCacheHits(){let e=this.getLastRequests();return e.cacheHits+=1,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId),e.cacheHits}getLastRequests(){return this.cacheManager.getServerTelemetry(this.telemetryCacheKey,this.correlationId)||{failedRequests:[],errors:[],cacheHits:0}}clearTelemetryCache(){let e=this.getLastRequests(),t=tz.maxErrorsToSend(e);if(t===e.errors.length)this.cacheManager.removeItem(this.telemetryCacheKey,this.correlationId);else{let r={failedRequests:e.failedRequests.slice(2*t),errors:e.errors.slice(t),cacheHits:0};this.cacheManager.setServerTelemetry(this.telemetryCacheKey,r,this.correlationId)}}static maxErrorsToSend(e){let t,r=0,i=0,o=e.errors.length;for(t=0;t<o;t++){let o=e.failedRequests[2*t]||"",n=e.failedRequests[2*t+1]||"",s=e.errors[t]||"";if((i+=o.toString().length+n.toString().length+s.length+3)<v.SERVER_TELEM_MAX_LAST_HEADER_BYTES)r+=1;else break}return r}getRegionDiscoveryFields(){let e=[];return e.push(this.regionUsed||""),e.push(this.regionSource||""),e.push(this.regionOutcome||""),e.join(",")}updateRegionDiscoveryMetadata(e){this.regionUsed=e.region_used,this.regionSource=e.region_source,this.regionOutcome=e.region_outcome}setCacheOutcome(e){this.cacheOutcome=e}setNativeBrokerErrorCode(e){let t=this.getLastRequests();t.nativeBrokerErrorCode=e,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,t,this.correlationId)}getNativeBrokerErrorCode(){return this.getLastRequests().nativeBrokerErrorCode}clearNativeBrokerErrorCode(){let e=this.getLastRequests();delete e.nativeBrokerErrorCode,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId)}static makeExtraSkuString(e){return function(e){let{skus:t,libraryName:r,libraryVersion:i,extensionName:o,extensionVersion:n}=e,s=new Map([[0,[r,i]],[2,[o,n]]]),a=[];if(t?.length){if((a=t.split(",")).length<4)return t}else a=Array.from({length:4},()=>"|");

1return s.forEach((e,t)=>{2===e.length&&e[0]?.length&&e[1]?.length&&function(e){let{skuArr:t,index:r,skuName:i,skuVersion:o}=e;r>=t.length||(t[r]=[i,o].join("|"))}({skuArr:a,index:t,skuName:e[0],skuVersion:e[1]})}),a.join(",")}(e)}}class t$ extends tz{constructor(){super({clientId:"",apiId:0,correlationId:"",forceRefresh:!1},{})}generateCurrentRequestHeaderValue(){return""}generateLastRequestHeaderValue(){return""}cacheFailedRequest(){}incrementCacheHits(){return 0}clearTelemetryCache(){}getRegionDiscoveryFields(){return""}updateRegionDiscoveryMetadata(){}setCacheOutcome(){}setNativeBrokerErrorCode(){}getNativeBrokerErrorCode(){}clearNativeBrokerErrorCode(){}}var tG=e.i(516195),tG=tG,tV=e.i(851278);class tj{constructor(e,t,r,i,o,n,s,a,c,l){this.config=e,this.browserStorage=t,this.browserCrypto=r,this.networkClient=this.config.system.networkClient,this.eventHandler=o,this.navigationClient=n,this.platformAuthProvider=c,this.correlationId=a,this.logger=i.clone(eQ.name,eQ.version),this.performanceClient=s,this.tokenBindingKeyM

1anager=l||new I(this.logger,this.performanceClient)}}function tJ(e,t,r,i){return r.verbose("0bd1la",i),E.UrlString.getAbsoluteUrl(e||t||"",(0,eW.getCurrentUri)(),i)}function tW(e,t,r,i,o,n,s=!0){return(o.verbose("1p12tq",r),s)?new tz({clientId:t,correlationId:r,apiId:e,forceRefresh:n||!1,wrapperSKU:i.getWrapperMetadata()[0],wrapperVer:i.getWrapperMetadata()[1]},i):(o.verbose("0tajnr",r),new t$)}async function tQ(e,t,r,i,o,n,s,c,l){let h=c&&c.hasOwnProperty("instance_aware")?c.instance_aware:void 0,d={protocolMode:e.system.protocolMode,OIDCOptions:e.auth.OIDCOptions,knownAuthorities:e.auth.knownAuthorities,cloudDiscoveryMetadata:e.auth.cloudDiscoveryMetadata,authorityMetadata:e.auth.authorityMetadata},u=n||e.auth.authority,g=h?.length?"true"===h:e.auth.instanceAware,p=l&&g?e.auth.authority.replace(E.UrlString.getDomainFromUrl(u,t),l.environment):u,m=en.generateAuthority(p,s||e.auth.azureCloudOptions),f=await Z(tG.createDiscoveredInstance,a.AuthorityFactoryCreateDiscoveredInstance,o,r,t)(m,e.system.networkClient,i,d,o,t,r);if(l&&!f.isAlias(l.environment))throw(0,S.createClientConfigurationError)(tV.ClientConfigurationErrorCodes.authorityMismatch,t);return f}async function tY(e,t,r,i,o){if(o)try{e.removeAccount(o,i),r.verbose("0s4z6h",i)}catch(e){r.error("0mgg1d",i)}else try{r.verbose("0zj631",i),e.clear(i),await t.clearKeystore(i)}catch(e){r.error("12ih0c",i)}}var eE=eE;let tX=new Set([ep.Constants.AuthenticationScheme.BEARER,ep.Constants.AuthenticationScheme.POP,ep.Constants.AuthenticationScheme.DPOP,ep.Constants.AuthenticationScheme.SSH]);async function tZ(e,t,r,i){switch(e.authenticationScheme){case ep.Constants.AuthenticationScheme.DPOP:if(e.platformBroker)return{};if(e.dpopJkt)return{dpopJkt:e.dpopJkt};return{dpopJkt:await t.provisionTokenBindingKey({tokenBindingKeyType:ep.Constants.AuthenticationScheme.DPOP.toLowerCase(),tokenBindingKeyAlgorithm:s.JsonWebTokenAlgorithms.ES256,correlationId:e.correlationId})};case ep.Constants.AuthenticationScheme.POP:if(!e.platformBroker)return{};let o=new A(r,i);if(e.popKid)return{reqCnf:o.encodeKid(e.popKid)};let n=new td(o,t,i);return{reqCnf:(await Z(n.generateCnf.bind(n),eE.PopTokenGenerateCnf,r,i,e.correlationId)(e,r)).reqCnfString};default:return{}}}async function t0(e,t,r,i,o){let n=e.authority||t.auth.authority,s=[...e&&e.scopes||[]],a={...e,correlationId:e.correlationId,authority:n,scopes:s};if(a.authenticationScheme){if(!tX.has(a.authenticationScheme))throw(0,S.createClientConfigurationError)(tV.ClientConfigurationErrorCodes.unsupportedAuthenticationScheme,o);switch(a.authenticationScheme){case ep.Constants.AuthenticationScheme.SSH:if(!e.sshJwk)throw(0,S.createClientConfigurationError)(tV.ClientConfigurationErrorCodes.missingSshJwk,o);if(!e.sshKid)throw(0,S.createClientConfigurationError)(tV.ClientConfigurationErrorCodes.missingSshKid,o);break;case ep.Constants.AuthenticationScheme.DPOP:if(!e.resourceRequestMethod?.trim()||!e.resourceRequestUri?.trim())throw(0,S.createClientConfigurationError)(tV.ClientConfigurationErrorCodes.dpopMissingResourceContext,o)}i.verbose(`1ecmns ${a.authenticationScheme}`,o)}else a.authenticationScheme=ep.Constants.AuthenticationScheme.BEARER,i.verbose("1l4fwv",o);return a}async function t1(e,t,r,i,o){let n=await Z(t0,a.InitializeBaseRequest,o,i,e.correlationId)(e,r,i,o,e.correlationId);return{...e,...n,account:t,forceRefresh:e.forceRefresh||!1}}function t6(e,t){let r,i=e.httpMethod;if(t===R.ProtocolMode.EAR)if(i&&i!==ep.Constants.HttpMethod.POST)throw(0,S.createClientConfigurationError)(tV.ClientConfigurationErrorCodes.invalidRequestMethodForEAR,"");else r=ep.Constants.HttpMethod.POST;else r=i||ep.Constants.HttpMethod.GET;return r}class t2 extends tj{initializeLogoutRequest(e){this.logger.verbose("0546u4",this.correlationId);let t={correlationId:this.correlationId,...e};if(e)if(e.logoutHint)this.logger.verbose("12k4l4",this.correlationId);else if(e.account){let r=e.account.loginHint||this.getLogoutHintFromIdTokenClaims(e.account);r&&(this.logger.verbose("0d7s8p",this.correlationId),t.logoutHint=r)}else this.logger.verbose("0pdtc3",this.correlationId);else this.logger.verbose("07ndze",this.correlationId);return e&&null===e.postLogoutRedirectUri?this.logger.verbose("0ljv63",t.correlationId):e&&e.postLogoutRedirectUri?(this.logger.verbose("1vamm6",t.correlationId),t.postLogoutRedirectUri=E.UrlString.getAbsoluteUrl(e.postLogoutRedirectUri,(0,eW.getCurrentUri)(),t.correlationId)):null===this.config.auth.postLogoutRedirectUri?this.logger.verbose("15m5g7",t.correlationId):this.config.auth.postLogoutRedirectUri?(this.logger.verbose("1f4xlz",t.correlationId),t.postLogoutRedirectUri=E.UrlString.getAbsoluteUrl(this.config.auth.postLogoutRedirectUri,(0,eW.getCurrentUri)(),t.correlationId)):(this.logger.verbose("17s5rf",t.correlationId),t.postLogoutRedirectUri=E.UrlString.getAbsoluteUrl((0,eW.getCurrentUri)(),(0,eW.getCurrentUri)(),t.correlationId)),t}getLogoutHintFromIdTokenClaims(e){let t=e.idTokenClaims;if(t)if(t.login_hint)return this.logger.verbose("0u5bmc",this.correlationId),t.login_hint;else this.logger.verbose("0mvp54",this.correlationId);else this.logger.verbose("1e7bdp",this.correlationId);return null}async createAuthCodeClient(e){return new tF(await Z(this.getClientConfiguration.bind(this),a.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)(e),this.performanceClient)}async getClientConfiguration(e){let{serverTelemetryManager:t,requestAuthority:r,requestAzureCloudOptions:i,requestExtraQueryParameters:o,account:n}=e,s=e.authority||await Z(tQ,a.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,this.correlationId)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,r,i,o,n),c=this.config.system.loggerOptions;return{authOptions:{clientId:this.config.auth.clientId,authority:s,clientCapabilities:this.config.auth.clientCapabilities,redirectUri:this.config.auth.redirectUri,isMcp:this.config.auth.isMcp},systemOptions:{tokenRenewalOffsetSeconds:this.config.system.tokenRenewalOffsetSeconds,preventCorsPreflight:!0},loggerOptions:{loggerCallback:c.loggerCallback,piiLoggingEnabled:c.piiLoggingEnabled,logLevel:c.logLevel,correlationId:this.correlationId}

1,cryptoInterface:this.browserCrypto,tokenBindingKeyManager:this.tokenBindingKeyManager,networkInterface:this.networkClient,storageInterface:this.browserStorage,serverTelemetryManager:t,libraryInfo:{sku:p.BrowserConstants.MSAL_SKU,version:eQ.version,cpu:"",os:""},telemetry:this.config.telemetry}}}async function t4(e,t,r,i,o,n,s,c){let l=tJ(e.redirectUri,r.auth.redirectUri,n,c);new URL(l).origin!==new URL(window.location.href).origin&&(n.warning("08qbvw",c),s.addFields({isRedirectUriCrossOrigin:!0},c));let d=e3.ProtocolUtils.setRequestState(i,e&&e.state||"",{interactionType:t},c),u={...await Z(t0,a.InitializeBaseRequest,n,s,c)({...e,correlationId:c},r,s,n,c),redirectUri:l,state:d,nonce:e.nonce||(0,h.createNewGuid)(),responseMode:r.auth.OIDCOptions.responseMode},g={...u,httpMethod:t6(u,r.system.protocolMode)};if(e.loginHint||e.sid)return g;let p=e.account||o.getActiveAccount(c);return p&&(n.verbose("1eqlb3",c),n.verbosePii(`0tf99t ${p.homeAccountId}`,c),g.account=p),g}function t5(e,t,r,i){let o={id:t,...r},n=new URL(e,window.location.origin);if(n.origin!==window.location.origin)throw(0,g.createBrowserAuthError)(m.popupRelayUnsupportedFlow,i,"popup_relay_cross_origin");let s=new URLSearchParams;return s.set("req",JSON.stringify(o)),n.hash=s.toString(),n.toString()}async function t3(e,t,r,i,o){return new Promise((n,s)=>{let a=r.correlationId;t.verbose("1d05g9",a),o.addFields({redirectBridgeTimeoutMs:e},a);let{libraryState:c}=e3.ProtocolUtils.parseRequestState(l.base64Decode,r.state||"",a),h=c.id,d=window.location.origin,u=!1,p=()=>{window.removeEventListener("message",f),clearTimeout(C),clearInterval(y)},f=e=>{if(e.origin!==d||e.source!==i)return;let t=e.data;!t||"msal:popup-relay-response:v1"!==t.type||t.id!==h||u||(u=!0,p(),t.error?s((0,g.createBrowserAuthError)(t.error,a)):t.payload?n(t.payload):s((0,g.createBrowserAuthError)(m.redirectBridgeEmptyResponse,a)))};window.addEventListener("message",f);let C=window.setTimeout(()=>{u||(u=!0,p(),s((0,g.createBrowserAuthError)(m.timedOut,a,"popup_relay_timeout")))},e),y=window.setInterval(()=>{i.closed&&!u&&(u=!0,p(),s((0,g.createBrowserAuthError)(m.userCancelled,a)))},500)})}var t8=e.i(638616),u=u;function t7(e,t,r,i){let o=t8.UrlUtils.getDeserializedResponse(e);if(!o)if(t8.UrlUtils.stripLeadingHashOrQuery(e))throw r.error(`13pl0s ${t} ${t}`,i),r.errorPii(`1097vx ${t} ${e}`,i),(0,g.createBrowserAuthError)(m.hashDoesNotContainKnownProperties,i);else throw r.error(`18h0l1 ${t} ${t}`,i),(0,g.createBrowserAuthError)(m.hashEmptyError,i);return o}var t9=e.i(205331),re=u;function rt(e,r,i){let o,n;if(!e.state||!r)throw e.state?(0,d.createClientAuthError)(re.stateNotFound,i,"Cached State"):(0,d.createClientAuthError)(re.stateNotFound,i,"Server State");try{o=decodeURIComponent(e.state)}catch(t){throw(0,d.createClientAuthError)(re.invalidState,i,e.state)}try{n=decodeURIComponent(r)}catch(t){throw(0,d.createClientAuthError)(re.invalidState,i,e.state)}if(o!==n)throw(0,d.createClientAuthError)(re.stateMismatch,i);if(e.error||e.error_description||e.suberror){var s;let r,o,n=(s=e,r="code=",(o=s.error_uri?.lastIndexOf(r))&&o>=0?s.error_uri?.substring(o+r.length):void 0);if((0,t.isInteractionRequiredError)(e.error,e.error_description,e.suberror))throw new t.InteractionRequiredAuthError(e.error||"",e.correlation_id||i,e.error_description,e.suberror,e.timestamp||"",e.trace_id||"",e.claims||"",n);throw new tI(e.error||"",e.correlation_id||i,e.error_description,e.suberror,n)}}e.s(["getAuthorizationCodePayload",0,function(e,t,r){if(rt(e,t,r),!e.code)throw(0,d.createClientAuthError)(re.authorizationCodeMissingFromServerResponse,r);return e},"getAuthorizeUrl",0,function(e,t){let r=(0,e7.mapToQueryString)(t);return E.UrlString.appendQueryString(e.authorizationEndpoint,r)},"getStandardAuthorizeRequestParameters",0,function(e,t,r,i){let o=t.correlationId,n=new Map;(0,e8.addClientId)(n,t.embeddedClientId||t.extraQueryParameters?.[e9.CLIENT_ID]||e.clientId);let s=[...t.scopes||[],...t.extraScopesToConsent||[]];if((0,e8.addScopes)(n,s,t.correlationId,!0,e.authority.options.OIDCOptions?.defaultScopes),(0,e8.addResource)(n,t.resource),(0,e8.addRedirectUri)(n,t.redirectUri),(0,e8.addCorrelationId)(n,o),(0,e8.addResponseMode)(n,t.responseMode),(0,e8.addClientInfo)(n),(0,e8.addCliData)(n),t.prompt&&((0,e8.addPrompt)(n,t.prompt),i?.addFields({prompt:t.prompt},o)),t.domainHint&&((0,e8.addDomainHint)(n,t.domainHint),i?.addFields({domainHintFromRequest:!0},o)),t.prompt!==v.PromptValue.SELECT_ACCOUNT)if(t.sid&&t.prompt===v.PromptValue.NONE)r.verbose("1tvqyx",t.correlationId),(0,e8.addSid)(n,t.sid),i?.addFields({sidFromRequest:!0},o);else if(t.account){var a,c;let e=(a=t.account,a.idTokenClaims?.sid||null),s=(c=t.account).loginHint||c.idTokenClaims?.login_hint||null;if(s&&t.domainHint&&(r.warning("0wkg3v",t.correlationId),s=null),s){r.verbose("1eyfsw",t.correlationId),(0,e8.addLoginHint)(n,s),i?.addFields({loginHintFromClaim:!0},o);try{let e=(0,tR.buildClientInfoFromHomeAccountId)(t.account.homeAccountId);(0,e8.addCcsOid)(n,e)}catch(e){r.verbose("12ugck",t.correlationId)}}else if(e&&t.prompt===v.PromptValue.NONE){r.verbose("1rmd8s",t.correlationId),(0,e8.addSid)(n,e),i?.addFields({sidFromClaim:!0},o);try{let e=(0,tR.buildClientInfoFromHomeAccountId)(t.account.homeAccountId);(0,e8.addCcsOid)(n,e)}catch(e){r.verbose("12ugck",t.correlationId)}}else if(t.loginHint)r.verbose("0y3007",t.correlationId),(0,e8.addLoginHint)(n,t.loginHint),(0,e8.addCcsUpn)(n,t.loginHint),i?.addFields({loginHintFromRequest:!0},o);else if(t.account.username){r.verbose("02f507",t.correlationId),(0,e8.addLoginHint)(n,t.account.username),i?.addFields({loginHintFromUpn:!0},o);try{let e=(0,tR.buildClientInfoFromHomeAccountId)(t.account.homeAccountId);(0,e8.addCcsOid)(n,e)}catch(e){r.verbose("12ugck",t.correlationId)}}}else t.loginHint&&(r.verbose("0g01ey",t.correlationId),(0,e8.addLoginHint)(n,t.loginHint),(0,e8.addCcsUpn)(n,t.loginHint),i?.addFields({loginHintFromRequest:!0},o));else r.verbose("169k9v",t.correlationId);return t.nonce&&(0,e8.addNonce)(n,t.nonce),t.state&&(0,e8.addState)(n,t.state),t.embeddedClientId&&(0,e8.addBrokerParameters)(n,e.clientId,e.redirectUri),(0,e8.addClaims)(n,t.correlationId,t.claims,e.clientCapabilities,t.skipBrokerClaims),!e.instanceAware||t.extraQueryParameters&&Object.keys(t.extraQueryParameters).includes(e9.INSTANCE_AWARE)||(0,e8.addInstanceAware)(n),n},"validateAuthorizationResponse",0,rt],173629);var rr=e.i(173629),rr=rr,eE=eE,eg=eg,ri=e9,rr=rr,eE=eE;class ro{constructor(e,t,r,i,o){this.authModule=e,this.browserStorage=t,this.authCodeRequest=r,this.logger=i,this.performanceClient=o}async handleCodeResponse(e,t,r){let i;try{i=rr.getAuthorizationCodePayload(e,t.state,t.correlationId)}catch(e){if(e instanceof tI&&e.subError===m.userCancelled)throw(0,g.createBrowserAuthError)(m.userCancelled,t.correlationId);throw e}return Z(this.handleCodeResponseFromServer.bind(this),eE.HandleCodeResponseFromServer,this.logger,this.performanceClient,t.correlationId)(i,t,r)}async handleCodeResponseFromServer(e,t,r,i=!0){if(this.logger.trace("0mf2hb",t.correlationId),this.authCodeRequest.code=e.code,i&&(e.nonce=t.nonce||void 0),e.state=t.state,e.client_info)this.authCodeRequest.clientInfo=e.client_info;else{let e=this.createCcsCredentials(t);e&&(this.authCodeRequest.ccsCredential=e)}return await Z(this.authModule.acquireToken.bind(this.authModule),a.AuthClientAcquireToken,this.logger,this.performanceClient,t.correlationId)(this.authCodeRequest,r,e)}createCcsCredentials(e){return e.account?{credential:e.account.homeAccountId,type:tb}:e.loginHint?{credential:e.loginHint,type:"UPN"}:null}}var ri=e9,eg=eg,u=u,ed=ed,eh=eh,eu=er,eE=eE,rn=et;

1class rs extends rn.AuthError{constructor(e,t,r,i){super(e,t,r||(0,g.getDefaultErrorMessage)(e)),Object.setPrototypeOf(this,rs.prototype),this.name="NativeAuthError",this.ext=i}}function ra(e){if(e.ext&&e.ext.status&&"DISABLED"===e.ext.status||e.ext&&e.ext.error&&-0x7ffb78ff===e.ext.error)return!0;switch(e.errorCode){case"ContentError":case"PageException":return!0;default:return!1}}function rc(e,i,o,n){let s;if(n&&n.status){switch(n.status){case"ACCOUNT_UNAVAILABLE":s=(0,t.createInteractionRequiredAuthError)(r.InteractionRequiredAuthErrorCodes.nativeAccountUnavailable,i,(0,g.getDefaultErrorMessage)(e));break;case"USER_INTERACTION_REQUIRED":s=new t.InteractionRequiredAuthError(e,i,o);break;case"USER_CANCEL":s=(0,g.createBrowserAuthError)(m.userCancelled,i);break;case"NO_NETWORK":s=(0,g.createBrowserAuthError)(m.noNetworkConnectivity,i);break;case"UI_NOT_ALLOWED":s=(0,t.createInteractionRequiredAuthError)(r.InteractionRequiredAuthErrorCodes.uiNotAllowed,i);break;default:s=new rs(e,i,o,n)}return s}return new rs(e,i,o,n)}var rl=eg,rh=ed,rd=u;class ru{constructor(e,t){this.config=(0,te.buildClientConfiguration)(e),this.logger=new e4.Logger(this.config.loggerOptions,tK.name,tK.version),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t}async acquireCachedToken(e){let t=v.CacheOutcome.NOT_APPLICABLE;if(e.forceRefresh||!ev.StringUtils.isEmptyObj(e.claims))throw this.setCacheOutcome(v.CacheOutcome.FORCE_REFRESH_OR_CLAIMS,e.correlationId),(0,d.createClientAuthError)(rd.tokenRefreshRequired,e.correlationId);if(!e.account)throw(0,d.createClientAuthError)(rd.noAccountInSilentRequest,e.correlationId);let r=e.account.tenantId||function(e,t){let r=new E.UrlString(e,t).getUrlComponents(),i=r.PathSegments.slice(-1)[0]?.toLowerCase();switch(i){case v.AADAuthority.COMMON:case v.AADAuthority.ORGANIZATIONS:case v.AADAuthority.CONSUMERS:return;default:return i}}(e.authority,e.correlationId),i=this.cacheManager.getTokenKeys(),o=this.cacheManager.getAccessToken(e.account,e,i,r);if(o)if((0,rl.wasClockTurnedBack)(o.cachedAt)||(0,rl.isTokenExpired)(o.expiresOn,this.config.systemOptions.tokenRenewalOffsetSeconds))throw this.setCacheOutcome(v.CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED,e.correlationId),(0,d.createClientAuthError)(rd.tokenRefreshRequired,e.correlationId);else if(e.resource){if(o.resource!==e.resource)throw this.setCacheOutcome(v.CacheOutcome.NO_CACHED_ACCESS_TOKEN,e.correlationId),(0,d.createClientAuthError)(rd.tokenRefreshRequired,e.correlationId)}else o.refreshOn&&(0,rl.isTokenExpired)(o.refreshOn,0)&&(t=v.CacheOutcome.PROACTIVELY_REFRESHED);else throw this.setCacheOutcome(v.CacheOutcome.NO_CACHED_ACCESS_TOKEN,e.correlationId),(0,d.createClientAuthError)(rd.tokenRefreshRequired,e.correlationId);if(o.tokenType?.toLowerCase()===v.AuthenticationScheme.DPOP.toLowerCase()){if(!o.keyId)throw this.logger.info("1enswf",e.correlationId),this.setCacheOutcome(v.CacheOutcome.NO_CACHED_ACCESS_TOKEN,e.correlationId),(0,d.createClientAuthError)(rd.tokenRefreshRequired,e.correlationId);

1try{await this.config.tokenBindingKeyManager.getTokenBindingPublicKeyJwk(o.keyId,e.correlationId)}catch{throw this.logger.info("14djth",e.correlationId),this.setCacheOutcome(v.CacheOutcome.NO_CACHED_ACCESS_TOKEN,e.correlationId),(0,d.createClientAuthError)(rd.tokenRefreshRequired,e.correlationId)}}let n=e.authority||this.authority.getPreferredCache(),s={account:this.cacheManager.getAccount(this.cacheManager.generateAccountKey(e.account),e.correlationId),accessToken:o,idToken:this.cacheManager.getIdToken(e.account,e.correlationId,i,r),refreshToken:null,appMetadata:this.cacheManager.readAppMetadataFromCache(n,e.correlationId)};return this.setCacheOutcome(t,e.correlationId),this.config.serverTelemetryManager&&this.config.serverTelemetryManager.incrementCacheHits(),[await Z(this.generateResultFromCacheRecord.bind(this),D,this.logger,this.performanceClient,e.correlationId)(s,e),t]}setCacheOutcome(e,t){this.serverTelemetryManager?.setCacheOutcome(e),this.performanceClient?.addFields({cacheOutcome:e},t),e!==v.CacheOutcome.NOT_APPLICABLE&&this.logger.info(`09ingz ${e}`,t)}async generateResultFromCacheRecord(e,t){let r;return e.idToken&&(r=(0,rh.extractTokenClaims)(e.idToken.secret,this.config.cryptoInterface.base64Decode,t.correlationId)),tv.generateAuthenticationResult(this.cryptoUtils,this.authority,e,!0,t,this.performanceClient,{idTokenClaims:r,tokenBindingKeyM

1anager:this.config.tokenBindingKeyManager})}}class rg extends t2{async acquireToken(e){let t=tW(p.ApiId.acquireTokenSilent_silentFlow,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),r=new ru(await Z(this.getClientConfiguration.bind(this),a.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:t,requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,account:e.account}),this.performanceClient);this.logger.verbose("0wa871",this.correlationId);try{let t=(await Z(r.acquireCachedToken.bind(r),a.SilentFlowClientAcquireCachedToken,this.logger,this.performanceClient,e.correlationId)(e))[0];return this.performanceClient.addFields({fromCache:!0},e.correlationId),t}catch(e){throw e instanceof g.BrowserAuthError&&e.errorCode===m.cryptoKeyNotFound&&this.logger.verbose("06wena",this.correlationId),e}}logout(e){this.logger.verbose("1rkurh",this.correlationId);let t=this.initializeLogoutRequest(e);return tY(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,t.account)}}class rp extends tj{constructor(e,t,r,i,o,n,s,a,c,l,h,d,u){super(e,t,r,i,o,n,a,d,c,u),this.apiId=s,this.accountId=l,this.platformAuthProvider=c,this.nativeStorageManager=h,this.silentCacheClient=new rg(e,this.nativeStorageManager,r,i,o,n,a,d,c,this.tokenBindingKeyM

1anager);const g=this.platformAuthProvider.getExtensionName();this.skus=tz.makeExtraSkuString({libraryName:p.BrowserConstants.MSAL_SKU,libraryVersion:eQ.version,extensionName:g,extensionVersion:this.platformAuthProvider.getExtensionVersion()})}addRequestSKUs(e){e.extraParameters={...e.extraParameters,[ri.X_CLIENT_EXTRA_SKU]:this.skus}}async acquireToken(e,t){let r;this.logger.trace("03qeos",this.correlationId);let i=this.performanceClient.startMeasurement(a.NativeInteractionClientAcquireToken,this.correlationId),o=eg.nowSeconds(),n=tW(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{r=await this.initializePlatformRequest(e)}catch(e){throw i.add({isNativeBroker:!1}),i.end({success:!1},e),e}try{let e=await this.acquireTokensFromCache(this.accountId,r);return i.add({isNativeBroker:!1}),i.end({success:!0,fromCache:!0}),e}catch(e){if(t===p.CacheLookupPolicy.AccessToken)throw this.logger.info("0eitbc",this.correlationId),i.add({isNativeBroker:!1}),i.end({success:!1}),e;this.logger.info("0957j1",this.correlationId)}try{let t=await this.platformAuthProvider.sendMessage(r),s=await this.handleNativeResponse(t,r,o,e.storeInCache);return i.end({success:!0,requestId:s.requestId}),n.clearNativeBrokerErrorCode(),s}catch(e){throw e instanceof rs&&n.setNativeBrokerErrorCode(e.errorCode),i.end({success:!1},e),this.setBrokerErrorTelemetry(e),e}}setBrokerErrorTelemetry(e){e instanceof et.AuthError&&this.performanceClient.addFields({isNativeBroker:!0,brokerErrorName:e.name,brokerErrorCode:e.errorCode},this.correlationId)}createSilentCacheRequest(e,t){let r={authority:e.authority,correlationId:this.correlationId,scopes:tA.ScopeSet.fromString(e.scope,this.correlationId).asArray(),account:t,forceRefresh:!1};return e.attributeTokens&&(r.attributeTokens=e.attributeTokens.split(" ")),r}async acquireTokensFromCache(e,t){if(!e)throw this.logger.warning("1ndf3e",this.correlationId),(0,d.createClientAuthError)(u.noAccountFound,this.correlationId);let r=this.browserStorage.getBaseAccountInfo({nativeAccountId:e},this.correlationId);if(!r)throw(0,d.createClientAuthError)(u.noAccountFound,this.correlationId);try{let e=this.createSilentCacheRequest(t,r),i=await this.silentCacheClient.acquireToken(e),o=this.browserStorage.getIdToken(r,this.correlationId,this.browserStorage.getTokenKeys(),r.tenantId),n=ed.extractTokenClaims(o?.secret||"",l.base64Decode,this.correlationId),s=(0,eA.updateAccountTenantProfileData)(r,void 0,n,o?.secret);return{...i,idToken:o?.secret||"",idTokenClaims:n,account:s}}catch(e){throw e}}async acquireTokenRedirect(e,t,r){this.logger.trace("0luikq",this.correlationId);let i=await this.initializePlatformRequest(e),o=r?.navigateToLoginRequestUrl??!0;try{await this.platformAuthProvider.sendMessage(i)}catch(e){if(e instanceof rs&&(tW(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled).setNativeBrokerErrorCode(e.errorCode),ra(e)))throw this.setBrokerErrorTelemetry(e),e}this.browserStorage.setTemporaryCache(p.TemporaryCacheKeys.NATIVE_REQUEST,JSON.stringify({...i,storeInCache:e.storeInCache}),!0);let n={apiId:p.ApiId.acquireTokenRedirect,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},s=o?E.UrlString.getAbsoluteUrl(e.redirectStartPage||window.location.href,(0,eW.getCurrentUri)(),this.correlationId):tJ(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId);t.end({success:!0}),await this.navigationClient.navigateExternal(s,n)}async handleRedirectPromise(){if(this.logger.trace("1c5lhw",this.correlationId),!this.browserStorage.isInteractionInProgress(!0))return this.logger.info("0le6uv",this.correlationId),null;let e=this.browserStorage.getCachedNativeRequest();if(!e)return this.logger.verbose("0a6zjb",this.correlationId),this.performanceClient?.addFields({errorCode:"no_cached_request"},this.correlationId),null;let{prompt:t,storeInCache:r,...i}=e;t&&this.logger.verbose("0ac34v",this.correlationId),this.browserStorage.removeItem(this.browserStorage.generateCacheKey(p.TemporaryCacheKeys.NATIVE_REQUEST));let o=eg.nowSeconds();try{this.logger.verbose("003x5a",this.correlationId);let e=await this.platformAuthProvider.sendMessage(i),t=await this.handleNativeResponse(e,i,o,r);return tW(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled).clearNativeBrokerErrorCode(),t}catch(e){throw this.setBrokerErrorTelemetry(e),e}}logout(){return this.logger.trace("0u2sjm",this.correlationId),Promise.reject("Logout not implemented yet")}

1async handleNativeResponse(e,t,r,i){this.logger.trace("1bojln",this.correlationId);let o=ed.extractTokenClaims(e.id_token,l.base64Decode,this.correlationId),n=this.createHomeAccountIdentifier(e,o),s=this.browserStorage.getAccountInfoFilteredBy({nativeAccountId:t.accountId},this.correlationId)?.homeAccountId;if(t.extraParameters?.child_client_id&&e.account.id!==t.accountId)this.logger.info("1ub1in",this.correlationId);else if(n!==s&&e.account.id!==t.accountId)throw rc("user_switch",this.correlationId);let a=await tQ(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,t.authority),c=tk(this.browserStorage,a,n,l.base64Decode,this.correlationId,o,e.client_info,a.getPreferredCache(),o.tid,void 0,e.account.id,this.logger,this.performanceClient);e.expires_in=Number(e.expires_in);let h=await this.generateAuthenticationResult(e,t,o,c,a.canonicalAuthority,r);return await this.cacheAccount(c,ed.isKmsi(o)),await this.cacheNativeTokens(e,t,n,o,h.tenantId,r,a.getPreferredCache(),i),h}createHomeAccountIdentifier(e,t){return eh.generateHomeAccountId(e.client_info||"",T.AuthorityType.Default,this.logger,this.browserCrypto,this.correlationId,t)}generateScopes(e,t){return t?tA.ScopeSet.fromString(t,this.correlationId):tA.ScopeSet.fromString(e,this.correlationId)}async generatePopAccessToken(e,t){if(t.tokenType!==ep.Constants.AuthenticationScheme.POP||!t.signPopToken)return e.access_token;{if(e.shr)return this.logger.trace("0coqhu",this.correlationId),e.shr;

1let r=new td(this.browserCrypto,this.tokenBindingKeyManager,this.performanceClient),i={resourceRequestMethod:t.resourceRequestMethod,resourceRequestUri:t.resourceRequestUri,shrClaims:t.shrClaims,shrNonce:t.shrNonce,correlationId:this.correlationId};if(!t.keyId)throw(0,d.createClientAuthError)(u.keyIdMissing,this.correlationId);return r.signPopToken(e.access_token,t.keyId,i)}}async generateAuthenticationResult(e,t,r,i,o,n){let s=this.addTelemetryFromNativeResponse(e.properties.MATS),a=this.generateScopes(t.scope,e.scope),c=e.account.properties||{},l=c.UID||r.oid||r.sub||"",h=c.TenantId||r.tid||"",d=(0,eA.updateAccountTenantProfileData)(eh.getAccountInfo(i),void 0,r,e.id_token);if(d.nativeAccountId!==e.account.id){d.nativeAccountId=e.account.id;let t=h||d.tenantId,r=d.tenantProfiles?.get(t);r&&(r.nativeAccountId=e.account.id)}let u=await this.generatePopAccessToken(e,t),g=t.tokenType===ep.Constants.AuthenticationScheme.POP?ep.Constants.AuthenticationScheme.POP:ep.Constants.AuthenticationScheme.BEARER;return{authority:o,uniqueId:l,tenantId:h,scopes:a.asArray(),account:d,idToken:e.id_token,idTokenClaims:r,accessToken:u,fromCache:!!s&&this.isResponseFromCache(s),expiresOn:eg.toDateFromSeconds(n+e.expires_in),tokenType:g,correlationId:this.correlationId,state:e.state,fromPlatformBroker:!0,...t.extraParameters?.resource&&{resource:t.extraParameters.resource}}}async cacheAccount(e,t){await this.browserStorage.setAccount(e,this.correlationId,t,this.apiId),this.browserStorage.removeAccountContext(eh.getAccountInfo(e),this.correlationId)}async cacheNativeTokens(e,t,r,i,o,n,s,a){let c=eu.createIdTokenEntity(r,s,e.id_token||"",t.clientId,i.tid||""),h=t.tokenType===ep.Constants.AuthenticationScheme.POP?ep.Constants.SHR_NONCE_VALIDITY:("string"==typeof e.expires_in?parseInt(e.expires_in,10):e.expires_in)||0,d=this.generateScopes(e.scope,t.scope),u=t.attributeTokens?{attribute_tokens:t.attributeTokens}:void 0,g=eu.createAccessTokenEntity(r,s,e.access_token,t.clientId,i.tid||o,d.printScopes(),n+h,0,l.base64Decode,t.correlationId,void 0,t.tokenType,void 0,t.keyId,u);return c&&a?.idToken!==!1&&await this.browserStorage.setIdTokenCredential(c,this.correlationId,ed.isKmsi(i)),this.nativeStorageManager.saveCacheRecord({accessToken:g},this.correlationId,ed.isKmsi(i),this.apiId,a)}getExpiresInValue(e,t){return e===ep.Constants.AuthenticationScheme.POP?ep.Constants.SHR_NONCE_VALIDITY:("string"==typeof t?parseInt(t,10):t)||0}addTelemetryFromNativeResponse(e){let t=this.getMATSFromResponse(e);return t?(this.performanceClient.addFields({extensionId:this.platformAuthProvider.getExtensionId(),extensionVersion:this.platformAuthProvider.getExtensionVersion(),matsBrokerVersion:t.broker_version,matsAccountJoinOnStart:t.account_join_on_start,matsAccountJoinOnEnd:t.account_join_on_end,matsDeviceJoin:t.device_join,matsPromptBehavior:t.prompt_behavior,matsApiErrorCode:t.api_error_code,matsUiVisible:t.ui_visible,matsSilentCode:t.silent_code,matsSilentBiSubCode:t.silent_bi_sub_code,matsSilentMessage:t.silent_message,matsSilentStatus:t.silent_status,matsHttpStatus:t.http_status,matsHttpEventCount:t.http_event_count},this.correlationId),t):null}getMATSFromResponse(e){if(e)try{return JSON.parse(e)}catch(e){this.logger.error("0b3l57",this.correlationId)}return null}isResponseFromCache(e){return void 0===e.is_cached?(this.logger.verbose("1okqev",this.correlationId),!1):!!e.is_cached}async initializePlatformRequest(e){this.logger.trace("1xdm2a",this.correlationId);let t=await this.getCanonicalAuthority(e),r=e.skipBrokerClaims&&e.embeddedClientId?void 0:this.config.auth.clientCapabilities,{scopes:i,claims:o}=e,n=new tA.ScopeSet(i||[],this.correlationId);n.appendScopes(ep.Constants.OIDC_DEFAULT_SCOPES);let s=t9.RequestParameterBuilder.buildMergedClaims(o,r?.length?r:void 0),a=!!e.attributeTokens?.length;this.performanceClient?.addFields({hasAttributeTokens:a},this.correlationId);let c={claims:s,accountId:this.accountId,clientId:this.config.auth.clientId,authority:t.urlString,scope:n.printScopes(),redirectUri:tJ(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId),prompt:this.getPrompt(e.prompt),correlationId:this.correlationId,isSts:!1,tokenType:e.authenticationScheme,windowTitleSubstring:document.title,nonce:e.nonce,state:e.state,loginHint:e.loginHint,extraParameters:{...e.extraParameters,...e.resource&&{resource:e.resource}},extendedExpiryToken:!1,keyId:e.popKid,resourceRequestMethod:e.resourceRequestMethod,resourceRequestUri:e.resourceRequestUri,shrClaims:e.shrClaims,shrNonce:e.shrNonce};

1if(a&&(c.attributeTokens=eu.serializeAttributeTokens(e.attributeTokens)),c.signPopToken&&e.popKid)throw(0,g.createBrowserAuthError)(m.invalidPopTokenRequest,this.correlationId);if(this.handleExtraBrokerParams(c,e.embeddedClientId),c.extraParameters=c.extraParameters||{},c.extraParameters.telemetry=p.PlatformAuthConstants.MATS_TELEMETRY,e.authenticationScheme===ep.Constants.AuthenticationScheme.POP){let t,r={resourceRequestUri:e.resourceRequestUri,resourceRequestMethod:e.resourceRequestMethod,shrClaims:e.shrClaims,shrNonce:e.shrNonce,correlationId:this.correlationId},i=new td(this.browserCrypto,this.tokenBindingKeyManager,this.performanceClient);if(c.keyId)t=this.browserCrypto.base64UrlEncode(JSON.stringify({kid:c.keyId})),c.signPopToken=!1;else{let e=await Z(i.generateCnf.bind(i),eE.PopTokenGenerateCnf,this.logger,this.performanceClient,this.correlationId)(r,this.logger);t=e.reqCnfString,c.keyId=e.kid,c.signPopToken=!0}c.reqCnf=t}return this.addRequestSKUs(c),c}async getCanonicalAuthority(e){let t=e.authority||this.config.auth.authority,{azureCloudOptions:r,account:i}=e;i&&await tQ(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,t,r,void 0,i);let o=new E.UrlString(t,this.correlationId);return o.validateAsUri(),o}getPrompt(e){switch(this.apiId){case p.ApiId.ssoSilent:case p.ApiId.acquireTokenSilent_silentFlow:return this.logger.trace("12n1y2",this.correlationId),ep.Constants.PromptValue.NONE}if(!e)return void this.logger.trace("0uid1p",this.correlationId);switch(e){case ep.Constants.PromptValue.NONE:case ep.Constants.PromptValue.CONSENT:case ep.Constants.PromptValue.LOGIN:return this.logger.trace("0i0hco",this.correlationId),e;default:throw this.logger.trace(`0w3tpw ${e}`,this.correlationId),(0,g.createBrowserAuthError)(m.nativePromptNotSupported,this.correlationId)}}handleExtraBrokerParams(e,t){let r=e.extraParameters&&e.extraParameters.hasOwnProperty(ri.BROKER_CLIENT_ID)&&e.extraParameters.hasOwnProperty(ri.BROKER_REDIRECT_URI)&&e.extraParameters.hasOwnProperty(ri.CLIENT_ID);if(!t&&!r)return;let i="",o=e.redirectUri;t?(e.redirectUri=this.config.auth.redirectUri,i=t):e.extraParameters&&(e.redirectUri=e.extraParameters[ri.BROKER_REDIRECT_URI],i=e.extraParameters[ri.CLIENT_ID]);let{[ri.BROKER_CLIENT_ID]:n,[ri.BROKER_REDIRECT_URI]:s,[ri.CLIENT_ID]:a,...c}=e.extraParameters||{};e.extraParameters={...c,child_client_id:i,child_redirect_uri:o},this.performanceClient?.addFields({embeddedClientId:i,embeddedRedirectUri:o},this.correlationId)}}let rm=new Map([["e","AAD"],["m","MSA"]]);function rf(e,t,r){let i=function(e){if(!e)return null;try{let t=(/%(?:[0-9A-Fa-f]{2})/.test(e)?decodeURIComponent(e):e).split("|");if(t.length<5)return null;return{accountType:rm.get(t[0]?.trim()||"")||"",error:t[1]?.trim()||"",subError:t[2]?.trim()||"",cloudInstance:t[3]?.trim()||"",callerDataBoundary:t[4]?.trim()||""}}catch{return null}}(e.clientdata);i?.accountType&&r.addFields({accountType:i.accountType},t),i?.error&&r.addFields({serverErrorNo:i.error},t),i?.subError&&r.addFields({serverSubErrorNo:i.subError},t)}async function rC(e,t,r,i,o){let n=rr.getStandardAuthorizeRequestParameters({...e.auth,authority:t},r,i,o);return t9.RequestParameterBuilder.addLibraryInfo(n,{sku:p.BrowserConstants.MSAL_SKU,version:eQ.version,os:"",cpu:""}),e.system.protocolMode!==R.ProtocolMode.OIDC&&t9.RequestParameterBuilder.addApplicationTelemetry(n,e.telemetry.application),r.platformBroker&&(t9.RequestParameterBuilder.addNativeBroker(n),o.addFields({isPlatformAuthorizeRequest:!0},r.correlationId),r.authenticationScheme===ep.Constants.AuthenticationScheme.POP&&r.reqCnf&&t9.RequestParameterBuilder.addPopToken(n,r.reqCnf)),r.authenticationScheme===ep.Constants.AuthenticationScheme.DPOP&&r.dpopJkt&&n.set(ri.DPOP_JKT,r.dpopJkt),t9.RequestParameterBuilder.instrumentBrokerParams(n,r.correlationId,o),n}async function ry(e,t,r,i,o){if(!r.codeChallenge)throw(0,S.createClientConfigurationError)(tV.ClientConfigurationErrorCodes.pkceParamsMissing,r.correlationId);let n=await Z(rC,a.GetStandardParams,i,o,r.correlationId)(e,t,r,i,o);return t9.RequestParameterBuilder.addResponseType(n,ep.Constants.OAuthResponseType.CODE),t9.RequestParameterBuilder.addCodeChallengeParams(n,r.codeChallenge,ep.Constants.S256_CODE_CHALLENGE_METHOD),t9.RequestParameterBuilder.addExtraParameters(n,{...r.extraQueryParameters,...r.extraParameters}),rr.getAuthorizeUrl(t,n)}async function rI(e,t,r,i,o){if(!r.earJwk)throw(0,g.createBrowserAuthError)(m.earJwkEmpty,r.correlationId);let n=await rC(e,t,r,i,o);t9.RequestParameterBuilder.addResponseType(n,ep.Constants.OAuthResponseType.IDTOKEN_TOKEN_REFRESHTOKEN),t9.RequestParameterBuilder.addEARParameters(n,r.earJwk),t9.RequestParameterBuilder.addCodeChallengeParams(n,r.codeChallenge,ep.Constants.S256_CODE_CHALLENGE_METHOD),t9.RequestParameterBuilder.addExtraParameters(n,{...r.extraParameters});let s=new Map;return t9.RequestParameterBuilder.addExtraParameters(s,r.extraQueryParameters||{}),t9.RequestParameterBuilder.addCorrelationId(s,r.correlationId),{action:rr.getAuthorizeUrl(t,s),fields:Object.fromEntries(n)}}async function rA(e,t,r,i,o,n){let{action:s,fields:a}=await rI(t,r,i,o,n);return rE(e,s,a)}async function rw(e,t,r,i,o){let n=await rC(e,t,r,i,o);t9.RequestParameterBuilder.addResponseType(n,ep.Constants.OAuthResponseType.CODE),t9.RequestParameterBuilder.addCodeChallengeParams(n,r.codeChallenge,r.codeChallengeMethod||ep.Constants.S256_CODE_CHALLENGE_METHOD),t9.RequestParameterBuilder.addExtraParameters(n,{...r.extraParameters});let s=new Map;return t9.RequestParameterBuilder.addExtraParameters(s,r.extraQueryParameters||{}),t9.RequestParameterBuilder.addCorrelationId(s,r.correlationId),{action:rr.getAuthorizeUrl(t,s),fields:Object.fromEntries(n)}}async function rT(e,t,r,i,o,n){let{action:s,fields:a}=await rw(t,r,i,o,n);return rE(e,s,a)}function rE(e,t,r){let i=e.createElement("form");return i.method="post",i.action=t,Object.keys(r).forEach(t=>{let o=e.createElement("input");o.hidden=!0,o.name=t,o.value=r[t],i.appendChild(o)}),e.body.appendChild(i),i}async function rv(e,t,r,i,o,n,s,c,l,h){if(c.verbose("11qcow",e.correlationId),!h)throw(0,g.createBrowserAuthError)(m.nativeConnectionNotEstablished,e.correlationId);let d=new A(c,l),u=new rp(i,o,d,c,s,i.system.navigationClient,r,l,h,t,n,e.correlationId),{userRequestState:p}=e3.ProtocolUtils.parseRequestState(d.base64Decode,e.state,e.correlationId);return Z(u.acquireToken.bind(u),a.NativeInteractionClientAcquireToken,c,l,e.correlationId)({...e,state:p,prompt:void 0})}async function rk(e,t,r,i,o,n,s,c,l,h,d,u){if(t_.removeThrottle(s,o.auth.clientId,e),rf(t,e.correlationId,d),t.accountId)return Z(rv,a.HandleResponsePlatformBroker,h,d,e.correlationId)(e,t.accountId,i,o,s,c,l,h,d,u);let g=new ro(n,s,{...e,code:t.code||"",codeVerifier:r},h,d);return await Z(g.handleCodeResponse.bind(g),a.HandleCodeResponse,h,d,e.correlationId)(t,e,i)}async function rS(e,t,r,i,o,n,s,c,l,d,u){if(t_.removeThrottle(n,i.auth.clientId,e),rf(t,e.correlationId,d),rr.validateAuthorizationResponse(t,e.state,e.correlationId),!t.ear_jwe)throw(0,g.createBrowserAuthError)(m.earJweEmpty,e.correlationId);if(!e.earJwk)throw(0,g.createBrowserAuthError)(m.earJwkEmpty,e.correlationId);let p=JSON.parse(await Z(h.decryptEarResponse,a.DecryptEarResponse,l,d,e.correlationId)(e.earJwk,t.ear_jwe));if(p.accountId)return Z(rv,a.HandleResponsePlatformBroker,l,d,e.correlationId)(e,p.accountId,r,i,n,s,c,l,d,u);let f=new tv(i.auth.clientId,n,new A(l,d),l,d,null,null,new I(l,d));f.validateTokenResponse(p,e.correlationId);let C={code:"",state:e.state,nonce:e.nonce,client_info:p.client_info,cloud_graph_host_name:p.cloud_graph_host_name,cloud_instance_host_name:p.cloud_instance_host_name,cloud_instance_name:p.cloud_instance_name,msgra

1ph_host:p.msgraph_host};return await Z(f.handleServerTokenResponse.bind(f),eE.HandleServerTokenResponse,l,d,e.correlationId)(p,o,eg.nowSeconds(),e,r,C,void 0,void 0,void 0,void 0)}async function rR(e,t,r){let i=X(rb,a.GenerateCodeVerifier,t,e,r)(e,t,r),o=await Z(rP,a.GenerateCodeChallengeFromVerifier,t,e,r)(i,e,t,r);return{verifier:i,challenge:o}}function rb(e,t,r){try{let i=new Uint8Array(32);return X(h.getRandomValues,a.GetRandomValues,t,e,r)(i),(0,c.urlEncodeArr)(i)}catch(e){throw(0,g.createBrowserAuthError)(m.pkceNotCreated,r)}}async function rP(e,t,r,i){try{let o=await Z(h.sha256Digest,a.Sha256Digest,r,t,i)(e);return(0,c.urlEncodeArr)(new Uint8Array(o))}catch(e){throw(0,g.createBrowserAuthError)(m.pkceNotCreated,i)}}e.i(250581);var r_=e.i(86846);e.s(["postRequestFailed",0,"post_request_failed","unexpectedError",0,"unexpected_error"],367390);var rO=e.i(367390),rO=rO;class rN{constructor(e,t,r,i){this.logger=e,this.handshakeTimeoutMs=t,this.extensionId=i,this.resolvers=new Map,this.handshakeResolvers=new Map,this.messageChannel=new MessageChannel,this.windowListener=this.onWindowMessage.bind(this),this.performanceClient=r,this.handshakeEvent=this.performanceClient.startMeasurement(a.NativeMessageHandlerHandshake),this.platformAuthType=p.PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER}async sendMessage(e){this.logger.trace(`0on4p2 ${this.platformAuthType}`,e.correlationId);let t={method:p.NativeExtensionMethod.GetToken,request:e},r={channel:p.PlatformAuthConstants.CHANNEL_ID,extensionId:this.extensionId,responseId:(0,h.createNewGuid)(),body:t};this.logger.trace(`1qadfi ${this.platformAuthType}`,e.correlationId),this.logger.tracePii(`1xm533 ${this.platformAuthType} ${JSON.stringify(r)}`,e.correlationId),this.messageChannel.port1.postMessage(r);let i=await new Promise((e,t)=>{this.resolvers.set(r.responseId,{resolve:e,reject:t})});return this.validatePlatformBrokerResponse(i)}static async createProvider(e,t,r,i){e.trace("15zfnw",i);try{let o=new rN(e,t,r,p.PlatformAuthConstants.PREFERRED_EXTENSION_ID);return await o.sendHandshakeRequest(i),o}catch(n){let o=new rN(e,t,r);return await o.sendHandshakeRequest(i),o}}async sendHandshakeRequest(e){this.logger.trace(`1dpg9o ${this.platformAuthType}`,e),window.addEventListener("message",this.windowListener,!1);let t={channel:p.PlatformAuthConstants.CHANNEL_ID,extensionId:this.extensionId,responseId:(0,h.createNewGuid)(),body:{method:p.NativeExtensionMethod.HandshakeRequest}};return this.handshakeEvent.add({extensionId:this.extensionId,extensionHandshakeTimeoutMs:this.handshakeTimeoutMs}),this.messageChannel.port1.onmessage=e=>{this.onChannelMessage(e)},window.postMessage(t,window.origin,[this.messageChannel.port2]),new Promise((e,r)=>{this.handshakeResolvers.set(t.responseId,{resolve:e,reject:r}),this.timeoutId=window.setTimeout(()=>{window.removeEventListener("message",this.windowListener,!1),this.messageChannel.port1.close(),this.messageChannel.port2.close(),this.handshakeEvent.end({extensionHandshakeTimedOut:!0,success:!1}),r((0,g.createBrowserAuthError)(m.nativeHandshakeTimeout,"")),this.handshakeResolvers.delete(t.responseId)},this.handshakeTimeoutMs)})}onWindowMessage(e){let t=(0,eW.createGuid)();if(this.logger.trace(`0jpn5u ${this.platformAuthType}`,t),e.source!==window)return;let r=e.data;if(r.channel&&r.channel===p.PlatformAuthConstants.CHANNEL_ID&&(!r.extensionId||r.extensionId===this.extensionId)&&r.body.method===p.NativeExtensionMethod.HandshakeRequest){let e=this.handshakeResolvers.get(r.responseId);if(!e)return void this.logger.trace(`07buhm ${this.platformAuthType} ${r.responseId}`,t);this.logger.verbose(r.extensionId?`0xrkug ${r.extensionId}`:"No extension installed",t),clearTimeout(this.timeoutId),this.messageChannel.port1.close(),this.messageChannel.port2.close(),window.removeEventListener("message",this.windowListener,!1),this.handshakeEvent.end({success:!1,extensionInstalled:!1}),e.reject((0,g.createBrowserAuthError)(m.nativeExtensionNotInstalled,""))}}onChannelMessage(e){let t=(0,eW.createGuid)();this.logger.trace(`1py8yf ${this.platformAuthType}`,t);let r=e.data,i=this.resolvers.get(r.responseId),o=this.handshakeResolvers.get(r.responseId);try{let e=r.body.method;if(e===p.NativeExtensionMethod.Response){if(!i)return;let e=r.body.response;if(this.logger.trace(`19hpgm ${this.platformAuthType}`,t),this.logger.tracePii(`179a24 ${this.platformAuthType} ${JSON.stringify(e)}`,t),"Success"!==e.status)i.reject(rc(e.code,t,e.description,e.ext));else if(e.result)e.result.code&&e.result.description?i.reject(rc(e.result.code,t,e.result.description,e.result.ext)):i.resolve(e.result);else throw(0,et.createAuthError)(rO.unexpectedError,t,"Event does not contain result.");this.resolvers.delete(r.responseId)}else if(e===p.NativeExtensionMethod.HandshakeResponse){if(!o)return void this.logger.trace(`082qnt ${this.platformAuthType} ${r.responseId}`,t);clearTimeout(this.timeoutId),window.removeEventListener("message",this.windowListener,!1),this.extensionId=r.extensionId,this.extensionVersion=r.body.version,this.logger.verbose(`0yf5ib ${this.platformAuthType} ${this.extensionId}`,t),this.handshakeEvent.end({extensionInstalled:!0,success:!0}),o.resolve(),this.handshakeResolvers.delete(r.responseId)}}catch(r){this.logger.error("0xf978",t),this.logger.errorPii(`04i99o ${r}`,t),this.logger.errorPii(`0xdvsy ${e}`,t),i?i.reject(r):o&&o.reject(r)}}validatePlatformBrokerResponse(e){if(e.hasOwnProperty("access_token")&&e.hasOwnProperty("id_token")&&e.hasOwnProperty("client_info")&&e.hasOwnProperty("account")&&e.hasOwnProperty("scope")&&e.hasOwnProperty("expires_in"))return e;throw(0,et.createAuthError)(rO.unexpectedError,"","Response missing expected properties.")}getExtensionId(){return this.extensionId}getExtensionVersion(){return this.extensionVersion}getExtensionName(){return this.getExtensionId()===p.PlatformAuthConstants.PREFERRED_EXTENSION_ID?"chrome":this.getExtensionId()?.length?"unknown":void 0}}var rO=rO;class rM{constructor(e,t,r){this.logger=e,this.performanceClient=t,this.correlationId=r,this.platformAuthType=p.PlatformAuthConstants.PLATFORM_DOM_PRO

1VIDER}static async createProvider(e,t,r){if(e.trace("12mj4a",r),window.navigator?.platformAuthentication){let i=await window.navigator.platformAuthentication.getSupportedContracts(p.PlatformAuthConstants.MICROSOFT_ENTRA_BROKERID);if(i?.includes(p.PlatformAuthConstants.PLATFORM_DOM_APIS))return e.trace("1h5q1r",r),new rM(e,t,r)}}getExtensionId(){return p.PlatformAuthConstants.MICROSOFT_ENTRA_BROKERID}getExtensionVersion(){return""}getExtensionName(){return p.PlatformAuthConstants.DOM_API_NAME}async sendMessage(e){this.logger.trace(`02bcil ${this.platformAuthType}`,e.correlationId);try{let t=this.initializePlatformDOMRequest(e),r=await window.navigator.platformAuthentication.executeGetToken(t);return this.validatePlatformBrokerResponse(r,e.correlationId)}catch(t){throw this.logger.error(`11im7g ${this.platformAuthType}`,e.correlationId),t}}initializePlatformDOMRequest(e){this.logger.trace(`15d6yv ${this.platformAuthType}`,e.correlationId);let{accountId:t,clientId:r,authority:i,scope:o,redirectUri:n,correlationId:s,state:a,extraParameters:c,...l}=e,h=this.getDOMExtraParams(l,s);return{accountId:t,brokerId:this.getExtensionId(),authority:i,clientId:r,correlationId:s||this.correlationId,extraParameters:{...c,...h},isSecurityTokenService:!1,redirectUri:n,scope:o,state:a}}validatePlatformBrokerResponse(e,t){if(e.hasOwnProperty("isSuccess")){if(e.hasOwnProperty("accessToken")&&e.hasOwnProperty("idToken")&&e.hasOwnProperty("clientInfo")&&e.hasOwnProperty("account")&&e.hasOwnProperty("scopes")&&e.hasOwnProperty("expiresIn"))return this.logger.trace(`0h4vei ${this.platformAuthType}`,t),this.convertToPlatformBrokerResponse(e,t);else if(e.hasOwnProperty("error")&&!1===e.isSuccess&&e.error&&e.error.code)throw this.logger.trace(`0g92vm ${this.platformAuthType}`,t),rc(e.error.code,t,e.error.description,{error:parseInt(e.error.errorCode),protocol_error:e.error.protocolError,status:e.error.status,properties:e.error.properties})}throw(0,et.createAuthError)(rO.unexpectedError,t,"Response missing expected properties.")}convertToPlatformBrokerResponse(e,t){return this.logger.trace(`14913t ${this.platformAuthType}`,t),{access_token:e.accessToken,id_token:e.idToken,client_info:e.clientInfo,account:e.account,expires_in:e.expiresIn,scope:e.scopes,state:e.state||"",properties:e.properties||{},extendedLifetimeToken:e.extendedLifetimeToken??!1,shr:e.proofOfPossessionPayload}}getDOMExtraParams(e,t){try{let t={};for(let[r,i]of Object.entries(e))i&&("object"==typeof i?t[r]=JSON.stringify(i):t[r]=String(i));return t}catch(e){return this.logger.error(`0eu9o3 ${this.platformAuthType}`,t),this.logger.errorPii(`17rpl5 ${this.platformAuthType} ${e}`,t),{}}}}async function rq(e,t,r,i,o){let n;e.trace("134j0v",r),e.trace(`04c81g ${o}`,r);try{o&&(n=await rM.createProvider(e,t,r)),n||(e.trace("0l3na8",r),n=await rN.createProvider(e,i||r_.DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS,t,r))}catch(t){e.trace("0icbd7",t)}return n}function rU(e,t,r,i,o){if(t.trace("0uko3r",r),!e.system.allowPlatformBroker&&e.experimental.allowPlatformBrokerWithDOM)throw(0,S.createClientConfigurationError)(tV.ClientConfigurationErrorCodes.invalidPlatformBrokerConfiguration,"");if(!e.system.allowPlatformBroker)return t.trace("04hozs",r),!1;if(!i)return t.trace("0kvv1r",r),!1;if(o)switch(o){case ep.Constants.AuthenticationScheme.BEARER:case ep.Constants.AuthenticationScheme.POP:t.trace("18tev1",r);break;default:return t.trace("1dd2nh",r),!1}return!0}class rD extends t2{constructor(e,t,r,i,o,n,s,a,c,l,h,d){super(e,t,r,i,o,n,s,c,l,d),this.nativeStorage=a,this.eventHandler=o,this.waitForPopupResponseHook=h}acquireToken(e,t){let r;try{if(r={popupName:this.generatePopupName(e.scopes||ep.Constants.OIDC_DEFAULT_SCOPES,e.authority||this.config.auth.authority),popupWindowAttributes:e.popupWindowAttributes||{},popupWindowParent:e.popupWindowParent??window},this.performanceClient.addFields({isAsyncPopup:!this.config.system.navigatePopups},this.correlationId),!this.config.system.navigatePopups)return this.logger.verbose("162h4u",this.correlationId),this.acquireTokenPopupAsync(e,r,t);{let i={...e,httpMethod:t6(e,this.config.system.protocolMode)};return this.logger.verbose("1f9ok3",this.correlationId),r.popup=this.openSizedPopup("about:blank",r),this.acquireTokenPopupAsync(i,r,t)}}catch(e){return Promise.reject(e)}}logout(e){try{this.logger.verbose("068rup",this.correlationId);

1let t=this.initializeLogoutRequest(e),r={popupName:this.generateLogoutPopupName(t),popupWindowAttributes:e?.popupWindowAttributes||{},popupWindowParent:e?.popupWindowParent??window},i=e&&e.authority,o=e&&e.mainWindowRedirectUri;if(!this.config.system.navigatePopups)return this.logger.verbose("1phd8u",this.correlationId),this.logoutPopupAsync(t,r,i,o);return this.logger.verbose("1a28da",this.correlationId),r.popup=this.openSizedPopup("about:blank",r),this.logoutPopupAsync(t,r,i,o)}catch(e){return Promise.reject(e)}}async acquireTokenPopupAsync(e,t,r){this.logger.verbose("1g77pg",this.correlationId);let i=await Z(t4,a.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(e,p.InteractionType.Popup,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);return(t.popup&&(0,eW.preconnect)(i.authority),i.platformBroker=rU(this.config,this.logger,this.correlationId,this.platformAuthProvider,e.authenticationScheme),this.config.system.protocolMode===R.ProtocolMode.EAR)?this.executeEarFlow(i,t,r):this.executeCodeFlow(i,t,r)}async executeCodeFlow(e,t,r){let i=e.correlationId,o=tW(p.ApiId.acquireTokenPopup,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),n=r||await Z(rR,a.GeneratePkceCodes,this.logger,this.performanceClient,i)(this.performanceClient,this.logger,i),s=await tZ(e,this.tokenBindingKeyM

1anager,this.logger,this.performanceClient),c={...e,codeChallenge:n.challenge,...s};try{let r=await Z(this.createAuthCodeClient.bind(this),a.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,i)({serverTelemetryManager:o,requestAuthority:c.authority,requestAzureCloudOptions:c.azureCloudOptions,requestExtraQueryParameters:c.extraQueryParameters,account:c.account});if(c.httpMethod===ep.Constants.HttpMethod.POST)return await this.executeCodeFlowWithPost(c,t,r,n.verifier);{let o=await Z(ry,eE.GetAuthCodeUrl,this.logger,this.performanceClient,i)(this.config,r.authority,c,this.logger,this.performanceClient),s=this.config.auth.popupRelayUri,l=s?t5(s,this.getRelayStateId(e.state,i),{method:"GET",url:o},i):o,h=this.initiateAuthRequest(l,t);this.eventHandler.emitEvent(e$,i,p.InteractionType.Popup,{popupWindow:h},null);let d=await this.waitForPopupResponse(e,h,t.popupWindowParent),u=X(t7,a.DeserializeResponse,this.logger,this.performanceClient,this.correlationId)(d,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);return await Z(rk,a.HandleResponseCode,this.logger,this.performanceClient,i)(c,u,n.verifier,p.ApiId.acquireTokenPopup,this.config,r,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}}catch(e){throw t.popup?.close(),e instanceof et.AuthError&&(e.correlationId=this.correlationId,o.cacheFailedRequest(e)),e}}async executeEarFlow(e,t,r){let{correlationId:i,authority:o,azureCloudOptions:n,extraQueryParameters:s,account:c}=e,l=await Z(tQ,a.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,i)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,o,n,s,c),d=await Z(h.generateEarKey,a.GenerateEarKey,this.logger,this.performanceClient,i)(),u=r||await Z(rR,a.GeneratePkceCodes,this.logger,this.performanceClient,i)(this.performanceClient,this.logger,i),g=await tZ(e,this.tokenBindingKeyM

1anager,this.logger,this.performanceClient),m={...e,earJwk:d,codeChallenge:u.challenge,...g},f=await this.openPostFormPopup(m,l,t,i,!0),C=await Z(this.waitForPopupResponse.bind(this),a.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,i)(m,f,t.popupWindowParent),y=X(t7,a.DeserializeResponse,this.logger,this.performanceClient,this.correlationId)(C,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);if(y.ear_jwe||!y.code)return Z(rS,a.HandleResponseEar,this.logger,this.performanceClient,i)(m,y,p.ApiId.acquireTokenPopup,this.config,l,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider);{let t=await Z(this.createAuthCodeClient.bind(this),a.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,i)({serverTelemetryManager:tW(p.ApiId.acquireTokenPopup,this.config.auth.clientId,i,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account,authority:l});return Z(rk,a.HandleResponseCode,this.logger,this.performanceClient,i)(m,y,u.verifier,p.ApiId.acquireTokenPopup,this.config,t,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}}async executeCodeFlowWithPost(e,t,r,i){let o=e.correlationId,n=await Z(tQ,a.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,o)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger),s=await this.openPostFormPopup(e,n,t,o,!1),c=await Z(this.waitForPopupResponse.bind(this),a.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,o)(e,s,t.popupWindowParent),l=X(t7,a.DeserializeResponse,this.logger,this.performanceClient,this.correlationId)(c,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);return Z(rk,a.HandleResponseCode,this.logger,this.performanceClient,o)(e,l,i,p.ApiId.acquireTokenPopup,this.config,r,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async logoutPopupAsync(e,t,r,i){this.logger.verbose("0b7yrk",this.correlationId),this.eventHandler.emitEvent(eG,this.correlationId,p.InteractionType.Popup,e);let o=tW(p.ApiId.logoutPopup,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{await tY(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,e.account);let n=await Z(this.createAuthCodeClient.bind(this),a.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:o,requestAuthority:r,account:e.account||void 0});try{n.authority.endSessionEndpoint}catch{if(e.account?.homeAccountId&&e.postLogoutRedirectUri&&n.authority.protocolMode===R.ProtocolMode.OIDC){if(this.eventHandler.emitEvent(eV,e.correlationId,p.InteractionType.Popup,e),i){let e={apiId:p.ApiId.logoutPopup,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},t=E.UrlString.getAbsoluteUrl(i,(0,eW.getCurrentUri)(),this.correlationId);await this.navigationClient.navigateInternal(t,e)}t.popup?.close();return}}e.state=e3.ProtocolUtils.setRequestState(this.browserCrypto,e.state||"",{interactionType:p.InteractionType.Popup},e.correlationId);let s=n.getLogoutUri(e);this.eventHandler.emitEvent(eV,e.correlationId,p.InteractionType.Popup,e);let c=this.config.auth.popupRelayUri,l=c?t5(c,this.getRelayStateId(e.state||"",this.correlationId),{method:"GET",url:s},this.correlationId):s,h=this.openPopup(l,t);if(this.eventHandler.emitEvent(e$,e.correlationId,p.InteractionType.Popup,{popupWindow:h},null),await this.waitForPopupResponse(e,h,t.popupWindowParent).catch(()=>{}),i){let e={apiId:p.ApiId.logoutPopup,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},t=E.UrlString.getAbsoluteUrl(i,(0,eW.getCurrentUri)(),this.correlationId);this.logger.verbose("0qcur2",this.correlationId),this.logger.verbosePii(`0oj7lk ${t}`,this.correlationId),await this.navigationClient.navigateInternal(t,e)}else this.logger.verbose("03zgcf",this.correlationId)}catch(e){throw t.popup?.close(),e instanceof et.AuthError&&(e.correlationId=this.correlationId,o.cacheFailedRequest(e)),this.eventHandler.emitEvent(ej,this.correlationId,p.InteractionType.Popup,null,e),this.eventHandler.emitEvent(eJ,this.correlationId,p.InteractionType.Popup),e}this.eventHandler.emitEvent(eJ,this.correlationId,p.InteractionType.Popup)}initiateAuthRequest(e,t){if(e)return this.logger.infoPii(`1kcr9k ${e}`,this.correlationId),this.openPopup(e,t);throw this.logger.error("1l7hyp",this.correlationId),(0,g.createBrowserAuthError)(m.emptyNavigateUri,this.correlationId)}openPopup(e,t){try{let r;if(t.popup?(r=t.popup,this.logger.verbosePii(`0cgeo7 ${e}`,this.correlationId),r.location.assign(e)):void 0===t.popup&&(this.logger.verbosePii(`0c2awd ${e}`,this.correlationId),r=this.openSizedPopup(e,t)),!r)throw(0,g.createBrowserAuthError)(m.emptyWindowError,this.correlationId);try{r.document.title="Microsoft Authentication"}catch(e){"u">typeof DOMException&&e instanceof DOMException&&"SecurityError"===e.name||this.logger.verbose("1s1yfs",this.correlationId)}

1return r.focus&&r.focus(),this.currentWindow=r,r}catch(e){throw this.logger.error(`0dxfb9 ${e.message}`,this.correlationId),(0,g.createBrowserAuthError)(m.popupWindowError,this.correlationId)}}openSizedPopup(e,{popupName:t,popupWindowAttributes:r,popupWindowParent:i}){let o=i.screenLeft?i.screenLeft:i.screenX,n=i.screenTop?i.screenTop:i.screenY,s=i.innerWidth||document.documentElement.clientWidth||document.body.clientWidth,a=i.innerHeight||document.documentElement.clientHeight||document.body.clientHeight,c=r.popupSize?.width,l=r.popupSize?.height,h=r.popupPosition?.top,d=r.popupPosition?.left;return(!c||c<0||c>s)&&(this.logger.verbose("08vfmo",this.correlationId),c=p.BrowserConstants.POPUP_WIDTH),(!l||l<0||l>a)&&(this.logger.verbose("09cxa0",this.correlationId),l=p.BrowserConstants.POPUP_HEIGHT),(!h||h<0||h>a)&&(this.logger.verbose("1qh4wo",this.correlationId),h=Math.max(0,a/2-p.BrowserConstants.POPUP_HEIGHT/2+n)),(!d||d<0||d>s)&&(this.logger.verbose("1sz3en",this.correlationId),d=Math.max(0,s/2-p.BrowserConstants.POPUP_WIDTH/2+o)),i.open(e,t,`width=${c}, height=${l}, top=${h}, left=${d}, scrollbars=yes`)}generatePopupName(e,t){return`${p.BrowserConstants.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${e.join("-")}.${t}.${this.correlationId}`}generateLogoutPopupName(e){let t=e.account&&e.account.homeAccountId;return`${p.BrowserConstants.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${t}.${this.correlationId}`}getRelayStateId(e,t){return e3.ProtocolUtils.parseRequestState(l.base64Decode,e,t).libraryState.id}async openPostFormPopup(e,t,r,i,o){let n=this.config.auth.popupRelayUri;if(n){let s=await (o?rI:rw)(this.config,t,e,this.logger,this.performanceClient),a=t5(n,this.getRelayStateId(e.state,i),{method:"POST",action:s.action,fields:s.fields},i);return this.initiateAuthRequest(a,r)}let s=r.popup||this.openPopup("about:blank",r);return(await (o?rA:rT)(s.document,this.config,t,e,this.logger,this.performanceClient)).submit(),s}async waitForPopupResponse(e,t,r){return this.config.auth.popupRelayUri?t3(this.config.system.popupBridgeTimeout,this.logger,e,t,this.performanceClient):this.waitForPopupResponseHook?this.waitForPopupResponseHook(e,t,r):(0,eW.waitForBridgeResponse)(this.config.system.popupBridgeTimeout,this.logger,e,this.performanceClient)}}var eE=eE;class rB extends t2{constructor(e,t,r,i,o,n,s,a,c,l,h){super(e,t,r,i,o,n,s,c,l,h),this.nativeStorage=a}async acquireToken(e){let t=await Z(t4,a.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(e,p.InteractionType.Redirect,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);t.platformBroker=rU(this.config,this.logger,this.correlationId,this.platformAuthProvider,e.authenticationScheme);let r=e=>{e.persisted&&(this.logger.verbose("0udvtt",this.correlationId),this.browserStorage.resetRequestCache(this.correlationId),this.eventHandler.emitEvent("msal:restoreFromBFCache",this.correlationId,p.InteractionType.Redirect))},i=this.getRedirectStartPage(e.redirectStartPage);this.logger.verbosePii(`0zao0a ${i}`,this.correlationId),this.browserStorage.setTemporaryCache(p.TemporaryCacheKeys.ORIGIN_URI,i,!0),window.addEventListener("pageshow",r);try{this.config.system.protocolMode===R.ProtocolMode.EAR?await this.executeEarFlow(t):await this.executeCodeFlow(t)}catch(e){throw e instanceof et.AuthError&&(e.correlationId=this.correlationId),window.removeEventListener("pageshow",r),e}}async executeCodeFlow(e){let t=e.correlationId,r=tW(p.ApiId.acquireTokenRedirect,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),i=await Z(rR,a.GeneratePkceCodes,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),o=await tZ(e,this.tokenBindingKeyM

1anager,this.logger,this.performanceClient),n={...e,codeChallenge:i.challenge,...o};this.browserStorage.cacheAuthorizeRequest(n,this.correlationId,i.verifier);try{if(n.httpMethod===ep.Constants.HttpMethod.POST)return await this.executeCodeFlowWithPost(n);{let t=await Z(this.createAuthCodeClient.bind(this),a.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:r,requestAuthority:n.authority,requestAzureCloudOptions:n.azureCloudOptions,requestExtraQueryParameters:n.extraQueryParameters,account:n.account}),i=await Z(ry,eE.GetAuthCodeUrl,this.logger,this.performanceClient,e.correlationId)(this.config,t.authority,n,this.logger,this.performanceClient);return await this.initiateAuthRequest(i)}}catch(e){throw e instanceof et.AuthError&&(e.correlationId=this.correlationId,r.cacheFailedRequest(e)),e}}async executeEarFlow(e){let{correlationId:t,authority:r,azureCloudOptions:i,extraQueryParameters:o,account:n}=e,s=await Z(tQ,a.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,t)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,r,i,o,n),c=await Z(h.generateEarKey,a.GenerateEarKey,this.logger,this.performanceClient,t)(),l=await Z(rR,a.GeneratePkceCodes,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),d=await tZ(e,this.tokenBindingKeyM

1anager,this.logger,this.performanceClient),u={...e,earJwk:c,codeChallenge:l.challenge,...d};return this.browserStorage.cacheAuthorizeRequest(u,this.correlationId,l.verifier),(await rA(document,this.config,s,u,this.logger,this.performanceClient)).submit(),new Promise((e,t)=>{setTimeout(()=>{t((0,g.createBrowserAuthError)(m.timedOut,"","failed_to_redirect"))},this.config.system.redirectNavigationTimeout)})}async executeCodeFlowWithPost(e){let t=e.correlationId,r=await Z(tQ,a.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,t)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger);return this.browserStorage.cacheAuthorizeRequest(e,this.correlationId),(await rT(document,this.config,r,e,this.logger,this.performanceClient)).submit(),new Promise((e,t)=>{setTimeout(()=>{t((0,g.createBrowserAuthError)(m.timedOut,"","failed_to_redirect"))},this.config.system.redirectNavigationTimeout)})}async handleRedirectPromise(e,t,r,i){let o=document.title;document.title="Microsoft Authentication";let n=tW(p.ApiId.handleRedirectPromise,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),s=i?.navigateToLoginRequestUrl??!0;try{let[o,a]=this.getRedirectResponse(i?.hash||"");if(!o)return this.logger.info("1qmv0q",this.correlationId),this.browserStorage.resetRequestCache(this.correlationId),"back_forward"!==function(){if("u"<typeof window||void 0===window.performance||"function"!=typeof window.performance.getEntriesByType)return;let e=window.performance.getEntriesByType("navigation"),t=e.length?e[0]:void 0;return t?.type}()?r.event.errorCode="no_server_response":this.logger.verbose("1eqegq",this.correlationId),null;

1let c=this.browserStorage.getTemporaryCache(p.TemporaryCacheKeys.ORIGIN_URI,this.correlationId,!0)||"",l=t8.UrlUtils.normalizeUrlForComparison(c,this.logger,this.correlationId),h=t8.UrlUtils.normalizeUrlForComparison(window.location.href,this.logger,this.correlationId);if(l===h&&s)return this.logger.verbose("11yred",this.correlationId),c.indexOf("#")>-1&&(0,eW.replaceHash)(c),await this.handleResponse(o,e,t,n);if(!s)return this.logger.verbose("0v4sdv",this.correlationId),await this.handleResponse(o,e,t,n);if(!(0,eW.isInIframe)()||this.config.system.allowRedirectInIframe){this.browserStorage.setTemporaryCache(p.TemporaryCacheKeys.URL_HASH,a,!0);let r={apiId:p.ApiId.handleRedirectPromise,timeout:this.config.system.redirectNavigationTimeout,noHistory:!0},i=!0;if(c)this.logger.verbose(`08jpy1 ${c}`,this.correlationId),i=await this.navigationClient.navigateInternal(c,r);else{let e=(0,eW.getHomepage)(this.correlationId);this.browserStorage.setTemporaryCache(p.TemporaryCacheKeys.ORIGIN_URI,e,!0),this.logger.warning("1dutq1",this.correlationId),i=await this.navigationClient.navigateInternal(e,r)}if(!i)return await this.handleResponse(o,e,t,n)}return null}catch(e){throw e instanceof et.AuthError&&(e.correlationId=this.correlationId,n.cacheFailedRequest(e)),e}finally{document.title=o}}getRedirectResponse(e){this.logger.verbose("1c5i8m",this.correlationId);let t=e;t||(t=this.config.auth.OIDCOptions.responseMode===ep.Constants.ResponseMode.QUERY?window.location.search:window.location.hash);let r=t8.UrlUtils.getDeserializedResponse(t);if(r){try{!function(e,t,r,i){if(!e.state)throw(0,g.createBrowserAuthError)(m.noStateInHash,i);let o=function(e,t,r){if(!t)return null;try{return e3.ProtocolUtils.parseRequestState(e.base64Decode,t,r).libraryState.meta}catch(e){throw(0,d.createClientAuthError)(u.invalidState,r)}}(t,e.state,i);if(!o)throw(0,g.createBrowserAuthError)(m.unableToParseState,i);if(o.interactionType!==r)throw(0,g.createBrowserAuthError)(m.stateInteractionTypeMismatch,i)}(r,this.browserCrypto,p.InteractionType.Redirect,this.correlationId)}catch(e){return e instanceof et.AuthError&&this.logger.error(`0bkq6p ${e.errorCode} ${e.errorMessage}`,this.correlationId),[null,""]}return(0,eW.clearHash)(window),this.logger.verbose("00uvho",this.correlationId),[r,t]}let i=this.browserStorage.getTemporaryCache(p.TemporaryCacheKeys.URL_HASH,this.correlationId,!0);return(this.browserStorage.removeItem(this.browserStorage.generateCacheKey(p.TemporaryCacheKeys.URL_HASH)),i&&(r=t8.UrlUtils.getDeserializedResponse(i)))?(this.logger.verbose("001671",this.correlationId),[r,i]):[null,""]}async handleResponse(e,t,r,i){if(!e.state)throw(0,g.createBrowserAuthError)(m.noStateInHash,t.correlationId);let{authority:o,azureCloudOptions:n,extraQueryParameters:s,account:c}=t;if(e.ear_jwe){let r=await Z(tQ,a.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,t.correlationId)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,o,n,s,c);return Z(rS,a.HandleResponseEar,this.logger,this.performanceClient,t.correlationId)(t,e,p.ApiId.acquireTokenRedirect,this.config,r,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}let l=await Z(this.createAuthCodeClient.bind(this),a.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:i,requestAuthority:t.authority});return Z(rk,a.HandleResponseCode,this.logger,this.performanceClient,t.correlationId)(t,e,r,p.ApiId.acquireTokenRedirect,this.config,l,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async initiateAuthRequest(e){if(this.logger.verbose("0yaw2e",this.correlationId),e){this.logger.infoPii(`1luf83 ${e}`,this.correlationId);let t={apiId:p.ApiId.acquireTokenRedirect,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},r=this.config.auth.onRedirectNavigate;if("function"==typeof r)return(this.logger.verbose("1nehvl",this.correlationId),!1===r(e))?void this.logger.verbose("09k5h5",this.correlationId):(this.logger.verbose("1a0jxh",this.correlationId),await this.navigationClient.navigateExternal(e,t),void 0);return this.logger.verbose("0klwf7",this.correlationId),await this.navigationClient.navigateExternal(e,t),void 0}throw this.logger.info("0rlh4e",this.correlationId),(0,g.createBrowserAuthError)(m.emptyNavigateUri,this.correlationId)}async logout(e){this.logger.verbose("1rkurh",this.correlationId);

1let t=this.initializeLogoutRequest(e),r=tW(p.ApiId.logout,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{this.eventHandler.emitEvent(eG,this.correlationId,p.InteractionType.Redirect,e),await tY(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,t.account);let i={apiId:p.ApiId.logout,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},o=await Z(this.createAuthCodeClient.bind(this),a.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:r,requestAuthority:e&&e.authority,requestExtraQueryParameters:e?.extraQueryParameters,account:e&&e.account||void 0});if(o.authority.protocolMode===R.ProtocolMode.OIDC)try{o.authority.endSessionEndpoint}catch{if(t.account?.homeAccountId)return void this.eventHandler.emitEvent(eV,this.correlationId,p.InteractionType.Redirect,t)}t.state=e3.ProtocolUtils.setRequestState(this.browserCrypto,t.state||"",{interactionType:p.InteractionType.Redirect},t.correlationId);let n=o.getLogoutUri(t);t.account?.homeAccountId&&this.eventHandler.emitEvent(eV,this.correlationId,p.InteractionType.Redirect,t);let s=this.config.auth.onRedirectNavigate;if("function"==typeof s){let e=s(n);if(!1!==e){this.logger.verbose("06v57e",this.correlationId),this.browserStorage.getInteractionInProgress()||this.browserStorage.setInteractionInProgress(!0,p.INTERACTION_TYPE.SIGNOUT),await this.navigationClient.navigateExternal(n,i);return}this.browserStorage.setInteractionInProgress(!1),this.logger.verbose("0xqes1",this.correlationId)}else{this.browserStorage.getInteractionInProgress()||this.browserStorage.setInteractionInProgress(!0,p.INTERACTION_TYPE.SIGNOUT),await this.navigationClient.navigateExternal(n,i);return}}catch(e){throw e instanceof et.AuthError&&(e.correlationId=this.correlationId,r.cacheFailedRequest(e)),this.eventHandler.emitEvent(ej,this.correlationId,p.InteractionType.Redirect,null,e),this.eventHandler.emitEvent(eJ,this.correlationId,p.InteractionType.Redirect),e}this.eventHandler.emitEvent(eJ,this.correlationId,p.InteractionType.Redirect)}getRedirectStartPage(e){let t=e||window.location.href,r=E.UrlString.getAbsoluteUrl(t,(0,eW.getCurrentUri)(),this.correlationId);return t8.UrlUtils.validateUrl(r,this.logger,this.correlationId),r}}var rr=rr,eE=eE;async function rx(e,t,r,i){if(!t)throw r.info("1l7hyp",i),(0,g.createBrowserAuthError)(m.emptyNavigateUri,i);return e.src=t,e}async function rL(e,t,r,i,o,n){if(!e.contentDocument)throw"No document associated with iframe!";return(await rT(e.contentDocument,t,r,i,o,n)).submit(),e}async function rK(e,t,r,i,o,n){if(!e.contentDocument)throw"No document associated with iframe!";return(await rA(e.contentDocument,t,r,i,o,n)).submit(),e}function rH(){let e=document.createElement("iframe");return e.className="msalSilentIframe",e.title="Microsoft Authentication",e.style.visibility="hidden",e.style.position="absolute",e.style.width=e.style.height="0",e.style.border="0",e.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms"),e.setAttribute("allow","local-network-access *"),document.body.appendChild(e),e}function rF(e){document.body===e.parentNode&&document.body.removeChild(e)}class rz extends t2{constructor(e,t,r,i,o,n,s,a,c,l,h,d,u){super(e,t,r,i,o,n,a,l,h,u),this.apiId=s,this.nativeStorage=c,this.waitForIframeResponseHook=d}async acquireToken(e){e.loginHint||e.sid||e.account&&e.account.username||this.logger.warning("1kl318",this.correlationId);let t={...e};t.prompt?t.prompt!==ep.Constants.PromptValue.NONE&&t.prompt!==ep.Constants.PromptValue.NO_SESSION&&(this.logger.warning(`0bmctg ${t.prompt} ${ep.Constants.PromptValue.NONE}`,this.correlationId),t.prompt=ep.Constants.PromptValue.NONE):t.prompt=ep.Constants.PromptValue.NONE;let r=await Z(t4,a.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(t,p.InteractionType.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);return(r.platformBroker=rU(this.config,this.logger,this.correlationId,this.platformAuthProvider,r.authenticationScheme),(0,eW.preconnect)(r.authority),this.config.system.protocolMode===R.ProtocolMode.EAR)?this.executeEarFlow(r):this.executeCodeFlow(r)}async executeCodeFlow(e){let t,r=tW(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{return t=await Z(this.createAuthCodeClient.bind(this),a.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,e.correlationId)({serverTelemetryManager:r,requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),await Z(this.silentTokenHelper.bind(this),a.SilentIframeClientTokenHelper,this.logger,this.performanceClient,e.correlationId)(t,e)}catch(i){if(i instanceof et.AuthError&&(i.correlationId=this.correlationId,r.cacheFailedRequest(i)),!t||!(i instanceof et.AuthError)||i.errorCode!==p.BrowserConstants.INVALID_GRANT_ERROR)throw i;return this.performanceClient.addFields({retryError:i.errorCode},this.correlationId),await Z(this.silentTokenHelper.bind(this),a.SilentIframeClientTokenHelper,this.logger,this.performanceClient,this.correlationId)(t,e)}}async executeEarFlow(e){let t,{correlationId:r,authority:i,azureCloudOptions:o,extraQueryParameters:n,account:s}=e,c=await Z(tQ,a.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,r)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,i,o,n,s),l=await Z(h.generateEarKey,a.GenerateEarKey,this.logger,this.performanceClient,r)(),d=await Z(rR,a.GeneratePkceCodes,this.logger,this.performanceClient,r)(this.performanceClient,this.logger,r),u={...e,earJwk:l,codeChallenge:d.challenge},g=rH(),p=this.config.auth.OIDCOptions.responseMode;try{let i=Z(this.waitForIframeResponse.bind(this),a.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,r)(g,e);i.catch(()=>{}),await Z(rK,a.SilentHandlerInitiateAuthRequest,this.logger,this.performanceClient,r)(g,this.config,c,u,this.logger,this.performanceClient),t=await i}finally{X(rF,a.RemoveHiddenIframe,this.logger,this.performanceClient,r)(g)}let m=X(t7,a.DeserializeResponse,this.logger,this.performanceClient,r)(t,p,this.logger,this.correlationId);if(m.ear_jwe||!m.code)return Z(rS,a.HandleResponseEar,this.logger,this.performanceClient,r)(u,m,this.apiId,this.config,c,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider);{let t=await Z(this.createAuthCodeClient.bind(this),a.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,r)({serverTelemetryManager:tW(this.apiId,this.config.auth.clientId,r,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account,authority:c});return Z(rk,a.HandleResponseCode,this.logger,this.performanceClient,r)(u,m,d.verifier,this.apiId,this.config,t,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}}async verifySso(e){let t={...e};t.prompt||(t.prompt=ep.Constants.PromptValue.NONE);let r=await Z(t4,a.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(t,p.InteractionType.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId),i=await Z(this.createAuthCodeClient.bind(this),a.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:tW(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:r.authority,requestAzureCloudOptions:r.azureCloudOptions,requestExtraQueryParameters:r.extraQueryParameters,account:r.account}),{serverParams:o}=await this.silentAuthorizeHelper(i,r),n=r.correlationId;return(rr.validateAuthorizationResponse(o,r.state,n),o.code)?(this.logger.verbose("0kkkcj",n),!0):(this.logger.warning("0y34ti",n),!1)}logout(){return Promise.reject((0,g.createBrowserAuthError)(m.silentLogoutUnsupported,""))}async silentTokenHelper(e,t){let{serverParams:r,pkceCodes:i,silentRequest:o}=await this.silentAuthorizeHelper(e,t);return Z(rk,a.HandleResponseCode,this.logger,this.performanceClient,t.correlationId)(o,r,i.verifier,this.apiId,this.config,e,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async silentAuthorizeHelper(e,t){let r,i=t.correlationId,o=await Z(rR,a.GeneratePkceCodes,this.logger,this.performanceClient,i)(this.performanceClient,this.logger,i),n=await tZ(t,this.tokenBindingKeyM

1anager,this.logger,this.performanceClient),s={...t,codeChallenge:o.challenge,...n},c=rH(),l=this.config.auth.OIDCOptions.responseMode;try{let o=Z(this.waitForIframeResponse.bind(this),a.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,i)(c,t);if(o.catch(()=>{}),t.httpMethod===ep.Constants.HttpMethod.POST)await Z(rL,a.SilentHandlerInitiateAuthRequest,this.logger,this.performanceClient,i)(c,this.config,e.authority,s,this.logger,this.performanceClient);else{let t=await Z(ry,eE.GetAuthCodeUrl,this.logger,this.performanceClient,i)(this.config,e.authority,s,this.logger,this.performanceClient);await Z(rx,a.SilentHandlerInitiateAuthRequest,this.logger,this.performanceClient,i)(c,t,this.logger,i)}r=await o}finally{X(rF,a.RemoveHiddenIframe,this.logger,this.performanceClient,i)(c)}return{serverParams:X(t7,a.DeserializeResponse,this.logger,this.performanceClient,i)(r,l,this.logger,this.correlationId),pkceCodes:o,silentRequest:s}}async waitForIframeResponse(e,t){return this.waitForIframeResponseHook?this.waitForIframeResponseHook(e,t):(0,eW.waitForBridgeResponse)(this.config.system.iframeBridgeTimeout,this.logger,t,this.performanceClient,this.config.experimental)}}var r$=eg,rG=e.i(903829),rV=u;class rj{constructor(e,t){this.config=(0,te.buildClientConfiguration)(e),this.logger=new e4.Logger(this.config.loggerOptions,tK.name,tK.version),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t}async acquireToken(e,t){let r=(0,r$.nowSeconds)(),i=await Z(this.executeTokenRequest.bind(this),N,this.logger,this.performanceClient,e.correlationId)(e,this.authority),o=i.headers?.[v.HeaderNames.X_MS_REQUEST_ID],n=new tv(this.config.authOptions.clientId,this.cacheManager,this.cryptoUtils,this.logger,this.performanceClient,this.config.serializableCache,this.config.persistencePlugin,this.config.tokenBindingKeyM

1anager);return n.validateTokenResponse(i.body,e.correlationId),Z(n.handleServerTokenResponse.bind(n),H,this.logger,this.performanceClient,e.correlationId)(i.body,this.authority,r,e,t,void 0,void 0,!0,e.forceCache,o)}async acquireTokenByRefreshToken(e,r){if(!e)throw(0,S.createClientConfigurationError)(eo.tokenRequestEmpty,"");if(!e.account)throw(0,d.createClientAuthError)(rV.noAccountInSilentRequest,e.correlationId);if(this.cacheManager.isAppMetadataFOCI(e.account.environment,e.correlationId))try{return await Z(this.acquireTokenWithCachedRefreshToken.bind(this),q,this.logger,this.performanceClient,e.correlationId)(e,!0,r)}catch(i){let e=i instanceof t.InteractionRequiredAuthError&&i.errorCode===rG.noTokensFound,r=i instanceof tI&&i.errorCode===v.INVALID_GRANT_ERROR&&i.subError===v.CLIENT_MISMATCH_ERROR;if(e||r);else throw i}return Z(this.acquireTokenWithCachedRefreshToken.bind(this),q,this.logger,this.performanceClient,e.correlationId)(e,!1,r)}async acquireTokenWithCachedRefreshToken(e,r,i){let o=X(this.cacheManager.getRefreshToken.bind(this.cacheManager),Y,this.logger,this.performanceClient,e.correlationId)(e.account,r,e.correlationId,void 0);if(!o)throw(0,t.createInteractionRequiredAuthError)(rG.noTokensFound,e.correlationId);if(o.expiresOn){let r=e.refreshTokenExpirationOffsetSeconds||300;if(this.performanceClient?.addFields({cacheRtExpiresOnSeconds:Number(o.expiresOn),rtOffsetSeconds:r},e.correlationId),(0,r$.isTokenExpired)(o.expiresOn,r))throw(0,t.createInteractionRequiredAuthError)(rG.refreshTokenExpired,e.correlationId)}let n={...e,refreshToken:o.secret,authenticationScheme:e.authenticationScheme||v.AuthenticationScheme.BEARER,ccsCredential:{credential:e.account.homeAccountId,type:tb}};if(n.authenticationScheme===v.AuthenticationScheme.DPOP&&!n.dpopJkt){let t=new tC(this.cryptoUtils,this.config.tokenBindingKeyM

1anager);n.dpopJkt=await t.generateJkt(e.correlationId)}try{return await Z(this.acquireToken.bind(this),M,this.logger,this.performanceClient,e.correlationId)(n,i)}catch(r){if(r instanceof t.InteractionRequiredAuthError&&r.subError===rG.badToken){this.logger.verbose("1pg3ap",e.correlationId);let t=this.cacheManager.generateCredentialKey(o);this.cacheManager.removeRefreshToken(t,e.correlationId)}throw r}}async executeTokenRequest(e,t){let r=tU(e,this.config.authOptions.clientId,this.config.authOptions.redirectUri,this.performanceClient),i=E.UrlString.appendQueryString(t.tokenEndpoint,r),o=await Z(this.createTokenRequestBody.bind(this),U,this.logger,this.performanceClient,e.correlationId)(e),n=tM(this.logger,this.config.systemOptions.preventCorsPreflight,e.ccsCredential);await tq(n,e,i,this.cryptoUtils,this.config.tokenBindingKeyManager);let s=em(this.config.authOptions.clientId,e);return Z(tD,_,this.logger,this.performanceClient,e.correlationId)(i,o,n,s,e.correlationId,this.cacheManager,this.networkClient,this.logger,this.performanceClient,this.serverTelemetryManager)}async createTokenRequestBody(e){let t=new Map;if((0,e8.addClientId)(t,e.embeddedClientId||e.extraParameters?.[e9.CLIENT_ID]||this.config.authOptions.clientId),e.redirectUri&&(0,e8.addRedirectUri)(t,e.redirectUri),(0,e8.addScopes)(t,e.scopes,e.correlationId,!0,this.config.authOptions.authority.options.OIDCOptions?.defaultScopes),(0,e8.addGrantType)(t,v.GrantType.REFRESH_TOKEN_GRANT),(0,e8.addClientInfo)(t),(0,e8.addLibraryInfo)(t,this.config.libraryInfo),(0,e8.addApplicationTelemetry)(t,this.config.telemetry.application),(0,e8.addThrottling)(t),this.serverTelemetryManager&&!(0,te.isOidcProtocolMode)(this.config)&&(0,e8.addServerTelemetry)(t,this.serverTelemetryManager),(0,e8.addRefreshToken)(t,e.refreshToken),e.attributeTokens&&(0,e8.addAttributeTokens)(t,e.attributeTokens),this.performanceClient?.addFields({hasAttributeTokens:!!e.attributeTokens?.length},e.correlationId),this.config.clientCredentials.clientSecret&&(0,e8.addClientSecret)(t,this.config.clientCredentials.clientSecret),this.config.clientCredentials.clientAssertion){let r=this.config.clientCredentials.clientAssertion;(0,e8.addClientAssertion)(t,await tP(r.assertion,this.config.authOptions.clientId,e.resourceRequestUri)),(0,e8.addClientAssertionType)(t,r.assertionType)}if(e.authenticationScheme===v.AuthenticationScheme.POP){let r,i=new td(this.cryptoUtils,this.config.tokenBindingKeyM

1anager,this.performanceClient);r=e.popKid?this.cryptoUtils.encodeKid(e.popKid):(await Z(i.generateCnf.bind(i),K,this.logger,this.performanceClient,e.correlationId)(e,this.logger)).reqCnfString,(0,e8.addPopToken)(t,r)}else if(e.authenticationScheme===v.AuthenticationScheme.SSH)if(e.sshJwk)(0,e8.addSshJwk)(t,e.sshJwk);else throw(0,S.createClientConfigurationError)(eo.missingSshJwk,e.correlationId);if(this.config.systemOptions.preventCorsPreflight&&e.ccsCredential)switch(e.ccsCredential.type){case tb:try{let r=(0,tR.buildClientInfoFromHomeAccountId)(e.ccsCredential.credential);(0,e8.addCcsOid)(t,r)}catch(t){this.logger.verbose(`1qhtee ${t}`,e.correlationId)}break;case"UPN":(0,e8.addCcsUpn)(t,e.ccsCredential.credential)}return e.embeddedClientId&&(0,e8.addBrokerParameters)(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.extraParameters&&(0,e8.addExtraParameters)(t,{...e.extraParameters}),(0,e8.instrumentBrokerParams)(t,e.correlationId,this.performanceClient),(0,e8.addClaims)(t,e.correlationId,e.claims,this.config.authOptions.clientCapabilities,e.skipBrokerClaims),(0,e7.mapToQueryString)(t)}}class rJ extends t2{async acquireToken(e){let t=await Z(t0,a.InitializeBaseRequest,this.logger,this.performanceClient,e.correlationId)(e,this.config,this.performanceClient,this.logger,this.correlationId),r=await tZ(t,this.tokenBindingKeyM

1anager,this.logger,this.performanceClient),i={...e,...t,...r};e.redirectUri&&(i.redirectUri=tJ(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId));let o=tW(p.ApiId.acquireTokenSilent_silentFlow,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),n=await this.createRefreshTokenClient({serverTelemetryManager:o,authorityUrl:i.authority,azureCloudOptions:i.azureCloudOptions,account:i.account});return Z(n.acquireTokenByRefreshToken.bind(n),a.RefreshTokenClientAcquireTokenByRefreshToken,this.logger,this.performanceClient,e.correlationId)(i,p.ApiId.acquireTokenSilent_silentFlow).catch(e=>{throw e.correlationId=this.correlationId,o.cacheFailedRequest(e),e})}logout(){return Promise.reject((0,g.createBrowserAuthError)(m.silentLogoutUnsupported,""))}async createRefreshTokenClient(e){return new rj(await Z(this.getClientConfiguration.bind(this),a.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:e.serverTelemetryManager,requestAuthority:e.authorityUrl,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),this.performanceClient)}}var eE=eE;class rW extends tF{constructor(e,t){super(e,t),this.includeRedirectUri=!1}}class rQ extends t2{constructor(e,t,r,i,o,n,s,a,c,l,h){super(e,t,r,i,o,n,a,c,l,h),this.apiId=s}async acquireToken(e){if(!e.code)throw(0,g.createBrowserAuthError)(m.authCodeRequired,this.correlationId);let t=await Z(t4,a.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(e,p.InteractionType.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId),r=tW(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);

1try{let i=await tZ(t,this.tokenBindingKeyManager,this.logger,this.performanceClient),o={...t,code:e.code,...i},n=await Z(this.getClientConfiguration.bind(this),a.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:r,requestAuthority:t.authority,requestAzureCloudOptions:t.azureCloudOptions,requestExtraQueryParameters:t.extraQueryParameters,account:t.account}),s=new rW(n,this.performanceClient);this.logger.verbose("1uic5e",this.correlationId);let c=new ro(s,this.browserStorage,o,this.logger,this.performanceClient);return await Z(c.handleCodeResponseFromServer.bind(c),eE.HandleCodeResponseFromServer,this.logger,this.performanceClient,this.correlationId)({code:e.code,msgraph_host:e.msGraphHost,cloud_graph_host_name:e.cloudGraphHostName,cloud_instance_host_name:e.cloudInstanceHostName},t,this.apiId,!1)}catch(e){throw e instanceof et.AuthError&&(e.correlationId=this.correlationId,r.cacheFailedRequest(e)),e}}logout(){return Promise.reject((0,g.createBrowserAuthError)(m.silentLogoutUnsupported,""))}}function rY(e,t,r,i){try{(0,eW.preflightCheck)(e),ec(r.auth.isMcp,i)}catch(e){throw t.end({success:!1},e,i.account),e}}class rX{constructor(e){this.operatingContext=e,this.isBrowserEnvironment=this.operatingContext.isBrowserEnvironment(),this.config=e.getConfig(),this.initialized=!1,this.logger=this.operatingContext.getLogger(),this.networkClient=this.config.system.networkClient,this.navigationClient=this.config.system.navigationClient,this.redirectResponse=new Map,this.hybridAuthCodeResponses=new Map,this.performanceClient=this.config.telemetry.client,this.isBrowserEnvironment?(this.browserCrypto=new A(this.logger,this.performanceClient),this.tokenBindingKeyM

1anager=new I(this.logger,this.performanceClient)):(this.browserCrypto=s.DEFAULT_CRYPTO_IMPLEMENTATION,this.tokenBindingKeyManager=w.DEFAULT_TOKEN_BINDING_KEY_MANAGER),this.eventHandler=new e5(this.logger),this.browserStorage=this.isBrowserEnvironment?new e6(this.config.auth.clientId,this.config.cache,this.browserCrypto,this.logger,this.performanceClient,this.eventHandler,function(e){let t,r=e.cloudDiscoveryMetadata;if(r)try{t=JSON.parse(r)}catch(e){throw(0,S.createClientConfigurationError)(eo.invalidCloudDiscoveryMetadata,"")}return{canonicalAuthority:e.authority?es(e.authority):void 0,knownAuthorities:e.knownAuthorities,cloudDiscoveryMetadata:t}}(this.config.auth),this.tokenBindingKeyManager):((e,t,r,i,o,n=ey.DEFAULT_TOKEN_BINDING_KEY_MANAGER)=>new e6(e,{cacheLocation:p.BrowserCacheLocation.MemoryStorage,cacheRetentionDays:5},s.DEFAULT_CRYPTO_IMPLEMENTATION,t,r,i,o,n))(this.config.auth.clientId,this.logger,this.performanceClient,this.eventHandler,void 0,this.tokenBindingKeyManager);const t={cacheLocation:p.BrowserCacheLocation.MemoryStorage,cacheRetentionDays:5};this.nativeInternalStorage=new e6(this.config.auth.clientId,t,this.browserCrypto,this.logger,this.performanceClient,this.eventHandler,void 0,this.tokenBindingKeyM

1anager),this.activeSilentTokenRequests=new Map,this.trackStateChange=this.trackStateChange.bind(this),this.trackStateChangeWithMeasurement=this.trackStateChangeWithMeasurement.bind(this)}static async createController(e,t){let r=new rX(e);return await r.initialize(t),r}trackStateChange(e,t){e&&("visibilitychange"===t.type?(this.logger.info("16v6hv",e),this.performanceClient.incrementFields({visibilityChangeCount:1},e)):"online"===t.type?(this.logger.info("0zirfd",e),this.performanceClient.incrementFields({onlineStatusChangeCount:1},e)):"offline"===t.type&&(this.logger.info("1xk9ef",e),this.performanceClient.incrementFields({onlineStatusChangeCount:1},e)))}async initialize(e){let t=this.getRequestCorrelationId(e);if(this.logger.trace("1f7joy",t),this.initialized)return void this.logger.info("061m5x",t);if(!this.isBrowserEnvironment){this.logger.info("19fvpi",t),this.initialized=!0,this.eventHandler.emitEvent(eD,t);return}let r=this.config.system.allowPlatformBroker,i=this.performanceClient.startMeasurement("initializeClientApplication",t);if(this.eventHandler.emitEvent("msal:initializeStart",t),this.logMultipleInstances(i,t),i.add({isMcp:this.config.auth.isMcp}),await Z(this.browserStorage.initialize.bind(this.browserStorage),a.InitializeCache,this.logger,this.performanceClient,t)(t),r)try{this.platformAuthProvider=await rq(this.logger,this.performanceClient,t,this.config.system.nativeBrokerHandshakeTimeout,this.config.experimental.allowPlatformBrokerWithDOM)}catch(e){this.logger.verbose(e,t)}this.config.cache.cacheLocation===p.BrowserCacheLocation.LocalStorage&&this.eventHandler.subscribeCrossTab(),this.config.system.navigatePopups||await this.preGeneratePkceCodes(t),this.initialized=!0,this.eventHandler.emitEvent(eD,t),i.end({allowPlatformBroker:r,success:!0})}async handleRedirectPromise(e){if(this.logger.verbose("02l8bm",""),(0,eW.blockAPICallsBeforeInitialize)(this.initialized),this.isBrowserEnvironment){let t=e?.hash||"",r=this.redirectResponse.get(t);return void 0===r?(r=this.handleRedirectPromiseInternal(e),this.redirectResponse.set(t,r),this.logger.verbose("1wn9kp","")):this.logger.verbose("0w0gm3",""),r}return this.logger.verbose("12xi63",""),null}async handleRedirectPromiseInternal(e){let t,r,i;if(!this.browserStorage.isInteractionInProgress(!0))return this.logger.info("0le6uv",""),null;if(this.browserStorage.getInteractionInProgress()?.type===p.INTERACTION_TYPE.SIGNOUT)return this.logger.verbose("1ywcv2",""),this.browserStorage.setInteractionInProgress(!1),Promise.resolve(null);let o=this.getAllAccounts(),n=this.browserStorage.getCachedNativeRequest(),s=n&&!e?.hash;try{if(s&&this.platformAuthProvider){let e=n?.correlationId||"";this.eventHandler.emitEvent(eF,e,p.InteractionType.Redirect),t=this.performanceClient.startMeasurement(ef,e),this.logger.trace("12v7is",e),t.add({isPlatformBrokerRequest:!0});let i=new rp(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,p.ApiId.handleRedirectPromise,this.performanceClient,this.platformAuthProvider,n.accountId,this.nativeInternalStorage,n.correlationId,this.tokenBindingKeyM

1anager);r=Z(i.handleRedirectPromise.bind(i),a.HandleNativeRedirectPromiseMeasurement,this.logger,this.performanceClient,t.event.correlationId)()}else{let[o,n]=this.browserStorage.getCachedRequest("");i=o;let s=o.correlationId;this.eventHandler.emitEvent(eF,s,p.InteractionType.Redirect),t=this.performanceClient.startMeasurement(ef,s),this.logger.trace("0znzs5",s);let c=this.createRedirectClient(s);r=Z(c.handleRedirectPromise.bind(c),a.HandleRedirectPromiseMeasurement,this.logger,this.performanceClient,t.event.correlationId)(o,n,t,e)}}catch(e){throw this.browserStorage.resetRequestCache(""),e}return r.then(e=>(e?(this.browserStorage.resetRequestCache(e.correlationId),this.eventHandler.emitEvent(eK,e.correlationId,p.InteractionType.Redirect,e),this.logger.verbose("0ui8f5",e.correlationId),o.length<this.getAllAccounts().length&&(this.eventHandler.emitEvent(ex,e.correlationId,p.InteractionType.Redirect,e.account),this.logger.verbose("16im3l",e.correlationId)),t.end({success:!0,isNativeBroker:e.fromPlatformBroker??!1},void 0,e.account),this.verifySsoCapability(i,p.InteractionType.Redirect)):t.event.errorCode?t.end({success:!1}):t.discard(),this.eventHandler.emitEvent(ez,t.event.correlationId,p.InteractionType.Redirect),e)).catch(e=>{throw this.browserStorage.resetRequestCache(t.event.correlationId),this.eventHandler.emitEvent(eH,t.event.correlationId,p.InteractionType.Redirect,null,e),this.eventHandler.emitEvent(ez,t.event.correlationId,p.InteractionType.Redirect),t.end({success:!1},e),e})}async acquireTokenRedirect(e){let r=this.getRequestCorrelationId(e);this.logger.verbose("0os66p",r),(0,eW.redirectPreflightCheck)(this.initialized,this.config),this.browserStorage.setInteractionInProgress(!0,p.INTERACTION_TYPE.SIGNIN);let i=this.performanceClient.startMeasurement("acquireTokenPreRedirect",r);i.add({scenarioId:e.scenarioId});let o=this.config.auth.onRedirectNavigate;this.config.auth.onRedirectNavigate=t=>{let r="function"==typeof o?o(t):void 0;return i.add({navigateCallbackResult:!1!==r}),i.event=i.end({success:!0},void 0,e.account)||i.event,r};try{let o;if(ec(this.config.auth.isMcp,e),this.eventHandler.emitEvent(eL,r,p.InteractionType.Redirect,e),this.platformAuthProvider&&this.canUsePlatformBroker(e)){let n=new rp(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,p.ApiId.acquireTokenRedirect,this.performanceClient,this.platformAuthProvider,this.getNativeAccountId(e),this.nativeInternalStorage,r,this.tokenBindingKeyM

1anager);o=Z(n.acquireTokenRedirect.bind(n),a.NativeInteractionClientAcquireTokenRedirect,this.logger,this.performanceClient,r)(e,i).catch(i=>{if(i instanceof rs&&ra(i))return this.platformAuthProvider=void 0,this.createRedirectClient(r).acquireToken(e);if(i instanceof t.InteractionRequiredAuthError)return this.logger.verbose("1ipyz4",r),this.createRedirectClient(r).acquireToken(e);throw i})}else o=this.createRedirectClient(r).acquireToken(e);return await o}catch(t){throw this.browserStorage.resetRequestCache(r),2===i.event.status?this.performanceClient.startMeasurement(ef,r).end({success:!1},t,e.account):i.end({success:!1},t,e.account),this.eventHandler.emitEvent(eH,r,p.InteractionType.Redirect,null,t),t}}acquireTokenPopup(e){let r,i=this.getRequestCorrelationId(e),o=this.performanceClient.startMeasurement("acquireTokenPopup",i);o.add({scenarioId:e.scenarioId});try{this.logger.verbose("0ch87b",i),rY(this.initialized,o,this.config,e),this.browserStorage.setInteractionInProgress(!0,p.INTERACTION_TYPE.SIGNIN,e.overrideInteractionInProgress,i)}catch(e){return Promise.reject(e)}let n=this.getAllAccounts();this.eventHandler.emitEvent(eL,i,p.InteractionType.Popup,e);let s=this.getPreGeneratedPkceCodes(i);return this.canUsePlatformBroker(e)?(o.add({isPlatformBrokerRequest:!0}),r=this.acquireTokenNative({...e,correlationId:i},p.ApiId.acquireTokenPopup).then(e=>(o.end({success:!0,isNativeBroker:e.fromPlatformBroker??!1},void 0,e.account),e)).catch(r=>{if(r instanceof rs&&ra(r))return this.platformAuthProvider=void 0,this.createPopupClient(i).acquireToken(e,s);if(r instanceof t.InteractionRequiredAuthError)return this.logger.verbose("0yy5fw",i),this.createPopupClient(i).acquireToken(e,s);throw r})):r=this.createPopupClient(i).acquireToken(e,s),r.then(t=>{let r=n.length<this.getAllAccounts().length;return this.eventHandler.emitEvent(eK,i,p.InteractionType.Popup,t),r&&this.eventHandler.emitEvent(ex,i,p.InteractionType.Popup,t.account),o.end({success:!0,isNativeBroker:t.fromPlatformBroker??!1,accessTokenSize:t.accessToken.length,idTokenSize:t.idToken.length},void 0,t.account),this.verifySsoCapability(e,p.InteractionType.Popup),t}).catch(t=>(this.eventHandler.emitEvent(eH,i,p.InteractionType.Popup,null,t),o.end({success:!1},t,e.account),Promise.reject(t))).finally(async()=>{this.browserStorage.setInteractionInProgress(!1),this.config.system.navigatePopups||await this.preGeneratePkceCodes(i)})}trackStateChangeWithMeasurement(e){let t=this.ssoSilentMeasurement||this.acquireTokenByCodeAsyncMeasurement;t&&("visibilitychange"===e.type?(this.logger.info(`0yzimq ${t.event.name}`,t.event.correlationId),t.increment({visibilityChangeCount:1})):"online"===e.type?(this.logger.info(`1caf53 ${t.event.name}`,t.event.correlationId),t.increment({onlineStatusChangeCount:1})):"offline"===e.type&&(this.logger.info(`0fdyk7 ${t.event.name}`,t.event.correlationId),t.increment({onlineStatusChangeCount:1})))}addStateChangeListeners(e){document.addEventListener("visibilitychange",e),window.addEventListener("online",e),window.addEventListener("offline",e)}removeStateChangeListeners(e){document.removeEventListener("visibilitychange",e),window.removeEventListener("online",e),window.removeEventListener("offline",e)}getCachedSsoCapable(){try{let e=window.localStorage.getItem(ek.SSO_CAPABLE);if(e){let t=JSON.parse(e);if(t&&"boolean"==typeof t.ssoCapable&&t.expiresOn&&Date.now()<t.expiresOn)return t.ssoCapable}}catch{}}verifySsoCapability(e,t){if(!this.config.auth.verifySSO)return;let r=ek.SSO_CAPABLE;if(void 0!==this.getCachedSsoCapable())return void this.logger.verbose(`13poou ${t}`,"");let i=(0,h.createNewGuid)(),o=this.performanceClient.startMeasurement("ssoCapable",i);o.add({"ext.interactionType":t}),this.logger.verbose(`0pbr0i ${t}`,i),setTimeout(()=>{let n={...e,correlationId:i};this.createSilentIframeClient(i).verifySso(n).then(e=>{this.logger.verbose(`1gd1iv ${t} ${e}`,i);try{let t=JSON.stringify({ssoCapable:e,expiresOn:Date.now()+864e5});window.localStorage.setItem(r,t)}catch{this.logger.warning(`18lmoj ${t}`,i)}o.end({fromCache:!1,success:e},void 0)}).catch(e=>{this.logger.warning(`05g83w ${t} ${e.message}`,i);try{window.localStorage.removeItem(r)}catch{this.logger.warning(`0nlf9q ${t}`,i)}o.end({fromCache:!1,success:!1},e)})},0)}async ssoSilent(e){let t,r=this.getRequestCorrelationId(e),i={...e,correlationId:r};this.ssoSilentMeasurement=this.performanceClient.startMeasurement("ssoSilent",r),this.ssoSilentMeasurement?.add({scenarioId:e.scenarioId,ssoCapable:this.getCachedSsoCapable()}),rY(this.initialized,this.ssoSilentMeasurement,this.config,i),this.ssoSilentMeasurement?.increment({visibilityChangeCount:0,onlineStatusChangeCount:0}),this.addStateChangeListeners(this.trackStateChangeWithMeasurement);let o=this.getAllAccounts();return this.logger.verbose("0w1b45",r),this.eventHandler.emitEvent(eL,r,p.InteractionType.Silent,i),this.canUsePlatformBroker(i)?(this.ssoSilentMeasurement?.add({isPlatformBrokerRequest:!0}),t=this.acquireTokenNative(i,p.ApiId.ssoSilent).catch(e=>{if(e instanceof rs&&ra(e))return this.platformAuthProvider=void 0,this.createSilentIframeClient(i.correlationId).acquireToken(i);throw e})):t=this.createSilentIframeClient(i.correlationId).acquireToken(i),t.then(e=>

1{let t=o.length<this.getAllAccounts().length;return this.eventHandler.emitEvent(eK,r,p.InteractionType.Silent,e),t&&this.eventHandler.emitEvent(ex,r,p.InteractionType.Silent,e.account),this.ssoSilentMeasurement?.end({success:!0,isNativeBroker:e.fromPlatformBroker??!1,accessTokenSize:e.accessToken.length,idTokenSize:e.idToken.length},void 0,e.account),e}).catch(t=>{throw this.eventHandler.emitEvent(eH,r,p.InteractionType.Silent,null,t),this.ssoSilentMeasurement?.end({success:!1},t,e.account),t}).finally(()=>{this.removeStateChangeListeners(this.trackStateChangeWithMeasurement)})}async acquireTokenByCode(e){let t=this.getRequestCorrelationId(e);this.logger.trace("0ch6ga",t);let r=this.performanceClient.startMeasurement("acquireTokenByCode",t);rY(this.initialized,r,this.config,e),this.eventHandler.emitEvent(eL,t,p.InteractionType.Silent,e),r.add({scenarioId:e.scenarioId});try{if(e.code&&e.nativeAccountId)throw(0,g.createBrowserAuthError)(m.spaCodeAndNativeAccountIdPresent,t);if(e.code){let i=e.code,o=this.hybridAuthCodeResponses.get(i);return o?(this.logger.verbose("0qgp28",t),r.discard()):(this.logger.verbose("06eh73",t),o=this.acquireTokenByCodeAsync({...e,correlationId:t}).then(e=>(this.eventHandler.emitEvent(eK,t,p.InteractionType.Silent,e),this.hybridAuthCodeResponses.delete(i),r.end({success:!0,isNativeBroker:!1,accessTokenSize:e.accessToken.length,idTokenSize:e.idToken.length},void 0,e.account),e)).catch(e=>{throw this.hybridAuthCodeResponses.delete(i),this.eventHandler.emitEvent(eH,t,p.InteractionType.Silent,null,e),r.end({success:!1},e),e}),this.hybridAuthCodeResponses.set(i,o)),await o}if(e.nativeAccountId)if(this.canUsePlatformBroker(e,e.nativeAccountId)){r.add({isPlatformBrokerRequest:!0});let i=await this.acquireTokenNative({...e,correlationId:t},p.ApiId.acquireTokenByCode,e.nativeAccountId).catch(e=>{throw e instanceof rs&&ra(e)&&(this.platformAuthProvider=void 0),e});return r.end({success:!0,isNativeBroker:i.fromPlatformBroker??!1},void 0,i.account),i}else throw(0,g.createBrowserAuthError)(m.unableToAcquireTokenFromNativePlatform,t);else throw(0,g.createBrowserAuthError)(m.authCodeOrNativeAccountIdRequired,t)}catch(e){throw this.eventHandler.emitEvent(eH,t,p.InteractionType.Silent,null,e),r.end({success:!1},e),e}}async acquireTokenByCodeAsync(e){let t=this.getRequestCorrelationId(e);this.logger.trace("10d9hy",t),this.acquireTokenByCodeAsyncMeasurement=this.performanceClient.startMeasurement(a.AcquireTokenByCodeAsync,t),this.acquireTokenByCodeAsyncMeasurement?.increment({visibilityChangeCount:0,onlineStatusChangeCount:0}),this.addStateChangeListeners(this.trackStateChangeWithMeasurement);let r=this.createSilentAuthCodeClient(t);return await r.acquireToken(e).then(e=>(this.acquireTokenByCodeAsyncMeasurement?.end({success:!0,isNativeBroker:!1,fromCache:e.fromCache}),e)).catch(e=>{throw this.acquireTokenByCodeAsyncMeasurement?.end({success:!1},e),e}).finally(()=>{this.removeStateChangeListeners(this.trackStateChangeWithMeasurement)})}async acquireTokenFromCache(e,t){switch(t){case p.CacheLookupPolicy.Default:case p.CacheLookupPolicy.AccessToken:case p.CacheLookupPolicy.AccessTokenAndRefreshToken:let r=this.createSilentCacheClient(e.correlationId);return Z(r.acquireToken.bind(r),a.SilentCacheClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(e);default:throw(0,d.createClientAuthError)(u.tokenRefreshRequired,e.correlationId)}}async acquireTokenByRefreshToken(e,t){switch(t){case p.CacheLookupPolicy.Default:case p.CacheLookupPolicy.AccessTokenAndRefreshToken:case p.CacheLookupPolicy.RefreshToken:case p.CacheLookupPolicy.RefreshTokenAndNetwork:let r=this.createSilentRefreshClient(e.correlationId);return Z(r.acquireToken.bind(r),a.SilentRefreshClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(e);default:throw(0,d.createClientAuthError)(u.tokenRefreshRequired,e.correlationId)}}async acquireTokenBySilentIframe(e){let t=this.createSilentIframeClient(e.correlationId);return Z(t.acquireToken.bind(t),a.SilentIframeClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(e)}async logoutRedirect(e){let t=this.getRequestCorrelationId(e);return(0,eW.redirectPreflightCheck)(this.initialized,this.config),this.browserStorage.setInteractionInProgress(!0,p.INTERACTION_TYPE.SIGNOUT),this.createRedirectClient(t).logout(e)}logoutPopup(e){try{let t=this.getRequestCorrelationId(e);return(0,eW.preflightCheck)(this.initialized),this.browserStorage.setInteractionInProgress(!0,p.INTERACTION_TYPE.SIGNOUT),this.createPopupClient(t).logout(e).finally(()=>{this.browserStorage.setInteractionInProgress(!1)})}catch(e){return Promise.reject(e)}}async clearCache(e){if(!this.isBrowserEnvironment)return;let t=this.getRequestCorrelationId(e);return this.createSilentCacheClient(t).logout(e)}getAllAccounts(e){var t,r,i,o;return t=this.logger,r=this.browserStorage,i=this.isBrowserEnvironment,o=this.getRequestCorrelationId(),t.verbose("1yd030",o),i?r.getAllAccounts(e,o):[]}getAccount(e){var t,r,i;let o;return t=this.logger,r=this.browserStorage,i=this.getRequestCorrelationId(),t.trace("0u7b90",i),(o=r.getAccountInfoFilteredBy(e,i))?(t.verbose("0btgll",i),o):(t.verbose("0ltaj5",i),null)}setActiveAccount(e){var t,r;t=this.browserStorage,r=this.getRequestCorrelationId(),t.setActiveAccount(e,r)}getActiveAccount(){var e,t;return e=this.browserStorage,t=this.getRequestCorrelationId(),e.getActiveAccount(t)}async hydrateCache(e,t){this.logger.verbose("16jycr",e.correlationId);let r=eh.createAccountEntityFromAccountInfo(e.account,e.cloudGraphHostName,e.msGraphHost);if(await this.browserStorage.setAccount(r,e.correlationId,ed.isKmsi(e.idTokenClaims),p.ApiId.hydrateCache),!e.fromPlatformBroker)return this.browserStorage.hydrateCache(e,t);{this.logger.verbose("1i5atf",e.correlationId);let r=eu.createIdTokenEntity(e.account.homeAccountId,e.account.environment,e.idToken,this.config.auth.clientId,e.tenantId),i=eu.serializeAttributeTokens(t.attributeTokens),o=i?{attribute_tokens:i}:void 0,n=eu.createAccessTokenEntity(e.account.homeAccountId,e.account.environment,e.accessToken,this.config.auth.clientId,e.tenantId,e.scopes.join(" "),e.expiresOn?eg.toSecondsFromDate(e.expiresOn):0,e.extExpiresOn?eg.toSecondsFromDate(e.extExpiresOn):0,l.base64Decode,t.correlationId||"",void 0,e.tokenType,void 0,t.sshKid,o);t.resource&&(n.resource=t.resource);let s=o?await this.browserCrypto.hashString(JSON.stringify(o)):void 0,a=ed.isKmsi(e.idTokenClaims);await this.browserStorage.setIdTokenCredential(r,e.correlationId,a),await this.nativeInternalStorage.setAccessTokenCredential(n,e.correlationId,a,s)}}

1async acquireTokenNative(e,t,r,i){let o=this.getRequestCorrelationId(e);if(this.logger.trace("0b9y3p",o),!this.platformAuthProvider)throw(0,g.createBrowserAuthError)(m.nativeConnectionNotEstablished,o);let n=new rp(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,t,this.performanceClient,this.platformAuthProvider,r||this.getNativeAccountId(e),this.nativeInternalStorage,o,this.tokenBindingKeyManager);return Z(n.acquireToken.bind(n),a.NativeInteractionClientAcquireToken,this.logger,this.performanceClient,o)(e,i)}canUsePlatformBroker(e,t){let r=this.getRequestCorrelationId(e);if(this.logger.trace("1n9lbl",r),!this.platformAuthProvider)return this.logger.trace("0vnu11",r),!1;if(!rU(this.config,this.logger,r,this.platformAuthProvider,e.authenticationScheme))return this.logger.trace("0yoy1g",r),!1;if(e.prompt)switch(e.prompt){case ep.Constants.PromptValue.NONE:case ep.Constants.PromptValue.CONSENT:case ep.Constants.PromptValue.LOGIN:this.logger.trace("0vdv8e",r);break;default:return this.logger.trace(`0pdzw6 ${e.prompt}`,r),!1}return!!t||!!this.getNativeAccountId(e)||(this.logger.trace("16lbtk",r),!1)}getNativeAccountId(e){let t=e.account||this.getAccount({loginHint:e.loginHint,sid:e.sid})||(e.loginHint||e.sid?null:this.getActiveAccount());return t&&t.nativeAccountId||""}createPopupClient(e){return new rD(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider,this.operatingContext.getResponseHandlers()?.waitForPopupResponse,this.tokenBindingKeyM

1anager)}createRedirectClient(e){return new rB(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider,this.tokenBindingKeyManager)}createSilentIframeClient(e){return new rz(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,p.ApiId.ssoSilent,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider,this.operatingContext.getResponseHandlers()?.waitForIframeResponse,this.tokenBindingKeyManager)}createSilentCacheClient(e){return new rg(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,e,this.platformAuthProvider,this.tokenBindingKeyManager)}createSilentRefreshClient(e){return new rJ(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,e,this.platformAuthProvider,this.tokenBindingKeyM

1anager)}createSilentAuthCodeClient(e){return new rQ(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,p.ApiId.acquireTokenByCode,this.performanceClient,e,this.platformAuthProvider,this.tokenBindingKeyManager)}addEventCallback(e,t){return this.eventHandler.addEventCallback(e,t)}removeEventCallback(e){this.eventHandler.removeEventCallback(e)}addPerformanceCallback(e){return(0,eW.blockNonBrowserEnvironment)(),this.performanceClient.addPerformanceCallback(e)}removePerformanceCallback(e){return this.performanceClient.removePerformanceCallback(e)}getLogger(){return this.logger}setLogger(e){this.logger=e}initializeWrapperLibrary(e,t){this.browserStorage.setWrapperMetadata(e,t)}setNavigationClient(e){this.navigationClient=e}getConfiguration(){return this.config}getPerformanceClient(){return this.performanceClient}isBrowserEnv(){return this.isBrowserEnvironment}getRequestCorrelationId(e){return e?.correlationId?e.correlationId:this.isBrowserEnvironment?(0,h.createNewGuid)():""}async loginRedirect(e){let t=this.getRequestCorrelationId(e);return this.logger.verbose("0lz9hf",t),this.acquireTokenRedirect({correlationId:t,...e||p.DEFAULT_REQUEST})}loginPopup(e){let t=this.getRequestCorrelationId(e);return this.logger.verbose("0qw7v5",t),this.acquireTokenPopup({correlationId:t,...e||p.DEFAULT_REQUEST})}async acquireTokenSilent(e){let t=this.getRequestCorrelationId(e),r=this.performanceClient.startMeasurement("acquireTokenSilent",t);r.add({cacheLookupPolicy:e.cacheLookupPolicy,scenarioId:e.scenarioId,ssoCapable:this.getCachedSsoCapable()}),rY(this.initialized,r,this.config,e),this.logger.verbose("0x1c4s",t);let i=e.account||this.getActiveAccount();if(!i)throw(0,g.createBrowserAuthError)(m.noAccountError,t);return this.acquireTokenSilentDeduped(e,i,t).then(i=>(r.end({success:!0,isNativeBroker:i.fromPlatformBroker??!1,fromCache:i.fromCache,accessTokenSize:i.accessToken.length,idTokenSize:i.idToken.length},void 0,i.account),{...i,state:e.state,correlationId:t})).catch(e=>{throw e instanceof et.AuthError&&(e.correlationId=t),r.end({success:!1},e,i),e})}async acquireTokenSilentDeduped(e,t,r){let i=JSON.stringify(em(this.config.auth.clientId,{...e,authority:e.authority||this.config.auth.authority,correlationId:r},t.homeAccountId)),o=this.activeSilentTokenRequests.get(i);if(void 0!==o)return this.logger.verbose("1yq7nb",r),this.performanceClient.addFields({deduped:!0},r),o;{this.logger.verbose("0fcjbk",r),this.performanceClient.addFields({deduped:!1},r);let o=Z(this.acquireTokenSilentAsync.bind(this),a.AcquireTokenSilentAsync,this.logger,this.performanceClient,r)({...e,correlationId:r},t);return this.activeSilentTokenRequests.set(i,o),o.finally(()=>{this.activeSilentTokenRequests.delete(i)})}}async acquireTokenSilentAsync(e,i){let o=t=>this.trackStateChange(e.correlationId,t);this.eventHandler.emitEvent(eL,e.correlationId,p.InteractionType.Silent,e),e.correlationId&&this.performanceClient.incrementFields({visibilityChangeCount:0,onlineStatusChangeCount:0},e.correlationId),this.addStateChangeListeners(o);let n=await Z(t1,a.InitializeSilentRequest,this.logger,this.performanceClient,e.correlationId)(e,i,this.config,this.performanceClient,this.logger),s=e.cacheLookupPolicy||p.CacheLookupPolicy.Default;return this.acquireTokenSilentNoIframe(n,s).catch(async i=>{var o,c;let l,h,d,g;if(o=i,c=s,l=!(o instanceof t.InteractionRequiredAuthError&&o.subError!==r.InteractionRequiredAuthErrorCodes.badToken),h=o.errorCode===p.BrowserConstants.INVALID_GRANT_ERROR||o.errorCode===u.tokenRefreshRequired,d=l&&h||o.errorCode===r.InteractionRequiredAuthErrorCodes.noTokensFound||o.errorCode===r.InteractionRequiredAuthErrorCodes.refreshTokenExpired,g=p.iFrameRenewalPolicies.includes(c),d&&g){let t=`${i.errorCode}${i.subError?`|${i.subError}`:""}`;if(this.performanceClient.addFields({silentRefreshReason:t},e.correlationId),this.activeIframeRequest)if(s===p.CacheLookupPolicy.Skip)return this.logger.warning("1bd4p8",n.correlationId),Z(this.acquireTokenBySilentIframe.bind(this),a.AcquireTokenBySilentIframe,this.logger,this.performanceClient,n.correlationId)(n);else{let[e,t]=this.activeIframeRequest;this.logger.verbose(`1w8fso ${t}`,n.correlationId);let r=this.performanceClient.startMeasurement(a.AwaitConcurrentIframe,n.correlationId);r.add({awaitIframeCorrelationId:t});let o=await e;if(r.end({success:o}),o)return this.logger.verbose(`0ywzzi ${t}`,n.correlationId),this.acquireTokenSilentNoIframe(n,s);throw this.logger.info(`17y14q ${t}`,n.correlationId),i}{let e;return this.activeIframeRequest=[new Promise(t=>{e=t}),n.correlationId],this.logger.verbose("0rh08z",n.correlationId),Z(this.acquireTokenBySilentIframe.bind(this),a.AcquireTokenBySilentIframe,this.logger,this.performanceClient,n.correlationId)(n).then(t=>(e(!0),t)).catch(t=>{throw e(!1),t}).finally(()=>{this.activeIframeRequest=void 0})}}throw i}).then(t=>(this.eventHandler.emitEvent(eK,e.correlationId,p.InteractionType.Silent,t),e.correlationId&&this.performanceClient.addFields({fromCache:t.fromCache,isNativeBroker:t.fromPlatformBroker??!1},e.correlationId),t)).catch(t=>{throw this.eventHandler.emitEvent(eH,e.correlationId,p.InteractionType.Silent,null,t),t}).finally(()=>{this.removeStateChangeListeners(o)})}async acquireTokenSilentNoIframe(e,t){return rU(this.config,this.logger,e.correlationId,this.platformAuthProvider,e.authenticationScheme)&&e.account.nativeAccountId?(this.logger.verbose("0sczo4",e.correlationId),this.performanceClient.addFields({isPlatformBrokerRequest:!0},e.correlationId),this.acquireTokenNative(e,p.ApiId.acquireTokenSilent_silentFlow,e.account.nativeAccountId,t).catch(async t=>{if(t instanceof rs&&ra(t))throw this.logger.verbose("07rkmb",e.correlationId),this.platformAuthProvider=void 0,(0,d.createClientAuthError)(u.tokenRefreshRequired,e.correlationId);throw t})):(this.logger.verbose("0ox81t",e.correlationId),t===p.CacheLookupPolicy.Acce

1ssToken&&this.logger.verbose("0fvwxe",e.correlationId),Z(this.acquireTokenFromCache.bind(this),a.AcquireTokenFromCache,this.logger,this.performanceClient,e.correlationId)(e,t).catch(r=>{if(t===p.CacheLookupPolicy.AccessToken)throw r;return this.eventHandler.emitEvent("msal:acquireTokenFromNetworkStart",e.correlationId,p.InteractionType.Silent,e),Z(this.acquireTokenByRefreshToken.bind(this),a.AcquireTokenByRefreshToken,this.logger,this.performanceClient,e.correlationId)(e,t)}))}async preGeneratePkceCodes(e){return this.logger.verbose("1x6uj6",e),this.pkceCode=await Z(rR,a.GeneratePkceCodes,this.logger,this.performanceClient,e)(this.performanceClient,this.logger,e),Promise.resolve()}getPreGeneratedPkceCodes(e){let t=this.pkceCode?{...this.pkceCode}:void 0;return this.pkceCode=void 0,t?this.logger.verbose("12js1o",e):this.logger.verbose("1oe9ci",e),this.performanceClient.addFields({usePreGeneratedPkce:!!t},e),t}logMultipleInstances(e,t){var r;let i,o,n,s=this.config.auth.clientId;window&&(window.msal=window.msal||{},window.msal.clientIds=window.msal.clientIds||[],window.msal.clientIds.length>0&&this.logger.verbose("1qtz3l",t),window.msal.clientIds.push(s),r=this.logger,o=(i=window.msal?.clientIds||[]).length,(n=i.filter(e=>e===s).length)>1&&r.warning("1e88vg",t),e.add({msalInstanceCount:o,sameClientIdInstanceCount:n}))}}class rZ{static loggerCallback(e,t){switch(e){case e4.LogLevel.Error:console.error(t);return;case e4.LogLevel.Info:console.info(t);return;case e4.LogLevel.Verbose:console.debug(t);return;case e4.LogLevel.Warning:console.warn(t);return;default:console.log(t);return}}constructor(e,t){let r;this.browserEnvironment="u">typeof window,this.config=(0,r_.buildConfiguration)(e,this.browserEnvironment),this.responseHandlers=t;try{r=window[p.BrowserCacheLocation.SessionStorage]}catch(e){}const i=r?.getItem(ek.LOG_LEVEL_CACHE_KEY),o=r?.getItem(ek.LOG_PII_CACHE_KEY)?.toLowerCase(),n="true"===o||"false"!==o&&void 0,s={...this.config.system.loggerOptions},a=i&&Object.keys(e4.LogLevel).includes(i)?e4.LogLevel[i]:void 0;a&&(s.loggerCallback=rZ.loggerCallback,s.logLevel=a),void 0!==n&&(s.piiLoggingEnabled=n),this.logger=new e4.Logger(s,eQ.name,eQ.version),this.available=!1}getConfig(){return this.config}getResponseHandlers(){return this.responseHandlers}getLogger(){return this.logger}isAvailable(){return this.available}isBrowserEnvironment(){return this.browserEnvironment}}class r0 extends rZ{getModuleName(){return r0.MODULE_NAME}getId(){return r0.ID}async initialize(e){return this.available="u">typeof window,this.available}}r0.MODULE_NAME="",r0.ID="StandardOperatingContext";var eg=eg,eh=eh,ed=ed,eu=er,u=u,eg=eg,ed=ed,u=u;et.AuthError;class r1{static async initializeNestedAppAuthBridge(){if(void 0===window)throw Error("window is undefined");if(void 0===window.nestedAppAuthBridge)throw Error("window.nestedAppAuthBridge is undefined");try{window.nestedAppAuthBridge.addEventListener("message",e=>{let t="string"==typeof e?e:e.data,r=JSON.parse(t);r.success?r1.pendingRegistry.resolve(r.requestId,r):r1.pendingRegistry.reject(r.requestId,r.error)});let e=await r1.sendRequestViaRegistry(r1.buildRequest("GetInitContext"));return r1.validateBridgeResultOrThrow(e.initContext)}catch(e){throw window.console.log(e),e}}getTokenInteractive(e){return this.getToken("GetTokenPopup",e)}getTokenSilent(e){return this.getToken("GetToken",e)}async getToken(e,t){let r=await this.sendRequest(e,{tokenParams:t});return{token:r1.validateBridgeResultOrThrow(r.token),account:r1.validateBridgeResultOrThrow(r.account)}}getHostCapabilities(){return this.capabilities??null}getAccountContext(){return this.accountContext?this.accountContext:null}static buildRequest(e,t){return{messageType:"NestedAppAuthRequest",method:e,requestId:(0,h.createNewGuid)(),sendTime:Date.now(),clientLibrary:p.BrowserConstants.MSAL_SKU,clientLibraryVersion:eQ.version,...t}}sendRequest(e,t){return r1.sendRequestViaRegistry(r1.buildRequest(e,t))}static sendRequestViaRegistry(e){let t={requestId:e.requestId,type:e.method};return r1.pendingRegistry.sendAndAwait(t,()=>{window.nestedAppAuthBridge.postMessage(JSON.stringify(e))})}static validateBridgeResultOrThrow(e){if(void 0===e)throw{status:"NESTED_APP_AUTH_UNAVAILABLE"};return e}

1constructor(e,t,r,i){this.sdkName=e,this.sdkVersion=t,this.accountContext=r,this.capabilities=i}static async create(){let e=await r1.initializeNestedAppAuthBridge();return new r1(e.sdkName,e.sdkVersion,e.accountContext,e.capabilities)}}r1.pendingRegistry=new class{constructor(){this.pending=new Map}register(e){return new Promise((t,r)=>{this.pending.set(e,{resolve:t,reject:r})})}resolve(e,t){let r=this.pending.get(e);void 0!==r&&(this.pending.delete(e),r.resolve(t))}reject(e,t){let r=this.pending.get(e);void 0!==r&&(this.pending.delete(e),r.reject(t))}has(e){return this.pending.has(e)}async sendAndAwait(e,t){let r=this.register(e.requestId);try{t(e)}catch(t){this.reject(e.requestId,t)}return r}};class r6 extends rZ{constructor(){super(...arguments),this.bridgeProxy=void 0,this.accountContext=null}getModuleName(){return r6.MODULE_NAME}getId(){return r6.ID}getBridgeProxy(){return this.bridgeProxy}async initialize(e){let t=e||"";try{if("u">typeof window){"function"==typeof window.__initializeNestedAppAuth&&await window.__initializeNestedAppAuth();let e=await r1.create();this.accountContext=e.getAccountContext(),this.bridgeProxy=e,this.available=void 0!==e}}catch(e){this.logger.infoPii(`1mdxyj ${e}`,t)}return this.logger.info(`12jy9a ${this.available}`,t),this.available}}r6.MODULE_NAME="",r6.ID="NestedAppOperatingContext";class r2{constructor(e,t){this.controller=t||new rX(new r0(e,{waitForPopupResponse:this.waitForPopupResponse.bind(this),waitForIframeResponse:this.waitForIframeResponse.bind(this)}))}async waitForPopupResponse(e,t,r){let i=this.controller;return(0,eW.waitForBridgeResponse)(i.getConfiguration().system.popupBridgeTimeout,i.getLogger(),e,i.getPerformanceClient())}async waitForIframeResponse(e,t){let r=this.controller,i=r.getConfiguration();return(0,eW.waitForBridgeResponse)(i.system.iframeBridgeTimeout,r.getLogger(),t,r.getPerformanceClient(),i.experimental)}async initialize(e){return this.controller.initialize(e)}async acquireTokenPopup(e){return this.controller.acquireTokenPopup(e)}acquireTokenRedirect(e){return this.controller.acquireTokenRedirect(e)}acquireTokenSilent(e){return this.controller.acquireTokenSilent(e)}acquireTokenByCode(e){return this.controller.acquireTokenByCode(e)}addEventCallback(e,t){return this.controller.addEventCallback(e,t)}removeEventCallback(e){return this.controller.removeEventCallback(e)}addPerformanceCallback(e){return this.controller.addPerformanceCallback(e)}removePerformanceCallback(e){return this.controller.removePerformanceCallback(e)}getAccount(e){return this.controller.getAccount(e)}getAllAccounts(e){return this.controller.getAllAccounts(e)}handleRedirectPromise(e){return this.controller.handleRedirectPromise(e)}loginPopup(e){return this.controller.loginPopup(e)}loginRedirect(e){return this.controller.loginRedirect(e)}logoutRedirect(e){return this.controller.logoutRedirect(e)}logoutPopup(e){return this.controller.logoutPopup(e)}ssoSilent(e){return this.controller.ssoSilent(e)}getLogger(){return this.controller.getLogger()}setLogger(e){this.controller.setLogger(e)}setActiveAccount(e){this.controller.setActiveAccount(e)}getActiveAccount(){return this.controller.getActiveAccount()}initializeWrapperLibrary(e,t){return this.controller.initializeWrapperLibrary(e,t)}setNavigationClient(e){this.controller.setNavigationClient(e)}getConfiguration(){return this.controller.getConfiguration()}async hydrateCache(e,t){return this.controller.hydrateCache(e,t)}clearCache(e){return this.controller.clearCache(e)}}let r4=null;function r5(){let e=(0,o.getApiScope)();return e?[e]:[]}async function r3(){let e=(null==r4&&(r4=new r2({auth:{clientId:(0,o.getEntraClientId)(),authority:o.ENTRA_AUTHORITY,redirectUri:(0,o.getAuthRedirectUri)()},cache:{cacheLocation:"sessionStorage"}})),r4);return await e.initialize(),e}function r8(e){return{account:e,scopes:r5(),redirectUri:(0,o.getSilentAuthRedirectUri)()}}function r7(e){return e.expiresOn?.getTime()??Date.now()+27e5}e.s(["buildSilentTokenRequest",0,r8,"extractExpiresAtMs",0,r7,"getApiScopes",0,r5,"getBootstrapLoginScopes",0,function(){return["openid"]},"getInitializedMsalInstance",0,r3,"getLoginScopes",0,function(){let e=(0,o.getApiScope)(),t=["openid","profile","offline_access"];return e&&t.push(e),t}],696414);let r9=null;async function ie(){return ii()}function it(){try{window.localStorage.removeItem(i.AUTH_ROLE_STORAGE_KEY)}catch{}ia(i.AUTH_ROLE_COOKIE_NAME),function(){r9=null;try{window.localStorage.removeItem(i.ADMIN_TENANT_OVERRIDE_STORAGE_KEY)}catch{}ia(i.ADMIN_TENANT_OVERRIDE_COOKIE_NAME)}()}function ir(e){let t=io(e);if(t){r9=t;try{window.localStorage.setItem(i.ADMIN_TENANT_OVERRIDE_STORAGE_KEY,t)}catch{}is(i.ADMIN_TENANT_OVERRIDE_COOKIE_NAME,t)}}function ii(){if(r9)return r9;let e=io(function(e){try{return window.localStorage.getItem(e)}catch{return null}}(i.ADMIN_TENANT_OVERRIDE_STORAGE_KEY));if(e)return r9=e,e;let t=io(function(e){if("u"<typeof document)return null;let t=`${e}=`,r=document.cookie.split(";").map(e=>e.trim()).find(e=>e.startsWith(t));return r?decodeURIComponent(r.slice(t.length)):null}(i.ADMIN_TENANT_OVERRIDE_COOKIE_NAME));return t?(r9=t,t):null}function io(e){return e?.trim()||null}function is(e,t){"u"<typeof document||(document.cookie=`${e}=${encodeURIComponent(t)}; Path=/; Max-Age=2592000; SameSite=Lax; Secure`)}function ia(e){"u"<typeof document||(document.cookie=`${e}=; Path=/; Max-Age=0; SameSite=Lax; Secure`)}e.s(["clearClientAuthState",0,it,"getClientAdminTenantOverride",0,ii,"persistAuthEntryClientState",0,function(e){var t=e.role;try{window.localStorage.setItem(i.AUTH_ROLE_STORAGE_KEY,t)}catch{}is(i.AUTH_ROLE_COOKIE_NAME,t);let r=ii(),o=new Set(e.allowedTenants.map(e=>e.tenantId)),n=o.size>0,s=!!(r&&n&&!o.has(r)),a="VAHTI_ADMIN"===e.role&&!!r;r&&(!s||a)||ir(e.defaultTenantId)},"resolveAdminTenantOverrideForRequest",0,ie,"setClientAdminTenantOverride",0,ir],674112);

1let ic="vahti.auth.bootstrap.idToken",il="vahti.auth.bootstrap.expiresAt",ih=[/^\/?register\/(?:start|consent-url|consent-approval-request|activation-seen)(?:$|[/?#])/,/^\/?billing\/(?:summary|checkout-session)(?:$|[/?#])/];function id(){let e=ig();if(!e)return null;let t=e.getItem(ic)?.trim(),r=Number(e.getItem(il)??0);return!t||!Number.isFinite(r)||r<=Date.now()+3e4?(iu(),null):t}function iu(){let e=ig();e&&(e.removeItem(ic),e.removeItem(il))}function ig(){return window.sessionStorage?window.sessionStorage:null}e.s(["clearBootstrapAuthSession",0,iu,"getBootstrapIdToken",0,id,"hasBootstrapAuthSession",0,function(){return null!=id()},"isBootstrapApiPath",0,function(e){let t=e.replace(/^\/v1\//,"");return ih.some(e=>e.test(t))},"persistBootstrapAuthSession",0,function(e,t){let r=ig();if(!r)return;let i=e.trim();if(!i)return;let o=t??function(e){let[,t]=e.split(".");if(!t)return null;try{let e,r,i=JSON.parse((r=(e=t.replace(/-/g,"+").replace(/_/g,"/")).padEnd(4*Math.ceil(e.length/4),"="),window.atob(r))),o=Number(i.exp??0);return Number.isFinite(o)&&o>0?1e3*o:null}catch{return null}}(i);!o||o<=Date.now()||(r.setItem(ic,i),r.setItem(il,String(o)))}],697315);let ip=new Set([...Object.values(r.InteractionRequiredAuthErrorCodes),"account_selection_required","additional_action","basic_action","message_only","protection_policy_required","user_password_expired"]),im=null,iC=null;class iy extends Error{constructor(e="Authentication session expired"){super(e),this.name="AuthSessionExpiredError"}}class iI extends Error{constructor(e="Failed to synchronize authentication session"){super(e),this.name="AuthSessionPersistenceError"}}async function iA(e){return(0,o.isAuthEnabled)()?i_():null}async function iw(e,t,r,i){let o=(0,n.loginStatusFromApiError)(e,t);if(null==o)return;let s=iM(r),a=(0,n.buildLocalizedLoginPath)(s,o,i??iq());await iN(),window.location.assign(a)}async function iT(e){let t=iM(e);await iN(),window.location.assign((0,n.buildLocalizedLoginPath)(t,"session_expired",iq()))}async function iE(e,t){let r=iM(e),i=t??iq();await iN(),window.location.replace((0,n.buildLocalizedLoginPath)(r,"session_expired",i))}async function iv(e){let t=iM(e),r=(0,n.buildLocalizedLoginPath)(t);if(await iN(),!(0,o.isAuthEnabled)())return void window.location.assign(r);try{let e=await r3(),t=e.getActiveAccount()??e.getAllAccounts()[0]??void 0;await e.logoutRedirect({account:t,postLogoutRedirectUri:`${window.location.origin}${r}`})}catch{window.location.assign(r)}}async function ik(){await iN()}function iS(e){return e instanceof iy}async function iR(e,t){var r;let i=await fetch("/auth/session",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({accessToken:e,expiresAt:t}),credentials:"same-origin"});if(!i.ok){let e;try{e=await i.json()}catch{e=void 0}throw console.error("[auth/session] persist failed",{status:i.status,details:e,expiresAtMs:t}),new iI}r=e,im={accessToken:r,expiresAtMs:t}}async function ib(e){if(!(0,o.isAuthEnabled)())throw new iy("Browser authentication session is unavailable");let t=e?.forceRefresh===!0,r=e?.minimumValidityMs??3e4;if(!t&&null!=im&&im.expiresAtMs>Date.now()+r)return im;if(null!=iC){if(!t||iC.forceRefresh)return iC.promise;await iC.promise}let i=iO(t);iC={forceRefresh:t,promise:i};try{return await i}finally{iC?.promise===i&&(iC=null)}}async function iP(){if(!(0,o.isAuthEnabled)())return null;try{return(await ib({forceRefresh:!0})).accessToken}catch(e){if(iS(e))return null;throw console.error("[auth/token] forced refresh after unauthorized response failed",{message:e instanceof Error?e.message:String(e),name:e instanceof Error?e.name:void 0}),e}}async function i_(){return null!=im&&im.expiresAtMs>Date.now()+3e4?im.accessToken:(await ib({minimumValidityMs:3e4})).accessToken}async function iO(e){let r=await r3(),i=r.getActiveAccount()??r.getAllAccounts()[0]??null;if(null==i)throw new iy("No active account found");try{let t=r8(i);if(0===t.scopes.length||0===r5().length)throw new iy("Missing API scopes");let o=await r.acquireTokenSilent({...t,forceRefresh:e}),n=r7(o);return await iR(o.accessToken,n),{accessToken:o.accessToken,expiresAtMs:n}}catch(e){if(console.error("[auth/token] acquireTokenSilent failed",{message:e instanceof Error?e.message:String(e),name:e instanceof Error?e.name:void 0,..."object"==typeof e&&null!=e?{errorCode:e.errorCode,subError:e.subError}:{}}),e instanceof t.InteractionRequiredAuthError||function(e){if(!e||"object"!=typeof e)return!1;let t=e.errorCode?.trim().toLowerCase(),r=e.subError?.trim().toLowerCase();return"InteractionRequiredAuthError"===e.name||null!=t&&ip.has(t)||null!=r&&ip.has(r)}(e))throw new iy("Silent token acquisition requires interaction");throw e}}async function iN(){im=null,it(),iu();try{await fetch("/auth/session",{method:"DELETE",credentials:"same-origin"})}catch{}}function iM(e){return e?(0,o.normalizeLocale)(e):(0,n.resolveLocaleFromPathname)(window.location.pathname)}function iq(){return`${window.location.pathname}${window.location.search}${window.location.hash}`}e.s(["PROACTIVE_TOKEN_REFRESH_BUFFER_MS",0,3e5,"clearAuthSessionForAccountSwitch",0,ik,"getAccessTokenForApiRequest",0,iA,"handleAuthFailureRedirect",0,iw,"handleClientSessionExpired",0,iT,"isAuthSessionExpiredError",0,iS,"logoutFromApp",0,iv,"persistAuthSession",0,iR,"redirectToLoginAfterRefreshFailure",0,iE,"refreshAccessTokenAfterUnauthorized",0,iP,"refreshAuthSession",0,ib],569118)},199185,58678,184756,430462,21951,e=>{"use strict";let t="/auth/callback",r="/auth/silent-callback",i="status",o="returnTo",n=["fi","en"];e.s(["ADMIN_TENANT_OVERRIDE_COOKIE_NAME",0,"vahti_admin_tenant_override","ADMIN_TENANT_OVERRIDE_STORAGE_KEY",0,"vahti.auth.adminTenantOverride","AUTH_CALLBACK_PATH",0,t,"AUTH_ROLE_COOKIE_NAME",0,"vahti_auth_role","AUTH_ROLE_STORAGE_KEY",0,"vahti.auth.role","AUTH_SESSION_COOKIE_NAME",0,"vahti_access_token","AUTH_SESSION_EXPIRES_AT_COOKIE_NAME",0,"vahti_access_token_expires_at","AUTH_SILENT_CALLBACK_PATH",0,r,"LOGIN_RETURN_TO_QUERY_KEY",0,o,"LOGIN_STATUS_QUERY_KEY",0,i,"SUPPORTED_LO

1CALES",0,n],58678);var s=e.i(476738);function a(e){{let t=window.__VAHTI_PUBLIC_RUNTIME_CONFIG__?.[e];if("string"==typeof t)return t.trim()}return void 0!==s.default?s.default.env[e]?.trim()??"":""}function c(e){if(null==e)return"fi";let t=e.toLowerCase();return n.includes(t)?t:"fi"}function l(){return a("NEXT_PUBLIC_ENTRA_CLIENT_ID")}function h(){let e=function(){let e=a("NEXT_PUBLIC_ENTRA_API_APP_ID_URI");if(e)return e;let t=a("NEXT_PUBLIC_ENTRA_API_CLIENT_ID")||l();return t?`api://${t}`:""}();return e?`${e}/access_as_user`:""}function d(e){return`${window.location.origin}${e}`}function u(e,t={}){var r;let i;if("string"!=typeof e)return;let o=e.trim();if(0===o.length||o.includes("\\")||/[\u0000-\u001F\u007F]/.test(o)||o.startsWith("//"))return;if(o.startsWith("/"))try{i=new URL(o,"https://vahti.local")}catch{return}else{let e=function(e){if(e)try{return new URL(e).origin}catch{return}}(t.allowedOrigin);if(!e)return;try{i=new URL(o)}catch{return}if(i.origin!==e)return}if("https:"!==i.protocol&&"http:"!==i.protocol||!i.pathname.startsWith("/")||"/auth"===(r=i.pathname)||r.startsWith("/auth/"))return;let n=`${i.pathname}${i.search}${i.hash}`;if(n.startsWith("/")&&!n.startsWith("//"))return n}e.s(["getPublicRuntimeConfigValue",0,a],184756),e.s(["ENTRA_AUTHORITY",0,"https://login.microsoftonline.com/organizations","getApiScope",0,h,"getAuthRedirectUri",0,function(){return d(t)},"getEntraClientId",0,l,"getSilentAuthRedirectUri",0,function(){return d(r)},"isAuthEnabled",0,function(){return!!(l()&&h())},"normalizeLocale",0,c],199185),e.s(["sanitizeReturnTo",0,u],430462),e.s(["buildLocalizedLoginPath",0,function(e,t,r,n={}){let s=c(e),a=new URLSearchParams;t&&"default"!==t&&a.set(i,t);let l=u(r,{allowedOrigin:n.allowedOrigin});l&&a.set(o,l);let h=a.toString();return h?`/${s}/login?${h}`:`/${s}/login`},"loginStatusFromApiError",0,function(e,t){return 401===e?"session_expired":403===e&&"access_denied"===t?"access_denied":403===e&&"account_disabled"===t?"disabled":null},"resolveLocaleFromPathname",0,function(e){let[t]=e.split("/").filter(Boolean);return t&&n.includes(t)?t:c(void 0)}],21951)},885098,903829,417633,e=>{"use strict";var t=e.i(27530);let r="ui_not_allowed",i="interaction_required",o="consent_required",n="login_required",s="bad_token",a="interrupted_user";e.s(["badToken",0,s,"consentRequired",0,o,"interactionRequired",0,i,"interruptedUser",0,a,"loginRequired",0,n,"nativeAccountUnavailable",0,"native_account_unavailable","noTokensFound",0,"no_tokens_found","refreshTokenExpired",0,"refresh_token_expired","uiNotAllowed",0,r],903829);var c=e.i(903829);let l=[i,o,n,s,r,a],h=["message_only","additional_action","basic_action","user_password_expired","consent_required","bad_token","ui_not_allowed","interrupted_user"];class d extends t.AuthError{constructor(e,t,r,i,o,n,s,a){super(e,t,r,i),Object.setPrototypeOf(this,d.prototype),this.timestamp=o||"",this.traceId=n||"",this.claims=s||"",this.name="InteractionRequiredAuthError",this.errorNo=a}}e.s(["InteractionRequiredAuthError",0,d,"createInteractionRequiredAuthError",0,function(e,t,r){return new d(e,t,r)},"isInteractionRequiredError",0,function(e,t,r){let i=!!e&&l.indexOf(e)>-1,o=!!r&&h.indexOf(r)>-1,n=!!t&&l.some(e=>t.indexOf(e)>-1);return i||n||o}],885098),e.s(["InteractionRequiredAuthErrorCodes",0,c],417633)}]);