1s1ll8-cddbgx.js

js corkairport.com collected 2026-10-02 09:57:17 UTC 303,462 bytes, 1 lines download raw bytes

1(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,773729,448269,380459,e=>{"use strict";var t=e.i(357913),r=e.i(609628),o=e.i(741110),i=e.i(586946),n=e.i(454551),s=e.i(43142),a=e.i(739500),c=e.i(312129),l=e.i(51159),h=e.i(395833),d=e.i(889528),u=e.i(189462),g=e.i(462178),p=e.i(637540),m=e.i(882851),C=e.i(337190),y=e.i(181038),f=e.i(996175),I=e.i(489898),A=e.i(11100),E=e.i(218798),T=e.i(834966),w=e.i(928371),v=e.i(491916),_=e.i(887499),S=e.i(691871);let R="5.18.0";function k(e,t){let r=e.indexOf(t);r>-1&&e.splice(r,1)}e.s(["name",0,"@azure/msal-browser","version",0,R],448269);var O=e.i(548101),P=e.i(487754);let b="invalid",N="ttlExpired",M="decryptFailed",U="expired";class D extends t.CacheManager{constructor(e,t,r,o,i,n,s){super(e,r,o,i,s),this.cacheConfig=t,this.logger=o,this.internalStorage=new A.MemoryStorage,this.browserStorage=L(e,t.cacheLocation,o,i),this.temporaryCacheStorage=L(e,C.BrowserCacheLocation.SessionStorage,o,i),this.cookieStorage=new w.CookieStorage,this.eventHandler=n}async initialize(e){this.performanceClient.addFields({cacheLocation:this.cacheConfig.cacheLocation,cacheRetentionDays:this.cacheConfig.cacheRetentionDays},e),await this.browserStorage.initialize(e),await this.migrateExistingCache(e),this.trackVersionChanges(e)}async migrateExistingCache(e){let t=(0,v.getAccountKeys)(this.browserStorage),r=(0,v.getTokenKeys)(this.clientId,this.browserStorage);this.performanceClient.addFields({preMigrateAcntCount:t.length,preMigrateATCount:r.accessToken.length,preMigrateITCount:r.idToken.length,preMigrateRTCount:r.refreshToken.length},e);for(let t=0;t<y.ACCOUNT_SCHEMA_VERSION;t++){let r=t;await this.removeStaleAccounts(t,r,e)}for(let t=0;t<y.CREDENTIAL_SCHEMA_VERSION;t++){let r=t;await this.migrateIdTokens(t,r,e)}let o=this.getKMSIValues();for(let t=0;t<y.CREDENTIAL_SCHEMA_VERSION;t++)await this.migrateAccessTokens(t,o,e),await this.migrateRefreshTokens(t,o,e);t=(0,v.getAccountKeys)(this.browserStorage),r=(0,v.getTokenKeys)(this.clientId,this.browserStorage),this.performanceClient.addFields({postMigrateAcntCount:t.length,postMigrateATCount:r.accessToken.length,postMigrateITCount:r.idToken.length,postMigrateRTCount:r.refreshToken.length},e)}async updateOldEntry(e,t){let n=this.browserStorage.getItem(e),s=this.validateAndParseJson(n||"");if(!s)return this.browserStorage.removeItem(e),{entry:null,removalReason:b};if(s.lastUpdatedAt){if(r.TimeUtils.isCacheExpired(s.lastUpdatedAt,this.cacheConfig.cacheRetentionDays))return this.browserStorage.removeItem(e),{entry:null,removalReason:N}}else s.lastUpdatedAt=Date.now().toString(),this.setItem(e,JSON.stringify(s),t);let a=(0,O.isEncrypted)(s),c=a?await this.browserStorage.decryptData(e,s,t):s;return c?o.CacheHelpers.isCredentialEntity(c)?(o.CacheHelpers.isAccessTokenEntity(c)||o.CacheHelpers.isRefreshTokenEntity(c))&&c.expiresOn&&r.TimeUtils.isTokenExpired(c.expiresOn,i.Constants.DEFAULT_TOKEN_RENEWAL_OFFSET_SEC)?(this.browserStorage.removeItem(e),{entry:null,removalReason:U}):{entry:c}:(this.browserStorage.removeItem(e),{entry:null,removalReason:b}):(this.browserStorage.removeItem(e),{entry:null,removalReason:a?M:b})}async removeStaleAccounts(e,t,o){let i=(0,v.getAccountKeys)(this.browserStorage,e);if(0!==i.length){for(let e of[...i]){this.performanceClient.incrementFields({oldAcntCount:1},o);let n=this.browserStorage.getItem(e),s=this.validateAndParseJson(n||"");if(!s){this.browserStorage.removeItem(e),this.performanceClient.incrementFields({invalidAcntCount:1},o),k(i,e);continue}if(s.lastUpdatedAt)r.TimeUtils.isCacheExpired(s.lastUpdatedAt,this.cacheConfig.cacheRetentionDays)?(await this.removeAccountOldSchema(e,s,t,o),this.performanceClient.incrementFields({ttlExpiredAcntCount:1},o),k(i,e)):(0,O.isEncrypted)(s)&&(await this.browserStorage.decryptData(e,s,o)||(this.browserStorage.removeItem(e),this.performanceClient.incrementFields({decryptFailedAcntCount:1},o),k(i,e)));else{s.lastUpdatedAt=Date.now().toString(),this.setItem(e,JSON.stringify(s),o);continue}}this.setAccountKeys(i,o,e)}}async removeAccountOldSchema(e,t,r,o){let i=(0,O.isEncrypted)(t)?await this.browserStorage.decryptData(e,t,o):t,n=i?.homeAccountId;if(n){let e=this.getTokenKeys(r);[...e.idToken].filter(e=>

1e.includes(n)).forEach(t=>{this.browserStorage.removeItem(t),k(e.idToken,t)}),[...e.accessToken].filter(e=>e.includes(n)).forEach(t=>{this.browserStorage.removeItem(t),k(e.accessToken,t)}),[...e.refreshToken].filter(e=>e.includes(n)).forEach(t=>{this.browserStorage.removeItem(t),k(e.refreshToken,t)}),this.setTokenKeys(e,o,r)}this.browserStorage.removeItem(e)}getKMSIValues(){let e={};for(let t of this.getTokenKeys().idToken){let r=this.browserStorage.getUserData(t);if(r){let t=JSON.parse(r),o=n.AuthToken.extractTokenClaims(t.secret,E.base64Decode,"");o&&(e[t.homeAccountId]=n.AuthToken.isKmsi(o))}}return e}async migrateIdTokens(e,t,r){let o=(0,v.getTokenKeys)(this.clientId,this.browserStorage,e);if(0===o.idToken.length)return;let i=(0,v.getTokenKeys)(this.clientId,this.browserStorage,y.CREDENTIAL_SCHEMA_VERSION),l=(0,v.getAccountKeys)(this.browserStorage),h=(0,v.getAccountKeys)(this.browserStorage,t);for(let e of[...o.idToken]){this.performanceClient.incrementFields({oldITCount:1},r);let t=await this.updateOldEntry(e,r),d=t.entry;if(!d){switch(t.removalReason){case N:this.performanceClient.incrementFields({ttlExpiredITCount:1},r);break;case M:this.performanceClient.incrementFields({decryptFailedITCount:1},r);break;case b:this.performanceClient.incrementFields({invalidITCount:1},r)}k(o.idToken,e);continue}let u=l.find(e=>e.includes(d.homeAccountId)),g=h.find(e=>e.includes(d.homeAccountId)),p=null;if(u)p=this.getAccount(u,r);else if(g){let e=this.browserStorage.getItem(g),t=this.validateAndParseJson(e||"");p=t&&(0,O.isEncrypted)(t)?await this.browserStorage.decryptData(g,t,r):t}if(!p){this.performanceClient.incrementFields({skipITMigrateCount:1},r);continue}let m=n.AuthToken.extractTokenClaims(d.secret,E.base64Decode,r),C=this.generateCredentialKey(d),y=this.getIdTokenCredential(C,r),f=Object.keys(m).includes("signin_state"),I=y&&Object.keys(n.AuthToken.extractTokenClaims(y.secret,E.base64Decode,r)||{}).includes("signin_state");if(!y||d.lastUpdatedAt>y.lastUpdatedAt&&(f||!I)){let e=p.tenantProfiles||[],t=(0,s.getTenantIdFromIdTokenClaims)(m)||p.realm;if(t&&!e.find(e=>e.tenantId===t)){let r=(0,a.buildTenantProfile)(p.homeAccountId,p.localAccountId,t,p.nativeAccountId,m);e.push(r)}p.tenantProfiles=e;let o=this.generateAccountKey(c.AccountEntityUtils.getAccountInfo(p)),h=n.AuthToken.isKmsi(m);await this.setUserData(o,JSON.stringify(p),r,p.lastUpdatedAt,h),l.includes(o)||l.push(o),await this.setUserData(C,JSON.stringify(d),r,d.lastUpdatedAt,h),this.performanceClient.incrementFields({migratedITCount:1},r),i.idToken.includes(C)||i.idToken.push(C)}}this.setTokenKeys(o,r,e),this.setTokenKeys(i,r),this.setAccountKeys(l,r)}async migrateAccessTokens(e,t,r){let o=(0,v.getTokenKeys)(this.clientId,this.browserStorage,e);if(0===o.accessToken.length)return;let i=(0,v.getTokenKeys)(this.clientId,this.browserStorage,y.CREDENTIAL_SCHEMA_VERSION);for(let e of[...o.accessToken]){this.performanceClient.incrementFields({oldATCount:1},r);let n=await this.updateOldEntry(e,r),s=n.entry;if(!s){switch(n.removalReason){case N:this.performanceClient.incrementFields({ttlExpiredATCount:1},r);break;case M:this.performanceClient.incrementFields({decryptFailedATCount:1},r);break;case U:this.performanceClient.incrementFields({expiredATCount:1},r);break;case b:this.performanceClient.incrementFields({invalidATCount:1},r)}k(o.accessToken,e);continue}if(!(s.homeAccountId in t)){this.performanceClient.incrementFields({skipATMigrateCount:1},r);continue}let a=this.generateCredentialKey(s),c=t[s.homeAccountId];if(i.accessToken.includes(a)){let e=this.getAccessTokenCredential(a,r);(!e||s.lastUpdatedAt>e.lastUpdatedAt)&&(await this.setUserData(a,JSON.stringify(s),r,s.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedATCount:1},r))}else await this.setUserData(a,JSON.stringify(s),r,s.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedATCount:1},r),i.accessToken.push(a)}this.setTokenKeys(o,r,e),this.setTokenKeys(i,r)}async migrateRefreshTokens(e,t,r){let o=(0,v.getTokenKeys)(this.clientId,this.browserStorage,e);if(0===o.refreshToken.length)return;let i=(0,v.getTokenKeys)(this.clientId,this.browserStorage,y.CREDENTIAL_SCHEMA_VERSION);for(let e of[...o.refreshToken]){this.performanceClient.incrementFields({oldRTCount:1},r);let n=await this.updateOldEntry(e,r),s=n.entry;if(!s){switch(n.removalReason){case N:this.performanceClient.incrementFields({ttlExpiredRTCount:1},r);break;case M:this.performanceClient.incrementFields({decryptFailedRTCount:1},r);break;case U:this.performanceClient.incrementFields({expiredRTCount:1},r);break;case b:this.performanceClient.incrementFields({invalidRTCount:1},r)}k(o.refreshToken,e);continue}if(!(s.homeAccountId in t)){this.performanceClient.incrementFields({skipRTMigrateCount:1},r);continue}let a=this.generateCredentialKey(s),c=t[s.homeAccountId];if(i.refreshToken.includes(a)){let e=this.getRefreshTokenCredential(a,r);(!e||s.lastUpdatedAt>e.lastUpdatedAt)&&(await this.setUserData(a,JSON.stringify(s),r,s.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedRTCount:1},r))}else await this.setUserData(a,JSON.stringify(s),r,s.lastUpdatedAt,c),this.performanceClient.incrementFields({migratedRTCount:1},r),i.refreshToken.push(a)}this.setTokenKeys(o,r,e),this.setTokenKeys(i,r)}trackVersionChanges(e){let t=this.browserStorage.getItem(y.VERSION_CACHE_KEY);t&&(this.logger.info(`1wuc87 ${t}`,e),this.performanceClient.addGlobalFields({previousLibraryVersion:t})),t!==R&&this.setItem(y.VERSION_CACHE_KEY,R,e)}validateAndParseJson(e){if(!e)return null;try{let t=JSON.parse(e);return t&&"object"==typeof t?t:null}catch(e){return null}}setItem(e,t,r){let o=Array(y.CREDENTIAL_SCHEMA_VERSION+1).fill(0),i=[];for(let n=0;n<=20;n++)try{if(this.browserStorage.setItem(e,t),n>0)for(let e=0;e<=y.CREDENTIAL_SCHEMA_VERSION;

1e++){let t=o.slice(0,e).reduce((e,t)=>e+t,0);if(t>=n)break;let s=n>t+o[e]?t+o[e]:n;n>t&&o[e]>0&&this.removeAccessTokenKeys(i.slice(t,s),r,e)}break}catch(a){let s=(0,l.createCacheError)(a);if(s.errorCode===h.CacheErrorCodes.cacheQuotaExceeded&&n<20){if(!i.length)for(let r=0;r<=y.CREDENTIAL_SCHEMA_VERSION;r++)if(e===(0,y.getTokenKeysCacheKey)(this.clientId,r)){let e=JSON.parse(t).accessToken;i.push(...e),o[r]=e.length}else{let e=this.getTokenKeys(r).accessToken;i.push(...e),o[r]=e.length}if(i.length<=n)throw s;this.removeAccessToken(i[n],r,!1)}else throw s}}async setUserData(e,t,r,o,i){let n=Array(y.CREDENTIAL_SCHEMA_VERSION+1).fill(0),s=[];for(let a=0;a<=20;a++)try{if(await (0,d.invokeAsync)(this.browserStorage.setUserData.bind(this.browserStorage),u.PerformanceEvents.SetUserData,this.logger,this.performanceClient,r)(e,t,r,o,i),a>0)for(let e=0;e<=y.CREDENTIAL_SCHEMA_VERSION;e++){let t=n.slice(0,e).reduce((e,t)=>e+t,0);if(t>=a)break;let o=a>t+n[e]?t+n[e]:a;a>t&&n[e]>0&&this.removeAccessTokenKeys(s.slice(t,o),r,e)}break}catch(t){let e=(0,l.createCacheError)(t);if(e.errorCode===h.CacheErrorCodes.cacheQuotaExceeded&&a<20){if(!s.length)for(let e=0;e<=y.CREDENTIAL_SCHEMA_VERSION;e++){let t=this.getTokenKeys(e).accessToken;s.push(...t),n[e]=t.length}if(s.length<=a)throw e;this.removeAccessToken(s[a],r,!1)}else throw e}}getAccount(e,r){this.logger.trace("1lfvm6",r);let o=this.browserStorage.getUserData(e);if(!o)return this.removeAccountKeyFromMap(e,r),null;let i=this.validateAndParseJson(o);if(!i||!c.AccountEntityUtils.isAccountEntity(i))return null;let n=t.CacheManager.toObject({},i);return this.performanceClient.addFields({accountCachedBy:(0,C.apiIdToName)(n.cachedByApiId)},r),n}async setAccount(e,t,r,o){this.logger.trace("1bz3wr",t);let i=this.generateAccountKey(c.AccountEntityUtils.getAccountInfo(e)),n=Date.now().toString();e.lastUpdatedAt=n,e.cachedByApiId=o,await this.setUserData(i,JSON.stringify(e),t,n,r),this.addAccountKeyToMap(i,t),this.performanceClient.addFields({kmsi:r},t)}setAccountKeys(e,t,r=y.ACCOUNT_SCHEMA_VERSION){0===e.length?this.removeItem((0,y.getAccountKeysCacheKey)(r)):this.setItem((0,y.getAccountKeysCacheKey)(r),JSON.stringify(e),t)}getAccountKeys(){return(0,v.getAccountKeys)(this.browserStorage)}addAccountKeyToMap(e,t){this.logger.trace("0rb85k",t),this.logger.tracePii(`1l9bdo ${e}`,t);let r=this.getAccountKeys();return -1===r.indexOf(e)?(r.push(e),this.setItem((0,y.getAccountKeysCacheKey)(),JSON.stringify(r),t),this.logger.verbose("0xia39",t),!0):(this.logger.verbose("0161kk",t),!1)}removeAccountKeyFromMap(e,t){this.logger.trace("1jpigu",t),this.logger.tracePii(`1xzspl ${e}`,t);let r=this.getAccountKeys(),o=r.indexOf(e);o>-1?(r.splice(o,1),this.setAccountKeys(r,t)):this.logger.trace("1dytu2",t)}removeAccount(e,t){let r=this.getActiveAccount(t);r?.homeAccountId===e.homeAccountId&&r?.environment===e.environment&&this.setActiveAccount(null,t),super.removeAccount(e,t),this.removeAccountKeyFromMap(this.generateAccountKey(e),t),this.browserStorage.getKeys().forEach(t=>{t.includes(e.homeAccountId)&&t.includes(e.environment)&&this.browserStorage.removeItem(t)})}removeIdToken(e,t){super.removeIdToken(e,t);let r=this.getTokenKeys(),o=r.idToken.indexOf(e);o>-1&&(this.logger.info("05udv9",t),r.idToken.splice(o,1),this.setTokenKeys(r,t))}removeAccessToken(e,t,r=!0){super.removeAccessToken(e,t),r&&this.removeAccessTokenKeys([e],t)}removeAccessTokenKeys(e,t,r=y.CREDENTIAL_SCHEMA_VERSION){this.logger.trace("17o18n",t);let o=this.getTokenKeys(r),i=0;if(e.forEach(e=>{let t=o.accessToken.indexOf(e);t>-1&&(o.accessToken.splice(t,1),i++)}),i>0){this.logger.info(`15i5d5 ${i}`,t),this.setTokenKeys(o,t,r);return}}removeRefreshToken(e,t){super.removeRefreshToken(e,t);let r=this.getTokenKeys(),o=r.refreshToken.indexOf(e);o>-1&&(this.logger.info("1f4fq3",t),r.refreshToken.splice(o,1),this.setTokenKeys(r,t))}getTokenKeys(e=y.CREDENTIAL_SCHEMA_VERSION){return(0,v.getTokenKeys)(this.clientId,this.browserStorage,e)}setTokenKeys(e,t,r=y.CREDENTIAL_SCHEMA_VERSION){0===e.idToken.length&&0===e.accessToken.length&&0===e.refreshToken.length?this.removeItem((0,y.getTokenKeysCacheKey)(this.clientId,r)):this.setItem((0,y.getTokenKeysCacheKey)(this.clientId,r),JSON.stringify(e),t)}getIdTokenCredential(e,t){let r=this.browserStorage.getUserData(e);if(!r)return this.logger.trace("1jukz6",t),this.removeIdToken(e,t),null;let i=this.validateAndParseJson(r);return i&&o.CacheHelpers.isIdTokenEntity(i)?(this.logger.trace("01ju66",t),i):(this.logger.trace("1jukz6",t),null)}async setIdTokenCredential(e,t,r){this.logger.trace("13hjll",t);let o=this.generateCredentialKey(e),i=Date.now().toString();e.lastUpdatedAt=i,await this.setUserData(o,JSON.stringify(e),t,i,r);let n=this.getTokenKeys();-1===n.idToken.indexOf(o)&&(this.logger.info("07jy92",t),n.idToken.push(o),this.setTokenKeys(n,t))}getAccessTokenCredential(e,t){let r=this.browserStorage.getUserData(e);if(!r)return this.logger.trace("0bqvx8",t),this.removeAccessTokenKeys([e],t),null;let i=this.validateAndParseJson(r);return i&&o.CacheHelpers.isAccessTokenEntity(i)?(this.logger.trace("1o81rl",t),i):(this.logger.trace("0bqvx8",t),null)}async setAccessTokenCredential(e,t,r,o){this.logger.trace("1pondb",t);let i=this.generateCredentialKey(e,o),n=Date.now().toString();e.lastUpdatedAt=n,await this.setUserData(i,JSON.stringify(e),t,n,r);let s=this.getTokenKeys(),a=s.accessToken.indexOf(i);-1!==a&&s.accessToken.splice(a,1),this.logger.trace(`1onhey ${-1===a?"added to":"updated in"}`,t),s.accessToken.push(i),this.setTokenKeys(s,t)}getRefreshTokenCredential(e,t){let r=this.browserStorage.getUserData(e);if(!r)return this.logger.trace("0jlizt",t),this.removeRefreshToken(e,t),null;let i=this.validateAndParseJson(r);return i&&o.CacheHelpers.isRefreshTokenEntity(i)?(this.logger.trace("0nokxi",t),i):(this.logger.trace("0jlizt",t),null)}async setRefreshTokenCredential(e,t,r){this.logger.trace("0tcg8d",t);let o=this.generateCredentialKey(e),i=Date.now().toString();e.lastUpdatedAt=i,await this.setUserData(o,JSON.stringify(e),t,i,r);let n=this.getTokenKeys();-1===n.refreshToken.indexOf(o)&&(this.logger.info("0eckjs",t),n.refreshToken.push(o),this.setTokenKeys(n,t))}getAppMetadata(e,t){let r=this.browserStorage.getItem(e);if(!r)return this.logger.trace("1q101h",t),null;let i=this.validateAndParseJson(r);return i&&o.CacheHelpers.isAppMetadataEntity(e,i)?(this.logger.trace("19pvg2",t),i):(this.logger.trace("1q101h",t),null)}setAppMetadata(e,t){this.logger.trace("0cyma6",t);let r=o.CacheHelpers.generateAppMetadataKey(e);this.setItem(r,JSON.stringify(e),t)}getServerTelemetry(e,t){let r=this.browserStorage.getItem(e);if(!r)return this.logger.trace("0jk19c",t),null;let i=this.validateAndParseJson(r);return i&&o.CacheHelpers.isServerTelemetryEntity(e,i)?(this.logger.trace("12jguk",t),i):(this.logger.trace("0jk19c",t),null)}setServerTelemetry(e,t,r){this.logger.trace("1poh61",r),this.setItem(e,JSON.stringify(t),r)}getAuthorityMetadata(e,t){let r=this.internalStorage.getItem(e);if(!r)return this.logger.trace("1r39oe",t),null;let i=this.validateAndParseJson(r);return i&&o.CacheHelpers.isAuthorityMetadataEntity(e,i)?(this.logger.trace("1ohvk3",t),i):null}getAuthorityMetadataKeys(){return this.internalStorage.getKeys().filter(e=>this.isAuthorityMetadata(e))}setWrapperMetadata(e,t){this.internalStorage.setItem(C.InMemoryCacheKeys.WRAPPER_SKU,e),this.internalStorage.setItem(C.InMemoryCacheKeys.WRAPPER_VER,t)}getWrapperMetadata(){return[this.internalStorage.getItem(C.InMemoryCacheKeys.WRAPPER_SKU)||"",this.internalStorage.getItem(C.InMemoryCacheKeys.WRAPPER_VER)||""]}

1setAuthorityMetadata(e,t,r){this.logger.trace("07w8n2",r),this.internalStorage.setItem(e,JSON.stringify(t))}getActiveAccount(e){let t=this.generateCacheKey(i.Constants.PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS),r=this.browserStorage.getItem(t);if(!r)return this.logger.trace("08gw0e",e),null;let o=this.validateAndParseJson(r);return o?(this.logger.trace("1t3ch7",e),this.getAccountInfoFilteredBy({homeAccountId:o.homeAccountId,localAccountId:o.localAccountId,tenantId:o.tenantId},e)):(this.logger.trace("0me1up",e),null)}setActiveAccount(e,t){let r=this.generateCacheKey(i.Constants.PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS);if(e){this.logger.verbose("0rsj80",t);let o={homeAccountId:e.homeAccountId,localAccountId:e.localAccountId,tenantId:e.tenantId};this.setItem(r,JSON.stringify(o),t)}else this.logger.verbose("1bp5z5",t),this.browserStorage.removeItem(r);this.eventHandler.emitEvent(_.EventType.ACTIVE_ACCOUNT_CHANGED,t)}getThrottlingCache(e,t){let r=this.browserStorage.getItem(e);if(!r)return this.logger.trace("1h4wa6",t),null;let i=this.validateAndParseJson(r);return i&&o.CacheHelpers.isThrottlingEntity(e,i)?(this.logger.trace("0of6n8",t),i):(this.logger.trace("1h4wa6",t),null)}setThrottlingCache(e,t,r){this.logger.trace("0wfgh6",r),this.setItem(e,JSON.stringify(t),r)}getTemporaryCache(e,t,r){this.logger.trace("1ordf8",t);let o=r?this.generateCacheKey(e):e;return this.temporaryCacheStorage.getItem(o)}setTemporaryCache(e,t,r){let o=r?this.generateCacheKey(e):e;this.temporaryCacheStorage.setItem(o,t)}removeItem(e){this.browserStorage.removeItem(e)}removeTemporaryItem(e){this.temporaryCacheStorage.removeItem(e)}getKeys(){return this.browserStorage.getKeys()}clear(e){this.removeAllAccounts(e),this.removeAppMetadata(e),this.temporaryCacheStorage.getKeys().forEach(e=>{(-1!==e.indexOf(y.PREFIX)||-1!==e.indexOf(this.clientId))&&this.removeTemporaryItem(e)}),this.browserStorage.getKeys().forEach(e=>{(-1!==e.indexOf(y.PREFIX)||-1!==e.indexOf(this.clientId))&&this.browserStorage.removeItem(e)}),this.internalStorage.clear()}generateCacheKey(e){return g.StringUtils.startsWith(e,y.PREFIX)?e:`${y.PREFIX}.${this.clientId}.${e}`}generateCredentialKey(e,t){let r=e.credentialType===i.Constants.CredentialType.REFRESH_TOKEN&&e.familyId||e.clientId,o=e.tokenType&&e.tokenType.toLowerCase()!==i.Constants.AuthenticationScheme.BEARER.toLowerCase()?e.tokenType.toLowerCase():"",n=[`${y.PREFIX}.${y.CREDENTIAL_SCHEMA_VERSION}`,e.homeAccountId,e.environment,e.credentialType,r,e.realm||"",e.target||"",o];return e.additionalCacheKeyComponents&&Object.keys(e.additionalCacheKeyComponents).length>0&&t&&n.push(t),n.join(y.CACHE_KEY_SEPARATOR).toLowerCase()}generateAccountKey(e){let t=e.homeAccountId.split(".")[1];return[`${y.PREFIX}.${y.ACCOUNT_SCHEMA_VERSION}`,e.homeAccountId,e.environment,t||e.tenantId||""].join(y.CACHE_KEY_SEPARATOR).toLowerCase()}resetRequestCache(e){this.logger.trace("0h0ynu",e),this.removeTemporaryItem(this.generateCacheKey(C.TemporaryCacheKeys.REQUEST_PARAMS)),this.removeTemporaryItem(this.generateCacheKey(C.TemporaryCacheKeys.VERIFIER)),this.removeTemporaryItem(this.generateCacheKey(C.TemporaryCacheKeys.ORIGIN_URI)),this.removeTemporaryItem(this.generateCacheKey(C.TemporaryCacheKeys.URL_HASH)),this.removeTemporaryItem(this.generateCacheKey(C.TemporaryCacheKeys.NATIVE_REQUEST)),this.setInteractionInProgress(!1,void 0)}cacheAuthorizeRequest(e,t,r){this.logger.trace("1tzef5",t);let o=(0,T.base64Encode)(JSON.stringify(e));if(this.setTemporaryCache(C.TemporaryCacheKeys.REQUEST_PARAMS,o,!0),r){let e=(0,T.base64Encode)(r);this.setTemporaryCache(C.TemporaryCacheKeys.VERIFIER,e,!0)}}getCachedRequest(e){let t;this.logger.trace("0uen20",e);let r=this.getTemporaryCache(C.TemporaryCacheKeys.REQUEST_PARAMS,e,!0);if(!r)throw(0,m.createBrowserAuthError)(P.noTokenRequestCacheError,"");let o=this.getTemporaryCache(C.TemporaryCacheKeys.VERIFIER,e,!0),i="";try{t=JSON.parse((0,E.base64Decode)(r)),o&&(i=(0,E.base64Decode)(o))}catch(t){throw this.logger.errorPii(`0ewsey ${r}`,e),this.logger.error(`0tvdic ${t}`,e),(0,m.createBrowserAuthError)(P.unableToParseTokenRequestCacheError,"")}return[t,i]}getCachedNativeRequest(){this.logger.trace("1yxcdm","");let e=this.getTemporaryCache(C.TemporaryCacheKeys.NATIVE_REQUEST,"",!0);if(!e)return this.logger.trace("0mnxd4",""),null;let t=this.validateAndParseJson(e);return t||(this.logger.error("0rrkip",""),null)}isInteractionInProgress(e){let t=this.getInteractionInProgress()?.clientId;return e?t===this.clientId:!!t}getInteractionInProgress(){let e=`${y.PREFIX}.${C.TemporaryCacheKeys.INTERACTION_STATUS_KEY}`,t=this.getTemporaryCache(e,"",!1);try{return t?JSON.parse(t):null}catch(t){return this.logger.error("0jjyys",""),this.removeTemporaryItem(e),this.resetRequestCache(""),(0,S.clearHash)(window),null}}setInteractionInProgress(e,t=C.INTERACTION_TYPE.SIGNIN,r=!1,o=""){let i=`${y.PREFIX}.${C.TemporaryCacheKeys.INTERACTION_STATUS_KEY}`;if(e){let e=this.getInteractionInProgress();if(e)if(r)this.logger.warning(`1pmscr ${e.clientId} ${e.type}`,o),(0,S.cancelPendingBridgeResponse)(this.logger,o),this.removeTemporaryItem(i);else throw(0,m.createBrowserAuthError)(P.interactionInProgress,"");this.setTemporaryCache(i,JSON.stringify({clientId:this.clientId,type:t}),!1)}else e||this.getInteractionInProgress()?.clientId!==this.clientId||this.removeTemporaryItem(i)}async hydrateCache(e,t){let i=o.CacheHelpers.createIdTokenEntity(e.account.homeAccountId,e.account.environment,e.idToken,this.clientId,e.tenantId),s=o.CacheHelpers.createAccessTokenEntity(e.account.homeAccountId,e.account.environment,e.accessToken,this.clientId,e.tenantId,e.scopes.join(" "),e.expiresOn?r.TimeUtils.toSecondsFromDate(e.expiresOn):0,e.extExpiresOn?r.TimeUtils.toSecondsFromDate(e.extExpiresOn):0,E.base64Decode,t.correlationId||"",void 0,e.tokenType,void 0,t.sshKid);

1return t.resource&&(s.resource=t.resource),this.saveCacheRecord({idToken:i,accessToken:s},e.correlationId,n.AuthToken.isKmsi(n.AuthToken.extractTokenClaims(e.idToken,E.base64Decode,e.correlationId)),C.ApiId.hydrateCache)}async saveCacheRecord(e,t,r,o,i){try{await super.saveCacheRecord(e,t,r,o,i)}catch(e){if(e instanceof l.CacheError&&this.performanceClient&&t)try{let e=this.getTokenKeys();this.performanceClient.addFields({cacheRtCount:e.refreshToken.length,cacheIdCount:e.idToken.length,cacheAtCount:e.accessToken.length},t)}catch(e){}throw e}}}function L(e,t,r,o){try{switch(t){case C.BrowserCacheLocation.LocalStorage:return new f.LocalStorage(e,r,o);case C.BrowserCacheLocation.SessionStorage:return new I.SessionStorage;case C.BrowserCacheLocation.MemoryStorage:}}catch(e){r.error(e,"")}return new A.MemoryStorage}e.s(["BrowserCacheManager",0,D,"DEFAULT_BROWSER_CACHE_MANAGER",0,(e,t,r,o)=>new D(e,{cacheLocation:C.BrowserCacheLocation.MemoryStorage,cacheRetentionDays:5},p.DEFAULT_CRYPTO_IMPLEMENTATION,t,r,o)],773729),e.s(["getAccount",0,function(e,t,r,o){t.trace("0u7b90",o);let i=r.getAccountInfoFilteredBy(e,o);return i?(t.verbose("0btgll",o),i):(t.verbose("0ltaj5",o),null)},"getActiveAccount",0,function(e,t){return e.getActiveAccount(t)},"getAllAccounts",0,function(e,t,r,o,i){return e.verbose("1yd030",o),r?t.getAllAccounts(i,o):[]},"setActiveAccount",0,function(e,t,r){t.setActiveAccount(e,r)}],380459)},928371,491916,548101,e=>{"use strict";var t=e.i(683064),r=e.i(635690);let o={Lax:"Lax",None:"None"};e.s(["CookieStorage",0,class{initialize(){return Promise.resolve()}getItem(e){let t=encodeURIComponent(e),r=document.cookie.split(";");for(let e=0;e<r.length;e++){let o=r[e].trim(),i=o.indexOf("=");if((-1===i?o:o.substring(0,i))===t){let e=-1===i?"":o.substring(i+1);try{return decodeURIComponent(e)}catch{return e}}}return""}getUserData(){throw(0,t.createClientAuthError)(r.ClientAuthErrorCodes.methodNotImplemented,"")}setItem(e,t,r,i=!0,n=o.Lax){let s=`${encodeURIComponent(e)}=${encodeURIComponent(t)};path=/;SameSite=${n};`;if(r){var a;let e=(a=r,new Date(new Date().getTime()+864e5*a).toUTCString());s+=`expires=${e};`}(i||n===o.None)&&(s+="Secure;"),document.cookie=s}async setUserData(e,o,i){return Promise.reject((0,t.createClientAuthError)(r.ClientAuthErrorCodes.methodNotImplemented,i))}removeItem(e){this.setItem(e,"",-1)}getKeys(){let e=document.cookie.split(";"),t=[];return e.forEach(e=>{let r=e.trim(),o=r.indexOf("="),i=-1===o?r:r.substring(0,o);try{t.push(decodeURIComponent(i))}catch{}}),t}containsKey(e){return this.getKeys().includes(e)}decryptData(){return Promise.resolve(null)}},"SameSiteOptions",0,o],928371);var i=e.i(181038);e.s(["getAccountKeys",0,function(e,t){let r=e.getItem((0,i.getAccountKeysCacheKey)(t));return r?JSON.parse(r):[]},"getTokenKeys",0,function(e,t,r){let o=t.getItem((0,i.getTokenKeysCacheKey)(e,r));if(o){let e=JSON.parse(o);if(e&&e.hasOwnProperty("idToken")&&e.hasOwnProperty("accessToken")&&e.hasOwnProperty("refreshToken"))return e}return{idToken:[],accessToken:[],refreshToken:[]}}],491916),e.s(["isEncrypted",0,function(e){return e.hasOwnProperty("id")&&e.hasOwnProperty("nonce")&&e.hasOwnProperty("data")}],548101)},996175,489898,e=>{"use strict";var t=e.i(889528),r=e.i(457473),o=e.i(627005),i=e.i(826471),n=e.i(218798),s=e.i(834966),a=e.i(882851),c=e.i(532230),l=e.i(928371),h=e.i(11100),d=e.i(491916),u=e.i(181038),g=e.i(548101),p=e.i(771150),m=e.i(487754);let C="msal.cache.encryption";e.s(["LocalStorage",0,class{constructor(e,t,r){if(!window.localStorage)throw(0,c.createBrowserConfigurationAuthError)(p.storageNotSupported,"");this.memoryStorage=new h.MemoryStorage,this.initialized=!1,this.clientId=e,this.logger=t,this.performanceClient=r,this.broadcast=new BroadcastChannel("msal.broadcast.cache")}async initialize(e){let o=new l.CookieStorage,a=o.getItem(C),c={key:"",id:""};if(a)try{c=JSON.parse(a)}catch(e){}if(c.key&&c.id){let o=(0,t.invoke)(n.base64DecToArr,r.Base64Decode,this.logger,this.performanceClient,e)(c.key);this.encryptionCookie={id:c.id,key:await (0,t.invokeAsync)(i.generateHKDF,r.GenerateHKDF,this.logger,this.performanceClient,e)(o)}}else{let n=(0,i.createNewGuid)(),a=await (0,t.invokeAsync)(i.generateBaseKey,r.GenerateBaseKey,this.logger,this.performanceClient,e)(),c=(0,t.invoke)(s.urlEncodeArr,r.UrlEncodeArr,this.logger,this.performanceClient,e)(new Uint8Array(a));this.encryptionCookie={id:n,key:await (0,t.invokeAsync)(i.generateHKDF,r.GenerateHKDF,this.logger,this.performanceClient,e)(a)},o.setItem(C,JSON.stringify({id:n,key:c}),0,!0,l.SameSiteOptions.None)}await (0,t.invokeAsync)(this.importExistingCache.bind(this),r.ImportExistingCache,this.logger,this.performanceClient,e)(e),this.broadcast.addEventListener("message",t=>{this.updateCache(t,e)}),this.initialized=!0}getItem(e){return window.localStorage.getItem(e)}getUserData(e){if(!this.initialized)throw(0,a.createBrowserAuthError)(m.uninitializedPublicClientApplication,"");return this.memoryStorage.getItem(e)}async decryptData(e,o,n){if(!this.initialized||!this.encryptionCookie)throw(0,a.createBrowserAuthError)(m.uninitializedPublicClientApplication,"");if(o.id!==this.encryptionCookie.id)return this.performanceClient.incrementFields({encryptedCacheExpiredCount:1},n),null;let s=await (0,t.invokeAsync)(i.decrypt,r.Decrypt,this.logger,this.performanceClient,n)(this.encryptionCookie.ke

1y,o.nonce,this.getContext(e),o.data);if(!s)return null;try{return{...JSON.parse(s),lastUpdatedAt:o.lastUpdatedAt}}catch(e){return this.performanceClient.incrementFields({encryptedCacheCorruptionCount:1},n),null}}setItem(e,t){window.localStorage.setItem(e,t)}async setUserData(e,o,n,s,c){if(!this.initialized||!this.encryptionCookie)throw(0,a.createBrowserAuthError)(m.uninitializedPublicClientApplication,"");if(c)this.setItem(e,o);else{let{data:a,nonce:c}=await (0,t.invokeAsync)(i.encrypt,r.Encrypt,this.logger,this.performanceClient,n)(this.encryptionCookie.key,o,this.getContext(e)),l={id:this.encryptionCookie.id,nonce:c,data:a,lastUpdatedAt:s};this.setItem(e,JSON.stringify(l))}this.memoryStorage.setItem(e,o),this.broadcast.postMessage({key:e,value:o,context:this.getContext(e)})}removeItem(e){this.memoryStorage.containsKey(e)&&(this.memoryStorage.removeItem(e),this.broadcast.postMessage({key:e,value:null,context:this.getContext(e)})),window.localStorage.removeItem(e)}getKeys(){return Object.keys(window.localStorage)}containsKey(e){return window.localStorage.hasOwnProperty(e)}clear(){this.memoryStorage.clear(),(0,d.getAccountKeys)(this).forEach(e=>this.removeItem(e));let e=(0,d.getTokenKeys)(this.clientId,this);e.idToken.forEach(e=>this.removeItem(e)),e.accessToken.forEach(e=>this.removeItem(e)),e.refreshToken.forEach(e=>this.removeItem(e)),this.getKeys().forEach(e=>{(e.startsWith(u.PREFIX)||-1!==e.indexOf(this.clientId))&&this.removeItem(e)})}async importExistingCache(e){if(!this.encryptionCookie)return;let t=(0,d.getAccountKeys)(this);(t=await this.importArray(t,e)).length?this.setItem((0,u.getAccountKeysCacheKey)(),JSON.stringify(t)):this.removeItem((0,u.getAccountKeysCacheKey)());let r=(0,d.getTokenKeys)(this.clientId,this);r.idToken=await this.importArray(r.idToken,e),r.accessToken=await this.importArray(r.accessToken,e),r.refreshToken=await this.importArray(r.refreshToken,e),r.idToken.length||r.accessToken.length||r.refreshToken.length?this.setItem((0,u.getTokenKeysCacheKey)(this.clientId),JSON.stringify(r)):this.removeItem((0,u.getTokenKeysCacheKey)(this.clientId))}async getItemFromEncryptedCache(e,o){let n;if(!this.encryptionCookie)return null;let s=this.getItem(e);if(!s)return null;try{n=JSON.parse(s)}catch(e){return null}return(0,g.isEncrypted)(n)?n.id!==this.encryptionCookie.id?(this.performanceClient.incrementFields({encryptedCacheExpiredCount:1},o),null):(this.performanceClient.incrementFields({encryptedCacheCount:1},o),(0,t.invokeAsync)(i.decrypt,r.Decrypt,this.logger,this.performanceClient,o)(this.encryptionCookie.key,n.nonce,this.getContext(e),n.data)):(this.performanceClient.incrementFields({unencryptedCacheCount:1},o),s)}async importArray(e,t){let r=[],o=[];return e.forEach(e=>{let i=this.getItemFromEncryptedCache(e,t).then(t=>{t?(this.memoryStorage.setItem(e,t),r.push(e)):this.removeItem(e)});o.push(i)}),await Promise.all(o),r}getContext(e){let t="";return e.includes(this.clientId)&&(t=this.clientId),t}updateCache(e,t){this.logger.trace("17cxcm",t);let r=this.performanceClient.startMeasurement(o.LocalStorageUpdated);r.add({isBackground:!0});let{key:i,value:n,context:s}=e.data;if(!i){this.logger.error("0e10qr",t),r.end({success:!1,errorCode:"noKey"});return}if(s&&s!==this.clientId){this.logger.trace(`04rtdy ${s}`,t),r.end({success:!1,errorCode:"contextMismatch"});return}n?(this.memoryStorage.setItem(i,n),this.logger.verbose("1vzsgt",t)):(this.memoryStorage.removeItem(i),this.logger.verbose("04ypih",t)),r.end({success:!0})}}],996175),e.s(["SessionStorage",0,class{constructor(){if(!window.sessionStorage)throw(0,c.createBrowserConfigurationAuthError)(p.storageNotSupported,"")}async initialize(){}getItem(e){return window.sessionStorage.getItem(e)}getUserData(e){return this.getItem(e)}setItem(e,t){window.sessionStorage.setItem(e,t)}async setUserData(e,t){this.setItem(e,t)}removeItem(e){window.sessionStorage.removeItem(e)}getKeys(){return Object.keys(window.sessionStorage)}containsKey(e){return window.sessionStorage.hasOwnProperty(e)}decryptData(){return Promise.resolve(null)}}],489898)},826471,e=>{"use strict";var t=e.i(882851),r=e.i(337190),o=e.i(834966),i=e.i(218798),n=e.i(487754);let s="RSASSA-PKCS1-v1_5",a="AES-GCM",c="HKDF",l="SHA-256",h=new Uint8Array([1,0,1]),d="0123456789abcdef",u=new Uint32Array(1),g="encrypt",p="decrypt";async function m(e){let t=new TextEncoder().encode(e);return window.crypto.subtle.digest(l,t)}function C(){return window.crypto.getRandomValues(u),u[0]}async function y(e,t,r){return window.crypto.subtle.generateKey(r,e,t)}async function f(e){return window.crypto.subtle.exportKey(r.KEY_FORMAT_JWK,e)}async function I(e,t,o,i){return window.crypto.subtle.importKey(r.KEY_FORMAT_JWK,e,i,t,o)}async function A(e,t,r){return window.crypto.subtle.sign(r,e,t)}async function E(){let e=await v(),t=(0,o.urlEncodeArr)(new Uint8Array(e));return(0,o.base64Encode)(JSON.stringify({alg:"dir",kty:"oct",k:t}))}async function T(e){let t=JSON.parse((0,i.base64Decode)(e)).k,r=(0,i.base64DecToArr)(t);return window.crypto.subtle.importKey("raw",r,a,!1,[p])}async function w(e,r){let o=r.split(".");if(5!==o.length)throw(0,t.createBrowserAuthError)(n.failedToDecryptEarResponse,"","jwe_length");let s=await T(e).catch(()=>{throw(0,t.createBrowserAuthError)(n.failedToDecryptEarResponse,"","import_key")});try{let e=new TextEncoder().encode(o[0]),t=(0,i.base64DecToArr)(o[2]),r=(0,i.base64DecToArr)(o[3]),n=(0,i.base64DecToArr)(o[4]),c=8*n.byteLength,l=new Uint8Array(r.length+n.length);l.set(r),l.set(n,r.length);

1let h=await window.crypto.subtle.decrypt({name:a,iv:t,tagLength:c,additionalData:e},s,l);return new TextDecoder().decode(h)}catch(e){throw(0,t.createBrowserAuthError)(n.failedToDecryptEarResponse,"","decrypt")}}async function v(){let e=await window.crypto.subtle.generateKey({name:a,length:256},!0,[g,p]);return window.crypto.subtle.exportKey("raw",e)}async function _(e){return window.crypto.subtle.importKey("raw",e,c,!1,["deriveKey"])}async function S(e,t,r){return window.crypto.subtle.deriveKey({name:c,salt:t,hash:l,info:new TextEncoder().encode(r)},e,{name:a,length:256},!1,[g,p])}async function R(e,t,r){let i=new TextEncoder().encode(t),n=window.crypto.getRandomValues(new Uint8Array(16)),s=await S(e,n,r),c=await window.crypto.subtle.encrypt({name:a,iv:new Uint8Array(12)},s,i);return{data:(0,o.urlEncodeArr)(new Uint8Array(c)),nonce:(0,o.urlEncodeArr)(n)}}async function k(e,t,r,o){let n=(0,i.base64DecToArr)(o),s=await S(e,(0,i.base64DecToArr)(t),r),c=await window.crypto.subtle.decrypt({name:a,iv:new Uint8Array(12)},s,n);return new TextDecoder().decode(c)}async function O(e){let t=new Uint8Array(await m(e));return(0,o.urlEncodeArr)(t)}let P={EC:["crv","kty","x","y"],RSA:["e","kty","n"]};async function b(e){let r=function(e){let r=e.kty;if("string"!=typeof r||0===r.length)throw(0,t.createBrowserAuthError)(n.invalidPublicJwk,"","missing_jwk_kty");let o=P[r];if(!o)throw(0,t.createBrowserAuthError)(n.invalidPublicJwk,"","unsupported_jwk_kty");return o.reduce((r,o)=>{let i=e[o];if("string"!=typeof i)throw(0,t.createBrowserAuthError)(n.invalidPublicJwk,"","missing_jwk_member");if(0===i.length)throw(0,t.createBrowserAuthError)(n.invalidPublicJwk,"","empty_jwk_member");return r[o]=i,r},{})}(e);return O(JSON.stringify(r,Object.keys(r).sort()))}e.s(["RSA_KEYGEN_ALGORITHM_OPTIONS",0,{name:s,hash:l,modulusLength:2048,publicExponent:h},"RSA_SIGN_ALGORITHM_OPTIONS",0,{name:s},"computeJwkThumbprint",0,b,"createNewGuid",0,function(){let e=Date.now(),t=1024*C()+(1023&C()),r=new Uint8Array(16),o=Math.trunc(t/0x40000000),i=t&0x40000000-1,n=C();r[0]=e/0x10000000000,r[1]=e/0x100000000,r[2]=e/0x1000000,r[3]=e/65536,r[4]=e/256,r[5]=e,r[6]=112|o>>>8,r[7]=o,r[8]=128|i>>>24,r[9]=i>>>16,r[10]=i>>>8,r[11]=i,r[12]=n>>>24,r[13]=n>>>16,r[14]=n>>>8,r[15]=n;let s="";for(let e=0;e<r.length;e++)s+=d.charAt(r[e]>>>4),s+=d.charAt(15&r[e]),(3===e||5===e||7===e||9===e)&&(s+="-");return s},"decrypt",0,k,"decryptEarResponse",0,w,"encrypt",0,R,"exportJwk",0,f,"generateBaseKey",0,v,"generateEarKey",0,E,"generateHKDF",0,_,"generateKeyPair",0,y,"getRandomValues",0,function(e){return window.crypto.getRandomValues(e)},"hashString",0,O,"importJwk",0,I,"sha256Digest",0,m,"sign",0,A,"validateCryptoAvailable",0,function(e){if(!window)throw(0,t.createBrowserAuthError)(n.nonBrowserEnvironment,"");if(!window.crypto)throw(0,t.createBrowserAuthError)(n.cryptoNonExistent,"");if(!e&&!window.crypto.subtle)throw(0,t.createBrowserAuthError)(n.cryptoNonExistent,"","crypto_subtle_undefined")}])},650468,11100,637540,532494,482222,e=>{"use strict";var t=e.i(683064),r=e.i(635690),o=e.i(341623),i=e.i(457473),n=e.i(834966),s=e.i(218798),a=e.i(826471),c=e.i(882851),l=e.i(337190),h=e.i(487754);class d{constructor(){this.dbName=l.DB_NAME,this.version=l.DB_VERSION,this.tableName=l.DB_TABLE_NAME,this.dbOpen=!1}async open(){return new Promise((e,t)=>{let r=window.indexedDB.open(this.dbName,this.version);r.addEventListener("upgradeneeded",e=>{e.target.result.createObjectStore(this.tableName)}),r.addEventListener("success",t=>{this.db=t.target.result,this.dbOpen=!0,e()}),r.addEventListener("error",()=>t((0,c.createBrowserAuthError)(h.databaseUnavailable,"")))})}closeConnection(){let e=this.db;e&&this.dbOpen&&(e.close(),this.dbOpen=!1)}async validateDbIsOpen(){if(!this.dbOpen)return this.open()}async getItem(e){return await this.validateDbIsOpen(),new Promise((t,r)=>{if(!this.db)return r((0,c.createBrowserAuthError)(h.databaseNotOpen,""));let o=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).get(e);o.addEventListener("success",e=>{this.closeConnection(),t(e.target.result)}),o.addEventListener("error",e=>{this.closeConnection(),r(e)})})}async setItem(e,t){return await this.validateDbIsOpen(),new Promise((r,o)=>{if(!this.db)return o((0,c.createBrowserAuthError)(h.databaseNotOpen,""));let i=this.db.transaction([this.tableName],"readwrite").objectStore(this.tableName).put(t,e);i.addEventListener("success",()=>{this.closeConnection(),r()}),i.addEventListener("error",e=>{this.closeConnection(),o(e)})})}async removeItem(e){return await this.validateDbIsOpen(),new Promise((t,r)=>{if(!this.db)return r((0,c.createBrowserAuthError)(h.databaseNotOpen,""));let o=this.db.transaction([this.tableName],"readwrite").objectStore(this.tableName).delete(e);o.addEventListener("success",()=>{this.closeConnection(),t()}),o.addEventListener("error",e=>{this.closeConnection(),r(e)})})}async getKeys(){return await this.validateDbIsOpen(),new Promise((e,t)=>

1{if(!this.db)return t((0,c.createBrowserAuthError)(h.databaseNotOpen,""));let r=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).getAllKeys();r.addEventListener("success",t=>{this.closeConnection(),e(t.target.result)}),r.addEventListener("error",e=>{this.closeConnection(),t(e)})})}async containsKey(e){return await this.validateDbIsOpen(),new Promise((t,r)=>{if(!this.db)return r((0,c.createBrowserAuthError)(h.databaseNotOpen,""));let o=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).count(e);o.addEventListener("success",e=>{this.closeConnection(),t(1===e.target.result)}),o.addEventListener("error",e=>{this.closeConnection(),r(e)})})}async deleteDatabase(){return this.db&&this.dbOpen&&this.closeConnection(),new Promise((e,t)=>{let r=window.indexedDB.deleteDatabase(l.DB_NAME),o=setTimeout(()=>t(!1),200);r.addEventListener("success",()=>(clearTimeout(o),e(!0))),r.addEventListener("blocked",()=>(clearTimeout(o),e(!0))),r.addEventListener("error",()=>(clearTimeout(o),t(!1)))})}}class u{constructor(){this.cache=new Map}async initialize(){}getItem(e){return this.cache.get(e)||null}getUserData(e){return this.getItem(e)}setItem(e,t){this.cache.set(e,t)}async setUserData(e,t){this.setItem(e,t)}removeItem(e){this.cache.delete(e)}getKeys(){let e=[];return this.cache.forEach((t,r)=>{e.push(r)}),e}containsKey(e){return this.cache.has(e)}clear(){this.cache.clear()}decryptData(){return Promise.resolve(null)}}e.s(["MemoryStorage",0,u],11100);class g{constructor(e){this.inMemoryCache=new u,this.indexedDBCache=new d,this.logger=e}handleDatabaseAccessError(e,t){if(e instanceof c.BrowserAuthError&&e.errorCode===h.databaseUnavailable)this.logger.error("1wx7zz",t);else throw e}async getItem(e,t){let r=this.inMemoryCache.getItem(e);if(!r)try{return this.logger.verbose("0naxpl",t),await this.indexedDBCache.getItem(e)}catch(e){this.handleDatabaseAccessError(e,t)}return r}async setItem(e,t,r){this.inMemoryCache.setItem(e,t);try{await this.indexedDBCache.setItem(e,t)}catch(e){this.handleDatabaseAccessError(e,r)}}async removeItem(e,t){this.inMemoryCache.removeItem(e);try{await this.indexedDBCache.removeItem(e)}catch(e){this.handleDatabaseAccessError(e,t)}}async getKeys(e){let t=this.inMemoryCache.getKeys();if(0===t.length)try{return this.logger.verbose("1iqrbq",e),await this.indexedDBCache.getKeys()}catch(t){this.handleDatabaseAccessError(t,e)}return t}async containsKey(e,t){let r=this.inMemoryCache.containsKey(e);if(!r)try{return this.logger.verbose("03zl2j",t),await this.indexedDBCache.containsKey(e)}catch(e){this.handleDatabaseAccessError(e,t)}return r}clearInMemory(e){this.logger.verbose("03r21p",e),this.inMemoryCache.clear(),this.logger.verbose("0uksk1",e)}async clearPersistent(e){try{this.logger.verbose("0rdqut",e);let t=await this.indexedDBCache.deleteDatabase();return t&&this.logger.verbose("149ouc",e),t}catch(t){return this.handleDatabaseAccessError(t,e),!1}}}class p{constructor(e,t,r){this.logger=e,(0,a.validateCryptoAvailable)(r??!1),this.cache=new g(this.logger),this.performanceClient=t}createNewGuid(){return(0,a.createNewGuid)()}base64Encode(e){return(0,n.base64Encode)(e)}base64Decode(e){return(0,s.base64Decode)(e)}base64UrlEncode(e){return(0,n.urlEncode)(e)}encodeKid(e){return this.base64UrlEncode(JSON.stringify({kid:e}))}async getPublicKeyThumbprint(e){let t=this.performanceClient?.startMeasurement(i.CryptoOptsGetPublicKeyThumbprint,e.correlationId),r=await (0,a.generateKeyPair)(p.EXTRACTABLE,p.POP_KEY_USAGES,a.RSA_KEYGEN_ALGORITHM_OPTIONS),o=await (0,a.exportJwk)(r.publicKey),n=await (0,a.computeJwkThumbprint)(o),s=await (0,a.exportJwk)(r.privateKey),c=await (0,a.importJwk)(s,!1,["sign"],a.RSA_KEYGEN_ALGORITHM_OPTIONS);return await this.cache.setItem(n,{privateKey:c,publicKey:r.publicKey,requestMethod:e.resourceRequestMethod,requestUri:e.resourceRequestUri},e.correlationId),t&&t.end({success:!0}),n}async removeTokenBindingKey(e,o){if(await this.cache.removeItem(e,o),await this.cache.containsKey(e,o))throw(0,t.createClientAuthError)(r.ClientAuthErrorCodes.bindingKeyNotRemoved,o)}async clearKeystore(e){this.cache.clearInMemory(e);

1try{return await this.cache.clearPersistent(e),!0}catch(t){return t instanceof Error?this.logger.error(`1owpn8 ${t.message}`,e):this.logger.error("0yrmwo",e),!1}}async signJwt(e,t,r,s){var l;let d=this.performanceClient?.startMeasurement(i.CryptoOptsSignJwt,s),u=await this.cache.getItem(t,s||"");if(!u)throw(0,c.createBrowserAuthError)(h.cryptoKeyNotFound,s||"");let g=await (0,a.exportJwk)(u.publicKey),p=JSON.stringify(l=g,Object.keys(l).sort()),m=(0,n.urlEncode)(JSON.stringify({kid:t})),C=o.JoseHeader.getShrHeaderString({...r?.header,alg:g.alg,kid:m}),y=(0,n.urlEncode)(C);e.cnf={jwk:JSON.parse(p)};let f=(0,n.urlEncode)(JSON.stringify(e)),I=`${y}.${f}`,A=new TextEncoder().encode(I),E=await (0,a.sign)(u.privateKey,A,a.RSA_SIGN_ALGORITHM_OPTIONS),T=(0,n.urlEncodeArr)(new Uint8Array(E)),w=`${I}.${T}`;return d&&d.end({success:!0}),w}async hashString(e){return(0,a.hashString)(e)}}p.POP_KEY_USAGES=["sign","verify"],p.EXTRACTABLE=!0,e.s(["CryptoOps",0,p],650468);var m=e.i(312267);e.s(["DEFAULT_CRYPTO_IMPLEMENTATION",0,{createNewGuid:()=>{throw(0,t.createClientAuthError)(m.methodNotImplemented,"")},base64Decode:()=>{throw(0,t.createClientAuthError)(m.methodNotImplemented,"")},base64Encode:()=>{throw(0,t.createClientAuthError)(m.methodNotImplemented,"")},base64UrlEncode:()=>{throw(0,t.createClientAuthError)(m.methodNotImplemented,"")},encodeKid:()=>{throw(0,t.createClientAuthError)(m.methodNotImplemented,"")},async getPublicKeyThumbprint(){throw(0,t.createClientAuthError)(m.methodNotImplemented,"")},async removeTokenBindingKey(){throw(0,t.createClientAuthError)(m.methodNotImplemented,"")},async clearKeystore(){throw(0,t.createClientAuthError)(m.methodNotImplemented,"")},async signJwt(){throw(0,t.createClientAuthError)(m.methodNotImplemented,"")},async hashString(){throw(0,t.createClientAuthError)(m.methodNotImplemented,"")}}],637540),e.s(["AuthorityType",0,{Default:0,Adfs:1,Dsts:2,Ciam:3}],532494),e.s(["isOpenIdConfigResponse",0,function(e){return e.hasOwnProperty("authorization_endpoint")&&e.hasOwnProperty("token_endpoint")&&e.hasOwnProperty("issuer")&&e.hasOwnProperty("jwks_uri")}],482222)},218798,487754,e=>{"use strict";var t=e.i(882851);let r="invalid_base64_string";function o(e){let o=e.replace(/-/g,"+").replace(/_/g,"/");switch(o.length%4){case 0:break;case 2:o+="==";break;case 3:o+="=";break;default:throw(0,t.createBrowserAuthError)(r,"")}let i=atob(o);return Uint8Array.from(i,e=>e.codePointAt(0)||0)}e.s(["authCodeOrNativeAccountIdRequired",0,"auth_code_or_nativeAccountId_required","authCodeRequired",0,"auth_code_required","authRequestNotSetError",0,"auth_request_not_set_error","blockIframeReload",0,"block_iframe_reload","blockNestedPopups",0,"block_nested_popups","cryptoKeyNotFound",0,"crypto_key_not_found","cryptoNonExistent",0,"crypto_nonexistent","databaseNotOpen",0,"database_not_open","databaseUnavailable",0,"database_unavailable","earJweEmpty",0,"ear_jwe_empty","earJwkEmpty",0,"ear_jwk_empty","emptyNavigateUri",0,"empty_navigate_uri","emptyResponse",0,"empty_response","emptyWindowError",0,"empty_window_error","failedToBuildHeaders",0,"failed_to_build_headers","failedToDecryptEarResponse",0,"failed_to_decrypt_ear_response","failedToParseHeaders",0,"failed_to_parse_headers","failedToParseResponse",0,"failed_to_parse_response","getRequestFailed",0,"get_request_failed","hashDoesNotContainKnownProperties",0,"hash_does_not_contain_known_properties","hashEmptyError",0,"hash_empty_error","iframeClosedPrematurely",0,"iframe_closed_prematurely","interactionInProgress",0,"interaction_in_progress","interactionInProgressCancelled",0,"interaction_in_progress_cancelled","invalidBase64String",0,r,"invalidCacheType",0,"invalid_cache_type","invali

1dPopTokenRequest",0,"invalid_pop_token_request","invalidPublicJwk",0,"invalid_public_jwk","nativeConnectionNotEstablished",0,"native_connection_not_established","nativeExtensionNotInstalled",0,"native_extension_not_installed","nativeHandshakeTimeout",0,"native_handshake_timeout","nativePromptNotSupported",0,"native_prompt_not_supported","noAccountError",0,"no_account_error","noNetworkConnectivity",0,"no_network_connectivity","noStateInHash",0,"no_state_in_hash","noTokenRequestCacheError",0,"no_token_request_cache_error","nonBrowserEnvironment",0,"non_browser_environment","pkceNotCreated",0,"pkce_not_created","popupRelayUnsupportedFlow",0,"popup_relay_unsupported_flow","popupWindowError",0,"popup_window_error","postRequestFailed",0,"post_request_failed","redirectBridgeEmptyResponse",0,"redirect_bridge_empty_response","redirectInIframe",0,"redirect_in_iframe","silentLogoutUnsupported",0,"silent_logout_unsupported","silentPromptValueError",0,"silent_prompt_value_error","spaCodeAndNativeAccountIdPresent",0,"spa_code_and_nativeAccountId_present","stateInteractionTypeMismatch",0,"state_interaction_type_mismatch","timedOut",0,"timed_out","unableToAcquireTokenFromNativePlatform",0,"unable_to_acquire_token_from_native_platform","unableToLoadToken",0,"unable_to_load_token","unableToParseState",0,"unable_to_parse_state","unableToParseTokenRequestCacheError",0,"unable_to_parse_token_request_cache_error","uninitializedPublicClientApplication",0,"uninitialized_public_client_application","userCancelled",0,"user_cancelled"],487754),e.s(["base64DecToArr",0,o,"base64Decode",0,function(e){return new TextDecoder().decode(o(e))}],218798)},834966,e=>{"use strict";function t(e){return r(new TextEncoder().encode(e))}function r(e){return btoa(Array.from(e,e=>String.fromCodePoint(e)).join(""))}e.s(["base64Encode",0,t,"urlEncode",0,function(e){return encodeURIComponent(t(e).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_"))},"urlEncodeArr",0,function(e){return r(e).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}])},882851,e=>{"use strict";var t=e.i(879439);function r(e){return`See https://aka.ms/msal.js.errors#${e} for details`}class o extends t.AuthError{constructor(e,t,i){super(e,t,r(e),i),Object.setPrototypeOf(this,o.prototype),this.name="BrowserAuthError"}}e.s(["BrowserAuthError",0,o,"createBrowserAuthError",0,function(e,t,r){return new o(e,t,r)},"getDefaultErrorMessage",0,r])},532230,e=>{"use strict";var t=e.i(879439),r=e.i(882851);class o extends t.AuthError{constructor(e,t,r){super(e,t,r),this.name="BrowserConfigurationAuthError",Object.setPrototypeOf(this,o.prototype)}}e.s(["createBrowserConfigurationAuthError",0,function(e,t){return new o(e,t,(0,r.getDefaultErrorMessage)(e))}])},771150,e=>{"use strict";e.s(["inMemRedirectUnavailable",0,"in_mem_redirect_unavailable","storageNotSupported",0,"storage_not_supported","stubbedPublicClientApplicationCalled",0,"stubbed_public_client_application_called"])},887499,e=>{"use strict";e.s(["EventType",0,{INITIALIZE_START:"msal:initializeStart",INITIALIZE_END:"msal:initializeEnd",ACTIVE_ACCOUNT_CHANGED:"msal:activeAccountChanged",LOGIN_SUCCESS:"msal:loginSuccess",ACQUIRE_TOKEN_START:"msal:acquireTokenStart",BROKERED_REQUEST_START:"msal:brokeredRequestStart",ACQUIRE_TOKEN_SUCCESS:"msal:acquireTokenSuccess",BROKERED_REQUEST_SUCCESS:"msal:brokeredRequestSuccess",ACQUIRE_TOKEN_FAILURE:"msal:acquireTokenFailure",BROKERED_REQUEST_FAILURE:"msal:brokeredRequestFailure",ACQUIRE_TOKEN_NETWORK_START:"msal:acquireTokenFromNetworkStart",HANDLE_REDIRECT_START:"msal:handleRedirectStart",HANDLE_REDIRECT_END:"msal:handleRedirectEnd",POPUP_OPENED:"msal:popupOpened",LOGOUT_START:"msal:logoutStart",LOGOUT_SUCCESS:"msal:logoutSuccess",LOGOUT_FAILURE:"msal:logoutFailure",LOGOUT_END:"msal:logoutEnd",RESTORE_FROM_BFCACHE:"msal:restoreFromBFCache",BROKER_CONNECTION_ESTABLISHED:"msal:brokerConnectionEstablished"}])},457473,e=>{"use strict";e.s(["AcquireTokenByCodeAsync",0,"acquireTokenByCodeAsync","AcquireTokenByRefreshToken",0,"acquireTokenByRefreshToken","AcquireTokenBySilentIframe",0,"acquireTokenBySilentIframe","AcquireTokenFromCache",0,"acquireTokenFromCache","AcquireTokenSilentAsync",0,"acquireTokenSilentAsync","AuthClientAcquireToken",0,"authClientAcquireToken","AuthorityFactoryCreateDiscoveredInstance",0,"authorityFactoryCreateDiscoveredInstance","AwaitConcurrentIframe",0,"awaitConcurrentIframe","Base64Decode",0,"base64Decode","CryptoOptsGetPublicKeyThumbprint",0,"cryptoOptsGetPublicKeyThumbprint","CryptoOptsSignJwt",0,"cryptoOptsSignJwt","Decrypt",0,"decrypt","DecryptEarResponse",0,"decryptEarResponse","DeserializeResponse",0,"deserializeResponse","Encrypt",0,"encrypt","GenerateBaseKey",0,"generateBaseKey","GenerateCodeChallengeFromVerifier",0,"generateCodeChallengeFromVerifier","GenerateCodeVerifier",0,"generateCodeVerifier","GenerateEarKey",0,"generateEarKey","GenerateHKDF",0,"generateHKDF","GeneratePkceCodes",0,"generatePkceCodes","GetRandomValues",0,"getRandomValues","GetStandardParams",0,"getStandardParams","HandleCodeResponse",0,"handleCodeResponse","HandleNativeRedirectPromiseMeasurement",0,"handleNativeRedirectPromise","HandleRedirectPromiseMeasurement",0,"handleRedirectPromise","HandleResponseCode",0,"handleResponseCode","HandleResponseEar",0,"handleResponseEar","HandleResponsePlatformBroker",0,"handleResponsePlatformBroker","ImportExistingCache",0,"importExistingCache","InitializeBaseRequest",0,"initializeBaseRequest","InitializeCache",0,"initializeCache","InitializeSilentRequest",0,"initializeSilentRequest","NativeInteractionClientAcquireToken",0,"nativeInteractionClientAcquireToken","NativeInteractionClientAcquireTokenRedirect",0,"nativeInteractionClientAcquireToken","NativeMessageHandlerHandshake",0,"nativeMessageHandlerHandshake","RefreshTokenClientAcquireTokenByRefreshToken",0,"refreshTokenClientAcquireTokenByRefreshToken","RemoveHiddenIframe",0,"removeHiddenIframe","Sha256Digest",0,"sha256Digest","SilentCacheClientAcquireToken",0,"silentCacheClientAcquireToken","SilentFlowClientAcquireCachedToken",0,"silentFlowClientAcquireCachedToken","SilentHandlerInitiateAuthRequest",0,"silentHandlerInitiateAuthRequest","SilentHandlerMonitorIframeForHash",0,"silentHandlerMonitorIframeForHash","SilentIframeClientAcquireToken",0,"silentIframeClientAcquireToken","SilentIframeClientTokenHelper",0,"silentIframeClientTokenHelper","SilentRefreshClientAcquireToken",0,"silentRefreshClientAcquireToken","StandardInteractionClientCreateAuthCodeClient",0,"standardInteractionClientCreateAuthCodeClient","StandardInteractionClientGetClientConfiguration",0,"standardInteractionClientGetClientConfiguration","StandardInteractionClientGetDiscoveredAuthority",0,"standardInteractionClientGetDiscoveredAuthority","StandardInteractionClientInitializeAuthorizationRequest",0,"standardInteractionClientInitializeAuthorizationRequest","UrlEncodeArr",0,"urlEncodeArr","WaitForBridgeLateResponse",0,"waitForBridgeLateResponse"])},627005,e=>{"use strict";e.s(["AcquireTokenByCode",0,"acquireTokenByCode","AcquireTokenPopup",0,"acquireTokenPopup","AcquireTokenPreRedirect",0,"acquireTokenPreRedirect","AcquireTokenRedirect",0,"acquireTokenRedirect","AcquireTokenSilent",0,"acquireTokenSilent","InitializeClientApplication",0,"initializeClientApplication","

1LoadExternalTokens",0,"loadExternalTokens","LocalStorageUpdated",0,"localStorageUpdated","SsoCapable",0,"ssoCapable","SsoSilent",0,"ssoSilent","WaitForBridgeLateResponse",0,"waitForBridgeLateResponse"])},337190,586946,e=>{"use strict";var t,r,o=e.i(499057);e.s(["Constants",0,o],586946);var o=o;let i={861:"acquireTokenRedirect",862:"acquireTokenPopup",863:"ssoSilent",864:"acquireTokenSilent_authCode",865:"handleRedirectPromise",866:"acquireTokenByCode",61:"acquireTokenSilent_silentFlow",961:"logout",962:"logoutPopup",963:"hydrateCache",964:"loadExternalTokens"};(t=r||(r={})).Redirect="redirect",t.Popup="popup",t.Silent="silent",t.None="none";let n={scopes:o.OIDC_DEFAULT_SCOPES},s="msal.db",a=`${s}.keys`,c={Default:0,AccessToken:1,AccessTokenAndRefreshToken:2,RefreshToken:3,RefreshTokenAndNetwork:4,Skip:5},l=[c.Default,c.Skip,c.RefreshTokenAndNetwork];e.s(["ApiId",0,{acquireTokenRedirect:861,acquireTokenPopup:862,ssoSilent:863,acquireTokenSilent_authCode:864,handleRedirectPromise:865,acquireTokenByCode:866,acquireTokenSilent_silentFlow:61,logout:961,logoutPopup:962,hydrateCache:963,loadExternalTokens:964},"BrowserCacheLocation",0,{LocalStorage:"localStorage",SessionStorage:"sessionStorage",MemoryStorage:"memoryStorage"},"BrowserConstants",0,{INVALID_GRANT_ERROR:"invalid_grant",POPUP_WIDTH:483,POPUP_HEIGHT:600,POPUP_NAME_PREFIX:"msal",MSAL_SKU:"msal.js.browser"},"CacheLookupPolicy",0,c,"DB_NAME",0,s,"DB_TABLE_NAME",0,a,"DB_VERSION",0,1,"DEFAULT_REQUEST",0,n,"HTTP_REQUEST_TYPE",0,{GET:"GET",POST:"POST"},"INTERACTION_TYPE",0,{SIGNIN:"signin",SIGNOUT:"signout"},"InMemoryCacheKeys",0,{WRAPPER_SKU:"wrapper.sku",WRAPPER_VER:"wrapper.version"},"InteractionStatus",0,{Startup:"startup",Logout:"logout",AcquireToken:"acquireToken",HandleRedirect:"handleRedirect",None:"none"},"InteractionType",0,r,"KEY_FORMAT_JWK",0,"jwk","NativeExtensionMethod",0,{HandshakeRequest:"Handshake",HandshakeResponse:"HandshakeResponse",GetToken:"GetToken",Response:"Response"},"PlatformAuthConstants",0,{CHANNEL_ID:"53ee284d-920a-4b59-9d30-a60315b26836",PREFERRED_EXTENSION_ID:"ppnbnpeolgkicgegkbkbjmhlideopiji",MATS_TELEMETRY:"MATS",MICROSOFT_ENTRA_BROKERID:"MicrosoftEntra",DOM_API_NAME:"DOM API",PLATFORM_DOM_APIS:"get-token-and-sign-out",PLATFORM_DOM_PROVIDER:"PlatformAuthDOMHandler",PLATFORM_EXTENSION_PROVIDER:"PlatformAuthExtensionHandler"},"TemporaryCacheKeys",0,{ORIGIN_URI:"request.origin",URL_HASH:"urlHash",REQUEST_PARAMS:"request.params",VERIFIER:"code.verifier",INTERACTION_STATUS_KEY:"interaction.status",NATIVE_REQUEST:"request.native"},"WrapperSKU",0,{React:"@azure/msal-react",Angular:"@azure/msal-angular"},"apiIdToName",0,e=>"number"==typeof e&&e in i?i[e]:"unknown","iFrameRenewalPolicies",0,l],337190)},691871,e=>{"use strict";var t=e.i(511955),r=e.i(337507),o=e.i(232992),i=e.i(138385),n=e.i(457473),s=e.i(882851),a=e.i(218798),c=e.i(337190),l=e.i(826471),h=e.i(532230),d=e.i(487754),u=e.i(771150);function g(){let e,t=window.location.hash,r=window.location.search,o=!1,n=!1,c="";if(t&&t.length>1){let r="#"===t.charAt(0)?t.substring(1):t,i=new URLSearchParams(r);i.has("state")&&(o=!0,c=r,e=i)}if(r&&r.length>1){let t="?"===r.charAt(0)?r.substring(1):r,o=new URLSearchParams(t);o.has("state")&&(n=!0,c=t,e=o)}if(o&&n){let o="?"===r.charAt(0)?r.substring(1):r,i="#"===t.charAt(0)?t.substring(1):t;e=new URLSearchParams(c=`${o}${i}`)}if(!c||!e)throw(0,s.createBrowserAuthError)(d.emptyResponse,"");let l=e.get("state");if(!l)throw(0,s.createBrowserAuthError)(d.noStateInHash,"");let{libraryState:h}=i.ProtocolUtils.parseRequestState(a.base64Decode,l,""),{id:u,meta:g}=h;if(!u||!g)throw(0,s.createBrowserAuthError)(d.unableToParseState,"","missing_library_state");return{params:e,payload:c,urlHash:t,urlQuery:r,hasResponseInHash:o,hasResponseInQuery:n,libraryState:{id:u,meta:g}}}function p(){return window.parent!==window}function m(){if(p())return!1;try{let{libraryState:e}=g(),{meta:t}=e;return t.interactionType===c.InteractionType.Popup}catch(e){return!1}}let C=null;async function y(e,t,r,o,c){return new Promise((l,h)=>{let u,g,p;t.verbose("1rf6em",r.correlationId);let m=r.correlationId;o.addFields({redirectBridgeTimeoutMs:e,lateResponseExperimentEnabled:c?.iframeTimeoutTelemetry||!1},m);let{libraryState:y}=i.ProtocolUtils.parseRequestState(a.base64Decode,r.state||"",r.correlationId),f=new BroadcastChannel(y.id),I=!1,A=window.setTimeout(()=>{C=null,c?.iframeTimeoutTelemetry?(g=o.startMeasurement(n.WaitForBridgeLateResponse,m),I=!0,u=window.setTimeout(()=>{g?.end({success:!1}),clearTimeout(u),f.close()},6e4)):f.close(),h((0,s.createBrowserAuthError)(d.timedOut,"","redirect_bridge_timeout"))},e);C={timeoutId:A,channel:f,reject:h},f.onmessage=e=>{p=e.data.payload;let t=e?.data&&"number"==typeof e.data.v?e.data.v:void 0;

1if(I){g?.end({success:!!p}),clearTimeout(u),f.close();return}o.addFields({redirectBridgeMessageVersion:t},m),C=null,clearTimeout(A),f.close(),p?l(p):h((0,s.createBrowserAuthError)(d.redirectBridgeEmptyResponse,m))}})}function f(){if(r.UrlUtils.getDeserializedResponse(window.location.hash)&&p())throw(0,s.createBrowserAuthError)(d.blockIframeReload,"")}function I(e){if(p()&&!e)throw(0,s.createBrowserAuthError)(d.redirectInIframe,"")}function A(){if(m())throw(0,s.createBrowserAuthError)(d.blockNestedPopups,"")}function E(){if("u"<typeof window)throw(0,s.createBrowserAuthError)(d.nonBrowserEnvironment,"")}function T(e){if(!e)throw(0,s.createBrowserAuthError)(d.uninitializedPublicClientApplication,"")}function w(e){E(),f(),A(),T(e)}let v=t.RequestParameterBuilder.buildMergedClaims;e.s(["blockAPICallsBeforeInitialize",0,T,"blockAcquireTokenInPopups",0,A,"blockNonBrowserEnvironment",0,E,"blockRedirectInIframe",0,I,"blockReloadInHiddenIframes",0,f,"buildMergedClaims",0,v,"cancelPendingBridgeResponse",0,function(e,t){C&&(e.verbose("18y01k",t),clearTimeout(C.timeoutId),C.channel.close(),C.reject((0,s.createBrowserAuthError)(d.interactionInProgressCancelled,"")),C=null)},"clearAuthResponseFromUrl",0,function(e){"function"==typeof e.history?.replaceState&&e.history.replaceState(null,"",`${e.location.origin}${e.location.pathname}`)},"clearHash",0,function(e){e.location.hash="","function"==typeof e.history.replaceState&&e.history.replaceState(null,"",`${e.location.origin}${e.location.pathname}${e.location.search}`)},"createGuid",0,function(){return(0,l.createNewGuid)()},"getCurrentUri",0,function(){return"u">typeof window&&window.location?window.location.href.split("?")[0].split("#")[0]:""},"getHomepage",0,function(e){let t=new o.UrlString(window.location.href,e||"").getUrlComponents();return`${t.Protocol}//${t.HostNameAndPort}/`},"isInIframe",0,p,"isInPopup",0,m,"parseAuthResponseFromUrl",0,g,"preconnect",0,function(e){let t=document.createElement("link");t.rel="preconnect",t.href=new URL(e).origin,t.crossOrigin="anonymous",document.head.appendChild(t),window.setTimeout(()=>{try{document.head.removeChild(t)}catch{}},1e4)},"preflightCheck",0,w,"redirectPreflightCheck",0,function(e,t){if(w(e),I(t.system.allowRedirectInIframe),t.cache.cacheLocation===c.BrowserCacheLocation.MemoryStorage)throw(0,h.createBrowserConfigurationAuthError)(u.inMemRedirectUnavailable,"")},"replaceHash",0,function(e){let t=e.split("#");t.shift(),window.location.hash=t.length>0?t.join("#"):""},"waitForBridgeResponse",0,y])},113239,628896,e=>{"use strict";var t=e.i(532494),r=e.i(482222),o=e.i(232992),i=e.i(683064),n=e.i(499057),s=e.i(155325),a=e.i(693933),c=e.i(953134),l=e.i(44732),h=e.i(146117),d=e.i(334538),u=e.i(792138),g=e.i(879439),p=e.i(490284),m=e.i(889528),C=e.i(879239),y=e.i(312267),f=e.i(425025);class I{constructor(e,t,r,o,i,n,s,a){this.canonicalAuthority=e,this._canonicalAuthority.validateAsUri(),this.networkInterface=t,this.cacheManager=r,this.authorityOptions=o,this.regionDiscoveryMetadata={region_used:void 0,region_source:void 0,region_outcome:void 0},this.logger=i,this.performanceClient=s,this.correlationId=n,this.managedIdentity=a||!1,this.regionDiscovery=new u.RegionDiscovery(t,this.logger,this.performanceClient,this.correlationId)}getAuthorityType(e){if(e.HostNameAndPort.endsWith(n.CIAM_AUTH_URL))return t.AuthorityType.Ciam;let r=e.PathSegments;if(r.length)switch(r[0].toLowerCase()){case n.ADFS:return t.AuthorityType.Adfs;case n.DSTS:return t.AuthorityType.Dsts}return t.AuthorityType.Default}get authorityType(){return this.getAuthorityType(this.canonicalAuthorityUrlComponents)}get protocolMode(){return this.authorityOptions.protocolMode}get options(){return this.authorityOptions}get canonicalAuthority(){return this._canonicalAuthority.urlString}set canonicalAuthority(e){this._canonicalAuthority=new o.UrlString(e,this.correlationId),this._canonicalAuthority.validateAsUri(),this._canonicalAuthorityUrlComponents=null}get canonicalAuthorityUrlComponents(){return this._canonicalAuthorityUrlComponents||(this._canonicalAuthorityUrlComponents=this._canonicalAuthority.getUrlComponents()),this._canonicalAuthorityUrlComponents}get hostnameAndPort(){return this.canonicalAuthorityUrlComponents.HostNameAndPort.toLowerCase()}get tenant(){return this.canonicalAuthorityUrlComponents.PathSegments[0]}get authorizationEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.authorization_endpoint);throw(0,i.createClientAuthError)(y.endpointResolutionError,this.correlationId)}get tokenEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.token_endpoint);throw(0,i.createClientAuthError)(y.endpointResolutionError,this.correlationId)}get deviceCodeEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.token_endpoint.replace("/token","/devicecode"));throw(0,i.createClientAuthError)(y.endpointResolutionError,this.correlationId)}get endSessionEndpoint(){if(this.discoveryComplete()){if(!this.metadata.end_session_endpoint)throw(0,i.createClientAuthError)(y.endSessionEndpointNotSupported,this.correlationId);return this.replacePath(this.metadata.end_session_endpoint)}throw(0,i.createClientAuthError)(y.endpointResolutionError,this.correlationId)}get selfSignedJwtAudience(){if(this.discoveryComplete())return this.replacePath(this.metadata.issuer);throw(0,i.createClientAuthError)(y.endpointResolutionError,this.correlationId)}get jwksUri(){if(this.discoveryComplete())return this.replacePath(this.metadata.jwks_uri);throw(0,i.createClientAuthError)(y.endpointResolutionError,this.correlationId)}canReplaceTenant(e){return 1===e.PathSegments.length&&!I.reservedTenantDomains.has(e.PathSegments[0])&&this.getAuthorityType(e)===t.AuthorityType.Default&&this.protocolMode!==c.ProtocolMode.OIDC}replaceTenant(e){return e.replace(/{tenant}|{tenantid}/g,this.tenant)}replacePath(e){let t=e,r=new o.UrlString(this.metadata.canonical_authority,this.correlationId).getUrlComponents(),i=r.PathSegments;

1return this.canonicalAuthorityUrlComponents.PathSegments.forEach((e,n)=>{let s=i[n];if(0===n&&this.canReplaceTenant(r)){let e=new o.UrlString(this.metadata.authorization_endpoint,this.correlationId).getUrlComponents().PathSegments[0];s!==e&&(this.logger.verbose(`1q3g2x ${s} ${e}`,this.correlationId),s=e)}e!==s&&(t=t.replace(`/${s}/`,`/${e}/`))}),this.replaceTenant(t)}get defaultOpenIdConfigurationEndpoint(){let e=this.hostnameAndPort;return this.canonicalAuthority.endsWith("v2.0/")||this.authorityType===t.AuthorityType.Adfs||this.protocolMode===c.ProtocolMode.OIDC&&!this.isAliasOfKnownMicrosoftAuthority(e)?`${this.canonicalAuthority}.well-known/openid-configuration`:`${this.canonicalAuthority}v2.0/.well-known/openid-configuration`}discoveryComplete(){return!!this.metadata}async resolveEndpointsAsync(){let e=this.getCurrentMetadataEntity(),t=await (0,m.invokeAsync)(this.updateCloudDiscoveryMetadata.bind(this),p.AuthorityUpdateCloudDiscoveryMetadata,this.logger,this.performanceClient,this.correlationId)(e);this.canonicalAuthority=this.canonicalAuthority.replace(this.hostnameAndPort,e.preferred_network);let r=await (0,m.invokeAsync)(this.updateEndpointMetadata.bind(this),p.AuthorityUpdateEndpointMetadata,this.logger,this.performanceClient,this.correlationId)(e);this.updateCachedMetadata(e,t,{source:r}),this.performanceClient?.addFields({cloudDiscoverySource:t,authorityEndpointSource:r},this.correlationId)}getCurrentMetadataEntity(){let e=this.cacheManager.getAuthorityMetadataByAlias(this.hostnameAndPort,this.correlationId);return e||(e={aliases:[],preferred_cache:this.hostnameAndPort,preferred_network:this.hostnameAndPort,canonical_authority:this.canonicalAuthority,authorization_endpoint:"",token_endpoint:"",end_session_endpoint:"",issuer:"",aliasesFromNetwork:!1,endpointsFromNetwork:!1,expiresAt:(0,C.generateAuthorityMetadataExpiresAt)(),jwks_uri:""}),e}updateCachedMetadata(e,t,r){t!==n.AuthorityMetadataSource.CACHE&&r?.source!==n.AuthorityMetadataSource.CACHE&&(e.expiresAt=(0,C.generateAuthorityMetadataExpiresAt)(),e.canonical_authority=this.canonicalAuthority);let o=this.cacheManager.generateAuthorityMetadataCacheKey(e.preferred_cache,this.correlationId);this.cacheManager.setAuthorityMetadata(o,e,this.correlationId),this.metadata=e}async updateEndpointMetadata(e){let t=this.updateEndpointMetadataFromLocalSources(e);if(t){if(t.source===n.AuthorityMetadataSource.HARDCODED_VALUES&&this.authorityOptions.azureRegionConfiguration?.azureRegion&&t.metadata){let r=await (0,m.invokeAsync)(this.updateMetadataWithRegionalInformation.bind(this),p.AuthorityUpdateMetadataWithRegionalInformation,this.logger,this.performanceClient,this.correlationId)(t.metadata);(0,C.updateAuthorityEndpointMetadata)(e,r,!1),e.canonical_authority=this.canonicalAuthority}return t.source}let r=await (0,m.invokeAsync)(this.getEndpointMetadataFromNetwork.bind(this),p.AuthorityGetEndpointMetadataFromNetwork,this.logger,this.performanceClient,this.correlationId)();if(r)return this.validateIssuer(r.issuer),this.authorityOptions.azureRegionConfiguration?.azureRegion&&(r=await (0,m.invokeAsync)(this.updateMetadataWithRegionalInformation.bind(this),p.AuthorityUpdateMetadataWithRegionalInformation,this.logger,this.performanceClient,this.correlationId)(r)),(0,C.updateAuthorityEndpointMetadata)(e,r,!0),n.AuthorityMetadataSource.NETWORK;throw(0,i.createClientAuthError)(y.openIdConfigError,this.defaultOpenIdConfigurationEndpoint,this.correlationId)}updateEndpointMetadataFromLocalSources(e){this.logger.verbose("1fi0kc",this.correlationId);let t=this.getEndpointMetadataFromConfig();if(t)return this.logger.verbose("06t0uj",this.correlationId),(0,C.updateAuthorityEndpointMetadata)(e,t,!1),{source:n.AuthorityMetadataSource.CONFIG};this.logger.verbose("151k0p",this.correlationId);let r=this.getEndpointMetadataFromHardcodedValues();if(r)return(0,C.updateAuthorityEndpointMetadata)(e,r,!1),{source:n.AuthorityMetadataSource.HARDCODED_VALUES,metadata:r};this.logger.verbose("1imop5",this.correlationId);let o=(0,C.isAuthorityMetadataExpired)(e);return this.isAuthoritySameType(e)&&e.endpointsFromNetwork&&!o?(this.logger.verbose("16uq31",""),{source:n.AuthorityMetadataSource.CACHE}):(o&&this.logger.verbose("0uoibc",""),null)}isAuthoritySameType(e){return new o.UrlString(e.canonical_authority,this.correlationId).getUrlComponents().PathSegments.length===this.canonicalAuthorityUrlComponents.PathSegments.length}getEndpointMetadataFromConfig(){if(this.authorityOptions.authorityMetadata)try{return JSON.parse(this.authorityOptions.authorityMetadata)}

1catch(e){throw(0,a.createClientConfigurationError)(f.invalidAuthorityMetadata,this.correlationId)}return null}async getEndpointMetadataFromNetwork(){let e=this.defaultOpenIdConfigurationEndpoint;this.logger.verbose(`1y65x6 ${e}`,this.correlationId);try{let t=await this.networkInterface.sendGetRequestAsync(e,{});if((0,r.isOpenIdConfigResponse)(t.body))return t.body;return this.logger.verbose("1koyv8",this.correlationId),null}catch(e){return this.logger.verbose(`0a9wik ${e}`,this.correlationId),null}}getEndpointMetadataFromHardcodedValues(){return this.hostnameAndPort in s.EndpointMetadata?s.EndpointMetadata[this.hostnameAndPort]:null}async updateMetadataWithRegionalInformation(e){let t=this.authorityOptions.azureRegionConfiguration?.azureRegion;if(t){if(t!==n.AZURE_REGION_AUTO_DISCOVER_FLAG)return this.regionDiscoveryMetadata.region_outcome=n.RegionDiscoveryOutcomes.CONFIGURED_NO_AUTO_DETECTION,this.regionDiscoveryMetadata.region_used=t,I.replaceWithRegionalInformation(e,t,this.correlationId);let r=await (0,m.invokeAsync)(this.regionDiscovery.detectRegion.bind(this.regionDiscovery),p.RegionDiscoveryDetectRegion,this.logger,this.performanceClient,this.correlationId)(this.authorityOptions.azureRegionConfiguration?.environmentRegion,this.regionDiscoveryMetadata);if(r)return this.regionDiscoveryMetadata.region_outcome=n.RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_SUCCESSFUL,this.regionDiscoveryMetadata.region_used=r,I.replaceWithRegionalInformation(e,r,this.correlationId);this.regionDiscoveryMetadata.region_outcome=n.RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_FAILED}return e}async updateCloudDiscoveryMetadata(e){let t=this.updateCloudDiscoveryMetadataFromLocalSources(e);if(t)return t;let r=await (0,m.invokeAsync)(this.getCloudDiscoveryMetadataFromNetwork.bind(this),p.AuthorityGetCloudDiscoveryMetadataFromNetwork,this.logger,this.performanceClient,this.correlationId)();if(r)return(0,C.updateCloudDiscoveryMetadata)(e,r,!0),n.AuthorityMetadataSource.NETWORK;throw(0,a.createClientConfigurationError)(f.untrustedAuthority,this.correlationId)}updateCloudDiscoveryMetadataFromLocalSources(e){this.logger.verbose("1tpqlr",this.correlationId),this.logger.verbosePii(`1fy7uz ${this.authorityOptions.knownAuthorities||n.NOT_APPLICABLE}`,this.correlationId),this.logger.verbosePii(`08zabj ${this.authorityOptions.authorityMetadata||n.NOT_APPLICABLE}`,this.correlationId),this.logger.verbosePii(`1o1kv3 ${e.canonical_authority||n.NOT_APPLICABLE}`,this.correlationId);let t=this.getCloudDiscoveryMetadataFromConfig();if(t)return this.logger.verbose("1nakio",this.correlationId),(0,C.updateCloudDiscoveryMetadata)(e,t,!1),n.AuthorityMetadataSource.CONFIG;this.logger.verbose("1x74aj",this.correlationId);let r=(0,s.getCloudDiscoveryMetadataFromHardcodedValues)(this.hostnameAndPort);if(r)return this.logger.verbose("0by47c",this.correlationId),(0,C.updateCloudDiscoveryMetadata)(e,r,!1),n.AuthorityMetadataSource.HARDCODED_VALUES;this.logger.verbose("0r2fzy",this.correlationId);let o=(0,C.isAuthorityMetadataExpired)(e);return this.isAuthoritySameType(e)&&e.aliasesFromNetwork&&!o?(this.logger.verbose("1uffgh",""),n.AuthorityMetadataSource.CACHE):(o&&this.logger.verbose("0uoibc",""),null)}getCloudDiscoveryMetadataFromConfig(){if(this.authorityType===t.AuthorityType.Ciam)return this.logger.verbose("04y84h",this.correlationId),I.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);if(this.authorityOptions.cloudDiscoveryMetadata){this.logger.verbose("0gszr3",this.correlationId);try{this.logger.verbose("1iifkx",this.correlationId);let e=JSON.parse(this.authorityOptions.cloudDiscoveryMetadata),t=(0,s.getCloudDiscoveryMetadataFromNetworkResponse)(e.metadata,this.hostnameAndPort);if(this.logger.verbose("0q67e3",""),t)return this.logger.verbose("0hzfao",this.correlationId),t;this.logger.verbose("1ajz3u",this.correlationId)}catch(e){throw this.logger.verbose("1wq5tu",this.correlationId),(0,a.createClientConfigurationError)(f.invalidCloudDiscoveryMetadata,this.correlationId)}}return this.isInKnownAuthorities(this.hostnameAndPort)?(this.logger.verbose("0mt9al",this.correlationId),I.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort)):null}async getCloudDiscoveryMetadataFromNetwork(){let e=`${n.AAD_INSTANCE_DISCOVERY_ENDPT}${this.canonicalAuthority}oauth2/v2.0/authorize`,t=null;try{let r,o,i=await this.networkInterface.sendGetRequestAsync(e,{});if((0,h.isCloudInstanceDiscoveryResponse)(i.body))o=(r=i.body).metadata,this.logger.verbosePii(`1vglyt ${r.tenant_discovery_endpoint}`,this.correlationId);else{if(!(0,d.isCloudInstanceDiscoveryErrorResponse)(i.body))return this.logger.error("0768g0",this.correlationId),null;if(this.logger.warning(`062uto ${i.status}`,this.correlationId),(r=i.body).error===n.INVALID_INSTANCE)return this.logger.error("1x90tm",this.correlationId),null;this.logger.warning(`0wchdm ${r.error}`,this.correlationId),this.logger.warning(`1s5mpv ${r.error_description}`,this.correlationId),this.logger.warning("1yhqpw",this.correlationId),o=[]}this.logger.verbose("1lrobr",this.correlationId),t=(0,s.getCloudDiscoveryMetadataFromNetworkResponse)(o,this.hostnameAndPort)}catch(e){return e instanceof g.AuthError?this.logger.error(`0vwhc7 ${e.errorCode} ${e.errorMessage}`,this.correlationId):this.logger.error(`0s2z41 ${e.name} ${e.message}`,this.correlationId),null}return t||(this.logger.warning("0jp28q",this.correlationId),this.logger.verbose("130sd8",this.correlationId),t=I.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort)),t}isInKnownAuthorities(e){let t=e.toLowerCase();return this.authorityOptions.knownAuthorities.filter(e=>e&&o.UrlString.getDomainFromUrl(e,this.correlationId).toLowerCase()===t).length>0}static generateAuthority(e,t){let r;if(t&&t.azureCloudInstance!==l.AzureCloudInstance.None){let e=t.tenant?t.tenant:n.DEFAULT_COMMON_TENANT;r=`${t.azureCloudInstance}/${e}/`}return r||e}static createCloudDiscoveryMetadataFromHost(e){return{preferred_network:e,preferred_cache:e,aliases:[e]}}getPreferredCache(){if(this.managedIdentity)return n.DEFAULT_AUTHORITY_HOST;if(this.discoveryComplete())return this.metadata.preferred_cache;throw(0,i.createClientAuthError)(y.endpointResolutionError,this.correlationId)}isAlias(e){return this.metadata.aliases.indexOf(e)>-1}isAliasOfKnownMicrosoftAuthority(e){return s.InstanceDiscoveryMetadataAliases.has(e)}validateIssuer(e){let t;if(!e)throw(0,a.createClientConfigurationError)(f.issuerValidationFailed,this.correlationId);try{t=new URL(e)}catch{throw(0,a.createClientConfigurationError)(f.issuerValidationFailed,this.correlationId)}let r=t.protocol,o=t.host,i=(this.canonicalAuthorityUrlComponents.Protocol||"").toLowerCase(),n=(this.canonicalAuthorityUrlComponents.HostNameAndPort||"").toLowerCase(),s=this.matchesAuthorityOrigin(r,o,i,n),c="https:"===r&&this.isAliasOfKnownMicrosoftAuthority(o),l="https:"===r&&this.matchesRegionalMicrosoftHost(o),h=this.matchesCiamTenantPattern(t,n,this.canonicalAuthorityUrlComponents.PathSegments),d="https:"===r&&this.isInKnownAuthorities(o);if(!s&&!c&&!l&&!h&&!d)throw(0,a.createClientConfigurationError)(f.issuerValidationFailed,this.correlationId)}matchesAuthorityOrigin(e,t,r,o){return e===r&&t===o}matchesRegionalMicrosoftHost(e){let t=e.indexOf(".");if(t>0&&t<e.length-1){let r=e.substring(t+1);return this.isAliasOfKnownMicrosoftAuthority(r)}return!1}matchesCiamTenantPattern(e,t,r){let o=r[0],i=o?o.endsWith(n.AAD_TENANT_DOMAIN_SUFFIX)?o.slice(0,-n.AAD_TENANT_DOMAIN_SUFFIX.length):o:t.split(".")[0];if(!i)return!1;let s=`https://${i}${n.CIAM_AUTH_URL}`,a=[s,`${s}/${i}`,`${s}/${i}/v2.0`,`${s}/${i}${n.AAD_TENANT_DOMAIN_SUFFIX}`,`${s}/${i}${n.AAD_TENANT_DOMAIN_SUFFIX}/v2.0`],c=e.pathname.replace(/\/+$/,""),l=`${e.protocol}//${e.host}${c}`;return a.some(e=>e===l)}static isPublicCloudAuthority(e){return n.KNOWN_PUBLIC_CLOUDS.indexOf(e)>=0}

1static buildRegionalAuthorityString(e,t,r,i){let s=new o.UrlString(e,r);s.validateAsUri();let a=s.getUrlComponents(),c=`${t}.${a.HostNameAndPort}`;this.isPublicCloudAuthority(a.HostNameAndPort)&&(c=`${t}.${n.REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX}`);let l=o.UrlString.constructAuthorityUriFromObject({...s.getUrlComponents(),HostNameAndPort:c},r).urlString;return i?`${l}?${i}`:l}static replaceWithRegionalInformation(e,t,r){let o={...e};return o.authorization_endpoint=I.buildRegionalAuthorityString(o.authorization_endpoint,t,r),o.token_endpoint=I.buildRegionalAuthorityString(o.token_endpoint,t,r),o.end_session_endpoint&&(o.end_session_endpoint=I.buildRegionalAuthorityString(o.end_session_endpoint,t,r)),o}static transformCIAMAuthority(e,t){let r=e,i=new o.UrlString(e,t).getUrlComponents();if(0===i.PathSegments.length&&i.HostNameAndPort.endsWith(n.CIAM_AUTH_URL)){let e=i.HostNameAndPort.split(".")[0];r=`${r}${e}${n.AAD_TENANT_DOMAIN_SUFFIX}`}return r}}function A(e){return e.endsWith(n.FORWARD_SLASH)?e:`${e}${n.FORWARD_SLASH}`}function E(e){return!!e&&Object.prototype.hasOwnProperty.call(e,"resource")}I.reservedTenantDomains=new Set(["{tenant}","{tenantid}",n.AADAuthority.COMMON,n.AADAuthority.CONSUMERS,n.AADAuthority.ORGANIZATIONS]),e.s(["Authority",0,I,"buildStaticAuthorityOptions",0,function(e){let t,r=e.cloudDiscoveryMetadata;if(r)try{t=JSON.parse(r)}catch(e){throw(0,a.createClientConfigurationError)(f.invalidCloudDiscoveryMetadata,"")}return{canonicalAuthority:e.authority?A(e.authority):void 0,knownAuthorities:e.knownAuthorities,cloudDiscoveryMetadata:t}},"formatAuthorityUri",0,A,"getTenantFromAuthorityString",0,function(e,t){let r=new o.UrlString(e,t).getUrlComponents(),i=r.PathSegments.slice(-1)[0]?.toLowerCase();switch(i){case n.AADAuthority.COMMON:case n.AADAuthority.ORGANIZATIONS:case n.AADAuthority.CONSUMERS:return;default:return i}}],113239),e.s(["enforceResourceParameter",0,function(e,t){if(e){if(t.resource&&(E(t.extraParameters)||E(t.extraQueryParameters)))throw(0,i.createClientAuthError)(y.misplacedResourceParam,t.correlationId||"");if(!t.resource)throw(0,i.createClientAuthError)(y.resourceParameterRequired,t.correlationId||"")}}],628896)},155325,953134,44732,146117,334538,490284,e=>{"use strict";var t=e.i(232992),r=e.i(499057);let o=[{host:"login.microsoftonline.com"},{host:"login.chinacloudapi.cn",issuerHost:"login.partner.microsoftonline.cn"},{host:"login.microsoftonline.us"},{host:"login.sovcloud-identity.fr"},{host:"login.sovcloud-identity.de"},{host:"login.sovcloud-identity.sg"}].reduce((e,{host:t,issuerHost:r})=>{var o;return e[t]=(o=r||t,{token_endpoint:`https://${t}/{tenantid}/oauth2/v2.0/token`,jwks_uri:`https://${t}/{tenantid}/discovery/v2.0/keys`,issuer:`https://${o}/{tenantid}/v2.0`,authorization_endpoint:`https://${t}/{tenantid}/oauth2/v2.0/authorize`,end_session_endpoint:`https://${t}/{tenantid}/oauth2/v2.0/logout`}),e},{}),i=[{preferred_network:"login.microsoftonline.com",preferred_cache:"login.windows.net",aliases:["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"]},{preferred_network:"login.partner.microsoftonline.cn",preferred_cache:"login.partner.microsoftonline.cn",aliases:["login.partner.microsoftonline.cn","login.chinacloudapi.cn"]},{preferred_network:"login.microsoftonline.de",preferred_cache:"login.microsoftonline.de",aliases:["login.microsoftonline.de"]},{preferred_network:"login.microsoftonline.us",preferred_cache:"login.microsoftonline.us",aliases:["login.microsoftonline.us","login.usgovcloudapi.net"]},{preferred_network:"login-us.microsoftonline.com",preferred_cache:"login-us.microsoftonline.com",aliases:["login-us.microsoftonline.com"]},{preferred_network:"login.sovcloud-identity.fr",preferred_cache:"login.sovcloud-identity.fr",aliases:["login.sovcloud-identity.fr"]},{preferred_network:"login.sovcloud-identity.de",preferred_cache:"login.sovcloud-identity.de",aliases:["login.sovcloud-identity.de"]},{preferred_network:"login.sovcloud-identity.sg",preferred_cache:"login.sovcloud-identity.sg",aliases:["login.sovcloud-identity.sg"]},{preferred_network:"login.windows-ppe.net",preferred_cache:"login.windows-ppe.net",aliases:["login.windows-ppe.net","sts.windows-ppe.net","login.microsoft-ppe.com"]}],n=new Set;

1function s(e,t,r,o,i){if(e.trace(`1bmquz ${i}`,t),r&&o){let n=a(o,r);if(n)return e.trace(`1fotbt ${i}`,t),n.aliases;e.trace(`14avvj ${i}`,t)}return null}function a(e,t){for(let r=0;r<e.length;r++){let o=e[r];if(o.aliases.includes(t))return o}return null}i.forEach(e=>{e.aliases.forEach(e=>{n.add(e)})}),e.s(["EndpointMetadata",0,o,"InstanceDiscoveryMetadataAliases",0,n,"getAliasesFromStaticSources",0,function(e,o,n){let a,c=e.canonicalAuthority;if(c){let l=new t.UrlString(c,n).getUrlComponents().HostNameAndPort;a=s(o,n,l,e.cloudDiscoveryMetadata?.metadata,r.AuthorityMetadataSource.CONFIG)||s(o,n,l,i,r.AuthorityMetadataSource.HARDCODED_VALUES)||e.knownAuthorities}return a||[]},"getCloudDiscoveryMetadataFromHardcodedValues",0,function(e){return a(i,e)},"getCloudDiscoveryMetadataFromNetworkResponse",0,a],155325),e.s(["ProtocolMode",0,{AAD:"AAD",OIDC:"OIDC",EAR:"EAR"}],953134),e.s(["AzureCloudInstance",0,{None:"none",AzurePublic:"https://login.microsoftonline.com",AzurePpe:"https://login.windows-ppe.net",AzureChina:"https://login.chinacloudapi.cn",AzureGermany:"https://login.microsoftonline.de",AzureUsGovernment:"https://login.microsoftonline.us"}],44732),e.s(["isCloudInstanceDiscoveryResponse",0,function(e){return e.hasOwnProperty("tenant_discovery_endpoint")&&e.hasOwnProperty("metadata")}],146117),e.s(["isCloudInstanceDiscoveryErrorResponse",0,function(e){return e.hasOwnProperty("error")&&e.hasOwnProperty("error_description")}],334538),e.s(["AuthClientCreateTokenRequestBody",0,"authClientCreateTokenRequestBody","AuthClientExecuteTokenRequest",0,"authClientExecuteTokenRequest","AuthorityGetCloudDiscoveryMetadataFromNetwork",0,"authorityGetCloudDiscoveryMetadataFromNetwork","AuthorityGetEndpointMetadataFromNetwork",0,"authorityGetEndpointMetadataFromNetwork","AuthorityResolveEndpointsAsync",0,"authorityResolveEndpointsAsync","AuthorityUpdateCloudDiscoveryMetadata",0,"authorityUpdateCloudDiscoveryMetadata","AuthorityUpdateEndpointMetadata",0,"authorityUpdateEndpointMetadata","AuthorityUpdateMetadataWithRegionalInformation",0,"authorityUpdateMetadataWithRegionalInformation","AuthorizationCodeClientExecutePostToTokenEndpoint",0,"authorizationCodeClientExecutePostToTokenEndpoint","CacheManagerGetRefreshToken",0,"cacheManagerGetRefreshToken","GetAuthCodeUrl",0,"getAuthCodeUrl","HandleCodeResponseFromServer",0,"handleCodeResponseFromServer","HandleServerTokenResponse",0,"handleServerTokenResponse","NetworkClientSendPostRequestAsync",0,"networkClientSendPostRequestAsync","PopTokenGenerateCnf",0,"popTokenGenerateCnf","RefreshTokenClientAcquireToken",0,"refreshTokenClientAcquireToken","RefreshTokenClientAcquireTokenWithCachedRefreshToken",0,"refreshTokenClientAcquireTokenWithCachedRefreshToken","RefreshTokenClientCreateTokenRequestBody",0,"refreshTokenClientCreateTokenRequestBody","RefreshTokenClientExecutePostToTokenEndpoint",0,"refreshTokenClientExecutePostToTokenEndpoint","RefreshTokenClientExecuteTokenRequest",0,"refreshTokenClientExecuteTokenRequest","RegionDiscoveryDetectRegion",0,"regionDiscoveryDetectRegion","RegionDiscoveryGetCurrentVersion",0,"regionDiscoveryGetCurrentVersion","RegionDiscoveryGetRegionFromIMDS",0,"regionDiscoveryGetRegionFromIMDS","SetUserData",0,"setUserData","SilentFlowClientGenerateResultFromCacheRecord",0,"silentFlowClientGenerateResultFromCacheRecord","UpdateTokenEndpointAuthority",0,"updateTokenEndpointAuthority"],490284)},792138,e=>{"use strict";var t=e.i(499057),r=e.i(490284),o=e.i(889528);class i{constructor(e,t,r,o){this.networkInterface=e,this.logger=t,this.performanceClient=r,this.correlationId=o}async detectRegion(e,n){let s=e;if(s)n.region_source=t.RegionDiscoverySources.ENVIRONMENT_VARIABLE;else{let e=i.IMDS_OPTIONS;try{let i=await (0,o.invokeAsync)(this.getRegionFromIMDS.bind(this),r.RegionDiscoveryGetRegionFromIMDS,this.logger,this.performanceClient,this.correlationId)(t.IMDS_VERSION,e);if(i.status===t.HTTP_SUCCESS&&(s=i.body?.location)&&(n.region_source=t.RegionDiscoverySources.IMDS),i.status===t.HTTP_BAD_REQUEST){let i=await (0,o.invokeAsync)(this.getCurrentVersion.bind(this),r.RegionDiscoveryGetCurrentVersion,this.logger,this.performanceClient,this.correlationId)(e);if(!i)return n.region_source=t.RegionDiscoverySources.FAILED_AUTO_DETECTION,null;let a=await (0,o.invokeAsync)(this.getRegionFromIMDS.bind(this),r.RegionDiscoveryGetRegionFromIMDS,this.logger,this.performanceClient,this.correlationId)(i,e);a.status===t.HTTP_SUCCESS&&(s=a.body?.location)&&(n.region_source=t.RegionDiscoverySources.IMDS)}}catch(e){return n.region_source=t.RegionDiscoverySources.FAILED_AUTO_DETECTION,null}}return s||(n.region_source=t.RegionDiscoverySources.FAILED_AUTO_DETECTION),s||null}async getRegionFromIMDS(e,r){return this.networkInterface.sendGetRequestAsync(`${t.IMDS_ENDPOINT}?api-version=${e}`,r,t.IMDS_TIMEOUT)}async getCurrentVersion(e){try{let r=await this.networkInterface.sendGetRequestAsync(`${t.IMDS_ENDPOINT}?format=json`,e);if(r.status===t.HTTP_BAD_REQUEST&&r.body&&r.body["newest-versions"]&&r.body["newest-versions"].length>0)return r.body["newest-versions"][0];return null}catch(e){return null}}}i.IMDS_OPTIONS={headers:{Metadata:"true"}},e.s(["RegionDiscovery",0,i])},357913,395833,189462,181038,e=>{"use strict";var t=e.i(739500),r=e.i(280565),o=e.i(155325),i=e.i(879439),n=e.i(51159),s=e.i(683064),a=e.i(206762),c=e.i(770662),l=e.i(499057),h=e.i(105819),d=e.i(879239),u=e.i(312267);class g{constructor(e,t,r,o,i){this.clientId=e,this.cryptoImpl=t,this.commonLogger=r.clone(a.name,a.version),this.staticAuthorityOptions=i,this.performanceClient=o}getAllAccounts(e={},t){return this.buildTenantProfiles(this.getAccountsFilteredBy(e,t),t,e)}getAccountInfoFilteredBy(e,t){if(0===Object.keys(e).length||Object.values(e).every(e=>null==e||""===e))return this.commonLogger.warning("1skb02",t),null;let r=this.getAllAccounts(e,t);return r.length>1?r.sort((e,t)=>

1{let r=+!!e.idTokenClaims;return!!t.idTokenClaims-r})[0]:1===r.length?r[0]:null}getBaseAccountInfo(e,t){let r=this.getAccountsFilteredBy(e,t);return r.length>0?(0,h.getAccountInfo)(r[0]):null}buildTenantProfiles(e,t,r){return e.flatMap(e=>this.getTenantProfilesFromAccountEntity(e,t,r?.tenantId,r))}getTenantedAccountInfoByFilter(e,o,i,n,s){let a;if(s&&!this.tenantProfileMatchesFilter(i,s))return null;let c=this.getIdToken(e,n,o,i.tenantId);return c&&(a=(0,r.extractTokenClaims)(c.secret,this.cryptoImpl.base64Decode,n),!this.idTokenClaimsMatchTenantProfileFilter(a,s))?null:(0,t.updateAccountTenantProfileData)(e,i,a,c?.secret)}getTenantProfilesFromAccountEntity(e,t,r,o){let i=(0,h.getAccountInfo)(e),n=i.tenantProfiles||new Map,s=this.getTokenKeys();if(r){let e=n.get(r);if(!e)return[];n=new Map([[r,e]])}let a=[];return n.forEach(e=>{let r=this.getTenantedAccountInfoByFilter(i,s,e,t,o);r&&a.push(r)}),a}tenantProfileMatchesFilter(e,t){return(!t.localAccountId||!!this.matchLocalAccountIdFromTenantProfile(e,t.localAccountId))&&(!t.name||e.name===t.name)&&(void 0===t.isHomeTenant||e.isHomeTenant===t.isHomeTenant)&&(!t.username||!!this.matchUsername(e.username,t.username)||!!this.matchUsername(e.upn,t.username))&&(!t.loginHint||!!this.matchLoginHintWithTenantProfile(e,t.loginHint))&&(!t.upn||e.upn===t.upn)&&(!t.nativeAccountId||e.nativeAccountId===t.nativeAccountId)&&!0}idTokenClaimsMatchTenantProfileFilter(e,t){return(!t||(!t.localAccountId||!!this.matchLocalAccountIdFromTokenClaims(e,t.localAccountId))&&(!t.loginHint||!!this.matchLoginHintFromTokenClaims(e,t.loginHint))&&(!t.username||!!this.matchUsername(e.preferred_username,t.username)||!!this.matchUsername(e.upn,t.username))&&(!t.name||!!this.matchName(e,t.name))&&(!t.sid||!!this.matchSid(e,t.sid)))&&!0}async saveCacheRecord(e,t,r,o,a){if(!e)throw(0,s.createClientAuthError)(u.invalidCacheRecord,t);try{e.account&&await this.setAccount(e.account,t,r,o),e.idToken&&a?.idToken!==!1&&await this.setIdTokenCredential(e.idToken,t,r),e.accessToken&&a?.accessToken!==!1&&await this.saveAccessToken(e.accessToken,t,r),e.refreshToken&&a?.refreshToken!==!1&&await this.setRefreshTokenCredential(e.refreshToken,t,r),e.appMetadata&&this.setAppMetadata(e.appMetadata,t)}catch(e){if(this.commonLogger?.error("0j476p",t),e instanceof i.AuthError)throw e;throw(0,n.createCacheError)(e)}}async saveAccessToken(e,t,r){let o;e.additionalCacheKeyComponents&&Object.keys(e.additionalCacheKeyComponents).length>0&&(o=await this.cryptoImpl.hashString(JSON.stringify(e.additionalCacheKeyComponents)));let i={clientId:e.clientId,credentialType:e.credentialType,environment:e.environment,homeAccountId:e.homeAccountId,realm:e.realm,tokenType:e.tokenType},n=this.getTokenKeys(),s=c.ScopeSet.fromString(e.target,t);n.accessToken.forEach(e=>{if(!this.accessTokenKeyMatchesFilter(e,i,!1))return;let r=this.getAccessTokenCredential(e,t);r&&this.credentialMatchesFilter(r,i,t)&&c.ScopeSet.fromString(r.target,t).intersectingScopeSets(s)&&this.removeAccessToken(e,t)}),await this.setAccessTokenCredential(e,t,r,o)}getAccountsFilteredBy(e,t){let r=this.getAccountKeys(),o=[];return r.forEach(r=>{let i=this.getAccount(r,t);if(!i||e.homeAccountId&&!this.matchHomeAccountId(i,e.homeAccountId)||e.environment&&!this.matchEnvironment(i,e.environment,t)||e.realm&&!this.matchRealm(i,e.realm)||e.authorityType&&!this.matchAuthorityType(i,e.authorityType))return;let n={localAccountId:e?.localAccountId,name:e?.name,username:e?.username,loginHint:e?.loginHint,upn:e?.upn,nativeAccountId:e?.nativeAccountId},s=i.tenantProfiles?.filter(e=>this.tenantProfileMatchesFilter(e,n));s&&0===s.length||o.push(i)}),o}credentialMatchesFilter(e,t,r){if(t.clientId&&!this.matchClientId(e,t.clientId)||t.userAssertionHash&&!this.matchUserAssertionHash(e,t.userAssertionHash)||"string"==typeof t.homeAccountId&&!this.matchHomeAccountId(e,t.homeAccountId)||t.environment&&!this.matchEnvironment(e,t.environment,r)||t.realm&&!this.matchRealm(e,t.realm)||t.credentialType&&!this.matchCredentialType(e,t.credentialType)||t.familyId&&!this.matchFamilyId(e,t.familyId)||t.target&&!this.matchTarget(e,t.target,r)||e.credentialType===l.CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME&&(t.tokenType&&!this.matchTokenType(e,t.tokenType)||t.tokenType===l.AuthenticationScheme.SSH&&t.keyId&&!this.matchKeyId(e,t.keyId)))return!1;let o=e.additionalCacheKeyComponents,i=t.additionalCacheKeyComponents,n=!!o&&Object.keys(o).length>0,s=!!i&&Object.keys(i).length>0;if(n!==s)return!1;if(n&&s){let e=Object.keys(o).sort(),t=Object.keys(i).sort();if(e.length!==t.length)return!1;for(let r=0;r<e.length;r++)if(e[r]!==t[r]||o[e[r]]!==i[t[r]])return!1}return!0}getAppMetadataFilteredBy(e,t){let r=this.getKeys(),o={};return r.forEach(r=>{if(!this.isAppMetadata(r))return;let i=this.getAppMetadata(r,t);!i||e.environment&&!this.matchEnvironment(i,e.environment,t)||(!e.clientId||this.matchClientId(i,e.clientId))&&(o[r]=i)}),o}getAuthorityMetadataByAlias(e,t){let r=this.getAuthorityMetadataKeys(),o=null;return r.forEach(r=>{if(!this.isAuthorityMetadata(r)||-1===r.indexOf(this.clientId))return;let i=this.getAuthorityMetadata(r,t);i&&-1!==i.aliases.indexOf(e)&&(o=i)}),o}removeAllAccounts(e){this.getAllAccounts({},e).forEach(t=>{this.removeAccount(t,e)})}removeAccount(e,t){this.removeAccountContext(e,t),this.getAccountKeys().filter(t=>

1t.includes(e.homeAccountId)&&t.includes(e.environment)).forEach(e=>{this.removeItem(e,t),this.performanceClient.incrementFields({accountsRemoved:1},t)})}removeAccountContext(e,t){let r=this.getTokenKeys(),o=t=>t.includes(e.homeAccountId)&&t.includes(e.environment);r.idToken.filter(o).forEach(e=>{this.removeIdToken(e,t)}),r.accessToken.filter(o).forEach(e=>{this.removeAccessToken(e,t)}),r.refreshToken.filter(o).forEach(e=>{this.removeRefreshToken(e,t)})}removeAccessToken(e,t){let r=this.getAccessTokenCredential(e,t);if(r&&(this.removeItem(e,t),this.performanceClient.incrementFields({accessTokensRemoved:1},t),r.credentialType.toLowerCase()===l.CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME.toLowerCase()&&r.tokenType===l.AuthenticationScheme.POP)){let e=r.keyId;e&&this.cryptoImpl.removeTokenBindingKey(e,t).catch(()=>{this.commonLogger.error(`0cx291 ${e}`,t),this.performanceClient?.incrementFields({removeTokenBindingKeyFailure:1},t)})}}removeAppMetadata(e){return this.getKeys().forEach(t=>{this.isAppMetadata(t)&&this.removeItem(t,e)}),!0}getIdToken(e,t,r,o){this.commonLogger.trace("1drz22",t);let i={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:l.CredentialType.ID_TOKEN,clientId:this.clientId,realm:o},n=this.getIdTokensByFilter(i,t,r),s=n.size;if(s<1)return this.commonLogger.info("1atvtd",t),null;if(s>1){let r=n;if(!o){let o=new Map;n.forEach((t,r)=>{t.realm===e.tenantId&&o.set(r,t)});let i=o.size;if(i<1)return this.commonLogger.info("0ooalx",t),n.values().next().value??null;if(1===i)return this.commonLogger.info("1eq2vc",t),o.values().next().value??null;r=o}return this.commonLogger.info("1ws328",t),r.forEach((e,r)=>{this.removeIdToken(r,t)}),this.performanceClient.addFields({multiMatchedID:n.size},t),null}return this.commonLogger.info("1sm769",t),n.values().next().value??null}getIdTokensByFilter(e,t,r){let o=r&&r.idToken||this.getTokenKeys().idToken,i=new Map;return o.forEach(r=>{if(!this.idTokenKeyMatchesFilter(r,{clientId:this.clientId,...e}))return;let o=this.getIdTokenCredential(r,t);o&&this.credentialMatchesFilter(o,e,t)&&i.set(r,o)}),i}idTokenKeyMatchesFilter(e,t){let r=e.toLowerCase();return(!t.clientId||-1!==r.indexOf(t.clientId.toLowerCase()))&&(!t.homeAccountId||-1!==r.indexOf(t.homeAccountId.toLowerCase()))}removeIdToken(e,t){this.removeItem(e,t)}removeRefreshToken(e,t){this.removeItem(e,t)}getAccessToken(e,t,r,o){let i=t.correlationId;this.commonLogger.trace("1t7hz1",i);let n=c.ScopeSet.createSearchScopes(t.scopes,i),s=t.authenticationScheme||l.AuthenticationScheme.BEARER,a=s&&s.toLowerCase()!==l.AuthenticationScheme.BEARER.toLowerCase()?l.CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME:l.CredentialType.ACCESS_TOKEN,h=(0,d.serializeAttributeTokens)(t.attributeTokens),u={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:a,clientId:this.clientId,realm:o||e.tenantId,target:n,tokenType:s,keyId:t.sshKid,additionalCacheKeyComponents:h?{attribute_tokens:h}:void 0},g=r&&r.accessToken||this.getTokenKeys().accessToken,p=[],m=[];return(g.forEach(e=>{if(this.accessTokenKeyMatchesFilter(e,u,!0)){let t=this.getAccessTokenCredential(e,i);t&&this.credentialMatchesFilter(t,u,i)&&(p.push(t),m.push(e))}}),p.length<1)?(this.commonLogger.info("1nckna",i),null):p.length>1?(this.commonLogger.info("1wkfwp",i),m.forEach(e=>{this.removeAccessToken(e,i)}),this.performanceClient.addFields({multiMatchedAT:p.length},i),null):(this.commonLogger.info("06yt98",i),p[0])}accessTokenKeyMatchesFilter(e,t,r){let o=e.toLowerCase();if(t.clientId&&-1===o.indexOf(t.clientId.toLowerCase())||t.homeAccountId&&-1===o.indexOf(t.homeAccountId.toLowerCase())||t.realm&&-1===o.indexOf(t.realm.toLowerCase()))return!1;if(t.target){let e=t.target.asArray();for(let t=0;t<e.length;t++)if(r&&!o.includes(e[t].toLowerCase()))return!1;else if(!r&&o.includes(e[t].toLowerCase()))break}return!0}getAccessTokensByFilter(e,t){let r=this.getTokenKeys(),o=[];return r.accessToken.forEach(r=>{if(!this.accessTokenKeyMatchesFilter(r,e,!0))return;let i=this.getAccessTokenCredential(r,t);i&&this.credentialMatchesFilter(i,e,t)&&o.push(i)}),o}getRefreshToken(e,t,r,o){this.commonLogger.trace("0x53vi",r);let i=t?l.THE_FAMILY_ID:void 0,n={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:l.CredentialType.REFRESH_TOKEN,clientId:this.clientId,familyId:i},s=o&&o.refreshToken||this.getTokenKeys().refreshToken,a=[];

1s.forEach(e=>{if(this.refreshTokenKeyMatchesFilter(e,n)){let t=this.getRefreshTokenCredential(e,r);t&&this.credentialMatchesFilter(t,n,r)&&a.push(t)}});let c=a.length;return c<1?(this.commonLogger.info("0dlw11",r),null):(c>1&&this.performanceClient.addFields({multiMatchedRT:c},r),this.commonLogger.info("0wcnep",r),a[0])}refreshTokenKeyMatchesFilter(e,t){let r=e.toLowerCase();return(!t.familyId||-1!==r.indexOf(t.familyId.toLowerCase()))&&(!!t.familyId||!t.clientId||-1!==r.indexOf(t.clientId.toLowerCase()))&&(!t.homeAccountId||-1!==r.indexOf(t.homeAccountId.toLowerCase()))}readAppMetadataFromCache(e,t){let r={environment:e,clientId:this.clientId},o=this.getAppMetadataFilteredBy(r,t),i=Object.keys(o).map(e=>o[e]),n=i.length;if(n<1)return null;if(n>1)throw(0,s.createClientAuthError)(u.multipleMatchingAppMetadata,t);return i[0]}isAppMetadataFOCI(e,t){let r=this.readAppMetadataFromCache(e,t);return!!(r&&r.familyId===l.THE_FAMILY_ID)}matchHomeAccountId(e,t){return"string"==typeof e.homeAccountId&&t===e.homeAccountId}matchLocalAccountIdFromTokenClaims(e,t){return t===(e.oid||e.sub)}matchLocalAccountIdFromTenantProfile(e,t){return e.localAccountId===t}matchName(e,t){return t.toLowerCase()===e.name?.toLowerCase()}matchUsername(e,t){return!!(e&&"string"==typeof e&&t?.toLowerCase()===e.toLowerCase())}matchLoginHintWithTenantProfile(e,t){return e.loginHint===t||e.username===t||e.upn===t}matchUserAssertionHash(e,t){return!!(e.userAssertionHash&&t===e.userAssertionHash)}matchEnvironment(e,t,r){if(this.staticAuthorityOptions){let i=(0,o.getAliasesFromStaticSources)(this.staticAuthorityOptions,this.commonLogger,r);if(i.includes(t)&&i.includes(e.environment))return!0}let i=this.getAuthorityMetadataByAlias(t,r);return!!(i&&i.aliases.indexOf(e.environment)>-1)}matchCredentialType(e,t){return e.credentialType&&t.toLowerCase()===e.credentialType.toLowerCase()}matchClientId(e,t){return!!(e.clientId&&t===e.clientId)}matchFamilyId(e,t){return!!(e.familyId&&t===e.familyId)}matchRealm(e,t){return e.realm?.toLowerCase()===t.toLowerCase()}matchLoginHintFromTokenClaims(e,t){return!!(e.login_hint===t||e.preferred_username===t||e.upn===t||e.emails&&e.emails.includes(t))}matchSid(e,t){return e.sid===t}matchAuthorityType(e,t){return!!(e.authorityType&&t.toLowerCase()===e.authorityType.toLowerCase())}matchTarget(e,t,r){return(e.credentialType===l.CredentialType.ACCESS_TOKEN||e.credentialType===l.CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME)&&!!e.target&&c.ScopeSet.fromString(e.target,r).containsScopeSet(t)}matchTokenType(e,t){return!!(e.tokenType&&e.tokenType===t)}matchKeyId(e,t){return!!(e.keyId&&e.keyId===t)}isAppMetadata(e){return -1!==e.indexOf(l.APP_METADATA)}isAuthorityMetadata(e){return -1!==e.indexOf(l.AUTHORITY_METADATA_CACHE_KEY)}generateAuthorityMetadataCacheKey(e){return`${l.AUTHORITY_METADATA_CACHE_KEY}-${this.clientId}-${e}`}static toObject(e,t){for(let r in t)e[r]=t[r];return e}}e.s(["CacheManager",0,g,"DefaultStorageClass",0,class extends g{async setAccount(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getAccount(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}async setIdTokenCredential(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getIdTokenCredential(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}async setAccessTokenCredential(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getAccessTokenCredential(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}async setRefreshTokenCredential(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getRefreshTokenCredential(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}setAppMetadata(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getAppMetadata(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}setServerTelemetry(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getServerTelemetry(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}setAuthorityMetadata(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getAuthorityMetadata(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getAuthorityMetadataKeys(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}setThrottlingCache(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getThrottlingCache(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}removeItem(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getKeys(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getAccountKeys(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}getTokenKeys(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}generateCredentialKey(e,t){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}generateAccountKey(){throw(0,s.createClientAuthError)(u.methodNotImplemented,"")}}],357913);var p=e.i(669429);e.s(["CacheErrorCodes",0,p],395833);var m=e.i(490284);e.s(["PerformanceEvents",0,m],189462);let C="msal",y="browser",f=`${C}.${y}.log.level`,I=`${C}.${y}.log.pii`,A=`${C}.version`,E="account.keys",T="token.keys",w=`${C}.${y}.sso.capable`;e.s(["ACCOUNT_SCHEMA_VERSION",0,3,"CACHE_KEY_SEPARATOR",0,"|","CREDENTIAL_SCHEMA_VERSION",0,3,"LOG_LEVEL_CACHE_KEY",0,f,"LOG_PII_CACHE_KEY",0,I,"PREFIX",0,C,"SSO_CAPABLE",0,w,"VERSION_CACHE_KEY",0,A,"getAccountKeysCacheKey",0,function(e=3){return e<1?`${C}.${E}`:`${C}.${e}.${E}`},"getTokenKeysCacheKey",0,function(e,t=3){return t<1?`${C}.${T}.${e}`:`${C}.${t}.${T}.${e}`}],181038)},312129,563076,739500,43142,105819,454551,741110,609628,367704,435011,e=>{"use strict";var t=e.i(499057),r=e.i(683064),o=e.i(312267);function i(e,t){if(!e)throw(0,r.createClientAuthError)(o.clientInfoEmptyError,"");try{let r=t(e);return JSON.parse(r)}catch(e){throw(0,r.createClientAuthError)(o.clientInfoDecodingError,"")}}e.s(["buildClientInfo",0,i,"buildClientInfoFromHomeAccountId",0,function(e){if(!e)throw(0,r.createClientAuthError)(o.clientInfoDecodingError,"");let i=e.split(t.CLIENT_INFO_SEPARATOR,2);return{uid:i[0],utid:i.length<2?"":i[1]}}],563076);var n=e.i(280565);function s(e,t){return!!e&&!!t&&e===t.split(".")[1]}

1function a(e,t,r,o,i){if(!i)return{tenantId:r,localAccountId:t,username:"",isHomeTenant:s(r,e),...o&&{nativeAccountId:o}};{let{oid:t,sub:r,tid:n,name:a,tfp:c,acr:l,preferred_username:h,upn:d,login_hint:u}=i,g=n||c||l||"";return{tenantId:g,localAccountId:t||r||"",name:a,username:h||d||"",loginHint:u,isHomeTenant:s(g,e),upn:d,...o&&{nativeAccountId:o}}}}e.s(["buildTenantProfile",0,a,"updateAccountTenantProfileData",0,function(e,t,r,o){let i=e;if(t){let{isHomeTenant:r,...o}=t;i={...e,...o}}if(r){let{isHomeTenant:t,...s}=a(e.homeAccountId,e.localAccountId,e.tenantId,i.nativeAccountId,r);i={...i,...s,idTokenClaims:r,idToken:o,kmsi:(0,n.isKmsi)(r)}}return i}],739500);var c=e.i(532494);function l(e){return e&&(e.tid||e.tfp||e.acr)||null}e.s(["getTenantIdFromIdTokenClaims",0,l],43142);var h=e.i(953134);e.s(["createAccountEntity",0,function(e,n,s,d){let u,g,p,m;u=n.authorityType===c.AuthorityType.Adfs?t.CACHE_ACCOUNT_TYPE_ADFS:n.protocolMode===h.ProtocolMode.OIDC?t.CACHE_ACCOUNT_TYPE_GENERIC:t.CACHE_ACCOUNT_TYPE_MSSTS,e.clientInfo&&d&&(g=i(e.clientInfo,d)).xms_tdbr&&(p="EU"===g.xms_tdbr?"EU":"None");let C=e.environment||n&&n.getPreferredCache();if(!C)throw(0,r.createClientAuthError)(o.invalidCacheEnvironment,s);let y=e.idTokenClaims?.preferred_username||e.idTokenClaims?.upn,f=e.idTokenClaims?.emails?e.idTokenClaims.emails[0]:null,I=e.idTokenClaims?.login_hint,A=g?.utid||l(e.idTokenClaims)||"",E=g?.uid||e.idTokenClaims?.oid||e.idTokenClaims?.sub||"";return m=e.tenantProfiles?e.tenantProfiles:[a(e.homeAccountId,E,A,e.nativeAccountId,e.idTokenClaims)],{homeAccountId:e.homeAccountId,environment:C,realm:A,localAccountId:E,username:y||f||"",authorityType:u,loginHint:I,clientInfo:e.clientInfo,name:e.idTokenClaims?.name||"",lastModificationTime:void 0,lastModificationApp:void 0,cloudGraphHostName:e.cloudGraphHostName,msGraphHost:e.msGraphHost,nativeAccountId:e.nativeAccountId,tenantProfiles:m,dataBoundary:p}},"createAccountEntityFromAccountInfo",0,function(e,r,o){let i=Array.from(e.tenantProfiles?.values()||[]);if(0===i.length&&e.tenantId&&e.localAccountId)i.push(a(e.homeAccountId,e.localAccountId,e.tenantId,e.nativeAccountId,e.idTokenClaims));else if(e.nativeAccountId){let t=i.find(t=>t.tenantId===e.tenantId);t&&!t.nativeAccountId&&(t.nativeAccountId=e.nativeAccountId)}return{authorityType:e.authorityType||t.CACHE_ACCOUNT_TYPE_GENERIC,homeAccountId:e.homeAccountId,localAccountId:e.localAccountId,nativeAccountId:e.nativeAccountId,realm:e.tenantId,environment:e.environment,username:e.username,loginHint:e.loginHint,name:e.name,cloudGraphHostName:r,msGraphHost:o,tenantProfiles:i,dataBoundary:e.dataBoundary}},"generateAccountId",0,function(e){return[e.homeAccountId,e.environment].join(t.CACHE_KEY_SEPARATOR).toLowerCase()},"generateHomeAccountId",0,function(e,t,r,o,n,s){if(t!==c.AuthorityType.Adfs&&t!==c.AuthorityType.Dsts){if(e)try{let t=i(e,o.base64Decode);if(t.uid&&t.utid)return`${t.uid}.${t.utid}`}catch(e){}r.warning("1ub6wv",n)}return s?.sub||""},"getAccountInfo",0,function(e){let t=e.tenantProfiles||[];0===t.length&&e.realm&&e.localAccountId&&t.push(a(e.homeAccountId,e.localAccountId,e.realm,e.nativeAccountId));let r=t.find(t=>t.tenantId===e.realm),o=r?.nativeAccountId||e.nativeAccountId;return{homeAccountId:e.homeAccountId,environment:e.environment,tenantId:e.realm,username:e.username,localAccountId:e.localAccountId,loginHint:e.loginHint,name:e.name,nativeAccountId:o,authorityType:e.authorityType,tenantProfiles:new Map(t.map(e=>[e.tenantId,e])),dataBoundary:e.dataBoundary}},"isAccountEntity",0,function(e){return!!e&&e.hasOwnProperty("homeAccountId")&&e.hasOwnProperty("environment")&&e.hasOwnProperty("realm")&&e.hasOwnProperty("localAccountId")&&e.hasOwnProperty("username")&&e.hasOwnProperty("authorityType")},"isSingleTenant",0,function(e){return!e.tenantProfiles}],105819);var d=e.i(105819);e.s(["AccountEntityUtils",0,d],312129),e.s(["AuthToken",0,n],454551);var u=e.i(879239);e.s(["CacheHelpers",0,u],741110);var g=e.i(382487);e.s(["TimeUtils",0,g],609628),e.s(["getRequestThumbprint",0,function(e,t,r){return{clientId:e,authority:t.authority,scopes:t.scopes,homeAccountIdentifier:r,claims:t.claims,authenticationScheme:t.authenticationScheme,resourceRequestMethod:t.resourceRequestMethod,resourceRequestUri:t.resourceRequestUri,shrClaims:t.shrClaims,sshKid:t.sshKid,embeddedClientId:t.embeddedClientId||t.extraParameters?.clientId,resource:t.resource,attributeTokens:(0,u.serializeAttributeTokens)(t.attributeTokens)}}],367704);var p=e.i(753798);e.s(["InteractionRequiredAuthErrorCodes",0,p],435011)},879239,280565,382487,e=>{"use strict";var t=e.i(683064),r=e.i(312267);function o(e,o,n){let s=i(e,n);try{let e=o(s);return JSON.parse(e)}catch(e){throw(0,t.createClientAuthError)(r.tokenParsingError,n)}}function i(e,o){if(!e)throw(0,t.createClientAuthError)(r.nullOrEmptyToken,o);let i=/^([^\.\s]*)\.([^\.\s]+)\.([^\.\s]*)$/.exec(e);if(!i||i.length<4)throw(0,t.createClientAuthError)(r.tokenParsingError,o);return i[2]}e.s(["extractTokenClaims",0,o,"getJWSPayload",0,i,"isKmsi",0,function(e){if(!e.signin_state)return!1;let t=["kmsi","dvc_dmjd"];return e.signin_state.some(e=>t.includes(e.trim().toLowerCase()))}],280565);var n=e.i(499057);function s(){return Math.round(new Date().getTime()/1e3)}function a(e){return e.hasOwnProperty("homeAccountId")&&e.hasOwnProperty("environment")&&e.hasOwnProperty("credentialType")&&e.hasOwnProperty("clientId")&&e.hasOwnProperty("secret")}e.s(["delay",0,function(e,t){return new Promise(r=>setTimeout(()=>r(t),e))},"isCacheExpired",0,function(e,t){let r=Number(e)+24*t*36e5;return Date.now()>r},"isTokenExpired",0,function(e,t){let r=Number(e)||0;return s()+t>r},"nowSeconds",0,s,"toDateFromSeconds",0,function(e){return e?new Date(1e3*Number(e)):new Date},"toSecondsFromDate",0,function(e){return e.getTime()/1e3},"wasClockTurnedBack",0,function(e){return Number(e)>s()}],382487),e.s(["createAccessTokenEntity",0,function(e,i,a,c,l,h,d,u,g,p,m,C,y,f,I){let A={homeAccountId:e,credentialType:n.CredentialType.ACCESS_TOKEN,secret:a,cachedAt:s().toString(),expiresOn:d.toString(),extendedExpiresOn:u.toString(),environment:i,clientId:c,realm:l,target:h,tokenType:C||n.AuthenticationScheme.BEARER,lastUpdatedAt:Date.now().toString()};if(y&&(A.userAssertionHash=y),m&&(A.refreshOn=m.toString()),A.tokenType?.toLowerCase()!==n.AuthenticationScheme.BEARER.toLowerCase())switch(A.credentialType=n.CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME,A.tokenType){case n.AuthenticationScheme.POP:let E=o(a,g,p);if(!E?.cnf?.kid)throw(0,t.createClientAuthError)(r.tokenClaimsCnfRequiredForSignedJwt,p);A.keyId=E.cnf.kid;break;case n.AuthenticationScheme.SSH:A.keyId=f}return I&&Object.keys(I).length>0&&(A.additionalCacheKeyComponents=I),A},"createIdTokenEntity",0,function(e,t,r,o,i){return{credentialType:n.CredentialType.ID_TOKEN,homeAccountId:e,environment:t,clientId:o,secret:r,realm:i,lastUpdatedAt:Date.now().toString()}},"createRefreshTokenEntity",0,function(e,t,r,o,i,s,a){let c={credentialType:n.CredentialType.REFRESH_TOKEN,homeAccountId:e,environment:t,clientId:o,secret:r,lastUpdatedAt:Date.now().toString()};return s&&(c.userAssertionHash=s),i&&(c.familyId=i),a&&(c.expiresOn=a.toString()),c},"generateAppMetadataKey",0,function({environment:e,clientId:t}){return[n.APP_METADATA,e,t].join(n.CACHE_KEY_SEPARATOR).toLowerCase()},"generateAuthorityMetadataExpiresAt",0,function(){return s()+n.AUTHORITY_METADATA_REFRESH_TIME_SECONDS},"isAccessTokenEntity",0,function(e){return!!e&&a(e)&&e.hasOwnProperty("realm")&&e.hasOwnProperty("target")&&(e.credentialType===n.CredentialType.ACCESS_TOKEN||e.credentialType===n.CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME)},"isAppMetadataEntity",0,function(e,t){return!!t&&0===e.indexOf(n.APP_METADATA)&&t.hasOwnProperty("clientId")&&t.hasOwnProperty("environment")},"isAuthorityMetadataEntity",0,function(e,t){return!!t&&0===e.indexOf(n.AUTHORITY_METADATA_CACHE_KEY)&&t.hasOwnProperty("aliases")&&t.hasOwnProperty("preferred_cache")&&t.hasOwnProperty("preferred_network")&&t.hasOwnProperty("canonical_authority")&&t.hasOwnProperty("authorization_endpoint")&&t.hasOwnProperty("token_endpoint")&&t.hasOwnProperty("issuer")&&t.hasOwnProperty("aliasesFromNetwork")&&t.hasOwnProperty("endpointsFromNetwork")&&t.hasOwnProperty("expiresAt")&&t.hasOwnProperty("jwks_uri")},"isAuthorityMetadataExpired",0,function(e){return e.expiresAt<=s()},"isCredentialEntity",0,a,"isIdTokenEntity",0,function(e){return!!e&&a(e)&&e.hasOwnProperty("realm")&&e.credentialType===n.CredentialType.ID_TOKEN},"isRefreshTokenEntity",0,function(e){return!!e&&a(e)&&e.credentialType===n.CredentialType.REFRESH_TOKEN},"isServerTelemetryEntity",0,function(e,t){let r=0===e.indexOf(n.SERVER_TELEM_CACHE_KEY),o=!0;return t&&(o=t.hasOwnProperty("failedRequests")&&t.hasOwnProperty("errors")&&t.hasOwnProperty("cacheHits")),r&&o},"isThrottlingEntity",0,function(e,t){let r=!1;

1e&&(r=0===e.indexOf(n.THROTTLING_PREFIX));let o=!0;return t&&(o=t.hasOwnProperty("throttleTime")),r&&o},"serializeAttributeTokens",0,function(e){if(e&&0!==e.length)return[...e].sort().join(" ")},"updateAuthorityEndpointMetadata",0,function(e,t,r){e.authorization_endpoint=t.authorization_endpoint,e.token_endpoint=t.token_endpoint,e.end_session_endpoint=t.end_session_endpoint,e.issuer=t.issuer,e.endpointsFromNetwork=r,e.jwks_uri=t.jwks_uri},"updateCloudDiscoveryMetadata",0,function(e,t,r){e.aliases=t.aliases,e.preferred_cache=t.preferred_cache,e.preferred_network=t.preferred_network,e.aliasesFromNetwork=r}],879239)},14128,e=>{"use strict";e.s(["ACCESS_TOKEN",0,"access_token","ATTRIBUTE_TOKENS",0,"attribute_tokens","BROKER_CLIENT_ID",0,"brk_client_id","BROKER_REDIRECT_URI",0,"brk_redirect_uri","CCS_HEADER",0,"X-AnchorMailbox","CLAIMS",0,"claims","CLIENT_ASSERTION",0,"client_assertion","CLIENT_ASSERTION_TYPE",0,"client_assertion_type","CLIENT_ID",0,"client_id","CLIENT_INFO",0,"client_info","CLIENT_REQUEST_ID",0,"client-request-id","CLIENT_SECRET",0,"client_secret","CLI_DATA",0,"clidata","CODE",0,"code","CODE_CHALLENGE",0,"code_challenge","CODE_CHALLENGE_METHOD",0,"code_challenge_method","CODE_VERIFIER",0,"code_verifier","DEVICE_CODE",0,"device_code","DOMAIN_HINT",0,"domain_hint","EAR_JWE_CRYPTO",0,"ear_jwe_crypto","EAR_JWK",0,"ear_jwk","ERROR",0,"error","ERROR_DESCRIPTION",0,"error_description","EXPIRES_IN",0,"expires_in","FMI_PATH",0,"fmi_path","FOCI",0,"foci","GRANT_TYPE",0,"grant_type","ID_TOKEN",0,"id_token","ID_TOKEN_HINT",0,"id_token_hint","INSTANCE_AWARE",0,"instance_aware","LOGIN_HINT",0,"login_hint","LOGOUT_HINT",0,"logout_hint","NATIVE_BROKER",0,"nativebroker","NONCE",0,"nonce","OBO_ASSERTION",0,"assertion","ON_BEHALF_OF",0,"on_behalf_of","POST_LOGOUT_URI",0,"post_logout_redirect_uri","PROMPT",0,"prompt","REDIRECT_URI",0,"redirect_uri","REFRESH_TOKEN",0,"refresh_token","REFRESH_TOKEN_EXPIRES_IN",0,"refresh_token_expires_in","REQUESTED_TOKEN_USE",0,"requested_token_use","REQ_CNF",0,"req_cnf","RESOURCE",0,"resource","RESPONSE_MODE",0,"response_mode","RESPONSE_TYPE",0,"response_type","RETURN_SPA_CODE",0,"return_spa_code","SCOPE",0,"scope","SESSION_STATE",0,"session_state","SID",0,"sid","STATE",0,"state","TOKEN_TYPE",0,"token_type","USERNAME",0,"username","USER_FEDERATED_IDENTITY_CREDENTIAL",0,"user_federated_identity_credential","USER_ID",0,"user_id","X_APP_NAME",0,"x-app-name","X_APP_VER",0,"x-app-ver","X_CLIENT_CPU",0,"x-client-CPU","X_CLIENT_CURR_TELEM",0,"x-client-current-telemetry","X_CLIENT_EXTRA_SKU",0,"x-client-xtra-sku","X_CLIENT_LAST_TELEM",0,"x-client-last-telemetry","X_CLIENT_OS",0,"x-client-OS","X_CLIENT_SKU",0,"x-client-SKU","X_CLIENT_VER",0,"x-client-VER","X_MS_LIB_CAPABILITY",0,"x-ms-lib-capability"])},341623,e=>{"use strict";var t=e.i(945921),r=e.i(499057);e.s(["JoseHeader",0,class e{constructor(e){this.typ=e.typ,this.alg=e.alg,this.kid=e.kid}static getShrHeaderString(o){if(!o.kid)throw(0,t.createJoseHeaderError)("missing_kid_error","");if(!o.alg)throw(0,t.createJoseHeaderError)("missing_alg_error","");return JSON.stringify(new e({typ:o.typ||r.JsonWebTokenTypes.Pop,kid:o.kid,alg:o.alg}))}}],341623)},879439,e=>{"use strict";function t(e){return`See https://aka.ms/msal.js.errors#${e} for details`}class r extends Error{constructor(e,o,i,n){const s=i||(e?t(e):"");super(s?`${e}: ${s}`:e),Object.setPrototypeOf(this,r.prototype),this.errorCode=e||"",this.errorMessage=s||"",this.subError=n||"",this.correlationId=o,this.name="AuthError"}}e.s(["AuthError",0,r,"createAuthError",0,function(e,o,i){return new r(e,o,i||t(e))},"getDefaultErrorMessage",0,t])},51159,669429,206762,e=>{"use strict";let t="cache_quota_exceeded",r="cache_error_unknown";e.s(["cacheErrorUnknown",0,r,"cacheQuotaExceeded",0,t],669429),e.i(669429);var o=e.i(879439);class i extends Error{constructor(e,t){const r=t||(0,o.getDefaultErrorMessage)(e);super(r),Object.setPrototypeOf(this,i.prototype),this.name="CacheError",this.errorCode=e,this.errorMessage=r}}e.s(["CacheError",0,i,"createCacheError",0,function(e){return e instanceof Error?"QuotaExceededError"===e.name||"NS_ERROR_DOM_QUOTA_REACHED"===e.name||e.message.includes("exceeded the quota")?new i(t):new i(e.name,e.message):new i(r)}],51159),e.s(["name",0,"@azure/msal-common","version",0,"16.12.0"],206762)},683064,e=>{"use strict";var t=e.i(879439);class r extends t.AuthError{constructor(e,t,o){super(e,t,o),this.name="ClientAuthError",Object.setPrototypeOf(this,r.prototype)}}e.s(["ClientAuthError",0,r,"createClientAuthError",0,function(e,t,o){return new r(e,t,o)}])},312267,e=>{"use strict";e.s(["authorizationCodeMissingFromServerResponse",0,"authorization_code_missing_from_server_response","bindingKeyNotRemoved",0,"binding_key_not_removed","cannotAppendScopeSet",0,"cannot_append_scopeset","cannotRemoveEmptyScope",0,"cannot_remove_empty_scope","clientInfoDecodingError",0,"client_info_decoding_error","clientInfoEmptyError",0,"client_info_empty_error","emptyInputScopeSet",0,"empty_input_scopeset","endSessionEndpointNotSupported",0,"end_session_endpoint_not_supported","endpointResolutionError",0,"endpoints_resolution_error","hashNotDeserialized",0,"hash_not_deserialized","invali

1dCacheEnvironment",0,"invalid_cache_environment","invalidCacheRecord",0,"invalid_cache_record","invalidState",0,"invalid_state","keyIdMissing",0,"key_id_missing","methodNotImplemented",0,"method_not_implemented","misplacedResourceParam",0,"misplaced_resource_parameter","multipleMatchingAppMetadata",0,"multiple_matching_appMetadata","multipleMatchingTokens",0,"multiple_matching_tokens","nestedAppAuthBridgeDisabled",0,"nested_app_auth_bridge_disabled","networkError",0,"network_error","noAccountFound",0,"no_account_found","noAccountInSilentRequest",0,"no_account_in_silent_request","noCryptoObject",0,"no_crypto_object","noNetworkConnectivity",0,"no_network_connectivity","nonceMismatch",0,"nonce_mismatch","nullOrEmptyToken",0,"null_or_empty_token","openIdConfigError",0,"openid_config_error","platformBrokerError",0,"platform_broker_error","requestCannotBeMade",0,"request_cannot_be_made","resourceParameterRequired",0,"resource_parameter_required","stateMismatch",0,"state_mismatch","stateNotFound",0,"state_not_found","tokenClaimsCnfRequiredForSignedJwt",0,"token_claims_cnf_required_for_signedjwt","tokenParsingError",0,"token_parsing_error","tokenRefreshRequired",0,"token_refresh_required","unexpectedCredentialType",0,"unexpected_credential_type","userCanceled",0,"user_canceled"])},635690,945921,e=>{"use strict";var t=e.i(312267);e.s(["ClientAuthErrorCodes",0,t],635690);var r=e.i(879439);class o extends r.AuthError{constructor(e,t,r){super(e,t,r),this.name="JoseHeaderError",Object.setPrototypeOf(this,o.prototype)}}e.s(["createJoseHeaderError",0,function(e,t){return new o(e,t)}],945921)},693933,462178,e=>{"use strict";var t=e.i(879439);class r extends t.AuthError{constructor(e,t){super(e,t),this.name="ClientConfigurationError",Object.setPrototypeOf(this,r.prototype)}}e.s(["createClientConfigurationError",0,function(e,t){return new r(e,t)}],693933),e.s(["StringUtils",0,class{static isEmptyObj(e){if(e)try{let t=JSON.parse(e);return 0===Object.keys(t).length}catch(e){}return!0}static startsWith(e,t){return 0===e.indexOf(t)}static endsWith(e,t){return e.length>=t.length&&e.lastIndexOf(t)===e.length-t.length}static queryStringToObject(e){let t={},r=e.split("&"),o=e=>decodeURIComponent(e.replace(/\+/g," "));return r.forEach(e=>{if(e.trim()){let[r,i]=e.split(/=(.+)/g,2);r&&i&&(t[o(r)]=o(i))}}),t}static trimArrayEntries(e){return e.map(e=>e.trim())}static removeEmptyStringsFromArray(e){return e.filter(e=>!!e)}static jsonParseHelper(e){try{return JSON.parse(e)}catch(e){return null}}}],462178)},425025,e=>{"use strict";e.s(["authorityMismatch",0,"authority_mismatch","authorityUriInsecure",0,"authority_uri_insecure","cannotAllowPlatformBroker",0,"cannot_allow_platform_broker","cannotSetOIDCOptions",0,"cannot_set_OIDCOptions","claimsRequestParsingError",0,"claims_request_parsing_error","emptyInputScopesError",0,"empty_input_scopes_error","invalidAuthenticationHeader",0,"invalid_authentication_header","invali

1dAuthorityMetadata",0,"invalid_authority_metadata","invalidClaims",0,"invalid_claims","invalidCloudDiscoveryMetadata",0,"invalid_cloud_discovery_metadata","invalidCodeChallengeMethod",0,"invalid_code_challenge_method","invalidDpopHtm",0,"invalid_dpop_htm","invalidDpopHtu",0,"invalid_dpop_htu","invalidPlatformBrokerConfiguration",0,"invalid_platform_broker_configuration","invalidRequestMethodForEAR",0,"invalid_request_method_for_EAR","invalidResponseMode",0,"invalid_response_mode","issuerValidationFailed",0,"issuer_validation_failed","logoutRequestEmpty",0,"logout_request_empty","missingNonceAuthenticationHeader",0,"missing_nonce_authentication_header","missingSshJwk",0,"missing_ssh_jwk","missingSshKid",0,"missing_ssh_kid","pkceParamsMissing",0,"pkce_params_missing","redirectUriEmpty",0,"redirect_uri_empty","tokenRequestEmpty",0,"token_request_empty","untrustedAuthority",0,"untrusted_authority","urlEmptyError",0,"empty_url_error","urlParseError",0,"url_parse_error"])},16965,753798,e=>{"use strict";var t=e.i(879439);let r="ui_not_allowed",o="interaction_required",i="consent_required",n="login_required",s="bad_token",a="interrupted_user";e.s(["badToken",0,s,"consentRequired",0,i,"interactionRequired",0,o,"interruptedUser",0,a,"loginRequired",0,n,"nativeAccountUnavailable",0,"native_account_unavailable","noTokensFound",0,"no_tokens_found","refreshTokenExpired",0,"refresh_token_expired","uiNotAllowed",0,r],753798),e.i(753798);let c=[o,i,n,s,r,a],l=["message_only","additional_action","basic_action","user_password_expired","consent_required","bad_token","ui_not_allowed","interrupted_user"];class h extends t.AuthError{constructor(e,t,r,o,i,n,s,a){super(e,t,r,o),Object.setPrototypeOf(this,h.prototype),this.timestamp=i||"",this.traceId=n||"",this.claims=s||"",this.name="InteractionRequiredAuthError",this.errorNo=a}}e.s(["InteractionRequiredAuthError",0,h,"createInteractionRequiredAuthError",0,function(e,t,r){return new h(e,t,r)},"isInteractionRequiredError",0,function(e,t,r){let o=!!e&&c.indexOf(e)>-1,i=!!r&&l.indexOf(r)>-1,n=!!t&&c.some(e=>t.indexOf(e)>-1);return o||n||i}],16965)},690473,e=>{"use strict";var t,r;(r=t||(t={}))[r.Error=0]="Error",r[r.Warning=1]="Warning",r[r.Info=2]="Info",r[r.Verbose=3]="Verbose",r[r.Trace=4]="Trace";let o=new Map;class i{constructor(e,r,o){this.level=t.Info;const n=e||i.createDefaultLoggerOptions();this.localCallback=n.loggerCallback||(()=>{}),this.piiLoggingEnabled=n.piiLoggingEnabled||!1,this.level="number"==typeof n.logLevel?n.logLevel:t.Info,this.packageName=r||"",this.packageVersion=o||""}static createDefaultLoggerOptions(){return{loggerCallback:()=>{},piiLoggingEnabled:!1,logLevel:t.Info}}clone(e,t){return new i({loggerCallback:this.localCallback,piiLoggingEnabled:this.piiLoggingEnabled,logLevel:this.level},e,t)}logMessage(e,r){let i=r.correlationId,n=function(e){if(e.length<6||e.length>6&&" "!==e[6])return null;for(let t=0;t<6;t++){let r=e[t];if(!(r>="a"&&r<="z"||r>="A"&&r<="Z"||r>="0"&&r<="9"))return null}return e.substring(0,6)}(e);if(n&&!function(e,t){let r=Date.now(),i=o.get(e);if(i){var n;n=i,o.delete(e),o.set(e,n)}else if(i={logs:[],firstEventTime:r},o.set(e,i),o.size>50){let e=o.keys().next().value;void 0!==e&&o.delete(e)}i.logs.push({...t,milliseconds:r-i.firstEventTime}),i.logs.length>500&&i.logs.shift()}(i,{hash:n,level:r.logLevel,containsPii:r.containsPii||!1,milliseconds:0}),r.logLevel>this.level||!this.piiLoggingEnabled&&r.containsPii)return;let s=new Date().toUTCString(),a=`[${s}] : [${i}]`,c=`${a} : ${this.packageName}@${this.packageVersion} : ${t[r.logLevel]} - ${e}`;this.executeCallback(r.logLevel,c,r.containsPii||!1)}executeCallback(e,t,r){this.localCallback&&this.localCallback(e,t,r)}error(e,r){this.logMessage(e,{logLevel:t.Error,containsPii:!1,correlationId:r})}errorPii(e,r){this.logMessage(e,{logLevel:t.Error,containsPii:!0,correlationId:r})}warning(e,r){this.logMessage(e,{logLevel:t.Warning,containsPii:!1,correlationId:r})}warningPii(e,r){this.logMessage(e,{logLevel:t.Warning,containsPii:!0,correlationId:r})}info(e,r){this.logMessage(e,{logLevel:t.Info,containsPii:!1,correlationId:r})}infoPii(e,r){this.logMessage(e,{logLevel:t.Info,containsPii:!0,correlationId:r})}verbose(e,r){this.logMessage(e,{logLevel:t.Verbose,containsPii:!1,correlationId:r})}verbosePii(e,r){this.logMessage(e,{logLevel:t.Verbose,containsPii:!0,correlationId:r})}trace(e,r){this.logMessage(e,{logLevel:t.Trace,containsPii:!1,correlationId:r})}tracePii(e,r){this.logMessage(e,{logLevel:t.Trace,containsPii:!0,correlationId:r})}isPiiLoggingEnabled(){return this.piiLoggingEnabled||!1}}e.s(["LogLevel",0,t,"Logger",0,i])},511955,756444,835355,337507,e=>{"use strict";var t=e.i(499057),r=e.i(14128),o=e.i(770662),i=e.i(879239),n=e.i(693933),s=e.i(425025);

1let a={[t.ClaimsRequestKeys.SIGNIN_STATE]:{essential:!1},[t.ClaimsRequestKeys.LOGIN_HINT]:{essential:!1}};function c(e,t=""){let r;try{r=JSON.parse(e)}catch(e){throw(0,n.createClientConfigurationError)(s.invalidClaims,t)}if(!l(r))throw(0,n.createClientConfigurationError)(s.invalidClaims,t);return r}function l(e){return"object"==typeof e&&null!==e&&!Array.isArray(e)}function h(e,r,o="",i){let n=e?c(e,o):{};i?.trim()&&(n=function e(t,r){let o={...t};for(let[t,i]of Object.entries(r)){let r=o[t];l(r)&&l(i)?o[t]=e(r,i):o[t]=i}return o}(n,c(i,o))),Object.prototype.hasOwnProperty.call(n,t.ClaimsRequestKeys.ID_TOKEN)||(n[t.ClaimsRequestKeys.ID_TOKEN]={});let s=n[t.ClaimsRequestKeys.ID_TOKEN];for(let[e,t]of Object.entries(a))e in s||(s[e]=t);return r&&r.length>0&&(Object.prototype.hasOwnProperty.call(n,t.ClaimsRequestKeys.ACCESS_TOKEN)||(n[t.ClaimsRequestKeys.ACCESS_TOKEN]={}),n[t.ClaimsRequestKeys.ACCESS_TOKEN][t.ClaimsRequestKeys.XMS_CC]={values:r}),JSON.stringify(n)}e.s(["addApplicationTelemetry",0,function(e,t){t?.appName&&e.set(r.X_APP_NAME,t.appName),t?.appVersion&&e.set(r.X_APP_VER,t.appVersion)},"addAttributeTokens",0,function(e,t){let o=(0,i.serializeAttributeTokens)(t);o?e.set(r.ATTRIBUTE_TOKENS,o):e.delete(r.ATTRIBUTE_TOKENS)},"addAuthorizationCode",0,function(e,t){e.set(r.CODE,t)},"addBrokerParameters",0,function(e,t,o){e.has(r.BROKER_CLIENT_ID)||e.set(r.BROKER_CLIENT_ID,t),e.has(r.BROKER_REDIRECT_URI)||e.set(r.BROKER_REDIRECT_URI,o)},"addCcsOid",0,function(e,r){e.set(t.HeaderNames.CCS_HEADER,`Oid:${r.uid}@${r.utid}`)},"addCcsUpn",0,function(e,r){e.set(t.HeaderNames.CCS_HEADER,`UPN:${r}`)},"addClaims",0,function(e,t,o,i,n,s){let a=h(o,n&&e.has(r.BROKER_CLIENT_ID)?void 0:i,t,s);e.set(r.CLAIMS,a)},"addCliData",0,function(e){e.set(r.CLI_DATA,"1")},"addClientAssertion",0,function(e,t){t&&e.set(r.CLIENT_ASSERTION,t)},"addClientAssertionType",0,function(e,t){t&&e.set(r.CLIENT_ASSERTION_TYPE,t)},"addClientId",0,function(e,t){e.set(r.CLIENT_ID,t)},"addClientInfo",0,function(e){e.set(t.CLIENT_INFO,"1")},"addClientSecret",0,function(e,t){e.set(r.CLIENT_SECRET,t)},"addCodeChallengeParams",0,function(e,t,o){if(t&&o)e.set(r.CODE_CHALLENGE,t),e.set(r.CODE_CHALLENGE_METHOD,o);else throw(0,n.createClientConfigurationError)(s.pkceParamsMissing,"")},"addCodeVerifier",0,function(e,t){e.set(r.CODE_VERIFIER,t)},"addCorrelationId",0,function(e,t){e.set(r.CLIENT_REQUEST_ID,t)},"addDeviceCode",0,function(e,t){e.set(r.DEVICE_CODE,t)},"addDomainHint",0,function(e,t){e.set(r.DOMAIN_HINT,t)},"addEARParameters",0,function(e,t){e.set(r.EAR_JWK,encodeURIComponent(t)),e.set(r.EAR_JWE_CRYPTO,"eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0")},"addExtraParameters",0,function(e,t){Object.entries(t).forEach(([t,r])=>{!e.has(t)&&r&&e.set(t,r)})},"addGrantType",0,function(e,t){e.set(r.GRANT_TYPE,t)},"addIdTokenHint",0,function(e,t){e.set(r.ID_TOKEN_HINT,t)},"addInstanceAware",0,function(e){e.has(r.INSTANCE_AWARE)||e.set(r.INSTANCE_AWARE,"true")},"addLibraryInfo",0,function(e,t){e.set(r.X_CLIENT_SKU,t.sku),e.set(r.X_CLIENT_VER,t.version),t.os&&e.set(r.X_CLIENT_OS,t.os),t.cpu&&e.set(r.X_CLIENT_CPU,t.cpu)},"addLoginHint",0,function(e,t){e.set(r.LOGIN_HINT,t)},"addLogoutHint",0,function(e,t){e.set(r.LOGOUT_HINT,t)},"addNativeBroker",0,function(e){e.set(r.NATIVE_BROKER,"1")},"addNonce",0,function(e,t){e.set(r.NONCE,t)},"addOboAssertion",0,function(e,t){e.set(r.OBO_ASSERTION,t)},"addPassword",0,function(e,r){e.set(t.PasswordGrantConstants.password,r)},"addPopToken",0,function(e,o){o&&(e.set(r.TOKEN_TYPE,t.AuthenticationScheme.POP),e.set(r.REQ_CNF,o))},"addPostLogoutRedirectUri",0,function(e,t){e.set(r.POST_LOGOUT_URI,t)},"addPrompt",0,function(e,t){e.set(r.PROMPT,t)},"addRedirectUri",0,function(e,t){e.set(r.REDIRECT_URI,t)},"addRefreshToken",0,function(e,t){e.set(r.REFRESH_TOKEN,t)},"addRequestTokenUse",0,function(e,t){e.set(r.REQUESTED_TOKEN_USE,t)},"addResource",0,function(e,t){t&&e.set(r.RESOURCE,t)},"addResponseMode",0,function(e,o){e.set(r.RESPONSE_MODE,o||t.ResponseMode.QUERY)},"addResponseType",0,function(e,t){e.set(r.RESPONSE_TYPE,t)},"addScopes",0,function(e,i,n,s=!0,a=t.OIDC_DEFAULT_SCOPES){!s||a.includes("openid")||i.includes("openid")||a.push("openid");let c=s?[...i||[],...a]:i||[],l=new o.ScopeSet(c,n);e.set(r.SCOPE,l.printScopes())},"addServerTelemetry",0,function(e,t){e.set(r.X_CLIENT_CURR_TELEM,t.generateCurrentRequestHeaderValue()),e.set(r.X_CLIENT_LAST_TELEM,t.generateLastRequestHeaderValue())},"addSid",0,function(e,t){e.set(r.SID,t)},"addSshJwk",0,function(e,o){o&&(e.set(r.TOKEN_TYPE,t.AuthenticationScheme.SSH),e.set(r.REQ_CNF,o))},"addState",0,function(e,t){t&&e.set(r.STATE,t)},"addThrottling",0,function(e){e.set(r.X_MS_LIB_CAPABILITY,t.X_MS_LIB_CAPABILITY_VALUE)},"addUsername",0,function(e,r){e.set(t.PasswordGrantConstants.username,r)},"buildMergedClaims",0,h,"instrumentBrokerParams",0,function(e,t,o){if(!t)return;let i=e.get(r.CLIENT_ID);i&&e.has(r.BROKER_CLIENT_ID)&&o?.addFields({embeddedClientId:i,embeddedRedirectUri:e.get(r.REDI

1RECT_URI)},t)}],756444);var d=e.i(756444);e.s(["RequestParameterBuilder",0,d],511955);var u=e.i(683064),g=e.i(312267);function p(e){return e.startsWith("#/")?e.substring(2):e.startsWith("#")||e.startsWith("?")?e.substring(1):e}e.s(["getDeserializedResponse",0,function(e){if(!e||0>e.indexOf("="))return null;try{let t=p(e),r=Object.fromEntries(new URLSearchParams(t));if(r.code||r.ear_jwe||r.error||r.error_description||r.state)return r}catch(e){throw(0,u.createClientAuthError)(g.hashNotDeserialized,"")}return null},"mapToQueryString",0,function(e){let t=[];return e.forEach((e,r)=>{t.push(`${r}=${encodeURIComponent(e)}`)}),t.join("&")},"normalizeUrlForComparison",0,function(e,t,r){if(!e)return e;let o=e.split("#")[0];if(!o)return o;try{let e,t=new URL(o);t.search||(t.search="");try{e=decodeURIComponent(t.pathname)}catch(r){e=t.pathname}return e.endsWith("/")||(e+="/"),t.pathname=e,t.href}catch(e){throw t?.error(`15apdm ${e}`,r||""),(0,n.createClientConfigurationError)(s.urlParseError,r||"")}},"stripLeadingHashOrQuery",0,p,"validateUrl",0,function(e,t,r){try{new URL(e)}catch(e){throw t?.error(`1lrjz7 ${e}`,r||""),(0,n.createClientConfigurationError)(s.urlParseError,r||"")}}],835355);var m=e.i(835355);e.s(["UrlUtils",0,m],337507)},770662,e=>{"use strict";var t=e.i(693933),r=e.i(462178),o=e.i(683064),i=e.i(499057),n=e.i(425025),s=e.i(312267);e.s(["ScopeSet",0,class e{constructor(e,o){this.correlationId=o;const i=e?r.StringUtils.trimArrayEntries([...e]):[],s=i?r.StringUtils.removeEmptyStringsFromArray(i):[];if(!s||!s.length)throw(0,t.createClientConfigurationError)(n.emptyInputScopesError,o);this.scopes=new Set,s.forEach(e=>this.scopes.add(e))}static fromString(t,r){return new e((t||"").split(" "),r)}static createSearchScopes(t,r){let o=new e(t&&t.length>0?t:[...i.OIDC_DEFAULT_SCOPES],r);return o.containsOnlyOIDCScopes()?o.removeScope(i.OFFLINE_ACCESS_SCOPE):o.removeOIDCScopes(),o}containsScope(t){let r=new e(this.printScopesLowerCase().split(" "),this.correlationId);return!!t&&r.scopes.has(t.toLowerCase())}containsScopeSet(e){return!!e&&!(e.scopes.size<=0)&&this.scopes.size>=e.scopes.size&&e.asArray().every(e=>this.containsScope(e))}containsOnlyOIDCScopes(){let e=0;return i.OIDC_SCOPES.forEach(t=>{this.containsScope(t)&&(e+=1)}),this.scopes.size===e}appendScope(e){e&&this.scopes.add(e.trim())}appendScopes(e){try{e.forEach(e=>this.appendScope(e))}catch(e){throw(0,o.createClientAuthError)(s.cannotAppendScopeSet,this.correlationId)}}removeScope(e){if(!e)throw(0,o.createClientAuthError)(s.cannotRemoveEmptyScope,this.correlationId);this.scopes.delete(e.trim())}removeOIDCScopes(){i.OIDC_SCOPES.forEach(e=>{this.scopes.delete(e)})}unionScopeSets(e){if(!e)throw(0,o.createClientAuthError)(s.emptyInputScopeSet,this.correlationId);let t=new Set;return e.scopes.forEach(e=>t.add(e.toLowerCase())),this.scopes.forEach(e=>t.add(e.toLowerCase())),t}intersectingScopeSets(e){if(!e)throw(0,o.createClientAuthError)(s.emptyInputScopeSet,this.correlationId);e.containsOnlyOIDCScopes()||e.removeOIDCScopes();let t=this.unionScopeSets(e),r=e.getScopeCount(),i=this.getScopeCount();return t.size<i+r}getScopeCount(){return this.scopes.size}asArray(){let e=[];return this.scopes.forEach(t=>e.push(t)),e}printScopes(){return this.scopes?this.asArray().join(" "):""}printScopesLowerCase(){return this.printScopes().toLowerCase()}}])},232992,e=>{"use strict";var t=e.i(693933),r=e.i(462178),o=e.i(499057),i=e.i(425025);class n{get urlString(){return this._urlString}constructor(e,r){if(this._urlString=e,this.correlationId=r,!this._urlString)throw(0,t.createClientConfigurationError)(i.urlEmptyError,r);e.includes("#")||(this._urlString=n.canonicalizeUri(e))}static canonicalizeUri(e){if(e){let t=e.toLowerCase();return r.StringUtils.endsWith(t,"?")?t=t.slice(0,-1):r.StringUtils.endsWith(t,"?/")&&(t=t.

1slice(0,-2)),r.StringUtils.endsWith(t,"/")||(t+="/"),t}return e}validateAsUri(){let e;try{e=this.getUrlComponents()}catch(e){throw(0,t.createClientConfigurationError)(i.urlParseError,this.correlationId)}if(!e.HostNameAndPort||!e.PathSegments)throw(0,t.createClientConfigurationError)(i.urlParseError,this.correlationId);if(!e.Protocol||"https:"!==e.Protocol.toLowerCase())throw(0,t.createClientConfigurationError)(i.authorityUriInsecure,this.correlationId)}static appendQueryString(e,t){return t?0>e.indexOf("?")?`${e}?${t}`:`${e}&${t}`:e}static removeHashFromUrl(e){return n.canonicalizeUri(e.split("#")[0])}replaceTenantPath(e){let t=this.getUrlComponents(),r=t.PathSegments;return e&&0!==r.length&&(r[0]===o.AADAuthority.COMMON||r[0]===o.AADAuthority.ORGANIZATIONS)&&(r[0]=e),n.constructAuthorityUriFromObject(t,this.correlationId)}getUrlComponents(){let e=RegExp("^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?"),r=this.urlString.match(e);if(!r)throw(0,t.createClientConfigurationError)(i.urlParseError,this.correlationId);let o={Protocol:r[1],HostNameAndPort:r[4],AbsolutePath:r[5],QueryString:r[7]},n=o.AbsolutePath.split("/");return o.PathSegments=n=n.filter(e=>e&&e.length>0),o.QueryString&&o.QueryString.endsWith("/")&&(o.QueryString=o.QueryString.substring(0,o.QueryString.length-1)),o}static getDomainFromUrl(e,r){let o=RegExp("^([^:/?#]+://)?([^/?#]*)"),n=e.match(o);if(!n)throw(0,t.createClientConfigurationError)(i.urlParseError,r);return n[2]}static getAbsoluteUrl(e,t,r){if(e[0]===o.FORWARD_SLASH){let o=new n(t,r).getUrlComponents();return o.Protocol+"//"+o.HostNameAndPort+e}return e}static constructAuthorityUriFromObject(e,t){return new n(e.Protocol+"//"+e.HostNameAndPort+"/"+e.PathSegments.join("/"),t)}}e.s(["UrlString",0,n])},499057,e=>{"use strict";let t="https://login.microsoftonline.com/common/",r=`${t}discovery/instance?api-version=1.1&authorization_endpoint=`,o="openid",i="profile",n="offline_access",s="email",a=[o,i,n],c=[...a,s];e.s(["AADAuthority",0,{COMMON:"common",ORGANIZATIONS:"organizations",CONSUMERS:"consumers"},"AAD_INSTANCE_DISCOVERY_ENDPT",0,r,"AAD_TENANT_DOMAIN_SUFFIX",0,".onmicrosoft.com","ADFS",0,"adfs","APP_METADATA",0,"appmetadata","AUTHORITY_METADATA_CACHE_KEY",0,"authority-metadata","AUTHORITY_METADATA_REFRESH_TIME_SECONDS",0,86400,"AUTHORIZATION_PENDING",0,"authorization_pending","AZURE_REGION_AUTO_DISCOVER_FLAG",0,"TryAutoDetect","AuthenticationScheme",0,{BEARER:"Bearer",POP:"pop",SSH:"ssh-cert"},"AuthorityMetadataSource",0,{CONFIG:"config",CACHE:"cache",NETWORK:"network",HARDCODED_VALUES:"hardcoded_values"},"CACHE_ACCOUNT_TYPE_ADFS",0,"ADFS","CACHE_ACCOUNT_TYPE_GENERIC",0,"Generic","CACHE_ACCOUNT_TYPE_MSAV1",0,"MSA","CACHE_ACCOUNT_TYPE_MSSTS",0,"MSSTS","CACHE_KEY_SEPARATOR",0,"-","CIAM_AUTH_URL",0,".ciamlogin.com","CLIENT_INFO",0,"client_info","CLIENT_INFO_SEPARATOR",0,".","CLIENT_MISMATCH_ERROR",0,"client_mismatch","CODE_GRANT_TYPE",0,"authorization_code","CONSUMER_UTID",0,"9188040d-6c67-4c5b-b112-36a304b66dad","CacheOutcome",0,{NOT_APPLICABLE:"0",FORCE_REFRESH_OR_CLAIMS:"1",NO_CACHED_ACCESS_TOKEN:"2",CACHED_ACCESS_TOKEN_EXPIRED:"3",PROACTIVELY_REFRESHED:"4"},"CacheType",0,{ADFS:1001,MSA:1002,MSSTS:1003,GENERIC:1004,ACCESS_TOKEN:2001,REFRESH_TOKEN:2002,ID_TOKEN:2003,APP_METADATA:3001,UNDEFINED:9999},"ClaimsRequestKeys",0,{ACCESS_TOKEN:"access_token",XMS_CC:"xms_cc",ID_TOKEN:"id_token",SIGNIN_STATE:"signin_state",LOGIN_HINT:"login_hint"},"CodeChallengeMethodValues",0,{PLAIN:"plain",S256:"S256"},"CredentialType",0,{ID_TOKEN:"IdToken",ACCESS_TOKEN:"AccessToken",ACCESS_TOKEN_WITH_AUTH_SCHEME:"AccessToken_With_AuthScheme",REFRESH_TOKEN:"RefreshToken"},"DEFAULT_AUTHORITY",0,t,"DEFAULT_AUTHORITY_HOST",0,"login.microsoftonline.com","DEFAULT_COMMON_TENANT",0,"common","DEFAULT_MAX_THROTTLE_TIME_SECONDS",0,3600,"DEFAULT_THROTTLE_TIME_SECONDS",0,60,"DEFAULT_TOKEN_RENEWAL_OFFSET_SEC",0,300,"DSTS",0,"dstsv2","EMAIL_SCOPE",0,s,"EncodingTypes",0,{BASE64:"base64",HEX:"hex",UTF8:"utf-8"},"FORWARD_SLASH",0,"/","GrantType",0,{IMPLICIT_GRANT:"implicit",AUTHORIZATION_CODE_GRANT:"authorization_code",CLIENT_CREDENTIALS_GRANT:"client_credentials",RESOURCE_OWNER_PASSWORD_GRANT:"password",REFRESH_TOKEN_GRANT:"refresh_token",DEVICE_CODE_GRANT:"device_code",JWT_BEARER:"ur

1n:ietf:params:oauth:grant-type:jwt-bearer",USER_FIC:"user_fic"},"HTTP_BAD_REQUEST",0,400,"HTTP_CLIENT_ERROR",0,400,"HTTP_CLIENT_ERROR_RANGE_END",0,499,"HTTP_CLIENT_ERROR_RANGE_START",0,400,"HTTP_GATEWAY_TIMEOUT",0,504,"HTTP_GONE",0,410,"HTTP_MULTI_SIDED_ERROR",0,600,"HTTP_NOT_FOUND",0,404,"HTTP_REDIRECT",0,302,"HTTP_REQUEST_TIMEOUT",0,408,"HTTP_SERVER_ERROR",0,500,"HTTP_SERVER_ERROR_RANGE_END",0,599,"HTTP_SERVER_ERROR_RANGE_START",0,500,"HTTP_SERVICE_UNAVAILABLE",0,503,"HTTP_SUCCESS",0,200,"HTTP_SUCCESS_RANGE_END",0,299,"HTTP_SUCCESS_RANGE_START",0,200,"HTTP_TOO_MANY_REQUESTS",0,429,"HTTP_UNAUTHORIZED",0,401,"HeaderNames",0,{CONTENT_TYPE:"Content-Type",CONTENT_LENGTH:"Content-Length",RETRY_AFTER:"Retry-After",CCS_HEADER:"X-AnchorMailbox",WWWAuthenticate:"WWW-Authenticate",AuthenticationInfo:"Authentication-Info",X_MS_REQUEST_ID:"x-ms-request-id",X_MS_HTTP_VERSION:"x-ms-httpver"},"HttpMethod",0,{GET:"GET",POST:"POST"},"IMDS_ENDPOINT",0,"http://169.254.169.254/metadata/instance/compute","IMDS_TIMEOUT",0,2e3,"IMDS_VERSION",0,"2021-02-01","INVALID_GRANT_ERROR",0,"invalid_grant","INVALID_INSTANCE",0,"invalid_instance","JsonWebTokenTypes",0,{Jwt:"JWT",Jwk:"JWK",Pop:"pop"},"KNOWN_PUBLIC_CLOUDS",0,["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],"NOT_APPLICABLE",0,"N/A","NOT_AVAILABLE",0,"Not Available","OAuthResponseType",0,{CODE:"code",IDTOKEN_TOKEN:"id_token token",IDTOKEN_TOKEN_REFRESHTOKEN:"id_token token refresh_token"},"OFFLINE_ACCESS_SCOPE",0,n,"OIDC_DEFAULT_SCOPES",0,a,"OIDC_SCOPES",0,c,"ONE_DAY_IN_MS",0,864e5,"OPENID_SCOPE",0,o,"PROFILE_SCOPE",0,i,"PasswordGrantConstants",0,{username:"username",password:"password"},"PersistentCacheKeys",0,{ACTIVE_ACCOUNT_FILTERS:"active-account-filters"},"PromptValue",0,{LOGIN:"login",SELECT_ACCOUNT:"select_account",CONSENT:"consent",NONE:"none",CREATE:"create",NO_SESSION:"no_session"},"REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX",0,"login.microsoft.com","RESOURCE_DELIM",0,"|","RegionDiscoveryOutcomes",0,{CONFIGURED_MATCHES_DETECTED:"1",CONFIGURED_NO_AUTO_DETECTION:"2",CONFIGURED_NOT_DETECTED:"3",AUTO_DETECTION_REQUESTED_SUCCESSFUL:"4",AUTO_DETECTION_REQUESTED_FAILED:"5"},"RegionDiscoverySources",0,{FAILED_AUTO_DETECTION:"1",INTERNAL_CACHE:"2",ENVIRONMENT_VARIABLE:"3",IMDS:"4"},"ResponseMode",0,{QUERY:"query",FRAGMENT:"fragment",FORM_POST:"form_post"},"S256_CODE_CHALLENGE_METHOD",0,"S256","SERVER_TELEM_CACHE_KEY",0,"server-telemetry","SERVER_TELEM_CATEGORY_SEPARATOR",0,"|","SERVER_TELEM_MAX_CACHED_ERRORS",0,50,"SERVER_TELEM_MAX_CUR_HEADER_BYTES",0,80,"SERVER_TELEM_MAX_LAST_HEADER_BYTES",0,330,"SERVER_TELEM_OVERFLOW_FALSE",0,"0","SERVER_TELEM_OVERFLOW_TRUE",0,"1","SERVER_TELEM_SCHEMA_VERSION",0,5,"SERVER_TELEM_UNKNOWN_ERROR",0,"unknown_error","SERVER_TELEM_VALUE_SEPARATOR",0,",","SHR_NONCE_VALIDITY",0,240,"SKU",0,"msal.js.common","THE_FAMILY_ID",0,"1","THROTTLING_PREFIX",0,"throttling","URL_FORM_CONTENT_TYPE",0,"application/x-www-form-urlencoded;charset=utf-8","X_MS_LIB_CAPABILITY_VALUE",0,"retry-after, h429"])},889528,e=>{"use strict";e.s(["invoke",0,(e,t,r,o,i)=>(...n)=>{r.trace(`1plfzx ${t}`,i);let s=o.startMeasurement(t,i);i&&o.incrementFields({[`ext.${t}CallCount`]:1},i);try{let o=e(...n);return s.end({success:!0}),r.trace(`1g8n6a ${t}`,i),o}catch(e){r.trace(`0cfd8i ${t}`,i);try{r.trace(JSON.stringify(e),i)}catch(e){r.trace("00dty7",i)}throw s.end({success:!1},e),e}},"invokeAsync",0,(e,t,r,o,i)=>(...n)=>{r.trace(`1plfzx ${t}`,i);let s=o.startMeasurement(t,i);return i&&o.incrementFields({[`ext.${t}CallCount`]:1},i),e(...n).then(e=>(r.trace(`1g8n6a ${t}`,i),s.end({success:!0}),e)).catch(e=>{r.trace(`0cfd8i ${t}`,i);try{r.trace(JSON.stringify(e),i)}catch(e){r.trace("00dty7",i)}throw s.end({success:!1},e),e})}])},138385,859111,e=>{"use strict";var t=e.i(499057),r=e.i(683064),o=e.i(312267);function i(e,t,i){if(!e)throw(0,r.createClientAuthError)(o.noCryptoObject,t);let n={id:e.createNewGuid()};i&&(n.meta=i);let s=JSON.stringify(n);return e.base64Encode(s)}e.s(["generateLibraryState",0,i,"parseRequestState",0,function(e,i,n){if(!e)throw(0,r.createClientAuthError)(o.noCryptoObject,n);if(!i)throw(0,r.createClientAuthError)(o.invalidState,n);try{let r=i.split(t.RESOURCE_DELIM),o=r[0],n=r.length>1?r.slice(1).join(t.RESOURCE_DELIM):"",s=e(o),a=JSON.parse(s);return{userRequestState:n||"",libraryState:a}}catch(e){throw(0,r.createClientAuthError)(o.invalidState,n)}},"setRequestState",0,function(e,r,o,n){let s=i(e,n,o);return r?`${s}${t.RESOURCE_DELIM}${r}`:s}],859111);var n=e.i(859111);e.s(["ProtocolUtils",0,n],138385)},62729,e=>{"use strict";var t=e.i(709061),r=e.i(887499),o=e.i(650468),i=e.i(637540),n=e.i(113239),s=e.i(889528),a=e.i(628896),c=e.i(16965),l=e.i(683064),h=e.i(635690),d=e.i(312129),u=e.i(454551),g=e.i(741110),p=e.i(609628),m=e.i(586946),C=e.i(879439),y=e.i(367704),f=e.i(435011),I=e.i(457473),A=e.i(627005),E=e.i(773729),T=e.i(181038),w=e.i(380459),v=e.i(337190),_=e.i(691871),S=e.i(690473),R=e.i(448269);class k{constructor(e){this.eventCallbacks=new Map,this.logger=e||new S.Logger({},R.name,R.version),"u">typeof BroadcastChannel&&(this.broadcastChannel=new BroadcastChannel("msal.broadcast.event")),this.invokeCrossTabCallbacks=this.invokeCrossTabCallbacks.bind(this)}addEventCallback(e,t,r){if("u">typeof window){let o=r||(0,_.createGuid)();return this.eventCallbacks.has(o)?(this.logger.error(`1578i0 ${o}`,""),null):(this.eventCallbacks.set(o,[e,t||[]]),this.logger.verbose(`1cnec4 ${o}`,""),o)}return null}removeEventCallback(e){this.eventCallbacks.delete(e),this.logger.verbose(`12zotd ${e}`,"")}emitEvent(e,t,o,i,n){let s={eventType:e,interactionType:o||null,payload:i||null,error:n||null,correlationId:t,timestamp:Date.now()};switch(e){case r.EventType.LOGIN_SUCCESS:case r.EventType.LOGOUT_SUCCESS:case r.EventType.ACTIVE_ACCOUNT_CHANGED:this.broadcastChannel?.postMessage(s)}this.invokeCallbacks(s)}invokeCallbacks(e){this.eventCallbacks.forEach(([t,r],o)=>{(0===r.length||r.includes(e.eventType))&&(this.logger.verbose(`15jpwk ${o} ${e.eventType}`,""),t.apply(null,[e]))})}invokeCrossTabCallbacks(e){let t=e.data;this.invokeCallbacks(t)}subscribeCrossTab(){this.broadcastChannel?.addEventListener("message",this.invokeCrossTabCallbacks)}unsubscribeCrossTab(){this.broadcastChannel?.removeEventListener("message",this.invokeCrossTabCallbacks)}}var O=e.i(218798),P=e.i(953134),b=e.i(189462),N=e.i(232992),M=e.i(138385),U=e.i(756444),D=e.i(835355),L=e.i(499057),H=e.i(14128),q=e.i(206762),F=e.i(44732),x=e.i(357913);class B{generateId(){return"callback-id"}startMeasurement(e,t){return{end:()=>null,discard:()=>{},add:()=>{},increment:()=>{},event:{eventId:this.generateId(),status:1,authority:"",libraryName:"",libraryVersion:"",clientId:"",name:e,startTimeMs:Date.now(),correlationId:t||""}}}endMeasurement(){return null}discardMeasurements(){}removePerformanceCallback(){return!0}addPerformanceCallback(){return""}emitEvents(){}addFields(){}addGlobalFields(){}incrementFields(){}cacheEventByCorrelationId(){}}var K=e.i(312267);let G={tokenRenewalOffsetSeconds:L.DEFAULT_TOKEN_RENEWAL_OFFSET_SEC,preventCorsPreflight:!1},$={loggerCallback:()=>{},piiLoggingEnabled:!1,logLevel:S.LogLevel.Info,correlationId:""},z={async sendGetRequestAsync(){throw(0,l.createClientAuthError)(K.methodNotImplemented,"")},async sendPostRequestAsync(){throw(0,l.createClientAuthError)(K.methodNotImplemented,"")}},V={sku:L.SKU,version:q.version,cpu:"",os:""},j={clientSecret:"",clientAssertion:void 0},J={azureCloudInstance:F.AzureCloudInstance.None,tenant:`${L.DEFAULT_COMMON_TENANT}`},W={application:{appName:"",appVersion:""}};function Y({authOptions:e,systemOptions:t,loggerOptions:r,storageInterface:o,networkInterface:n,cryptoInterface:s,clientCredentials:a,library

1Info:c,telemetry:l,serverTelemetryManager:h,persistencePlugin:d,serializableCache:u}){let g={...$,...r};return{authOptions:{clientCapabilities:[],azureCloudOptions:J,instanceAware:!1,isMcp:!1,...e},systemOptions:{...G,...t},loggerOptions:g,storageInterface:o||new x.DefaultStorageClass(e.clientId,i.DEFAULT_CRYPTO_IMPLEMENTATION,new S.Logger(g,q.name,q.version),new B),networkInterface:n||z,cryptoInterface:s||i.DEFAULT_CRYPTO_IMPLEMENTATION,clientCredentials:a||j,libraryInfo:{...V,...c},telemetry:{...W,...l},serverTelemetryManager:h||null,persistencePlugin:d||null,serializableCache:u||null}}function Q(e){return e.authOptions.authority.options.protocolMode===P.ProtocolMode.OIDC}var X=e.i(739500),Z=e.i(280565),ee=e.i(43142);class et{constructor(e,t){this.cache=e,this.hasChanged=t}get cacheHasChanged(){return this.hasChanged}get tokenCache(){return this.cache}}var er=e.i(105819),eo=e.i(879239),ei=e.i(382487),en=e.i(490284);class es{constructor(e,t){this.cryptoUtils=e,this.performanceClient=t}async generateCnf(e,t){let r=await (0,s.invokeAsync)(this.generateKid.bind(this),en.PopTokenGenerateCnf,t,this.performanceClient,e.correlationId)(e),o=this.cryptoUtils.base64UrlEncode(JSON.stringify(r));return{kid:r.kid,reqCnfString:o}}async generateKid(e){return{kid:await this.cryptoUtils.getPublicKeyThumbprint(e),xms_ksl:"sw"}}async signPopToken(e,t,r){return this.signPayload(e,t,r)}async signPayload(e,t,r,o){let{resourceRequestMethod:i,resourceRequestUri:n,shrClaims:s,shrNonce:a,shrOptions:c}=r,l=n?new N.UrlString(n,r.correlationId):void 0,h=l?.getUrlComponents();return this.cryptoUtils.signJwt({at:e,ts:(0,ei.nowSeconds)(),m:i?.toUpperCase(),u:h?.HostNameAndPort,nonce:a||this.cryptoUtils.createNewGuid(),p:h?.AbsolutePath,q:h?.QueryString?[[],h.QueryString]:void 0,client_claims:s||void 0,...o},t,c,r.correlationId)}}var ea=C;class ec extends ea.AuthError{constructor(e,t,r,o,i,n){super(e,t,r,o),this.name="ServerError",this.errorNo=i,this.status=n,Object.setPrototypeOf(this,ec.prototype)}}var el=e.i(770662),eh=e.i(859111);class ed{constructor(e,t,r,o,i,n,s){this.clientId=e,this.cacheStorage=t,this.cryptoObj=r,this.logger=o,this.performanceClient=i,this.serializableCache=n,this.persistencePlugin=s}validateTokenResponse(e,t,r){if(e.error||e.error_description||e.suberror){let o=`Error(s): ${e.error_codes||L.NOT_AVAILABLE} - Timestamp: ${e.timestamp||L.NOT_AVAILABLE} - Description: ${e.error_description||L.NOT_AVAILABLE} - Correlation ID: ${e.correlation_id||L.NOT_AVAILABLE} - Trace ID: ${e.trace_id||L.NOT_AVAILABLE}`,i=e.error_codes?.length?e.error_codes[0]:void 0,n=new ec(e.error||"",e.correlation_id||"",o,e.suberror,i,e.status);if(r&&e.status&&e.status>=L.HTTP_SERVER_ERROR_RANGE_START&&e.status<=L.HTTP_SERVER_ERROR_RANGE_END)return void this.logger.warning(`16ks7j ${n}`,t);if(r&&e.status&&e.status>=L.HTTP_CLIENT_ERROR_RANGE_START&&e.status<=L.HTTP_CLIENT_ERROR_RANGE_END)return void this.logger.warning(`0g61x3 ${n}`,t);if((0,c.isInteractionRequiredError)(e.error,e.error_description,e.suberror))throw new c.InteractionRequiredAuthError(e.error||"",e.correlation_id||"",e.error_description,e.suberror,e.timestamp||"",e.trace_id||"",e.claims||"",i);throw n}}async handleServerTokenResponse(e,t,r,o,i,n,s,a,c,h,d){let u,g,p;if(e.id_token&&(u=(0,Z.extractTokenClaims)(e.id_token||"",this.cryptoObj.base64Decode,o.correlationId),n&&n.nonce&&u.nonce!==n.nonce))throw(0,l.createClientAuthError)(K.nonceMismatch,o.correlationId);this.homeAccountIdentifier=(0,er.generateHomeAccountId)(e.client_info||"",t.authorityType,this.logger,this.cryptoObj,o.correlationId,u),n&&n.state&&(g=(0,eh.parseRequestState)(this.cryptoObj.base64Decode,n.state,o.correlationId)),e.key_id=e.key_id||o.sshKid||void 0;let m=(0,eo.serializeAttributeTokens)(o.attributeTokens),C=this.generateCacheRecord(e,t,r,o,u,s,n,d??(m?{attribute_tokens:m}:void 0));try{if(this.persistencePlugin&&this.serializableCache&&(this.logger.verbose("0jbz5k",o.correlationId),p=new et(this.serializableCache,!0),await this.persistencePlugin.beforeCacheAccess(p)),a&&!c&&C.account&&this.cacheStorage.getAllAccounts({homeAccountId:C.account.homeAccountId,environment:C.account.environment},o.correlationId).length<1)return this.logger.warning("1gmt66",o.correlationId),this.performanceClient?.addFields({acntLoggedOut:!0},o.correlationId),await ed.generateAuthenticationResult(this.cryptoObj,t,C,!1,o,this.performanceClient,u,g,void 0,h);await this.cacheStorage.saveCacheRecord(C,o.correlationId,(0,Z.isKmsi)(u||{}),i,o.storeInCache)}finally{this.persistencePlugin&&this.serializableCache&&p&&(this.logger.verbose("1bh17u",o.correlationId),await this.persistencePlugin.afterCacheAccess(p))}return ed.generateAuthenticationResult(this.cryptoObj,t,C,!1,o,this.performanceClient,u,g,e,h)}generateCacheRecord(e,t,r,o,i,n,s,a){let c,h,d=t.getPreferredCache();if(!d)throw(0,l.createClientAuthError)(K.invalidCacheEnvironment,o.correlationId);let u=(0,ee.getTenantIdFromIdTokenClaims)(i);e.id_token&&i&&(c=(0,eo.createIdTokenEntity)(this.homeAccountIdentifier,d,e.id_token,this.clientId,u||""),h=eu(this.cacheStorage,t,this.homeAccountIdentifier,this.cryptoObj.base64Decode,o.

1correlationId,i,e.client_info,d,u,s,void 0,this.logger,this.performanceClient));let g=null;if(e.access_token){let i=e.scope?el.ScopeSet.fromString(e.scope,o.correlationId):new el.ScopeSet(o.scopes||[],o.correlationId),s=("string"==typeof e.expires_in?parseInt(e.expires_in,10):e.expires_in)||0,c=("string"==typeof e.ext_expires_in?parseInt(e.ext_expires_in,10):e.ext_expires_in)||0,l=("string"==typeof e.refresh_in?parseInt(e.refresh_in,10):e.refresh_in)||void 0,h=r+s;g=(0,eo.createAccessTokenEntity)(this.homeAccountIdentifier,d,e.access_token,this.clientId,u||t.tenant||"",i.printScopes(),h,h+c,this.cryptoObj.base64Decode,o.correlationId,l&&l>0?r+l:void 0,e.token_type,n,e.key_id,a);let p=o.resource||null;p&&(g.resource=p)}let p=null;if(e.refresh_token){let t;e.refresh_token_expires_in&&(t=r+("string"==typeof e.refresh_token_expires_in?parseInt(e.refresh_token_expires_in,10):e.refresh_token_expires_in),this.performanceClient?.addFields({ntwkRtExpiresOnSeconds:t},o.correlationId)),p=(0,eo.createRefreshTokenEntity)(this.homeAccountIdentifier,d,e.refresh_token,this.clientId,e.foci,n,t)}let m=null;return e.foci&&(m={clientId:this.clientId,environment:d,familyId:e.foci}),{account:h,idToken:c,accessToken:g,refreshToken:p,appMetadata:m}}static async generateAuthenticationResult(e,t,r,o,i,n,s,a,c,h){let d,u,g="",p=[],m=null,C="";if(r.accessToken){if(r.accessToken.tokenType!==L.AuthenticationScheme.POP||i.popKid)g=r.accessToken.secret;else{let t=new es(e,n),{secret:o,keyId:s}=r.accessToken;if(!s)throw(0,l.createClientAuthError)(K.keyIdMissing,i.correlationId);g=await t.signPopToken(o,s,i)}p=el.ScopeSet.fromString(r.accessToken.target,i.correlationId).asArray(),m=(0,ei.toDateFromSeconds)(r.accessToken.expiresOn),d=(0,ei.toDateFromSeconds)(r.accessToken.extendedExpiresOn),r.accessToken.refreshOn&&(u=(0,ei.toDateFromSeconds)(r.accessToken.refreshOn))}r.appMetadata&&(C=r.appMetadata.familyId===L.THE_FAMILY_ID?L.THE_FAMILY_ID:"");let y=s?.oid||s?.sub||"",f=s?.tid||"";if(c?.spa_accountid&&r.account){r.account.nativeAccountId=c?.spa_accountid;let e=f||r.account.realm;if(r.account.tenantProfiles){let t=r.account.tenantProfiles.find(t=>t.tenantId===e);t&&(t.nativeAccountId=c.spa_accountid)}}let I=r.account?(0,X.updateAccountTenantProfileData)((0,er.getAccountInfo)(r.account),void 0,s,r.idToken?.secret):null;return{authority:t.canonicalAuthority,uniqueId:y,tenantId:f,scopes:p,account:I,idToken:r?.idToken?.secret||"",idTokenClaims:s||{},accessToken:g,fromCache:o,expiresOn:m,extExpiresOn:d,refreshOn:u,correlationId:i.correlationId,requestId:h||"",familyId:C,tokenType:r.accessToken?.tokenType||"",state:a?a.userRequestState:"",cloudGraphHostName:r.account?.cloudGraphHostName||"",msGraphHost:r.account?.msGraphHost||"",code:c?.spa_code,fromPlatformBroker:!1}}}function eu(e,t,r,o,i,n,s,a,c,l,h,d,u){d?.verbose("09jz0t",i);let g=a||t.getPreferredCache(),p=e.getAccountsFilteredBy({homeAccountId:r,environment:g},i);u?.addFields({cacheMatchedAccounts:p.length},i),p.length>1&&d?.warning("0x7ad1",i);let m=(1===p.length?p[0]:null)||(0,er.createAccountEntity)({homeAccountId:r,idTokenClaims:n,clientInfo:s,environment:a,cloudGraphHostName:l?.cloud_graph_host_name,msGraphHost:l?.msgraph_host,nativeAccountId:h},t,i,o),C=m.tenantProfiles||[],y=c||m.realm;if(y&&!C.find(e=>e.tenantId===y)){let e=(0,X.buildTenantProfile)(r,m.localAccountId,y,h,n);C.push(e)}return m.tenantProfiles=C,m}var eg=e.i(563076);let ep="home_account_id";var em=e.i(693933);async function eC(e,t,r,o){return"string"==typeof e?e:e({clientId:t,tokenEndpoint:r,fmiPath:o})}class ey{static generateThrottlingStorageKey(e){return`${L.THROTTLING_PREFIX}.${JSON.stringify(e)}`}static preProcess(e,t,r){let o=ey.generateThrottlingStorageKey(t),i=e.getThrottlingCache(o,r);if(i){if(i.throttleTime<Date.now())return void e.removeItem(o,r);throw new ec(i.errorCodes?.join(" ")||"",r,i.errorMessage,i.subError)}}static postProcess(e,t,r,o){if(ey.checkResponseStatus(r)||ey.checkResponseForRetryAfter(r)){let i={throttleTime:ey.calculateThrottleTime(parseInt(r.headers[L.HeaderNames.RETRY_AFTER])),error:r.body.error,errorCodes:r.body.error_codes,errorMessage:r.body.error_description,subError:r.body.suberror};e.setThrottlingCache(ey.generateThrottlingStorageKey(t),i,o)}}static checkResponseStatus(e){return 429===e.status||e.status>=500&&e.status<600}static checkResponseForRetryAfter(e){return!!e.headers&&e.headers.hasOwnProperty(L.HeaderNames.RETRY_AFTER)&&(e.status<200||e.status>=300)}static calculateThrottleTime(e){let t=Date.now()/1e3;return Math.floor(1e3*Math.min(t+((e<=0?0:e)||L.DEFAULT_THROTTLE_TIME_SECONDS),t+L.DEFAULT_MAX_THROTTLE_TIME_SECONDS))}static removeThrottle(e,t,r,o){let i=(0,y.getRequestThumbprint)(t,r,o),n=this.generateThrottlingStorageKey(i);e.removeItem(n,r.correlationId)}}var ef=C;class eI extends ef.AuthError{constructor(e,t,r){super(e.errorCode,e.correlationId,e.errorMessage,e.subError),Object.setPrototypeOf(this,eI.prototype),this.name="NetworkError",this.error=e,this.httpStatus=t,this.responseHeaders=r}}function eA(e,t,r,o){return e.errorMessage=`${e.errorMessage}, additionalErrorInfo: error.name:${o?.name}, error.message:${o?.message}`,new eI(e,t,r)}function eE(e,t,r){let o={};if(o[L.HeaderNames.CONTENT_TYPE]=L.URL_FORM_CONTENT_TYPE,!t&&r)switch(r.type){case ep:try{let e=(0,eg.buildClientInfoFromHomeAccountId)(r.credential);o[L.HeaderNames.CCS_HEADER]=`Oid:${e.uid}@${e.utid}`}catch(t){e.verbose(`1qhtee ${t}`,"")}break;case"UPN":o[L.HeaderNames.CCS_HEADER]=`UPN: ${r.credential}`}return o}function eT(e,t,r,o){let i=new Map;return e.embeddedClientId&&(0,U.addBrokerParameters)(i,t,r),e.extraQueryParameters&&(0,U.addExtraParameters)(i,e.extraQueryParameters),(0,U.addCorrelationId)(i,e.correlationId),(0,U.instrumentBrokerParams)(i,e.correlationId,o),(0,D.mapToQueryString)(i)}async function ew(e,t,r,o,i,n,s,a,c,l){let h=await ev(o,e,{body:t,headers:r},i,n,s,a,c);return l&&h.status<500&&429!==h.status&&l.clearTelemetryCache(),h}async function ev(e,t,r,o,i,n,a,c){let h;ey.preProcess(i,e,o);try{let e=(h=await (0,s.invokeAsync)(n.sendPostRequestAsync.bind(n),en.NetworkClientSendPostRequestAsync,a,c,o)(t,{...r,correlationId:o,performanceClient:c})).headers||{};c?.addFields({refreshTokenSize:h.body.refresh_token?.length||0,httpVerToken:e[L.HeaderNames.X_MS_HTTP_VERSION]||"",requestId:e[L.HeaderNames.X_MS_REQUEST_ID]||""},o)}catch(e){if(e instanceof eI){let t=e.responseHeaders;throw t&&c?.addFields({httpVerToken:t[L.HeaderNames.X_MS_HTTP_VERSION]||"",requestId:t[L.HeaderNames.X_MS_REQUEST_ID]||"",contentTypeHeader:t[L.HeaderNames.CONTENT_TYPE]||void 0,contentLengthHeader:t[L.HeaderNames.CONTENT_LENGTH]||void 0,httpStatus:e.httpStatus},o),e.error}if(e instanceof C.AuthError)throw e;throw(0,l.createClientAuthError)(K.networkError,o)}return ey.postProcess(i,e,h,o),h}async function e_(e,t,r,o,i,a,c){let h=n.Authority.transformCIAMAuthority((0,n.formatAuthorityUri)(e),a),d=new n.Authority(h,t,r,o,i,a,c);try{return await (0,s.invokeAsync)(d.resolveEndpointsAsync.bind(d),en.AuthorityResolveEndpointsAsync,i,c,a)(),d}catch(e){throw(0,l.createClientAuthError)(K.endpointResolutionError,a)}}e.s(["createDiscoveredInstance",0,e_],124743);var eS=e.i(425025);class eR{constructor(e,t){this.includeRedirectUri=!0,this.config=Y(e),this.logger=new S.Logger(this.config.loggerOptions,q.name,q.version),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t,this.oidcDefaultScopes=this.config.authOptions.authority.options.OIDCOptions?.defaultScopes}async acquireToken(e,t,r){if(!e.code)throw(0,l.createClientAuthError)(K.requestCannotBeMade,e.correlationId);r&&r.cloud_instance_host_name&&await (0,s.invokeAsync)(this.updateTokenEndpointAuthority.bind(this),en.UpdateTokenEndpointAuthority,this.logger,this.performanceClient,e.correlationId)(r.cloud_instance_host_name,e.correlationId);let o=(0,ei.nowSeconds)(),i=await (0,s.invokeAsync)(this.executeTokenRequest.bind(this),en.AuthClientExecuteTokenRequest,this.logger,this.performanceClient,e.correlationId)(this.authority,e,this.serverTelemetryManager),n=i.headers?.[L.HeaderNames.X_MS_REQUEST_ID],a=new ed(this.config.authOptions.clientId,this.cacheManager,this.cryptoUtils,this.logger,this.performanceClient,this.config.serializableCache,this.config.persistencePlugin);return a.validateTokenResponse(i.body,e.correlationId),(0,s.invokeAsync)(a.handleServerTokenResponse.bind(a),en.HandleServerTokenResponse,this.logger,this.performanceClient,e.correlationId)(i.body,this.authority,o,e,t,r,void 0,void 0,void 0,n)}getLogoutUri(e){if(!e)throw(0,em.createClientConfigurationError)(eS.logoutRequestEmpty,"");let t=this.createLogoutUrlQueryString(e);return N.UrlString.appendQueryString(this.authority.endSessionEndpoint,t)}async executeTokenRequest(e,t,r){let o,i=eT(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri,this.performanceClient),n=N.UrlString.appendQueryString(e.tokenEndpoint,i),a=await (0,s.invokeAsync)(this.createTokenRequestBody.bind(this),en.AuthClientCreateTokenRequestBody,this.logger,this.performanceClient,t.correlationId)(t);if(t.clientInfo)try{let e=(0,eg.buildClientInfo)(t.clientInfo,this.cryptoUtils.base64Decode);o={credential:`${e.uid}${L.CLIENT_INFO_SEPARATOR}${e.utid}`,type:ep}}catch(e){this.logger.verbose(`0wznt3 ${e}`,t.correlationId)}let c=eE(this.logger,this.config.systemOptions.preventCorsPreflight,o||t.ccsCredential),l=(0,y.getRequestThumbprint)(this.config.authOptions.clientId,t);return(0,s.invokeAsync)(ew,en.AuthorizationCodeClientExecutePostToTokenEndpoint,this.logger,this.performanceClient,t.correlationId)(n,a,c,l,t.correlationId,this.cacheManager,this.networkClient,this.logger,this.performanceClient,r)}async createTokenRequestBody(e){let t,r=new Map;if((0,U.addClientId)(r,e.embeddedClientId||e.extraParameters?.[H.CLIENT_ID]||this.config.authOptions.clientId),this.includeRedirectUri)(0,U.addRedirectUri)(r,e.redirectUri);else if(!e.redirectUri)throw(0,em.createClientConfigurationError)(eS.redirectUriEmpty,e.correlationId);

1if((0,U.addScopes)(r,e.scopes,e.correlationId,!0,this.oidcDefaultScopes),(0,U.addResource)(r,e.resource),e.attributeTokens&&(0,U.addAttributeTokens)(r,e.attributeTokens),this.performanceClient?.addFields({hasAttributeTokens:!!e.attributeTokens?.length},e.correlationId),(0,U.addAuthorizationCode)(r,e.code),(0,U.addLibraryInfo)(r,this.config.libraryInfo),(0,U.addApplicationTelemetry)(r,this.config.telemetry.application),(0,U.addThrottling)(r),this.serverTelemetryManager&&!Q(this.config)&&(0,U.addServerTelemetry)(r,this.serverTelemetryManager),e.codeVerifier&&(0,U.addCodeVerifier)(r,e.codeVerifier),this.config.clientCredentials.clientSecret&&(0,U.addClientSecret)(r,this.config.clientCredentials.clientSecret),this.config.clientCredentials.clientAssertion){let t=this.config.clientCredentials.clientAssertion;(0,U.addClientAssertion)(r,await eC(t.assertion,this.config.authOptions.clientId,e.resourceRequestUri)),(0,U.addClientAssertionType)(r,t.assertionType)}if((0,U.addGrantType)(r,L.GrantType.AUTHORIZATION_CODE_GRANT),(0,U.addClientInfo)(r),e.authenticationScheme===L.AuthenticationScheme.POP){let t,o=new es(this.cryptoUtils,this.performanceClient);t=e.popKid?this.cryptoUtils.encodeKid(e.popKid):(await (0,s.invokeAsync)(o.generateCnf.bind(o),en.PopTokenGenerateCnf,this.logger,this.performanceClient,e.correlationId)(e,this.logger)).reqCnfString,(0,U.addPopToken)(r,t)}else if(e.authenticationScheme===L.AuthenticationScheme.SSH)if(e.sshJwk)(0,U.addSshJwk)(r,e.sshJwk);else throw(0,em.createClientConfigurationError)(eS.missingSshJwk,e.correlationId);if(e.clientInfo)try{let r=(0,eg.buildClientInfo)(e.clientInfo,this.cryptoUtils.base64Decode);t={credential:`${r.uid}${L.CLIENT_INFO_SEPARATOR}${r.utid}`,type:ep}}catch(t){this.logger.verbose(`0wznt3 ${t}`,e.correlationId)}else t=e.ccsCredential;if(this.config.systemOptions.preventCorsPreflight&&t)switch(t.type){case ep:try{let e=(0,eg.buildClientInfoFromHomeAccountId)(t.credential);(0,U.addCcsOid)(r,e)}catch(t){this.logger.verbose(`1qhtee ${t}`,e.correlationId)}break;case"UPN":(0,U.addCcsUpn)(r,t.credential)}return e.embeddedClientId&&(0,U.addBrokerParameters)(r,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.extraParameters&&(0,U.addExtraParameters)(r,e.extraParameters),!e.enableSpaAuthorizationCode||e.extraParameters&&e.extraParameters[H.RETURN_SPA_CODE]||(0,U.addExtraParameters)(r,{[H.RETURN_SPA_CODE]:"1"}),(0,U.instrumentBrokerParams)(r,e.correlationId,this.performanceClient),(0,U.addClaims)(r,e.correlationId,e.claims,this.config.authOptions.clientCapabilities,e.skipBrokerClaims),(0,D.mapToQueryString)(r)}createLogoutUrlQueryString(e){let t=new Map;return e.postLogoutRedirectUri&&(0,U.addPostLogoutRedirectUri)(t,e.postLogoutRedirectUri),e.correlationId&&(0,U.addCorrelationId)(t,e.correlationId),e.idTokenHint&&(0,U.addIdTokenHint)(t,e.idTokenHint),e.state&&(0,U.addState)(t,e.state),e.logoutHint&&(0,U.addLogoutHint)(t,e.logoutHint),e.extraQueryParameters&&(0,U.addExtraParameters)(t,e.extraQueryParameters),this.config.authOptions.instanceAware&&(0,U.addInstanceAware)(t),(0,D.mapToQueryString)(t)}async updateTokenEndpointAuthority(e,t){let r=`https://${e}/${this.authority.tenant}/`,o=await e_(r,this.networkClient,this.cacheManager,this.authority.options,this.logger,t,this.performanceClient);this.authority=o}}class ek{constructor(e,t){this.cacheOutcome=L.CacheOutcome.NOT_APPLICABLE,this.cacheManager=t,this.apiId=e.apiId,this.correlationId=e.correlationId,this.wrapperSKU=e.wrapperSKU||"",this.wrapperVer=e.wrapperVer||"",this.telemetryCacheKey=L.SERVER_TELEM_CACHE_KEY+L.CACHE_KEY_SEPARATOR+e.clientId}generateCurrentRequestHeaderValue(){let e=`${this.apiId}${L.SERVER_TELEM_VALUE_SEPARATOR}${this.cacheOutcome}`,t=[this.wrapperSKU,this.wrapperVer],r=this.getNativeBrokerErrorCode();r?.length&&t.push(`broker_error=${r}`);let o=t.join(L.SERVER_TELEM_VALUE_SEPARATOR),i=[e,this.getRegionDiscoveryFields()].join(L.SERVER_TELEM_VALUE_SEPARATOR);return[L.SERVER_TELEM_SCHEMA_VERSION,i,o].join(L.SERVER_TELEM_CATEGORY_SEPARATOR)}generateLastRequestHeaderValue(){let e=this.getLastRequests(),t=ek.maxErrorsToSend(e),r=e.failedRequests.slice(0,2*t).join(L.SERVER_TELEM_VALUE_SEPARATOR),o=e.errors.slice(0,t).join(L.SERVER_TELEM_VALUE_SEPARATOR),i=e.errors.length,n=t<i?L.SERVER_TELEM_OVERFLOW_TRUE:L.SERVER_TELEM_OVERFLOW_FALSE,s=[i,n].join(L.SERVER_TELEM_VALUE_SEPARATOR);return[L.SERVER_TELEM_SCHEMA_VERSION,e.cacheHits,r,o,s].join(L.SERVER_TELEM_CATEGORY_SEPARATOR)}cacheFailedRequest(e){try{let t=this.getLastRequests();t.errors.length>=L.SERVER_TELEM_MAX_CACHED_ERRORS&&(t.failedRequests.shift(),t.failedRequests.shift(),t.errors.shift()),t.failedRequests.push(this.apiId,this.correlationId),e instanceof Error&&e&&e.toString()?e instanceof C.AuthError?e.subError?t.errors.push(e.subError):e.errorCode?t.errors.push(e.errorCode):t.errors.push(e.toString()):t.errors.push(e.toString()):t.errors.push(L.SERVER_TELEM_UNKNOWN_ERROR),this.cacheManager.setServerTelemetry(this.telemetryCacheKey,t,this.correlationId)}catch{}}incrementCacheHits(){let e=this.getLastRequests();return e.cacheHits+=1,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId),e.cacheHits}getLastRequests(){return this.cacheManager.getServerTelemetry(this.telemetryCacheKey,this.correlationId)||{failedRequests:[],errors:[],cacheHits:0}}clearTelemetryCache(){let e=this.getLastRequests(),t=ek.maxErrorsToSend(e);if(t===e.errors.length)this.cacheManager.removeItem(this.telemetryCacheKey,this.correlationId);else{let r={failedRequests:e.failedRequests.slice(2*t),errors:e.errors.slice(t),cacheHits:0};this.cacheManager.setServerTelemetry(this.telemetryCacheKey,r,this.correlationId)}}static maxErrorsToSend(e){let t,r=0,o=0,i=e.errors.length;for(t=0;t<i;t++){let i=e.failedRequests[2*t]||"",n=e.failedRequests[2*t+1]||"",s=e.errors[t]||"";if((o+=i.toString().length+n.toString().length+s.length+3)<L.SERVER_TELEM_MAX_LAST_HEADER_BYTES)r+=1;else break}return r}getRegionDiscoveryFields(){let e=[];return e.push(this.regionUsed||""),e.push(this.regionSource||""),e.push(this.regionOutcome||""),e.join(",")}updateRegionDiscoveryMetadata(e){this.regionUsed=e.region_used,this.regionSource=e.region_source,this.regionOutcome=e.region_outcome}setCacheOutcome(e){this.cacheOutcome=e}setNativeBrokerErrorCode(e){let t=this.getLastRequests();t.nativeBrokerErrorCode=e,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,t,this.correlationId)}getNativeBrokerErrorCode(){return this.getLastRequests().nativeBrokerErrorCode}clearNativeBrokerErrorCode(){let e=this.getLastRequests();delete e.nativeBrokerErrorCode,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId)}static makeExtraSkuString(e){return function(e){let{skus:t,libraryName:r,libraryVersion:o,extensionName:i,extensionVersion:n}=e,s=new Map([[0,[r,o]],[2,[i,n]]]),a=[];if(t?.length){if((a=t.split(",")).length<4)return t}else a=Array.from({length:4},()=>"|");

1return s.forEach((e,t)=>{2===e.length&&e[0]?.length&&e[1]?.length&&function(e){let{skuArr:t,index:r,skuName:o,skuVersion:i}=e;r>=t.length||(t[r]=[o,i].join("|"))}({skuArr:a,index:t,skuName:e[0],skuVersion:e[1]})}),a.join(",")}(e)}}class eO extends ek{constructor(){super({clientId:"",apiId:0,correlationId:"",forceRefresh:!1},{})}generateCurrentRequestHeaderValue(){return""}generateLastRequestHeaderValue(){return""}cacheFailedRequest(){}incrementCacheHits(){return 0}clearTelemetryCache(){}getRegionDiscoveryFields(){return""}updateRegionDiscoveryMetadata(){}setCacheOutcome(){}setNativeBrokerErrorCode(){}getNativeBrokerErrorCode(){}clearNativeBrokerErrorCode(){}}var eP=e.i(124743),eP=eP,eb=eS;class eN{constructor(e,t,r,o,i,n,s,a,c){this.config=e,this.browserStorage=t,this.browserCrypto=r,this.networkClient=this.config.system.networkClient,this.eventHandler=i,this.navigationClient=n,this.platformAuthProvider=c,this.correlationId=a,this.logger=o.clone(R.name,R.version),this.performanceClient=s}}function eM(e,t,r,o){return r.verbose("0bd1la",o),N.UrlString.getAbsoluteUrl(e||t||"",(0,_.getCurrentUri)(),o)}function eU(e,t,r,o,i,n,s=!0){return(i.verbose("1p12tq",r),s)?new ek({clientId:t,correlationId:r,apiId:e,forceRefresh:n||!1,wrapperSKU:o.getWrapperMetadata()[0],wrapperVer:o.getWrapperMetadata()[1]},o):(i.verbose("0tajnr",r),new eO)}async function eD(e,t,r,o,i,a,c,l,h){let d=l&&l.hasOwnProperty("instance_aware")?l.instance_aware:void 0,u={protocolMode:e.system.protocolMode,OIDCOptions:e.auth.OIDCOptions,knownAuthorities:e.auth.knownAuthorities,cloudDiscoveryMetadata:e.auth.cloudDiscoveryMetadata,authorityMetadata:e.auth.authorityMetadata},g=a||e.auth.authority,p=d?.length?"true"===d:e.auth.instanceAware,m=h&&p?e.auth.authority.replace(N.UrlString.getDomainFromUrl(g,t),h.environment):g,C=n.Authority.generateAuthority(m,c||e.auth.azureCloudOptions),y=await (0,s.invokeAsync)(eP.createDiscoveredInstance,I.AuthorityFactoryCreateDiscoveredInstance,i,r,t)(C,e.system.networkClient,o,u,i,t,r);if(h&&!y.isAlias(h.environment))throw(0,em.createClientConfigurationError)(eb.authorityMismatch,t);return y}async function eL(e,t,r,o,i){if(i)try{e.removeAccount(i,o),r.verbose("0s4z6h",o)}catch(e){r.error("0mgg1d",o)}else try{r.verbose("0zj631",o),e.clear(o),await t.clearKeystore(o)}catch(e){r.error("12ih0c",o)}}var eH=e.i(826471),eb=eS;async function eq(e,t,r,o,i){let n=e.authority||t.auth.authority,s=[...e&&e.scopes||[]],a={...e,correlationId:e.correlationId,authority:n,scopes:s};if(a.authenticationScheme){if(a.authenticationScheme===m.Constants.AuthenticationScheme.SSH){if(!e.sshJwk)throw(0,em.createClientConfigurationError)(eb.missingSshJwk,"");if(!e.sshKid)throw(0,em.createClientConfigurationError)(eb.missingSshKid,"")}o.verbose(`1ecmns ${a.authenticationScheme}`,i)}else a.authenticationScheme=m.Constants.AuthenticationScheme.BEARER,o.verbose("1l4fwv",i);return a}async function eF(e,t,r,o,i){let n=await (0,s.invokeAsync)(eq,I.InitializeBaseRequest,i,o,e.correlationId)(e,r,o,i,e.correlationId);return{...e,...n,account:t,forceRefresh:e.forceRefresh||!1}}function ex(e,t){let r,o=e.httpMethod;if(t===P.ProtocolMode.EAR)if(o&&o!==m.Constants.HttpMethod.POST)throw(0,em.createClientConfigurationError)(eb.invalidRequestMethodForEAR,"");else r=m.Constants.HttpMethod.POST;else r=o||m.Constants.HttpMethod.GET;return r}class eB extends eN{initializeLogoutRequest(e){this.logger.verbose("0546u4",this.correlationId);let t={correlationId:this.correlationId,...e};if(e)if(e.logoutHint)this.logger.verbose("12k4l4",this.correlationId);else if(e.account){let r=e.account.loginHint||this.getLogoutHintFromIdTokenClaims(e.account);r&&(this.logger.verbose("0d7s8p",this.correlationId),t.logoutHint=r)}else this.logger.verbose("0pdtc3",this.correlationId);else this.logger.verbose("07ndze",this.correlationId);return e&&null===e.postLogoutRedirectUri?this.logger.verbose("0ljv63",t.correlationId):e&&e.postLogoutRedirectUri?(this.logger.verbose("1vamm6",t.correlationId),t.postLogoutRedirectUri=N.UrlString.getAbsoluteUrl(e.postLogoutRedirectUri,(0,_.getCurrentUri)(),t.correlationId)):null===this.config.auth.postLogoutRedirectUri?this.logger.verbose("15m5g7",t.correlationId):this.config.auth.postLogoutRedirectUri?(this.logger.verbose("1f4xlz",t.correlationId),t.postLogoutRedirectUri=N.UrlString.getAbsoluteUrl(this.config.auth.postLogoutRedirectUri,(0,_.getCurrentUri)(),t.correlationId)):(this.logger.verbose("17s5rf",t.correlationId),t.postLogoutRedirectUri=N.UrlString.getAbsoluteUrl((0,_.getCurrentUri)(),(0,_.getCurrentUri)(),t.correlationId)),t}getLogoutHintFromIdTokenClaims(e){let t=e.idTokenClaims;if(t)if(t.login_hint)return this.logger.verbose("0u5bmc",this.correlationId),t.login_hint;else this.logger.verbose("0mvp54",this.correlationId);else this.logger.verbose("1e7bdp",this.correlationId);return null}async createAuthCodeClient(e){return new eR(await (0,s.invokeAsync)(this.getClientConfiguration.bind(this),I.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)(e),this.performanceClient)}async getClientConfiguration(e){let{serverTelemetryManager:t,requestAuthority:r,requestAzureCloudOptions:o,requestExtraQueryParameters:i,account:n}=e,a=e.authority||await (0,s.invokeAsync)(eD,I.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,this.correlationId)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,r,o,i,n),c=this.config.system.loggerOptions;return{authOptions:{clientId:this.config.auth.clientId,authority:a,clientCapabilities:this.config.auth.clientCapabilities,redirectUri:this.config.auth.redirectUri,isMcp:this.config.auth.isMcp},systemOptions:{tokenRenewalOffsetSeconds:this.config.system.tokenRenewalOffsetSeconds,preventCorsPreflight:!0},loggerOptions:{loggerCallback:c.loggerCallback,piiLoggingEnabled:c.piiLoggingEnabled,logLevel:c.logLevel,correlationId:this.correlationId},cryptoInterface:this.browserCrypto,networkInterface:this.networkClient,storageInterface:this.browserStorage,serverTelemetryManager:t,libraryInfo:{sku:v.BrowserConstants.MSAL_SKU,version:R.version,cpu:"",os:""},telemetry:this.config.telemetry}}}async function eK(e,t,r,o,i,n,a,c){let l=eM(e.redirectUri,r.auth.redirectUri,n,c);new URL(l).origin!==new URL(window.location.href).origin&&(n.warning("08qbvw",c),a.addFields({isRedirectUriCrossOrigin:!0},c));

1let h=M.ProtocolUtils.setRequestState(o,e&&e.state||"",{interactionType:t},c),d={...await (0,s.invokeAsync)(eq,I.InitializeBaseRequest,n,a,c)({...e,correlationId:c},r,a,n,c),redirectUri:l,state:h,nonce:e.nonce||(0,eH.createNewGuid)(),responseMode:r.auth.OIDCOptions.responseMode},u={...d,httpMethod:ex(d,r.system.protocolMode)};if(e.loginHint||e.sid)return u;let g=e.account||i.getActiveAccount(c);return g&&(n.verbose("1eqlb3",c),n.verbosePii(`0tf99t ${g.homeAccountId}`,c),u.account=g),u}var eG=e.i(882851),e$=e.i(487754);function ez(e,t,r,o){let i={id:t,...r},n=new URL(e,window.location.origin);if(n.origin!==window.location.origin)throw(0,eG.createBrowserAuthError)(e$.popupRelayUnsupportedFlow,o,"popup_relay_cross_origin");let s=new URLSearchParams;return s.set("req",JSON.stringify(i)),n.hash=s.toString(),n.toString()}async function eV(e,t,r,o,i){return new Promise((n,s)=>{let a=r.correlationId;t.verbose("1d05g9",a),i.addFields({redirectBridgeTimeoutMs:e},a);let{libraryState:c}=M.ProtocolUtils.parseRequestState(O.base64Decode,r.state||"",a),l=c.id,h=window.location.origin,d=!1,u=()=>{window.removeEventListener("message",g),clearTimeout(p),clearInterval(m)},g=e=>{if(e.origin!==h||e.source!==o)return;let t=e.data;!t||"msal:popup-relay-response:v1"!==t.type||t.id!==l||d||(d=!0,u(),t.error?s((0,eG.createBrowserAuthError)(t.error,a)):t.payload?n(t.payload):s((0,eG.createBrowserAuthError)(e$.redirectBridgeEmptyResponse,a)))};window.addEventListener("message",g);let p=window.setTimeout(()=>{d||(d=!0,u(),s((0,eG.createBrowserAuthError)(e$.timedOut,a,"popup_relay_timeout")))},e),m=window.setInterval(()=>{o.closed&&!d&&(d=!0,u(),s((0,eG.createBrowserAuthError)(e$.userCancelled,a)))},500)})}var ej=e.i(337507);function eJ(e,t,r,o){let i=ej.UrlUtils.getDeserializedResponse(e);if(!i)if(ej.UrlUtils.stripLeadingHashOrQuery(e))throw r.error(`13pl0s ${t} ${t}`,o),r.errorPii(`1097vx ${t} ${e}`,o),(0,eG.createBrowserAuthError)(e$.hashDoesNotContainKnownProperties,o);else throw r.error(`18h0l1 ${t} ${t}`,o),(0,eG.createBrowserAuthError)(e$.hashEmptyError,o);return i}var eb=eS,eW=e.i(511955);function eY(e,t,r){let o,i;if(!e.state||!t)throw e.state?(0,l.createClientAuthError)(K.stateNotFound,r,"Cached State"):(0,l.createClientAuthError)(K.stateNotFound,r,"Server State");try{o=decodeURIComponent(e.state)}catch(t){throw(0,l.createClientAuthError)(K.invalidState,r,e.state)}try{i=decodeURIComponent(t)}catch(t){throw(0,l.createClientAuthError)(K.invalidState,r,e.state)}if(o!==i)throw(0,l.createClientAuthError)(K.stateMismatch,r);if(e.error||e.error_description||e.suberror){var n;let t,o,i=(n=e,t="code=",(o=n.error_uri?.lastIndexOf(t))&&o>=0?n.error_uri?.substring(o+t.length):void 0);if((0,c.isInteractionRequiredError)(e.error,e.error_description,e.suberror))throw new c.InteractionRequiredAuthError(e.error||"",e.correlation_id||r,e.error_description,e.suberror,e.timestamp||"",e.trace_id||"",e.claims||"",i);throw new ec(e.error||"",e.correlation_id||r,e.error_description,e.suberror,i)}}e.s(["getAuthorizationCodePayload",0,function(e,t,r){if(eY(e,t,r),!e.code)throw(0,l.createClientAuthError)(K.authorizationCodeMissingFromServerResponse,r);return e},"getAuthorizeUrl",0,function(e,t){let r=(0,D.mapToQueryString)(t);return N.UrlString.appendQueryString(e.authorizationEndpoint,r)},"getStandardAuthorizeRequestParameters",0,function(e,t,r,o){let i=t.correlationId,n=new Map;(0,U.addClientId)(n,t.embeddedClientId||t.extraQueryParameters?.[H.CLIENT_ID]||e.clientId);let s=[...t.scopes||[],...t.extraScopesToConsent||[]];if((0,U.addScopes)(n,s,t.correlationId,!0,e.authority.options.OIDCOptions?.defaultScopes),(0,U.addResource)(n,t.resource),(0,U.addRedirectUri)(n,t.redirectUri),(0,U.addCorrelationId)(n,i),(0,U.addResponseMode)(n,t.responseMode),(0,U.addClientInfo)(n),(0,U.addCliData)(n),t.prompt&&((0,U.addPrompt)(n,t.prompt),o?.addFields({prompt:t.prompt},i)),t.domainHint&&((0,U.addDomainHint)(n,t.domainHint),o?.addFields({domainHintFromRequest:!0},i)),t.prompt!==L.PromptValue.SELECT_ACCOUNT)if(t.sid&&t.prompt===L.PromptValue.NONE)r.verbose("1tvqyx",t.correlationId),(0,U.addSid)(n,t.sid),o?.addFields({sidFromRequest:!0},i);else if(t.account){var a,c;let e=(a=t.account,a.idTokenClaims?.sid||null),s=(c=t.account).loginHint||c.idTokenClaims?.login_hint||null;if(s&&t.domainHint&&(r.warning("0wkg3v",t.correlationId),s=null),s){r.verbose("1eyfsw",t.correlationId),(0,U.addLoginHint)(n,s),o?.addFields({loginHintFromClaim:!0},i);try{let e=(0,eg.buildClientInfoFromHomeAccountId)(t.account.homeAccountId);(0,U.addCcsOid)(n,e)}catch(e){r.verbose("12ugck",t.correlationId)}}else if(e&&t.prompt===L.PromptValue.NONE){r.verbose("1rmd8s",t.correlationId),(0,U.addSid)(n,e),o?.addFields({sidFromClaim:!0},i);try{let e=(0,eg.buildClientInfoFromHomeAccountId)(t.account.homeAccountId);(0,U.addCcsOid)(n,e)}catch(e){r.verbose("12ugck",t.correlationId)}}else if(t.loginHint)r.verbose("0y3007",t.correlationId),(0,U.addLoginHint)(n,t.loginHint),(0,U.addCcsUpn)(n,t.loginHint),o?.addFields({loginHintFromRequest:!0},i);else if(t.account.username){r.verbose("02f507",t.correlationId),(0,U.addLoginHint)(n,t.account.username),o?.addFields({loginHintFromUpn:!0},i);try{let e=(0,eg.buildClientInfoFromHomeAccountId)(t.account.homeAccountId);(0,U.addCcsOid)(n,e)}catch(e){r.verbose("12ugck",t.correlationId)}}}else t.loginHint&&(r.verbose("0g01ey",t.correlationId),(0,U.addLoginHint)(n,t.loginHint),(0,U.addCcsUpn)(n,t.loginHint),o?.addFields({loginHintFromRequest:!0},i));else r.verbose("169k9v",t.correlationId);return t.nonce&&(0,U.addNonce)(n,t.nonce),t.state&&(0,U.addState)(n,t.state),t.embeddedClientId&&(0,U.addBrokerParameters)(n,e.clientId,e.redirectUri),(0,U.addClaims)(n,t.correlationId,t.claims,e.clientCapabilities,t.skipBrokerClaims),!e.instanceAware||t.extraQueryParameters&&Object.keys(t.extraQueryParameters).includes(H.INSTANCE_AWARE)||(0,U.addInstanceAware)(n),n},"validateAuthorizationResponse",0,eY],931935);var eQ=e.i(931935),eQ=eQ,eQ=eQ;class eX{constructor(e,t,r,o,i){this.authModule=e,this.browserStorage=t,this.authCodeRequest=r,this.logger=o,this.performanceClient=i}async handleCodeResponse(e,t,r){let o;try{o=eQ.getAuthorizationCodePayload(e,t.state,t.correlationId)}catch(e){if(e instanceof ec&&e.subError===e$.userCancelled)throw(0,eG.createBrowserAuthError)(e$.userCancelled,t.correlationId);throw e}return(0,s.invokeAsync)(this.handleCodeResponseFromServer.bind(this),b.PerformanceEvents.HandleCodeResponseFromServer,this.logger,this.performanceClient,t.correlationId)(o,t,r)}async handleCodeResponseFromServer(e,t,r,o=!0){if(this.logger.trace("0mf2hb",t.correlationId),this.authCodeRequest.code=e.code,o&&(e.nonce=t.nonce||void 0),e.state=t.state,e.client_info)this.authCodeRequest.clientInfo=e.client_info;else{let e=this.createCcsCredentials(t);e&&(this.authCodeRequest.ccsCredential=e)}return await (0,s.invokeAsync)(this.authModule.acquireToken.bind(this.authModule),I.AuthClientAcquireToken,this.logger,this.performanceClient,t.correlationId)(this.authCodeRequest,r,e)}createCcsCredentials(e){return e.account?{credential:e.account.homeAccountId,type:ep}:e.loginHint?{credential:e.loginHint,type:"UPN"}:null}}var eZ=e.i(532494),e0=C;class e1 extends e0.AuthError{constructor(e,t,r,o){super(e,t,r||(0,eG.getDefaultErrorMessage)(e)),Ob

1ject.setPrototypeOf(this,e1.prototype),this.name="NativeAuthError",this.ext=o}}function e4(e){if(e.ext&&e.ext.status&&"DISABLED"===e.ext.status||e.ext&&e.ext.error&&-0x7ffb78ff===e.ext.error)return!0;switch(e.errorCode){case"ContentError":case"PageException":return!0;default:return!1}}function e2(e,t,r,o){let i;if(o&&o.status){switch(o.status){case"ACCOUNT_UNAVAILABLE":i=(0,c.createInteractionRequiredAuthError)(f.InteractionRequiredAuthErrorCodes.nativeAccountUnavailable,t,(0,eG.getDefaultErrorMessage)(e));break;case"USER_INTERACTION_REQUIRED":i=new c.InteractionRequiredAuthError(e,t,r);break;case"USER_CANCEL":i=(0,eG.createBrowserAuthError)(e$.userCancelled,t);break;case"NO_NETWORK":i=(0,eG.createBrowserAuthError)(e$.noNetworkConnectivity,t);break;case"UI_NOT_ALLOWED":i=(0,c.createInteractionRequiredAuthError)(f.InteractionRequiredAuthErrorCodes.uiNotAllowed,t);break;default:i=new e1(e,t,r,o)}return i}return new e1(e,t,r,o)}var e6=e.i(462178);class e3{constructor(e,t){this.config=Y(e),this.logger=new S.Logger(this.config.loggerOptions,q.name,q.version),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t}async acquireCachedToken(e){let t=L.CacheOutcome.NOT_APPLICABLE;if(e.forceRefresh||!e6.StringUtils.isEmptyObj(e.claims))throw this.setCacheOutcome(L.CacheOutcome.FORCE_REFRESH_OR_CLAIMS,e.correlationId),(0,l.createClientAuthError)(K.tokenRefreshRequired,e.correlationId);if(!e.account)throw(0,l.createClientAuthError)(K.noAccountInSilentRequest,e.correlationId);let r=e.account.tenantId||(0,n.getTenantFromAuthorityString)(e.authority,e.correlationId),o=this.cacheManager.getTokenKeys(),i=this.cacheManager.getAccessToken(e.account,e,o,r);if(i)if((0,ei.wasClockTurnedBack)(i.cachedAt)||(0,ei.isTokenExpired)(i.expiresOn,this.config.systemOptions.tokenRenewalOffsetSeconds))throw this.setCacheOutcome(L.CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED,e.correlationId),(0,l.createClientAuthError)(K.tokenRefreshRequired,e.correlationId);else if(e.resource){if(i.resource!==e.resource)throw this.setCacheOutcome(L.CacheOutcome.NO_CACHED_ACCESS_TOKEN,e.correlationId),(0,l.createClientAuthError)(K.tokenRefreshRequired,e.correlationId)}else i.refreshOn&&(0,ei.isTokenExpired)(i.refreshOn,0)&&(t=L.CacheOutcome.PROACTIVELY_REFRESHED);else throw this.setCacheOutcome(L.CacheOutcome.NO_CACHED_ACCESS_TOKEN,e.correlationId),(0,l.createClientAuthError)(K.tokenRefreshRequired,e.correlationId);let a=e.authority||this.authority.getPreferredCache(),c={account:this.cacheManager.getAccount(this.cacheManager.generateAccountKey(e.account),e.correlationId),accessToken:i,idToken:this.cacheManager.getIdToken(e.account,e.correlationId,o,r),refreshToken:null,appMetadata:this.cacheManager.readAppMetadataFromCache(a,e.correlationId)};return this.setCacheOutcome(t,e.correlationId),this.config.serverTelemetryManager&&this.config.serverTelemetryManager.incrementCacheHits(),[await (0,s.invokeAsync)(this.generateResultFromCacheRecord.bind(this),en.SilentFlowClientGenerateResultFromCacheRecord,this.logger,this.performanceClient,e.correlationId)(c,e),t]}setCacheOutcome(e,t){this.serverTelemetryManager?.setCacheOutcome(e),this.performanceClient?.addFields({cacheOutcome:e},t),e!==L.CacheOutcome.NOT_APPLICABLE&&this.logger.info(`09ingz ${e}`,t)}async generateResultFromCacheRecord(e,t){let r;return e.idToken&&(r=(0,Z.extractTokenClaims)(e.idToken.secret,this.config.cryptoInterface.base64Decode,t.correlationId)),ed.generateAuthenticationResult(this.cryptoUtils,this.authority,e,!0,t,this.performanceClient,r)}}class e8 extends eB{async acquireToken(e){let t=eU(v.ApiId.acquireTokenSilent_silentFlow,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),r=new e3(await (0,s.invokeAsync)(this.getClientConfiguration.bind(this),I.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:t,requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,account:e.account}),this.performanceClient);this.logger.verbose("0wa871",this.correlationId);try{let t=(await (0,s.invokeAsync)(r.acquireCachedToken.bind(r),I.SilentFlowClientAcquireCachedToken,this.logger,this.performanceClient,e.correlationId)(e))[0];return this.performanceClient.addFields({fromCache:!0},e.correlationId),t}catch(e){throw e instanceof eG.BrowserAuthError&&e.errorCode===e$.cryptoKeyNotFound&&this.logger.verbose("06wena",this.correlationId),e}}logout(e){this.logger.verbose("1rkurh",this.correlationId);

1let t=this.initializeLogoutRequest(e);return eL(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,t.account)}}class e9 extends eN{constructor(e,t,r,o,i,n,s,a,c,l,h,d){super(e,t,r,o,i,n,a,d,c),this.apiId=s,this.accountId=l,this.platformAuthProvider=c,this.nativeStorageManager=h,this.silentCacheClient=new e8(e,this.nativeStorageManager,r,o,i,n,a,d,c);const u=this.platformAuthProvider.getExtensionName();this.skus=ek.makeExtraSkuString({libraryName:v.BrowserConstants.MSAL_SKU,libraryVersion:R.version,extensionName:u,extensionVersion:this.platformAuthProvider.getExtensionVersion()})}addRequestSKUs(e){e.extraParameters={...e.extraParameters,[H.X_CLIENT_EXTRA_SKU]:this.skus}}async acquireToken(e,t){let r;this.logger.trace("03qeos",this.correlationId);let o=this.performanceClient.startMeasurement(I.NativeInteractionClientAcquireToken,this.correlationId),i=p.TimeUtils.nowSeconds(),n=eU(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{r=await this.initializePlatformRequest(e)}catch(e){throw o.add({isNativeBroker:!1}),o.end({success:!1},e),e}try{let e=await this.acquireTokensFromCache(this.accountId,r);return o.add({isNativeBroker:!1}),o.end({success:!0,fromCache:!0}),e}catch(e){if(t===v.CacheLookupPolicy.AccessToken)throw this.logger.info("0eitbc",this.correlationId),o.add({isNativeBroker:!1}),o.end({success:!1}),e;this.logger.info("0957j1",this.correlationId)}try{let t=await this.platformAuthProvider.sendMessage(r),s=await this.handleNativeResponse(t,r,i,e.storeInCache);return o.end({success:!0,requestId:s.requestId}),n.clearNativeBrokerErrorCode(),s}catch(e){throw e instanceof e1&&n.setNativeBrokerErrorCode(e.errorCode),o.end({success:!1},e),this.setBrokerErrorTelemetry(e),e}}setBrokerErrorTelemetry(e){e instanceof C.AuthError&&this.performanceClient.addFields({isNativeBroker:!0,brokerErrorName:e.name,brokerErrorCode:e.errorCode},this.correlationId)}createSilentCacheRequest(e,t){let r={authority:e.authority,correlationId:this.correlationId,scopes:el.ScopeSet.fromString(e.scope,this.correlationId).asArray(),account:t,forceRefresh:!1};return e.attributeTokens&&(r.attributeTokens=e.attributeTokens.split(" ")),r}async acquireTokensFromCache(e,t){if(!e)throw this.logger.warning("1ndf3e",this.correlationId),(0,l.createClientAuthError)(h.ClientAuthErrorCodes.noAccountFound,this.correlationId);let r=this.browserStorage.getBaseAccountInfo({nativeAccountId:e},this.correlationId);if(!r)throw(0,l.createClientAuthError)(h.ClientAuthErrorCodes.noAccountFound,this.correlationId);try{let e=this.createSilentCacheRequest(t,r),o=await this.silentCacheClient.acquireToken(e),i=this.browserStorage.getIdToken(r,this.correlationId,this.browserStorage.getTokenKeys(),r.tenantId),n=u.AuthToken.extractTokenClaims(i?.secret||"",O.base64Decode,this.correlationId),s=(0,X.updateAccountTenantProfileData)(r,void 0,n,i?.secret);return{...o,idToken:i?.secret||"",idTokenClaims:n,account:s}}catch(e){throw e}}async acquireTokenRedirect(e,t,r){this.logger.trace("0luikq",this.correlationId);let o=await this.initializePlatformRequest(e),i=r?.navigateToLoginRequestUrl??!0;try{await this.platformAuthProvider.sendMessage(o)}catch(e){if(e instanceof e1&&(eU(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled).setNativeBrokerErrorCode(e.errorCode),e4(e)))throw this.setBrokerErrorTelemetry(e),e}this.browserStorage.setTemporaryCache(v.TemporaryCacheKeys.NATIVE_REQUEST,JSON.stringify({...o,storeInCache:e.storeInCache}),!0);let n={apiId:v.ApiId.acquireTokenRedirect,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},s=i?N.UrlString.getAbsoluteUrl(e.redirectStartPage||window.location.href,(0,_.getCurrentUri)(),this.correlationId):eM(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId);t.end({success:!0}),await this.navigationClient.navigateExternal(s,n)}async handleRedirectPromise(){if(this.logger.trace("1c5lhw",this.correlationId),!this.browserStorage.isInteractionInProgress(!0))return this.logger.info("0le6uv",this.correlationId),null;let e=this.browserStorage.getCachedNativeRequest();if(!e)return this.logger.verbose("0a6zjb",this.correlationId),this.performanceClient?.addFields({errorCode:"no_cached_request"},this.correlationId),null;let{prompt:t,storeInCache:r,...o}=e;t&&this.logger.verbose("0ac34v",this.correlationId),this.browserStorage.removeItem(this.browserStorage.generateCacheKey(v.TemporaryCacheKeys.NATIVE_REQUEST));let i=p.TimeUtils.nowSeconds();try{this.logger.verbose("003x5a",this.correlationId);let e=await this.platformAuthProvider.sendMessage(o),t=await this.handleNativeResponse(e,o,i,r);return eU(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled).clearNativeBrokerErrorCode(),t}catch(e){throw this.setBrokerErrorTelemetry(e),e}}logout(){return this.logger.trace("0u2sjm",this.correlationId),Promise.reject("Logout not implemented yet")}async handleNativeResponse(e,t,r,o){this.logger.trace("1bojln",this.correlationId);let i=u.AuthToken.extractTokenClaims(e.id_token,O.base64Decode,this.correlationId),n=this.createHomeAccountIdentifier(e,i),s=this.browserStorage.getAccountInfoFilteredBy({nativeAccountId:t.accountId},this.correlationId)?.homeAccountId;if(t.extraParameters?.child_client_id&&e.account.id!==t.accountId)this.logger.info("1ub1in",this.correlationId);else if(n!==s&&e.account.id!==t.accountId)throw e2("user_switch",this.correlationId);let a=await eD(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,t.authority),c=eu(this.browserStorage,a,n,O.base64Decode,this.correlationId,i,e.client_info,a.getPreferredCache(),i.tid,void 0,e.account.id,this.logger,this.performanceClient);e.expires_in=Number(e.expires_in);let l=await this.generateAuthenticationResult(e,t,i,c,a.canonicalAuthority,r);return await this.cacheAccount(c,u.AuthToken.isKmsi(i)),await this.cacheNativeTokens(e,t,n,i,l.tenantId,r,a.getPreferredCache(),o),l}createHomeAccountIdentifier(e,t){return d.AccountEntityUtils.generateHomeAccountId(e.client_info||"",eZ.AuthorityType.Default,this.logger,this.browserCrypto,this.correlationId,t)}generateScopes(e,t){return t?el.ScopeSet.fromString(t,this.correlationId):el.ScopeSet.fromString(e,this.correlationId)}async generatePopAccessToken(e,t){if(t.tokenType!==m.Constants.AuthenticationScheme.POP||!t.signPopToken)return e.access_token;{if(e.shr)return this.logger.trace("0coqhu",this.correlationId),e.shr;let r=new es(this.browserCrypto,this.performanceClient),o={resourceRequestMethod:t.resourceRequestMethod,resourceRequestUri:t.resourceRequestUri,shrClaims:t.shrClaims,shrNonce:t.shrNonce,correlationId:this.correlationId};if(!t.keyId)throw(0,l.createClientAuthError)(h.ClientAuthErrorCodes.keyIdMissing,this.correlationId);return r.signPopToken(e.access_token,t.keyId,o)}}async generateAuthenticationResult(e,t,r,o,i,n){let s=this.addTelemetryFromNativeResponse(e.properties.MATS),a=this.generateScopes(t.scope,e.scope),c=e.account.properties||{},l=c.UID||r.oid||r.sub||"",h=c.TenantId||r.tid||"",u=(0,X.updateAccountTenantProfileData)(d.AccountEntityUtils.getAccountInfo(o),void 0,r,e.id_token);if(u.nativeAccountId!==e.account.id){u.nativeAccountId=e.account.id;let t=h||u.tenantId,r=u.tenantProfiles?.get(t);r&&(r.nativeAccountId=e.account.id)}let g=await this.generatePopAccessToken(e,t),C=t.tokenType===m.Constants.AuthenticationScheme.POP?m.Constants.AuthenticationScheme.POP:m.Constants.AuthenticationScheme.BEARER;return{authority:i,uniqueId:l,tenantId:h,scopes:a.asArray(),account:u,idToken:e.id_token,idTokenClaims:r,accessToken:g,fromCache:!!s&&this.isResponseFromCache(s),expiresOn:p.TimeUtils.toDateFromSeconds(n+e.expires_in),tokenType:C,correlationId:this.correlationId,state:e.state,fromPlatformBroker:!0,...t.extraParameters?.resource&&{resource:t.extraParameters.resource}}}async cacheAccount(e,t){await this.browserStorage.setAccount(e,this.correlationId,t,this.apiId),this.browserStorage.removeAccountContext(d.AccountEntityUtils.getAccountInfo(e),this.correlationId)}async cacheNativeTokens(e,t,r,o,i,n,s,a){let c=g.CacheHelpers.createIdTokenEntity(r,s,e.id_token||"",t.clientId,o.tid||""),l=t.tokenType===m.Constants.AuthenticationScheme.POP?m.Constants.SHR_NONCE_VALIDITY:("string"==typeof e.expires_in?parseInt(e.expires_in,10):e.expires_in)||0,h=this.generateScopes(e.scope,t.scope),d=t.attributeTokens?{attribute_tokens:t.attributeTokens}:void 0,p=g.CacheHelpers.createAccessTokenEntity(r,s,e.access_token,t.clientId,o.tid||i,h.printScopes(),n+l,0,O.base64Decode,t.correlationId,void 0,t.tokenType,void 0,t.keyId,d);return c&&a?.idToken!==!1&&await this.browserStorage.setIdTokenCredential(c,this.correlationId,u.AuthToken.isKmsi(o)),this.nativeStorageManager.saveCacheRecord({accessToken:p},this.correlationId,u.AuthToken.isKmsi(o),this.apiId,a)}getExpiresInValue(e,t){return e===m.Constants.AuthenticationScheme.POP?m.Constants.SHR_NONCE_VALIDITY:("string"==typeof t?parseInt(t,10):t)||0}addTelemetryFromNativeResponse(e){let t=this.getMATSFromResponse(e);return t?(this.performanceClient.addFields({extensionId:this.platformAuthProvider.getExtensionId(),extensionVersion:this.platformAuthProvider.getExtensionVersion(),matsBrokerVersion:t.broker_version,matsAccountJoinOnStart:t.account_join_on_

1start,matsAccountJoinOnEnd:t.account_join_on_end,matsDeviceJoin:t.device_join,matsPromptBehavior:t.prompt_behavior,matsApiErrorCode:t.api_error_code,matsUiVisible:t.ui_visible,matsSilentCode:t.silent_code,matsSilentBiSubCode:t.silent_bi_sub_code,matsSilentMessage:t.silent_message,matsSilentStatus:t.silent_status,matsHttpStatus:t.http_status,matsHttpEventCount:t.http_event_count},this.correlationId),t):null}getMATSFromResponse(e){if(e)try{return JSON.parse(e)}catch(e){this.logger.error("0b3l57",this.correlationId)}return null}isResponseFromCache(e){return void 0===e.is_cached?(this.logger.verbose("1okqev",this.correlationId),!1):!!e.is_cached}async initializePlatformRequest(e){this.logger.trace("1xdm2a",this.correlationId);let t=await this.getCanonicalAuthority(e),r=e.skipBrokerClaims&&e.embeddedClientId?void 0:this.config.auth.clientCapabilities,{scopes:o,claims:i}=e,n=new el.ScopeSet(o||[],this.correlationId);n.appendScopes(m.Constants.OIDC_DEFAULT_SCOPES);let a=eW.RequestParameterBuilder.buildMergedClaims(i,r?.length?r:void 0),c=!!e.attributeTokens?.length;this.performanceClient?.addFields({hasAttributeTokens:c},this.correlationId);let l={claims:a,accountId:this.accountId,clientId:this.config.auth.clientId,authority:t.urlString,scope:n.printScopes(),redirectUri:eM(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId),prompt:this.getPrompt(e.prompt),correlationId:this.correlationId,isSts:!1,tokenType:e.authenticationScheme,windowTitleSubstring:document.title,nonce:e.nonce,state:e.state,loginHint:e.loginHint,extraParameters:{...e.extraParameters,...e.resource&&{resource:e.resource}},extendedExpiryToken:!1,keyId:e.popKid,resourceRequestMethod:e.resourceRequestMethod,resourceRequestUri:e.resourceRequestUri,shrClaims:e.shrClaims,shrNonce:e.shrNonce};if(c&&(l.attributeTokens=g.CacheHelpers.serializeAttributeTokens(e.attributeTokens)),l.signPopToken&&e.popKid)throw(0,eG.createBrowserAuthError)(e$.invalidPopTokenRequest,this.correlationId);if(this.handleExtraBrokerParams(l,e.embeddedClientId),l.extraParameters=l.extraParameters||{},l.extraParameters.telemetry=v.PlatformAuthConstants.MATS_TELEMETRY,e.authenticationScheme===m.Constants.AuthenticationScheme.POP){let t,r={resourceRequestUri:e.resourceRequestUri,resourceRequestMethod:e.resourceRequestMethod,shrClaims:e.shrClaims,shrNonce:e.shrNonce,correlationId:this.correlationId},o=new es(this.browserCrypto,this.performanceClient);if(l.keyId)t=this.browserCrypto.base64UrlEncode(JSON.stringify({kid:l.keyId})),l.signPopToken=!1;else{let e=await (0,s.invokeAsync)(o.generateCnf.bind(o),b.PerformanceEvents.PopTokenGenerateCnf,this.logger,this.performanceClient,this.correlationId)(r,this.logger);t=e.reqCnfString,l.keyId=e.kid,l.signPopToken=!0}l.reqCnf=t}return this.addRequestSKUs(l),l}async getCanonicalAuthority(e){let t=e.authority||this.config.auth.authority,{azureCloudOptions:r,account:o}=e;o&&await eD(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,t,r,void 0,o);let i=new N.UrlString(t,this.correlationId);return i.validateAsUri(),i}getPrompt(e){switch(this.apiId){case v.ApiId.ssoSilent:case v.ApiId.acquireTokenSilent_silentFlow:return this.logger.trace("12n1y2",this.correlationId),m.Constants.PromptValue.NONE}if(!e)return void this.logger.trace("0uid1p",this.correlationId);switch(e){case m.Constants.PromptValue.NONE:case m.Constants.PromptValue.CONSENT:case m.Constants.PromptValue.LOGIN:return this.logger.trace("0i0hco",this.correlationId),e;default:throw this.logger.trace(`0w3tpw ${e}`,this.correlationId),(0,eG.createBrowserAuthError)(e$.nativePromptNotSupported,this.correlationId)}}handleExtraBrokerParams(e,t){let r=e.extraParameters&&e.extraParameters.hasOwnProperty(H.BROKER_CLIENT_ID)&&e.extraParameters.hasOwnProperty(H.BROKER_REDIRECT_URI)&&e.extraParameters.hasOwnProperty(H.CLIENT_ID);if(!t&&!r)return;let o="",i=e.redirectUri;t?(e.redirectUri=this.config.auth.redirectUri,o=t):e.extraParameters&&(e.redirectUri=e.extraParameters[H.BROKER_REDIRECT_URI],o=e.extraParameters[H.CLIENT_ID]);let{[H.BROKER_CLIENT_ID]:n,[H.BROKER_REDIRECT_URI]:s,[H.CLIENT_ID]:a,...c}=e.extraParameters||{};e.extraParameters={...c,child_client_id:o,child_redirect_uri:i},this.performanceClient?.addFields({embeddedClientId:o,embeddedRedirectUri:i},this.correlationId)}}let e5=new Map([["e","AAD"],["m","MSA"]]);function e7(e,t,r){let o=function(e){if(!e)return null;try{let t=(/%(?:[0-9A-Fa-f]{2}

1)/.test(e)?decodeURIComponent(e):e).split("|");if(t.length<5)return null;return{accountType:e5.get(t[0]?.trim()||"")||"",error:t[1]?.trim()||"",subError:t[2]?.trim()||"",cloudInstance:t[3]?.trim()||"",callerDataBoundary:t[4]?.trim()||""}}catch{return null}}(e.clientdata);o?.accountType&&r.addFields({accountType:o.accountType},t),o?.error&&r.addFields({serverErrorNo:o.error},t),o?.subError&&r.addFields({serverSubErrorNo:o.subError},t)}async function te(e,t,r,i,n){let a=eQ.getStandardAuthorizeRequestParameters({...e.auth,authority:t},r,i,n);if(eW.RequestParameterBuilder.addLibraryInfo(a,{sku:v.BrowserConstants.MSAL_SKU,version:R.version,os:"",cpu:""}),e.system.protocolMode!==P.ProtocolMode.OIDC&&eW.RequestParameterBuilder.addApplicationTelemetry(a,e.telemetry.application),r.platformBroker&&(eW.RequestParameterBuilder.addNativeBroker(a),n.addFields({isPlatformAuthorizeRequest:!0},r.correlationId),r.authenticationScheme===m.Constants.AuthenticationScheme.POP)){let e,t=new o.CryptoOps(i,n),c=new es(t,n);e=r.popKid?t.encodeKid(r.popKid):(await (0,s.invokeAsync)(c.generateCnf.bind(c),b.PerformanceEvents.PopTokenGenerateCnf,i,n,r.correlationId)(r,i)).reqCnfString,eW.RequestParameterBuilder.addPopToken(a,e)}return eW.RequestParameterBuilder.instrumentBrokerParams(a,r.correlationId,n),a}async function tt(e,t,r,o,i){if(!r.codeChallenge)throw(0,em.createClientConfigurationError)(eb.pkceParamsMissing,r.correlationId);let n=await (0,s.invokeAsync)(te,I.GetStandardParams,o,i,r.correlationId)(e,t,r,o,i);return eW.RequestParameterBuilder.addResponseType(n,m.Constants.OAuthResponseType.CODE),eW.RequestParameterBuilder.addCodeChallengeParams(n,r.codeChallenge,m.Constants.S256_CODE_CHALLENGE_METHOD),eW.RequestParameterBuilder.addExtraParameters(n,{...r.extraQueryParameters,...r.extraParameters}),eQ.getAuthorizeUrl(t,n)}async function tr(e,t,r,o,i){if(!r.earJwk)throw(0,eG.createBrowserAuthError)(e$.earJwkEmpty,r.correlationId);let n=await te(e,t,r,o,i);eW.RequestParameterBuilder.addResponseType(n,m.Constants.OAuthResponseType.IDTOKEN_TOKEN_REFRESHTOKEN),eW.RequestParameterBuilder.addEARParameters(n,r.earJwk),eW.RequestParameterBuilder.addCodeChallengeParams(n,r.codeChallenge,m.Constants.S256_CODE_CHALLENGE_METHOD),eW.RequestParameterBuilder.addExtraParameters(n,{...r.extraParameters});let s=new Map;return eW.RequestParameterBuilder.addExtraParameters(s,r.extraQueryParameters||{}),eW.RequestParameterBuilder.addCorrelationId(s,r.correlationId),{action:eQ.getAuthorizeUrl(t,s),fields:Object.fromEntries(n)}}async function to(e,t,r,o,i,n){let{action:s,fields:a}=await tr(t,r,o,i,n);return ts(e,s,a)}async function ti(e,t,r,o,i){let n=await te(e,t,r,o,i);eW.RequestParameterBuilder.addResponseType(n,m.Constants.OAuthResponseType.CODE),eW.RequestParameterBuilder.addCodeChallengeParams(n,r.codeChallenge,r.codeChallengeMethod||m.Constants.S256_CODE_CHALLENGE_METHOD),eW.RequestParameterBuilder.addExtraParameters(n,{...r.extraParameters});let s=new Map;return eW.RequestParameterBuilder.addExtraParameters(s,r.extraQueryParameters||{}),eW.RequestParameterBuilder.addCorrelationId(s,r.correlationId),{action:eQ.getAuthorizeUrl(t,s),fields:Object.fromEntries(n)}}async function tn(e,t,r,o,i,n){let{action:s,fields:a}=await ti(t,r,o,i,n);return ts(e,s,a)}function ts(e,t,r){let o=e.createElement("form");return o.method="post",o.action=t,Object.keys(r).forEach(t=>{let i=e.createElement("input");i.hidden=!0,i.name=t,i.value=r[t],o.appendChild(i)}),e.body.appendChild(o),o}async function ta(e,t,r,i,n,a,c,l,h,d){if(l.verbose("11qcow",e.correlationId),!d)throw(0,eG.createBrowserAuthError)(e$.nativeConnectionNotEstablished,e.correlationId);let u=new o.CryptoOps(l,h),g=new e9(i,n,u,l,c,i.system.navigationClient,r,h,d,t,a,e.correlationId),{userRequestState:p}=M.ProtocolUtils.parseRequestState(u.base64Decode,e.state,e.correlationId);return(0,s.invokeAsync)(g.acquireToken.bind(g),I.NativeInteractionClientAcquireToken,l,h,e.correlationId)({...e,state:p,prompt:void 0})}async function tc(e,t,r,o,i,n,a,c,l,h,d,u){if(ey.removeThrottle(a,i.auth.clientId,e),e7(t,e.correlationId,d),t.accountId)return(0,s.invokeAsync)(ta,I.HandleResponsePlatformBroker,h,d,e.correlationId)(e,t.accountId,o,i,a,c,l,h,d,u);let g=new eX(n,a,{...e,code:t.code||"",codeVerifier:r},h,d);return await (0,s.invokeAsync)(g.handleCodeResponse.bind(g),I.HandleCodeResponse,h,d,e.correlationId)(t,e,o)}async function tl(e,t,r,i,n,a,c,l,h,d,u){if(ey.removeThrottle(a,i.auth.clientId,e),e7(t,e.correlationId,d),eQ.validateAuthorizationResponse(t,e.state,e.correlationId),!t.ear_jwe)throw(0,eG.createBrowserAuthError)(e$.earJweEmpty,e.correlationId);if(!e.earJwk)throw(0,eG.createBrowserAuthError)(e$.earJwkEmpty,e.correlationId);let g=JSON.parse(await (0,s.invokeAsync)(eH.decryptEarResponse,I.DecryptEarResponse,h,d,e.correlationId)(e.earJwk,t.ear_jwe));if(g.accountId)return(0,s.invokeAsync)(ta,I.HandleResponsePlatformBroker,h,d,e.correlationId)(e,g.accountId,r,i,a,c,l,h,d,u);

1let m=new ed(i.auth.clientId,a,new o.CryptoOps(h,d),h,d,null,null);m.validateTokenResponse(g,e.correlationId);let C={code:"",state:e.state,nonce:e.nonce,client_info:g.client_info,cloud_graph_host_name:g.cloud_graph_host_name,cloud_instance_host_name:g.cloud_instance_host_name,cloud_instance_name:g.cloud_instance_name,msgraph_host:g.msgraph_host};return await (0,s.invokeAsync)(m.handleServerTokenResponse.bind(m),b.PerformanceEvents.HandleServerTokenResponse,h,d,e.correlationId)(g,n,p.TimeUtils.nowSeconds(),e,r,C,void 0,void 0,void 0,void 0)}var th=e.i(834966);async function td(e,t,r){let o=(0,s.invoke)(tu,I.GenerateCodeVerifier,t,e,r)(e,t,r),i=await (0,s.invokeAsync)(tg,I.GenerateCodeChallengeFromVerifier,t,e,r)(o,e,t,r);return{verifier:o,challenge:i}}function tu(e,t,r){try{let o=new Uint8Array(32);return(0,s.invoke)(eH.getRandomValues,I.GetRandomValues,t,e,r)(o),(0,th.urlEncodeArr)(o)}catch(e){throw(0,eG.createBrowserAuthError)(e$.pkceNotCreated,r)}}async function tg(e,t,r,o){try{let i=await (0,s.invokeAsync)(eH.sha256Digest,I.Sha256Digest,r,t,o)(e);return(0,th.urlEncodeArr)(new Uint8Array(i))}catch(e){throw(0,eG.createBrowserAuthError)(e$.pkceNotCreated,o)}}var eb=eS;let tp={sendGetRequestAsync:()=>Promise.reject((0,l.createClientAuthError)(K.methodNotImplemented,"")),sendPostRequestAsync:()=>Promise.reject((0,l.createClientAuthError)(K.methodNotImplemented,""))};class tm{navigateInternal(e,t){return tm.defaultNavigateWindow(e,t)}navigateExternal(e,t){return tm.defaultNavigateWindow(e,t)}static defaultNavigateWindow(e,t){return t.noHistory?window.location.replace(e):window.location.assign(e),new Promise((e,r)=>{setTimeout(()=>{r((0,eG.createBrowserAuthError)(e$.timedOut,"","failed_to_redirect"))},t.timeout)})}}class tC{async sendGetRequestAsync(e,t){let r,o={},i=0,n=ty(t);try{r=await fetch(e,{method:v.HTTP_REQUEST_TYPE.GET,headers:n})}catch(e){throw eA((0,eG.createBrowserAuthError)(window.navigator.onLine?e$.getRequestFailed:e$.noNetworkConnectivity,""),void 0,void 0,e)}o=tf(r.headers);try{return i=r.status,{headers:o,body:await r.json(),status:i}}catch(e){throw eA((0,eG.createBrowserAuthError)(e$.failedToParseResponse,""),i,o,e)}}async sendPostRequestAsync(e,t){let r,o,i=t&&t.body||"",n=ty(t),s=t?.correlationId,a=t?.performanceClient;for(let t=1;t<=2;t++)try{r=await fetch(e,{method:v.HTTP_REQUEST_TYPE.POST,headers:n,body:i});break}catch(e){var c;if(c=o=e,!(t<=1)||!1===window.navigator.onLine||"AbortError"===c.name)throw eA((0,eG.createBrowserAuthError)(!1!==window.navigator.onLine?e$.postRequestFailed:e$.noNetworkConnectivity,s||""),void 0,void 0,o);await new Promise(e=>setTimeout(e,100)),s&&a?.incrementFields({fetchRetryCount:1},s)}if(!r)throw eA((0,eG.createBrowserAuthError)(!1!==window.navigator.onLine?e$.postRequestFailed:e$.noNetworkConnectivity,s||""),void 0,void 0,o);let l=0,h={};h=tf(r.headers);try{return l=r.status,{headers:h,body:await r.json(),status:l}}catch(e){throw eA((0,eG.createBrowserAuthError)(e$.failedToParseResponse,s||""),l,h,e)}}}function ty(e){try{let t=new Headers;if(!(e&&e.headers))return t;let r=e.headers;return Object.entries(r).forEach(([e,r])=>{t.append(e,r)}),t}catch(e){throw eA((0,eG.createBrowserAuthError)(e$.failedToBuildHeaders,""),void 0,void 0,e)}}function tf(e){try{let t={};return e.forEach((e,r)=>{t[r]=e}),t}catch(e){throw(0,eG.createBrowserAuthError)(e$.failedToParseHeaders,"")}}e.s(["postRequestFailed",0,"post_request_failed","unexpectedError",0,"unexpected_error"],499338);var tI=e.i(499338),tI=tI;class tA{constructor(e,t,r,o){this.logger=e,this.handshakeTimeoutMs=t,this.extensionId=o,this.resolvers=new Map,this.handshakeResolvers=new Map,this.messageChannel=new MessageChannel,this.windowListener=this.onWindowMessage.bind(this),this.performanceClient=r,this.handshakeEvent=this.performanceClient.startMeasurement(I.NativeMessageHandlerHandshake),this.platformAuthType=v.PlatformAuthConstants.PLATFORM_EXTENSION_PROVIDER}async sendMessage(e){this.logger.trace(`0on4p2 ${this.platformAuthType}`,e.correlationId);let t={method:v.NativeExtensionMethod.GetToken,request:e}

1,r={channel:v.PlatformAuthConstants.CHANNEL_ID,extensionId:this.extensionId,responseId:(0,eH.createNewGuid)(),body:t};this.logger.trace(`1qadfi ${this.platformAuthType}`,e.correlationId),this.logger.tracePii(`1xm533 ${this.platformAuthType} ${JSON.stringify(r)}`,e.correlationId),this.messageChannel.port1.postMessage(r);let o=await new Promise((e,t)=>{this.resolvers.set(r.responseId,{resolve:e,reject:t})});return this.validatePlatformBrokerResponse(o)}static async createProvider(e,t,r,o){e.trace("15zfnw",o);try{let i=new tA(e,t,r,v.PlatformAuthConstants.PREFERRED_EXTENSION_ID);return await i.sendHandshakeRequest(o),i}catch(n){let i=new tA(e,t,r);return await i.sendHandshakeRequest(o),i}}async sendHandshakeRequest(e){this.logger.trace(`1dpg9o ${this.platformAuthType}`,e),window.addEventListener("message",this.windowListener,!1);let t={channel:v.PlatformAuthConstants.CHANNEL_ID,extensionId:this.extensionId,responseId:(0,eH.createNewGuid)(),body:{method:v.NativeExtensionMethod.HandshakeRequest}};return this.handshakeEvent.add({extensionId:this.extensionId,extensionHandshakeTimeoutMs:this.handshakeTimeoutMs}),this.messageChannel.port1.onmessage=e=>{this.onChannelMessage(e)},window.postMessage(t,window.origin,[this.messageChannel.port2]),new Promise((e,r)=>{this.handshakeResolvers.set(t.responseId,{resolve:e,reject:r}),this.timeoutId=window.setTimeout(()=>{window.removeEventListener("message",this.windowListener,!1),this.messageChannel.port1.close(),this.messageChannel.port2.close(),this.handshakeEvent.end({extensionHandshakeTimedOut:!0,success:!1}),r((0,eG.createBrowserAuthError)(e$.nativeHandshakeTimeout,"")),this.handshakeResolvers.delete(t.responseId)},this.handshakeTimeoutMs)})}onWindowMessage(e){let t=(0,_.createGuid)();if(this.logger.trace(`0jpn5u ${this.platformAuthType}`,t),e.source!==window)return;let r=e.data;if(r.channel&&r.channel===v.PlatformAuthConstants.CHANNEL_ID&&(!r.extensionId||r.extensionId===this.extensionId)&&r.body.method===v.NativeExtensionMethod.HandshakeRequest){let e=this.handshakeResolvers.get(r.responseId);if(!e)return void this.logger.trace(`07buhm ${this.platformAuthType} ${r.responseId}`,t);this.logger.verbose(r.extensionId?`0xrkug ${r.extensionId}`:"No extension installed",t),clearTimeout(this.timeoutId),this.messageChannel.port1.close(),this.messageChannel.port2.close(),window.removeEventListener("message",this.windowListener,!1),this.handshakeEvent.end({success:!1,extensionInstalled:!1}),e.reject((0,eG.createBrowserAuthError)(e$.nativeExtensionNotInstalled,""))}}onChannelMessage(e){let t=(0,_.createGuid)();this.logger.trace(`1py8yf ${this.platformAuthType}`,t);let r=e.data,o=this.resolvers.get(r.responseId),i=this.handshakeResolvers.get(r.responseId);try{let e=r.body.method;if(e===v.NativeExtensionMethod.Response){if(!o)return;let e=r.body.response;if(this.logger.trace(`19hpgm ${this.platformAuthType}`,t),this.logger.tracePii(`179a24 ${this.platformAuthType} ${JSON.stringify(e)}`,t),"Success"!==e.status)o.reject(e2(e.code,t,e.description,e.ext));else if(e.result)e.result.code&&e.result.description?o.reject(e2(e.result.code,t,e.result.description,e.result.ext)):o.resolve(e.result);else throw(0,C.createAuthError)(tI.unexpectedError,t,"Event does not contain result.");this.resolvers.delete(r.responseId)}else if(e===v.NativeExtensionMethod.HandshakeResponse){if(!i)return void this.logger.trace(`082qnt ${this.platformAuthType} ${r.responseId}`,t);clearTimeout(this.timeoutId),window.removeEventListener("message",this.windowListener,!1),this.extensionId=r.extensionId,this.extensionVersion=r.body.version,this.logger.verbose(`0yf5ib ${this.platformAuthType} ${this.extensionId}`,t),this.handshakeEvent.end({extensionInstalled:!0,success:!0}),i.resolve(),this.handshakeResolvers.delete(r.responseId)}}catch(r){this.logger.error("0xf978",t),this.logger.errorPii(`04i99o ${r}`,t),this.logger.errorPii(`0xdvsy ${e}`,t),o?o.reject(r):i&&i.reject(r)}}validatePlatformBrokerResponse(e){if(e.hasOwnProperty("access_token")&&e.hasOwnProperty("id_token")&&e.hasOwnProperty("client_info")&&e.hasOwnProperty("account")&&e.hasOwnProperty("scope")&&e.hasOwnProperty("expires_in"))return e;throw(0,C.createAuthError)(tI.unexpectedError,"","Response missing expected properties.")}getExtensionId(){return this.extensionId}getExtensionVersion(){return this.extensionVersion}getExtensionName(){return this.getExtensionId()===v.PlatformAuthConstants.PREFERRED_EXTENSION_ID?"chrome":this.getExtensionId()?.length?"unknown":void 0}}var tI=tI;class tE{constructor(e,t,r){this.logger=e,this.performanceClient=t,this.correlationId=r,this.platformAuthType=v.PlatformAuthConstants.PLATFORM_DOM_PRO

1VIDER}static async createProvider(e,t,r){if(e.trace("12mj4a",r),window.navigator?.platformAuthentication){let o=await window.navigator.platformAuthentication.getSupportedContracts(v.PlatformAuthConstants.MICROSOFT_ENTRA_BROKERID);if(o?.includes(v.PlatformAuthConstants.PLATFORM_DOM_APIS))return e.trace("1h5q1r",r),new tE(e,t,r)}}getExtensionId(){return v.PlatformAuthConstants.MICROSOFT_ENTRA_BROKERID}getExtensionVersion(){return""}getExtensionName(){return v.PlatformAuthConstants.DOM_API_NAME}async sendMessage(e){this.logger.trace(`02bcil ${this.platformAuthType}`,e.correlationId);try{let t=this.initializePlatformDOMRequest(e),r=await window.navigator.platformAuthentication.executeGetToken(t);return this.validatePlatformBrokerResponse(r,e.correlationId)}catch(t){throw this.logger.error(`11im7g ${this.platformAuthType}`,e.correlationId),t}}initializePlatformDOMRequest(e){this.logger.trace(`15d6yv ${this.platformAuthType}`,e.correlationId);let{accountId:t,clientId:r,authority:o,scope:i,redirectUri:n,correlationId:s,state:a,extraParameters:c,...l}=e,h=this.getDOMExtraParams(l,s);return{accountId:t,brokerId:this.getExtensionId(),authority:o,clientId:r,correlationId:s||this.correlationId,extraParameters:{...c,...h},isSecurityTokenService:!1,redirectUri:n,scope:i,state:a}}validatePlatformBrokerResponse(e,t){if(e.hasOwnProperty("isSuccess")){if(e.hasOwnProperty("accessToken")&&e.hasOwnProperty("idToken")&&e.hasOwnProperty("clientInfo")&&e.hasOwnProperty("account")&&e.hasOwnProperty("scopes")&&e.hasOwnProperty("expiresIn"))return this.logger.trace(`0h4vei ${this.platformAuthType}`,t),this.convertToPlatformBrokerResponse(e,t);else if(e.hasOwnProperty("error")&&!1===e.isSuccess&&e.error&&e.error.code)throw this.logger.trace(`0g92vm ${this.platformAuthType}`,t),e2(e.error.code,t,e.error.description,{error:parseInt(e.error.errorCode),protocol_error:e.error.protocolError,status:e.error.status,properties:e.error.properties})}throw(0,C.createAuthError)(tI.unexpectedError,t,"Response missing expected properties.")}convertToPlatformBrokerResponse(e,t){return this.logger.trace(`14913t ${this.platformAuthType}`,t),{access_token:e.accessToken,id_token:e.idToken,client_info:e.clientInfo,account:e.account,expires_in:e.expiresIn,scope:e.scopes,state:e.state||"",properties:e.properties||{},extendedLifetimeToken:e.extendedLifetimeToken??!1,shr:e.proofOfPossessionPayload}}getDOMExtraParams(e,t){try{let t={};for(let[r,o]of Object.entries(e))o&&("object"==typeof o?t[r]=JSON.stringify(o):t[r]=String(o));return t}catch(e){return this.logger.error(`0eu9o3 ${this.platformAuthType}`,t),this.logger.errorPii(`17rpl5 ${this.platformAuthType} ${e}`,t),{}}}}async function tT(e,t,r,o,i){let n;e.trace("134j0v",r),e.trace(`04c81g ${i}`,r);try{i&&(n=await tE.createProvider(e,t,r)),n||(e.trace("0l3na8",r),n=await tA.createProvider(e,o||2e3,t,r))}catch(t){e.trace("0icbd7",t)}return n}function tw(e,t,r,o,i){if(t.trace("0uko3r",r),!e.system.allowPlatformBroker&&e.experimental.allowPlatformBrokerWithDOM)throw(0,em.createClientConfigurationError)(eb.invalidPlatformBrokerConfiguration,"");if(!e.system.allowPlatformBroker)return t.trace("04hozs",r),!1;if(!o)return t.trace("0kvv1r",r),!1;if(i)switch(i){case m.Constants.AuthenticationScheme.BEARER:case m.Constants.AuthenticationScheme.POP:t.trace("18tev1",r);break;default:return t.trace("1dd2nh",r),!1}return!0}class tv extends eB{constructor(e,t,r,o,i,n,s,a,c,l,h){super(e,t,r,o,i,n,s,c,l),this.nativeStorage=a,this.eventHandler=i,this.waitForPopupResponseHook=h}acquireToken(e,t){let r;try{if(r={popupName:this.generatePopupName(e.scopes||m.Constants.OIDC_DEFAULT_SCOPES,e.authority||this.config.auth.authority),popupWindowAttributes:e.popupWindowAttributes||{},popupWindowParent:e.popupWindowParent??window},this.performanceClient.addFields({isAsyncPopup:!this.config.system.navigatePopups},this.correlationId),!this.config.system.navigatePopups)return this.logger.verbose("162h4u",this.correlationId),this.acquireTokenPopupAsync(e,r,t);{let o={...e,httpMethod:ex(e,this.config.system.protocolMode)};return this.logger.verbose("1f9ok3",this.correlationId),r.popup=this.openSizedPopup("about:blank",r),this.acquireTokenPopupAsync(o,r,t)}}catch(e){return Promise.reject(e)}}logout(e){try{this.logger.verbose("068rup",this.correlationId);

1let t=this.initializeLogoutRequest(e),r={popupName:this.generateLogoutPopupName(t),popupWindowAttributes:e?.popupWindowAttributes||{},popupWindowParent:e?.popupWindowParent??window},o=e&&e.authority,i=e&&e.mainWindowRedirectUri;if(!this.config.system.navigatePopups)return this.logger.verbose("1phd8u",this.correlationId),this.logoutPopupAsync(t,r,o,i);return this.logger.verbose("1a28da",this.correlationId),r.popup=this.openSizedPopup("about:blank",r),this.logoutPopupAsync(t,r,o,i)}catch(e){return Promise.reject(e)}}async acquireTokenPopupAsync(e,t,r){this.logger.verbose("1g77pg",this.correlationId);let o=await (0,s.invokeAsync)(eK,I.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(e,v.InteractionType.Popup,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);return(t.popup&&(0,_.preconnect)(o.authority),o.platformBroker=tw(this.config,this.logger,this.correlationId,this.platformAuthProvider,e.authenticationScheme),this.config.system.protocolMode===P.ProtocolMode.EAR)?this.executeEarFlow(o,t,r):this.executeCodeFlow(o,t,r)}async executeCodeFlow(e,t,o){let i=e.correlationId,n=eU(v.ApiId.acquireTokenPopup,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),a=o||await (0,s.invokeAsync)(td,I.GeneratePkceCodes,this.logger,this.performanceClient,i)(this.performanceClient,this.logger,i),c={...e,codeChallenge:a.challenge};try{let o=await (0,s.invokeAsync)(this.createAuthCodeClient.bind(this),I.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,i)({serverTelemetryManager:n,requestAuthority:c.authority,requestAzureCloudOptions:c.azureCloudOptions,requestExtraQueryParameters:c.extraQueryParameters,account:c.account});if(c.httpMethod===m.Constants.HttpMethod.POST)return await this.executeCodeFlowWithPost(c,t,o,a.verifier);{let n=await (0,s.invokeAsync)(tt,b.PerformanceEvents.GetAuthCodeUrl,this.logger,this.performanceClient,i)(this.config,o.authority,c,this.logger,this.performanceClient),l=this.config.auth.popupRelayUri,h=l?ez(l,this.getRelayStateId(e.state,i),{method:"GET",url:n},i):n,d=this.initiateAuthRequest(h,t);this.eventHandler.emitEvent(r.EventType.POPUP_OPENED,i,v.InteractionType.Popup,{popupWindow:d},null);let u=await this.waitForPopupResponse(e,d,t.popupWindowParent),g=(0,s.invoke)(eJ,I.DeserializeResponse,this.logger,this.performanceClient,this.correlationId)(u,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);return await (0,s.invokeAsync)(tc,I.HandleResponseCode,this.logger,this.performanceClient,i)(e,g,a.verifier,v.ApiId.acquireTokenPopup,this.config,o,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}}catch(e){throw t.popup?.close(),e instanceof C.AuthError&&(e.correlationId=this.correlationId,n.cacheFailedRequest(e)),e}}async executeEarFlow(e,t,r){let{correlationId:o,authority:i,azureCloudOptions:n,extraQueryParameters:a,account:c}=e,l=await (0,s.invokeAsync)(eD,I.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,o)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,i,n,a,c),h=await (0,s.invokeAsync)(eH.generateEarKey,I.GenerateEarKey,this.logger,this.performanceClient,o)(),d=r||await (0,s.invokeAsync)(td,I.GeneratePkceCodes,this.logger,this.performanceClient,o)(this.performanceClient,this.logger,o),u={...e,earJwk:h,codeChallenge:d.challenge},g=await this.openPostFormPopup(u,l,t,o,!0),p=await (0,s.invokeAsync)(this.waitForPopupResponse.bind(this),I.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,o)(u,g,t.popupWindowParent),m=(0,s.invoke)(eJ,I.DeserializeResponse,this.logger,this.performanceClient,this.correlationId)(p,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);if(m.ear_jwe||!m.code)return(0,s.invokeAsync)(tl,I.HandleResponseEar,this.logger,this.performanceClient,o)(u,m,v.ApiId.acquireTokenPopup,this.config,l,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider);{let t=await (0,s.invokeAsync)(this.createAuthCodeClient.bind(this),I.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,o)({serverTelemetryManager:eU(v.ApiId.acquireTokenPopup,this.config.auth.clientId,o,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account,authority:l});return(0,s.invokeAsync)(tc,I.HandleResponseCode,this.logger,this.performanceClient,o)(u,m,d.verifier,v.ApiId.acquireTokenPopup,this.config,t,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}}async executeCodeFlowWithPost(e,t,r,o){let i=e.correlationId,n=await (0,s.invokeAsync)(eD,I.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,i)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger),a=await this.openPostFormPopup(e,n,t,i,!1),c=await (0,s.invokeAsync)(this.waitForPopupResponse.bind(this),I.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,i)(e,a,t.popupWindowParent),l=(0,s.invoke)(eJ,I.DeserializeResponse,this.logger,this.performanceClient,this.correlationId)(c,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);return(0,s.invokeAsync)(tc,I.HandleResponseCode,this.logger,this.performanceClient,i)(e,l,o,v.ApiId.acquireTokenPopup,this.config,r,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async logoutPopupAsync(e,t,o,i){this.logger.verbose("0b7yrk",this.correlationId),this.eventHandler.emitEvent(r.EventType.LOGOUT_START,this.correlationId,v.InteractionType.Popup,e);let n=eU(v.ApiId.logoutPopup,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{await eL(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,e.account);let a=await (0,s.invokeAsync)(this.createAuthCodeClient.bind(this),I.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:n,requestAuthority:o,account:e.account||void 0});try{a.authority.endSessionEndpoint}catch{if(e.account?.homeAccountId&&e.postLogoutRedirectUri&&a.authority.protocolMode===P.ProtocolMode.OIDC){

1if(this.eventHandler.emitEvent(r.EventType.LOGOUT_SUCCESS,e.correlationId,v.InteractionType.Popup,e),i){let e={apiId:v.ApiId.logoutPopup,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},t=N.UrlString.getAbsoluteUrl(i,(0,_.getCurrentUri)(),this.correlationId);await this.navigationClient.navigateInternal(t,e)}t.popup?.close();return}}e.state=M.ProtocolUtils.setRequestState(this.browserCrypto,e.state||"",{interactionType:v.InteractionType.Popup},e.correlationId);let c=a.getLogoutUri(e);this.eventHandler.emitEvent(r.EventType.LOGOUT_SUCCESS,e.correlationId,v.InteractionType.Popup,e);let l=this.config.auth.popupRelayUri,h=l?ez(l,this.getRelayStateId(e.state||"",this.correlationId),{method:"GET",url:c},this.correlationId):c,d=this.openPopup(h,t);if(this.eventHandler.emitEvent(r.EventType.POPUP_OPENED,e.correlationId,v.InteractionType.Popup,{popupWindow:d},null),await this.waitForPopupResponse(e,d,t.popupWindowParent).catch(()=>{}),i){let e={apiId:v.ApiId.logoutPopup,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},t=N.UrlString.getAbsoluteUrl(i,(0,_.getCurrentUri)(),this.correlationId);this.logger.verbose("0qcur2",this.correlationId),this.logger.verbosePii(`0oj7lk ${t}`,this.correlationId),await this.navigationClient.navigateInternal(t,e)}else this.logger.verbose("03zgcf",this.correlationId)}catch(e){throw t.popup?.close(),e instanceof C.AuthError&&(e.correlationId=this.correlationId,n.cacheFailedRequest(e)),this.eventHandler.emitEvent(r.EventType.LOGOUT_FAILURE,this.correlationId,v.InteractionType.Popup,null,e),this.eventHandler.emitEvent(r.EventType.LOGOUT_END,this.correlationId,v.InteractionType.Popup),e}this.eventHandler.emitEvent(r.EventType.LOGOUT_END,this.correlationId,v.InteractionType.Popup)}initiateAuthRequest(e,t){if(e)return this.logger.infoPii(`1kcr9k ${e}`,this.correlationId),this.openPopup(e,t);throw this.logger.error("1l7hyp",this.correlationId),(0,eG.createBrowserAuthError)(e$.emptyNavigateUri,this.correlationId)}openPopup(e,t){try{let r;if(t.popup?(r=t.popup,this.logger.verbosePii(`0cgeo7 ${e}`,this.correlationId),r.location.assign(e)):void 0===t.popup&&(this.logger.verbosePii(`0c2awd ${e}`,this.correlationId),r=this.openSizedPopup(e,t)),!r)throw(0,eG.createBrowserAuthError)(e$.emptyWindowError,this.correlationId);try{r.document.title="Microsoft Authentication"}catch(e){"u">typeof DOMException&&e instanceof DOMException&&"SecurityError"===e.name||this.logger.verbose("1s1yfs",this.correlationId)}return r.focus&&r.focus(),this.currentWindow=r,r}catch(e){throw this.logger.error(`0dxfb9 ${e.message}`,this.correlationId),(0,eG.createBrowserAuthError)(e$.popupWindowError,this.correlationId)}}openSizedPopup(e,{popupName:t,popupWindowAttributes:r,popupWindowParent:o}){let i=o.screenLeft?o.screenLeft:o.screenX,n=o.screenTop?o.screenTop:o.screenY,s=o.innerWidth||document.documentElement.clientWidth||document.body.clientWidth,a=o.innerHeight||document.documentElement.clientHeight||document.body.clientHeight,c=r.popupSize?.width,l=r.popupSize?.height,h=r.popupPosition?.top,d=r.popupPosition?.left;return(!c||c<0||c>s)&&(this.logger.verbose("08vfmo",this.correlationId),c=v.BrowserConstants.POPUP_WIDTH),(!l||l<0||l>a)&&(this.logger.verbose("09cxa0",this.correlationId),l=v.BrowserConstants.POPUP_HEIGHT),(!h||h<0||h>a)&&(this.logger.verbose("1qh4wo",this.correlationId),h=Math.max(0,a/2-v.BrowserConstants.POPUP_HEIGHT/2+n)),(!d||d<0||d>s)&&(this.logger.verbose("1sz3en",this.correlationId),d=Math.max(0,s/2-v.BrowserConstants.POPUP_WIDTH/2+i)),o.open(e,t,`width=${c}, height=${l}, top=${h}, left=${d}, scrollbars=yes`)}generatePopupName(e,t){return`${v.BrowserConstants.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${e.join("-")}.${t}.${this.correlationId}`}generateLogoutPopupName(e){let t=e.account&&e.account.homeAccountId;return`${v.BrowserConstants.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${t}.${this.correlationId}`}getRelayStateId(e,t){return M.ProtocolUtils.parseRequestState(O.base64Decode,e,t).libraryState.id}async openPostFormPopup(e,t,r,o,i){let n=this.config.auth.popupRelayUri;if(n){let s=await (i?tr:ti)(this.config,t,e,this.logger,this.performanceClient),a=ez(n,this.getRelayStateId(e.state,o),{method:"POST",action:s.action,fields:s.fields},o);return this.initiateAuthRequest(a,r)}let s=r.popup||this.openPopup("about:blank",r);return(await (i?to:tn)(s.document,this.config,t,e,this.logger,this.performanceClient)).submit(),s}async waitForPopupResponse(e,t,r){return this.config.auth.popupRelayUri?eV(this.config.system.popupBridgeTimeout,this.logger,e,t,this.performanceClient):this.waitForPopupResponseHook?this.waitForPopupResponseHook(e,t,r):(0,_.waitForBridgeResponse)(this.config.system.popupBridgeTimeout,this.logger,e,this.performanceClient)}}class t_ extends eB{constructor(e,t,r,o,i,n,s,a,c,l){super(e,t,r,o,i,n,s,c,l),this.nativeStorage=a}async acquireToken(e){let t=await (0,s.invokeAsync)(eK,I.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(e,v.InteractionType.Redirect,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);t.platformBroker=tw(this.config,this.logger,this.correlationId,this.platformAuthProvider,e.authenticationScheme);let o=e=>{e.persisted&&(this.logger.verbose("0udvtt",this.correlationId),this.browserStorage.resetRequestCache(this.correlationId),this.eventHandler.emitEvent(r.EventType.RESTORE_FROM_BFCACHE,this.correlationId,v.InteractionType.Redirect))},i=this.getRedirectStartPage(e.redirectStartPage);this.logger.verbosePii(`0zao0a ${i}`,this.correlationId),this.browserStorage.setTemporaryCache(v.TemporaryCacheKeys.ORIGIN_URI,i,!0),window.addEventListener("pageshow",o);try{this.config.system.protocolMode===P.ProtocolMode.EAR?await this.executeEarFlow(t):await this.executeCodeFlow(t)}catch(e){throw e instanceof C.AuthError&&(e.correlationId=this.correlationId),window.removeEventListener("pageshow",o),e}}async executeCodeFlow(e){let t=e.correlationId,r=eU(v.ApiId.acquireTokenRedirect,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),o=await (0,s.invokeAsync)(td,I.GeneratePkceCodes,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),i={...e,codeChallenge:o.challenge};this.browserStorage.cacheAuthorizeRequest(i,this.correlationId,o.verifier);try{if(i.httpMethod===m.Constants.HttpMethod.POST)return await this.executeCodeFlowWithPost(i);{let t=await (0,s.invokeAsync)(this.createAuthCodeClient.bind(this),I.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:r,requestAuthority:i.authority,requestAzureCloudOptions:i.azureCloudOptions,requestExtraQueryParameters:i.extraQueryParameters,account:i.account}),o=await (0,s.invokeAsync)(tt,b.PerformanceEvents.GetAuthCodeUrl,this.logger,this.performanceClient,e.correlationId)(this.config,t.authority,i,this.logger,this.performanceClient);return await this.initiateAuthRequest(o)}}catch(e){throw e instanceof C.AuthError&&(e.correlationId=this.correlationId,r.cacheFailedRequest(e)),e}}

1async executeEarFlow(e){let{correlationId:t,authority:r,azureCloudOptions:o,extraQueryParameters:i,account:n}=e,a=await (0,s.invokeAsync)(eD,I.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,t)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,r,o,i,n),c=await (0,s.invokeAsync)(eH.generateEarKey,I.GenerateEarKey,this.logger,this.performanceClient,t)(),l=await (0,s.invokeAsync)(td,I.GeneratePkceCodes,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),h={...e,earJwk:c,codeChallenge:l.challenge};return this.browserStorage.cacheAuthorizeRequest(h,this.correlationId,l.verifier),(await to(document,this.config,a,h,this.logger,this.performanceClient)).submit(),new Promise((e,t)=>{setTimeout(()=>{t((0,eG.createBrowserAuthError)(e$.timedOut,"","failed_to_redirect"))},this.config.system.redirectNavigationTimeout)})}async executeCodeFlowWithPost(e){let t=e.correlationId,r=await (0,s.invokeAsync)(eD,I.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,t)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger);return this.browserStorage.cacheAuthorizeRequest(e,this.correlationId),(await tn(document,this.config,r,e,this.logger,this.performanceClient)).submit(),new Promise((e,t)=>{setTimeout(()=>{t((0,eG.createBrowserAuthError)(e$.timedOut,"","failed_to_redirect"))},this.config.system.redirectNavigationTimeout)})}async handleRedirectPromise(e,t,r,o){let i=document.title;document.title="Microsoft Authentication";let n=eU(v.ApiId.handleRedirectPromise,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),s=o?.navigateToLoginRequestUrl??!0;try{let[i,a]=this.getRedirectResponse(o?.hash||"");if(!i)return this.logger.info("1qmv0q",this.correlationId),this.browserStorage.resetRequestCache(this.correlationId),"back_forward"!==function(){if("u"<typeof window||void 0===window.performance||"function"!=typeof window.performance.getEntriesByType)return;let e=window.performance.getEntriesByType("navigation"),t=e.length?e[0]:void 0;return t?.type}()?r.event.errorCode="no_server_response":this.logger.verbose("1eqegq",this.correlationId),null;

1let c=this.browserStorage.getTemporaryCache(v.TemporaryCacheKeys.ORIGIN_URI,this.correlationId,!0)||"",l=ej.UrlUtils.normalizeUrlForComparison(c,this.logger,this.correlationId),h=ej.UrlUtils.normalizeUrlForComparison(window.location.href,this.logger,this.correlationId);if(l===h&&s)return this.logger.verbose("11yred",this.correlationId),c.indexOf("#")>-1&&(0,_.replaceHash)(c),await this.handleResponse(i,e,t,n);if(!s)return this.logger.verbose("0v4sdv",this.correlationId),await this.handleResponse(i,e,t,n);if(!(0,_.isInIframe)()||this.config.system.allowRedirectInIframe){this.browserStorage.setTemporaryCache(v.TemporaryCacheKeys.URL_HASH,a,!0);let r={apiId:v.ApiId.handleRedirectPromise,timeout:this.config.system.redirectNavigationTimeout,noHistory:!0},o=!0;if(c)this.logger.verbose(`08jpy1 ${c}`,this.correlationId),o=await this.navigationClient.navigateInternal(c,r);else{let e=(0,_.getHomepage)(this.correlationId);this.browserStorage.setTemporaryCache(v.TemporaryCacheKeys.ORIGIN_URI,e,!0),this.logger.warning("1dutq1",this.correlationId),o=await this.navigationClient.navigateInternal(e,r)}if(!o)return await this.handleResponse(i,e,t,n)}return null}catch(e){throw e instanceof C.AuthError&&(e.correlationId=this.correlationId,n.cacheFailedRequest(e)),e}finally{document.title=i}}getRedirectResponse(e){this.logger.verbose("1c5i8m",this.correlationId);let t=e;t||(t=this.config.auth.OIDCOptions.responseMode===m.Constants.ResponseMode.QUERY?window.location.search:window.location.hash);let r=ej.UrlUtils.getDeserializedResponse(t);if(r){try{!function(e,t,r,o){if(!e.state)throw(0,eG.createBrowserAuthError)(e$.noStateInHash,o);let i=function(e,t,r){if(!t)return null;try{return M.ProtocolUtils.parseRequestState(e.base64Decode,t,r).libraryState.meta}catch(e){throw(0,l.createClientAuthError)(h.ClientAuthErrorCodes.invalidState,r)}}(t,e.state,o);if(!i)throw(0,eG.createBrowserAuthError)(e$.unableToParseState,o);if(i.interactionType!==r)throw(0,eG.createBrowserAuthError)(e$.stateInteractionTypeMismatch,o)}(r,this.browserCrypto,v.InteractionType.Redirect,this.correlationId)}catch(e){return e instanceof C.AuthError&&this.logger.error(`0bkq6p ${e.errorCode} ${e.errorMessage}`,this.correlationId),[null,""]}return(0,_.clearHash)(window),this.logger.verbose("00uvho",this.correlationId),[r,t]}let o=this.browserStorage.getTemporaryCache(v.TemporaryCacheKeys.URL_HASH,this.correlationId,!0);return(this.browserStorage.removeItem(this.browserStorage.generateCacheKey(v.TemporaryCacheKeys.URL_HASH)),o&&(r=ej.UrlUtils.getDeserializedResponse(o)))?(this.logger.verbose("001671",this.correlationId),[r,o]):[null,""]}async handleResponse(e,t,r,o){if(!e.state)throw(0,eG.createBrowserAuthError)(e$.noStateInHash,t.correlationId);let{authority:i,azureCloudOptions:n,extraQueryParameters:a,account:c}=t;if(e.ear_jwe){let r=await (0,s.invokeAsync)(eD,I.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,t.correlationId)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,i,n,a,c);return(0,s.invokeAsync)(tl,I.HandleResponseEar,this.logger,this.performanceClient,t.correlationId)(t,e,v.ApiId.acquireTokenRedirect,this.config,r,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}let l=await (0,s.invokeAsync)(this.createAuthCodeClient.bind(this),I.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:o,requestAuthority:t.authority});return(0,s.invokeAsync)(tc,I.HandleResponseCode,this.logger,this.performanceClient,t.correlationId)(t,e,r,v.ApiId.acquireTokenRedirect,this.config,l,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async initiateAuthRequest(e){if(this.logger.verbose("0yaw2e",this.correlationId),e){this.logger.infoPii(`1luf83 ${e}`,this.correlationId);let t={apiId:v.ApiId.acquireTokenRedirect,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},r=this.config.auth.onRedirectNavigate;if("function"==typeof r)return(this.logger.verbose("1nehvl",this.correlationId),!1===r(e))?void this.logger.verbose("09k5h5",this.correlationId):(this.logger.verbose("1a0jxh",this.correlationId),await this.navigationClient.navigateExternal(e,t),void 0);return this.logger.verbose("0klwf7",this.correlationId),await this.navigationClient.navigateExternal(e,t),void 0}throw this.logger.info("0rlh4e",this.correlationId),(0,eG.createBrowserAuthError)(e$.emptyNavigateUri,this.correlationId)}async logout(e){this.logger.verbose("1rkurh",this.correlationId);

1let t=this.initializeLogoutRequest(e),o=eU(v.ApiId.logout,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{this.eventHandler.emitEvent(r.EventType.LOGOUT_START,this.correlationId,v.InteractionType.Redirect,e),await eL(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,t.account);let i={apiId:v.ApiId.logout,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},n=await (0,s.invokeAsync)(this.createAuthCodeClient.bind(this),I.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:o,requestAuthority:e&&e.authority,requestExtraQueryParameters:e?.extraQueryParameters,account:e&&e.account||void 0});if(n.authority.protocolMode===P.ProtocolMode.OIDC)try{n.authority.endSessionEndpoint}catch{if(t.account?.homeAccountId)return void this.eventHandler.emitEvent(r.EventType.LOGOUT_SUCCESS,this.correlationId,v.InteractionType.Redirect,t)}t.state=M.ProtocolUtils.setRequestState(this.browserCrypto,t.state||"",{interactionType:v.InteractionType.Redirect},t.correlationId);let a=n.getLogoutUri(t);t.account?.homeAccountId&&this.eventHandler.emitEvent(r.EventType.LOGOUT_SUCCESS,this.correlationId,v.InteractionType.Redirect,t);let c=this.config.auth.onRedirectNavigate;if("function"==typeof c){let e=c(a);if(!1!==e){this.logger.verbose("06v57e",this.correlationId),this.browserStorage.getInteractionInProgress()||this.browserStorage.setInteractionInProgress(!0,v.INTERACTION_TYPE.SIGNOUT),await this.navigationClient.navigateExternal(a,i);return}this.browserStorage.setInteractionInProgress(!1),this.logger.verbose("0xqes1",this.correlationId)}else{this.browserStorage.getInteractionInProgress()||this.browserStorage.setInteractionInProgress(!0,v.INTERACTION_TYPE.SIGNOUT),await this.navigationClient.navigateExternal(a,i);return}}catch(e){throw e instanceof C.AuthError&&(e.correlationId=this.correlationId,o.cacheFailedRequest(e)),this.eventHandler.emitEvent(r.EventType.LOGOUT_FAILURE,this.correlationId,v.InteractionType.Redirect,null,e),this.eventHandler.emitEvent(r.EventType.LOGOUT_END,this.correlationId,v.InteractionType.Redirect),e}this.eventHandler.emitEvent(r.EventType.LOGOUT_END,this.correlationId,v.InteractionType.Redirect)}getRedirectStartPage(e){let t=e||window.location.href,r=N.UrlString.getAbsoluteUrl(t,(0,_.getCurrentUri)(),this.correlationId);return ej.UrlUtils.validateUrl(r,this.logger,this.correlationId),r}}var eQ=eQ;async function tS(e,t,r,o){if(!t)throw r.info("1l7hyp",o),(0,eG.createBrowserAuthError)(e$.emptyNavigateUri,o);return e.src=t,e}async function tR(e,t,r,o,i,n){if(!e.contentDocument)throw"No document associated with iframe!";return(await tn(e.contentDocument,t,r,o,i,n)).submit(),e}async function tk(e,t,r,o,i,n){if(!e.contentDocument)throw"No document associated with iframe!";return(await to(e.contentDocument,t,r,o,i,n)).submit(),e}function tO(){let e=document.createElement("iframe");return e.className="msalSilentIframe",e.title="Microsoft Authentication",e.style.visibility="hidden",e.style.position="absolute",e.style.width=e.style.height="0",e.style.border="0",e.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms"),e.setAttribute("allow","local-network-access *"),document.body.appendChild(e),e}function tP(e){document.body===e.parentNode&&document.body.removeChild(e)}class tb extends eB{constructor(e,t,r,o,i,n,s,a,c,l,h,d){super(e,t,r,o,i,n,a,l,h),this.apiId=s,this.nativeStorage=c,this.waitForIframeResponseHook=d}async acquireToken(e){e.loginHint||e.sid||e.account&&e.account.username||this.logger.warning("1kl318",this.correlationId);let t={...e};t.prompt?t.prompt!==m.Constants.PromptValue.NONE&&t.prompt!==m.Constants.PromptValue.NO_SESSION&&(this.logger.warning(`0bmctg ${t.prompt} ${m.Constants.PromptValue.NONE}`,this.correlationId),t.prompt=m.Constants.PromptValue.NONE):t.prompt=m.Constants.PromptValue.NONE;let r=await (0,s.invokeAsync)(eK,I.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(t,v.InteractionType.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);return(r.platformBroker=tw(this.config,this.logger,this.correlationId,this.platformAuthProvider,r.authenticationScheme),(0,_.preconnect)(r.authority),this.config.system.protocolMode===P.ProtocolMode.EAR)?this.executeEarFlow(r):this.executeCodeFlow(r)}async executeCodeFlow(e){let t,r=eU(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{return t=await (0,s.invokeAsync)(this.createAuthCodeClient.bind(this),I.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,e.correlationId)({serverTelemetryManager:r,requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),await (0,s.invokeAsync)(this.silentTokenHelper.bind(this),I.SilentIframeClientTokenHelper,this.logger,this.performanceClient,e.correlationId)(t,e)}catch(o){if(o instanceof C.AuthError&&(o.correlationId=this.correlationId,r.cacheFailedRequest(o)),!t||!(o instanceof C.AuthError)||o.errorCode!==v.BrowserConstants.INVALID_GRANT_ERROR)throw o;return this.performanceClient.addFields({retryError:o.errorCode},this.correlationId),await (0,s.invokeAsync)(this.silentTokenHelper.bind(this),I.SilentIframeClientTokenHelper,this.logger,this.performanceClient,this.correlationId)(t,e)}}async executeEarFlow(e){let t,{correlationId:r,authority:o,azureCloudOptions:i,extraQueryParameters:n,account:a}=e,c=await (0,s.invokeAsync)(eD,I.StandardInteractionClientGetDiscoveredAuthority,this.logger,this.performanceClient,r)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,o,i,n,a),l=await (0,s.invokeAsync)(eH.generateEarKey,I.GenerateEarKey,this.logger,this.performanceClient,r)(),h=await (0,s.invokeAsync)(td,I.GeneratePkceCodes,this.logger,this.performanceClient,r)(this.performanceClient,this.logger,r),d={...e,earJwk:l,codeChallenge:h.challenge},u=tO(),g=this.config.auth.OIDCOptions.responseMode;try{let o=(0,s.invokeAsync)(this.waitForIframeResponse.bind(this),I.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,r)(u,e);o.catch(()=>{}),await (0,s.invokeAsync)(tk,I.SilentHandlerInitiateAuthRequest,this.logger,this.performanceClient,r)(u,this.config,c,d,this.logger,this.performanceClient),t=await o}finally{(0,s.invoke)(tP,I.RemoveHiddenIframe,this.logger,this.performanceClient,r)(u)}let p=(0,s.invoke)(eJ,I.DeserializeResponse,this.logger,this.performanceClient,r)(t,g,this.logger,this.correlationId);if(p.ear_jwe||!p.code)return(0,s.invokeAsync)(tl,I.HandleResponseEar,this.logger,this.performanceClient,r)(d,p,this.apiId,this.config,c,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider);{let t=await (0,s.invokeAsync)(this.createAuthCodeClient.bind(this),I.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,r)({serverTelemetryManager:eU(this.apiId,this.config.auth.clientId,r,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account,authority:c});return(0,s.invokeAsync)(tc,I.HandleResponseCode,this.logger,this.performanceClient,r)(d,p,h.verifier,this.apiId,this.config,t,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}}async verifySso(e){let t={...e};t.prompt||(t.prompt=m.Constants.PromptValue.NONE);let r=await (0,s.invokeAsync)(eK,I.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(t,v.InteractionType.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId),o=await (0,s.invokeAsync)(this.createAuthCodeClient.bind(this),I.StandardInteractionClientCreateAuthCodeClient,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:eU(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:r.authority,requestAzureCloudOptions:r.azureCloudOptions,requestExtraQueryParameters:r.extraQueryParameters,account:r.account}),{serverParams:i}=await this.silentAuthorizeHelper(o,r),n=r.correlationId;return(eQ.validateAuthorizationResponse(i,r.state,n),i.code)?(this.logger.verbose("0kkkcj",n),!0):(this.logger.warning("0y34ti",n),!1)}logout(){return Promise.reject((0,eG.createBrowserAuthError)(e$.silentLogoutUnsupported,""))}async silentTokenHelper(e,t){let{serverParams:r,pkceCodes:o}=await this.silentAuthorizeHelper(e,t);return(0,s.invokeAsync)(tc,I.HandleResponseCode,this.logger,this.performanceClient,t.correlationId)(t,r,o.verifier,this.apiId,this.config,e,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async silentAuthorizeHelper(e,t){let r,o=t.correlationId,i=await (0,s.invokeAsync)(td,I.GeneratePkceCodes,this.logger,this.performanceClient,o)(this.performanceClient,this.logger,o),n={...t,codeChallenge:i.challenge},a=tO(),c=this.config.auth.OIDCOptions.responseMode;try{let i=(0,s.invokeAsync)(this.waitForIframeResponse.bind(this),I.SilentHandlerMonitorIframeForHash,this.logger,this.performanceClient,o)(a,t);

1if(i.catch(()=>{}),t.httpMethod===m.Constants.HttpMethod.POST)await (0,s.invokeAsync)(tR,I.SilentHandlerInitiateAuthRequest,this.logger,this.performanceClient,o)(a,this.config,e.authority,n,this.logger,this.performanceClient);else{let t=await (0,s.invokeAsync)(tt,b.PerformanceEvents.GetAuthCodeUrl,this.logger,this.performanceClient,o)(this.config,e.authority,n,this.logger,this.performanceClient);await (0,s.invokeAsync)(tS,I.SilentHandlerInitiateAuthRequest,this.logger,this.performanceClient,o)(a,t,this.logger,o)}r=await i}finally{(0,s.invoke)(tP,I.RemoveHiddenIframe,this.logger,this.performanceClient,o)(a)}return{serverParams:(0,s.invoke)(eJ,I.DeserializeResponse,this.logger,this.performanceClient,o)(r,c,this.logger,this.correlationId),pkceCodes:i,silentRequest:n}}async waitForIframeResponse(e,t){return this.waitForIframeResponseHook?this.waitForIframeResponseHook(e,t):(0,_.waitForBridgeResponse)(this.config.system.iframeBridgeTimeout,this.logger,t,this.performanceClient,this.config.experimental)}}var tN=e.i(753798);class tM{constructor(e,t){this.config=Y(e),this.logger=new S.Logger(this.config.loggerOptions,q.name,q.version),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t}async acquireToken(e,t){let r=(0,ei.nowSeconds)(),o=await (0,s.invokeAsync)(this.executeTokenRequest.bind(this),en.RefreshTokenClientExecuteTokenRequest,this.logger,this.performanceClient,e.correlationId)(e,this.authority),i=o.headers?.[L.HeaderNames.X_MS_REQUEST_ID],n=new ed(this.config.authOptions.clientId,this.cacheManager,this.cryptoUtils,this.logger,this.performanceClient,this.config.serializableCache,this.config.persistencePlugin);return n.validateTokenResponse(o.body,e.correlationId),(0,s.invokeAsync)(n.handleServerTokenResponse.bind(n),en.HandleServerTokenResponse,this.logger,this.performanceClient,e.correlationId)(o.body,this.authority,r,e,t,void 0,void 0,!0,e.forceCache,i)}async acquireTokenByRefreshToken(e,t){if(!e)throw(0,em.createClientConfigurationError)(eS.tokenRequestEmpty,"");if(!e.account)throw(0,l.createClientAuthError)(K.noAccountInSilentRequest,e.correlationId);if(this.cacheManager.isAppMetadataFOCI(e.account.environment,e.correlationId))try{return await (0,s.invokeAsync)(this.acquireTokenWithCachedRefreshToken.bind(this),en.RefreshTokenClientAcquireTokenWithCachedRefreshToken,this.logger,this.performanceClient,e.correlationId)(e,!0,t)}catch(r){let e=r instanceof c.InteractionRequiredAuthError&&r.errorCode===tN.noTokensFound,t=r instanceof ec&&r.errorCode===L.INVALID_GRANT_ERROR&&r.subError===L.CLIENT_MISMATCH_ERROR;if(e||t);else throw r}return(0,s.invokeAsync)(this.acquireTokenWithCachedRefreshToken.bind(this),en.RefreshTokenClientAcquireTokenWithCachedRefreshToken,this.logger,this.performanceClient,e.correlationId)(e,!1,t)}async acquireTokenWithCachedRefreshToken(e,t,r){let o=(0,s.invoke)(this.cacheManager.getRefreshToken.bind(this.cacheManager),en.CacheManagerGetRefreshToken,this.logger,this.performanceClient,e.correlationId)(e.account,t,e.correlationId,void 0);if(!o)throw(0,c.createInteractionRequiredAuthError)(tN.noTokensFound,e.correlationId);if(o.expiresOn){let t=e.refreshTokenExpirationOffsetSeconds||300;if(this.performanceClient?.addFields({cacheRtExpiresOnSeconds:Number(o.expiresOn),rtOffsetSeconds:t},e.correlationId),(0,ei.isTokenExpired)(o.expiresOn,t))throw(0,c.createInteractionRequiredAuthError)(tN.refreshTokenExpired,e.correlationId)}let i={...e,refreshToken:o.secret,authenticationScheme:e.authenticationScheme||L.AuthenticationScheme.BEARER,ccsCredential:{credential:e.account.homeAccountId,type:ep}};try{return await (0,s.invokeAsync)(this.acquireToken.bind(this),en.RefreshTokenClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(i,r)}catch(t){if(t instanceof c.InteractionRequiredAuthError&&t.subError===tN.badToken){this.logger.verbose("1pg3ap",e.correlationId);let t=this.cacheManager.generateCredentialKey(o);this.cacheManager.removeRefreshToken(t,e.correlationId)}throw t}}async executeTokenRequest(e,t){let r=eT(e,this.config.authOptions.clientId,this.config.authOptions.redirectUri,this.performanceClient),o=N.UrlString.appendQueryString(t.tokenEndpoint,r),i=await (0,s.invokeAsync)(this.createTokenRequestBody.bind(this),en.RefreshTokenClientCreateTokenRequestBody,this.logger,this.performanceClient,e.correlationId)(e),n=eE(this.logger,this.config.systemOptions.preventCorsPreflight,e.ccsCredential),a=(0,y.getRequestThumbprint)(this.config.authOptions.clientId,e);return(0,s.invokeAsync)(ew,en.RefreshTokenClientExecutePostToTokenEndpoint,this.logger,this.performanceClient,e.correlationId)(o,i,n,a,e.correlationId,this.cacheManager,this.networkClient,this.logger,this.performanceClient,this.serverTelemetryManager)}async createTokenRequestBody(e){let t=new Map;if((0,U.addClientId)(t,e.embeddedClientId||e.extraParameters?.[H.CLIENT_ID]||this.config.authOptions.clientId),e.redirectUri&&(0,U.addRedirectUri)(t,e.redirectUri),(0,U.addScopes)(t,e.scopes,e.correlationId,!0,this.config.authOptions.authority.options.OIDCOptions?.defaultScopes),(0,U.addGrantType)(t,L.GrantType.REFRESH_TOKEN_GRANT),(0,U.addClientInfo)(t),(0,U.addLibraryInfo)(t,this.config.libraryInfo),(0,U.addApplicationTelemetry)(t,this.config.telemetry.application),(0,U.addThrottling)(t),this.serverTelemetryManager&&!Q(this.config)&&(0,U.addServerTelemetry)(t,this.serverTelemetryManager),(0,U.addRefreshToken)(t,e.refreshToken),e.attributeTokens&&(0,U.addAttributeTokens)(t,e.attributeTokens),this.performanceClient?.addFields({hasAttributeTokens:!!e.attributeTokens?.length},e.correlationId),this.config.clientCredentials.clientSecret&&(0,U.addClientSecret)(t,this.config.clientCredentials.clientSecret),this.config.clientCredentials.clientAssertion){let r=this.config.clientCredentials.clientAssertion;(0,U.addClientAssertion)(t,await eC(r.assertion,this.config.authOptions.clientId,e.resourceRequestUri)),(0,U.addClientAssertionType)(t,r.assertionType)}if(e.authenticationScheme===L.AuthenticationScheme.POP){let r,o=new es(this.cryptoUtils,this.performanceClient);r=e.popKid?this.cryptoUtils.encodeKid(e.popKid):(await (0,s.invokeAsync)(o.generateCnf.bind(o),en.PopTokenGenerateCnf,this.logger,this.performanceClient,e.correlationId)(e,this.logger)).reqCnfString,(0,U.addPopToken)(t,r)}else if(e.authenticationScheme===L.AuthenticationScheme.SSH)if(e.sshJwk)(0,U.addSshJwk)(t,e.sshJwk);else throw(0,em.createClientConfigurationError)(eS.missingSshJwk,e.correlationId);if(this.config.systemOptions.preventCorsPreflight&&e.ccsCredential)switch(e.ccsCredential.type){case ep:try{let r=(0,eg.buildClientInfoFromHomeAccountId)(e.ccsCredential.credential);(0,U.addCcsOid)(t,r)}catch(t){this.logger.verbose(`1qhtee ${t}`,e.correlationId)}break;case"UPN":(0,U.addCcsUpn)(t,e.ccsCredential.credential)}return e.embeddedClientId&&(0,U.addBrokerParameters)(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.extraParameters&&(0,U.addExtraParameters)(t,{...e.extraParameters}),(0,U.instrumentBrokerParams)(t,e.correlationId,this.performanceClient),(0,U.addClaims)(t,e.correlationId,e.claims,this.config.authOptions.clientCapabilities,e.skipBrokerClaims),(0,D.mapToQueryString)(t)}}class tU extends eB{async acquireToken(e){let t=await (0,s.invokeAsync)(eq,I.InitializeBaseRequest,this.logger,this.performanceClient,e.correlationId)(e,this.config,this.performanceClient,this.logger,this.correlationId),r={...e,...t};e.redirectUri&&(r.redirectUri=eM(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId));let o=eU(v.ApiId.acquireTokenSilent_silentFlow,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),i=await this.createRefreshTokenClient({serverTelemetryManager:o,authorityUrl:r.authority,azureCloudOptions:r.azureCloudOptions,account:r.account});return(0,s.invokeAsync)(i.acquireTokenByRefreshToken.bind(i),I.RefreshTokenClientAcquireTokenByRefreshToken,this.logger,this.performanceClient,e.correlationId)(r,v.ApiId.acquireTokenSilent_silentFlow).catch(e=>{throw e.correlationId=this.correlationId,o.cacheFailedRequest(e),e})}logout(){return Promise.reject((0,eG.createBrowserAuthError)(e$.silentLogoutUnsupported,""))}async createRefreshTokenClient(e){return new tM(await (0,s.invokeAsync)(this.getClientConfiguration.bind(this),I.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:e.serverTelemetryManager,requestAuthority:e.authorityUrl,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),this.performanceClient)}}class tD extends eR{constructor(e,t){super(e,t),this.includeRedirectUri=!1}}class tL extends eB{constructor(e,t,r,o,i,n,s,a,c,l){super(e,t,r,o,i,n,a,c,l),this.apiId=s}async acquireToken(e){if(!e.code)throw(0,eG.createBrowserAuthError)(e$.authCodeRequired,this.correlationId);let t=await (0,s.invokeAsync)(eK,I.StandardInteractionClientInitializeAuthorizationRequest,this.logger,this.performanceClient,this.correlationId)(e,v.InteractionType.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId),r=eU(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{let o={...t,code:e.code},i=await (0,s.invokeAsync)(this.getClientConfiguration.bind(this),I.StandardInteractionClientGetClientConfiguration,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:r,requestAuthority:t.authority,requestAzureCloudOptions:t.azureCloudOptions,requestExtraQueryParameters:t.extraQueryParameters,account:t.account}),n=new tD(i,this.performanceClient);this.logger.verbose("1uic5e",this.correlationId);let a=new eX(n,this.browserStorage,o,this.logger,this.performanceClient);return await (0,s.invokeAsync)(a.handleCodeResponseFromServer.bind(a),b.PerformanceEvents.HandleCodeResponseFromServer,this.logger,this.performanceClient,this.correlationId)({code:e.code,msgraph_host:e.msGraphHost,cloud_graph_host_name:e.cloudGraphHostName,cloud_instance_host_name:e.cloudInstanceHostName},t,this.apiId,!1)}catch(e){throw e instanceof C.AuthError&&(e.correlationId=this.correlationId,r.cacheFailedRequest(e)),e}}logout(){return Promise.reject((0,eG.createBrowserAuthError)(e$.silentLogoutUnsupported,""))}}function tH(e,t,r,o){try{(0,_.preflightCheck)(e),(0,a.enforceResourceParameter)(r.auth.isMcp,o)}catch(e){throw t.end({success:!1},e,o.account),e}}class tq{constructor(e){this.operatingContext=e,this.isBrowserEnvironment=this.operatingContext.

1isBrowserEnvironment(),this.config=e.getConfig(),this.initialized=!1,this.logger=this.operatingContext.getLogger(),this.networkClient=this.config.system.networkClient,this.navigationClient=this.config.system.navigationClient,this.redirectResponse=new Map,this.hybridAuthCodeResponses=new Map,this.performanceClient=this.config.telemetry.client,this.browserCrypto=this.isBrowserEnvironment?new o.CryptoOps(this.logger,this.performanceClient):i.DEFAULT_CRYPTO_IMPLEMENTATION,this.eventHandler=new k(this.logger),this.browserStorage=this.isBrowserEnvironment?new E.BrowserCacheManager(this.config.auth.clientId,this.config.cache,this.browserCrypto,this.logger,this.performanceClient,this.eventHandler,(0,n.buildStaticAuthorityOptions)(this.config.auth)):(0,E.DEFAULT_BROWSER_CACHE_MANAGER)(this.config.auth.clientId,this.logger,this.performanceClient,this.eventHandler);const t={cacheLocation:v.BrowserCacheLocation.MemoryStorage,cacheRetentionDays:5};this.nativeInternalStorage=new E.BrowserCacheManager(this.config.auth.clientId,t,this.browserCrypto,this.logger,this.performanceClient,this.eventHandler),this.activeSilentTokenRequests=new Map,this.trackStateChange=this.trackStateChange.bind(this),this.trackStateChangeWithMeasurement=this.trackStateChangeWithMeasurement.bind(this)}static async createController(e,t){let r=new tq(e);return await r.initialize(t),r}trackStateChange(e,t){e&&("visibilitychange"===t.type?(this.logger.info("16v6hv",e),this.performanceClient.incrementFields({visibilityChangeCount:1},e)):"online"===t.type?(this.logger.info("0zirfd",e),this.performanceClient.incrementFields({onlineStatusChangeCount:1},e)):"offline"===t.type&&(this.logger.info("1xk9ef",e),this.performanceClient.incrementFields({onlineStatusChangeCount:1},e)))}async initialize(e){let t=this.getRequestCorrelationId(e);if(this.logger.trace("1f7joy",t),this.initialized)return void this.logger.info("061m5x",t);if(!this.isBrowserEnvironment){this.logger.info("19fvpi",t),this.initialized=!0,this.eventHandler.emitEvent(r.EventType.INITIALIZE_END,t);return}let o=this.config.system.allowPlatformBroker,i=this.performanceClient.startMeasurement(A.InitializeClientApplication,t);if(this.eventHandler.emitEvent(r.EventType.INITIALIZE_START,t),this.logMultipleInstances(i,t),i.add({isMcp:this.config.auth.isMcp}),await (0,s.invokeAsync)(this.browserStorage.initialize.bind(this.browserStorage),I.InitializeCache,this.logger,this.performanceClient,t)(t),o)try{this.platformAuthProvider=await tT(this.logger,this.performanceClient,t,this.config.system.nativeBrokerHandshakeTimeout,this.config.experimental.allowPlatformBrokerWithDOM)}catch(e){this.logger.verbose(e,t)}this.config.cache.cacheLocation===v.BrowserCacheLocation.LocalStorage&&this.eventHandler.subscribeCrossTab(),this.config.system.navigatePopups||await this.preGeneratePkceCodes(t),this.initialized=!0,this.eventHandler.emitEvent(r.EventType.INITIALIZE_END,t),i.end({allowPlatformBroker:o,success:!0})}async handleRedirectPromise(e){if(this.logger.verbose("02l8bm",""),(0,_.blockAPICallsBeforeInitialize)(this.initialized),this.isBrowserEnvironment){let t=e?.hash||"",r=this.redirectResponse.get(t);return void 0===r?(r=this.handleRedirectPromiseInternal(e),this.redirectResponse.set(t,r),this.logger.verbose("1wn9kp","")):this.logger.verbose("0w0gm3",""),r}return this.logger.verbose("12xi63",""),null}async handleRedirectPromiseInternal(e){let t,o,i;if(!this.browserStorage.isInteractionInProgress(!0))return this.logger.info("0le6uv",""),null;if(this.browserStorage.getInteractionInProgress()?.type===v.INTERACTION_TYPE.SIGNOUT)return this.logger.verbose("1ywcv2",""),this.browserStorage.setInteractionInProgress(!1),Promise.resolve(null);let n=this.getAllAccounts(),a=this.browserStorage.getCachedNativeRequest(),c=a&&!e?.hash;try{if(c&&this.platformAuthProvider){let e=a?.correlationId||"";this.eventHandler.emitEvent(r.EventType.HANDLE_REDIRECT_START,e,v.InteractionType.Redirect),t=this.performanceClient.startMeasurement(A.AcquireTokenRedirect,e),this.logger.trace("12v7is",e),t.add({isPlatformBrokerRequest:!0});let i=new e9(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,v.ApiId.handleRedirectPromise,this.performanceClient,this.platformAuthProvider,a.accountId,this.nativeInternalStorage,a.correlationId);o=(0,s.invokeAsync)(i.handleRedirectPromise.bind(i),I.HandleNativeRedirectPromiseMeasurement,this.logger,this.performanceClient,t.event.correlationId)()}else{let[n,a]=this.browserStorage.getCachedRequest("");i=n;let c=n.correlationId;this.eventHandler.emitEvent(r.EventType.HANDLE_REDIRECT_START,c,v.InteractionType.Redirect),t=this.performanceClient.startMeasurement(A.AcquireTokenRedirect,c),this.logger.trace("0znzs5",c);let l=this.createRedirectClient(c);o=(0,s.invokeAsync)(l.handleRedirectPromise.bind(l),I.HandleRedirectPromiseMeasurement,this.logger,this.performanceClient,t.event.correlationId)(n,a,t,e)}}catch(e){throw this.browserStorage.resetRequestCache(""),e}return o.then(e=>(e?(this.browserStorage.resetRequestCache(e.correlationId),this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_SUCCESS,e.correlationId,v.InteractionType.Redirect,e),this.logger.verbose("0ui8f5",e.correlationId),n.length<this.getAllAccounts().length&&(this.eventHandler.emitEvent(r.EventType.LOGIN_SUCCESS,e.correlationId,v.InteractionType.Redirect,e.account),this.logger.verbose("16im3l",e.correlationId)),t.end({success:!0,isNativeBroker:e.fromPlatformBroker??!1},void 0,e.account),this.verifySsoCapability(i,v.InteractionType.Redirect)):t.event.errorCode?t.end({success:!1}):t.discard(),this.eventHandler.emitEvent(r.EventType.HANDLE_REDIRECT_END,t.event.correlationId,v.InteractionType.Redirect),e)).catch(e=>{throw this.browserStorage.resetRequestCache(t.event.correlationId),this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_FAILURE,t.event.correlationId,v.InteractionType.Redirect,null,e),this.eventHandler.emitEvent(r.EventType.HANDLE_REDIRECT_END,t.event.correlationId,v.InteractionType.Redirect),t.end({success:!1},e),e})}async acquireTokenRedirect(e){let t=this.getRequestCorrelationId(e);this.logger.verbose("0os66p",t),(0,_.redirectPreflightCheck)(this.initialized,this.config),this.browserStorage.setInteractionInProgress(!0,v.INTERACTION_TYPE.SIGNIN);let o=this.performanceClient.startMeasurement(A.AcquireTokenPreRedirect,t);o.add({scenarioId:e.scenarioId});let i=this.config.auth.onRedirectNavigate;this.config.auth.onRedirectNavigate=t=>{let r="function"==typeof i?i(t):void 0;return o.add({navigateCallbackResult:!1!==r}),o.event=o.end({success:!0},void 0,e.account)||o.event,r};try{let i;if((0,a.enforceResourceParameter)(this.config.auth.isMcp,e),this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_START,t,v.InteractionType.Redirect,e),this.platformAuthProvider&&this.canUsePlatformBroker(e)){let r=new e9(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,v.ApiId.acquireTokenRedirect,this.performanceClient,this.platformAuthProvider,this.getNativeAccountId(e),this.nativeInternalStorage,t);i=(0,s.invokeAsync)(r.acquireTokenRedirect.bind(r),I.NativeInteractionClientAcquireTokenRedirect,this.logger,this.performanceClient,t)(e,o).catch(r=>{if(r instanceof e1&&e4(r))return this.platformAuthProvider=void 0,this.createRedirectClient(t).acquireToken(e);if(r instanceof c.InteractionRequiredAuthError)return this.logger.verbose("1ipyz4",t),this.createRedirectClient(t).acquireToken(e);throw r})}else i=this.createRedirectClient(t).acquireToken(e);return await i}catch(i){throw this.browserStorage.resetRequestCache(t),2===o.event.status?this.performanceClient.startMeasurement(A.AcquireTokenRedirect,t).end({success:!1},i,e.account):o.end({success:!1},i,e.account),this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_FAILURE,t,v.InteractionType.Redirect,null,i),i}}acquireTokenPopup(e){let t,o=this.getRequestCorrelationId(e),i=this.performanceClient.startMeasurement(A.AcquireTokenPopup,o);i.add({scenarioId:e.scenarioId});try{this.logger.verbose("0ch87b",o),tH(this.initialized,i,this.config,e),this.browserStorage.setInteractionInProgress(!0,v.INTERACTION_TYPE.SIGNIN,e.overrideInteractionInProgress,o)}catch(e){return Promise.reject(e)}let n=this.getAllAccounts();this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_START,o,v.InteractionType.Popup,e);let s=this.getPreGeneratedPkceCodes(o);return this.canUsePlatformBroker(e)?(i.add({isPlatformBrokerRequest:!0}),t=this.acquireTokenNative({...e,correlationId:o},v.ApiId.acquireTokenPopup).then(e=>(i.end({success:!0,isNativeBroker:e.fromPlatformBroker??!1},void 0,e.account),e)).catch(t=>{if(t instanceof e1&&e4(t))return this.platformAuthProvider=void 0,this.createPopupClient(o).acquireToken(e,s

1);if(t instanceof c.InteractionRequiredAuthError)return this.logger.verbose("0yy5fw",o),this.createPopupClient(o).acquireToken(e,s);throw t})):t=this.createPopupClient(o).acquireToken(e,s),t.then(t=>{let s=n.length<this.getAllAccounts().length;return this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_SUCCESS,o,v.InteractionType.Popup,t),s&&this.eventHandler.emitEvent(r.EventType.LOGIN_SUCCESS,o,v.InteractionType.Popup,t.account),i.end({success:!0,isNativeBroker:t.fromPlatformBroker??!1,accessTokenSize:t.accessToken.length,idTokenSize:t.idToken.length},void 0,t.account),this.verifySsoCapability(e,v.InteractionType.Popup),t}).catch(t=>(this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_FAILURE,o,v.InteractionType.Popup,null,t),i.end({success:!1},t,e.account),Promise.reject(t))).finally(async()=>{this.browserStorage.setInteractionInProgress(!1),this.config.system.navigatePopups||await this.preGeneratePkceCodes(o)})}trackStateChangeWithMeasurement(e){let t=this.ssoSilentMeasurement||this.acquireTokenByCodeAsyncMeasurement;t&&("visibilitychange"===e.type?(this.logger.info(`0yzimq ${t.event.name}`,t.event.correlationId),t.increment({visibilityChangeCount:1})):"online"===e.type?(this.logger.info(`1caf53 ${t.event.name}`,t.event.correlationId),t.increment({onlineStatusChangeCount:1})):"offline"===e.type&&(this.logger.info(`0fdyk7 ${t.event.name}`,t.event.correlationId),t.increment({onlineStatusChangeCount:1})))}addStateChangeListeners(e){document.addEventListener("visibilitychange",e),window.addEventListener("online",e),window.addEventListener("offline",e)}removeStateChangeListeners(e){document.removeEventListener("visibilitychange",e),window.removeEventListener("online",e),window.removeEventListener("offline",e)}getCachedSsoCapable(){try{let e=window.localStorage.getItem(T.SSO_CAPABLE);if(e){let t=JSON.parse(e);if(t&&"boolean"==typeof t.ssoCapable&&t.expiresOn&&Date.now()<t.expiresOn)return t.ssoCapable}}catch{}}verifySsoCapability(e,t){if(!this.config.auth.verifySSO)return;let r=T.SSO_CAPABLE;if(void 0!==this.getCachedSsoCapable())return void this.logger.verbose(`13poou ${t}`,"");let o=(0,eH.createNewGuid)(),i=this.performanceClient.startMeasurement(A.SsoCapable,o);i.add({"ext.interactionType":t}),this.logger.verbose(`0pbr0i ${t}`,o),setTimeout(()=>{let n={...e,correlationId:o};this.createSilentIframeClient(o).verifySso(n).then(e=>{this.logger.verbose(`1gd1iv ${t} ${e}`,o);try{let t=JSON.stringify({ssoCapable:e,expiresOn:Date.now()+864e5});window.localStorage.setItem(r,t)}catch{this.logger.warning(`18lmoj ${t}`,o)}i.end({fromCache:!1,success:e},void 0)}).catch(e=>{this.logger.warning(`05g83w ${t} ${e.message}`,o);try{window.localStorage.removeItem(r)}catch{this.logger.warning(`0nlf9q ${t}`,o)}i.end({fromCache:!1,success:!1},e)})},0)}async ssoSilent(e){let t,o=this.getRequestCorrelationId(e),i={...e,correlationId:o};this.ssoSilentMeasurement=this.performanceClient.startMeasurement(A.SsoSilent,o),this.ssoSilentMeasurement?.add({scenarioId:e.scenarioId,ssoCapable:this.getCachedSsoCapable()}),tH(this.initialized,this.ssoSilentMeasurement,this.config,i),this.ssoSilentMeasurement?.increment({visibilityChangeCount:0,onlineStatusChangeCount:0}),this.addStateChangeListeners(this.trackStateChangeWithMeasurement);let n=this.getAllAccounts();return this.logger.verbose("0w1b45",o),this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_START,o,v.InteractionType.Silent,i),this.canUsePlatformBroker(i)?(this.ssoSilentMeasurement?.add({isPlatformBrokerRequest:!0}),t=this.acquireTokenNative(i,v.ApiId.ssoSilent).catch(e=>{if(e instanceof e1&&e4(e))return this.platformAuthProvider=void 0,this.createSilentIframeClient(i.correlationId).acquireToken(i);throw e})):t=this.createSilentIframeClient(i.correlationId).acquireToken(i),t.then(e=>{let t=n.length<this.getAllAccounts().length;return this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_SUCCESS,o,v.InteractionType.Silent,e),t&&this.eventHandler.emitEvent(r.EventType.LOGIN_SUCCESS,o,v.InteractionType.Silent,e.account),this.ssoSilentMeasurement?.end({success:!0,isNativeBroker:e.fromPlatformBroker??!1,accessTokenSize:e.accessToken.length,idTokenSize:e.idToken.length},void 0,e.account),e}).catch(t=>{throw this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_FAILURE,o,v.InteractionType.Silent,null,t),this.ssoSilentMeasurement?.end({success:!1},t,e.account),t}).finally(()=>{this.removeStateChangeListeners(this.trackStateChangeWithMeasurement)})}async acquireTokenByCode(e){let t=this.getRequestCorrelationId(e);this.logger.trace("0ch6ga",t);let o=this.performanceClient.startMeasurement(A.AcquireTokenByCode,t);tH(this.initialized,o,this.config,e),this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_START,t,v.InteractionType.Silent,e),o.add({scenarioId:e.scenarioId});try{if(e.code&&e.nativeAccountId)throw(0,eG.createBrowserAuthError)(e$.spaCodeAndNativeAccountIdPresent,t);if(e.code){let i=e.code,n=this.hybridAuthCodeResponses.get(i);return n?(this.logger.verbose("0qgp28",t),o.discard()):(this.logger.verbose("06eh73",t),n=this.acquireTokenByCodeAsync({...e,correlationId:t}).then(e=>(this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_SUCCESS,t,v.InteractionType.Silent,e),this.hybridAuthCodeResponses.delete(i),o.end({success:!0,isNativeBroker:!1,accessTokenSize:e.accessToken.length,idTokenSize:e.idToken.length},void 0,e.account),e)).catch(e=>{throw this.hybridAuthCodeResponses.delete(i),this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_FAILURE,t,v.InteractionType.Silent,null,e),o.end({success:!1},e),e}),this.hybridAuthCodeResponses.set(i,n)),await n}if(e.nativeAccountId)if(this.canUsePlatformBroker(e,e.nativeAccountId)){o.add({isPlatformBrokerRequest:!0});let r=await this.acquireTokenNative({...e,correlationId:t},v.ApiId.acquireTokenByCode,e.nativeAccountId).catch(e=>{throw e instanceof e1&&e4(e)&&(this.platformAuthProvider=void 0),e});return o.end({success:!0,isNativeBroker:r.fromPlatformBroker??!1},void 0,r.account),r}else throw(0,eG.createBrowserAuthError)(e$.unableToAcquireTokenFromNativePlatform,t);else throw(0,eG.createBrowserAuthError)(e$.authCodeOrNativeAccountIdRequired,t)}catch(e){throw this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_FAILURE,t,v.InteractionType.Silent,null,e),o.end({success:!1},e),e}}async acquireTokenByCodeAsync(e){let t=this.getRequestCorrelationId(e);this.logger.trace("10d9hy",t),this.acquireTokenByCodeAsyncMeasurement=this.performanceClient.startMeasurement(I.AcquireTokenByCodeAsync,t),this.acquireTokenByCodeAsyncMeasurement?.increment({visibilityChangeCount:0,onlineStatusChangeCount:0}),this.addStateChangeListeners(this.trackStateChangeWithMeasurement);let r=this.createSilentAuthCodeClient(t);return await r.acquireToken(e).then(e=>(this.acquireTokenByCodeAsyncMeasurement?.end({success:!0,isNativeBroker:!1,fromCache:e.fromCache}),e)).catch(e=>{throw this.acquireTokenByCodeAsyncMeasurement?.end({success:!1},e),e}).finally(()=>{this.removeStateChangeListeners(this.trackStateChangeWithMeasurement)})}async acquireTokenFromCache(e,t){switch(t){case v.CacheLookupPolicy.Default:case v.CacheLookupPolicy.Acce

1ssToken:case v.CacheLookupPolicy.AccessTokenAndRefreshToken:let r=this.createSilentCacheClient(e.correlationId);return(0,s.invokeAsync)(r.acquireToken.bind(r),I.SilentCacheClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(e);default:throw(0,l.createClientAuthError)(h.ClientAuthErrorCodes.tokenRefreshRequired,e.correlationId)}}async acquireTokenByRefreshToken(e,t){switch(t){case v.CacheLookupPolicy.Default:case v.CacheLookupPolicy.AccessTokenAndRefreshToken:case v.CacheLookupPolicy.RefreshToken:case v.CacheLookupPolicy.RefreshTokenAndNetwork:let r=this.createSilentRefreshClient(e.correlationId);return(0,s.invokeAsync)(r.acquireToken.bind(r),I.SilentRefreshClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(e);default:throw(0,l.createClientAuthError)(h.ClientAuthErrorCodes.tokenRefreshRequired,e.correlationId)}}async acquireTokenBySilentIframe(e){let t=this.createSilentIframeClient(e.correlationId);return(0,s.invokeAsync)(t.acquireToken.bind(t),I.SilentIframeClientAcquireToken,this.logger,this.performanceClient,e.correlationId)(e)}async logoutRedirect(e){let t=this.getRequestCorrelationId(e);return(0,_.redirectPreflightCheck)(this.initialized,this.config),this.browserStorage.setInteractionInProgress(!0,v.INTERACTION_TYPE.SIGNOUT),this.createRedirectClient(t).logout(e)}logoutPopup(e){try{let t=this.getRequestCorrelationId(e);return(0,_.preflightCheck)(this.initialized),this.browserStorage.setInteractionInProgress(!0,v.INTERACTION_TYPE.SIGNOUT),this.createPopupClient(t).logout(e).finally(()=>{this.browserStorage.setInteractionInProgress(!1)})}catch(e){return Promise.reject(e)}}async clearCache(e){if(!this.isBrowserEnvironment)return;let t=this.getRequestCorrelationId(e);return this.createSilentCacheClient(t).logout(e)}getAllAccounts(e){return(0,w.getAllAccounts)(this.logger,this.browserStorage,this.isBrowserEnvironment,this.getRequestCorrelationId(),e)}getAccount(e){return(0,w.getAccount)(e,this.logger,this.browserStorage,this.getRequestCorrelationId())}setActiveAccount(e){(0,w.setActiveAccount)(e,this.browserStorage,this.getRequestCorrelationId())}getActiveAccount(){return(0,w.getActiveAccount)(this.browserStorage,this.getRequestCorrelationId())}async hydrateCache(e,t){this.logger.verbose("16jycr",e.correlationId);let r=d.AccountEntityUtils.createAccountEntityFromAccountInfo(e.account,e.cloudGraphHostName,e.msGraphHost);if(await this.browserStorage.setAccount(r,e.correlationId,u.AuthToken.isKmsi(e.idTokenClaims),v.ApiId.hydrateCache),!e.fromPlatformBroker)return this.browserStorage.hydrateCache(e,t);{this.logger.verbose("1i5atf",e.correlationId);let r=g.CacheHelpers.createIdTokenEntity(e.account.homeAccountId,e.account.environment,e.idToken,this.config.auth.clientId,e.tenantId),o=g.CacheHelpers.serializeAttributeTokens(t.attributeTokens),i=o?{attribute_tokens:o}:void 0,n=g.CacheHelpers.createAccessTokenEntity(e.account.homeAccountId,e.account.environment,e.accessToken,this.config.auth.clientId,e.tenantId,e.scopes.join(" "),e.expiresOn?p.TimeUtils.toSecondsFromDate(e.expiresOn):0,e.extExpiresOn?p.TimeUtils.toSecondsFromDate(e.extExpiresOn):0,O.base64Decode,t.correlationId||"",void 0,e.tokenType,void 0,t.sshKid,i);t.resource&&(n.resource=t.resource);let s=i?await this.browserCrypto.hashString(JSON.stringify(i)):void 0,a=u.AuthToken.isKmsi(e.idTokenClaims);await this.browserStorage.setIdTokenCredential(r,e.correlationId,a),await this.nativeInternalStorage.setAccessTokenCredential(n,e.correlationId,a,s)}}async acquireTokenNative(e,t,r,o){let i=this.getRequestCorrelationId(e);if(this.logger.trace("0b9y3p",i),!this.platformAuthProvider)throw(0,eG.createBrowserAuthError)(e$.nativeConnectionNotEstablished,i);let n=new e9(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,t,this.performanceClient,this.platformAuthProvider,r||this.getNativeAccountId(e),this.nativeInternalStorage,i);return(0,s.invokeAsync)(n.acquireToken.bind(n),I.NativeInteractionClientAcquireToken,this.logger,this.performanceClient,i)(e,o)}canUsePlatformBroker(e,t){let r=this.getRequestCorrelationId(e);if(this.logger.trace("1n9lbl",r),!this.platformAuthProvider)return this.logger.trace("0vnu11",r),!1;if(!tw(this.config,this.logger,r,this.platformAuthProvider,e.authenticationScheme))return this.logger.trace("0yoy1g",r),!1;if(e.prompt)switch(e.prompt){case m.Constants.PromptValue.NONE:case m.Constants.PromptValue.CONSENT:case m.Constants.PromptValue.LOGIN:this.logger.trace("0vdv8e",r);break;default:return this.logger.trace(`0pdzw6 ${e.prompt}`,r),!1}return!!t||!!this.getNativeAccountId(e)||(this.logger.trace("16lbtk",r),!1)}getNativeAccountId(e){let t=e.account||this.getAccount({loginHint:e.loginHint,sid:e.sid})||(e.loginHint||e.sid?null:this.getActiveAccount());return t&&t.nativeAccountId||""}createPopupClient(e){return new tv(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider,this.operatingContext.getResponseHandlers()?.waitForPopupResponse)}createRedirectClient(e){return new t_(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider)}createSilentIframeClient(e){return new tb(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,v.ApiId.ssoSilent,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider,this.operatingContext.getResponseHandlers()?.waitForIframeResponse)}createSilentCacheClient(e){return new e8(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,e,this.platformAuthProvider)}createSilentRefreshClient(e){return new tU(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,e,this.platformAuthProvider)}createSilentAuthCodeClient(e){return new tL(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,v.ApiId.acquireTokenByCode,this.performanceClient,e,this.platformAuthProvider)}addEventCallback(e,t){return this.eventHandler.addEventCallback(e,t)}removeEventCallback(e){this.eventHandler.removeEventCallback(e)}addPerformanceCallback(e){return(0,_.blockNonBrowserEnvironment)(),this.performanceClient.addPerformanceCallback(e)}removePerformanceCallback(e){return this.performanceClient.removePerformanceCallback(e)}getLogger(){return this.logger}setLogger(e){this.logger=e}initializeWrapperLibrary(e,t){this.browserStorage.setWrapperMetadata(e,t)}setNavigationClient(e){this.navigationClient=e}getConfiguration(){return this.config}getPerformanceClient(){return this.performanceClient}isBrowserEnv(){return this.isBrowserEnvironment}getRequestCorrelationId(e){return e?.correlationId?e.correlationId:this.isBrowserEnvironment?(0,eH.createNewGuid)():""}async loginRedirect(e){let t=this.getRequestCorrelationId(e);return this.logger.verbose("0lz9hf",t),this.acquireTokenRedirect({correlationId:t,...e||v.DEFAULT_REQUEST})}loginPopup(e){let t=this.getRequestCorrelationId(e);return this.logger.verbose("0qw7v5",t),this.acquireTokenPopup({correlationId:t,...e||v.DEFAULT_REQUEST})}async acquireTokenSilent(e){let t=this.getRequestCorrelationId(e),r=this.performanceClient.startMeasurement(A.AcquireTokenSilent,t);r.add({cacheLookupPolicy:e.cacheLookupPolicy,scenarioId:e.scenarioId,ssoCapable:this.getCachedSsoCapable()}),tH(this.initialized,r,this.config,e),this.logger.verbose("0x1c4s",t);let o=e.account||this.getActiveAccount();if(!o)throw(0,eG.createBrowserAuthError)(e$.noAccountError,t);return this.acquireTokenSilentDeduped(e,o,t).then(o=>(r.end({success:!0,isNativeBroker:o.fromPlatformBroker??!1,fromCache:o.fromCache,accessTokenSize:o.accessToken.length,idTokenSize:o.idToken.length},void 0,o.account),{...o,state:e.state,correlationId:t})).catch(e=>{throw e instanceof C.AuthError&&(e.correlationId=t),r.end({success:!1},e,o),e})}async acquireTokenSilentDeduped(e,t,r){let o=JSON.stringify((0,y.getRequestThumbprint)(this.config.auth.clientId,{...e,authority:e.authority||this.config.auth.authority,correlationId:r},t.homeAccountId)),i=this.activeSilentTokenRequests.get(o);if(void 0!==i)return this.logger.verbose("1yq7nb",r),this.performanceClient.addFields({deduped:!0},r),i;{this.logger.verbose("0fcjbk",r),this.performanceClient.addFields({deduped:!1},r);let i=(0,s.invokeAsync)(this.acquireTokenSilentAsync.bind(this),I.AcquireTokenSilentAsync,this.logger,this.performanceClient,r)({...e,correlationId:r},t);return this.activeSilentTokenRequests.set(o,i),i.finally(()=>{this.activeSilentTokenRequests.delete(o)})}}async acquireTokenSilentAsync(e,t){let o=t=>this.trackStateChange(e.correlationId,t);this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_START,e.correlationId,v.InteractionType.Silent,e),e.correlationId&&this.performanceClient.incrementFields({visibilityChangeCount:0,onlineStatusChangeCount:0},e.correlationId),this.addStateChangeListeners(o);let i=await (0,s.invokeAsync)(eF,I.InitializeSilentRequest,this.logger,this.performanceClient,e.correlationId)(e,t,this.config,this.performanceClient,this.logger),n=e.cacheLookupPolicy||v.CacheLookupPolicy.Default;return this.acquireTokenSilentNoIframe(i,n).catch(async t=>{var r,o;let a,l,d,u;if(r=t,o=n,a=!(r instanceof c.InteractionRequiredAuthError&&r.subError

1!==f.InteractionRequiredAuthErrorCodes.badToken),l=r.errorCode===v.BrowserConstants.INVALID_GRANT_ERROR||r.errorCode===h.ClientAuthErrorCodes.tokenRefreshRequired,d=a&&l||r.errorCode===f.InteractionRequiredAuthErrorCodes.noTokensFound||r.errorCode===f.InteractionRequiredAuthErrorCodes.refreshTokenExpired,u=v.iFrameRenewalPolicies.includes(o),d&&u){let r=`${t.errorCode}${t.subError?`|${t.subError}`:""}`;if(this.performanceClient.addFields({silentRefreshReason:r},e.correlationId),this.activeIframeRequest)if(n===v.CacheLookupPolicy.Skip)return this.logger.warning("1bd4p8",i.correlationId),(0,s.invokeAsync)(this.acquireTokenBySilentIframe.bind(this),I.AcquireTokenBySilentIframe,this.logger,this.performanceClient,i.correlationId)(i);else{let[e,r]=this.activeIframeRequest;this.logger.verbose(`1w8fso ${r}`,i.correlationId);let o=this.performanceClient.startMeasurement(I.AwaitConcurrentIframe,i.correlationId);o.add({awaitIframeCorrelationId:r});let s=await e;if(o.end({success:s}),s)return this.logger.verbose(`0ywzzi ${r}`,i.correlationId),this.acquireTokenSilentNoIframe(i,n);throw this.logger.info(`17y14q ${r}`,i.correlationId),t}{let e;return this.activeIframeRequest=[new Promise(t=>{e=t}),i.correlationId],this.logger.verbose("0rh08z",i.correlationId),(0,s.invokeAsync)(this.acquireTokenBySilentIframe.bind(this),I.AcquireTokenBySilentIframe,this.logger,this.performanceClient,i.correlationId)(i).then(t=>(e(!0),t)).catch(t=>{throw e(!1),t}).finally(()=>{this.activeIframeRequest=void 0})}}throw t}).then(t=>(this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_SUCCESS,e.correlationId,v.InteractionType.Silent,t),e.correlationId&&this.performanceClient.addFields({fromCache:t.fromCache,isNativeBroker:t.fromPlatformBroker??!1},e.correlationId),t)).catch(t=>{throw this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_FAILURE,e.correlationId,v.InteractionType.Silent,null,t),t}).finally(()=>{this.removeStateChangeListeners(o)})}async acquireTokenSilentNoIframe(e,t){return tw(this.config,this.logger,e.correlationId,this.platformAuthProvider,e.authenticationScheme)&&e.account.nativeAccountId?(this.logger.verbose("0sczo4",e.correlationId),this.performanceClient.addFields({isPlatformBrokerRequest:!0},e.correlationId),this.acquireTokenNative(e,v.ApiId.acquireTokenSilent_silentFlow,e.account.nativeAccountId,t).catch(async t=>{if(t instanceof e1&&e4(t))throw this.logger.verbose("07rkmb",e.correlationId),this.platformAuthProvider=void 0,(0,l.createClientAuthError)(h.ClientAuthErrorCodes.tokenRefreshRequired,e.correlationId);throw t})):(this.logger.verbose("0ox81t",e.correlationId),t===v.CacheLookupPolicy.AccessToken&&this.logger.verbose("0fvwxe",e.correlationId),(0,s.invokeAsync)(this.acquireTokenFromCache.bind(this),I.AcquireTokenFromCache,this.logger,this.performanceClient,e.correlationId)(e,t).catch(o=>{if(t===v.CacheLookupPolicy.AccessToken)throw o;return this.eventHandler.emitEvent(r.EventType.ACQUIRE_TOKEN_NETWORK_START,e.correlationId,v.InteractionType.Silent,e),(0,s.invokeAsync)(this.acquireTokenByRefreshToken.bind(this),I.AcquireTokenByRefreshToken,this.logger,this.performanceClient,e.correlationId)(e,t)}))}async preGeneratePkceCodes(e){return this.logger.verbose("1x6uj6",e),this.pkceCode=await (0,s.invokeAsync)(td,I.GeneratePkceCodes,this.logger,this.performanceClient,e)(this.performanceClient,this.logger,e),Promise.resolve()}getPreGeneratedPkceCodes(e){let t=this.pkceCode?{...this.pkceCode}:void 0;return this.pkceCode=void 0,t?this.logger.verbose("12js1o",e):this.logger.verbose("1oe9ci",e),this.performanceClient.addFields({usePreGeneratedPkce:!!t},e),t}logMultipleInstances(e,t){var r;let o,i,n,s=this.config.auth.clientId;window&&(window.msal=window.msal||{},window.msal.clientIds=window.msal.clientIds||[],window.msal.clientIds.length>0&&this.logger.verbose("1qtz3l",t),window.msal.clientIds.push(s),r=this.logger,i=(o=window.msal?.clientIds||[]).length,(n=o.filter(e=>e===s).length)>1&&r.warning("1e88vg",t),e.add({msalInstanceCount:i,sameClientIdInstanceCount:n}))}}class tF{static loggerCallback(e,t){switch(e){case S.LogLevel.Error:console.error(t);return;case S.LogLevel.Info:console.info(t);return;case S.LogLevel.Verbose:console.debug(t);return;case S.LogLevel.Warning:console.warn(t);return;default:console.log(t);return}}constructor(e,t){let r;this.browserEnvironment="u">typeof window,this.config=function({auth:e,cache:t,system:r,experimental:o,telemetry:i},n){let s={clientId:"",authority:`${m.Constants.DEFAULT_AUTHORITY}`,knownAuthorities:[],cloudDiscoveryMetadata:"",authorityMetadata:"",redirectUri:"u">typeof window&&window.location?window.location.href.split("?")[0].split("#")[0]:"",postLogoutRedirectUri:"",popupRelayUri:"",clientCapabilities:[],OIDCOptions:{responseMode:m.Constants.ResponseMode.FRAGMENT,defaultScopes:[m.Constants.OPENID_SCOPE,m.Constants.PROFILE_SCOPE,m.Constants.OFFLINE_ACCESS_SCOPE]},azureCloudOptions:{azureCloudInstance:F.AzureCloudInstance.None,tenant:""},instanceAware:!1,isMcp:!1,verifySSO:!1},a={cacheLocation:v.BrowserCacheLocation.SessionStorage,cacheRetentionDays:5},c={loggerCallback:()=>{},logLevel:S.LogLevel.Info,piiLoggingEnabled:!1},l={...{...G,loggerOptions:c,networkClient:n?new tC:tp,navigationClient:new tm,popupBridgeTimeout:r?.popupBridgeTimeout||6e4,iframeBridgeTimeout:r?.iframeBridgeTimeout||1e4,redirectNavigationTimeout:3e4,allowRedirectInIframe:!1,navigatePopups:!0,allowPlatformBroker:!1,nativeBrokerHandshakeTimeout:r?.nativeBrokerHandshakeTimeout||2e3,protocolMode:P.ProtocolMode.AAD,serverTelemetryEnabled:!1},...r,loggerOptions:r?.loggerOptions||c},h={application:{appName:"",appVersion:""},client:new B};if(r?.protocolMode!==P.ProtocolMode.OIDC&&e?.OIDCOptions&&new S.Logger(l.loggerOptions,R.name,R.version).warning(JSON.stringify((0,em.createClientConfigurationError)(eb.cannotSetOIDCOptions,"")),""),r?.protocolMode&&r.protocolMode===P.ProtocolMode.OIDC&&l?.allowPlatformBroker)throw(0,em.createClientConfigurationError)(eb.cannotAllowPlatformBroker,"");return{auth:{...s,...e,OIDCOptions:{...s.OIDCOptions,...e?.OIDCOptions}},cache:{...a,...t},system:l,experimental:{iframeTimeoutTelemetry:!1,allowPlatformBrokerWithDOM:!1,...o},telemetry:{...h,...i}}}(e,this.browserEnvironment),this.responseHandlers=t;try{r=window[v.BrowserCacheLocation.SessionStorage]}catch(e){}const o=r?.getItem(T.LOG_LEVEL_CACHE_KEY),i=r?.getItem(T.LOG_PII_CACHE_KEY)?.toLowerCase(),n="true"===i||"false"!==i&&void 0,s={...this.config.system.loggerOptions},a=o&&Object.keys(S.LogLevel).includes(o)?S.LogLevel[o]:void 0;

1a&&(s.loggerCallback=tF.loggerCallback,s.logLevel=a),void 0!==n&&(s.piiLoggingEnabled=n),this.logger=new S.Logger(s,R.name,R.version),this.available=!1}getConfig(){return this.config}getResponseHandlers(){return this.responseHandlers}getLogger(){return this.logger}isAvailable(){return this.available}isBrowserEnvironment(){return this.browserEnvironment}}class tx extends tF{getModuleName(){return tx.MODULE_NAME}getId(){return tx.ID}async initialize(e){return this.available="u">typeof window,this.available}}tx.MODULE_NAME="",tx.ID="StandardOperatingContext";C.AuthError;class tB{static async initializeNestedAppAuthBridge(){if(void 0===window)throw Error("window is undefined");if(void 0===window.nestedAppAuthBridge)throw Error("window.nestedAppAuthBridge is undefined");try{window.nestedAppAuthBridge.addEventListener("message",e=>{let t="string"==typeof e?e:e.data,r=JSON.parse(t),o=tB.bridgeRequests.find(e=>e.requestId===r.requestId);void 0!==o&&(tB.bridgeRequests.splice(tB.bridgeRequests.indexOf(o),1),r.success?o.resolve(r):o.reject(r.error))});let e=await new Promise((e,t)=>{let r=tB.buildRequest("GetInitContext"),o={requestId:r.requestId,method:r.method,resolve:e,reject:t};tB.bridgeRequests.push(o),window.nestedAppAuthBridge.postMessage(JSON.stringify(r))});return tB.validateBridgeResultOrThrow(e.initContext)}catch(e){throw window.console.log(e),e}}getTokenInteractive(e){return this.getToken("GetTokenPopup",e)}getTokenSilent(e){return this.getToken("GetToken",e)}async getToken(e,t){let r=await this.sendRequest(e,{tokenParams:t});return{token:tB.validateBridgeResultOrThrow(r.token),account:tB.validateBridgeResultOrThrow(r.account)}}getHostCapabilities(){return this.capabilities??null}getAccountContext(){return this.accountContext?this.accountContext:null}static buildRequest(e,t){return{messageType:"NestedAppAuthRequest",method:e,requestId:(0,eH.createNewGuid)(),sendTime:Date.now(),clientLibrary:v.BrowserConstants.MSAL_SKU,clientLibraryVersion:R.version,...t}}sendRequest(e,t){let r=tB.buildRequest(e,t);return new Promise((e,t)=>{let o={requestId:r.requestId,method:r.method,resolve:e,reject:t};tB.bridgeRequests.push(o),window.nestedAppAuthBridge.postMessage(JSON.stringify(r))})}static validateBridgeResultOrThrow(e){if(void 0===e)throw{status:"NESTED_APP_AUTH_UNAVAILABLE"};return e}constructor(e,t,r,o){this.sdkName=e,this.sdkVersion=t,this.accountContext=r,this.capabilities=o}static async create(){let e=await tB.initializeNestedAppAuthBridge();return new tB(e.sdkName,e.sdkVersion,e.accountContext,e.capabilities)}}tB.bridgeRequests=[];class tK extends tF{constructor(){super(...arguments),this.bridgeProxy=void 0,this.accountContext=null}getModuleName(){return tK.MODULE_NAME}getId(){return tK.ID}getBridgeProxy(){return this.bridgeProxy}async initialize(e){let t=e||"";try{if("u">typeof window){"function"==typeof window.__initializeNestedAppAuth&&await window.__initializeNestedAppAuth();let e=await tB.create();this.accountContext=e.getAccountContext(),this.bridgeProxy=e,this.available=void 0!==e}}catch(e){this.logger.infoPii(`1mdxyj ${e}`,t)}return this.logger.info(`12jy9a ${this.available}`,t),this.available}}tK.MODULE_NAME="",tK.ID="NestedAppOperatingContext";class tG extends Error{}function t$(e,t){let r;if("string"!=typeof e)throw new tG("Invalid token specified: must be a string");t||(t={});let o=+(!0!==t.header),i=e.split(".")[o];if("string"!=typeof i)throw new tG(`Invalid token specified: missing part #${o+1}`);try{r=function(e){let t=e.replace(/-/g,"+").replace(/_/g,"/");switch(t.length%4){case 0:break;case 2:t+="==";break;case 3:t+="=";break;default:throw Error("base64 string is not of the correct length")}try{var r;

1return r=t,decodeURIComponent(atob(r).replace(/(.)/g,(e,t)=>{let r=t.charCodeAt(0).toString(16).toUpperCase();return r.length<2&&(r="0"+r),"%"+r}))}catch(e){return atob(t)}}(i)}catch(e){throw new tG(`Invalid token specified: invalid base64 for part #${o+1} (${e.message})`)}try{return JSON.parse(r)}catch(e){throw new tG(`Invalid token specified: invalid json for part #${o+1} (${e.message})`)}}tG.prototype.name="InvalidTokenError";let tz={names:{signUpSignIn:t.default.env.NEXT_PUBLIC_B2C_POLICY_SIGNIN_SIGNUP,passwordChange:t.default.env.NEXT_PUBLIC_B2C_POLICY_PASSWORDCHANGE||"B2C_1A_PasswordChange"},authorities:{signUpSignIn:{authority:`https://${t.default.env.NEXT_PUBLIC_B2C_URL}/${t.default.env.NEXT_PUBLIC_B2C_TENANT_ID}/${t.default.env.NEXT_PUBLIC_B2C_POLICY_SIGNIN_SIGNUP}`},passwordChange:{authority:`https://${t.default.env.NEXT_PUBLIC_B2C_URL}/${t.default.env.NEXT_PUBLIC_B2C_TENANT_ID}/${t.default.env.NEXT_PUBLIC_B2C_POLICY_PASSWORDCHANGE||"B2C_1A_PasswordChange"}`}},authorityDomain:`${t.default.env.NEXT_PUBLIC_B2C_URL}`},tV={apiTodoList:{scopes:{read:[`https://${t.default.env.NEXT_PUBLIC_B2C_TENANT||"testdublinairport.onmicrosoft.com"}/${t.default.env.NEXT_PUBLIC_B2C_API_CLIENT_ID}/API.ReadWrite.All`]}}},tj={auth:{clientId:t.default.env.NEXT_PUBLIC_B2C_CLIENT_ID?.toString(),authority:tz.authorities.signUpSignIn.authority,knownAuthorities:[tz.authorityDomain],redirectUri:"https://www.corkairport.com",postLogoutRedirectUri:"/",navigateToLoginRequestUrl:!0},cache:{cacheLocation:"localStorage"},system:{loggerOptions:{loggerCallback:(e,t,r)=>{if(!r)switch(e){case S.LogLevel.Error:console.error(t);break;case S.LogLevel.Warning:console.warn(t);case S.LogLevel.Info:case S.LogLevel.Verbose:}},piiLoggingEnabled:!1,logLevel:S.LogLevel.Error}}},tJ={scopes:["openid","profile",...tV.apiTodoList.scopes.read]},tW={},tY="pendingCartClaim",tQ="window"in globalThis?new class{constructor(e,t){this.controller=t||new tq(new tx(e,{waitForPopupResponse:this.waitForPopupResponse.bind(this),waitForIframeResponse:this.waitForIframeResponse.bind(this)}))}async waitForPopupResponse(e,t,r){let o=this.controller;return(0,_.waitForBridgeResponse)(o.getConfiguration().system.popupBridgeTimeout,o.getLogger(),e,o.getPerformanceClient())}async waitForIframeResponse(e,t){let r=this.controller,o=r.getConfiguration();return(0,_.waitForBridgeResponse)(o.system.iframeBridgeTimeout,r.getLogger(),t,r.getPerformanceClient(),o.experimental)}async initialize(e){return this.controller.initialize(e)}async acquireTokenPopup(e){return this.controller.acquireTokenPopup(e)}acquireTokenRedirect(e){return this.controller.acquireTokenRedirect(e)}acquireTokenSilent(e){return this.controller.acquireTokenSilent(e)}acquireTokenByCode(e){return this.controller.acquireTokenByCode(e)}addEventCallback(e,t){return this.controller.addEventCallback(e,t)}removeEventCallback(e){return this.controller.removeEventCallback(e)}addPerformanceCallback(e){return this.controller.addPerformanceCallback(e)}removePerformanceCallback(e){return this.controller.removePerformanceCallback(e)}getAccount(e){return this.controller.getAccount(e)}getAllAccounts(e){return this.controller.getAllAccounts(e)}handleRedirectPromise(e){return this.controller.handleRedirectPromise(e)}loginPopup(e){return this.controller.loginPopup(e)}loginRedirect(e){return this.controller.loginRedirect(e)}logoutRedirect(e){return this.controller.logoutRedirect(e)}logoutPopup(e){return this.controller.logoutPopup(e)}ssoSilent(e){return this.controller.ssoSilent(e)}getLogger(){return this.controller.getLogger()}setLogger(e){this.controller.setLogger(e)}setActiveAccount(e){this.controller.setActiveAccount(e)}getActiveAccount(){return this.controller.getActiveAccount()}initializeWrapperLibrary(e,t){return this.controller.initializeWrapperLibrary(e,t)}setNavigationClient(e){this.controller.setNavigationClient(e)}getConfiguration(){return this.controller.getConfiguration()}async hydrateCache(e,t){return this.controller.hydrateCache(e,t)}clearCache(e){return this.controller.clearCache(e)}}(tj):{},tX=!1,tZ=null;function t0(){return tZ||(tX?Promise.resolve():tZ=(async()=>{await tQ.initialize(),tQ.addEventCallback(e=>{if(e.eventType===r.EventType.LOGIN_SUCCESS&&e.payload){let t=e.payload;tQ.setActiveAccount(t.account);try{localStorage.setItem("msal.login.success","true"),localStorage.setItem("msal.login.timestamp",Date.now().toString()),tW={},sessionStorage.setItem(tY,"true"),t1().catch(e=>{console.warn("Post-login token acquisition failed:",e)})}catch(e){console.error("Failed to record login state:",e)}}if(e.eventType===r.EventType.LOGOUT_SUCCESS)try{localStorage.removeItem("msal.login.success"),localStorage.removeItem("msal.login.timestamp"),tW={}}catch(e){console.error("Failed to clear login state:",e)}}),await tQ.handleRedirectPromise();let e=tQ.getAllAccounts();if(e.length>0&&(tQ.setActiveAccount(e[0]),t1().catch(e=>

1{console.warn("Background token acquisition failed:",e)})),0===e.length)try{let e=localStorage.getItem("msal.login.success"),t=localStorage.getItem("msal.login.timestamp");if("true"===e&&t){let e=parseInt(t,10);Date.now()-e<864e5||(localStorage.removeItem("msal.login.success"),localStorage.removeItem("msal.login.timestamp"))}}catch(e){console.error("Failed to check login state:",e)}tX=!0})())}async function t1(){await t0();let e=function(e=Date.now()){let{accessToken:t,expiresAt:r}=tW;if(t&&r&&r>e+6e4)return t}();if(e)return e;if("window"in globalThis){try{await t0()}catch(e){console.warn("MSAL initialization failed; cannot acquire token silently:",e);return}try{let e=tQ.getAllAccounts();if(0===e.length)return void console.warn("getAccessTokenSilent: No accounts found");let t=tQ.getActiveAccount();t||(console.warn("getAccessTokenSilent: No active account, using first account"),t=e[0],tQ.setActiveAccount(t));let r={scopes:tJ.scopes,account:t},o=await tQ.acquireTokenSilent(r);if(o&&o.accessToken){let e=t$(o.accessToken),t=1e3*e.exp;return tW={accessToken:o.accessToken,idToken:o.idToken,expiresAt:t,account:o.account?.localAccountId},o.accessToken}return}catch(e){console.error("getAccessTokenSilent: Silent token acquisition failed",e);try{let e=tQ.getAllAccounts();if(0===e.length)return void console.warn("getAccessTokenSilent: No accounts in fallback");let t={scopes:tJ.scopes,account:e[0]},r=await tQ.acquireTokenSilent(t);if(r&&r.accessToken){let e=t$(r.accessToken),t=1e3*e.exp;return tW={accessToken:r.accessToken,idToken:r.idToken,expiresAt:t,account:r.account?.localAccountId},r.accessToken}}catch(e){console.error("getAccessTokenSilent: Fallback also failed",e)}return}}}let t4=e=>new Promise(t=>{setTimeout(t,e)});async function t2(){try{localStorage.removeItem("msal.login.success"),localStorage.removeItem("msal.login.timestamp"),tW={}}catch(e){console.error("Failed to clear login state:",e)}try{await tQ.initialize(),await t0(),await tQ.handleRedirectPromise()}catch(e){console.error("MSAL init/redirect handling failed before login:",{errorCode:e?.errorCode,error:e})}for(let e=1;e<=6;e++)try{await tQ.loginRedirect(tJ);return}catch(r){let t=r?.errorCode;if("interaction_in_progress"===t&&e<6){await t4(500);continue}console.error("loginRedirect failed:",{errorCode:t,attempt:e,maxAttempts:6,error:r});return}}e.s(["PENDING_CART_CLAIM_KEY",0,tY,"getAccessTokenSilent",0,t1,"handleLogin",0,t2,"handleLogout",0,function(){localStorage.setItem("loggedOut","true");try{localStorage.removeItem("msal.login.success"),localStorage.removeItem("msal.login.timestamp"),tW={}}catch(e){console.error("Failed to clear login state:",e)}let e={account:tQ.getActiveAccount(),postLogoutRedirectUri:"https://www.corkairport.com"};tQ.logoutRedirect(e).then(()=>{localStorage.clear()}).catch(e=>{console.error("Logout error:",e)})},"initializeMsal",0,t0,"msalInstance",0,tQ],62729)}]);

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.