EME_APP/eme-frontend/web/msal_bridge.bundle.js

(()=>{var Ld=Object.defineProperty;var Y=(n,e)=>{for(var t in e)Ld(n,t,{get:e[t],enumerable:!0})};var Je={};Y(Je,{ACCESS_TOKEN:()=>Kd,BROKER_CLIENT_ID:()=>tr,BROKER_REDIRECT_URI:()=>Jo,CCS_HEADER:()=>Wd,CLAIMS:()=>yi,CLIENT_ASSERTION:()=>zi,CLIENT_ASSERTION_TYPE:()=>Gi,CLIENT_ID:()=>xe,CLIENT_INFO:()=>Vd,CLIENT_REQUEST_ID:()=>vi,CLIENT_SECRET:()=>Bi,CLI_DATA:()=>es,CODE:()=>wi,CODE_CHALLENGE:()=>_i,CODE_CHALLENGE_METHOD:()=>Ri,CODE_VERIFIER:()=>ki,DEVICE_CODE:()=>Ki,DOMAIN_HINT:()=>Qi,EAR_JWE_CRYPTO:()=>Xi,EAR_JWK:()=>qi,ERROR:()=>Hd,ERROR_DESCRIPTION:()=>Fd,EXPIRES_IN:()=>zd,FMI_PATH:()=>Zd,FOCI:()=>Jd,GRANT_TYPE:()=>Ci,ID_TOKEN:()=>Bd,ID_TOKEN_HINT:()=>Fi,INSTANCE_AWARE:()=>rr,LOGIN_HINT:()=>Yi,LOGOUT_HINT:()=>Ji,NATIVE_BROKER:()=>ji,NONCE:()=>Ii,OBO_ASSERTION:()=>$i,ON_BEHALF_OF:()=>jd,POST_LOGOUT_URI:()=>Hi,PROMPT:()=>Si,REDIRECT_URI:()=>Go,REFRESH_TOKEN:()=>Ti,REFRESH_TOKEN_EXPIRES_IN:()=>Gd,REQUESTED_TOKEN_USE:()=>Vi,REQ_CNF:()=>Vo,RESOURCE:()=>Zi,RESPONSE_MODE:()=>gi,RESPONSE_TYPE:()=>fi,RETURN_SPA_CODE:()=>jo,SCOPE:()=>Ei,SESSION_STATE:()=>$d,SID:()=>Wi,STATE:()=>Ai,TOKEN_TYPE:()=>$o,USERNAME:()=>qd,USER_FEDERATED_IDENTITY_CREDENTIAL:()=>Qd,USER_ID:()=>Xd,X_APP_NAME:()=>xi,X_APP_VER:()=>Li,X_CLIENT_CPU:()=>Ni,X_CLIENT_CURR_TELEM:()=>Mi,X_CLIENT_EXTRA_SKU:()=>Yd,X_CLIENT_LAST_TELEM:()=>Ui,X_CLIENT_OS:()=>Pi,X_CLIENT_SKU:()=>Oi,X_CLIENT_VER:()=>bi,X_MS_LIB_CAPABILITY:()=>Di});var xe="client_id",Go="redirect_uri",fi="response_type",gi="response_mode",Ci="grant_type",yi="claims",Ei="scope",Hd="error",Fd="error_description",Kd="access_token",Bd="id_token",Ti="refresh_token",zd="expires_in",Gd="refresh_token_expires_in",Ai="state",Ii="nonce",Si="prompt",$d="session_state",Vd="client_info",wi="code",_i="code_challenge",Ri="code_challenge_method",ki="code_verifier",vi="client-request-id",Oi="x-client-SKU",bi="x-client-VER",Pi="x-client-OS",Ni="x-client-CPU",Mi="x-client-current-telemetry",Ui="x-client-last-telemetry",Di="x-ms-lib-capability",xi="x-app-name",Li="x-app-ver",Hi="post_logout_redirect_uri",Fi="id_token_hint",Ki="device_code",Bi="client_secret",zi="client_assertion",Gi="client_assertion_type",$o="token_type",Vo="req_cnf",$i="assertion",Vi="requested_token_use",jd="on_behalf_of",Jd="foci",Wd="X-AnchorMailbox",jo="return_spa_code",ji="nativebroker",Ji="logout_hint",Wi="sid",Yi="login_hint",Qi="domain_hint",Yd="x-client-xtra-sku",tr="brk_client_id",Jo="brk_redirect_uri",rr="instance_aware",qi="ear_jwk",Xi="ear_jwe_crypto",Zi="resource",es="clidata",Qd="user_federated_identity_credential",qd="username",Xd="user_id",Zd="fmi_path";var Ae={};Y(Ae,{createAccountEntity:()=>Zs,createAccountEntityFromAccountInfo:()=>Lu,generateAccountId:()=>Du,generateHomeAccountId:()=>ea,getAccountInfo:()=>dr,isAccountEntity:()=>Hu,isSingleTenant:()=>xu});var C={};Y(C,{AADAuthority:()=>_e,AAD_INSTANCE_DISCOVERY_ENDPT:()=>is,AAD_TENANT_DOMAIN_SUFFIX:()=>kt,ADFS:()=>os,APP_METADATA:()=>sr,AUTHORITY_METADATA_CACHE_KEY:()=>ar,AUTHORITY_METADATA_REFRESH_TIME_SECONDS:()=>As,AUTHORIZATION_PENDING:()=>ou,AZURE_REGION_AUTO_DISCOVER_FLAG:()=>ls,AuthenticationScheme:()=>M,AuthorityMetadataSource:()=>te,CACHE_ACCOUNT_TYPE_ADFS:()=>Es,CACHE_ACCOUNT_TYPE_GENERIC:()=>Zo,CACHE_ACCOUNT_TYPE_MSAV1:()=>Iu,CACHE_ACCOUNT_TYPE_MSSTS:()=>ys,CACHE_KEY_SEPARATOR:()=>Ot,CIAM_AUTH_URL:()=>Vr,CLIENT_INFO:()=>Ts,CLIENT_INFO_SEPARATOR:()=>ir,CLIENT_MISMATCH_ERROR:()=>Ps,CODE_GRANT_TYPE:()=>tu,CONSUMER_UTID:()=>eu,CacheOutcome:()=>ke,CacheType:()=>Su,ClaimsRequestKeys:()=>Re,CodeChallengeMethodValues:()=>Tu,CredentialType:()=>B,DEFAULT_AUTHORITY:()=>Gc,DEFAULT_AUTHORITY_HOST:()=>rs,DEFAULT_COMMON_TENANT:()=>$r,DEFAULT_MAX_THROTTLE_TIME_SECONDS:()=>vs,DEFAULT_THROTTLE_TIME_SECONDS:()=>ks,DEFAULT_TOKEN_RENEWAL_OFFSET_SEC:()=>Ms,DSTS:()=>ns,EMAIL_SCOPE:()=>jc,EncodingTypes:()=>Ru,FORWARD_SLASH:()=>or,GrantType:()=>Yr,HTTP_BAD_REQUEST:()=>qo,HTTP_CLIENT_ERROR:()=>cu,HTTP_CLIENT_ERROR_RANGE_END:()=>ps,HTTP_CLIENT_ERROR_RANGE_START:()=>ms,HTTP_GATEWAY_TIMEOUT:()=>gu,HTTP_GONE:()=>uu,HTTP_MULTI_SIDED_ERROR:()=>Cu,HTTP_NOT_FOUND:()=>hu,HTTP_REDIRECT:()=>au,HTTP_REQUEST_TIMEOUT:()=>du,HTTP_SERVER_ERROR:()=>pu,HTTP_SERVER_ERROR_RANGE_END:()=>gs,HTTP_SERVER_ERROR_RANGE_START:()=>fs,HTTP_SERVICE_UNAVAILABLE:()=>fu,HTTP_SUCCESS:()=>Qo,HTTP_SUCCESS_RANGE_END:()=>su,HTTP_SUCCESS_RANGE_START:()=>iu,HTTP_TOO_MANY_REQUESTS:()=>mu,HTTP_UNAUTHORIZED:()=>lu,HeaderNames:()=>L,HttpMethod:()=>yu,IMDS_ENDPOINT:()=>Yo,IMDS_TIMEOUT:()=>cs,IMDS_VERSION:()=>as,INVALID_GRANT_ERROR:()=>bs,INVALID_INSTANCE:()=>us,JsonWebTokenTypes:()=>Ns,KNOWN_PUBLIC_CLOUDS:()=>ds,NOT_APPLICABLE:()=>Jr,NOT_AVAILABLE:()=>vt,OAuthResponseType:()=>Au,OFFLINE_ACCESS_SCOPE:()=>Wo,OIDC_DEFAULT_SCOPES:()=>nr,OIDC_SCOPES:()=>Xo,ONE_DAY_IN_MS:()=>_u,OPENID_SCOPE:()=>$c,PROFILE_SCOPE:()=>Vc,PasswordGrantConstants:()=>rn,PersistentCacheKeys:()=>Eu,PromptValue:()=>Wr,REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX:()=>hs,RESOURCE_DELIM:()=>jr,RegionDiscoveryOutcomes:()=>Xr,RegionDiscoverySources:()=>mt,ResponseMode:()=>Cs,S256_CODE_CHALLENGE_METHOD:()=>ru,SERVER_TELEM_CACHE_KEY:()=>Qr,SERVER_TELEM_CATEGORY_SEPARATOR:()=>tn,SERVER_TELEM_MAX_CACHED_ERRORS:()=>Ss,SERVER_TELEM_MAX_CUR_HEADER_BYTES:()=>wu,SERVER_TELEM_MAX_LAST_HEADER_BYTES:()=>Is,SERVER_TELEM_OVERFLOW_FALSE:()=>_s,SERVER_TELEM_OVERFLOW_TRUE:()=>ws,SERVER_TELEM_SCHEMA_VERSION:()=>en,SERVER_TELEM_UNKNOWN_ERROR:()=>Rs,SERVER_TELEM_VALUE_SEPARATOR:()=>ut,SHR_NONCE_VALIDITY:()=>nu,SKU:()=>ts,THE_FAMILY_ID:()=>bt,THROTTLING_PREFIX:()=>qr,URL_FORM_CONTENT_TYPE:()=>ss,X_MS_LIB_CAPABILITY_VALUE:()=>Os});var ts="msal.js.common",Gc="https://login.microsoftonline.com/common/",rs="login.microsoftonline.com",$r="common",os="adfs",ns="dstsv2",is=`${Gc}discovery/instance?api-version=1.1&authorization_endpoint=`,Vr=".ciamlogin.com",kt=".onmicrosoft.com",jr="|",eu="9188040d-6c67-4c5b-b112-36a304b66dad",$c="openid",Vc="profile",Wo="offline_access",jc="email",tu="authorization_code",ru="S256",ss="application/x-www-form-urlencoded;charset=utf-8",ou="authorization_pending",Jr="N/A",vt="Not Available",or="/",Yo="http://169.254.169.254/metadata/instance/compute",as="2021-02-01",cs=2e3,ls="TryAutoDetect",hs="login.microsoft.com",ds=["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"],nu=240,us="invalid_instance",Qo=200,iu=200,su=299,au=302,cu=400,ms=400,qo=400,lu=401,hu=404,du=408,uu=410,mu=429,ps=499,pu=500,fs=500,fu=503,gu=504,gs=599,Cu=600,yu={GET:"GET",POST:"POST"},nr=[$c,Vc,Wo],Xo=[...nr,jc],L={CONTENT_TYPE:"Content-Type",CONTENT_LENGTH:"Content-Length",RETRY_AFTER:"Retry-After",CCS_HEADER:"X-AnchorMailbox",WWWAuthenticate:"WWW-Authenticate",AuthenticationInfo:"Authentication-Info",X_MS_REQUEST_ID:"x-ms-request-id",X_MS_HTTP_VERSION:"x-ms-httpver"},Eu={ACTIVE_ACCOUNT_FILTERS:"active-account-filters"},_e={COMMON:"common",ORGANIZATIONS:"organizations",CONSUMERS:"consumers"},Re={ACCESS_TOKEN:"access_token",XMS_CC:"xms_cc",ID_TOKEN:"id_token",SIGNIN_STATE:"signin_state",LOGIN_HINT:"login_hint"},Wr={LOGIN:"login",SELECT_ACCOUNT:"select_account",CONSENT:"consent",NONE:"none",CREATE:"create",NO_SESSION:"no_session"},Tu={PLAIN:"plain",S256:"S256"},Au={CODE:"code",IDTOKEN_TOKEN:"id_token token",IDTOKEN_TOKEN_REFRESHTOKEN:"id_token token refresh_token"},Cs={QUERY:"query",FRAGMENT:"fragment",FORM_POST:"form_post"},Yr={IMPLICIT_GRANT:"implicit",AUTHORIZATION_CODE_GRANT:"authorization_code",CLIENT_CREDENTIALS_GRANT:"client_credentials",RESOURCE_OWNER_PASSWORD_GRANT:"password",REFRESH_TOKEN_GRANT:"refresh_token",DEVICE_CODE_GRANT:"device_code",JWT_BEARER:"urn:ietf:params:oauth:grant-type:jwt-bearer",USER_FIC:"user_fic"},ys="MSSTS",Es="ADFS",Iu="MSA",Zo="Generic",Ot="-",ir=".",B={ID_TOKEN:"IdToken",ACCESS_TOKEN:"AccessToken",ACCESS_TOKEN_WITH_AUTH_SCHEME:"AccessToken_With_AuthScheme",REFRESH_TOKEN:"RefreshToken"},Su={ADFS:1001,MSA:1002,MSSTS:1003,GENERIC:1004,ACCESS_TOKEN:2001,REFRESH_TOKEN:2002,ID_TOKEN:2003,APP_METADATA:3001,UNDEFINED:9999},sr="appmetadata",Ts="client_info",bt="1",ar="authority-metadata",As=3600*24,te={CONFIG:"config",CACHE:"cache",NETWORK:"network",HARDCODED_VALUES:"hardcoded_values"},en=5,wu=80,Is=330,Ss=50,Qr="server-telemetry",tn="|",ut=",",ws="1",_s="0",Rs="unknown_error",M={BEARER:"Bearer",POP:"pop",SSH:"ssh-cert"},ks=60,vs=3600,qr="throttling",Os="retry-after, h429",bs="invalid_grant",Ps="client_mismatch",rn={username:"username",password:"password"},mt={FAILED_AUTO_DETECTION:"1",INTERNAL_CACHE:"2",ENVIRONMENT_VARIABLE:"3",IMDS:"4"},Xr={CONFIGURED_MATCHES_DETECTED:"1",CONFIGURED_NO_AUTO_DETECTION:"2",CONFIGURED_NOT_DETECTED:"3",AUTO_DETECTION_REQUESTED_SUCCESSFUL:"4",AUTO_DETECTION_REQUESTED_FAILED:"5"},ke={NOT_APPLICABLE:"0",FORCE_REFRESH_OR_CLAIMS:"1",NO_CACHED_ACCESS_TOKEN:"2",CACHED_ACCESS_TOKEN_EXPIRED:"3",PROACTIVELY_REFRESHED:"4"},Ns={Jwt:"JWT",Jwk:"JWK",Pop:"pop"},_u=864e5,Ms=300,Ru={BASE64:"base64",HEX:"hex",UTF8:"utf-8"};function on(n){return`See https://aka.ms/msal.js.errors#${n} for details`}var I=class n extends Error{constructor(e,t,r,o){let i=r||(e?on(e):""),s=i?`${e}: ${i}`:e;super(s),Object.setPrototypeOf(this,n.prototype),this.errorCode=e||"",this.errorMessage=i||"",this.subError=o||"",this.correlationId=t,this.name="AuthError"}};function cr(n,e,t){return new I(n,e,t||on(n))}var Zr=class n extends I{constructor(e,t,r){super(e,t,r),this.name="ClientAuthError",Object.setPrototypeOf(this,n.prototype)}};function p(n,e,t){return new Zr(n,e,t)}var z={};Y(z,{authorizationCodeMissingFromServerResponse:()=>Js,bindingKeyNotRemoved:()=>bu,cannotAppendScopeSet:()=>$s,cannotRemoveEmptyScope:()=>Gs,clientInfoDecodingError:()=>nn,clientInfoEmptyError:()=>Us,emptyInputScopeSet:()=>cn,endSessionEndpointNotSupported:()=>Ws,endpointResolutionError:()=>ve,hashNotDeserialized:()=>Hs,invalidCacheEnvironment:()=>to,invalidCacheRecord:()=>Vs,invalidState:()=>Pt,keyIdMissing:()=>Ys,methodNotImplemented:()=>w,misplacedResourceParam:()=>qs,multipleMatchingAppMetadata:()=>Bs,multipleMatchingTokens:()=>ku,nestedAppAuthBridgeDisabled:()=>Mu,networkError:()=>xs,noAccountFound:()=>vu,noAccountInSilentRequest:()=>eo,noCryptoObject:()=>ln,noNetworkConnectivity:()=>Pu,nonceMismatch:()=>Ks,nullOrEmptyToken:()=>Ds,openIdConfigError:()=>Ls,platformBrokerError:()=>Uu,requestCannotBeMade:()=>zs,resourceParameterRequired:()=>Qs,stateMismatch:()=>Fs,stateNotFound:()=>an,tokenClaimsCnfRequiredForSignedJwt:()=>js,tokenParsingError:()=>sn,tokenRefreshRequired:()=>lr,unexpectedCredentialType:()=>Ou,userCanceled:()=>Nu});var nn="client_info_decoding_error",Us="client_info_empty_error",sn="token_parsing_error",Ds="null_or_empty_token",ve="endpoints_resolution_error",xs="network_error",Ls="openid_config_error",Hs="hash_not_deserialized",Pt="invalid_state",Fs="state_mismatch",an="state_not_found",Ks="nonce_mismatch",ku="multiple_matching_tokens",Bs="multiple_matching_appMetadata",zs="request_cannot_be_made",Gs="cannot_remove_empty_scope",$s="cannot_append_scopeset",cn="empty_input_scopeset",eo="no_account_in_silent_request",Vs="invalid_cache_record",to="invalid_cache_environment",vu="no_account_found",ln="no_crypto_object",Ou="unexpected_credential_type",lr="token_refresh_required",js="token_claims_cnf_required_for_signedjwt",Js="authorization_code_missing_from_server_response",bu="binding_key_not_removed",Ws="end_session_endpoint_not_supported",Ys="key_id_missing",Pu="no_network_connectivity",Nu="user_canceled",w="method_not_implemented",Mu="nested_app_auth_bridge_disabled",Uu="platform_broker_error",Qs="resource_parameter_required",qs="misplaced_resource_parameter";function hr(n,e){if(!n)throw p(Us,"");try{let t=e(n);return JSON.parse(t)}catch{throw p(nn,"")}}function Le(n){if(!n)throw p(nn,"");let e=n.split(ir,2);return{uid:e[0],utid:e.length<2?"":e[1]}}var G={};Y(G,{extractTokenClaims:()=>We,getJWSPayload:()=>Jc,isKmsi:()=>ro});function We(n,e,t){let r=Jc(n,t);try{let o=e(r);return JSON.parse(o)}catch{throw p(sn,t)}}function ro(n){if(!n.signin_state)return!1;let e=["kmsi","dvc_dmjd"];return n.signin_state.some(t=>e.includes(t.trim().toLowerCase()))}function Jc(n,e){if(!n)throw p(Ds,e);let r=/^([^\.\s]*)\.([^\.\s]+)\.([^\.\s]*)$/.exec(n);if(!r||r.length<4)throw p(sn,e);return r[2]}function Xs(n,e){return!!n&&!!e&&n===e.split(".")[1]}function He(n,e,t,r,o){if(o){let{oid:i,sub:s,tid:a,name:c,tfp:l,acr:h,preferred_username:d,upn:m,login_hint:g}=o,y=a||l||h||"";return{tenantId:y,localAccountId:i||s||"",name:c,username:d||m||"",loginHint:g,isHomeTenant:Xs(y,n),upn:m,...r&&{nativeAccountId:r}}}else return{tenantId:t,localAccountId:e,username:"",isHomeTenant:Xs(t,n),...r&&{nativeAccountId:r}}}function pt(n,e,t,r){let o=n;if(e){let{isHomeTenant:i,...s}=e;o={...n,...s}}if(t){let{isHomeTenant:i,...s}=He(n.homeAccountId,n.localAccountId,n.tenantId,o.nativeAccountId,t);return o={...o,...s,idTokenClaims:t,idToken:r,kmsi:ro(t)},o}return o}var ie={Default:0,Adfs:1,Dsts:2,Ciam:3};function Nt(n){return n&&(n.tid||n.tfp||n.acr)||null}var P={AAD:"AAD",OIDC:"OIDC",EAR:"EAR"};function Du(n){return[n.homeAccountId,n.environment].join(Ot).toLowerCase()}function dr(n){let e=n.tenantProfiles||[];e.length===0&&n.realm&&n.localAccountId&&e.push(He(n.homeAccountId,n.localAccountId,n.realm,n.nativeAccountId));let r=e.find(o=>o.tenantId===n.realm)?.nativeAccountId||n.nativeAccountId;return{homeAccountId:n.homeAccountId,environment:n.environment,tenantId:n.realm,username:n.username,localAccountId:n.localAccountId,loginHint:n.loginHint,name:n.name,nativeAccountId:r,authorityType:n.authorityType,tenantProfiles:new Map(e.map(o=>[o.tenantId,o])),dataBoundary:n.dataBoundary}}function xu(n){return!n.tenantProfiles}function Zs(n,e,t,r){let o;e.authorityType===ie.Adfs?o=Es:e.protocolMode===P.OIDC?o=Zo:o=ys;let i,s;n.clientInfo&&r&&(i=hr(n.clientInfo,r),i.xms_tdbr&&(s=i.xms_tdbr==="EU"?"EU":"None"));let a=n.environment||e&&e.getPreferredCache();if(!a)throw p(to,t);let c=n.idTokenClaims?.preferred_username||n.idTokenClaims?.upn,l=n.idTokenClaims?.emails?n.idTokenClaims.emails[0]:null,h=c||l||"",d=n.idTokenClaims?.login_hint,m=i?.utid||Nt(n.idTokenClaims)||"",g=i?.uid||n.idTokenClaims?.oid||n.idTokenClaims?.sub||"",y;return n.tenantProfiles?y=n.tenantProfiles:y=[He(n.homeAccountId,g,m,n.nativeAccountId,n.idTokenClaims)],{homeAccountId:n.homeAccountId,environment:a,realm:m,localAccountId:g,username:h,authorityType:o,loginHint:d,clientInfo:n.clientInfo,name:n.idTokenClaims?.name||"",lastModificationTime:void 0,lastModificationApp:void 0,cloudGraphHostName:n.cloudGraphHostName,msGraphHost:n.msGraphHost,nativeAccountId:n.nativeAccountId,tenantProfiles:y,dataBoundary:s}}function Lu(n,e,t){let r=Array.from(n.tenantProfiles?.values()||[]);if(r.length===0&&n.tenantId&&n.localAccountId)r.push(He(n.homeAccountId,n.localAccountId,n.tenantId,n.nativeAccountId,n.idTokenClaims));else if(n.nativeAccountId){let o=r.find(i=>i.tenantId===n.tenantId);o&&!o.nativeAccountId&&(o.nativeAccountId=n.nativeAccountId)}return{authorityType:n.authorityType||Zo,homeAccountId:n.homeAccountId,localAccountId:n.localAccountId,nativeAccountId:n.nativeAccountId,realm:n.tenantId,environment:n.environment,username:n.username,loginHint:n.loginHint,name:n.name,cloudGraphHostName:e,msGraphHost:t,tenantProfiles:r,dataBoundary:n.dataBoundary}}function ea(n,e,t,r,o,i){if(!(e===ie.Adfs||e===ie.Dsts)){if(n)try{let s=hr(n,r.base64Decode);if(s.uid&&s.utid)return`${s.uid}.${s.utid}`}catch{}t.warning("1ub6wv",o)}return i?.sub||""}function Hu(n){return n?n.hasOwnProperty("homeAccountId")&&n.hasOwnProperty("environment")&&n.hasOwnProperty("realm")&&n.hasOwnProperty("localAccountId")&&n.hasOwnProperty("username")&&n.hasOwnProperty("authorityType"):!1}var ft={};Y(ft,{postRequestFailed:()=>Ku,unexpectedError:()=>Fu});var Fu="unexpected_error",Ku="post_request_failed";var oo=class n extends I{constructor(e,t){super(e,t),this.name="ClientConfigurationError",Object.setPrototypeOf(this,n.prototype)}};function S(n,e){return new oo(n,e)}var re={};Y(re,{authorityMismatch:()=>Wu,authorityUriInsecure:()=>ra,cannotAllowPlatformBroker:()=>Ju,cannotSetOIDCOptions:()=>ju,claimsRequestParsingError:()=>Bu,emptyInputScopesError:()=>na,invalidAuthenticationHeader:()=>Vu,invalidAuthorityMetadata:()=>la,invalidClaims:()=>ia,invalidCloudDiscoveryMetadata:()=>hn,invalidCodeChallengeMethod:()=>zu,invalidDpopHtm:()=>Xu,invalidDpopHtu:()=>Zu,invalidPlatformBrokerConfiguration:()=>Qu,invalidRequestMethodForEAR:()=>Yu,invalidResponseMode:()=>qu,issuerValidationFailed:()=>io,logoutRequestEmpty:()=>aa,missingNonceAuthenticationHeader:()=>$u,missingSshJwk:()=>no,missingSshKid:()=>Gu,pkceParamsMissing:()=>ca,redirectUriEmpty:()=>ta,tokenRequestEmpty:()=>sa,untrustedAuthority:()=>ha,urlEmptyError:()=>oa,urlParseError:()=>Ye});var ta="redirect_uri_empty",Bu="claims_request_parsing_error",ra="authority_uri_insecure",Ye="url_parse_error",oa="empty_url_error",na="empty_input_scopes_error",ia="invalid_claims",sa="token_request_empty",aa="logout_request_empty",zu="invalid_code_challenge_method",ca="pkce_params_missing",hn="invalid_cloud_discovery_metadata",la="invalid_authority_metadata",ha="untrusted_authority",no="missing_ssh_jwk",Gu="missing_ssh_kid",$u="missing_nonce_authentication_header",Vu="invalid_authentication_header",ju="cannot_set_OIDCOptions",Ju="cannot_allow_platform_broker",Wu="authority_mismatch",Yu="invalid_request_method_for_EAR",Qu="invalid_platform_broker_configuration",io="issuer_validation_failed",qu="invalid_response_mode",Xu="invalid_dpop_htm",Zu="invalid_dpop_htu";function Wc(n){return n.hasOwnProperty("authorization_endpoint")&&n.hasOwnProperty("token_endpoint")&&n.hasOwnProperty("issuer")&&n.hasOwnProperty("jwks_uri")}var le=class{static isEmptyObj(e){if(e)try{let t=JSON.parse(e);return Object.keys(t).length===0}catch{}return!0}static startsWith(e,t){return e.indexOf(t)===0}static endsWith(e,t){return e.length>=t.length&&e.lastIndexOf(t)===e.length-t.length}static queryStringToObject(e){let t={},r=e.split("&"),o=i=>decodeURIComponent(i.replace(/\+/g," "));return r.forEach(i=>{if(i.trim()){let[s,a]=i.split(/=(.+)/g,2);s&&a&&(t[o(s)]=o(a))}}),t}static trimArrayEntries(e){return e.map(t=>t.trim())}static removeEmptyStringsFromArray(e){return e.filter(t=>!!t)}static jsonParseHelper(e){try{return JSON.parse(e)}catch{return null}}};var _=class n{get urlString(){return this._urlString}constructor(e,t){if(this._urlString=e,this.correlationId=t,!this._urlString)throw S(oa,t);e.includes("#")||(this._urlString=n.canonicalizeUri(e))}static canonicalizeUri(e){if(e){let t=e.toLowerCase();return le.endsWith(t,"?")?t=t.slice(0,-1):le.endsWith(t,"?/")&&(t=t.slice(0,-2)),le.endsWith(t,"/")||(t+="/"),t}return e}validateAsUri(){let e;try{e=this.getUrlComponents()}catch{throw S(Ye,this.correlationId)}if(!e.HostNameAndPort||!e.PathSegments)throw S(Ye,this.correlationId);if(!e.Protocol||e.Protocol.toLowerCase()!=="https:")throw S(ra,this.correlationId)}static appendQueryString(e,t){return t?e.indexOf("?")<0?`${e}?${t}`:`${e}&${t}`:e}static removeHashFromUrl(e){return n.canonicalizeUri(e.split("#")[0])}replaceTenantPath(e){let t=this.getUrlComponents(),r=t.PathSegments;return e&&r.length!==0&&(r[0]===_e.COMMON||r[0]===_e.ORGANIZATIONS)&&(r[0]=e),n.constructAuthorityUriFromObject(t,this.correlationId)}getUrlComponents(){let e=RegExp("^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?"),t=this.urlString.match(e);if(!t)throw S(Ye,this.correlationId);let r={Protocol:t[1],HostNameAndPort:t[4],AbsolutePath:t[5],QueryString:t[7]},o=r.AbsolutePath.split("/");return o=o.filter(i=>i&&i.length>0),r.PathSegments=o,r.QueryString&&r.QueryString.endsWith("/")&&(r.QueryString=r.QueryString.substring(0,r.QueryString.length-1)),r}static getDomainFromUrl(e,t){let r=RegExp("^([^:/?#]+://)?([^/?#]*)"),o=e.match(r);if(!o)throw S(Ye,t);return o[2]}static getAbsoluteUrl(e,t,r){if(e[0]===or){let i=new n(t,r).getUrlComponents();return i.Protocol+"//"+i.HostNameAndPort+e}return e}static constructAuthorityUriFromObject(e,t){return new n(e.Protocol+"//"+e.HostNameAndPort+"/"+e.PathSegments.join("/"),t)}};var em=[{host:"login.microsoftonline.com"},{host:"login.chinacloudapi.cn",issuerHost:"login.partner.microsoftonline.cn"},{host:"login.microsoftonline.us"},{host:"login.sovcloud-identity.fr"},{host:"login.sovcloud-identity.de"},{host:"login.sovcloud-identity.sg"}];function tm(n,e){return{token_endpoint:`https://${n}/{tenantid}/oauth2/v2.0/token`,jwks_uri:`https://${n}/{tenantid}/discovery/v2.0/keys`,issuer:`https://${e}/{tenantid}/v2.0`,authorization_endpoint:`https://${n}/{tenantid}/oauth2/v2.0/authorize`,end_session_endpoint:`https://${n}/{tenantid}/oauth2/v2.0/logout`}}var rm=em.reduce((n,{host:e,issuerHost:t})=>(n[e]=tm(e,t||e),n),{}),Qc={endpointMetadata:rm,instanceDiscoveryMetadata:{metadata:[{preferred_network:"login.microsoftonline.com",preferred_cache:"login.windows.net",aliases:["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"]},{preferred_network:"login.partner.microsoftonline.cn",preferred_cache:"login.partner.microsoftonline.cn",aliases:["login.partner.microsoftonline.cn","login.chinacloudapi.cn"]},{preferred_network:"login.microsoftonline.de",preferred_cache:"login.microsoftonline.de",aliases:["login.microsoftonline.de"]},{preferred_network:"login.microsoftonline.us",preferred_cache:"login.microsoftonline.us",aliases:["login.microsoftonline.us","login.usgovcloudapi.net"]},{preferred_network:"login-us.microsoftonline.com",preferred_cache:"login-us.microsoftonline.com",aliases:["login-us.microsoftonline.com"]},{preferred_network:"login.sovcloud-identity.fr",preferred_cache:"login.sovcloud-identity.fr",aliases:["login.sovcloud-identity.fr"]},{preferred_network:"login.sovcloud-identity.de",preferred_cache:"login.sovcloud-identity.de",aliases:["login.sovcloud-identity.de"]},{preferred_network:"login.sovcloud-identity.sg",preferred_cache:"login.sovcloud-identity.sg",aliases:["login.sovcloud-identity.sg"]},{preferred_network:"login.windows-ppe.net",preferred_cache:"login.windows-ppe.net",aliases:["login.windows-ppe.net","sts.windows-ppe.net","login.microsoft-ppe.com"]}]}},da=Qc.endpointMetadata,ua=Qc.instanceDiscoveryMetadata,ma=new Set;ua.metadata.forEach(n=>{n.aliases.forEach(e=>{ma.add(e)})});function qc(n,e,t){let r,o=n.canonicalAuthority;if(o){let i=new _(o,t).getUrlComponents().HostNameAndPort;r=Yc(e,t,i,n.cloudDiscoveryMetadata?.metadata,te.CONFIG)||Yc(e,t,i,ua.metadata,te.HARDCODED_VALUES)||n.knownAuthorities}return r||[]}function Yc(n,e,t,r,o){if(n.trace(`1bmquz ${o}`,e),t&&r){let i=so(r,t);if(i)return n.trace(`1fotbt ${o}`,e),i.aliases;n.trace(`14avvj ${o}`,e)}return null}function Xc(n){return so(ua.metadata,n)}function so(n,e){for(let t=0;t<n.length;t++){let r=n[t];if(r.aliases.includes(e))return r}return null}var gt={None:"none",AzurePublic:"https://login.microsoftonline.com",AzurePpe:"https://login.windows-ppe.net",AzureChina:"https://login.chinacloudapi.cn",AzureGermany:"https://login.microsoftonline.de",AzureUsGovernment:"https://login.microsoftonline.us"};function Zc(n){return n.hasOwnProperty("tenant_discovery_endpoint")&&n.hasOwnProperty("metadata")}function el(n){return n.hasOwnProperty("error")&&n.hasOwnProperty("error_description")}var $={};Y($,{AuthClientCreateTokenRequestBody:()=>Ia,AuthClientExecuteTokenRequest:()=>Aa,AuthorityGetCloudDiscoveryMetadataFromNetwork:()=>_a,AuthorityGetEndpointMetadataFromNetwork:()=>ka,AuthorityResolveEndpointsAsync:()=>wa,AuthorityUpdateCloudDiscoveryMetadata:()=>Ra,AuthorityUpdateEndpointMetadata:()=>va,AuthorityUpdateMetadataWithRegionalInformation:()=>dn,AuthorizationCodeClientExecutePostToTokenEndpoint:()=>ga,CacheManagerGetRefreshToken:()=>Pa,GetAuthCodeUrl:()=>om,HandleCodeResponseFromServer:()=>nm,HandleServerTokenResponse:()=>co,NetworkClientSendPostRequestAsync:()=>pa,PopTokenGenerateCnf:()=>Mt,RefreshTokenClientAcquireToken:()=>ya,RefreshTokenClientAcquireTokenWithCachedRefreshToken:()=>ao,RefreshTokenClientCreateTokenRequestBody:()=>Ea,RefreshTokenClientExecutePostToTokenEndpoint:()=>fa,RefreshTokenClientExecuteTokenRequest:()=>Ca,RegionDiscoveryDetectRegion:()=>Oa,RegionDiscoveryGetCurrentVersion:()=>ba,RegionDiscoveryGetRegionFromIMDS:()=>un,SetUserData:()=>im,SilentFlowClientGenerateResultFromCacheRecord:()=>Ta,UpdateTokenEndpointAuthority:()=>Sa});var pa="networkClientSendPostRequestAsync",fa="refreshTokenClientExecutePostToTokenEndpoint",ga="authorizationCodeClientExecutePostToTokenEndpoint",Ca="refreshTokenClientExecuteTokenRequest",ya="refreshTokenClientAcquireToken",ao="refreshTokenClientAcquireTokenWithCachedRefreshToken",Ea="refreshTokenClientCreateTokenRequestBody",Ta="silentFlowClientGenerateResultFromCacheRecord",om="getAuthCodeUrl",nm="handleCodeResponseFromServer",Aa="authClientExecuteTokenRequest",Ia="authClientCreateTokenRequestBody",Sa="updateTokenEndpointAuthority",Mt="popTokenGenerateCnf",co="handleServerTokenResponse",wa="authorityResolveEndpointsAsync",_a="authorityGetCloudDiscoveryMetadataFromNetwork",Ra="authorityUpdateCloudDiscoveryMetadata",ka="authorityGetEndpointMetadataFromNetwork",va="authorityUpdateEndpointMetadata",dn="authorityUpdateMetadataWithRegionalInformation",Oa="regionDiscoveryDetectRegion",un="regionDiscoveryGetRegionFromIMDS",ba="regionDiscoveryGetCurrentVersion",Pa="cacheManagerGetRefreshToken",im="setUserData";var J=(n,e,t,r,o)=>(...i)=>{t.trace(`1plfzx ${e}`,o);let s=r.startMeasurement(e,o);o&&r.incrementFields({[`ext.${e}CallCount`]:1},o);try{let a=n(...i);return s.end({success:!0}),t.trace(`1g8n6a ${e}`,o),a}catch(a){t.trace(`0cfd8i ${e}`,o);try{t.trace(JSON.stringify(a),o)}catch{t.trace("00dty7",o)}throw s.end({success:!1},a),a}},u=(n,e,t,r,o)=>(...i)=>{t.trace(`1plfzx ${e}`,o);let s=r.startMeasurement(e,o);return o&&r.incrementFields({[`ext.${e}CallCount`]:1},o),n(...i).then(a=>(t.trace(`1g8n6a ${e}`,o),s.end({success:!0}),a)).catch(a=>{t.trace(`0cfd8i ${e}`,o);try{t.trace(JSON.stringify(a),o)}catch{t.trace("00dty7",o)}throw s.end({success:!1},a),a})};var lo=class n{constructor(e,t,r,o){this.networkInterface=e,this.logger=t,this.performanceClient=r,this.correlationId=o}async detectRegion(e,t){let r=e;if(r)t.region_source=mt.ENVIRONMENT_VARIABLE;else{let o=n.IMDS_OPTIONS;try{let i=await u(this.getRegionFromIMDS.bind(this),un,this.logger,this.performanceClient,this.correlationId)(as,o);if(i.status===Qo&&(r=i.body?.location,r&&(t.region_source=mt.IMDS)),i.status===qo){let s=await u(this.getCurrentVersion.bind(this),ba,this.logger,this.performanceClient,this.correlationId)(o);if(!s)return t.region_source=mt.FAILED_AUTO_DETECTION,null;let a=await u(this.getRegionFromIMDS.bind(this),un,this.logger,this.performanceClient,this.correlationId)(s,o);a.status===Qo&&(r=a.body?.location,r&&(t.region_source=mt.IMDS))}}catch{return t.region_source=mt.FAILED_AUTO_DETECTION,null}}return r||(t.region_source=mt.FAILED_AUTO_DETECTION),r||null}async getRegionFromIMDS(e,t){return this.networkInterface.sendGetRequestAsync(`${Yo}?api-version=${e}`,t,cs)}async getCurrentVersion(e){try{let t=await this.networkInterface.sendGetRequestAsync(`${Yo}?format=json`,e);return t.status===qo&&t.body&&t.body["newest-versions"]&&t.body["newest-versions"].length>0?t.body["newest-versions"][0]:null}catch{return null}}};lo.IMDS_OPTIONS={headers:{Metadata:"true"}};var D={};Y(D,{createAccessTokenEntity:()=>Ua,createIdTokenEntity:()=>Ma,createRefreshTokenEntity:()=>Da,generateAppMetadataKey:()=>pm,generateAuthorityMetadataExpiresAt:()=>pn,isAccessTokenEntity:()=>lm,isAppMetadataEntity:()=>fm,isAuthorityMetadataEntity:()=>gm,isAuthorityMetadataExpired:()=>fn,isCredentialEntity:()=>mn,isIdTokenEntity:()=>hm,isRefreshTokenEntity:()=>dm,isServerTelemetryEntity:()=>um,isThrottlingEntity:()=>mm,updateAuthorityEndpointMetadata:()=>mr,updateCloudDiscoveryMetadata:()=>uo});var Q={};Y(Q,{delay:()=>cm,isCacheExpired:()=>am,isTokenExpired:()=>ur,nowSeconds:()=>ge,toDateFromSeconds:()=>ho,toSecondsFromDate:()=>sm,wasClockTurnedBack:()=>Na});function ge(){return Math.round(new Date().getTime()/1e3)}function sm(n){return n.getTime()/1e3}function ho(n){return n?new Date(Number(n)*1e3):new Date}function ur(n,e){let t=Number(n)||0;return ge()+e>t}function am(n,e){let t=Number(n)+e*24*60*60*1e3;return Date.now()>t}function Na(n){return Number(n)>ge()}function cm(n,e){return new Promise(t=>setTimeout(()=>t(e),n))}function Ma(n,e,t,r,o){return{credentialType:B.ID_TOKEN,homeAccountId:n,environment:e,clientId:r,secret:t,realm:o,lastUpdatedAt:Date.now().toString()}}function Ua(n,e,t,r,o,i,s,a,c,l,h,d,m,g,y){let T={homeAccountId:n,credentialType:B.ACCESS_TOKEN,secret:t,cachedAt:ge().toString(),expiresOn:s.toString(),extendedExpiresOn:a.toString(),environment:e,clientId:r,realm:o,target:i,tokenType:d||M.BEARER,lastUpdatedAt:Date.now().toString()};if(m&&(T.userAssertionHash=m),h&&(T.refreshOn=h.toString()),T.tokenType?.toLowerCase()!==M.BEARER.toLowerCase())switch(T.credentialType=B.ACCESS_TOKEN_WITH_AUTH_SCHEME,T.tokenType){case M.POP:let k=We(t,c,l);if(!k?.cnf?.kid)throw p(js,l);T.keyId=k.cnf.kid;break;case M.SSH:T.keyId=g}return y&&Object.keys(y).length>0&&(T.additionalCacheKeyComponents=y),T}function Da(n,e,t,r,o,i,s){let a={credentialType:B.REFRESH_TOKEN,homeAccountId:n,environment:e,clientId:r,secret:t,lastUpdatedAt:Date.now().toString()};return i&&(a.userAssertionHash=i),o&&(a.familyId=o),s&&(a.expiresOn=s.toString()),a}function mn(n){return n.hasOwnProperty("homeAccountId")&&n.hasOwnProperty("environment")&&n.hasOwnProperty("credentialType")&&n.hasOwnProperty("clientId")&&n.hasOwnProperty("secret")}function lm(n){return n?mn(n)&&n.hasOwnProperty("realm")&&n.hasOwnProperty("target")&&(n.credentialType===B.ACCESS_TOKEN||n.credentialType===B.ACCESS_TOKEN_WITH_AUTH_SCHEME):!1}function hm(n){return n?mn(n)&&n.hasOwnProperty("realm")&&n.credentialType===B.ID_TOKEN:!1}function dm(n){return n?mn(n)&&n.credentialType===B.REFRESH_TOKEN:!1}function um(n,e){let t=n.indexOf(Qr)===0,r=!0;return e&&(r=e.hasOwnProperty("failedRequests")&&e.hasOwnProperty("errors")&&e.hasOwnProperty("cacheHits")),t&&r}function mm(n,e){let t=!1;n&&(t=n.indexOf(qr)===0);let r=!0;return e&&(r=e.hasOwnProperty("throttleTime")),t&&r}function pm({environment:n,clientId:e}){return[sr,n,e].join(Ot).toLowerCase()}function fm(n,e){return e?n.indexOf(sr)===0&&e.hasOwnProperty("clientId")&&e.hasOwnProperty("environment"):!1}function gm(n,e){return e?n.indexOf(ar)===0&&e.hasOwnProperty("aliases")&&e.hasOwnProperty("preferred_cache")&&e.hasOwnProperty("preferred_network")&&e.hasOwnProperty("canonical_authority")&&e.hasOwnProperty("authorization_endpoint")&&e.hasOwnProperty("token_endpoint")&&e.hasOwnProperty("issuer")&&e.hasOwnProperty("aliasesFromNetwork")&&e.hasOwnProperty("endpointsFromNetwork")&&e.hasOwnProperty("expiresAt")&&e.hasOwnProperty("jwks_uri"):!1}function pn(){return ge()+As}function mr(n,e,t){n.authorization_endpoint=e.authorization_endpoint,n.token_endpoint=e.token_endpoint,n.end_session_endpoint=e.end_session_endpoint,n.issuer=e.issuer,n.endpointsFromNetwork=t,n.jwks_uri=e.jwks_uri}function uo(n,e,t){n.aliases=e.aliases,n.preferred_cache=e.preferred_cache,n.preferred_network=e.preferred_network,n.aliasesFromNetwork=t}function fn(n){return n.expiresAt<=ge()}var Qe=class n{constructor(e,t,r,o,i,s,a,c){this.canonicalAuthority=e,this._canonicalAuthority.validateAsUri(),this.networkInterface=t,this.cacheManager=r,this.authorityOptions=o,this.regionDiscoveryMetadata={region_used:void 0,region_source:void 0,region_outcome:void 0},this.logger=i,this.performanceClient=a,this.correlationId=s,this.managedIdentity=c||!1,this.regionDiscovery=new lo(t,this.logger,this.performanceClient,this.correlationId)}getAuthorityType(e){if(e.HostNameAndPort.endsWith(Vr))return ie.Ciam;let t=e.PathSegments;if(t.length)switch(t[0].toLowerCase()){case os:return ie.Adfs;case ns:return ie.Dsts}return ie.Default}get authorityType(){return this.getAuthorityType(this.canonicalAuthorityUrlComponents)}get protocolMode(){return this.authorityOptions.protocolMode}get options(){return this.authorityOptions}get canonicalAuthority(){return this._canonicalAuthority.urlString}set canonicalAuthority(e){this._canonicalAuthority=new _(e,this.correlationId),this._canonicalAuthority.validateAsUri(),this._canonicalAuthorityUrlComponents=null}get canonicalAuthorityUrlComponents(){return this._canonicalAuthorityUrlComponents||(this._canonicalAuthorityUrlComponents=this._canonicalAuthority.getUrlComponents()),this._canonicalAuthorityUrlComponents}get hostnameAndPort(){return this.canonicalAuthorityUrlComponents.HostNameAndPort.toLowerCase()}get tenant(){return this.canonicalAuthorityUrlComponents.PathSegments[0]}get authorizationEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.authorization_endpoint);throw p(ve,this.correlationId)}get tokenEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.token_endpoint);throw p(ve,this.correlationId)}get deviceCodeEndpoint(){if(this.discoveryComplete())return this.replacePath(this.metadata.token_endpoint.replace("/token","/devicecode"));throw p(ve,this.correlationId)}get endSessionEndpoint(){if(this.discoveryComplete()){if(!this.metadata.end_session_endpoint)throw p(Ws,this.correlationId);return this.replacePath(this.metadata.end_session_endpoint)}else throw p(ve,this.correlationId)}get selfSignedJwtAudience(){if(this.discoveryComplete())return this.replacePath(this.metadata.issuer);throw p(ve,this.correlationId)}get jwksUri(){if(this.discoveryComplete())return this.replacePath(this.metadata.jwks_uri);throw p(ve,this.correlationId)}canReplaceTenant(e){return e.PathSegments.length===1&&!n.reservedTenantDomains.has(e.PathSegments[0])&&this.getAuthorityType(e)===ie.Default&&this.protocolMode!==P.OIDC}replaceTenant(e){return e.replace(/{tenant}|{tenantid}/g,this.tenant)}replacePath(e){let t=e,o=new _(this.metadata.canonical_authority,this.correlationId).getUrlComponents(),i=o.PathSegments;return this.canonicalAuthorityUrlComponents.PathSegments.forEach((a,c)=>{let l=i[c];if(c===0&&this.canReplaceTenant(o)){let h=new _(this.metadata.authorization_endpoint,this.correlationId).getUrlComponents().PathSegments[0];l!==h&&(this.logger.verbose(`1q3g2x ${l} ${h}`,this.correlationId),l=h)}a!==l&&(t=t.replace(`/${l}/`,`/${a}/`))}),this.replaceTenant(t)}get defaultOpenIdConfigurationEndpoint(){let e=this.hostnameAndPort;return this.canonicalAuthority.endsWith("v2.0/")||this.authorityType===ie.Adfs||this.protocolMode===P.OIDC&&!this.isAliasOfKnownMicrosoftAuthority(e)?`${this.canonicalAuthority}.well-known/openid-configuration`:`${this.canonicalAuthority}v2.0/.well-known/openid-configuration`}discoveryComplete(){return!!this.metadata}async resolveEndpointsAsync(){let e=this.getCurrentMetadataEntity(),t=await u(this.updateCloudDiscoveryMetadata.bind(this),Ra,this.logger,this.performanceClient,this.correlationId)(e);this.canonicalAuthority=this.canonicalAuthority.replace(this.hostnameAndPort,e.preferred_network);let r=await u(this.updateEndpointMetadata.bind(this),va,this.logger,this.performanceClient,this.correlationId)(e);this.updateCachedMetadata(e,t,{source:r}),this.performanceClient?.addFields({cloudDiscoverySource:t,authorityEndpointSource:r},this.correlationId)}getCurrentMetadataEntity(){let e=this.cacheManager.getAuthorityMetadataByAlias(this.hostnameAndPort,this.correlationId);return e||(e={aliases:[],preferred_cache:this.hostnameAndPort,preferred_network:this.hostnameAndPort,canonical_authority:this.canonicalAuthority,authorization_endpoint:"",token_endpoint:"",end_session_endpoint:"",issuer:"",aliasesFromNetwork:!1,endpointsFromNetwork:!1,expiresAt:pn(),jwks_uri:""}),e}updateCachedMetadata(e,t,r){t!==te.CACHE&&r?.source!==te.CACHE&&(e.expiresAt=pn(),e.canonical_authority=this.canonicalAuthority);let o=this.cacheManager.generateAuthorityMetadataCacheKey(e.preferred_cache,this.correlationId);this.cacheManager.setAuthorityMetadata(o,e,this.correlationId),this.metadata=e}async updateEndpointMetadata(e){let t=this.updateEndpointMetadataFromLocalSources(e);if(t){if(t.source===te.HARDCODED_VALUES&&this.authorityOptions.azureRegionConfiguration?.azureRegion&&t.metadata){let o=await u(this.updateMetadataWithRegionalInformation.bind(this),dn,this.logger,this.performanceClient,this.correlationId)(t.metadata);mr(e,o,!1),e.canonical_authority=this.canonicalAuthority}return t.source}let r=await u(this.getEndpointMetadataFromNetwork.bind(this),ka,this.logger,this.performanceClient,this.correlationId)();if(r)return this.validateIssuer(r.issuer),this.authorityOptions.azureRegionConfiguration?.azureRegion&&(r=await u(this.updateMetadataWithRegionalInformation.bind(this),dn,this.logger,this.performanceClient,this.correlationId)(r)),mr(e,r,!0),te.NETWORK;throw p(Ls,this.defaultOpenIdConfigurationEndpoint,this.correlationId)}updateEndpointMetadataFromLocalSources(e){this.logger.verbose("1fi0kc",this.correlationId);let t=this.getEndpointMetadataFromConfig();if(t)return this.logger.verbose("06t0uj",this.correlationId),mr(e,t,!1),{source:te.CONFIG};this.logger.verbose("151k0p",this.correlationId);let r=this.getEndpointMetadataFromHardcodedValues();if(r)return mr(e,r,!1),{source:te.HARDCODED_VALUES,metadata:r};this.logger.verbose("1imop5",this.correlationId);let o=fn(e);return this.isAuthoritySameType(e)&&e.endpointsFromNetwork&&!o?(this.logger.verbose("16uq31",""),{source:te.CACHE}):(o&&this.logger.verbose("0uoibc",""),null)}isAuthoritySameType(e){return new _(e.canonical_authority,this.correlationId).getUrlComponents().PathSegments.length===this.canonicalAuthorityUrlComponents.PathSegments.length}getEndpointMetadataFromConfig(){if(this.authorityOptions.authorityMetadata)try{return JSON.parse(this.authorityOptions.authorityMetadata)}catch{throw S(la,this.correlationId)}return null}async getEndpointMetadataFromNetwork(){let e={},t=this.defaultOpenIdConfigurationEndpoint;this.logger.verbose(`1y65x6 ${t}`,this.correlationId);try{let r=await this.networkInterface.sendGetRequestAsync(t,e);return Wc(r.body)?r.body:(this.logger.verbose("1koyv8",this.correlationId),null)}catch(r){return this.logger.verbose(`0a9wik ${r}`,this.correlationId),null}}getEndpointMetadataFromHardcodedValues(){return this.hostnameAndPort in da?da[this.hostnameAndPort]:null}async updateMetadataWithRegionalInformation(e){let t=this.authorityOptions.azureRegionConfiguration?.azureRegion;if(t){if(t!==ls)return this.regionDiscoveryMetadata.region_outcome=Xr.CONFIGURED_NO_AUTO_DETECTION,this.regionDiscoveryMetadata.region_used=t,n.replaceWithRegionalInformation(e,t,this.correlationId);let r=await u(this.regionDiscovery.detectRegion.bind(this.regionDiscovery),Oa,this.logger,this.performanceClient,this.correlationId)(this.authorityOptions.azureRegionConfiguration?.environmentRegion,this.regionDiscoveryMetadata);if(r)return this.regionDiscoveryMetadata.region_outcome=Xr.AUTO_DETECTION_REQUESTED_SUCCESSFUL,this.regionDiscoveryMetadata.region_used=r,n.replaceWithRegionalInformation(e,r,this.correlationId);this.regionDiscoveryMetadata.region_outcome=Xr.AUTO_DETECTION_REQUESTED_FAILED}return e}async updateCloudDiscoveryMetadata(e){let t=this.updateCloudDiscoveryMetadataFromLocalSources(e);if(t)return t;let r=await u(this.getCloudDiscoveryMetadataFromNetwork.bind(this),_a,this.logger,this.performanceClient,this.correlationId)();if(r)return uo(e,r,!0),te.NETWORK;throw S(ha,this.correlationId)}updateCloudDiscoveryMetadataFromLocalSources(e){this.logger.verbose("1tpqlr",this.correlationId),this.logger.verbosePii(`1fy7uz ${this.authorityOptions.knownAuthorities||Jr}`,this.correlationId),this.logger.verbosePii(`08zabj ${this.authorityOptions.authorityMetadata||Jr}`,this.correlationId),this.logger.verbosePii(`1o1kv3 ${e.canonical_authority||Jr}`,this.correlationId);let t=this.getCloudDiscoveryMetadataFromConfig();if(t)return this.logger.verbose("1nakio",this.correlationId),uo(e,t,!1),te.CONFIG;this.logger.verbose("1x74aj",this.correlationId);let r=Xc(this.hostnameAndPort);if(r)return this.logger.verbose("0by47c",this.correlationId),uo(e,r,!1),te.HARDCODED_VALUES;this.logger.verbose("0r2fzy",this.correlationId);let o=fn(e);return this.isAuthoritySameType(e)&&e.aliasesFromNetwork&&!o?(this.logger.verbose("1uffgh",""),te.CACHE):(o&&this.logger.verbose("0uoibc",""),null)}getCloudDiscoveryMetadataFromConfig(){if(this.authorityType===ie.Ciam)return this.logger.verbose("04y84h",this.correlationId),n.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);if(this.authorityOptions.cloudDiscoveryMetadata){this.logger.verbose("0gszr3",this.correlationId);try{this.logger.verbose("1iifkx",this.correlationId);let e=JSON.parse(this.authorityOptions.cloudDiscoveryMetadata),t=so(e.metadata,this.hostnameAndPort);if(this.logger.verbose("0q67e3",""),t)return this.logger.verbose("0hzfao",this.correlationId),t;this.logger.verbose("1ajz3u",this.correlationId)}catch{throw this.logger.verbose("1wq5tu",this.correlationId),S(hn,this.correlationId)}}return this.isInKnownAuthorities(this.hostnameAndPort)?(this.logger.verbose("0mt9al",this.correlationId),n.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort)):null}async getCloudDiscoveryMetadataFromNetwork(){let e=`${is}${this.canonicalAuthority}oauth2/v2.0/authorize`,t={},r=null;try{let o=await this.networkInterface.sendGetRequestAsync(e,t),i,s;if(Zc(o.body))i=o.body,s=i.metadata,this.logger.verbosePii(`1vglyt ${i.tenant_discovery_endpoint}`,this.correlationId);else if(el(o.body)){if(this.logger.warning(`062uto ${o.status}`,this.correlationId),i=o.body,i.error===us)return this.logger.error("1x90tm",this.correlationId),null;this.logger.warning(`0wchdm ${i.error}`,this.correlationId),this.logger.warning(`1s5mpv ${i.error_description}`,this.correlationId),this.logger.warning("1yhqpw",this.correlationId),s=[]}else return this.logger.error("0768g0",this.correlationId),null;this.logger.verbose("1lrobr",this.correlationId),r=so(s,this.hostnameAndPort)}catch(o){if(o instanceof I)this.logger.error(`0vwhc7 ${o.errorCode} ${o.errorMessage}`,this.correlationId);else{let i=o;this.logger.error(`0s2z41 ${i.name} ${i.message}`,this.correlationId)}return null}return r||(this.logger.warning("0jp28q",this.correlationId),this.logger.verbose("130sd8",this.correlationId),r=n.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort)),r}isInKnownAuthorities(e){let t=e.toLowerCase();return this.authorityOptions.knownAuthorities.filter(o=>o&&_.getDomainFromUrl(o,this.correlationId).toLowerCase()===t).length>0}static generateAuthority(e,t){let r;if(t&&t.azureCloudInstance!==gt.None){let o=t.tenant?t.tenant:$r;r=`${t.azureCloudInstance}/${o}/`}return r||e}static createCloudDiscoveryMetadataFromHost(e){return{preferred_network:e,preferred_cache:e,aliases:[e]}}getPreferredCache(){if(this.managedIdentity)return rs;if(this.discoveryComplete())return this.metadata.preferred_cache;throw p(ve,this.correlationId)}isAlias(e){return this.metadata.aliases.indexOf(e)>-1}isAliasOfKnownMicrosoftAuthority(e){return ma.has(e)}validateIssuer(e){if(!e)throw S(io,this.correlationId);let t;try{t=new URL(e)}catch{throw S(io,this.correlationId)}let r=t.protocol,o=t.host,i=(this.canonicalAuthorityUrlComponents.Protocol||"").toLowerCase(),s=(this.canonicalAuthorityUrlComponents.HostNameAndPort||"").toLowerCase(),a=this.matchesAuthorityOrigin(r,o,i,s),c=r==="https:"&&this.isAliasOfKnownMicrosoftAuthority(o),l=r==="https:"&&this.matchesRegionalMicrosoftHost(o),h=this.matchesCiamTenantPattern(t,s,this.canonicalAuthorityUrlComponents.PathSegments),d=r==="https:"&&this.isInKnownAuthorities(o);if(!(a||c||l||h||d))throw S(io,this.correlationId)}matchesAuthorityOrigin(e,t,r,o){return e===r&&t===o}matchesRegionalMicrosoftHost(e){let t=e.indexOf(".");if(t>0&&t<e.length-1){let r=e.substring(t+1);return this.isAliasOfKnownMicrosoftAuthority(r)}return!1}matchesCiamTenantPattern(e,t,r){let o=r[0],i=o?o.endsWith(kt)?o.slice(0,-kt.length):o:t.split(".")[0];if(!i)return!1;let s=`https://${i}${Vr}`,a=[s,`${s}/${i}`,`${s}/${i}/v2.0`,`${s}/${i}${kt}`,`${s}/${i}${kt}/v2.0`],c=e.pathname.replace(/\/+$/,""),l=`${e.protocol}//${e.host}${c}`;return a.some(h=>h===l)}static isPublicCloudAuthority(e){return ds.indexOf(e)>=0}static buildRegionalAuthorityString(e,t,r,o){let i=new _(e,r);i.validateAsUri();let s=i.getUrlComponents(),a=`${t}.${s.HostNameAndPort}`;this.isPublicCloudAuthority(s.HostNameAndPort)&&(a=`${t}.${hs}`);let c=_.constructAuthorityUriFromObject({...i.getUrlComponents(),HostNameAndPort:a},r).urlString;return o?`${c}?${o}`:c}static replaceWithRegionalInformation(e,t,r){let o={...e};return o.authorization_endpoint=n.buildRegionalAuthorityString(o.authorization_endpoint,t,r),o.token_endpoint=n.buildRegionalAuthorityString(o.token_endpoint,t,r),o.end_session_endpoint&&(o.end_session_endpoint=n.buildRegionalAuthorityString(o.end_session_endpoint,t,r)),o}static transformCIAMAuthority(e,t){let r=e,i=new _(e,t).getUrlComponents();if(i.PathSegments.length===0&&i.HostNameAndPort.endsWith(Vr)){let s=i.HostNameAndPort.split(".")[0];r=`${r}${s}${kt}`}return r}};Qe.reservedTenantDomains=new Set(["{tenant}","{tenantid}",_e.COMMON,_e.CONSUMERS,_e.ORGANIZATIONS]);function tl(n,e){let o=new _(n,e).getUrlComponents().PathSegments.slice(-1)[0]?.toLowerCase();switch(o){case _e.COMMON:case _e.ORGANIZATIONS:case _e.CONSUMERS:return;default:return o}}function gn(n){return n.endsWith(or)?n:`${n}${or}`}function xa(n){let e=n.cloudDiscoveryMetadata,t;if(e)try{t=JSON.parse(e)}catch{throw S(hn,"")}return{canonicalAuthority:n.authority?gn(n.authority):void 0,knownAuthorities:n.knownAuthorities,cloudDiscoveryMetadata:t}}var Cn={};Y(Cn,{createDiscoveredInstance:()=>La});async function La(n,e,t,r,o,i,s){let a=Qe.transformCIAMAuthority(gn(n),i),c=new Qe(a,e,t,r,o,i,s);try{return await u(c.resolveEndpointsAsync.bind(c),wa,o,s,i)(),c}catch{throw p(ve,i)}}var O={};Y(O,{addApplicationTelemetry:()=>po,addAuthorizationCode:()=>$a,addBrokerParameters:()=>Ze,addCcsOid:()=>qe,addCcsUpn:()=>Ct,addClaims:()=>Ht,addCliData:()=>Ja,addClientAssertion:()=>Co,addClientAssertionType:()=>yo,addClientId:()=>xt,addClientInfo:()=>Kt,addClientSecret:()=>go,addCodeChallengeParams:()=>Em,addCodeVerifier:()=>ja,addCorrelationId:()=>Ft,addDeviceCode:()=>Tm,addDomainHint:()=>Ba,addEARParameters:()=>Rm,addExtraParameters:()=>Xe,addGrantType:()=>Eo,addIdTokenHint:()=>Ka,addInstanceAware:()=>To,addLibraryInfo:()=>mo,addLoginHint:()=>pr,addLogoutHint:()=>Wa,addNativeBroker:()=>ym,addNonce:()=>Ga,addOboAssertion:()=>Am,addPassword:()=>_m,addPopToken:()=>Ao,addPostLogoutRedirectUri:()=>Fa,addPrompt:()=>za,addRedirectUri:()=>Lt,addRefreshToken:()=>Va,addRequestTokenUse:()=>Im,addResource:()=>_o,addResponseMode:()=>Ha,addResponseType:()=>Cm,addScopes:()=>Dt,addServerTelemetry:()=>So,addSid:()=>yn,addSshJwk:()=>Io,addState:()=>fo,addThrottling:()=>wo,addUsername:()=>wm,buildMergedClaims:()=>rl,instrumentBrokerParams:()=>Ut});var V=class n{constructor(e,t){this.correlationId=t;let r=e?le.trimArrayEntries([...e]):[],o=r?le.removeEmptyStringsFromArray(r):[];if(!o||!o.length)throw S(na,t);this.scopes=new Set,o.forEach(i=>this.scopes.add(i))}static fromString(e,t){let o=(e||"").split(" ");return new n(o,t)}static createSearchScopes(e,t){let r=e&&e.length>0?e:[...nr],o=new n(r,t);return o.containsOnlyOIDCScopes()?o.removeScope(Wo):o.removeOIDCScopes(),o}containsScope(e){let t=this.printScopesLowerCase().split(" "),r=new n(t,this.correlationId);return e?r.scopes.has(e.toLowerCase()):!1}containsScopeSet(e){return!e||e.scopes.size<=0?!1:this.scopes.size>=e.scopes.size&&e.asArray().every(t=>this.containsScope(t))}containsOnlyOIDCScopes(){let e=0;return Xo.forEach(t=>{this.containsScope(t)&&(e+=1)}),this.scopes.size===e}appendScope(e){e&&this.scopes.add(e.trim())}appendScopes(e){try{e.forEach(t=>this.appendScope(t))}catch{throw p($s,this.correlationId)}}removeScope(e){if(!e)throw p(Gs,this.correlationId);this.scopes.delete(e.trim())}removeOIDCScopes(){Xo.forEach(e=>{this.scopes.delete(e)})}unionScopeSets(e){if(!e)throw p(cn,this.correlationId);let t=new Set;return e.scopes.forEach(r=>t.add(r.toLowerCase())),this.scopes.forEach(r=>t.add(r.toLowerCase())),t}intersectingScopeSets(e){if(!e)throw p(cn,this.correlationId);e.containsOnlyOIDCScopes()||e.removeOIDCScopes();let t=this.unionScopeSets(e),r=e.getScopeCount(),o=this.getScopeCount();return t.size<o+r}getScopeCount(){return this.scopes.size}asArray(){let e=[];return this.scopes.forEach(t=>e.push(t)),e}printScopes(){return this.scopes?this.asArray().join(" "):""}printScopesLowerCase(){return this.printScopes().toLowerCase()}};function Ut(n,e,t){if(!e)return;let r=n.get(xe);r&&n.has(tr)&&t?.addFields({embeddedClientId:r,embeddedRedirectUri:n.get(Go)},e)}function Cm(n,e){n.set(fi,e)}function Ha(n,e){n.set(gi,e||Cs.QUERY)}function ym(n){n.set(ji,"1")}function Dt(n,e,t,r=!0,o=nr){r&&!o.includes("openid")&&!e.includes("openid")&&o.push("openid");let i=r?[...e||[],...o]:e||[],s=new V(i,t);n.set(Ei,s.printScopes())}function xt(n,e){n.set(xe,e)}function Lt(n,e){n.set(Go,e)}function Fa(n,e){n.set(Hi,e)}function Ka(n,e){n.set(Fi,e)}function Ba(n,e){n.set(Qi,e)}function pr(n,e){n.set(Yi,e)}function Ct(n,e){n.set(L.CCS_HEADER,`UPN:${e}`)}function qe(n,e){n.set(L.CCS_HEADER,`Oid:${e.uid}@${e.utid}`)}function yn(n,e){n.set("sid",e)}function Ht(n,e,t,r,o){let i=o&&n.has(tr)?void 0:r,s=rl(t,i,e);n.set(yi,s)}function Ft(n,e){n.set(vi,e)}function mo(n,e){n.set(Oi,e.sku),n.set(bi,e.version),e.os&&n.set(Pi,e.os),e.cpu&&n.set(Ni,e.cpu)}function po(n,e){e?.appName&&n.set(xi,e.appName),e?.appVersion&&n.set(Li,e.appVersion)}function za(n,e){n.set(Si,e)}function fo(n,e){e&&n.set(Ai,e)}function Ga(n,e){n.set(Ii,e)}function Em(n,e,t){if(e&&t)n.set(_i,e),n.set(Ri,t);else throw S(ca,"")}function $a(n,e){n.set(wi,e)}function Tm(n,e){n.set(Ki,e)}function Va(n,e){n.set(Ti,e)}function ja(n,e){n.set(ki,e)}function go(n,e){n.set(Bi,e)}function Co(n,e){e&&n.set(zi,e)}function yo(n,e){e&&n.set(Gi,e)}function Am(n,e){n.set($i,e)}function Im(n,e){n.set(Vi,e)}function Eo(n,e){n.set(Ci,e)}function Kt(n){n.set(Ts,"1")}function Ja(n){n.set(es,"1")}function To(n){n.has(rr)||n.set(rr,"true")}function Xe(n,e){Object.entries(e).forEach(([t,r])=>{!n.has(t)&&r&&n.set(t,r)})}var Sm={[Re.SIGNIN_STATE]:{essential:!1},[Re.LOGIN_HINT]:{essential:!1}};function rl(n,e,t=""){let r;if(!n)r={};else try{let i=JSON.parse(n);if(typeof i!="object"||i===null||Array.isArray(i))throw new Error("Claims must be a JSON object");r=i}catch{throw S(ia,t)}Object.prototype.hasOwnProperty.call(r,Re.ID_TOKEN)||(r[Re.ID_TOKEN]={});let o=r[Re.ID_TOKEN];for(let[i,s]of Object.entries(Sm))i in o||(o[i]=s);return e&&e.length>0&&(Object.prototype.hasOwnProperty.call(r,Re.ACCESS_TOKEN)||(r[Re.ACCESS_TOKEN]={}),r[Re.ACCESS_TOKEN][Re.XMS_CC]={values:e}),JSON.stringify(r)}function wm(n,e){n.set(rn.username,e)}function _m(n,e){n.set(rn.password,e)}function Ao(n,e){e&&(n.set($o,M.POP),n.set(Vo,e))}function Io(n,e){e&&(n.set($o,M.SSH),n.set(Vo,e))}function So(n,e){n.set(Mi,e.generateCurrentRequestHeaderValue()),n.set(Ui,e.generateLastRequestHeaderValue())}function wo(n){n.set(Di,Os)}function Wa(n,e){n.set(Ji,e)}function Ze(n,e,t){n.has(tr)||n.set(tr,e),n.has(Jo)||n.set(Jo,t)}function Rm(n,e){n.set(qi,encodeURIComponent(e)),n.set(Xi,"eyJhbGciOiJkaXIiLCJlbmMiOiJBMjU2R0NNIn0")}function _o(n,e){e&&n.set(Zi,e)}var Ce={};Y(Ce,{getDeserializedResponse:()=>km,mapToQueryString:()=>Fe,normalizeUrlForComparison:()=>vm,stripLeadingHashOrQuery:()=>ol,validateUrl:()=>Om});function ol(n){return n.startsWith("#/")?n.substring(2):n.startsWith("#")||n.startsWith("?")?n.substring(1):n}function km(n){if(!n||n.indexOf("=")<0)return null;try{let e=ol(n),t=Object.fromEntries(new URLSearchParams(e));if(t.code||t.ear_jwe||t.error||t.error_description||t.state)return t}catch{throw p(Hs,"")}return null}function Fe(n){let e=new Array;return n.forEach((t,r)=>{e.push(`${r}=${encodeURIComponent(t)}`)}),e.join("&")}function vm(n,e,t){if(!n)return n;let r=n.split("#")[0];if(!r)return r;try{let o=new URL(r);o.search||(o.search="");let i;try{i=decodeURIComponent(o.pathname)}catch{i=o.pathname}return i.endsWith("/")||(i+="/"),o.pathname=i,o.href}catch(o){throw e?.error(`15apdm ${o}`,t||""),S(Ye,t||"")}}function Om(n,e,t){try{new URL(n)}catch(r){throw e?.error(`1lrjz7 ${r}`,t||""),S(Ye,t||"")}}var yt={createNewGuid:()=>{throw p(w,"")},base64Decode:()=>{throw p(w,"")},base64Encode:()=>{throw p(w,"")},base64UrlEncode:()=>{throw p(w,"")},encodeKid:()=>{throw p(w,"")},async getPublicKeyThumbprint(){throw p(w,"")},async removeTokenBindingKey(){throw p(w,"")},async clearKeystore(){throw p(w,"")},async signJwt(){throw p(w,"")},async hashString(){throw p(w,"")}};var v;(function(n){n[n.Error=0]="Error",n[n.Warning=1]="Warning",n[n.Info=2]="Info",n[n.Verbose=3]="Verbose",n[n.Trace=4]="Trace"})(v||(v={}));var bm=50,Pm=500,Bt=new Map;function Nm(n,e){Bt.delete(n),Bt.set(n,e)}function Mm(n,e){let t=Date.now(),r=Bt.get(n);if(r)Nm(n,r);else if(r={logs:[],firstEventTime:t},Bt.set(n,r),Bt.size>bm){let o=Bt.keys().next().value;o!==void 0&&Bt.delete(o)}r.logs.push({...e,milliseconds:t-r.firstEventTime}),r.logs.length>Pm&&r.logs.shift()}function Um(n){if(n.length<6||n.length>6&&n[6]!==" ")return null;for(let e=0;e<6;e++){let t=n[e];if(!(t>="a"&&t<="z"||t>="A"&&t<="Z"||t>="0"&&t<="9"))return null}return n.substring(0,6)}var j=class n{constructor(e,t,r){this.level=v.Info;let o=()=>{},i=e||n.createDefaultLoggerOptions();this.localCallback=i.loggerCallback||o,this.piiLoggingEnabled=i.piiLoggingEnabled||!1,this.level=typeof i.logLevel=="number"?i.logLevel:v.Info,this.packageName=t||"",this.packageVersion=r||""}static createDefaultLoggerOptions(){return{loggerCallback:()=>{},piiLoggingEnabled:!1,logLevel:v.Info}}clone(e,t){return new n({loggerCallback:this.localCallback,piiLoggingEnabled:this.piiLoggingEnabled,logLevel:this.level},e,t)}logMessage(e,t){let r=t.correlationId,o=Um(e);if(o){let c={hash:o,level:t.logLevel,containsPii:t.containsPii||!1,milliseconds:0};Mm(r,c)}if(t.logLevel>this.level||!this.piiLoggingEnabled&&t.containsPii)return;let a=`${`[${new Date().toUTCString()}] : [${r}]`} : ${this.packageName}@${this.packageVersion} : ${v[t.logLevel]} - ${e}`;this.executeCallback(t.logLevel,a,t.containsPii||!1)}executeCallback(e,t,r){this.localCallback&&this.localCallback(e,t,r)}error(e,t){this.logMessage(e,{logLevel:v.Error,containsPii:!1,correlationId:t})}errorPii(e,t){this.logMessage(e,{logLevel:v.Error,containsPii:!0,correlationId:t})}warning(e,t){this.logMessage(e,{logLevel:v.Warning,containsPii:!1,correlationId:t})}warningPii(e,t){this.logMessage(e,{logLevel:v.Warning,containsPii:!0,correlationId:t})}info(e,t){this.logMessage(e,{logLevel:v.Info,containsPii:!1,correlationId:t})}infoPii(e,t){this.logMessage(e,{logLevel:v.Info,containsPii:!0,correlationId:t})}verbose(e,t){this.logMessage(e,{logLevel:v.Verbose,containsPii:!1,correlationId:t})}verbosePii(e,t){this.logMessage(e,{logLevel:v.Verbose,containsPii:!0,correlationId:t})}trace(e,t){this.logMessage(e,{logLevel:v.Trace,containsPii:!1,correlationId:t})}tracePii(e,t){this.logMessage(e,{logLevel:v.Trace,containsPii:!0,correlationId:t})}isPiiLoggingEnabled(){return this.piiLoggingEnabled||!1}};var Ke="@azure/msal-common",Oe="16.11.2";var Ro={};Y(Ro,{cacheErrorUnknown:()=>Qa,cacheQuotaExceeded:()=>Ya});var Ya="cache_quota_exceeded",Qa="cache_error_unknown";var Et=class n extends Error{constructor(e,t){let r=t||on(e);super(r),Object.setPrototypeOf(this,n.prototype),this.name="CacheError",this.errorCode=e,this.errorMessage=r}};function fr(n){return n instanceof Error?n.name==="QuotaExceededError"||n.name==="NS_ERROR_DOM_QUOTA_REACHED"||n.message.includes("exceeded the quota")?new Et(Ya):new Et(n.name,n.message):new Et(Qa)}var zt=class{constructor(e,t,r,o,i){this.clientId=e,this.cryptoImpl=t,this.commonLogger=r.clone(Ke,Oe),this.staticAuthorityOptions=i,this.performanceClient=o}getAllAccounts(e={},t){return this.buildTenantProfiles(this.getAccountsFilteredBy(e,t),t,e)}getAccountInfoFilteredBy(e,t){if(Object.keys(e).length===0||Object.values(e).every(o=>o==null||o===""))return this.commonLogger.warning("1skb02",t),null;let r=this.getAllAccounts(e,t);return r.length>1?r.sort((i,s)=>{let a=i.idTokenClaims?1:0;return(s.idTokenClaims?1:0)-a})[0]:r.length===1?r[0]:null}getBaseAccountInfo(e,t){let r=this.getAccountsFilteredBy(e,t);return r.length>0?dr(r[0]):null}buildTenantProfiles(e,t,r){return e.flatMap(o=>this.getTenantProfilesFromAccountEntity(o,t,r?.tenantId,r))}getTenantedAccountInfoByFilter(e,t,r,o,i){let s=null,a;if(i&&!this.tenantProfileMatchesFilter(r,i))return null;let c=this.getIdToken(e,o,t,r.tenantId);return c&&(a=We(c.secret,this.cryptoImpl.base64Decode,o),!this.idTokenClaimsMatchTenantProfileFilter(a,i))?null:(s=pt(e,r,a,c?.secret),s)}getTenantProfilesFromAccountEntity(e,t,r,o){let i=dr(e),s=i.tenantProfiles||new Map,a=this.getTokenKeys();if(r){let l=s.get(r);if(l)s=new Map([[r,l]]);else return[]}let c=[];return s.forEach(l=>{let h=this.getTenantedAccountInfoByFilter(i,a,l,t,o);h&&c.push(h)}),c}tenantProfileMatchesFilter(e,t){return!(t.localAccountId&&!this.matchLocalAccountIdFromTenantProfile(e,t.localAccountId)||t.name&&e.name!==t.name||t.isHomeTenant!==void 0&&e.isHomeTenant!==t.isHomeTenant||t.username&&!this.matchUsername(e.username,t.username)&&!this.matchUsername(e.upn,t.username)||t.loginHint&&!this.matchLoginHintWithTenantProfile(e,t.loginHint)||t.upn&&e.upn!==t.upn||t.nativeAccountId&&e.nativeAccountId!==t.nativeAccountId)}idTokenClaimsMatchTenantProfileFilter(e,t){return!(t&&(t.localAccountId&&!this.matchLocalAccountIdFromTokenClaims(e,t.localAccountId)||t.loginHint&&!this.matchLoginHintFromTokenClaims(e,t.loginHint)||t.username&&!this.matchUsername(e.preferred_username,t.username)&&!this.matchUsername(e.upn,t.username)||t.name&&!this.matchName(e,t.name)||t.sid&&!this.matchSid(e,t.sid)))}async saveCacheRecord(e,t,r,o,i){if(!e)throw p(Vs,t);try{e.account&&await this.setAccount(e.account,t,r,o),e.idToken&&i?.idToken!==!1&&await this.setIdTokenCredential(e.idToken,t,r),e.accessToken&&i?.accessToken!==!1&&await this.saveAccessToken(e.accessToken,t,r),e.refreshToken&&i?.refreshToken!==!1&&await this.setRefreshTokenCredential(e.refreshToken,t,r),e.appMetadata&&this.setAppMetadata(e.appMetadata,t)}catch(s){throw this.commonLogger?.error("0j476p",t),s instanceof I?s:fr(s)}}async saveAccessToken(e,t,r){let o={clientId:e.clientId,credentialType:e.credentialType,environment:e.environment,homeAccountId:e.homeAccountId,realm:e.realm,tokenType:e.tokenType},i=this.getTokenKeys(),s=V.fromString(e.target,t);i.accessToken.forEach(a=>{if(!this.accessTokenKeyMatchesFilter(a,o,!1))return;let c=this.getAccessTokenCredential(a,t);c&&this.credentialMatchesFilter(c,o,t)&&V.fromString(c.target,t).intersectingScopeSets(s)&&this.removeAccessToken(a,t)}),await this.setAccessTokenCredential(e,t,r)}getAccountsFilteredBy(e,t){let r=this.getAccountKeys(),o=[];return r.forEach(i=>{let s=this.getAccount(i,t);if(!s||e.homeAccountId&&!this.matchHomeAccountId(s,e.homeAccountId)||e.environment&&!this.matchEnvironment(s,e.environment,t)||e.realm&&!this.matchRealm(s,e.realm)||e.authorityType&&!this.matchAuthorityType(s,e.authorityType))return;let a={localAccountId:e?.localAccountId,name:e?.name,username:e?.username,loginHint:e?.loginHint,upn:e?.upn,nativeAccountId:e?.nativeAccountId},c=s.tenantProfiles?.filter(l=>this.tenantProfileMatchesFilter(l,a));c&&c.length===0||o.push(s)}),o}credentialMatchesFilter(e,t,r){if(t.clientId&&!this.matchClientId(e,t.clientId)||t.userAssertionHash&&!this.matchUserAssertionHash(e,t.userAssertionHash)||typeof t.homeAccountId=="string"&&!this.matchHomeAccountId(e,t.homeAccountId)||t.environment&&!this.matchEnvironment(e,t.environment,r)||t.realm&&!this.matchRealm(e,t.realm)||t.credentialType&&!this.matchCredentialType(e,t.credentialType)||t.familyId&&!this.matchFamilyId(e,t.familyId)||t.target&&!this.matchTarget(e,t.target,r)||e.credentialType===B.ACCESS_TOKEN_WITH_AUTH_SCHEME&&(t.tokenType&&!this.matchTokenType(e,t.tokenType)||t.tokenType===M.SSH&&t.keyId&&!this.matchKeyId(e,t.keyId)))return!1;let o=e.additionalCacheKeyComponents,i=t.additionalCacheKeyComponents,s=!!o&&Object.keys(o).length>0,a=!!i&&Object.keys(i).length>0;if(s!==a)return!1;if(s&&a){let c=Object.keys(o).sort(),l=Object.keys(i).sort();if(c.length!==l.length)return!1;for(let h=0;h<c.length;h++)if(c[h]!==l[h]||o[c[h]]!==i[l[h]])return!1}return!0}getAppMetadataFilteredBy(e,t){let r=this.getKeys(),o={};return r.forEach(i=>{if(!this.isAppMetadata(i))return;let s=this.getAppMetadata(i,t);s&&(e.environment&&!this.matchEnvironment(s,e.environment,t)||e.clientId&&!this.matchClientId(s,e.clientId)||(o[i]=s))}),o}getAuthorityMetadataByAlias(e,t){let r=this.getAuthorityMetadataKeys(),o=null;return r.forEach(i=>{if(!this.isAuthorityMetadata(i)||i.indexOf(this.clientId)===-1)return;let s=this.getAuthorityMetadata(i,t);s&&s.aliases.indexOf(e)!==-1&&(o=s)}),o}removeAllAccounts(e){this.getAllAccounts({},e).forEach(r=>{this.removeAccount(r,e)})}removeAccount(e,t){this.removeAccountContext(e,t);let r=this.getAccountKeys(),o=i=>i.includes(e.homeAccountId)&&i.includes(e.environment);r.filter(o).forEach(i=>{this.removeItem(i,t),this.performanceClient.incrementFields({accountsRemoved:1},t)})}removeAccountContext(e,t){let r=this.getTokenKeys(),o=i=>i.includes(e.homeAccountId)&&i.includes(e.environment);r.idToken.filter(o).forEach(i=>{this.removeIdToken(i,t)}),r.accessToken.filter(o).forEach(i=>{this.removeAccessToken(i,t)}),r.refreshToken.filter(o).forEach(i=>{this.removeRefreshToken(i,t)})}removeAccessToken(e,t){let r=this.getAccessTokenCredential(e,t);if(r&&(this.removeItem(e,t),this.performanceClient.incrementFields({accessTokensRemoved:1},t),r.credentialType.toLowerCase()===B.ACCESS_TOKEN_WITH_AUTH_SCHEME.toLowerCase()&&r.tokenType===M.POP)){let i=r.keyId;i&&this.cryptoImpl.removeTokenBindingKey(i,t).catch(()=>{this.commonLogger.error(`0cx291 ${i}`,t),this.performanceClient?.incrementFields({removeTokenBindingKeyFailure:1},t)})}}removeAppMetadata(e){return this.getKeys().forEach(r=>{this.isAppMetadata(r)&&this.removeItem(r,e)}),!0}getIdToken(e,t,r,o){this.commonLogger.trace("1drz22",t);let i={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:B.ID_TOKEN,clientId:this.clientId,realm:o},s=this.getIdTokensByFilter(i,t,r),a=s.size;if(a<1)return this.commonLogger.info("1atvtd",t),null;if(a>1){let c=s;if(!o){let l=new Map;s.forEach((d,m)=>{d.realm===e.tenantId&&l.set(m,d)});let h=l.size;if(h<1)return this.commonLogger.info("0ooalx",t),s.values().next().value??null;if(h===1)return this.commonLogger.info("1eq2vc",t),l.values().next().value??null;c=l}return this.commonLogger.info("1ws328",t),c.forEach((l,h)=>{this.removeIdToken(h,t)}),this.performanceClient.addFields({multiMatchedID:s.size},t),null}return this.commonLogger.info("1sm769",t),s.values().next().value??null}getIdTokensByFilter(e,t,r){let o=r&&r.idToken||this.getTokenKeys().idToken,i=new Map;return o.forEach(s=>{if(!this.idTokenKeyMatchesFilter(s,{clientId:this.clientId,...e}))return;let a=this.getIdTokenCredential(s,t);a&&this.credentialMatchesFilter(a,e,t)&&i.set(s,a)}),i}idTokenKeyMatchesFilter(e,t){let r=e.toLowerCase();return!(t.clientId&&r.indexOf(t.clientId.toLowerCase())===-1||t.homeAccountId&&r.indexOf(t.homeAccountId.toLowerCase())===-1)}removeIdToken(e,t){this.removeItem(e,t)}removeRefreshToken(e,t){this.removeItem(e,t)}getAccessToken(e,t,r,o){let i=t.correlationId;this.commonLogger.trace("1t7hz1",i);let s=V.createSearchScopes(t.scopes,i),a=t.authenticationScheme||M.BEARER,c=a&&a.toLowerCase()!==M.BEARER.toLowerCase()?B.ACCESS_TOKEN_WITH_AUTH_SCHEME:B.ACCESS_TOKEN,l={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:c,clientId:this.clientId,realm:o||e.tenantId,target:s,tokenType:a,keyId:t.sshKid},h=r&&r.accessToken||this.getTokenKeys().accessToken,d=[];h.forEach(g=>{if(this.accessTokenKeyMatchesFilter(g,l,!0)){let y=this.getAccessTokenCredential(g,i);y&&this.credentialMatchesFilter(y,l,i)&&d.push(y)}});let m=d.length;return m<1?(this.commonLogger.info("1nckna",i),null):m>1?(this.commonLogger.info("1wkfwp",i),d.forEach(g=>{this.removeAccessToken(this.generateCredentialKey(g),i)}),this.performanceClient.addFields({multiMatchedAT:d.length},i),null):(this.commonLogger.info("06yt98",i),d[0])}accessTokenKeyMatchesFilter(e,t,r){let o=e.toLowerCase();if(t.clientId&&o.indexOf(t.clientId.toLowerCase())===-1||t.homeAccountId&&o.indexOf(t.homeAccountId.toLowerCase())===-1||t.realm&&o.indexOf(t.realm.toLowerCase())===-1)return!1;if(t.target){let i=t.target.asArray();for(let s=0;s<i.length;s++){if(r&&!o.includes(i[s].toLowerCase()))return!1;if(!r&&o.includes(i[s].toLowerCase()))return!0}}return!0}getAccessTokensByFilter(e,t){let r=this.getTokenKeys(),o=[];return r.accessToken.forEach(i=>{if(!this.accessTokenKeyMatchesFilter(i,e,!0))return;let s=this.getAccessTokenCredential(i,t);s&&this.credentialMatchesFilter(s,e,t)&&o.push(s)}),o}getRefreshToken(e,t,r,o){this.commonLogger.trace("0x53vi",r);let i=t?bt:void 0,s={homeAccountId:e.homeAccountId,environment:e.environment,credentialType:B.REFRESH_TOKEN,clientId:this.clientId,familyId:i},a=o&&o.refreshToken||this.getTokenKeys().refreshToken,c=[];a.forEach(h=>{if(this.refreshTokenKeyMatchesFilter(h,s)){let d=this.getRefreshTokenCredential(h,r);d&&this.credentialMatchesFilter(d,s,r)&&c.push(d)}});let l=c.length;return l<1?(this.commonLogger.info("0dlw11",r),null):(l>1&&this.performanceClient.addFields({multiMatchedRT:l},r),this.commonLogger.info("0wcnep",r),c[0])}refreshTokenKeyMatchesFilter(e,t){let r=e.toLowerCase();return!(t.familyId&&r.indexOf(t.familyId.toLowerCase())===-1||!t.familyId&&t.clientId&&r.indexOf(t.clientId.toLowerCase())===-1||t.homeAccountId&&r.indexOf(t.homeAccountId.toLowerCase())===-1)}readAppMetadataFromCache(e,t){let r={environment:e,clientId:this.clientId},o=this.getAppMetadataFilteredBy(r,t),i=Object.keys(o).map(a=>o[a]),s=i.length;if(s<1)return null;if(s>1)throw p(Bs,t);return i[0]}isAppMetadataFOCI(e,t){let r=this.readAppMetadataFromCache(e,t);return!!(r&&r.familyId===bt)}matchHomeAccountId(e,t){return typeof e.homeAccountId=="string"&&t===e.homeAccountId}matchLocalAccountIdFromTokenClaims(e,t){let r=e.oid||e.sub;return t===r}matchLocalAccountIdFromTenantProfile(e,t){return e.localAccountId===t}matchName(e,t){return t.toLowerCase()===e.name?.toLowerCase()}matchUsername(e,t){return!!(e&&typeof e=="string"&&t?.toLowerCase()===e.toLowerCase())}matchLoginHintWithTenantProfile(e,t){return e.loginHint===t||e.username===t||e.upn===t}matchUserAssertionHash(e,t){return!!(e.userAssertionHash&&t===e.userAssertionHash)}matchEnvironment(e,t,r){if(this.staticAuthorityOptions){let i=qc(this.staticAuthorityOptions,this.commonLogger,r);if(i.includes(t)&&i.includes(e.environment))return!0}let o=this.getAuthorityMetadataByAlias(t,r);return!!(o&&o.aliases.indexOf(e.environment)>-1)}matchCredentialType(e,t){return e.credentialType&&t.toLowerCase()===e.credentialType.toLowerCase()}matchClientId(e,t){return!!(e.clientId&&t===e.clientId)}matchFamilyId(e,t){return!!(e.familyId&&t===e.familyId)}matchRealm(e,t){return e.realm?.toLowerCase()===t.toLowerCase()}matchLoginHintFromTokenClaims(e,t){return!!(e.login_hint===t||e.preferred_username===t||e.upn===t||e.emails&&e.emails.includes(t))}matchSid(e,t){return e.sid===t}matchAuthorityType(e,t){return!!(e.authorityType&&t.toLowerCase()===e.authorityType.toLowerCase())}matchTarget(e,t,r){return e.credentialType!==B.ACCESS_TOKEN&&e.credentialType!==B.ACCESS_TOKEN_WITH_AUTH_SCHEME||!e.target?!1:V.fromString(e.target,r).containsScopeSet(t)}matchTokenType(e,t){return!!(e.tokenType&&e.tokenType===t)}matchKeyId(e,t){return!!(e.keyId&&e.keyId===t)}isAppMetadata(e){return e.indexOf(sr)!==-1}isAuthorityMetadata(e){return e.indexOf(ar)!==-1}generateAuthorityMetadataCacheKey(e){return`${ar}-${this.clientId}-${e}`}static toObject(e,t){for(let r in t)e[r]=t[r];return e}},ko=class extends zt{async setAccount(){throw p(w,"")}getAccount(){throw p(w,"")}async setIdTokenCredential(){throw p(w,"")}getIdTokenCredential(){throw p(w,"")}async setAccessTokenCredential(){throw p(w,"")}getAccessTokenCredential(){throw p(w,"")}async setRefreshTokenCredential(){throw p(w,"")}getRefreshTokenCredential(){throw p(w,"")}setAppMetadata(){throw p(w,"")}getAppMetadata(){throw p(w,"")}setServerTelemetry(){throw p(w,"")}getServerTelemetry(){throw p(w,"")}setAuthorityMetadata(){throw p(w,"")}getAuthorityMetadata(){throw p(w,"")}getAuthorityMetadataKeys(){throw p(w,"")}setThrottlingCache(){throw p(w,"")}getThrottlingCache(){throw p(w,"")}removeItem(){throw p(w,"")}getKeys(){throw p(w,"")}getAccountKeys(){throw p(w,"")}getTokenKeys(){throw p(w,"")}generateCredentialKey(){throw p(w,"")}generateAccountKey(){throw p(w,"")}};var nl={NotStarted:0,InProgress:1,Completed:2};var et=class{generateId(){return"callback-id"}startMeasurement(e,t){return{end:()=>null,discard:()=>{},add:()=>{},increment:()=>{},event:{eventId:this.generateId(),status:nl.InProgress,authority:"",libraryName:"",libraryVersion:"",clientId:"",name:e,startTimeMs:Date.now(),correlationId:t||""}}}endMeasurement(){return null}discardMeasurements(){}removePerformanceCallback(){return!0}addPerformanceCallback(){return""}emitEvents(){}addFields(){}addGlobalFields(){}incrementFields(){}cacheEventByCorrelationId(){}};var En={tokenRenewalOffsetSeconds:Ms,preventCorsPreflight:!1},Dm={loggerCallback:()=>{},piiLoggingEnabled:!1,logLevel:v.Info,correlationId:""},xm={async sendGetRequestAsync(){throw p(w,"")},async sendPostRequestAsync(){throw p(w,"")}},Lm={sku:ts,version:Oe,cpu:"",os:""},Hm={clientSecret:"",clientAssertion:void 0},Fm={azureCloudInstance:gt.None,tenant:`${$r}`},Km={application:{appName:"",appVersion:""}};function gr({authOptions:n,systemOptions:e,loggerOptions:t,storageInterface:r,networkInterface:o,cryptoInterface:i,clientCredentials:s,libraryInfo:a,telemetry:c,serverTelemetryManager:l,persistencePlugin:h,serializableCache:d}){let m={...Dm,...t};return{authOptions:Bm(n),systemOptions:{...En,...e},loggerOptions:m,storageInterface:r||new ko(n.clientId,yt,new j(m,Ke,Oe),new et),networkInterface:o||xm,cryptoInterface:i||yt,clientCredentials:s||Hm,libraryInfo:{...Lm,...a},telemetry:{...Km,...c},serverTelemetryManager:l||null,persistencePlugin:h||null,serializableCache:d||null}}function Bm(n){return{clientCapabilities:[],azureCloudOptions:Fm,instanceAware:!1,isMcp:!1,...n}}function Tn(n){return n.authOptions.authority.options.protocolMode===P.OIDC}var An=class{constructor(e,t){this.cache=e,this.hasChanged=t}get cacheHasChanged(){return this.hasChanged}get tokenCache(){return this.cache}};var zm={SW:"sw"},he=class{constructor(e,t){this.cryptoUtils=e,this.performanceClient=t}async generateCnf(e,t){let r=await u(this.generateKid.bind(this),Mt,t,this.performanceClient,e.correlationId)(e),o=this.cryptoUtils.base64UrlEncode(JSON.stringify(r));return{kid:r.kid,reqCnfString:o}}async generateKid(e){return{kid:await this.cryptoUtils.getPublicKeyThumbprint(e),xms_ksl:zm.SW}}async signPopToken(e,t,r){return this.signPayload(e,t,r)}async signPayload(e,t,r,o){let{resourceRequestMethod:i,resourceRequestUri:s,shrClaims:a,shrNonce:c,shrOptions:l}=r,d=(s?new _(s,r.correlationId):void 0)?.getUrlComponents();return this.cryptoUtils.signJwt({at:e,ts:ge(),m:i?.toUpperCase(),u:d?.HostNameAndPort,nonce:c||this.cryptoUtils.createNewGuid(),p:d?.AbsolutePath,q:d?.QueryString?[[],d.QueryString]:void 0,client_claims:a||void 0,...o},t,l,r.correlationId)}};var Be={};Y(Be,{badToken:()=>vo,consentRequired:()=>ec,interactionRequired:()=>Za,interruptedUser:()=>rc,loginRequired:()=>tc,nativeAccountUnavailable:()=>Gm,noTokensFound:()=>In,refreshTokenExpired:()=>qa,uiNotAllowed:()=>Xa});var In="no_tokens_found",Gm="native_account_unavailable",qa="refresh_token_expired",Xa="ui_not_allowed",Za="interaction_required",ec="consent_required",tc="login_required",vo="bad_token",rc="interrupted_user";var il=[Za,ec,tc,vo,Xa,rc],$m=["message_only","additional_action","basic_action","user_password_expired","consent_required","bad_token","ui_not_allowed","interrupted_user"],H=class n extends I{constructor(e,t,r,o,i,s,a,c){super(e,t,r,o),Object.setPrototypeOf(this,n.prototype),this.timestamp=i||"",this.traceId=s||"",this.claims=a||"",this.name="InteractionRequiredAuthError",this.errorNo=c}};function Sn(n,e,t){let r=!!n&&il.indexOf(n)>-1,o=!!t&&$m.indexOf(t)>-1,i=!!e&&il.some(s=>e.indexOf(s)>-1);return r||i||o}function Gt(n,e,t){return new H(n,e,t)}var de=class n extends I{constructor(e,t,r,o,i,s){super(e,t,r,o),this.name="ServerError",this.errorNo=i,this.status=s,Object.setPrototypeOf(this,n.prototype)}};var W={};Y(W,{generateLibraryState:()=>sl,parseRequestState:()=>oc,setRequestState:()=>Vm});function Vm(n,e,t,r){let o=sl(n,r,t);return e?`${o}${jr}${e}`:o}function sl(n,e,t){if(!n)throw p(ln,e);let r={id:n.createNewGuid()};t&&(r.meta=t);let o=JSON.stringify(r);return n.base64Encode(o)}function oc(n,e,t){if(!n)throw p(ln,t);if(!e)throw p(Pt,t);try{let r=e.split(jr),o=r[0],i=r.length>1?r.slice(1).join(jr):"",s=n(o),a=JSON.parse(s);return{userRequestState:i||"",libraryState:a}}catch{throw p(Pt,t)}}var be=class n{constructor(e,t,r,o,i,s,a){this.clientId=e,this.cacheStorage=t,this.cryptoObj=r,this.logger=o,this.performanceClient=i,this.serializableCache=s,this.persistencePlugin=a}validateTokenResponse(e,t,r){if(e.error||e.error_description||e.suberror){let o=`Error(s): ${e.error_codes||vt} - Timestamp: ${e.timestamp||vt} - Description: ${e.error_description||vt} - Correlation ID: ${e.correlation_id||vt} - Trace ID: ${e.trace_id||vt}`,i=e.error_codes?.length?e.error_codes[0]:void 0,s=new de(e.error||"",e.correlation_id||"",o,e.suberror,i,e.status);if(r&&e.status&&e.status>=fs&&e.status<=gs){this.logger.warning(`16ks7j ${s}`,t);return}else if(r&&e.status&&e.status>=ms&&e.status<=ps){this.logger.warning(`0g61x3 ${s}`,t);return}throw Sn(e.error,e.error_description,e.suberror)?new H(e.error||"",e.correlation_id||"",e.error_description,e.suberror,e.timestamp||"",e.trace_id||"",e.claims||"",i):s}}async handleServerTokenResponse(e,t,r,o,i,s,a,c,l,h,d){let m;if(e.id_token&&(m=We(e.id_token||"",this.cryptoObj.base64Decode,o.correlationId),s&&s.nonce&&m.nonce!==s.nonce))throw p(Ks,o.correlationId);this.homeAccountIdentifier=ea(e.client_info||"",t.authorityType,this.logger,this.cryptoObj,o.correlationId,m);let g;s&&s.state&&(g=oc(this.cryptoObj.base64Decode,s.state,o.correlationId)),e.key_id=e.key_id||o.sshKid||void 0;let y=this.generateCacheRecord(e,t,r,o,m,a,s,d),T;try{if(this.persistencePlugin&&this.serializableCache&&(this.logger.verbose("0jbz5k",o.correlationId),T=new An(this.serializableCache,!0),await this.persistencePlugin.beforeCacheAccess(T)),c&&!l&&y.account&&this.cacheStorage.getAllAccounts({homeAccountId:y.account.homeAccountId,environment:y.account.environment},o.correlationId).length<1)return this.logger.warning("1gmt66",o.correlationId),this.performanceClient?.addFields({acntLoggedOut:!0},o.correlationId),await n.generateAuthenticationResult(this.cryptoObj,t,y,!1,o,this.performanceClient,m,g,void 0,h);await this.cacheStorage.saveCacheRecord(y,o.correlationId,ro(m||{}),i,o.storeInCache)}finally{this.persistencePlugin&&this.serializableCache&&T&&(this.logger.verbose("1bh17u",o.correlationId),await this.persistencePlugin.afterCacheAccess(T))}return n.generateAuthenticationResult(this.cryptoObj,t,y,!1,o,this.performanceClient,m,g,e,h)}generateCacheRecord(e,t,r,o,i,s,a,c){let l=t.getPreferredCache();if(!l)throw p(to,o.correlationId);let h=Nt(i),d,m;e.id_token&&i&&(d=Ma(this.homeAccountIdentifier,l,e.id_token,this.clientId,h||""),m=wn(this.cacheStorage,t,this.homeAccountIdentifier,this.cryptoObj.base64Decode,o.correlationId,i,e.client_info,l,h,a,void 0,this.logger,this.performanceClient));let g=null;if(e.access_token){let k=e.scope?V.fromString(e.scope,o.correlationId):new V(o.scopes||[],o.correlationId),N=(typeof e.expires_in=="string"?parseInt(e.expires_in,10):e.expires_in)||0,Te=(typeof e.ext_expires_in=="string"?parseInt(e.ext_expires_in,10):e.ext_expires_in)||0,K=(typeof e.refresh_in=="string"?parseInt(e.refresh_in,10):e.refresh_in)||void 0,ne=r+N,De=ne+Te,je=K&&K>0?r+K:void 0;g=Ua(this.homeAccountIdentifier,l,e.access_token,this.clientId,h||t.tenant||"",k.printScopes(),ne,De,this.cryptoObj.base64Decode,o.correlationId,je,e.token_type,s,e.key_id,c);let er=o.resource||null;er&&(g.resource=er)}let y=null;if(e.refresh_token){let k;if(e.refresh_token_expires_in){let N=typeof e.refresh_token_expires_in=="string"?parseInt(e.refresh_token_expires_in,10):e.refresh_token_expires_in;k=r+N,this.performanceClient?.addFields({ntwkRtExpiresOnSeconds:k},o.correlationId)}y=Da(this.homeAccountIdentifier,l,e.refresh_token,this.clientId,e.foci,s,k)}let T=null;return e.foci&&(T={clientId:this.clientId,environment:l,familyId:e.foci}),{account:m,idToken:d,accessToken:g,refreshToken:y,appMetadata:T}}static async generateAuthenticationResult(e,t,r,o,i,s,a,c,l,h){let d="",m=[],g=null,y,T,k="";if(r.accessToken){if(r.accessToken.tokenType===M.POP&&!i.popKid){let ne=new he(e,s),{secret:De,keyId:je}=r.accessToken;if(!je)throw p(Ys,i.correlationId);d=await ne.signPopToken(De,je,i)}else d=r.accessToken.secret;m=V.fromString(r.accessToken.target,i.correlationId).asArray(),g=ho(r.accessToken.expiresOn),y=ho(r.accessToken.extendedExpiresOn),r.accessToken.refreshOn&&(T=ho(r.accessToken.refreshOn))}r.appMetadata&&(k=r.appMetadata.familyId===bt?bt:"");let N=a?.oid||a?.sub||"",Te=a?.tid||"";if(l?.spa_accountid&&r.account){r.account.nativeAccountId=l?.spa_accountid;let ne=Te||r.account.realm;if(r.account.tenantProfiles){let De=r.account.tenantProfiles.find(je=>je.tenantId===ne);De&&(De.nativeAccountId=l.spa_accountid)}}let K=r.account?pt(dr(r.account),void 0,a,r.idToken?.secret):null;return{authority:t.canonicalAuthority,uniqueId:N,tenantId:Te,scopes:m,account:K,idToken:r?.idToken?.secret||"",idTokenClaims:a||{},accessToken:d,fromCache:o,expiresOn:g,extExpiresOn:y,refreshOn:T,correlationId:i.correlationId,requestId:h||"",familyId:k,tokenType:r.accessToken?.tokenType||"",state:c?c.userRequestState:"",cloudGraphHostName:r.account?.cloudGraphHostName||"",msGraphHost:r.account?.msGraphHost||"",code:l?.spa_code,fromPlatformBroker:!1}}};function wn(n,e,t,r,o,i,s,a,c,l,h,d,m){d?.verbose("09jz0t",o);let g=a||e.getPreferredCache(),y=n.getAccountsFilteredBy({homeAccountId:t,environment:g},o);m?.addFields({cacheMatchedAccounts:y.length},o),y.length>1&&d?.warning("0x7ad1",o);let k=(y.length===1?y[0]:null)||Zs({homeAccountId:t,idTokenClaims:i,clientInfo:s,environment:a,cloudGraphHostName:l?.cloud_graph_host_name,msGraphHost:l?.msgraph_host,nativeAccountId:h},e,o,r),N=k.tenantProfiles||[],Te=c||k.realm;if(Te&&!N.find(K=>K.tenantId===Te)){let K=He(t,k.localAccountId,Te,h,i);N.push(K)}return k.tenantProfiles=N,k}var oe={HOME_ACCOUNT_ID:"home_account_id",UPN:"UPN"};async function _n(n,e,t,r){return typeof n=="string"?n:n({clientId:e,tokenEndpoint:t,fmiPath:r})}function tt(n,e,t){return{clientId:n,authority:e.authority,scopes:e.scopes,homeAccountIdentifier:t,claims:e.claims,authenticationScheme:e.authenticationScheme,resourceRequestMethod:e.resourceRequestMethod,resourceRequestUri:e.resourceRequestUri,shrClaims:e.shrClaims,sshKid:e.sshKid,embeddedClientId:e.embeddedClientId||e.extraParameters?.clientId,resource:e.resource}}var rt=class n{static generateThrottlingStorageKey(e){return`${qr}.${JSON.stringify(e)}`}static preProcess(e,t,r){let o=n.generateThrottlingStorageKey(t),i=e.getThrottlingCache(o,r);if(i){if(i.throttleTime<Date.now()){e.removeItem(o,r);return}throw new de(i.errorCodes?.join(" ")||"",r,i.errorMessage,i.subError)}}static postProcess(e,t,r,o){if(n.checkResponseStatus(r)||n.checkResponseForRetryAfter(r)){let i={throttleTime:n.calculateThrottleTime(parseInt(r.headers[L.RETRY_AFTER])),error:r.body.error,errorCodes:r.body.error_codes,errorMessage:r.body.error_description,subError:r.body.suberror};e.setThrottlingCache(n.generateThrottlingStorageKey(t),i,o)}}static checkResponseStatus(e){return e.status===429||e.status>=500&&e.status<600}static checkResponseForRetryAfter(e){return e.headers?e.headers.hasOwnProperty(L.RETRY_AFTER)&&(e.status<200||e.status>=300):!1}static calculateThrottleTime(e){let t=e<=0?0:e,r=Date.now()/1e3;return Math.floor(Math.min(r+(t||ks),r+vs)*1e3)}static removeThrottle(e,t,r,o){let i=tt(t,r,o),s=this.generateThrottlingStorageKey(i);e.removeItem(s,r.correlationId)}};var Cr=class n extends I{constructor(e,t,r){super(e.errorCode,e.correlationId,e.errorMessage,e.subError),Object.setPrototypeOf(this,n.prototype),this.name="NetworkError",this.error=e,this.httpStatus=t,this.responseHeaders=r}};function $t(n,e,t,r){return n.errorMessage=`${n.errorMessage}, additionalErrorInfo: error.name:${r?.name}, error.message:${r?.message}`,new Cr(n,e,t)}function Rn(n,e,t){let r={};if(r[L.CONTENT_TYPE]=ss,!e&&t)switch(t.type){case oe.HOME_ACCOUNT_ID:try{let o=Le(t.credential);r[L.CCS_HEADER]=`Oid:${o.uid}@${o.utid}`}catch(o){n.verbose(`1qhtee ${o}`,"")}break;case oe.UPN:r[L.CCS_HEADER]=`UPN: ${t.credential}`;break}return r}function kn(n,e,t,r){let o=new Map;return n.embeddedClientId&&Ze(o,e,t),n.extraQueryParameters&&Xe(o,n.extraQueryParameters),Ft(o,n.correlationId),Ut(o,n.correlationId,r),Fe(o)}async function vn(n,e,t,r,o,i,s,a,c,l){let h=await jm(r,n,{body:e,headers:t},o,i,s,a,c);return l&&h.status<500&&h.status!==429&&l.clearTelemetryCache(),h}async function jm(n,e,t,r,o,i,s,a){rt.preProcess(o,n,r);let c;try{c=await u(i.sendPostRequestAsync.bind(i),pa,s,a,r)(e,t);let l=c.headers||{};a?.addFields({refreshTokenSize:c.body.refresh_token?.length||0,httpVerToken:l[L.X_MS_HTTP_VERSION]||"",requestId:l[L.X_MS_REQUEST_ID]||""},r)}catch(l){if(l instanceof Cr){let h=l.responseHeaders;throw h&&a?.addFields({httpVerToken:h[L.X_MS_HTTP_VERSION]||"",requestId:h[L.X_MS_REQUEST_ID]||"",contentTypeHeader:h[L.CONTENT_TYPE]||void 0,contentLengthHeader:h[L.CONTENT_LENGTH]||void 0,httpStatus:l.httpStatus},r),l.error}throw l instanceof I?l:p(xs,r)}return rt.postProcess(o,n,c,r),c}var Vt=class{constructor(e,t){this.includeRedirectUri=!0,this.config=gr(e),this.logger=new j(this.config.loggerOptions,Ke,Oe),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t,this.oidcDefaultScopes=this.config.authOptions.authority.options.OIDCOptions?.defaultScopes}async acquireToken(e,t,r){if(!e.code)throw p(zs,e.correlationId);r&&r.cloud_instance_host_name&&await u(this.updateTokenEndpointAuthority.bind(this),Sa,this.logger,this.performanceClient,e.correlationId)(r.cloud_instance_host_name,e.correlationId);let o=ge(),i=await u(this.executeTokenRequest.bind(this),Aa,this.logger,this.performanceClient,e.correlationId)(this.authority,e,this.serverTelemetryManager),s=i.headers?.[L.X_MS_REQUEST_ID],a=new be(this.config.authOptions.clientId,this.cacheManager,this.cryptoUtils,this.logger,this.performanceClient,this.config.serializableCache,this.config.persistencePlugin);return a.validateTokenResponse(i.body,e.correlationId),u(a.handleServerTokenResponse.bind(a),co,this.logger,this.performanceClient,e.correlationId)(i.body,this.authority,o,e,t,r,void 0,void 0,void 0,s)}getLogoutUri(e){if(!e)throw S(aa,"");let t=this.createLogoutUrlQueryString(e);return _.appendQueryString(this.authority.endSessionEndpoint,t)}async executeTokenRequest(e,t,r){let o=kn(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri,this.performanceClient),i=_.appendQueryString(e.tokenEndpoint,o),s=await u(this.createTokenRequestBody.bind(this),Ia,this.logger,this.performanceClient,t.correlationId)(t),a;if(t.clientInfo)try{let h=hr(t.clientInfo,this.cryptoUtils.base64Decode);a={credential:`${h.uid}${ir}${h.utid}`,type:oe.HOME_ACCOUNT_ID}}catch(h){this.logger.verbose(`0wznt3 ${h}`,t.correlationId)}let c=Rn(this.logger,this.config.systemOptions.preventCorsPreflight,a||t.ccsCredential),l=tt(this.config.authOptions.clientId,t);return u(vn,ga,this.logger,this.performanceClient,t.correlationId)(i,s,c,l,t.correlationId,this.cacheManager,this.networkClient,this.logger,this.performanceClient,r)}async createTokenRequestBody(e){let t=new Map;if(xt(t,e.embeddedClientId||e.extraParameters?.[xe]||this.config.authOptions.clientId),this.includeRedirectUri)Lt(t,e.redirectUri);else if(!e.redirectUri)throw S(ta,e.correlationId);if(Dt(t,e.scopes,e.correlationId,!0,this.oidcDefaultScopes),_o(t,e.resource),$a(t,e.code),mo(t,this.config.libraryInfo),po(t,this.config.telemetry.application),wo(t),this.serverTelemetryManager&&!Tn(this.config)&&So(t,this.serverTelemetryManager),e.codeVerifier&&ja(t,e.codeVerifier),this.config.clientCredentials.clientSecret&&go(t,this.config.clientCredentials.clientSecret),this.config.clientCredentials.clientAssertion){let o=this.config.clientCredentials.clientAssertion;Co(t,await _n(o.assertion,this.config.authOptions.clientId,e.resourceRequestUri)),yo(t,o.assertionType)}if(Eo(t,Yr.AUTHORIZATION_CODE_GRANT),Kt(t),e.authenticationScheme===M.POP){let o=new he(this.cryptoUtils,this.performanceClient),i;e.popKid?i=this.cryptoUtils.encodeKid(e.popKid):i=(await u(o.generateCnf.bind(o),Mt,this.logger,this.performanceClient,e.correlationId)(e,this.logger)).reqCnfString,Ao(t,i)}else if(e.authenticationScheme===M.SSH)if(e.sshJwk)Io(t,e.sshJwk);else throw S(no,e.correlationId);let r;if(e.clientInfo)try{let o=hr(e.clientInfo,this.cryptoUtils.base64Decode);r={credential:`${o.uid}${ir}${o.utid}`,type:oe.HOME_ACCOUNT_ID}}catch(o){this.logger.verbose(`0wznt3 ${o}`,e.correlationId)}else r=e.ccsCredential;if(this.config.systemOptions.preventCorsPreflight&&r)switch(r.type){case oe.HOME_ACCOUNT_ID:try{let o=Le(r.credential);qe(t,o)}catch(o){this.logger.verbose(`1qhtee ${o}`,e.correlationId)}break;case oe.UPN:Ct(t,r.credential);break}return e.embeddedClientId&&Ze(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.extraParameters&&Xe(t,e.extraParameters),e.enableSpaAuthorizationCode&&(!e.extraParameters||!e.extraParameters[jo])&&Xe(t,{[jo]:"1"}),Ut(t,e.correlationId,this.performanceClient),Ht(t,e.correlationId,e.claims,this.config.authOptions.clientCapabilities,e.skipBrokerClaims),Fe(t)}createLogoutUrlQueryString(e){let t=new Map;return e.postLogoutRedirectUri&&Fa(t,e.postLogoutRedirectUri),e.correlationId&&Ft(t,e.correlationId),e.idTokenHint&&Ka(t,e.idTokenHint),e.state&&fo(t,e.state),e.logoutHint&&Wa(t,e.logoutHint),e.extraQueryParameters&&Xe(t,e.extraQueryParameters),this.config.authOptions.instanceAware&&To(t),Fe(t)}async updateTokenEndpointAuthority(e,t){let r=`https://${e}/${this.authority.tenant}/`,o=await La(r,this.networkClient,this.cacheManager,this.authority.options,this.logger,t,this.performanceClient);this.authority=o}};var Ie={};Y(Ie,{getAuthorizationCodePayload:()=>Ym,getAuthorizeUrl:()=>Wm,getStandardAuthorizeRequestParameters:()=>Jm,validateAuthorizationResponse:()=>al});function Jm(n,e,t,r){let o=e.correlationId,i=new Map;xt(i,e.embeddedClientId||e.extraQueryParameters?.[xe]||n.clientId);let s=[...e.scopes||[],...e.extraScopesToConsent||[]];if(Dt(i,s,e.correlationId,!0,n.authority.options.OIDCOptions?.defaultScopes),_o(i,e.resource),Lt(i,e.redirectUri),Ft(i,o),Ha(i,e.responseMode),Kt(i),Ja(i),e.prompt&&(za(i,e.prompt),r?.addFields({prompt:e.prompt},o)),e.domainHint&&(Ba(i,e.domainHint),r?.addFields({domainHintFromRequest:!0},o)),e.prompt!==Wr.SELECT_ACCOUNT)if(e.sid&&e.prompt===Wr.NONE)t.verbose("1tvqyx",e.correlationId),yn(i,e.sid),r?.addFields({sidFromRequest:!0},o);else if(e.account){let a=qm(e.account),c=Xm(e.account);if(c&&e.domainHint&&(t.warning("0wkg3v",e.correlationId),c=null),c){t.verbose("1eyfsw",e.correlationId),pr(i,c),r?.addFields({loginHintFromClaim:!0},o);try{let l=Le(e.account.homeAccountId);qe(i,l)}catch{t.verbose("12ugck",e.correlationId)}}else if(a&&e.prompt===Wr.NONE){t.verbose("1rmd8s",e.correlationId),yn(i,a),r?.addFields({sidFromClaim:!0},o);try{let l=Le(e.account.homeAccountId);qe(i,l)}catch{t.verbose("12ugck",e.correlationId)}}else if(e.loginHint)t.verbose("0y3007",e.correlationId),pr(i,e.loginHint),Ct(i,e.loginHint),r?.addFields({loginHintFromRequest:!0},o);else if(e.account.username){t.verbose("02f507",e.correlationId),pr(i,e.account.username),r?.addFields({loginHintFromUpn:!0},o);try{let l=Le(e.account.homeAccountId);qe(i,l)}catch{t.verbose("12ugck",e.correlationId)}}}else e.loginHint&&(t.verbose("0g01ey",e.correlationId),pr(i,e.loginHint),Ct(i,e.loginHint),r?.addFields({loginHintFromRequest:!0},o));else t.verbose("169k9v",e.correlationId);return e.nonce&&Ga(i,e.nonce),e.state&&fo(i,e.state),e.embeddedClientId&&Ze(i,n.clientId,n.redirectUri),Ht(i,e.correlationId,e.claims,n.clientCapabilities,e.skipBrokerClaims),n.instanceAware&&(!e.extraQueryParameters||!Object.keys(e.extraQueryParameters).includes(rr))&&To(i),i}function Wm(n,e){let t=Fe(e);return _.appendQueryString(n.authorizationEndpoint,t)}function Ym(n,e,t){if(al(n,e,t),!n.code)throw p(Js,t);return n}function al(n,e,t){if(!n.state||!e)throw n.state?p(an,t,"Cached State"):p(an,t,"Server State");let r,o;try{r=decodeURIComponent(n.state)}catch{throw p(Pt,t,n.state)}try{o=decodeURIComponent(e)}catch{throw p(Pt,t,n.state)}if(r!==o)throw p(Fs,t);if(n.error||n.error_description||n.suberror){let i=Qm(n);throw Sn(n.error,n.error_description,n.suberror)?new H(n.error||"",n.correlation_id||t,n.error_description,n.suberror,n.timestamp||"",n.trace_id||"",n.claims||"",i):new de(n.error||"",n.correlation_id||t,n.error_description,n.suberror,i)}}function Qm(n){let e="code=",t=n.error_uri?.lastIndexOf(e);return t&&t>=0?n.error_uri?.substring(t+e.length):void 0}function qm(n){return n.idTokenClaims?.sid||null}function Xm(n){return n.loginHint||n.idTokenClaims?.login_hint||null}var nc=class n extends I{constructor(e,t,r){super(e,t,r),this.name="JoseHeaderError",Object.setPrototypeOf(this,n.prototype)}};function ic(n,e){return new nc(n,e)}var cl="missing_kid_error",ll="missing_alg_error";var Oo=class n{constructor(e){this.typ=e.typ,this.alg=e.alg,this.kid=e.kid}static getShrHeaderString(e){if(!e.kid)throw ic(cl,"");if(!e.alg)throw ic(ll,"");let t=new n({typ:e.typ||Ns.Pop,kid:e.kid,alg:e.alg});return JSON.stringify(t)}};var Zm=300,bo=class{constructor(e,t){this.config=gr(e),this.logger=new j(this.config.loggerOptions,Ke,Oe),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t}async acquireToken(e,t){let r=ge(),o=await u(this.executeTokenRequest.bind(this),Ca,this.logger,this.performanceClient,e.correlationId)(e,this.authority),i=o.headers?.[L.X_MS_REQUEST_ID],s=new be(this.config.authOptions.clientId,this.cacheManager,this.cryptoUtils,this.logger,this.performanceClient,this.config.serializableCache,this.config.persistencePlugin);return s.validateTokenResponse(o.body,e.correlationId),u(s.handleServerTokenResponse.bind(s),co,this.logger,this.performanceClient,e.correlationId)(o.body,this.authority,r,e,t,void 0,void 0,!0,e.forceCache,i)}async acquireTokenByRefreshToken(e,t){if(!e)throw S(sa,"");if(!e.account)throw p(eo,e.correlationId);if(this.cacheManager.isAppMetadataFOCI(e.account.environment,e.correlationId))try{return await u(this.acquireTokenWithCachedRefreshToken.bind(this),ao,this.logger,this.performanceClient,e.correlationId)(e,!0,t)}catch(o){let i=o instanceof H&&o.errorCode===In,s=o instanceof de&&o.errorCode===bs&&o.subError===Ps;if(i||s)return u(this.acquireTokenWithCachedRefreshToken.bind(this),ao,this.logger,this.performanceClient,e.correlationId)(e,!1,t);throw o}return u(this.acquireTokenWithCachedRefreshToken.bind(this),ao,this.logger,this.performanceClient,e.correlationId)(e,!1,t)}async acquireTokenWithCachedRefreshToken(e,t,r){let o=J(this.cacheManager.getRefreshToken.bind(this.cacheManager),Pa,this.logger,this.performanceClient,e.correlationId)(e.account,t,e.correlationId,void 0);if(!o)throw Gt(In,e.correlationId);if(o.expiresOn){let s=e.refreshTokenExpirationOffsetSeconds||Zm;if(this.performanceClient?.addFields({cacheRtExpiresOnSeconds:Number(o.expiresOn),rtOffsetSeconds:s},e.correlationId),ur(o.expiresOn,s))throw Gt(qa,e.correlationId)}let i={...e,refreshToken:o.secret,authenticationScheme:e.authenticationScheme||M.BEARER,ccsCredential:{credential:e.account.homeAccountId,type:oe.HOME_ACCOUNT_ID}};try{return await u(this.acquireToken.bind(this),ya,this.logger,this.performanceClient,e.correlationId)(i,r)}catch(s){if(s instanceof H&&s.subError===vo){this.logger.verbose("1pg3ap",e.correlationId);let a=this.cacheManager.generateCredentialKey(o);this.cacheManager.removeRefreshToken(a,e.correlationId)}throw s}}async executeTokenRequest(e,t){let r=kn(e,this.config.authOptions.clientId,this.config.authOptions.redirectUri,this.performanceClient),o=_.appendQueryString(t.tokenEndpoint,r),i=await u(this.createTokenRequestBody.bind(this),Ea,this.logger,this.performanceClient,e.correlationId)(e),s=Rn(this.logger,this.config.systemOptions.preventCorsPreflight,e.ccsCredential),a=tt(this.config.authOptions.clientId,e);return u(vn,fa,this.logger,this.performanceClient,e.correlationId)(o,i,s,a,e.correlationId,this.cacheManager,this.networkClient,this.logger,this.performanceClient,this.serverTelemetryManager)}async createTokenRequestBody(e){let t=new Map;if(xt(t,e.embeddedClientId||e.extraParameters?.[xe]||this.config.authOptions.clientId),e.redirectUri&&Lt(t,e.redirectUri),Dt(t,e.scopes,e.correlationId,!0,this.config.authOptions.authority.options.OIDCOptions?.defaultScopes),Eo(t,Yr.REFRESH_TOKEN_GRANT),Kt(t),mo(t,this.config.libraryInfo),po(t,this.config.telemetry.application),wo(t),this.serverTelemetryManager&&!Tn(this.config)&&So(t,this.serverTelemetryManager),Va(t,e.refreshToken),this.config.clientCredentials.clientSecret&&go(t,this.config.clientCredentials.clientSecret),this.config.clientCredentials.clientAssertion){let r=this.config.clientCredentials.clientAssertion;Co(t,await _n(r.assertion,this.config.authOptions.clientId,e.resourceRequestUri)),yo(t,r.assertionType)}if(e.authenticationScheme===M.POP){let r=new he(this.cryptoUtils,this.performanceClient),o;e.popKid?o=this.cryptoUtils.encodeKid(e.popKid):o=(await u(r.generateCnf.bind(r),Mt,this.logger,this.performanceClient,e.correlationId)(e,this.logger)).reqCnfString,Ao(t,o)}else if(e.authenticationScheme===M.SSH)if(e.sshJwk)Io(t,e.sshJwk);else throw S(no,e.correlationId);if(this.config.systemOptions.preventCorsPreflight&&e.ccsCredential)switch(e.ccsCredential.type){case oe.HOME_ACCOUNT_ID:try{let r=Le(e.ccsCredential.credential);qe(t,r)}catch(r){this.logger.verbose(`1qhtee ${r}`,e.correlationId)}break;case oe.UPN:Ct(t,e.ccsCredential.credential);break}return e.embeddedClientId&&Ze(t,this.config.authOptions.clientId,this.config.authOptions.redirectUri),e.extraParameters&&Xe(t,{...e.extraParameters}),Ut(t,e.correlationId,this.performanceClient),Ht(t,e.correlationId,e.claims,this.config.authOptions.clientCapabilities,e.skipBrokerClaims),Fe(t)}};var hl=",",dl="|";function ep(n){let{skus:e,libraryName:t,libraryVersion:r,extensionName:o,extensionVersion:i}=n,s=new Map([[0,[t,r]],[2,[o,i]]]),a=[];if(e?.length){if(a=e.split(hl),a.length<4)return e}else a=Array.from({length:4},()=>dl);return s.forEach((c,l)=>{c.length===2&&c[0]?.length&&c[1]?.length&&tp({skuArr:a,index:l,skuName:c[0],skuVersion:c[1]})}),a.join(hl)}function tp(n){let{skuArr:e,index:t,skuName:r,skuVersion:o}=n;t>=e.length||(e[t]=[r,o].join(dl))}var Tt=class n{constructor(e,t){this.cacheOutcome=ke.NOT_APPLICABLE,this.cacheManager=t,this.apiId=e.apiId,this.correlationId=e.correlationId,this.wrapperSKU=e.wrapperSKU||"",this.wrapperVer=e.wrapperVer||"",this.telemetryCacheKey=Qr+Ot+e.clientId}generateCurrentRequestHeaderValue(){let e=`${this.apiId}${ut}${this.cacheOutcome}`,t=[this.wrapperSKU,this.wrapperVer],r=this.getNativeBrokerErrorCode();r?.length&&t.push(`broker_error=${r}`);let o=t.join(ut),i=this.getRegionDiscoveryFields(),s=[e,i].join(ut);return[en,s,o].join(tn)}generateLastRequestHeaderValue(){let e=this.getLastRequests(),t=n.maxErrorsToSend(e),r=e.failedRequests.slice(0,2*t).join(ut),o=e.errors.slice(0,t).join(ut),i=e.errors.length,s=t<i?ws:_s,a=[i,s].join(ut);return[en,e.cacheHits,r,o,a].join(tn)}cacheFailedRequest(e){try{let t=this.getLastRequests();t.errors.length>=Ss&&(t.failedRequests.shift(),t.failedRequests.shift(),t.errors.shift()),t.failedRequests.push(this.apiId,this.correlationId),e instanceof Error&&e&&e.toString()?e instanceof I?e.subError?t.errors.push(e.subError):e.errorCode?t.errors.push(e.errorCode):t.errors.push(e.toString()):t.errors.push(e.toString()):t.errors.push(Rs),this.cacheManager.setServerTelemetry(this.telemetryCacheKey,t,this.correlationId)}catch{}}incrementCacheHits(){let e=this.getLastRequests();return e.cacheHits+=1,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId),e.cacheHits}getLastRequests(){let e={failedRequests:[],errors:[],cacheHits:0};return this.cacheManager.getServerTelemetry(this.telemetryCacheKey,this.correlationId)||e}clearTelemetryCache(){let e=this.getLastRequests(),t=n.maxErrorsToSend(e),r=e.errors.length;if(t===r)this.cacheManager.removeItem(this.telemetryCacheKey,this.correlationId);else{let o={failedRequests:e.failedRequests.slice(t*2),errors:e.errors.slice(t),cacheHits:0};this.cacheManager.setServerTelemetry(this.telemetryCacheKey,o,this.correlationId)}}static maxErrorsToSend(e){let t,r=0,o=0,i=e.errors.length;for(t=0;t<i;t++){let s=e.failedRequests[2*t]||"",a=e.failedRequests[2*t+1]||"",c=e.errors[t]||"";if(o+=s.toString().length+a.toString().length+c.length+3,o<Is)r+=1;else break}return r}getRegionDiscoveryFields(){let e=[];return e.push(this.regionUsed||""),e.push(this.regionSource||""),e.push(this.regionOutcome||""),e.join(",")}updateRegionDiscoveryMetadata(e){this.regionUsed=e.region_used,this.regionSource=e.region_source,this.regionOutcome=e.region_outcome}setCacheOutcome(e){this.cacheOutcome=e}setNativeBrokerErrorCode(e){let t=this.getLastRequests();t.nativeBrokerErrorCode=e,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,t,this.correlationId)}getNativeBrokerErrorCode(){return this.getLastRequests().nativeBrokerErrorCode}clearNativeBrokerErrorCode(){let e=this.getLastRequests();delete e.nativeBrokerErrorCode,this.cacheManager.setServerTelemetry(this.telemetryCacheKey,e,this.correlationId)}static makeExtraSkuString(e){return ep(e)}},Po=class extends Tt{constructor(){super({clientId:"",apiId:0,correlationId:"",forceRefresh:!1},{})}generateCurrentRequestHeaderValue(){return""}generateLastRequestHeaderValue(){return""}cacheFailedRequest(){}incrementCacheHits(){return 0}clearTelemetryCache(){}getRegionDiscoveryFields(){return""}updateRegionDiscoveryMetadata(){}setCacheOutcome(){}setNativeBrokerErrorCode(){}getNativeBrokerErrorCode(){}clearNativeBrokerErrorCode(){}};var No=class{constructor(e,t){this.config=gr(e),this.logger=new j(this.config.loggerOptions,Ke,Oe),this.cryptoUtils=this.config.cryptoInterface,this.cacheManager=this.config.storageInterface,this.networkClient=this.config.networkInterface,this.serverTelemetryManager=this.config.serverTelemetryManager,this.authority=this.config.authOptions.authority,this.performanceClient=t}async acquireCachedToken(e){let t=ke.NOT_APPLICABLE;if(e.forceRefresh||!le.isEmptyObj(e.claims))throw this.setCacheOutcome(ke.FORCE_REFRESH_OR_CLAIMS,e.correlationId),p(lr,e.correlationId);if(!e.account)throw p(eo,e.correlationId);let r=e.account.tenantId||tl(e.authority,e.correlationId),o=this.cacheManager.getTokenKeys(),i=this.cacheManager.getAccessToken(e.account,e,o,r);if(i){if(Na(i.cachedAt)||ur(i.expiresOn,this.config.systemOptions.tokenRenewalOffsetSeconds))throw this.setCacheOutcome(ke.CACHED_ACCESS_TOKEN_EXPIRED,e.correlationId),p(lr,e.correlationId);if(e.resource){if(i.resource!==e.resource)throw this.setCacheOutcome(ke.NO_CACHED_ACCESS_TOKEN,e.correlationId),p(lr,e.correlationId)}else i.refreshOn&&ur(i.refreshOn,0)&&(t=ke.PROACTIVELY_REFRESHED)}else throw this.setCacheOutcome(ke.NO_CACHED_ACCESS_TOKEN,e.correlationId),p(lr,e.correlationId);let s=e.authority||this.authority.getPreferredCache(),a={account:this.cacheManager.getAccount(this.cacheManager.generateAccountKey(e.account),e.correlationId),accessToken:i,idToken:this.cacheManager.getIdToken(e.account,e.correlationId,o,r),refreshToken:null,appMetadata:this.cacheManager.readAppMetadataFromCache(s,e.correlationId)};return this.setCacheOutcome(t,e.correlationId),this.config.serverTelemetryManager&&this.config.serverTelemetryManager.incrementCacheHits(),[await u(this.generateResultFromCacheRecord.bind(this),Ta,this.logger,this.performanceClient,e.correlationId)(a,e),t]}setCacheOutcome(e,t){this.serverTelemetryManager?.setCacheOutcome(e),this.performanceClient?.addFields({cacheOutcome:e},t),e!==ke.NOT_APPLICABLE&&this.logger.info(`09ingz ${e}`,t)}async generateResultFromCacheRecord(e,t){let r;return e.idToken&&(r=We(e.idToken.secret,this.config.cryptoInterface.base64Decode,t.correlationId)),be.generateAuthenticationResult(this.cryptoUtils,this.authority,e,!0,t,this.performanceClient,r)}};var sc={sendGetRequestAsync:()=>Promise.reject(p(w,"")),sendPostRequestAsync:()=>Promise.reject(p(w,""))};function Mo(n,e){if(n){if(e.resource&&(ul(e.extraParameters)||ul(e.extraQueryParameters)))throw p(qs,e.correlationId||"");if(!e.resource)throw p(Qs,e.correlationId||"")}}function ul(n){return n?Object.prototype.hasOwnProperty.call(n,"resource"):!1}var ml="acquireTokenFromCache",pl="acquireTokenByRefreshToken",fl="acquireTokenSilentAsync",gl="cryptoOptsGetPublicKeyThumbprint",Cl="cryptoOptsSignJwt",yl="silentCacheClientAcquireToken",El="silentIframeClientAcquireToken",Tl="awaitConcurrentIframe",Al="silentRefreshClientAcquireToken",Pe="standardInteractionClientGetDiscoveredAuthority",yr="nativeInteractionClientAcquireToken",Il="nativeInteractionClientAcquireToken",Sl="refreshTokenClientAcquireTokenByRefreshToken",ac="acquireTokenBySilentIframe",Er="initializeBaseRequest",wl="initializeSilentRequest",_l="initializeCache",cc="silentIframeClientTokenHelper",On="silentHandlerInitiateAuthRequest",Tr="silentHandlerMonitorIframeForHash",Se="standardInteractionClientCreateAuthCodeClient",At="standardInteractionClientGetClientConfiguration",ot="standardInteractionClientInitializeAuthorizationRequest",Rl="silentFlowClientAcquireCachedToken",kl="getStandardParams",vl="handleCodeResponse",Ar="handleResponseEar",lc="handleResponsePlatformBroker",nt="handleResponseCode",Ol="authClientAcquireToken",jt="deserializeResponse",bl="authorityFactoryCreateDiscoveredInstance",Pl="acquireTokenByCodeAsync",Nl="handleRedirectPromise",Ml="handleNativeRedirectPromise",Ul="nativeMessageHandlerHandshake",hc="removeHiddenIframe",Dl="importExistingCache",Ne="generatePkceCodes",xl="generateCodeVerifier",Ll="generateCodeChallengeFromVerifier",Hl="sha256Digest",Fl="getRandomValues",dc="generateHKDF",Kl="generateBaseKey",Bl="base64Decode",zl="urlEncodeArr",Gl="encrypt",uc="decrypt",Ir="generateEarKey",$l="decryptEarResponse";var Vl="waitForBridgeLateResponse";function Sr(n){return`See https://aka.ms/msal.js.errors#${n} for details`}var Jt=class n extends I{constructor(e,t,r){super(e,t,Sr(e),r),Object.setPrototypeOf(this,n.prototype),this.name="BrowserAuthError"}};function f(n,e,t){return new Jt(n,e,t)}var mc="pkce_not_created",pc="ear_jwk_empty",jl="ear_jwe_empty",fc="crypto_nonexistent",wr="empty_navigate_uri",Jl="hash_empty_error",_r="no_state_in_hash",Wl="hash_does_not_contain_known_properties",bn="unable_to_parse_state",Yl="state_interaction_type_mismatch",Ql="interaction_in_progress",ql="interaction_in_progress_cancelled",Xl="popup_window_error",Zl="empty_window_error",Wt="user_cancelled",Pn="redirect_bridge_empty_response",eh="redirect_in_iframe",th="block_iframe_reload",rh="block_nested_popups",oh="popup_relay_unsupported_flow";var Rr="silent_logout_unsupported",nh="no_account_error";var ih="no_token_request_cache_error",sh="unable_to_parse_token_request_cache_error";var Nn="non_browser_environment",kr="database_not_open",Uo="no_network_connectivity",ah="post_request_failed",ch="get_request_failed",gc="failed_to_parse_response";var Mn="crypto_key_not_found",Do="invalid_public_jwk",lh="auth_code_required",hh="auth_code_or_nativeAccountId_required",dh="spa_code_and_nativeAccountId_present",Un="database_unavailable",uh="unable_to_acquire_token_from_native_platform",mh="native_handshake_timeout",ph="native_extension_not_installed",Dn="native_connection_not_established",vr="uninitialized_public_client_application",fh="native_prompt_not_supported",gh="invalid_base64_string",Ch="invalid_pop_token_request",yh="failed_to_build_headers",Eh="failed_to_parse_headers",xn="failed_to_decrypt_ear_response",it="timed_out",Th="empty_response";function b(n){return new TextDecoder().decode(ze(n))}function ze(n){let e=n.replace(/-/g,"+").replace(/_/g,"/");switch(e.length%4){case 0:break;case 2:e+="==";break;case 3:e+="=";break;default:throw f(gh,"")}let t=atob(e);return Uint8Array.from(t,r=>r.codePointAt(0)||0)}var X={INVALID_GRANT_ERROR:"invalid_grant",POPUP_WIDTH:483,POPUP_HEIGHT:600,POPUP_NAME_PREFIX:"msal",MSAL_SKU:"msal.js.browser"},se={CHANNEL_ID:"53ee284d-920a-4b59-9d30-a60315b26836",PREFERRED_EXTENSION_ID:"ppnbnpeolgkicgegkbkbjmhlideopiji",MATS_TELEMETRY:"MATS",MICROSOFT_ENTRA_BROKERID:"MicrosoftEntra",DOM_API_NAME:"DOM API",PLATFORM_DOM_APIS:"get-token-and-sign-out",PLATFORM_DOM_PROVIDER:"PlatformAuthDOMHandler",PLATFORM_EXTENSION_PROVIDER:"PlatformAuthExtensionHandler"},Or={HandshakeRequest:"Handshake",HandshakeResponse:"HandshakeResponse",GetToken:"GetToken",Response:"Response"},ae={LocalStorage:"localStorage",SessionStorage:"sessionStorage",MemoryStorage:"memoryStorage"},Cc={GET:"GET",POST:"POST"},Me={SIGNIN:"signin",SIGNOUT:"signout"},U={ORIGIN_URI:"request.origin",URL_HASH:"urlHash",REQUEST_PARAMS:"request.params",VERIFIER:"code.verifier",INTERACTION_STATUS_KEY:"interaction.status",NATIVE_REQUEST:"request.native"},xo={WRAPPER_SKU:"wrapper.sku",WRAPPER_VER:"wrapper.version"},R={acquireTokenRedirect:861,acquireTokenPopup:862,ssoSilent:863,acquireTokenSilent_authCode:864,handleRedirectPromise:865,acquireTokenByCode:866,acquireTokenSilent_silentFlow:61,logout:961,logoutPopup:962,hydrateCache:963,loadExternalTokens:964},Ah={861:"acquireTokenRedirect",862:"acquireTokenPopup",863:"ssoSilent",864:"acquireTokenSilent_authCode",865:"handleRedirectPromise",866:"acquireTokenByCode",61:"acquireTokenSilent_silentFlow",961:"logout",962:"logoutPopup",963:"hydrateCache",964:"loadExternalTokens"},Ih=n=>typeof n=="number"&&n in Ah?Ah[n]:"unknown",E;(function(n){n.Redirect="redirect",n.Popup="popup",n.Silent="silent",n.None="none"})(E||(E={}));var yc={scopes:C.OIDC_DEFAULT_SCOPES},Ec="jwk";var Ln="msal.db",Sh=1,wh=`${Ln}.keys`,q={Default:0,AccessToken:1,AccessTokenAndRefreshToken:2,RefreshToken:3,RefreshTokenAndNetwork:4,Skip:5},_h=[q.Default,q.Skip,q.RefreshTokenAndNetwork];function Lo(n){return encodeURIComponent(It(n).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_"))}function we(n){return Rh(n).replace(/=/g,"").replace(/\+/g,"-").replace(/\//g,"_")}function It(n){return Rh(new TextEncoder().encode(n))}function Rh(n){let e=Array.from(n,t=>String.fromCodePoint(t)).join("");return btoa(e)}var Oh="RSASSA-PKCS1-v1_5",br="AES-GCM",bh="HKDF",Ac="SHA-256",rp="EC",op="RSA",np="missing_jwk_kty",ip="unsupported_jwk_kty",sp="missing_jwk_member",ap="empty_jwk_member",cp=2048,lp=new Uint8Array([1,0,1]),kh="0123456789abcdef",vh=new Uint32Array(1),Ic="raw",Ph="encrypt",Sc="decrypt",hp="deriveKey",dp="crypto_subtle_undefined",wc={name:Oh,hash:Ac,modulusLength:cp,publicExponent:lp},Nh={name:Oh};function Mh(n){if(!window)throw f(Nn,"");if(!window.crypto)throw f(fc,"");if(!n&&!window.crypto.subtle)throw f(fc,"",dp)}async function _c(n){let t=new TextEncoder().encode(n);return window.crypto.subtle.digest(Ac,t)}function Uh(n){return window.crypto.getRandomValues(n)}function Tc(){return window.crypto.getRandomValues(vh),vh[0]}function ue(){let n=Date.now(),e=Tc()*1024+(Tc()&1023),t=new Uint8Array(16),r=Math.trunc(e/2**30),o=e&2**30-1,i=Tc();t[0]=n/2**40,t[1]=n/2**32,t[2]=n/2**24,t[3]=n/2**16,t[4]=n/2**8,t[5]=n,t[6]=112|r>>>8,t[7]=r,t[8]=128|o>>>24,t[9]=o>>>16,t[10]=o>>>8,t[11]=o,t[12]=i>>>24,t[13]=i>>>16,t[14]=i>>>8,t[15]=i;let s="";for(let a=0;a<t.length;a++)s+=kh.charAt(t[a]>>>4),s+=kh.charAt(t[a]&15),(a===3||a===5||a===7||a===9)&&(s+="-");return s}async function Dh(n,e,t){return window.crypto.subtle.generateKey(t,n,e)}async function Hn(n){return window.crypto.subtle.exportKey(Ec,n)}async function xh(n,e,t,r){return window.crypto.subtle.importKey(Ec,n,r,e,t)}async function Lh(n,e,t){return window.crypto.subtle.sign(t,n,e)}async function Pr(){let n=await Rc(),t={alg:"dir",kty:"oct",k:we(new Uint8Array(n))};return It(JSON.stringify(t))}async function up(n){let e=b(n),r=JSON.parse(e).k,o=ze(r);return window.crypto.subtle.importKey(Ic,o,br,!1,[Sc])}async function Hh(n,e){let t=e.split(".");if(t.length!==5)throw f(xn,"","jwe_length");let r=await up(n).catch(()=>{throw f(xn,"","import_key")});try{let o=new TextEncoder().encode(t[0]),i=ze(t[2]),s=ze(t[3]),a=ze(t[4]),c=a.byteLength*8,l=new Uint8Array(s.length+a.length);l.set(s),l.set(a,s.length);let h=await window.crypto.subtle.decrypt({name:br,iv:i,tagLength:c,additionalData:o},r,l);return new TextDecoder().decode(h)}catch{throw f(xn,"","decrypt")}}async function Rc(){let n=await window.crypto.subtle.generateKey({name:br,length:256},!0,[Ph,Sc]);return window.crypto.subtle.exportKey(Ic,n)}async function kc(n){return window.crypto.subtle.importKey(Ic,n,bh,!1,[hp])}async function Fh(n,e,t){return window.crypto.subtle.deriveKey({name:bh,salt:e,hash:Ac,info:new TextEncoder().encode(t)},n,{name:br,length:256},!1,[Ph,Sc])}async function Kh(n,e,t){let r=new TextEncoder().encode(e),o=window.crypto.getRandomValues(new Uint8Array(16)),i=await Fh(n,o,t),s=await window.crypto.subtle.encrypt({name:br,iv:new Uint8Array(12)},i,r);return{data:we(new Uint8Array(s)),nonce:we(o)}}async function vc(n,e,t,r){let o=ze(r),i=await Fh(n,ze(e),t),s=await window.crypto.subtle.decrypt({name:br,iv:new Uint8Array(12)},i,o);return new TextDecoder().decode(s)}async function Oc(n){let e=await _c(n),t=new Uint8Array(e);return we(t)}var mp={[rp]:["crv","kty","x","y"],[op]:["e","kty","n"]};function pp(n){let e=n.kty;if(typeof e!="string"||e.length===0)throw f(Do,"",np);let t=mp[e];if(!t)throw f(Do,"",ip);return t.reduce((r,o)=>{let i=n[o];if(typeof i!="string")throw f(Do,"",sp);if(i.length===0)throw f(Do,"",ap);return r[o]=i,r},{})}async function Bh(n){let e=pp(n),t=JSON.stringify(e,Object.keys(e).sort());return Oc(t)}var bc=class n extends I{constructor(e,t,r){super(e,t,r),this.name="BrowserConfigurationAuthError",Object.setPrototypeOf(this,n.prototype)}};function Nr(n,e){return new bc(n,e,Sr(n))}var Fn="storage_not_supported";var zh="in_mem_redirect_unavailable";function fp(){let n=window.location.hash,e=window.location.search,t=!1,r=!1,o="",i;if(n&&n.length>1){let h=n.charAt(0)==="#"?n.substring(1):n,d=new URLSearchParams(h);d.has("state")&&(t=!0,o=h,i=d)}if(e&&e.length>1){let h=e.charAt(0)==="?"?e.substring(1):e,d=new URLSearchParams(h);d.has("state")&&(r=!0,o=h,i=d)}if(t&&r){let h=e.charAt(0)==="?"?e.substring(1):e,d=n.charAt(0)==="#"?n.substring(1):n;o=`${h}${d}`,i=new URLSearchParams(o)}if(!o||!i)throw f(Th,"");let s=i.get("state");if(!s)throw f(_r,"");let{libraryState:a}=W.parseRequestState(b,s,""),{id:c,meta:l}=a;if(!c||!l)throw f(bn,"","missing_library_state");return{params:i,payload:o,urlHash:n,urlQuery:e,hasResponseInHash:t,hasResponseInQuery:r,libraryState:{id:c,meta:l}}}function Kn(n){n.location.hash="",typeof n.history.replaceState=="function"&&n.history.replaceState(null,"",`${n.location.origin}${n.location.pathname}${n.location.search}`)}function Gh(n){let e=n.split("#");e.shift(),window.location.hash=e.length>0?e.join("#"):""}function Ho(){return window.parent!==window}function gp(){if(Ho())return!1;try{let{libraryState:n}=fp(),{meta:e}=n;return e.interactionType===E.Popup}catch{return!1}}var St=null;function $h(n,e){St&&(n.verbose("18y01k",e),clearTimeout(St.timeoutId),St.channel.close(),St.reject(f(ql,"")),St=null)}async function Yt(n,e,t,r,o){return new Promise((i,s)=>{e.verbose("1rf6em",t.correlationId);let a=t.correlationId;r.addFields({redirectBridgeTimeoutMs:n,lateResponseExperimentEnabled:o?.iframeTimeoutTelemetry||!1},a);let{libraryState:c}=W.parseRequestState(b,t.state||"",t.correlationId),l=new BroadcastChannel(c.id),h,d=!1,m,g,y=window.setTimeout(()=>{St=null,o?.iframeTimeoutTelemetry?(g=r.startMeasurement(Vl,a),d=!0,m=window.setTimeout(()=>{g?.end({success:!1}),clearTimeout(m),l.close()},6e4)):l.close(),s(f(it,"","redirect_bridge_timeout"))},n);St={timeoutId:y,channel:l,reject:s},l.onmessage=T=>{h=T.data.payload;let k=T?.data&&typeof T.data.v=="number"?T.data.v:void 0;if(d){g?.end({success:!!h}),clearTimeout(m),l.close();return}r.addFields({redirectBridgeMessageVersion:k},a),St=null,clearTimeout(y),l.close(),h?i(h):s(f(Pn,a))}})}function me(){return typeof window<"u"&&window.location?window.location.href.split("?")[0].split("#")[0]:""}function Vh(n){let t=new _(window.location.href,n||"").getUrlComponents();return`${t.Protocol}//${t.HostNameAndPort}/`}function Cp(){if(Ce.getDeserializedResponse(window.location.hash)&&Ho())throw f(th,"")}function yp(n){if(Ho()&&!n)throw f(eh,"")}function Ep(){if(gp())throw f(rh,"")}function Pc(){if(typeof window>"u")throw f(Nn,"")}function Nc(n){if(!n)throw f(vr,"")}function Bn(n){Pc(),Cp(),Ep(),Nc(n)}function Mc(n,e){if(Bn(n),yp(e.system.allowRedirectInIframe),e.cache.cacheLocation===ae.MemoryStorage)throw Nr(zh,"")}function zn(n){let e=document.createElement("link");e.rel="preconnect",e.href=new URL(n).origin,e.crossOrigin="anonymous",document.head.appendChild(e),window.setTimeout(()=>{try{document.head.removeChild(e)}catch{}},1e4)}function Fo(){return ue()}var jT=O.buildMergedClaims;var Gn=class{constructor(){this.dbName=Ln,this.version=Sh,this.tableName=wh,this.dbOpen=!1}async open(){return new Promise((e,t)=>{let r=window.indexedDB.open(this.dbName,this.version);r.addEventListener("upgradeneeded",o=>{o.target.result.createObjectStore(this.tableName)}),r.addEventListener("success",o=>{let i=o;this.db=i.target.result,this.dbOpen=!0,e()}),r.addEventListener("error",()=>t(f(Un,"")))})}closeConnection(){let e=this.db;e&&this.dbOpen&&(e.close(),this.dbOpen=!1)}async validateDbIsOpen(){if(!this.dbOpen)return this.open()}async getItem(e){return await this.validateDbIsOpen(),new Promise((t,r)=>{if(!this.db)return r(f(kr,""));let s=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).get(e);s.addEventListener("success",a=>{let c=a;this.closeConnection(),t(c.target.result)}),s.addEventListener("error",a=>{this.closeConnection(),r(a)})})}async setItem(e,t){return await this.validateDbIsOpen(),new Promise((r,o)=>{if(!this.db)return o(f(kr,""));let a=this.db.transaction([this.tableName],"readwrite").objectStore(this.tableName).put(t,e);a.addEventListener("success",()=>{this.closeConnection(),r()}),a.addEventListener("error",c=>{this.closeConnection(),o(c)})})}async removeItem(e){return await this.validateDbIsOpen(),new Promise((t,r)=>{if(!this.db)return r(f(kr,""));let s=this.db.transaction([this.tableName],"readwrite").objectStore(this.tableName).delete(e);s.addEventListener("success",()=>{this.closeConnection(),t()}),s.addEventListener("error",a=>{this.closeConnection(),r(a)})})}async getKeys(){return await this.validateDbIsOpen(),new Promise((e,t)=>{if(!this.db)return t(f(kr,""));let i=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).getAllKeys();i.addEventListener("success",s=>{let a=s;this.closeConnection(),e(a.target.result)}),i.addEventListener("error",s=>{this.closeConnection(),t(s)})})}async containsKey(e){return await this.validateDbIsOpen(),new Promise((t,r)=>{if(!this.db)return r(f(kr,""));let s=this.db.transaction([this.tableName],"readonly").objectStore(this.tableName).count(e);s.addEventListener("success",a=>{let c=a;this.closeConnection(),t(c.target.result===1)}),s.addEventListener("error",a=>{this.closeConnection(),r(a)})})}async deleteDatabase(){return this.db&&this.dbOpen&&this.closeConnection(),new Promise((e,t)=>{let r=window.indexedDB.deleteDatabase(Ln),o=setTimeout(()=>t(!1),200);r.addEventListener("success",()=>(clearTimeout(o),e(!0))),r.addEventListener("blocked",()=>(clearTimeout(o),e(!0))),r.addEventListener("error",()=>(clearTimeout(o),t(!1)))})}};var st=class{constructor(){this.cache=new Map}async initialize(){}getItem(e){return this.cache.get(e)||null}getUserData(e){return this.getItem(e)}setItem(e,t){this.cache.set(e,t)}async setUserData(e,t){this.setItem(e,t)}removeItem(e){this.cache.delete(e)}getKeys(){let e=[];return this.cache.forEach((t,r)=>{e.push(r)}),e}containsKey(e){return this.cache.has(e)}clear(){this.cache.clear()}decryptData(){return Promise.resolve(null)}};var $n=class{constructor(e){this.inMemoryCache=new st,this.indexedDBCache=new Gn,this.logger=e}handleDatabaseAccessError(e,t){if(e instanceof Jt&&e.errorCode===Un)this.logger.error("1wx7zz",t);else throw e}async getItem(e,t){let r=this.inMemoryCache.getItem(e);if(!r)try{return this.logger.verbose("0naxpl",t),await this.indexedDBCache.getItem(e)}catch(o){this.handleDatabaseAccessError(o,t)}return r}async setItem(e,t,r){this.inMemoryCache.setItem(e,t);try{await this.indexedDBCache.setItem(e,t)}catch(o){this.handleDatabaseAccessError(o,r)}}async removeItem(e,t){this.inMemoryCache.removeItem(e);try{await this.indexedDBCache.removeItem(e)}catch(r){this.handleDatabaseAccessError(r,t)}}async getKeys(e){let t=this.inMemoryCache.getKeys();if(t.length===0)try{return this.logger.verbose("1iqrbq",e),await this.indexedDBCache.getKeys()}catch(r){this.handleDatabaseAccessError(r,e)}return t}async containsKey(e,t){let r=this.inMemoryCache.containsKey(e);if(!r)try{return this.logger.verbose("03zl2j",t),await this.indexedDBCache.containsKey(e)}catch(o){this.handleDatabaseAccessError(o,t)}return r}clearInMemory(e){this.logger.verbose("03r21p",e),this.inMemoryCache.clear(),this.logger.verbose("0uksk1",e)}async clearPersistent(e){try{this.logger.verbose("0rdqut",e);let t=await this.indexedDBCache.deleteDatabase();return t&&this.logger.verbose("149ouc",e),t}catch(t){return this.handleDatabaseAccessError(t,e),!1}}};var Ge=class n{constructor(e,t,r){this.logger=e,Mh(r??!1),this.cache=new $n(this.logger),this.performanceClient=t}createNewGuid(){return ue()}base64Encode(e){return It(e)}base64Decode(e){return b(e)}base64UrlEncode(e){return Lo(e)}encodeKid(e){return this.base64UrlEncode(JSON.stringify({kid:e}))}async getPublicKeyThumbprint(e){let t=this.performanceClient?.startMeasurement(gl,e.correlationId),r=await Dh(n.EXTRACTABLE,n.POP_KEY_USAGES,wc),o=await Hn(r.publicKey),i=await Bh(o),s=await Hn(r.privateKey),a=await xh(s,!1,["sign"],wc);return await this.cache.setItem(i,{privateKey:a,publicKey:r.publicKey,requestMethod:e.resourceRequestMethod,requestUri:e.resourceRequestUri},e.correlationId),t&&t.end({success:!0}),i}async removeTokenBindingKey(e,t){if(await this.cache.removeItem(e,t),await this.cache.containsKey(e,t))throw p(z.bindingKeyNotRemoved,t)}async clearKeystore(e){this.cache.clearInMemory(e);try{return await this.cache.clearPersistent(e),!0}catch(t){return t instanceof Error?this.logger.error(`1owpn8 ${t.message}`,e):this.logger.error("0yrmwo",e),!1}}async signJwt(e,t,r,o){let i=this.performanceClient?.startMeasurement(Cl,o),s=await this.cache.getItem(t,o||"");if(!s)throw f(Mn,o||"");let a=await Hn(s.publicKey),c=Tp(a),l=Lo(JSON.stringify({kid:t})),h=Oo.getShrHeaderString({...r?.header,alg:a.alg,kid:l}),d=Lo(h);e.cnf={jwk:JSON.parse(c)};let m=Lo(JSON.stringify(e)),g=`${d}.${m}`,T=new TextEncoder().encode(g),k=await Lh(s.privateKey,T,Nh),N=we(new Uint8Array(k)),Te=`${g}.${N}`;return i&&i.end({success:!0}),Te}async hashString(e){return Oc(e)}};Ge.POP_KEY_USAGES=["sign","verify"];Ge.EXTRACTABLE=!0;function Tp(n){return JSON.stringify(n,Object.keys(n).sort())}var jh="acquireTokenSilent",Jh="acquireTokenByCode",Wh="acquireTokenPopup",Yh="acquireTokenPreRedirect",Vn="acquireTokenRedirect",Qh="ssoSilent",qh="initializeClientApplication",Xh="localStorageUpdated";var Zh="ssoCapable";var F="msal",jn="browser";var rd=`${F}.${jn}.log.level`,od=`${F}.${jn}.log.pii`,pA=`${F}.${jn}.performance.enabled`,Uc=`${F}.version`,ed="account.keys",td="token.keys",Dc=`${F}.${jn}.sso.capable`;function at(n=3){return n<1?`${F}.${ed}`:`${F}.${n}.${ed}`}function ct(n,e=3){return e<1?`${F}.${td}.${n}`:`${F}.${e}.${td}.${n}`}var Ap=1440*60*1e3,Jn={Lax:"Lax",None:"None"},Mr=class{initialize(){return Promise.resolve()}getItem(e){let t=encodeURIComponent(e),r=document.cookie.split(";");for(let o=0;o<r.length;o++){let i=r[o].trim(),s=i.indexOf("=");if((s===-1?i:i.substring(0,s))===t){let c=s===-1?"":i.substring(s+1);try{return decodeURIComponent(c)}catch{return c}}}return""}getUserData(){throw p(z.methodNotImplemented,"")}setItem(e,t,r,o=!0,i=Jn.Lax){let s=`${encodeURIComponent(e)}=${encodeURIComponent(t)};path=/;SameSite=${i};`;if(r){let a=Ip(r);s+=`expires=${a};`}(o||i===Jn.None)&&(s+="Secure;"),document.cookie=s}async setUserData(e,t,r){return Promise.reject(p(z.methodNotImplemented,r))}removeItem(e){this.setItem(e,"",-1)}getKeys(){let e=document.cookie.split(";"),t=[];return e.forEach(r=>{let o=r.trim(),i=o.indexOf("="),s=i===-1?o:o.substring(0,i);try{t.push(decodeURIComponent(s))}catch{}}),t}containsKey(e){return this.getKeys().includes(e)}decryptData(){return Promise.resolve(null)}};function Ip(n){let e=new Date;return new Date(e.getTime()+n*Ap).toUTCString()}function $e(n,e){let t=n.getItem(at(e));return t?JSON.parse(t):[]}function ye(n,e,t){let r=e.getItem(ct(n,t));if(r){let o=JSON.parse(r);if(o&&o.hasOwnProperty("idToken")&&o.hasOwnProperty("accessToken")&&o.hasOwnProperty("refreshToken"))return o}return{idToken:[],accessToken:[],refreshToken:[]}}function Qt(n){return n.hasOwnProperty("id")&&n.hasOwnProperty("nonce")&&n.hasOwnProperty("data")}var nd="msal.cache.encryption",Sp="msal.broadcast.cache",Wn=class{constructor(e,t,r){if(!window.localStorage)throw Nr(Fn,"");this.memoryStorage=new st,this.initialized=!1,this.clientId=e,this.logger=t,this.performanceClient=r,this.broadcast=new BroadcastChannel(Sp)}async initialize(e){let t=new Mr,r=t.getItem(nd),o={key:"",id:""};if(r)try{o=JSON.parse(r)}catch{}if(o.key&&o.id){let i=J(ze,Bl,this.logger,this.performanceClient,e)(o.key);this.encryptionCookie={id:o.id,key:await u(kc,dc,this.logger,this.performanceClient,e)(i)}}else{let i=ue(),s=await u(Rc,Kl,this.logger,this.performanceClient,e)(),a=J(we,zl,this.logger,this.performanceClient,e)(new Uint8Array(s));this.encryptionCookie={id:i,key:await u(kc,dc,this.logger,this.performanceClient,e)(s)};let c={id:i,key:a};t.setItem(nd,JSON.stringify(c),0,!0,Jn.None)}await u(this.importExistingCache.bind(this),Dl,this.logger,this.performanceClient,e)(e),this.broadcast.addEventListener("message",i=>{this.updateCache(i,e)}),this.initialized=!0}getItem(e){return window.localStorage.getItem(e)}getUserData(e){if(!this.initialized)throw f(vr,"");return this.memoryStorage.getItem(e)}async decryptData(e,t,r){if(!this.initialized||!this.encryptionCookie)throw f(vr,"");if(t.id!==this.encryptionCookie.id)return this.performanceClient.incrementFields({encryptedCacheExpiredCount:1},r),null;let o=await u(vc,uc,this.logger,this.performanceClient,r)(this.encryptionCookie.key,t.nonce,this.getContext(e),t.data);if(!o)return null;try{return{...JSON.parse(o),lastUpdatedAt:t.lastUpdatedAt}}catch{return this.performanceClient.incrementFields({encryptedCacheCorruptionCount:1},r),null}}setItem(e,t){window.localStorage.setItem(e,t)}async setUserData(e,t,r,o,i){if(!this.initialized||!this.encryptionCookie)throw f(vr,"");if(i)this.setItem(e,t);else{let{data:s,nonce:a}=await u(Kh,Gl,this.logger,this.performanceClient,r)(this.encryptionCookie.key,t,this.getContext(e)),c={id:this.encryptionCookie.id,nonce:a,data:s,lastUpdatedAt:o};this.setItem(e,JSON.stringify(c))}this.memoryStorage.setItem(e,t),this.broadcast.postMessage({key:e,value:t,context:this.getContext(e)})}removeItem(e){this.memoryStorage.containsKey(e)&&(this.memoryStorage.removeItem(e),this.broadcast.postMessage({key:e,value:null,context:this.getContext(e)})),window.localStorage.removeItem(e)}getKeys(){return Object.keys(window.localStorage)}containsKey(e){return window.localStorage.hasOwnProperty(e)}clear(){this.memoryStorage.clear(),$e(this).forEach(r=>this.removeItem(r));let t=ye(this.clientId,this);t.idToken.forEach(r=>this.removeItem(r)),t.accessToken.forEach(r=>this.removeItem(r)),t.refreshToken.forEach(r=>this.removeItem(r)),this.getKeys().forEach(r=>{(r.startsWith(F)||r.indexOf(this.clientId)!==-1)&&this.removeItem(r)})}async importExistingCache(e){if(!this.encryptionCookie)return;let t=$e(this);t=await this.importArray(t,e),t.length?this.setItem(at(),JSON.stringify(t)):this.removeItem(at());let r=ye(this.clientId,this);r.idToken=await this.importArray(r.idToken,e),r.accessToken=await this.importArray(r.accessToken,e),r.refreshToken=await this.importArray(r.refreshToken,e),r.idToken.length||r.accessToken.length||r.refreshToken.length?this.setItem(ct(this.clientId),JSON.stringify(r)):this.removeItem(ct(this.clientId))}async getItemFromEncryptedCache(e,t){if(!this.encryptionCookie)return null;let r=this.getItem(e);if(!r)return null;let o;try{o=JSON.parse(r)}catch{return null}return Qt(o)?o.id!==this.encryptionCookie.id?(this.performanceClient.incrementFields({encryptedCacheExpiredCount:1},t),null):(this.performanceClient.incrementFields({encryptedCacheCount:1},t),u(vc,uc,this.logger,this.performanceClient,t)(this.encryptionCookie.key,o.nonce,this.getContext(e),o.data)):(this.performanceClient.incrementFields({unencryptedCacheCount:1},t),r)}async importArray(e,t){let r=[],o=[];return e.forEach(i=>{let s=this.getItemFromEncryptedCache(i,t).then(a=>{a?(this.memoryStorage.setItem(i,a),r.push(i)):this.removeItem(i)});o.push(s)}),await Promise.all(o),r}getContext(e){let t="";return e.includes(this.clientId)&&(t=this.clientId),t}updateCache(e,t){this.logger.trace("17cxcm",t);let r=this.performanceClient.startMeasurement(Xh);r.add({isBackground:!0});let{key:o,value:i,context:s}=e.data;if(!o){this.logger.error("0e10qr",t),r.end({success:!1,errorCode:"noKey"});return}if(s&&s!==this.clientId){this.logger.trace(`04rtdy ${s}`,t),r.end({success:!1,errorCode:"contextMismatch"});return}i?(this.memoryStorage.setItem(o,i),this.logger.verbose("1vzsgt",t)):(this.memoryStorage.removeItem(o),this.logger.verbose("04ypih",t)),r.end({success:!0})}};var Yn=class{constructor(){if(!window.sessionStorage)throw Nr(Fn,"")}async initialize(){}getItem(e){return window.sessionStorage.getItem(e)}getUserData(e){return this.getItem(e)}setItem(e,t){window.sessionStorage.setItem(e,t)}async setUserData(e,t){this.setItem(e,t)}removeItem(e){window.sessionStorage.removeItem(e)}getKeys(){return Object.keys(window.sessionStorage)}containsKey(e){return window.sessionStorage.hasOwnProperty(e)}decryptData(){return Promise.resolve(null)}};var A={INITIALIZE_START:"msal:initializeStart",INITIALIZE_END:"msal:initializeEnd",ACTIVE_ACCOUNT_CHANGED:"msal:activeAccountChanged",LOGIN_SUCCESS:"msal:loginSuccess",ACQUIRE_TOKEN_START:"msal:acquireTokenStart",BROKERED_REQUEST_START:"msal:brokeredRequestStart",ACQUIRE_TOKEN_SUCCESS:"msal:acquireTokenSuccess",BROKERED_REQUEST_SUCCESS:"msal:brokeredRequestSuccess",ACQUIRE_TOKEN_FAILURE:"msal:acquireTokenFailure",BROKERED_REQUEST_FAILURE:"msal:brokeredRequestFailure",ACQUIRE_TOKEN_NETWORK_START:"msal:acquireTokenFromNetworkStart",HANDLE_REDIRECT_START:"msal:handleRedirectStart",HANDLE_REDIRECT_END:"msal:handleRedirectEnd",POPUP_OPENED:"msal:popupOpened",LOGOUT_START:"msal:logoutStart",LOGOUT_SUCCESS:"msal:logoutSuccess",LOGOUT_FAILURE:"msal:logoutFailure",LOGOUT_END:"msal:logoutEnd",RESTORE_FROM_BFCACHE:"msal:restoreFromBFCache",BROKER_CONNECTION_ESTABLISHED:"msal:brokerConnectionEstablished"};var wt="@azure/msal-browser",Z="5.17.1";function Ve(n,e){let t=n.indexOf(e);t>-1&&n.splice(t,1)}var ee={Invalid:"invalid",TtlExpired:"ttlExpired",DecryptFailed:"decryptFailed",Expired:"expired"},Ur=class extends zt{constructor(e,t,r,o,i,s,a){super(e,r,o,i,a),this.cacheConfig=t,this.logger=o,this.internalStorage=new st,this.browserStorage=sd(e,t.cacheLocation,o,i),this.temporaryCacheStorage=sd(e,ae.SessionStorage,o,i),this.cookieStorage=new Mr,this.eventHandler=s}async initialize(e){this.performanceClient.addFields({cacheLocation:this.cacheConfig.cacheLocation,cacheRetentionDays:this.cacheConfig.cacheRetentionDays},e),await this.browserStorage.initialize(e),await this.migrateExistingCache(e),this.trackVersionChanges(e)}async migrateExistingCache(e){let t=$e(this.browserStorage),r=ye(this.clientId,this.browserStorage);this.performanceClient.addFields({preMigrateAcntCount:t.length,preMigrateATCount:r.accessToken.length,preMigrateITCount:r.idToken.length,preMigrateRTCount:r.refreshToken.length},e);for(let i=0;i<3;i++){let s=i;await this.removeStaleAccounts(i,s,e)}for(let i=0;i<3;i++){let s=i;await this.migrateIdTokens(i,s,e)}let o=this.getKMSIValues();for(let i=0;i<3;i++)await this.migrateAccessTokens(i,o,e),await this.migrateRefreshTokens(i,o,e);t=$e(this.browserStorage),r=ye(this.clientId,this.browserStorage),this.performanceClient.addFields({postMigrateAcntCount:t.length,postMigrateATCount:r.accessToken.length,postMigrateITCount:r.idToken.length,postMigrateRTCount:r.refreshToken.length},e)}async updateOldEntry(e,t){let r=this.browserStorage.getItem(e),o=this.validateAndParseJson(r||"");if(!o)return this.browserStorage.removeItem(e),{entry:null,removalReason:ee.Invalid};if(!o.lastUpdatedAt)o.lastUpdatedAt=Date.now().toString(),this.setItem(e,JSON.stringify(o),t);else if(Q.isCacheExpired(o.lastUpdatedAt,this.cacheConfig.cacheRetentionDays))return this.browserStorage.removeItem(e),{entry:null,removalReason:ee.TtlExpired};let i=Qt(o),s=i?await this.browserStorage.decryptData(e,o,t):o;return s?D.isCredentialEntity(s)?(D.isAccessTokenEntity(s)||D.isRefreshTokenEntity(s))&&s.expiresOn&&Q.isTokenExpired(s.expiresOn,C.DEFAULT_TOKEN_RENEWAL_OFFSET_SEC)?(this.browserStorage.removeItem(e),{entry:null,removalReason:ee.Expired}):{entry:s}:(this.browserStorage.removeItem(e),{entry:null,removalReason:ee.Invalid}):(this.browserStorage.removeItem(e),{entry:null,removalReason:i?ee.DecryptFailed:ee.Invalid})}async removeStaleAccounts(e,t,r){let o=$e(this.browserStorage,e);if(o.length!==0){for(let i of[...o]){this.performanceClient.incrementFields({oldAcntCount:1},r);let s=this.browserStorage.getItem(i),a=this.validateAndParseJson(s||"");if(!a){this.browserStorage.removeItem(i),this.performanceClient.incrementFields({invalidAcntCount:1},r),Ve(o,i);continue}if(a.lastUpdatedAt)Q.isCacheExpired(a.lastUpdatedAt,this.cacheConfig.cacheRetentionDays)?(await this.removeAccountOldSchema(i,a,t,r),this.performanceClient.incrementFields({ttlExpiredAcntCount:1},r),Ve(o,i)):Qt(a)&&(await this.browserStorage.decryptData(i,a,r)||(this.browserStorage.removeItem(i),this.performanceClient.incrementFields({decryptFailedAcntCount:1},r),Ve(o,i)));else{a.lastUpdatedAt=Date.now().toString(),this.setItem(i,JSON.stringify(a),r);continue}}this.setAccountKeys(o,r,e)}}async removeAccountOldSchema(e,t,r,o){let s=(Qt(t)?await this.browserStorage.decryptData(e,t,o):t)?.homeAccountId;if(s){let a=this.getTokenKeys(r);[...a.idToken].filter(c=>c.includes(s)).forEach(c=>{this.browserStorage.removeItem(c),Ve(a.idToken,c)}),[...a.accessToken].filter(c=>c.includes(s)).forEach(c=>{this.browserStorage.removeItem(c),Ve(a.accessToken,c)}),[...a.refreshToken].filter(c=>c.includes(s)).forEach(c=>{this.browserStorage.removeItem(c),Ve(a.refreshToken,c)}),this.setTokenKeys(a,o,r)}this.browserStorage.removeItem(e)}getKMSIValues(){let e={},t=this.getTokenKeys().idToken;for(let r of t){let o=this.browserStorage.getUserData(r);if(o){let i=JSON.parse(o),s=G.extractTokenClaims(i.secret,b,"");s&&(e[i.homeAccountId]=G.isKmsi(s))}}return e}async migrateIdTokens(e,t,r){let o=ye(this.clientId,this.browserStorage,e);if(o.idToken.length===0)return;let i=ye(this.clientId,this.browserStorage,3),s=$e(this.browserStorage),a=$e(this.browserStorage,t);for(let c of[...o.idToken]){this.performanceClient.incrementFields({oldITCount:1},r);let l=await this.updateOldEntry(c,r),h=l.entry;if(!h){switch(l.removalReason){case ee.TtlExpired:this.performanceClient.incrementFields({ttlExpiredITCount:1},r);break;case ee.DecryptFailed:this.performanceClient.incrementFields({decryptFailedITCount:1},r);break;case ee.Invalid:this.performanceClient.incrementFields({invalidITCount:1},r);break}Ve(o.idToken,c);continue}let d=s.find(K=>K.includes(h.homeAccountId)),m=a.find(K=>K.includes(h.homeAccountId)),g=null;if(d)g=this.getAccount(d,r);else if(m){let K=this.browserStorage.getItem(m),ne=this.validateAndParseJson(K||"");g=ne&&Qt(ne)?await this.browserStorage.decryptData(m,ne,r):ne}if(!g){this.performanceClient.incrementFields({skipITMigrateCount:1},r);continue}let y=G.extractTokenClaims(h.secret,b,r),T=this.generateCredentialKey(h),k=this.getIdTokenCredential(T,r),N=Object.keys(y).includes("signin_state"),Te=k&&Object.keys(G.extractTokenClaims(k.secret,b,r)||{}).includes("signin_state");if(!k||h.lastUpdatedAt>k.lastUpdatedAt&&(N||!Te)){let K=g.tenantProfiles||[],ne=Nt(y)||g.realm;if(ne&&!K.find(er=>er.tenantId===ne)){let er=He(g.homeAccountId,g.localAccountId,ne,g.nativeAccountId,y);K.push(er)}g.tenantProfiles=K;let De=this.generateAccountKey(Ae.getAccountInfo(g)),je=G.isKmsi(y);await this.setUserData(De,JSON.stringify(g),r,g.lastUpdatedAt,je),s.includes(De)||s.push(De),await this.setUserData(T,JSON.stringify(h),r,h.lastUpdatedAt,je),this.performanceClient.incrementFields({migratedITCount:1},r),i.idToken.includes(T)||i.idToken.push(T)}}this.setTokenKeys(o,r,e),this.setTokenKeys(i,r),this.setAccountKeys(s,r)}async migrateAccessTokens(e,t,r){let o=ye(this.clientId,this.browserStorage,e);if(o.accessToken.length===0)return;let i=ye(this.clientId,this.browserStorage,3);for(let s of[...o.accessToken]){this.performanceClient.incrementFields({oldATCount:1},r);let a=await this.updateOldEntry(s,r),c=a.entry;if(!c){switch(a.removalReason){case ee.TtlExpired:this.performanceClient.incrementFields({ttlExpiredATCount:1},r);break;case ee.DecryptFailed:this.performanceClient.incrementFields({decryptFailedATCount:1},r);break;case ee.Expired:this.performanceClient.incrementFields({expiredATCount:1},r);break;case ee.Invalid:this.performanceClient.incrementFields({invalidATCount:1},r);break}Ve(o.accessToken,s);continue}if(!(c.homeAccountId in t)){this.performanceClient.incrementFields({skipATMigrateCount:1},r);continue}let l=this.generateCredentialKey(c),h=t[c.homeAccountId];if(!i.accessToken.includes(l))await this.setUserData(l,JSON.stringify(c),r,c.lastUpdatedAt,h),this.performanceClient.incrementFields({migratedATCount:1},r),i.accessToken.push(l);else{let d=this.getAccessTokenCredential(l,r);(!d||c.lastUpdatedAt>d.lastUpdatedAt)&&(await this.setUserData(l,JSON.stringify(c),r,c.lastUpdatedAt,h),this.performanceClient.incrementFields({migratedATCount:1},r))}}this.setTokenKeys(o,r,e),this.setTokenKeys(i,r)}async migrateRefreshTokens(e,t,r){let o=ye(this.clientId,this.browserStorage,e);if(o.refreshToken.length===0)return;let i=ye(this.clientId,this.browserStorage,3);for(let s of[...o.refreshToken]){this.performanceClient.incrementFields({oldRTCount:1},r);let a=await this.updateOldEntry(s,r),c=a.entry;if(!c){switch(a.removalReason){case ee.TtlExpired:this.performanceClient.incrementFields({ttlExpiredRTCount:1},r);break;case ee.DecryptFailed:this.performanceClient.incrementFields({decryptFailedRTCount:1},r);break;case ee.Expired:this.performanceClient.incrementFields({expiredRTCount:1},r);break;case ee.Invalid:this.performanceClient.incrementFields({invalidRTCount:1},r);break}Ve(o.refreshToken,s);continue}if(!(c.homeAccountId in t)){this.performanceClient.incrementFields({skipRTMigrateCount:1},r);continue}let l=this.generateCredentialKey(c),h=t[c.homeAccountId];if(!i.refreshToken.includes(l))await this.setUserData(l,JSON.stringify(c),r,c.lastUpdatedAt,h),this.performanceClient.incrementFields({migratedRTCount:1},r),i.refreshToken.push(l);else{let d=this.getRefreshTokenCredential(l,r);(!d||c.lastUpdatedAt>d.lastUpdatedAt)&&(await this.setUserData(l,JSON.stringify(c),r,c.lastUpdatedAt,h),this.performanceClient.incrementFields({migratedRTCount:1},r))}}this.setTokenKeys(o,r,e),this.setTokenKeys(i,r)}trackVersionChanges(e){let t=this.browserStorage.getItem(Uc);t&&(this.logger.info(`1wuc87 ${t}`,e),this.performanceClient.addGlobalFields({previousLibraryVersion:t})),t!==Z&&this.setItem(Uc,Z,e)}validateAndParseJson(e){if(!e)return null;try{let t=JSON.parse(e);return t&&typeof t=="object"?t:null}catch{return null}}setItem(e,t,r){let o=new Array(4).fill(0),i=[],s=20;for(let a=0;a<=s;a++)try{if(this.browserStorage.setItem(e,t),a>0)for(let c=0;c<=3;c++){let l=o.slice(0,c).reduce((d,m)=>d+m,0);if(l>=a)break;let h=a>l+o[c]?l+o[c]:a;a>l&&o[c]>0&&this.removeAccessTokenKeys(i.slice(l,h),r,c)}break}catch(c){let l=fr(c);if(l.errorCode===Ro.cacheQuotaExceeded&&a<s){if(!i.length)for(let h=0;h<=3;h++)if(e===ct(this.clientId,h)){let d=JSON.parse(t).accessToken;i.push(...d),o[h]=d.length}else{let d=this.getTokenKeys(h).accessToken;i.push(...d),o[h]=d.length}if(i.length<=a)throw l;this.removeAccessToken(i[a],r,!1)}else throw l}}async setUserData(e,t,r,o,i){let s=new Array(4).fill(0),a=[],c=20;for(let l=0;l<=c;l++)try{if(await u(this.browserStorage.setUserData.bind(this.browserStorage),$.SetUserData,this.logger,this.performanceClient,r)(e,t,r,o,i),l>0)for(let h=0;h<=3;h++){let d=s.slice(0,h).reduce((g,y)=>g+y,0);if(d>=l)break;let m=l>d+s[h]?d+s[h]:l;l>d&&s[h]>0&&this.removeAccessTokenKeys(a.slice(d,m),r,h)}break}catch(h){let d=fr(h);if(d.errorCode===Ro.cacheQuotaExceeded&&l<c){if(!a.length)for(let m=0;m<=3;m++){let g=this.getTokenKeys(m).accessToken;a.push(...g),s[m]=g.length}if(a.length<=l)throw d;this.removeAccessToken(a[l],r,!1)}else throw d}}getAccount(e,t){this.logger.trace("1lfvm6",t);let r=this.browserStorage.getUserData(e);if(!r)return this.removeAccountKeyFromMap(e,t),null;let o=this.validateAndParseJson(r);if(!o||!Ae.isAccountEntity(o))return null;let i=zt.toObject({},o);return this.performanceClient.addFields({accountCachedBy:Ih(i.cachedByApiId)},t),i}async setAccount(e,t,r,o){this.logger.trace("1bz3wr",t);let i=this.generateAccountKey(Ae.getAccountInfo(e)),s=Date.now().toString();e.lastUpdatedAt=s,e.cachedByApiId=o,await this.setUserData(i,JSON.stringify(e),t,s,r),this.addAccountKeyToMap(i,t),this.performanceClient.addFields({kmsi:r},t)}setAccountKeys(e,t,r=3){e.length===0?this.removeItem(at(r)):this.setItem(at(r),JSON.stringify(e),t)}getAccountKeys(){return $e(this.browserStorage)}addAccountKeyToMap(e,t){this.logger.trace("0rb85k",t),this.logger.tracePii(`1l9bdo ${e}`,t);let r=this.getAccountKeys();return r.indexOf(e)===-1?(r.push(e),this.setItem(at(),JSON.stringify(r),t),this.logger.verbose("0xia39",t),!0):(this.logger.verbose("0161kk",t),!1)}removeAccountKeyFromMap(e,t){this.logger.trace("1jpigu",t),this.logger.tracePii(`1xzspl ${e}`,t);let r=this.getAccountKeys(),o=r.indexOf(e);o>-1?(r.splice(o,1),this.setAccountKeys(r,t)):this.logger.trace("1dytu2",t)}removeAccount(e,t){let r=this.getActiveAccount(t);r?.homeAccountId===e.homeAccountId&&r?.environment===e.environment&&this.setActiveAccount(null,t),super.removeAccount(e,t),this.removeAccountKeyFromMap(this.generateAccountKey(e),t),this.browserStorage.getKeys().forEach(o=>{o.includes(e.homeAccountId)&&o.includes(e.environment)&&this.browserStorage.removeItem(o)})}removeIdToken(e,t){super.removeIdToken(e,t);let r=this.getTokenKeys(),o=r.idToken.indexOf(e);o>-1&&(this.logger.info("05udv9",t),r.idToken.splice(o,1),this.setTokenKeys(r,t))}removeAccessToken(e,t,r=!0){super.removeAccessToken(e,t),r&&this.removeAccessTokenKeys([e],t)}removeAccessTokenKeys(e,t,r=3){this.logger.trace("17o18n",t);let o=this.getTokenKeys(r),i=0;if(e.forEach(s=>{let a=o.accessToken.indexOf(s);a>-1&&(o.accessToken.splice(a,1),i++)}),i>0){this.logger.info(`15i5d5 ${i}`,t),this.setTokenKeys(o,t,r);return}}removeRefreshToken(e,t){super.removeRefreshToken(e,t);let r=this.getTokenKeys(),o=r.refreshToken.indexOf(e);o>-1&&(this.logger.info("1f4fq3",t),r.refreshToken.splice(o,1),this.setTokenKeys(r,t))}getTokenKeys(e=3){return ye(this.clientId,this.browserStorage,e)}setTokenKeys(e,t,r=3){if(e.idToken.length===0&&e.accessToken.length===0&&e.refreshToken.length===0){this.removeItem(ct(this.clientId,r));return}else this.setItem(ct(this.clientId,r),JSON.stringify(e),t)}getIdTokenCredential(e,t){let r=this.browserStorage.getUserData(e);if(!r)return this.logger.trace("1jukz6",t),this.removeIdToken(e,t),null;let o=this.validateAndParseJson(r);return!o||!D.isIdTokenEntity(o)?(this.logger.trace("1jukz6",t),null):(this.logger.trace("01ju66",t),o)}async setIdTokenCredential(e,t,r){this.logger.trace("13hjll",t);let o=this.generateCredentialKey(e),i=Date.now().toString();e.lastUpdatedAt=i,await this.setUserData(o,JSON.stringify(e),t,i,r);let s=this.getTokenKeys();s.idToken.indexOf(o)===-1&&(this.logger.info("07jy92",t),s.idToken.push(o),this.setTokenKeys(s,t))}getAccessTokenCredential(e,t){let r=this.browserStorage.getUserData(e);if(!r)return this.logger.trace("0bqvx8",t),this.removeAccessTokenKeys([e],t),null;let o=this.validateAndParseJson(r);return!o||!D.isAccessTokenEntity(o)?(this.logger.trace("0bqvx8",t),null):(this.logger.trace("1o81rl",t),o)}async setAccessTokenCredential(e,t,r){this.logger.trace("1pondb",t);let o=this.generateCredentialKey(e),i=Date.now().toString();e.lastUpdatedAt=i,await this.setUserData(o,JSON.stringify(e),t,i,r);let s=this.getTokenKeys(),a=s.accessToken.indexOf(o);a!==-1&&s.accessToken.splice(a,1),this.logger.trace(`1onhey ${a===-1?"added to":"updated in"}`,t),s.accessToken.push(o),this.setTokenKeys(s,t)}getRefreshTokenCredential(e,t){let r=this.browserStorage.getUserData(e);if(!r)return this.logger.trace("0jlizt",t),this.removeRefreshToken(e,t),null;let o=this.validateAndParseJson(r);return!o||!D.isRefreshTokenEntity(o)?(this.logger.trace("0jlizt",t),null):(this.logger.trace("0nokxi",t),o)}async setRefreshTokenCredential(e,t,r){this.logger.trace("0tcg8d",t);let o=this.generateCredentialKey(e),i=Date.now().toString();e.lastUpdatedAt=i,await this.setUserData(o,JSON.stringify(e),t,i,r);let s=this.getTokenKeys();s.refreshToken.indexOf(o)===-1&&(this.logger.info("0eckjs",t),s.refreshToken.push(o),this.setTokenKeys(s,t))}getAppMetadata(e,t){let r=this.browserStorage.getItem(e);if(!r)return this.logger.trace("1q101h",t),null;let o=this.validateAndParseJson(r);return!o||!D.isAppMetadataEntity(e,o)?(this.logger.trace("1q101h",t),null):(this.logger.trace("19pvg2",t),o)}setAppMetadata(e,t){this.logger.trace("0cyma6",t);let r=D.generateAppMetadataKey(e);this.setItem(r,JSON.stringify(e),t)}getServerTelemetry(e,t){let r=this.browserStorage.getItem(e);if(!r)return this.logger.trace("0jk19c",t),null;let o=this.validateAndParseJson(r);return!o||!D.isServerTelemetryEntity(e,o)?(this.logger.trace("0jk19c",t),null):(this.logger.trace("12jguk",t),o)}setServerTelemetry(e,t,r){this.logger.trace("1poh61",r),this.setItem(e,JSON.stringify(t),r)}getAuthorityMetadata(e,t){let r=this.internalStorage.getItem(e);if(!r)return this.logger.trace("1r39oe",t),null;let o=this.validateAndParseJson(r);return o&&D.isAuthorityMetadataEntity(e,o)?(this.logger.trace("1ohvk3",t),o):null}getAuthorityMetadataKeys(){return this.internalStorage.getKeys().filter(t=>this.isAuthorityMetadata(t))}setWrapperMetadata(e,t){this.internalStorage.setItem(xo.WRAPPER_SKU,e),this.internalStorage.setItem(xo.WRAPPER_VER,t)}getWrapperMetadata(){let e=this.internalStorage.getItem(xo.WRAPPER_SKU)||"",t=this.internalStorage.getItem(xo.WRAPPER_VER)||"";return[e,t]}setAuthorityMetadata(e,t,r){this.logger.trace("07w8n2",r),this.internalStorage.setItem(e,JSON.stringify(t))}getActiveAccount(e){let t=this.generateCacheKey(C.PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS),r=this.browserStorage.getItem(t);if(!r)return this.logger.trace("08gw0e",e),null;let o=this.validateAndParseJson(r);return o?(this.logger.trace("1t3ch7",e),this.getAccountInfoFilteredBy({homeAccountId:o.homeAccountId,localAccountId:o.localAccountId,tenantId:o.tenantId},e)):(this.logger.trace("0me1up",e),null)}setActiveAccount(e,t){let r=this.generateCacheKey(C.PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS);if(e){this.logger.verbose("0rsj80",t);let o={homeAccountId:e.homeAccountId,localAccountId:e.localAccountId,tenantId:e.tenantId};this.setItem(r,JSON.stringify(o),t)}else this.logger.verbose("1bp5z5",t),this.browserStorage.removeItem(r);this.eventHandler.emitEvent(A.ACTIVE_ACCOUNT_CHANGED,t)}getThrottlingCache(e,t){let r=this.browserStorage.getItem(e);if(!r)return this.logger.trace("1h4wa6",t),null;let o=this.validateAndParseJson(r);return!o||!D.isThrottlingEntity(e,o)?(this.logger.trace("1h4wa6",t),null):(this.logger.trace("0of6n8",t),o)}setThrottlingCache(e,t,r){this.logger.trace("0wfgh6",r),this.setItem(e,JSON.stringify(t),r)}getTemporaryCache(e,t,r){this.logger.trace("1ordf8",t);let o=r?this.generateCacheKey(e):e;return this.temporaryCacheStorage.getItem(o)}setTemporaryCache(e,t,r){let o=r?this.generateCacheKey(e):e;this.temporaryCacheStorage.setItem(o,t)}removeItem(e){this.browserStorage.removeItem(e)}removeTemporaryItem(e){this.temporaryCacheStorage.removeItem(e)}getKeys(){return this.browserStorage.getKeys()}clear(e){this.removeAllAccounts(e),this.removeAppMetadata(e),this.temporaryCacheStorage.getKeys().forEach(t=>{(t.indexOf(F)!==-1||t.indexOf(this.clientId)!==-1)&&this.removeTemporaryItem(t)}),this.browserStorage.getKeys().forEach(t=>{(t.indexOf(F)!==-1||t.indexOf(this.clientId)!==-1)&&this.browserStorage.removeItem(t)}),this.internalStorage.clear()}generateCacheKey(e){return le.startsWith(e,F)?e:`${F}.${this.clientId}.${e}`}generateCredentialKey(e){let t=e.credentialType===C.CredentialType.REFRESH_TOKEN&&e.familyId||e.clientId,r=e.tokenType&&e.tokenType.toLowerCase()!==C.AuthenticationScheme.BEARER.toLowerCase()?e.tokenType.toLowerCase():"";return[`${F}.${3}`,e.homeAccountId,e.environment,e.credentialType,t,e.realm||"",e.target||"",r].join("|").toLowerCase()}generateAccountKey(e){let t=e.homeAccountId.split(".")[1];return[`${F}.${3}`,e.homeAccountId,e.environment,t||e.tenantId||""].join("|").toLowerCase()}resetRequestCache(e){this.logger.trace("0h0ynu",e),this.removeTemporaryItem(this.generateCacheKey(U.REQUEST_PARAMS)),this.removeTemporaryItem(this.generateCacheKey(U.VERIFIER)),this.removeTemporaryItem(this.generateCacheKey(U.ORIGIN_URI)),this.removeTemporaryItem(this.generateCacheKey(U.URL_HASH)),this.removeTemporaryItem(this.generateCacheKey(U.NATIVE_REQUEST)),this.setInteractionInProgress(!1,void 0)}cacheAuthorizeRequest(e,t,r){this.logger.trace("1tzef5",t);let o=It(JSON.stringify(e));if(this.setTemporaryCache(U.REQUEST_PARAMS,o,!0),r){let i=It(r);this.setTemporaryCache(U.VERIFIER,i,!0)}}getCachedRequest(e){this.logger.trace("0uen20",e);let t=this.getTemporaryCache(U.REQUEST_PARAMS,e,!0);if(!t)throw f(ih,"");let r=this.getTemporaryCache(U.VERIFIER,e,!0),o,i="";try{o=JSON.parse(b(t)),r&&(i=b(r))}catch(s){throw this.logger.errorPii(`0ewsey ${t}`,e),this.logger.error(`0tvdic ${s}`,e),f(sh,"")}return[o,i]}getCachedNativeRequest(){this.logger.trace("1yxcdm","");let e=this.getTemporaryCache(U.NATIVE_REQUEST,"",!0);if(!e)return this.logger.trace("0mnxd4",""),null;let t=this.validateAndParseJson(e);return t||(this.logger.error("0rrkip",""),null)}isInteractionInProgress(e){let t=this.getInteractionInProgress()?.clientId;return e?t===this.clientId:!!t}getInteractionInProgress(){let e=`${F}.${U.INTERACTION_STATUS_KEY}`,t=this.getTemporaryCache(e,"",!1);try{return t?JSON.parse(t):null}catch{return this.logger.error("0jjyys",""),this.removeTemporaryItem(e),this.resetRequestCache(""),Kn(window),null}}setInteractionInProgress(e,t=Me.SIGNIN,r=!1,o=""){let i=`${F}.${U.INTERACTION_STATUS_KEY}`;if(e){let s=this.getInteractionInProgress();if(s)if(r)this.logger.warning(`1pmscr ${s.clientId} ${s.type}`,o),$h(this.logger,o),this.removeTemporaryItem(i);else throw f(Ql,"");this.setTemporaryCache(i,JSON.stringify({clientId:this.clientId,type:t}),!1)}else!e&&this.getInteractionInProgress()?.clientId===this.clientId&&this.removeTemporaryItem(i)}async hydrateCache(e,t){let r=D.createIdTokenEntity(e.account.homeAccountId,e.account.environment,e.idToken,this.clientId,e.tenantId),o=D.createAccessTokenEntity(e.account.homeAccountId,e.account.environment,e.accessToken,this.clientId,e.tenantId,e.scopes.join(" "),e.expiresOn?Q.toSecondsFromDate(e.expiresOn):0,e.extExpiresOn?Q.toSecondsFromDate(e.extExpiresOn):0,b,t.correlationId||"",void 0,e.tokenType,void 0,t.sshKid);t.resource&&(o.resource=t.resource);let i={idToken:r,accessToken:o};return this.saveCacheRecord(i,e.correlationId,G.isKmsi(G.extractTokenClaims(e.idToken,b,e.correlationId)),R.hydrateCache)}async saveCacheRecord(e,t,r,o,i){try{await super.saveCacheRecord(e,t,r,o,i)}catch(s){if(s instanceof Et&&this.performanceClient&&t)try{let a=this.getTokenKeys();this.performanceClient.addFields({cacheRtCount:a.refreshToken.length,cacheIdCount:a.idToken.length,cacheAtCount:a.accessToken.length},t)}catch{}throw s}}};function sd(n,e,t,r){try{switch(e){case ae.LocalStorage:return new Wn(n,t,r);case ae.SessionStorage:return new Yn;case ae.MemoryStorage:default:break}}catch(o){t.error(o,"")}return new st}var ad=(n,e,t,r)=>{let o={cacheLocation:ae.MemoryStorage,cacheRetentionDays:5};return new Ur(n,o,yt,e,t,r)};function cd(n,e,t,r,o){return n.verbose("1yd030",r),t?e.getAllAccounts(o,r):[]}function ld(n,e,t,r){e.trace("0u7b90",r);let o=t.getAccountInfoFilteredBy(n,r);return o?(e.verbose("0btgll",r),o):(e.verbose("0ltaj5",r),null)}function hd(n,e,t){e.setActiveAccount(n,t)}function dd(n,e){return n.getActiveAccount(e)}var wp="msal.broadcast.event",Qn=class{constructor(e){this.eventCallbacks=new Map,this.logger=e||new j({},wt,Z),typeof BroadcastChannel<"u"&&(this.broadcastChannel=new BroadcastChannel(wp)),this.invokeCrossTabCallbacks=this.invokeCrossTabCallbacks.bind(this)}addEventCallback(e,t,r){if(typeof window<"u"){let o=r||Fo();return this.eventCallbacks.has(o)?(this.logger.error(`1578i0 ${o}`,""),null):(this.eventCallbacks.set(o,[e,t||[]]),this.logger.verbose(`1cnec4 ${o}`,""),o)}return null}removeEventCallback(e){this.eventCallbacks.delete(e),this.logger.verbose(`12zotd ${e}`,"")}emitEvent(e,t,r,o,i){let s={eventType:e,interactionType:r||null,payload:o||null,error:i||null,correlationId:t,timestamp:Date.now()};switch(e){case A.LOGIN_SUCCESS:case A.LOGOUT_SUCCESS:case A.ACTIVE_ACCOUNT_CHANGED:this.broadcastChannel?.postMessage(s)}this.invokeCallbacks(s)}invokeCallbacks(e){this.eventCallbacks.forEach(([t,r],o)=>{(r.length===0||r.includes(e.eventType))&&(this.logger.verbose(`15jpwk ${o} ${e.eventType}`,""),t.apply(null,[e]))})}invokeCrossTabCallbacks(e){let t=e.data;this.invokeCallbacks(t)}subscribeCrossTab(){this.broadcastChannel?.addEventListener("message",this.invokeCrossTabCallbacks)}unsubscribeCrossTab(){this.broadcastChannel?.removeEventListener("message",this.invokeCrossTabCallbacks)}};var Dr=class{constructor(e,t,r,o,i,s,a,c,l){this.config=e,this.browserStorage=t,this.browserCrypto=r,this.networkClient=this.config.system.networkClient,this.eventHandler=i,this.navigationClient=s,this.platformAuthProvider=l,this.correlationId=c,this.logger=o.clone(wt,Z),this.performanceClient=a}};function qt(n,e,t,r){t.verbose("0bd1la",r);let o=n||e||"";return _.getAbsoluteUrl(o,me(),r)}function x(n,e,t,r,o,i,s=!0){if(o.verbose("1p12tq",t),!s)return o.verbose("0tajnr",t),new Po;let a={clientId:e,correlationId:t,apiId:n,forceRefresh:i||!1,wrapperSKU:r.getWrapperMetadata()[0],wrapperVer:r.getWrapperMetadata()[1]};return new Tt(a,r)}async function pe(n,e,t,r,o,i,s,a,c){let l=a&&a.hasOwnProperty("instance_aware")?a.instance_aware:void 0,h={protocolMode:n.system.protocolMode,OIDCOptions:n.auth.OIDCOptions,knownAuthorities:n.auth.knownAuthorities,cloudDiscoveryMetadata:n.auth.cloudDiscoveryMetadata,authorityMetadata:n.auth.authorityMetadata},d=i||n.auth.authority,m=l?.length?l==="true":n.auth.instanceAware,g=c&&m?n.auth.authority.replace(_.getDomainFromUrl(d,e),c.environment):d,y=Qe.generateAuthority(g,s||n.auth.azureCloudOptions),T=await u(Cn.createDiscoveredInstance,bl,o,t,e)(y,n.system.networkClient,r,h,o,e,t);if(c&&!T.isAlias(c.environment))throw S(re.authorityMismatch,e);return T}async function xr(n,e,t,r,o){if(o)try{n.removeAccount(o,r),t.verbose("0s4z6h",r)}catch{t.error("0mgg1d",r)}else try{t.verbose("0zj631",r),n.clear(r),await e.clearKeystore(r)}catch{t.error("12ih0c",r)}}async function Ko(n,e,t,r,o){let i=n.authority||e.auth.authority,s=[...n&&n.scopes||[]],a={...n,correlationId:n.correlationId,authority:i,scopes:s};if(!a.authenticationScheme)a.authenticationScheme=C.AuthenticationScheme.BEARER,r.verbose("1l4fwv",o);else{if(a.authenticationScheme===C.AuthenticationScheme.SSH){if(!n.sshJwk)throw S(re.missingSshJwk,"");if(!n.sshKid)throw S(re.missingSshKid,"")}r.verbose(`1ecmns ${a.authenticationScheme}`,o)}return a}async function ud(n,e,t,r,o){let i=await u(Ko,Er,o,r,n.correlationId)(n,t,r,o,n.correlationId);return{...n,...i,account:e,forceRefresh:n.forceRefresh||!1}}function qn(n,e){let t,r=n.httpMethod;if(e===P.EAR){if(r&&r!==C.HttpMethod.POST)throw S(re.invalidRequestMethodForEAR,"");t=C.HttpMethod.POST}else t=r||C.HttpMethod.GET;return t}var fe=class extends Dr{initializeLogoutRequest(e){this.logger.verbose("0546u4",this.correlationId);let t={correlationId:this.correlationId,...e};if(e)if(e.logoutHint)this.logger.verbose("12k4l4",this.correlationId);else if(e.account){let r=e.account.loginHint||this.getLogoutHintFromIdTokenClaims(e.account);r&&(this.logger.verbose("0d7s8p",this.correlationId),t.logoutHint=r)}else this.logger.verbose("0pdtc3",this.correlationId);else this.logger.verbose("07ndze",this.correlationId);return!e||e.postLogoutRedirectUri!==null?e&&e.postLogoutRedirectUri?(this.logger.verbose("1vamm6",t.correlationId),t.postLogoutRedirectUri=_.getAbsoluteUrl(e.postLogoutRedirectUri,me(),t.correlationId)):this.config.auth.postLogoutRedirectUri===null?this.logger.verbose("15m5g7",t.correlationId):this.config.auth.postLogoutRedirectUri?(this.logger.verbose("1f4xlz",t.correlationId),t.postLogoutRedirectUri=_.getAbsoluteUrl(this.config.auth.postLogoutRedirectUri,me(),t.correlationId)):(this.logger.verbose("17s5rf",t.correlationId),t.postLogoutRedirectUri=_.getAbsoluteUrl(me(),me(),t.correlationId)):this.logger.verbose("0ljv63",t.correlationId),t}getLogoutHintFromIdTokenClaims(e){let t=e.idTokenClaims;if(t){if(t.login_hint)return this.logger.verbose("0u5bmc",this.correlationId),t.login_hint;this.logger.verbose("0mvp54",this.correlationId)}else this.logger.verbose("1e7bdp",this.correlationId);return null}async createAuthCodeClient(e){let t=await u(this.getClientConfiguration.bind(this),At,this.logger,this.performanceClient,this.correlationId)(e);return new Vt(t,this.performanceClient)}async getClientConfiguration(e){let{serverTelemetryManager:t,requestAuthority:r,requestAzureCloudOptions:o,requestExtraQueryParameters:i,account:s}=e,a=e.authority||await u(pe,Pe,this.logger,this.performanceClient,this.correlationId)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,r,o,i,s),c=this.config.system.loggerOptions;return{authOptions:{clientId:this.config.auth.clientId,authority:a,clientCapabilities:this.config.auth.clientCapabilities,redirectUri:this.config.auth.redirectUri,isMcp:this.config.auth.isMcp},systemOptions:{tokenRenewalOffsetSeconds:this.config.system.tokenRenewalOffsetSeconds,preventCorsPreflight:!0},loggerOptions:{loggerCallback:c.loggerCallback,piiLoggingEnabled:c.piiLoggingEnabled,logLevel:c.logLevel,correlationId:this.correlationId},cryptoInterface:this.browserCrypto,networkInterface:this.networkClient,storageInterface:this.browserStorage,serverTelemetryManager:t,libraryInfo:{sku:X.MSAL_SKU,version:Z,cpu:"",os:""},telemetry:this.config.telemetry}}};async function lt(n,e,t,r,o,i,s,a){let c=qt(n.redirectUri,t.auth.redirectUri,i,a);new URL(c).origin!==new URL(window.location.href).origin&&(i.warning("08qbvw",a),s.addFields({isRedirectUriCrossOrigin:!0},a));let l={interactionType:e},h=W.setRequestState(r,n&&n.state||"",l,a),m={...await u(Ko,Er,i,s,a)({...n,correlationId:a},t,s,i,a),redirectUri:c,state:h,nonce:n.nonce||ue(),responseMode:t.auth.OIDCOptions.responseMode},g={...m,httpMethod:qn(m,t.system.protocolMode)};if(n.loginHint||n.sid)return g;let y=n.account||o.getActiveAccount(a);return y&&(i.verbose("1eqlb3",a),i.verbosePii(`0tf99t ${y.homeAccountId}`,a),g.account=y),g}var md="msal:popup-relay-response:v1";function Xn(n,e,t,r){let o={id:e,...t},i=new URL(n,window.location.origin);if(i.origin!==window.location.origin)throw f(oh,r,"popup_relay_cross_origin");let s=new URLSearchParams;return s.set("req",JSON.stringify(o)),i.hash=s.toString(),i.toString()}async function pd(n,e,t,r,o){return new Promise((i,s)=>{let a=t.correlationId;e.verbose("1d05g9",a),o.addFields({redirectBridgeTimeoutMs:n},a);let{libraryState:c}=W.parseRequestState(b,t.state||"",a),l=c.id,h=window.location.origin,d=!1,m=()=>{window.removeEventListener("message",g),clearTimeout(y),clearInterval(T)},g=k=>{if(k.origin!==h||k.source!==r)return;let N=k.data;!N||N.type!==md||N.id!==l||d||(d=!0,m(),N.error?s(f(N.error,a)):N.payload?i(N.payload):s(f(Pn,a)))};window.addEventListener("message",g);let y=window.setTimeout(()=>{d||(d=!0,m(),s(f(it,a,"popup_relay_timeout")))},n),T=window.setInterval(()=>{r.closed&&!d&&(d=!0,m(),s(f(Wt,a)))},500)})}function fd(n,e,t){if(!e)return null;try{return W.parseRequestState(n.base64Decode,e,t).libraryState.meta}catch{throw p(z.invalidState,t)}}function Xt(n,e,t,r){let o=Ce.getDeserializedResponse(n);if(!o)throw Ce.stripLeadingHashOrQuery(n)?(t.error(`13pl0s ${e} ${e}`,r),t.errorPii(`1097vx ${e} ${n}`,r),f(Wl,r)):(t.error(`18h0l1 ${e} ${e}`,r),f(Jl,r));return o}function gd(n,e,t,r){if(!n.state)throw f(_r,r);let o=fd(e,n.state,r);if(!o)throw f(bn,r);if(o.interactionType!==t)throw f(Yl,r)}var Lr=class{constructor(e,t,r,o,i){this.authModule=e,this.browserStorage=t,this.authCodeRequest=r,this.logger=o,this.performanceClient=i}async handleCodeResponse(e,t,r){let o;try{o=Ie.getAuthorizationCodePayload(e,t.state,t.correlationId)}catch(i){throw i instanceof de&&i.subError===Wt?f(Wt,t.correlationId):i}return u(this.handleCodeResponseFromServer.bind(this),$.HandleCodeResponseFromServer,this.logger,this.performanceClient,t.correlationId)(o,t,r)}async handleCodeResponseFromServer(e,t,r,o=!0){if(this.logger.trace("0mf2hb",t.correlationId),this.authCodeRequest.code=e.code,o&&(e.nonce=t.nonce||void 0),e.state=t.state,e.client_info)this.authCodeRequest.clientInfo=e.client_info;else{let s=this.createCcsCredentials(t);s&&(this.authCodeRequest.ccsCredential=s)}return await u(this.authModule.acquireToken.bind(this.authModule),Ol,this.logger,this.performanceClient,t.correlationId)(this.authCodeRequest,r,e)}createCcsCredentials(e){return e.account?{credential:e.account.homeAccountId,type:oe.HOME_ACCOUNT_ID}:e.loginHint?{credential:e.loginHint,type:oe.UPN}:null}};var Cd="ContentError",yd="PageException",Ed="user_switch";var Td="USER_INTERACTION_REQUIRED",Ad="USER_CANCEL",Id="NO_NETWORK",Sd="DISABLED",wd="ACCOUNT_UNAVAILABLE",_d="UI_NOT_ALLOWED";var _p=-2147186943,Ee=class n extends I{constructor(e,t,r,o){super(e,t,r||Sr(e)),Object.setPrototypeOf(this,n.prototype),this.name="NativeAuthError",this.ext=o}};function _t(n){if(n.ext&&n.ext.status&&n.ext.status===Sd||n.ext&&n.ext.error&&n.ext.error===_p)return!0;switch(n.errorCode){case Cd:case yd:return!0;default:return!1}}function Zt(n,e,t,r){let o;if(r&&r.status){switch(r.status){case wd:o=Gt(Be.nativeAccountUnavailable,e,Sr(n));break;case Td:o=new H(n,e,t);break;case Ad:o=f(Wt,e);break;case Id:o=f(Uo,e);break;case _d:o=Gt(Be.uiNotAllowed,e);break;default:o=new Ee(n,e,t,r)}return o}return o=new Ee(n,e,t,r),o}var Hr=class extends fe{async acquireToken(e){let t=x(R.acquireTokenSilent_silentFlow,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),r=await u(this.getClientConfiguration.bind(this),At,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:t,requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,account:e.account}),o=new No(r,this.performanceClient);this.logger.verbose("0wa871",this.correlationId);try{let s=(await u(o.acquireCachedToken.bind(o),Rl,this.logger,this.performanceClient,e.correlationId)(e))[0];return this.performanceClient.addFields({fromCache:!0},e.correlationId),s}catch(i){throw i instanceof Jt&&i.errorCode===Mn&&this.logger.verbose("06wena",this.correlationId),i}}logout(e){this.logger.verbose("1rkurh",this.correlationId);let t=this.initializeLogoutRequest(e);return xr(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,t.account)}};var Rt=class extends Dr{constructor(e,t,r,o,i,s,a,c,l,h,d,m){super(e,t,r,o,i,s,c,m,l),this.apiId=a,this.accountId=h,this.platformAuthProvider=l,this.nativeStorageManager=d,this.silentCacheClient=new Hr(e,this.nativeStorageManager,r,o,i,s,c,m,l);let g=this.platformAuthProvider.getExtensionName();this.skus=Tt.makeExtraSkuString({libraryName:X.MSAL_SKU,libraryVersion:Z,extensionName:g,extensionVersion:this.platformAuthProvider.getExtensionVersion()})}addRequestSKUs(e){e.extraParameters={...e.extraParameters,[Je.X_CLIENT_EXTRA_SKU]:this.skus}}async acquireToken(e,t){this.logger.trace("03qeos",this.correlationId);let r=this.performanceClient.startMeasurement(yr,this.correlationId),o=Q.nowSeconds(),i=x(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{let s=await this.initializePlatformRequest(e);try{let c=await this.acquireTokensFromCache(this.accountId,s);return r.end({success:!0,isNativeBroker:!1,fromCache:!0}),c}catch(c){if(t===q.AccessToken)throw this.logger.info("0eitbc",this.correlationId),r.end({success:!1,brokerErrorCode:"cache_request_failed"}),c;this.logger.info("0957j1",this.correlationId)}let a=await this.platformAuthProvider.sendMessage(s);return await this.handleNativeResponse(a,s,o).then(c=>(r.end({success:!0,isNativeBroker:!0,requestId:c.requestId}),i.clearNativeBrokerErrorCode(),c)).catch(c=>{throw r.end({success:!1,errorCode:c.errorCode,subErrorCode:c.subError}),c})}catch(s){throw s instanceof Ee&&i.setNativeBrokerErrorCode(s.errorCode),r.end({success:!1}),s}}createSilentCacheRequest(e,t){return{authority:e.authority,correlationId:this.correlationId,scopes:V.fromString(e.scope,this.correlationId).asArray(),account:t,forceRefresh:!1}}async acquireTokensFromCache(e,t){if(!e)throw this.logger.warning("1ndf3e",this.correlationId),p(z.noAccountFound,this.correlationId);let r=this.browserStorage.getBaseAccountInfo({nativeAccountId:e},this.correlationId);if(!r)throw p(z.noAccountFound,this.correlationId);try{let o=this.createSilentCacheRequest(t,r),i=await this.silentCacheClient.acquireToken(o),s=this.browserStorage.getIdToken(r,this.correlationId,this.browserStorage.getTokenKeys(),r.tenantId),a=G.extractTokenClaims(s?.secret||"",b,this.correlationId),c=pt(r,void 0,a,s?.secret);return{...i,idToken:s?.secret||"",idTokenClaims:a,account:c}}catch(o){throw o}}async acquireTokenRedirect(e,t,r){this.logger.trace("0luikq",this.correlationId);let o=await this.initializePlatformRequest(e),i=r?.navigateToLoginRequestUrl??!0;try{await this.platformAuthProvider.sendMessage(o)}catch(c){if(c instanceof Ee&&(x(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled).setNativeBrokerErrorCode(c.errorCode),_t(c)))throw c}this.browserStorage.setTemporaryCache(U.NATIVE_REQUEST,JSON.stringify(o),!0);let s={apiId:R.acquireTokenRedirect,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},a=i?_.getAbsoluteUrl(e.redirectStartPage||window.location.href,me(),this.correlationId):qt(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId);t.end({success:!0}),await this.navigationClient.navigateExternal(a,s)}async handleRedirectPromise(){if(this.logger.trace("1c5lhw",this.correlationId),!this.browserStorage.isInteractionInProgress(!0))return this.logger.info("0le6uv",this.correlationId),null;let e=this.browserStorage.getCachedNativeRequest();if(!e)return this.logger.verbose("0a6zjb",this.correlationId),this.performanceClient?.addFields({errorCode:"no_cached_request"},this.correlationId),null;let{prompt:t,...r}=e;t&&this.logger.verbose("0ac34v",this.correlationId),this.browserStorage.removeItem(this.browserStorage.generateCacheKey(U.NATIVE_REQUEST));let o=Q.nowSeconds();try{this.logger.verbose("003x5a",this.correlationId);let i=await this.platformAuthProvider.sendMessage(r),s=await this.handleNativeResponse(i,r,o);return x(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled).clearNativeBrokerErrorCode(),this.performanceClient?.addFields({isNativeBroker:!0},this.correlationId),s}catch(i){throw i}}logout(){return this.logger.trace("0u2sjm",this.correlationId),Promise.reject("Logout not implemented yet")}async handleNativeResponse(e,t,r){this.logger.trace("1bojln",this.correlationId);let o=G.extractTokenClaims(e.id_token,b,this.correlationId),i=this.createHomeAccountIdentifier(e,o),s=this.browserStorage.getAccountInfoFilteredBy({nativeAccountId:t.accountId},this.correlationId)?.homeAccountId;if(t.extraParameters?.child_client_id&&e.account.id!==t.accountId)this.logger.info("1ub1in",this.correlationId);else if(i!==s&&e.account.id!==t.accountId)throw Zt(Ed,this.correlationId);let a=await pe(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,t.authority),c=wn(this.browserStorage,a,i,b,this.correlationId,o,e.client_info,a.getPreferredCache(),o.tid,void 0,e.account.id,this.logger,this.performanceClient);e.expires_in=Number(e.expires_in);let l=await this.generateAuthenticationResult(e,t,o,c,a.canonicalAuthority,r);return await this.cacheAccount(c,G.isKmsi(o)),await this.cacheNativeTokens(e,t,i,o,l.tenantId,r,a.getPreferredCache()),l}createHomeAccountIdentifier(e,t){return Ae.generateHomeAccountId(e.client_info||"",ie.Default,this.logger,this.browserCrypto,this.correlationId,t)}generateScopes(e,t){return t?V.fromString(t,this.correlationId):V.fromString(e,this.correlationId)}async generatePopAccessToken(e,t){if(t.tokenType===C.AuthenticationScheme.POP&&t.signPopToken){if(e.shr)return this.logger.trace("0coqhu",this.correlationId),e.shr;let r=new he(this.browserCrypto,this.performanceClient),o={resourceRequestMethod:t.resourceRequestMethod,resourceRequestUri:t.resourceRequestUri,shrClaims:t.shrClaims,shrNonce:t.shrNonce,correlationId:this.correlationId};if(!t.keyId)throw p(z.keyIdMissing,this.correlationId);return r.signPopToken(e.access_token,t.keyId,o)}else return e.access_token}async generateAuthenticationResult(e,t,r,o,i,s){let a=this.addTelemetryFromNativeResponse(e.properties.MATS),c=this.generateScopes(t.scope,e.scope),l=e.account.properties||{},h=l.UID||r.oid||r.sub||"",d=l.TenantId||r.tid||"",m=pt(Ae.getAccountInfo(o),void 0,r,e.id_token);if(m.nativeAccountId!==e.account.id){m.nativeAccountId=e.account.id;let k=d||m.tenantId,N=m.tenantProfiles?.get(k);N&&(N.nativeAccountId=e.account.id)}let g=await this.generatePopAccessToken(e,t),y=t.tokenType===C.AuthenticationScheme.POP?C.AuthenticationScheme.POP:C.AuthenticationScheme.BEARER;return{authority:i,uniqueId:h,tenantId:d,scopes:c.asArray(),account:m,idToken:e.id_token,idTokenClaims:r,accessToken:g,fromCache:a?this.isResponseFromCache(a):!1,expiresOn:Q.toDateFromSeconds(s+e.expires_in),tokenType:y,correlationId:this.correlationId,state:e.state,fromPlatformBroker:!0,...t.resource&&{resource:t.resource}}}async cacheAccount(e,t){await this.browserStorage.setAccount(e,this.correlationId,t,this.apiId),this.browserStorage.removeAccountContext(Ae.getAccountInfo(e),this.correlationId)}async cacheNativeTokens(e,t,r,o,i,s,a){let c=D.createIdTokenEntity(r,a,e.id_token||"",t.clientId,o.tid||""),l=t.tokenType===C.AuthenticationScheme.POP?C.SHR_NONCE_VALIDITY:(typeof e.expires_in=="string"?parseInt(e.expires_in,10):e.expires_in)||0,h=s+l,d=this.generateScopes(e.scope,t.scope),m=D.createAccessTokenEntity(r,a,e.access_token,t.clientId,o.tid||i,d.printScopes(),h,0,b,t.correlationId,void 0,t.tokenType,void 0,t.keyId);c&&t.storeInCache?.idToken!==!1&&await this.browserStorage.setIdTokenCredential(c,this.correlationId,G.isKmsi(o));let g={accessToken:m};return this.nativeStorageManager.saveCacheRecord(g,this.correlationId,G.isKmsi(o),this.apiId,t.storeInCache)}getExpiresInValue(e,t){return e===C.AuthenticationScheme.POP?C.SHR_NONCE_VALIDITY:(typeof t=="string"?parseInt(t,10):t)||0}addTelemetryFromNativeResponse(e){let t=this.getMATSFromResponse(e);return t?(this.performanceClient.addFields({extensionId:this.platformAuthProvider.getExtensionId(),extensionVersion:this.platformAuthProvider.getExtensionVersion(),matsBrokerVersion:t.broker_version,matsAccountJoinOnStart:t.account_join_on_start,matsAccountJoinOnEnd:t.account_join_on_end,matsDeviceJoin:t.device_join,matsPromptBehavior:t.prompt_behavior,matsApiErrorCode:t.api_error_code,matsUiVisible:t.ui_visible,matsSilentCode:t.silent_code,matsSilentBiSubCode:t.silent_bi_sub_code,matsSilentMessage:t.silent_message,matsSilentStatus:t.silent_status,matsHttpStatus:t.http_status,matsHttpEventCount:t.http_event_count},this.correlationId),t):null}getMATSFromResponse(e){if(e)try{return JSON.parse(e)}catch{this.logger.error("0b3l57",this.correlationId)}return null}isResponseFromCache(e){return typeof e.is_cached>"u"?(this.logger.verbose("1okqev",this.correlationId),!1):!!e.is_cached}async initializePlatformRequest(e){this.logger.trace("1xdm2a",this.correlationId);let t=await this.getCanonicalAuthority(e),r=e.skipBrokerClaims&&e.embeddedClientId?void 0:this.config.auth.clientCapabilities,{scopes:o,claims:i,...s}=e,a=new V(o||[],this.correlationId);a.appendScopes(C.OIDC_DEFAULT_SCOPES);let c=O.buildMergedClaims(i,r?.length?r:void 0),l={...s,claims:c,accountId:this.accountId,clientId:this.config.auth.clientId,authority:t.urlString,scope:a.printScopes(),redirectUri:qt(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId),prompt:this.getPrompt(e.prompt),correlationId:this.correlationId,tokenType:e.authenticationScheme,windowTitleSubstring:document.title,extraParameters:{...e.extraParameters},extendedExpiryToken:!1,keyId:e.popKid};if(l.signPopToken&&e.popKid)throw f(Ch,this.correlationId);if(this.handleExtraBrokerParams(l),l.extraParameters=l.extraParameters||{},l.extraParameters.telemetry=se.MATS_TELEMETRY,e.authenticationScheme===C.AuthenticationScheme.POP){let h={resourceRequestUri:e.resourceRequestUri,resourceRequestMethod:e.resourceRequestMethod,shrClaims:e.shrClaims,shrNonce:e.shrNonce,correlationId:this.correlationId},d=new he(this.browserCrypto,this.performanceClient),m;if(l.keyId)m=this.browserCrypto.base64UrlEncode(JSON.stringify({kid:l.keyId})),l.signPopToken=!1;else{let g=await u(d.generateCnf.bind(d),$.PopTokenGenerateCnf,this.logger,this.performanceClient,this.correlationId)(h,this.logger);m=g.reqCnfString,l.keyId=g.kid,l.signPopToken=!0}l.reqCnf=m}return this.addRequestSKUs(l),l}async getCanonicalAuthority(e){let t=e.authority||this.config.auth.authority,{azureCloudOptions:r,account:o}=e;o&&await pe(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,t,r,void 0,o);let i=new _(t,this.correlationId);return i.validateAsUri(),i}getPrompt(e){switch(this.apiId){case R.ssoSilent:case R.acquireTokenSilent_silentFlow:return this.logger.trace("12n1y2",this.correlationId),C.PromptValue.NONE}if(!e){this.logger.trace("0uid1p",this.correlationId);return}switch(e){case C.PromptValue.NONE:case C.PromptValue.CONSENT:case C.PromptValue.LOGIN:return this.logger.trace("0i0hco",this.correlationId),e;default:throw this.logger.trace(`0w3tpw ${e}`,this.correlationId),f(fh,this.correlationId)}}handleExtraBrokerParams(e){let t=e.extraParameters&&e.extraParameters.hasOwnProperty(Je.BROKER_CLIENT_ID)&&e.extraParameters.hasOwnProperty(Je.BROKER_REDIRECT_URI)&&e.extraParameters.hasOwnProperty(Je.CLIENT_ID);if(!e.embeddedClientId&&!t)return;let r="",o=e.redirectUri;e.embeddedClientId?(e.redirectUri=this.config.auth.redirectUri,r=e.embeddedClientId):e.extraParameters&&(e.redirectUri=e.extraParameters[Je.BROKER_REDIRECT_URI],r=e.extraParameters[Je.CLIENT_ID]),e.extraParameters={child_client_id:r,child_redirect_uri:o},this.performanceClient?.addFields({embeddedClientId:r,embeddedRedirectUri:o},this.correlationId)}};var Rp=new Map([["e","AAD"],["m","MSA"]]);function kp(n){if(!n)return null;try{let r=(/%(?:[0-9A-Fa-f]{2})/.test(n)?decodeURIComponent(n):n).split("|");return r.length<5?null:{accountType:Rp.get(r[0]?.trim()||"")||"",error:r[1]?.trim()||"",subError:r[2]?.trim()||"",cloudInstance:r[3]?.trim()||"",callerDataBoundary:r[4]?.trim()||""}}catch{return null}}function Rd(n,e,t){let r=kp(n.clientdata);r?.accountType&&t.addFields({accountType:r.accountType},e),r?.error&&t.addFields({serverErrorNo:r.error},e),r?.subError&&t.addFields({serverSubErrorNo:r.subError},e)}async function Lc(n,e,t,r,o){let i=Ie.getStandardAuthorizeRequestParameters({...n.auth,authority:e},t,r,o);if(O.addLibraryInfo(i,{sku:X.MSAL_SKU,version:Z,os:"",cpu:""}),n.system.protocolMode!==P.OIDC&&O.addApplicationTelemetry(i,n.telemetry.application),t.platformBroker&&(O.addNativeBroker(i),o.addFields({isPlatformAuthorizeRequest:!0},t.correlationId),t.authenticationScheme===C.AuthenticationScheme.POP)){let s=new Ge(r,o),a=new he(s,o),c;t.popKid?c=s.encodeKid(t.popKid):c=(await u(a.generateCnf.bind(a),$.PopTokenGenerateCnf,r,o,t.correlationId)(t,r)).reqCnfString,O.addPopToken(i,c)}return O.instrumentBrokerParams(i,t.correlationId,o),i}async function Fr(n,e,t,r,o){if(!t.codeChallenge)throw S(re.pkceParamsMissing,t.correlationId);let i=await u(Lc,kl,r,o,t.correlationId)(n,e,t,r,o);return O.addResponseType(i,C.OAuthResponseType.CODE),O.addCodeChallengeParams(i,t.codeChallenge,C.S256_CODE_CHALLENGE_METHOD),O.addExtraParameters(i,{...t.extraQueryParameters,...t.extraParameters}),Ie.getAuthorizeUrl(e,i)}async function Hc(n,e,t,r,o){if(!t.earJwk)throw f(pc,t.correlationId);let i=await Lc(n,e,t,r,o);O.addResponseType(i,C.OAuthResponseType.IDTOKEN_TOKEN_REFRESHTOKEN),O.addEARParameters(i,t.earJwk),O.addCodeChallengeParams(i,t.codeChallenge,C.S256_CODE_CHALLENGE_METHOD),O.addExtraParameters(i,{...t.extraParameters});let s=new Map;return O.addExtraParameters(s,t.extraQueryParameters||{}),O.addCorrelationId(s,t.correlationId),{action:Ie.getAuthorizeUrl(e,s),fields:Object.fromEntries(i)}}async function Kr(n,e,t,r,o,i){let{action:s,fields:a}=await Hc(e,t,r,o,i);return kd(n,s,a)}async function Fc(n,e,t,r,o){let i=await Lc(n,e,t,r,o);O.addResponseType(i,C.OAuthResponseType.CODE),O.addCodeChallengeParams(i,t.codeChallenge,t.codeChallengeMethod||C.S256_CODE_CHALLENGE_METHOD),O.addExtraParameters(i,{...t.extraParameters});let s=new Map;return O.addExtraParameters(s,t.extraQueryParameters||{}),O.addCorrelationId(s,t.correlationId),{action:Ie.getAuthorizeUrl(e,s),fields:Object.fromEntries(i)}}async function Br(n,e,t,r,o,i){let{action:s,fields:a}=await Fc(e,t,r,o,i);return kd(n,s,a)}function kd(n,e,t){let r=n.createElement("form");return r.method="post",r.action=e,Object.keys(t).forEach(o=>{let i=n.createElement("input");i.hidden=!0,i.name=o,i.value=t[o],r.appendChild(i)}),n.body.appendChild(r),r}async function vd(n,e,t,r,o,i,s,a,c,l){if(a.verbose("11qcow",n.correlationId),!l)throw f(Dn,n.correlationId);let h=new Ge(a,c),d=new Rt(r,o,h,a,s,r.system.navigationClient,t,c,l,e,i,n.correlationId),{userRequestState:m}=W.parseRequestState(h.base64Decode,n.state,n.correlationId);return u(d.acquireToken.bind(d),yr,a,c,n.correlationId)({...n,state:m,prompt:void 0})}async function ht(n,e,t,r,o,i,s,a,c,l,h,d){if(rt.removeThrottle(s,o.auth.clientId,n),Rd(e,n.correlationId,h),e.accountId)return u(vd,lc,l,h,n.correlationId)(n,e.accountId,r,o,s,a,c,l,h,d);let m={...n,code:e.code||"",codeVerifier:t},g=new Lr(i,s,m,l,h);return await u(g.handleCodeResponse.bind(g),vl,l,h,n.correlationId)(e,n,r)}async function zr(n,e,t,r,o,i,s,a,c,l,h){if(rt.removeThrottle(i,r.auth.clientId,n),Rd(e,n.correlationId,l),Ie.validateAuthorizationResponse(e,n.state,n.correlationId),!e.ear_jwe)throw f(jl,n.correlationId);if(!n.earJwk)throw f(pc,n.correlationId);let d=JSON.parse(await u(Hh,$l,c,l,n.correlationId)(n.earJwk,e.ear_jwe));if(d.accountId)return u(vd,lc,c,l,n.correlationId)(n,d.accountId,t,r,i,s,a,c,l,h);let m=new be(r.auth.clientId,i,new Ge(c,l),c,l,null,null);m.validateTokenResponse(d,n.correlationId);let g={code:"",state:n.state,nonce:n.nonce,client_info:d.client_info,cloud_graph_host_name:d.cloud_graph_host_name,cloud_instance_host_name:d.cloud_instance_host_name,cloud_instance_name:d.cloud_instance_name,msgraph_host:d.msgraph_host};return await u(m.handleServerTokenResponse.bind(m),$.HandleServerTokenResponse,c,l,n.correlationId)(d,o,Q.nowSeconds(),n,t,g,void 0,void 0,void 0,void 0)}var vp=32;async function Ue(n,e,t){let r=J(Op,xl,e,n,t)(n,e,t),o=await u(bp,Ll,e,n,t)(r,n,e,t);return{verifier:r,challenge:o}}function Op(n,e,t){try{let r=new Uint8Array(vp);return J(Uh,Fl,e,n,t)(r),we(r)}catch{throw f(mc,t)}}async function bp(n,e,t,r){try{let o=await u(_c,Hl,t,e,r)(n);return we(new Uint8Array(o))}catch{throw f(mc,r)}}var Zn=class n{navigateInternal(e,t){return n.defaultNavigateWindow(e,t)}navigateExternal(e,t){return n.defaultNavigateWindow(e,t)}static defaultNavigateWindow(e,t){return t.noHistory?window.location.replace(e):window.location.assign(e),new Promise((r,o)=>{setTimeout(()=>{o(f(it,"","failed_to_redirect"))},t.timeout)})}};var ei=class{async sendGetRequestAsync(e,t){let r,o={},i=0,s=Od(t);try{r=await fetch(e,{method:Cc.GET,headers:s})}catch(a){throw $t(f(window.navigator.onLine?ch:Uo,""),void 0,void 0,a)}o=bd(r.headers);try{return i=r.status,{headers:o,body:await r.json(),status:i}}catch(a){throw $t(f(gc,""),i,o,a)}}async sendPostRequestAsync(e,t){let r=t&&t.body||"",o=Od(t),i,s=0,a={};try{i=await fetch(e,{method:Cc.POST,headers:o,body:r})}catch(c){throw $t(f(window.navigator.onLine?ah:Uo,""),void 0,void 0,c)}a=bd(i.headers);try{return s=i.status,{headers:a,body:await i.json(),status:s}}catch(c){throw $t(f(gc,""),s,a,c)}}};function Od(n){try{let e=new Headers;if(!(n&&n.headers))return e;let t=n.headers;return Object.entries(t).forEach(([r,o])=>{e.append(r,o)}),e}catch(e){throw $t(f(yh,""),void 0,void 0,e)}}function bd(n){try{let e={};return n.forEach((t,r)=>{e[r]=t}),e}catch{throw f(Eh,"")}}var Pp=6e4,Np=1e4,Mp=3e4,Kc=2e3;function Pd({auth:n,cache:e,system:t,experimental:r,telemetry:o},i){let s={clientId:"",authority:`${C.DEFAULT_AUTHORITY}`,knownAuthorities:[],cloudDiscoveryMetadata:"",authorityMetadata:"",redirectUri:typeof window<"u"&&window.location?window.location.href.split("?")[0].split("#")[0]:"",postLogoutRedirectUri:"",popupRelayUri:"",clientCapabilities:[],OIDCOptions:{responseMode:C.ResponseMode.FRAGMENT,defaultScopes:[C.OPENID_SCOPE,C.PROFILE_SCOPE,C.OFFLINE_ACCESS_SCOPE]},azureCloudOptions:{azureCloudInstance:gt.None,tenant:""},instanceAware:!1,isMcp:!1,verifySSO:!1},a={cacheLocation:ae.SessionStorage,cacheRetentionDays:5},c={loggerCallback:()=>{},logLevel:v.Info,piiLoggingEnabled:!1},h={...{...En,loggerOptions:c,networkClient:i?new ei:sc,navigationClient:new Zn,popupBridgeTimeout:t?.popupBridgeTimeout||Pp,iframeBridgeTimeout:t?.iframeBridgeTimeout||Np,redirectNavigationTimeout:Mp,allowRedirectInIframe:!1,navigatePopups:!0,allowPlatformBroker:!1,nativeBrokerHandshakeTimeout:t?.nativeBrokerHandshakeTimeout||Kc,protocolMode:P.AAD,serverTelemetryEnabled:!1},...t,loggerOptions:t?.loggerOptions||c},d={application:{appName:"",appVersion:""},client:new et},m={iframeTimeoutTelemetry:!1,allowPlatformBrokerWithDOM:!1};if(t?.protocolMode!==P.OIDC&&n?.OIDCOptions&&new j(h.loggerOptions,wt,Z).warning(JSON.stringify(S(re.cannotSetOIDCOptions,"")),""),t?.protocolMode&&t.protocolMode===P.OIDC&&h?.allowPlatformBroker)throw S(re.cannotAllowPlatformBroker,"");return{auth:{...s,...n,OIDCOptions:{...s.OIDCOptions,...n?.OIDCOptions}},cache:{...a,...e},system:h,experimental:{...m,...r},telemetry:{...d,...o}}}var ti=class n{constructor(e,t,r,o){this.logger=e,this.handshakeTimeoutMs=t,this.extensionId=o,this.resolvers=new Map,this.handshakeResolvers=new Map,this.messageChannel=new MessageChannel,this.windowListener=this.onWindowMessage.bind(this),this.performanceClient=r,this.handshakeEvent=this.performanceClient.startMeasurement(Ul),this.platformAuthType=se.PLATFORM_EXTENSION_PROVIDER}async sendMessage(e){this.logger.trace(`0on4p2 ${this.platformAuthType}`,e.correlationId);let t={method:Or.GetToken,request:e},r={channel:se.CHANNEL_ID,extensionId:this.extensionId,responseId:ue(),body:t};this.logger.trace(`1qadfi ${this.platformAuthType}`,e.correlationId),this.logger.tracePii(`1xm533 ${this.platformAuthType} ${JSON.stringify(r)}`,e.correlationId),this.messageChannel.port1.postMessage(r);let o=await new Promise((s,a)=>{this.resolvers.set(r.responseId,{resolve:s,reject:a})});return this.validatePlatformBrokerResponse(o)}static async createProvider(e,t,r,o){e.trace("15zfnw",o);try{let i=new n(e,t,r,se.PREFERRED_EXTENSION_ID);return await i.sendHandshakeRequest(o),i}catch{let s=new n(e,t,r);return await s.sendHandshakeRequest(o),s}}async sendHandshakeRequest(e){this.logger.trace(`1dpg9o ${this.platformAuthType}`,e),window.addEventListener("message",this.windowListener,!1);let t={channel:se.CHANNEL_ID,extensionId:this.extensionId,responseId:ue(),body:{method:Or.HandshakeRequest}};return this.handshakeEvent.add({extensionId:this.extensionId,extensionHandshakeTimeoutMs:this.handshakeTimeoutMs}),this.messageChannel.port1.onmessage=r=>{this.onChannelMessage(r)},window.postMessage(t,window.origin,[this.messageChannel.port2]),new Promise((r,o)=>{this.handshakeResolvers.set(t.responseId,{resolve:r,reject:o}),this.timeoutId=window.setTimeout(()=>{window.removeEventListener("message",this.windowListener,!1),this.messageChannel.port1.close(),this.messageChannel.port2.close(),this.handshakeEvent.end({extensionHandshakeTimedOut:!0,success:!1}),o(f(mh,"")),this.handshakeResolvers.delete(t.responseId)},this.handshakeTimeoutMs)})}onWindowMessage(e){let t=Fo();if(this.logger.trace(`0jpn5u ${this.platformAuthType}`,t),e.source!==window)return;let r=e.data;if(!(!r.channel||r.channel!==se.CHANNEL_ID)&&!(r.extensionId&&r.extensionId!==this.extensionId)&&r.body.method===Or.HandshakeRequest){let o=this.handshakeResolvers.get(r.responseId);if(!o){this.logger.trace(`07buhm ${this.platformAuthType} ${r.responseId}`,t);return}this.logger.verbose(r.extensionId?`0xrkug ${r.extensionId}`:"No extension installed",t),clearTimeout(this.timeoutId),this.messageChannel.port1.close(),this.messageChannel.port2.close(),window.removeEventListener("message",this.windowListener,!1),this.handshakeEvent.end({success:!1,extensionInstalled:!1}),o.reject(f(ph,""))}}onChannelMessage(e){let t=Fo();this.logger.trace(`1py8yf ${this.platformAuthType}`,t);let r=e.data,o=this.resolvers.get(r.responseId),i=this.handshakeResolvers.get(r.responseId);try{let s=r.body.method;if(s===Or.Response){if(!o)return;let a=r.body.response;if(this.logger.trace(`19hpgm ${this.platformAuthType}`,t),this.logger.tracePii(`179a24 ${this.platformAuthType} ${JSON.stringify(a)}`,t),a.status!=="Success")o.reject(Zt(a.code,t,a.description,a.ext));else if(a.result)a.result.code&&a.result.description?o.reject(Zt(a.result.code,t,a.result.description,a.result.ext)):o.resolve(a.result);else throw cr(ft.unexpectedError,t,"Event does not contain result.");this.resolvers.delete(r.responseId)}else if(s===Or.HandshakeResponse){if(!i){this.logger.trace(`082qnt ${this.platformAuthType} ${r.responseId}`,t);return}clearTimeout(this.timeoutId),window.removeEventListener("message",this.windowListener,!1),this.extensionId=r.extensionId,this.extensionVersion=r.body.version,this.logger.verbose(`0yf5ib ${this.platformAuthType} ${this.extensionId}`,t),this.handshakeEvent.end({extensionInstalled:!0,success:!0}),i.resolve(),this.handshakeResolvers.delete(r.responseId)}}catch(s){this.logger.error("0xf978",t),this.logger.errorPii(`04i99o ${s}`,t),this.logger.errorPii(`0xdvsy ${e}`,t),o?o.reject(s):i&&i.reject(s)}}validatePlatformBrokerResponse(e){if(e.hasOwnProperty("access_token")&&e.hasOwnProperty("id_token")&&e.hasOwnProperty("client_info")&&e.hasOwnProperty("account")&&e.hasOwnProperty("scope")&&e.hasOwnProperty("expires_in"))return e;throw cr(ft.unexpectedError,"","Response missing expected properties.")}getExtensionId(){return this.extensionId}getExtensionVersion(){return this.extensionVersion}getExtensionName(){return this.getExtensionId()===se.PREFERRED_EXTENSION_ID?"chrome":this.getExtensionId()?.length?"unknown":void 0}};var ri=class n{constructor(e,t,r){this.logger=e,this.performanceClient=t,this.correlationId=r,this.platformAuthType=se.PLATFORM_DOM_PROVIDER}static async createProvider(e,t,r){if(e.trace("12mj4a",r),window.navigator?.platformAuthentication&&(await window.navigator.platformAuthentication.getSupportedContracts(se.MICROSOFT_ENTRA_BROKERID))?.includes(se.PLATFORM_DOM_APIS))return e.trace("1h5q1r",r),new n(e,t,r)}getExtensionId(){return se.MICROSOFT_ENTRA_BROKERID}getExtensionVersion(){return""}getExtensionName(){return se.DOM_API_NAME}async sendMessage(e){this.logger.trace(`02bcil ${this.platformAuthType}`,e.correlationId);try{let t=this.initializePlatformDOMRequest(e),r=await window.navigator.platformAuthentication.executeGetToken(t);return this.validatePlatformBrokerResponse(r,e.correlationId)}catch(t){throw this.logger.error(`11im7g ${this.platformAuthType}`,e.correlationId),t}}initializePlatformDOMRequest(e){this.logger.trace(`15d6yv ${this.platformAuthType}`,e.correlationId);let{accountId:t,clientId:r,authority:o,scope:i,redirectUri:s,correlationId:a,state:c,storeInCache:l,embeddedClientId:h,extraParameters:d,...m}=e,g=this.getDOMExtraParams(m,a);return{accountId:t,brokerId:this.getExtensionId(),authority:o,clientId:r,correlationId:a||this.correlationId,extraParameters:{...d,...g},isSecurityTokenService:!1,redirectUri:s,scope:i,state:c,storeInCache:l,embeddedClientId:h}}validatePlatformBrokerResponse(e,t){if(e.hasOwnProperty("isSuccess")){if(e.hasOwnProperty("accessToken")&&e.hasOwnProperty("idToken")&&e.hasOwnProperty("clientInfo")&&e.hasOwnProperty("account")&&e.hasOwnProperty("scopes")&&e.hasOwnProperty("expiresIn"))return this.logger.trace(`0h4vei ${this.platformAuthType}`,t),this.convertToPlatformBrokerResponse(e,t);if(e.hasOwnProperty("error")){let r=e;if(r.isSuccess===!1&&r.error&&r.error.code)throw this.logger.trace(`0g92vm ${this.platformAuthType}`,t),Zt(r.error.code,t,r.error.description,{error:parseInt(r.error.errorCode),protocol_error:r.error.protocolError,status:r.error.status,properties:r.error.properties})}}throw cr(ft.unexpectedError,t,"Response missing expected properties.")}convertToPlatformBrokerResponse(e,t){return this.logger.trace(`14913t ${this.platformAuthType}`,t),{access_token:e.accessToken,id_token:e.idToken,client_info:e.clientInfo,account:e.account,expires_in:e.expiresIn,scope:e.scopes,state:e.state||"",properties:e.properties||{},extendedLifetimeToken:e.extendedLifetimeToken??!1,shr:e.proofOfPossessionPayload}}getDOMExtraParams(e,t){try{let r={};for(let[o,i]of Object.entries(e))i&&(typeof i=="object"?r[o]=JSON.stringify(i):r[o]=String(i));return r}catch(r){return this.logger.error(`0eu9o3 ${this.platformAuthType}`,t),this.logger.errorPii(`17rpl5 ${this.platformAuthType} ${r}`,t),{}}}};async function Nd(n,e,t,r,o){n.trace("134j0v",t),n.trace(`04c81g ${o}`,t);let i;try{o&&(i=await ri.createProvider(n,e,t)),i||(n.trace("0l3na8",t),i=await ti.createProvider(n,r||Kc,e,t))}catch(s){n.trace("0icbd7",s)}return i}function dt(n,e,t,r,o){if(e.trace("0uko3r",t),!n.system.allowPlatformBroker&&n.experimental.allowPlatformBrokerWithDOM)throw S(re.invalidPlatformBrokerConfiguration,"");if(!n.system.allowPlatformBroker)return e.trace("04hozs",t),!1;if(!r)return e.trace("0kvv1r",t),!1;if(o)switch(o){case C.AuthenticationScheme.BEARER:case C.AuthenticationScheme.POP:return e.trace("18tev1",t),!0;default:return e.trace("1dd2nh",t),!1}return!0}var oi=class extends fe{constructor(e,t,r,o,i,s,a,c,l,h,d){super(e,t,r,o,i,s,a,l,h),this.nativeStorage=c,this.eventHandler=i,this.waitForPopupResponseHook=d}acquireToken(e,t){let r;try{if(r={popupName:this.generatePopupName(e.scopes||C.OIDC_DEFAULT_SCOPES,e.authority||this.config.auth.authority),popupWindowAttributes:e.popupWindowAttributes||{},popupWindowParent:e.popupWindowParent??window},this.performanceClient.addFields({isAsyncPopup:!this.config.system.navigatePopups},this.correlationId),this.config.system.navigatePopups){let i={...e,httpMethod:qn(e,this.config.system.protocolMode)};return this.logger.verbose("1f9ok3",this.correlationId),r.popup=this.openSizedPopup("about:blank",r),this.acquireTokenPopupAsync(i,r,t)}else return this.logger.verbose("162h4u",this.correlationId),this.acquireTokenPopupAsync(e,r,t)}catch(o){return Promise.reject(o)}}logout(e){try{this.logger.verbose("068rup",this.correlationId);let t=this.initializeLogoutRequest(e),r={popupName:this.generateLogoutPopupName(t),popupWindowAttributes:e?.popupWindowAttributes||{},popupWindowParent:e?.popupWindowParent??window},o=e&&e.authority,i=e&&e.mainWindowRedirectUri;return this.config.system.navigatePopups?(this.logger.verbose("1a28da",this.correlationId),r.popup=this.openSizedPopup("about:blank",r),this.logoutPopupAsync(t,r,o,i)):(this.logger.verbose("1phd8u",this.correlationId),this.logoutPopupAsync(t,r,o,i))}catch(t){return Promise.reject(t)}}async acquireTokenPopupAsync(e,t,r){this.logger.verbose("1g77pg",this.correlationId);let o=await u(lt,ot,this.logger,this.performanceClient,this.correlationId)(e,E.Popup,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);t.popup&&zn(o.authority);let i=dt(this.config,this.logger,this.correlationId,this.platformAuthProvider,e.authenticationScheme);return o.platformBroker=i,this.config.system.protocolMode===P.EAR?this.executeEarFlow(o,t,r):this.executeCodeFlow(o,t,r)}async executeCodeFlow(e,t,r){let o=e.correlationId,i=x(R.acquireTokenPopup,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),s=r||await u(Ue,Ne,this.logger,this.performanceClient,o)(this.performanceClient,this.logger,o),a={...e,codeChallenge:s.challenge};try{let c=await u(this.createAuthCodeClient.bind(this),Se,this.logger,this.performanceClient,o)({serverTelemetryManager:i,requestAuthority:a.authority,requestAzureCloudOptions:a.azureCloudOptions,requestExtraQueryParameters:a.extraQueryParameters,account:a.account});if(a.httpMethod===C.HttpMethod.POST)return await this.executeCodeFlowWithPost(a,t,c,s.verifier);{let l=await u(Fr,$.GetAuthCodeUrl,this.logger,this.performanceClient,o)(this.config,c.authority,a,this.logger,this.performanceClient),h=this.config.auth.popupRelayUri,d=h?Xn(h,this.getRelayStateId(e.state,o),{method:"GET",url:l},o):l,m=this.initiateAuthRequest(d,t);this.eventHandler.emitEvent(A.POPUP_OPENED,o,E.Popup,{popupWindow:m},null);let g=await this.waitForPopupResponse(e,m,t.popupWindowParent),y=J(Xt,jt,this.logger,this.performanceClient,this.correlationId)(g,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);return await u(ht,nt,this.logger,this.performanceClient,o)(e,y,s.verifier,R.acquireTokenPopup,this.config,c,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}}catch(c){throw t.popup?.close(),c instanceof I&&(c.correlationId=this.correlationId,i.cacheFailedRequest(c)),c}}async executeEarFlow(e,t,r){let{correlationId:o,authority:i,azureCloudOptions:s,extraQueryParameters:a,account:c}=e,l=await u(pe,Pe,this.logger,this.performanceClient,o)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,i,s,a,c),h=await u(Pr,Ir,this.logger,this.performanceClient,o)(),d=r||await u(Ue,Ne,this.logger,this.performanceClient,o)(this.performanceClient,this.logger,o),m={...e,earJwk:h,codeChallenge:d.challenge},g=await this.openPostFormPopup(m,l,t,o,!0),y=await u(this.waitForPopupResponse.bind(this),Tr,this.logger,this.performanceClient,o)(m,g,t.popupWindowParent),T=J(Xt,jt,this.logger,this.performanceClient,this.correlationId)(y,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);if(!T.ear_jwe&&T.code){let k=await u(this.createAuthCodeClient.bind(this),Se,this.logger,this.performanceClient,o)({serverTelemetryManager:x(R.acquireTokenPopup,this.config.auth.clientId,o,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account,authority:l});return u(ht,nt,this.logger,this.performanceClient,o)(m,T,d.verifier,R.acquireTokenPopup,this.config,k,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}else return u(zr,Ar,this.logger,this.performanceClient,o)(m,T,R.acquireTokenPopup,this.config,l,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async executeCodeFlowWithPost(e,t,r,o){let i=e.correlationId,s=await u(pe,Pe,this.logger,this.performanceClient,i)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger),a=await this.openPostFormPopup(e,s,t,i,!1),c=await u(this.waitForPopupResponse.bind(this),Tr,this.logger,this.performanceClient,i)(e,a,t.popupWindowParent),l=J(Xt,jt,this.logger,this.performanceClient,this.correlationId)(c,this.config.auth.OIDCOptions.responseMode,this.logger,this.correlationId);return u(ht,nt,this.logger,this.performanceClient,i)(e,l,o,R.acquireTokenPopup,this.config,r,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async logoutPopupAsync(e,t,r,o){this.logger.verbose("0b7yrk",this.correlationId),this.eventHandler.emitEvent(A.LOGOUT_START,this.correlationId,E.Popup,e);let i=x(R.logoutPopup,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{await xr(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,e.account);let s=await u(this.createAuthCodeClient.bind(this),Se,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:i,requestAuthority:r,account:e.account||void 0});try{s.authority.endSessionEndpoint}catch{if(e.account?.homeAccountId&&e.postLogoutRedirectUri&&s.authority.protocolMode===P.OIDC){if(this.eventHandler.emitEvent(A.LOGOUT_SUCCESS,e.correlationId,E.Popup,e),o){let d={apiId:R.logoutPopup,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},m=_.getAbsoluteUrl(o,me(),this.correlationId);await this.navigationClient.navigateInternal(m,d)}t.popup?.close();return}}e.state=W.setRequestState(this.browserCrypto,e.state||"",{interactionType:E.Popup},e.correlationId);let a=s.getLogoutUri(e);this.eventHandler.emitEvent(A.LOGOUT_SUCCESS,e.correlationId,E.Popup,e);let c=this.config.auth.popupRelayUri,l=c?Xn(c,this.getRelayStateId(e.state||"",this.correlationId),{method:"GET",url:a},this.correlationId):a,h=this.openPopup(l,t);if(this.eventHandler.emitEvent(A.POPUP_OPENED,e.correlationId,E.Popup,{popupWindow:h},null),await this.waitForPopupResponse(e,h,t.popupWindowParent).catch(()=>{}),o){let d={apiId:R.logoutPopup,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},m=_.getAbsoluteUrl(o,me(),this.correlationId);this.logger.verbose("0qcur2",this.correlationId),this.logger.verbosePii(`0oj7lk ${m}`,this.correlationId),await this.navigationClient.navigateInternal(m,d)}else this.logger.verbose("03zgcf",this.correlationId)}catch(s){throw t.popup?.close(),s instanceof I&&(s.correlationId=this.correlationId,i.cacheFailedRequest(s)),this.eventHandler.emitEvent(A.LOGOUT_FAILURE,this.correlationId,E.Popup,null,s),this.eventHandler.emitEvent(A.LOGOUT_END,this.correlationId,E.Popup),s}this.eventHandler.emitEvent(A.LOGOUT_END,this.correlationId,E.Popup)}initiateAuthRequest(e,t){if(e)return this.logger.infoPii(`1kcr9k ${e}`,this.correlationId),this.openPopup(e,t);throw this.logger.error("1l7hyp",this.correlationId),f(wr,this.correlationId)}openPopup(e,t){try{let r;if(t.popup?(r=t.popup,this.logger.verbosePii(`0cgeo7 ${e}`,this.correlationId),r.location.assign(e)):typeof t.popup>"u"&&(this.logger.verbosePii(`0c2awd ${e}`,this.correlationId),r=this.openSizedPopup(e,t)),!r)throw f(Zl,this.correlationId);try{r.document.title="Microsoft Authentication"}catch(o){typeof DOMException<"u"&&o instanceof DOMException&&o.name==="SecurityError"||this.logger.verbose("1s1yfs",this.correlationId)}return r.focus&&r.focus(),this.currentWindow=r,r}catch(r){throw this.logger.error(`0dxfb9 ${r.message}`,this.correlationId),f(Xl,this.correlationId)}}openSizedPopup(e,{popupName:t,popupWindowAttributes:r,popupWindowParent:o}){let i=o.screenLeft?o.screenLeft:o.screenX,s=o.screenTop?o.screenTop:o.screenY,a=o.innerWidth||document.documentElement.clientWidth||document.body.clientWidth,c=o.innerHeight||document.documentElement.clientHeight||document.body.clientHeight,l=r.popupSize?.width,h=r.popupSize?.height,d=r.popupPosition?.top,m=r.popupPosition?.left;return(!l||l<0||l>a)&&(this.logger.verbose("08vfmo",this.correlationId),l=X.POPUP_WIDTH),(!h||h<0||h>c)&&(this.logger.verbose("09cxa0",this.correlationId),h=X.POPUP_HEIGHT),(!d||d<0||d>c)&&(this.logger.verbose("1qh4wo",this.correlationId),d=Math.max(0,c/2-X.POPUP_HEIGHT/2+s)),(!m||m<0||m>a)&&(this.logger.verbose("1sz3en",this.correlationId),m=Math.max(0,a/2-X.POPUP_WIDTH/2+i)),o.open(e,t,`width=${l}, height=${h}, top=${d}, left=${m}, scrollbars=yes`)}generatePopupName(e,t){return`${X.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${e.join("-")}.${t}.${this.correlationId}`}generateLogoutPopupName(e){let t=e.account&&e.account.homeAccountId;return`${X.POPUP_NAME_PREFIX}.${this.config.auth.clientId}.${t}.${this.correlationId}`}getRelayStateId(e,t){return W.parseRequestState(b,e,t).libraryState.id}async openPostFormPopup(e,t,r,o,i){let s=this.config.auth.popupRelayUri;if(s){let d=await(i?Hc:Fc)(this.config,t,e,this.logger,this.performanceClient),m=Xn(s,this.getRelayStateId(e.state,o),{method:"POST",action:d.action,fields:d.fields},o);return this.initiateAuthRequest(m,r)}let a=r.popup||this.openPopup("about:blank",r);return(await(i?Kr:Br)(a.document,this.config,t,e,this.logger,this.performanceClient)).submit(),a}async waitForPopupResponse(e,t,r){return this.config.auth.popupRelayUri?pd(this.config.system.popupBridgeTimeout,this.logger,e,t,this.performanceClient):this.waitForPopupResponseHook?this.waitForPopupResponseHook(e,t,r):Yt(this.config.system.popupBridgeTimeout,this.logger,e,this.performanceClient)}};function Up(){if(typeof window>"u"||typeof window.performance>"u"||typeof window.performance.getEntriesByType!="function")return;let n=window.performance.getEntriesByType("navigation");return(n.length?n[0]:void 0)?.type}var ni=class extends fe{constructor(e,t,r,o,i,s,a,c,l,h){super(e,t,r,o,i,s,a,l,h),this.nativeStorage=c}async acquireToken(e){let t=await u(lt,ot,this.logger,this.performanceClient,this.correlationId)(e,E.Redirect,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);t.platformBroker=dt(this.config,this.logger,this.correlationId,this.platformAuthProvider,e.authenticationScheme);let r=i=>{i.persisted&&(this.logger.verbose("0udvtt",this.correlationId),this.browserStorage.resetRequestCache(this.correlationId),this.eventHandler.emitEvent(A.RESTORE_FROM_BFCACHE,this.correlationId,E.Redirect))},o=this.getRedirectStartPage(e.redirectStartPage);this.logger.verbosePii(`0zao0a ${o}`,this.correlationId),this.browserStorage.setTemporaryCache(U.ORIGIN_URI,o,!0),window.addEventListener("pageshow",r);try{this.config.system.protocolMode===P.EAR?await this.executeEarFlow(t):await this.executeCodeFlow(t)}catch(i){throw i instanceof I&&(i.correlationId=this.correlationId),window.removeEventListener("pageshow",r),i}}async executeCodeFlow(e){let t=e.correlationId,r=x(R.acquireTokenRedirect,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),o=await u(Ue,Ne,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),i={...e,codeChallenge:o.challenge};this.browserStorage.cacheAuthorizeRequest(i,this.correlationId,o.verifier);try{if(i.httpMethod===C.HttpMethod.POST)return await this.executeCodeFlowWithPost(i);{let s=await u(this.createAuthCodeClient.bind(this),Se,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:r,requestAuthority:i.authority,requestAzureCloudOptions:i.azureCloudOptions,requestExtraQueryParameters:i.extraQueryParameters,account:i.account}),a=await u(Fr,$.GetAuthCodeUrl,this.logger,this.performanceClient,e.correlationId)(this.config,s.authority,i,this.logger,this.performanceClient);return await this.initiateAuthRequest(a)}}catch(s){throw s instanceof I&&(s.correlationId=this.correlationId,r.cacheFailedRequest(s)),s}}async executeEarFlow(e){let{correlationId:t,authority:r,azureCloudOptions:o,extraQueryParameters:i,account:s}=e,a=await u(pe,Pe,this.logger,this.performanceClient,t)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,r,o,i,s),c=await u(Pr,Ir,this.logger,this.performanceClient,t)(),l=await u(Ue,Ne,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),h={...e,earJwk:c,codeChallenge:l.challenge};return this.browserStorage.cacheAuthorizeRequest(h,this.correlationId,l.verifier),(await Kr(document,this.config,a,h,this.logger,this.performanceClient)).submit(),new Promise((m,g)=>{setTimeout(()=>{g(f(it,"","failed_to_redirect"))},this.config.system.redirectNavigationTimeout)})}async executeCodeFlowWithPost(e){let t=e.correlationId,r=await u(pe,Pe,this.logger,this.performanceClient,t)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger);return this.browserStorage.cacheAuthorizeRequest(e,this.correlationId),(await Br(document,this.config,r,e,this.logger,this.performanceClient)).submit(),new Promise((i,s)=>{setTimeout(()=>{s(f(it,"","failed_to_redirect"))},this.config.system.redirectNavigationTimeout)})}async handleRedirectPromise(e,t,r,o){let i=document.title;document.title="Microsoft Authentication";let s=x(R.handleRedirectPromise,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),a=o?.navigateToLoginRequestUrl??!0;try{let[c,l]=this.getRedirectResponse(o?.hash||"");if(!c)return this.logger.info("1qmv0q",this.correlationId),this.browserStorage.resetRequestCache(this.correlationId),Up()!=="back_forward"?r.event.errorCode="no_server_response":this.logger.verbose("1eqegq",this.correlationId),null;let h=this.browserStorage.getTemporaryCache(U.ORIGIN_URI,this.correlationId,!0)||"",d=Ce.normalizeUrlForComparison(h,this.logger,this.correlationId),m=Ce.normalizeUrlForComparison(window.location.href,this.logger,this.correlationId);if(d===m&&a)return this.logger.verbose("11yred",this.correlationId),h.indexOf("#")>-1&&Gh(h),await this.handleResponse(c,e,t,s);if(a){if(!Ho()||this.config.system.allowRedirectInIframe){this.browserStorage.setTemporaryCache(U.URL_HASH,l,!0);let g={apiId:R.handleRedirectPromise,timeout:this.config.system.redirectNavigationTimeout,noHistory:!0},y=!0;if(h)this.logger.verbose(`08jpy1 ${h}`,this.correlationId),y=await this.navigationClient.navigateInternal(h,g);else{let T=Vh(this.correlationId);this.browserStorage.setTemporaryCache(U.ORIGIN_URI,T,!0),this.logger.warning("1dutq1",this.correlationId),y=await this.navigationClient.navigateInternal(T,g)}if(!y)return await this.handleResponse(c,e,t,s)}}else return this.logger.verbose("0v4sdv",this.correlationId),await this.handleResponse(c,e,t,s);return null}catch(c){throw c instanceof I&&(c.correlationId=this.correlationId,s.cacheFailedRequest(c)),c}finally{document.title=i}}getRedirectResponse(e){this.logger.verbose("1c5i8m",this.correlationId);let t=e;t||(this.config.auth.OIDCOptions.responseMode===C.ResponseMode.QUERY?t=window.location.search:t=window.location.hash);let r=Ce.getDeserializedResponse(t);if(r){try{gd(r,this.browserCrypto,E.Redirect,this.correlationId)}catch(i){return i instanceof I&&this.logger.error(`0bkq6p ${i.errorCode} ${i.errorMessage}`,this.correlationId),[null,""]}return Kn(window),this.logger.verbose("00uvho",this.correlationId),[r,t]}let o=this.browserStorage.getTemporaryCache(U.URL_HASH,this.correlationId,!0);return this.browserStorage.removeItem(this.browserStorage.generateCacheKey(U.URL_HASH)),o&&(r=Ce.getDeserializedResponse(o),r)?(this.logger.verbose("001671",this.correlationId),[r,o]):[null,""]}async handleResponse(e,t,r,o){if(!e.state)throw f(_r,t.correlationId);let{authority:s,azureCloudOptions:a,extraQueryParameters:c,account:l}=t;if(e.ear_jwe){let d=await u(pe,Pe,this.logger,this.performanceClient,t.correlationId)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,s,a,c,l);return u(zr,Ar,this.logger,this.performanceClient,t.correlationId)(t,e,R.acquireTokenRedirect,this.config,d,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}let h=await u(this.createAuthCodeClient.bind(this),Se,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:o,requestAuthority:t.authority});return u(ht,nt,this.logger,this.performanceClient,t.correlationId)(t,e,r,R.acquireTokenRedirect,this.config,h,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async initiateAuthRequest(e){if(this.logger.verbose("0yaw2e",this.correlationId),e){this.logger.infoPii(`1luf83 ${e}`,this.correlationId);let t={apiId:R.acquireTokenRedirect,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},r=this.config.auth.onRedirectNavigate;if(typeof r=="function")if(this.logger.verbose("1nehvl",this.correlationId),r(e)!==!1){this.logger.verbose("1a0jxh",this.correlationId),await this.navigationClient.navigateExternal(e,t);return}else{this.logger.verbose("09k5h5",this.correlationId);return}else{this.logger.verbose("0klwf7",this.correlationId),await this.navigationClient.navigateExternal(e,t);return}}else throw this.logger.info("0rlh4e",this.correlationId),f(wr,this.correlationId)}async logout(e){this.logger.verbose("1rkurh",this.correlationId);let t=this.initializeLogoutRequest(e),r=x(R.logout,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{this.eventHandler.emitEvent(A.LOGOUT_START,this.correlationId,E.Redirect,e),await xr(this.browserStorage,this.browserCrypto,this.logger,this.correlationId,t.account);let o={apiId:R.logout,timeout:this.config.system.redirectNavigationTimeout,noHistory:!1},i=await u(this.createAuthCodeClient.bind(this),Se,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:r,requestAuthority:e&&e.authority,requestExtraQueryParameters:e?.extraQueryParameters,account:e&&e.account||void 0});if(i.authority.protocolMode===P.OIDC)try{i.authority.endSessionEndpoint}catch{if(t.account?.homeAccountId){this.eventHandler.emitEvent(A.LOGOUT_SUCCESS,this.correlationId,E.Redirect,t);return}}t.state=W.setRequestState(this.browserCrypto,t.state||"",{interactionType:E.Redirect},t.correlationId);let s=i.getLogoutUri(t);t.account?.homeAccountId&&this.eventHandler.emitEvent(A.LOGOUT_SUCCESS,this.correlationId,E.Redirect,t);let a=this.config.auth.onRedirectNavigate;if(typeof a=="function")if(a(s)!==!1){this.logger.verbose("06v57e",this.correlationId),this.browserStorage.getInteractionInProgress()||this.browserStorage.setInteractionInProgress(!0,Me.SIGNOUT),await this.navigationClient.navigateExternal(s,o);return}else this.browserStorage.setInteractionInProgress(!1),this.logger.verbose("0xqes1",this.correlationId);else{this.browserStorage.getInteractionInProgress()||this.browserStorage.setInteractionInProgress(!0,Me.SIGNOUT),await this.navigationClient.navigateExternal(s,o);return}}catch(o){throw o instanceof I&&(o.correlationId=this.correlationId,r.cacheFailedRequest(o)),this.eventHandler.emitEvent(A.LOGOUT_FAILURE,this.correlationId,E.Redirect,null,o),this.eventHandler.emitEvent(A.LOGOUT_END,this.correlationId,E.Redirect),o}this.eventHandler.emitEvent(A.LOGOUT_END,this.correlationId,E.Redirect)}getRedirectStartPage(e){let t=e||window.location.href,r=_.getAbsoluteUrl(t,me(),this.correlationId);return Ce.validateUrl(r,this.logger,this.correlationId),r}};async function Md(n,e,t,r){if(!e)throw t.info("1l7hyp",r),f(wr,r);return n.src=e,n}async function Ud(n,e,t,r,o,i){if(!n.contentDocument)throw"No document associated with iframe!";return(await Br(n.contentDocument,e,t,r,o,i)).submit(),n}async function Dd(n,e,t,r,o,i){if(!n.contentDocument)throw"No document associated with iframe!";return(await Kr(n.contentDocument,e,t,r,o,i)).submit(),n}function Bc(){let n=document.createElement("iframe");return n.className="msalSilentIframe",n.title="Microsoft Authentication",n.style.visibility="hidden",n.style.position="absolute",n.style.width=n.style.height="0",n.style.border="0",n.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms"),n.setAttribute("allow","local-network-access *"),document.body.appendChild(n),n}function zc(n){document.body===n.parentNode&&document.body.removeChild(n)}var ii=class extends fe{constructor(e,t,r,o,i,s,a,c,l,h,d,m){super(e,t,r,o,i,s,c,h,d),this.apiId=a,this.nativeStorage=l,this.waitForIframeResponseHook=m}async acquireToken(e){!e.loginHint&&!e.sid&&(!e.account||!e.account.username)&&this.logger.warning("1kl318",this.correlationId);let t={...e};t.prompt?t.prompt!==C.PromptValue.NONE&&t.prompt!==C.PromptValue.NO_SESSION&&(this.logger.warning(`0bmctg ${t.prompt} ${C.PromptValue.NONE}`,this.correlationId),t.prompt=C.PromptValue.NONE):t.prompt=C.PromptValue.NONE;let r=await u(lt,ot,this.logger,this.performanceClient,this.correlationId)(t,E.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId);return r.platformBroker=dt(this.config,this.logger,this.correlationId,this.platformAuthProvider,r.authenticationScheme),zn(r.authority),this.config.system.protocolMode===P.EAR?this.executeEarFlow(r):this.executeCodeFlow(r)}async executeCodeFlow(e){let t,r=x(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{return t=await u(this.createAuthCodeClient.bind(this),Se,this.logger,this.performanceClient,e.correlationId)({serverTelemetryManager:r,requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account}),await u(this.silentTokenHelper.bind(this),cc,this.logger,this.performanceClient,e.correlationId)(t,e)}catch(o){if(o instanceof I&&(o.correlationId=this.correlationId,r.cacheFailedRequest(o)),!t||!(o instanceof I)||o.errorCode!==X.INVALID_GRANT_ERROR)throw o;return this.performanceClient.addFields({retryError:o.errorCode},this.correlationId),await u(this.silentTokenHelper.bind(this),cc,this.logger,this.performanceClient,this.correlationId)(t,e)}}async executeEarFlow(e){let{correlationId:t,authority:r,azureCloudOptions:o,extraQueryParameters:i,account:s}=e,a=await u(pe,Pe,this.logger,this.performanceClient,t)(this.config,this.correlationId,this.performanceClient,this.browserStorage,this.logger,r,o,i,s),c=await u(Pr,Ir,this.logger,this.performanceClient,t)(),l=await u(Ue,Ne,this.logger,this.performanceClient,t)(this.performanceClient,this.logger,t),h={...e,earJwk:c,codeChallenge:l.challenge},d=Bc(),m=this.config.auth.OIDCOptions.responseMode,g;try{let T=u(this.waitForIframeResponse.bind(this),Tr,this.logger,this.performanceClient,t)(d,e);T.catch(()=>{}),await u(Dd,On,this.logger,this.performanceClient,t)(d,this.config,a,h,this.logger,this.performanceClient),g=await T}finally{J(zc,hc,this.logger,this.performanceClient,t)(d)}let y=J(Xt,jt,this.logger,this.performanceClient,t)(g,m,this.logger,this.correlationId);if(!y.ear_jwe&&y.code){let T=await u(this.createAuthCodeClient.bind(this),Se,this.logger,this.performanceClient,t)({serverTelemetryManager:x(this.apiId,this.config.auth.clientId,t,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:e.authority,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account,authority:a});return u(ht,nt,this.logger,this.performanceClient,t)(h,y,l.verifier,this.apiId,this.config,T,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}else return u(zr,Ar,this.logger,this.performanceClient,t)(h,y,this.apiId,this.config,a,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async verifySso(e){let t={...e};t.prompt||(t.prompt=C.PromptValue.NONE);let r=await u(lt,ot,this.logger,this.performanceClient,this.correlationId)(t,E.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId),o=await u(this.createAuthCodeClient.bind(this),Se,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:x(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),requestAuthority:r.authority,requestAzureCloudOptions:r.azureCloudOptions,requestExtraQueryParameters:r.extraQueryParameters,account:r.account}),{serverParams:i}=await this.silentAuthorizeHelper(o,r),s=r.correlationId;return Ie.validateAuthorizationResponse(i,r.state,s),i.code?(this.logger.verbose("0kkkcj",s),!0):(this.logger.warning("0y34ti",s),!1)}logout(){return Promise.reject(f(Rr,""))}async silentTokenHelper(e,t){let{serverParams:r,pkceCodes:o}=await this.silentAuthorizeHelper(e,t);return u(ht,nt,this.logger,this.performanceClient,t.correlationId)(t,r,o.verifier,this.apiId,this.config,e,this.browserStorage,this.nativeStorage,this.eventHandler,this.logger,this.performanceClient,this.platformAuthProvider)}async silentAuthorizeHelper(e,t){let r=t.correlationId,o=await u(Ue,Ne,this.logger,this.performanceClient,r)(this.performanceClient,this.logger,r),i={...t,codeChallenge:o.challenge},s=Bc(),a=this.config.auth.OIDCOptions.responseMode,c;try{let h=u(this.waitForIframeResponse.bind(this),Tr,this.logger,this.performanceClient,r)(s,t);if(h.catch(()=>{}),t.httpMethod===C.HttpMethod.POST)await u(Ud,On,this.logger,this.performanceClient,r)(s,this.config,e.authority,i,this.logger,this.performanceClient);else{let d=await u(Fr,$.GetAuthCodeUrl,this.logger,this.performanceClient,r)(this.config,e.authority,i,this.logger,this.performanceClient);await u(Md,On,this.logger,this.performanceClient,r)(s,d,this.logger,r)}c=await h}finally{J(zc,hc,this.logger,this.performanceClient,r)(s)}return{serverParams:J(Xt,jt,this.logger,this.performanceClient,r)(c,a,this.logger,this.correlationId),pkceCodes:o,silentRequest:i}}async waitForIframeResponse(e,t){return this.waitForIframeResponseHook?this.waitForIframeResponseHook(e,t):Yt(this.config.system.iframeBridgeTimeout,this.logger,t,this.performanceClient,this.config.experimental)}};var si=class extends fe{async acquireToken(e){let t=await u(Ko,Er,this.logger,this.performanceClient,e.correlationId)(e,this.config,this.performanceClient,this.logger,this.correlationId),r={...e,...t};e.redirectUri&&(r.redirectUri=qt(e.redirectUri,this.config.auth.redirectUri,this.logger,this.correlationId));let o=x(R.acquireTokenSilent_silentFlow,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled),i=await this.createRefreshTokenClient({serverTelemetryManager:o,authorityUrl:r.authority,azureCloudOptions:r.azureCloudOptions,account:r.account});return u(i.acquireTokenByRefreshToken.bind(i),Sl,this.logger,this.performanceClient,e.correlationId)(r,R.acquireTokenSilent_silentFlow).catch(s=>{throw s.correlationId=this.correlationId,o.cacheFailedRequest(s),s})}logout(){return Promise.reject(f(Rr,""))}async createRefreshTokenClient(e){let t=await u(this.getClientConfiguration.bind(this),At,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:e.serverTelemetryManager,requestAuthority:e.authorityUrl,requestAzureCloudOptions:e.azureCloudOptions,requestExtraQueryParameters:e.extraQueryParameters,account:e.account});return new bo(t,this.performanceClient)}};var ai=class extends Vt{constructor(e,t){super(e,t),this.includeRedirectUri=!1}};var ci=class extends fe{constructor(e,t,r,o,i,s,a,c,l,h){super(e,t,r,o,i,s,c,l,h),this.apiId=a}async acquireToken(e){if(!e.code)throw f(lh,this.correlationId);let t=await u(lt,ot,this.logger,this.performanceClient,this.correlationId)(e,E.Silent,this.config,this.browserCrypto,this.browserStorage,this.logger,this.performanceClient,this.correlationId),r=x(this.apiId,this.config.auth.clientId,this.correlationId,this.browserStorage,this.logger,void 0,this.config.system.serverTelemetryEnabled);try{let o={...t,code:e.code},i=await u(this.getClientConfiguration.bind(this),At,this.logger,this.performanceClient,this.correlationId)({serverTelemetryManager:r,requestAuthority:t.authority,requestAzureCloudOptions:t.azureCloudOptions,requestExtraQueryParameters:t.extraQueryParameters,account:t.account}),s=new ai(i,this.performanceClient);this.logger.verbose("1uic5e",this.correlationId);let a=new Lr(s,this.browserStorage,o,this.logger,this.performanceClient);return await u(a.handleCodeResponseFromServer.bind(a),$.HandleCodeResponseFromServer,this.logger,this.performanceClient,this.correlationId)({code:e.code,msgraph_host:e.msGraphHost,cloud_graph_host_name:e.cloudGraphHostName,cloud_instance_host_name:e.cloudInstanceHostName},t,this.apiId,!1)}catch(o){throw o instanceof I&&(o.correlationId=this.correlationId,r.cacheFailedRequest(o)),o}}logout(){return Promise.reject(f(Rr,""))}};function xd(n,e,t,r){let o=window.msal?.clientIds||[],i=o.length,s=o.filter(a=>a===n).length;s>1&&t.warning("1e88vg",r),e.add({msalInstanceCount:i,sameClientIdInstanceCount:s})}function li(n,e,t,r){try{Bn(n),Mo(t.auth.isMcp,r)}catch(o){throw e.end({success:!1},o,r.account),o}}var hi=class n{constructor(e){this.operatingContext=e,this.isBrowserEnvironment=this.operatingContext.isBrowserEnvironment(),this.config=e.getConfig(),this.initialized=!1,this.logger=this.operatingContext.getLogger(),this.networkClient=this.config.system.networkClient,this.navigationClient=this.config.system.navigationClient,this.redirectResponse=new Map,this.hybridAuthCodeResponses=new Map,this.performanceClient=this.config.telemetry.client,this.browserCrypto=this.isBrowserEnvironment?new Ge(this.logger,this.performanceClient):yt,this.eventHandler=new Qn(this.logger),this.browserStorage=this.isBrowserEnvironment?new Ur(this.config.auth.clientId,this.config.cache,this.browserCrypto,this.logger,this.performanceClient,this.eventHandler,xa(this.config.auth)):ad(this.config.auth.clientId,this.logger,this.performanceClient,this.eventHandler);let t={cacheLocation:ae.MemoryStorage,cacheRetentionDays:5};this.nativeInternalStorage=new Ur(this.config.auth.clientId,t,this.browserCrypto,this.logger,this.performanceClient,this.eventHandler),this.activeSilentTokenRequests=new Map,this.trackStateChange=this.trackStateChange.bind(this),this.trackStateChangeWithMeasurement=this.trackStateChangeWithMeasurement.bind(this)}static async createController(e,t){let r=new n(e);return await r.initialize(t),r}trackStateChange(e,t){e&&(t.type==="visibilitychange"?(this.logger.info("16v6hv",e),this.performanceClient.incrementFields({visibilityChangeCount:1},e)):t.type==="online"?(this.logger.info("0zirfd",e),this.performanceClient.incrementFields({onlineStatusChangeCount:1},e)):t.type==="offline"&&(this.logger.info("1xk9ef",e),this.performanceClient.incrementFields({onlineStatusChangeCount:1},e)))}async initialize(e){let t=this.getRequestCorrelationId(e);if(this.logger.trace("1f7joy",t),this.initialized){this.logger.info("061m5x",t);return}if(!this.isBrowserEnvironment){this.logger.info("19fvpi",t),this.initialized=!0,this.eventHandler.emitEvent(A.INITIALIZE_END,t);return}let r=this.config.system.allowPlatformBroker,o=this.performanceClient.startMeasurement(qh,t);if(this.eventHandler.emitEvent(A.INITIALIZE_START,t),this.logMultipleInstances(o,t),o.add({isMcp:this.config.auth.isMcp}),await u(this.browserStorage.initialize.bind(this.browserStorage),_l,this.logger,this.performanceClient,t)(t),r)try{this.platformAuthProvider=await Nd(this.logger,this.performanceClient,t,this.config.system.nativeBrokerHandshakeTimeout,this.config.experimental.allowPlatformBrokerWithDOM)}catch(i){this.logger.verbose(i,t)}this.config.cache.cacheLocation===ae.LocalStorage&&this.eventHandler.subscribeCrossTab(),!this.config.system.navigatePopups&&await this.preGeneratePkceCodes(t),this.initialized=!0,this.eventHandler.emitEvent(A.INITIALIZE_END,t),o.end({allowPlatformBroker:r,success:!0})}async handleRedirectPromise(e){if(this.logger.verbose("02l8bm",""),Nc(this.initialized),this.isBrowserEnvironment){let t=e?.hash||"",r=this.redirectResponse.get(t);return typeof r>"u"?(r=this.handleRedirectPromiseInternal(e),this.redirectResponse.set(t,r),this.logger.verbose("1wn9kp","")):this.logger.verbose("0w0gm3",""),r}return this.logger.verbose("12xi63",""),null}async handleRedirectPromiseInternal(e){if(!this.browserStorage.isInteractionInProgress(!0))return this.logger.info("0le6uv",""),null;if(this.browserStorage.getInteractionInProgress()?.type===Me.SIGNOUT)return this.logger.verbose("1ywcv2",""),this.browserStorage.setInteractionInProgress(!1),Promise.resolve(null);let r=this.getAllAccounts(),o=this.browserStorage.getCachedNativeRequest(),i=o&&!e?.hash,s,a,c;try{if(i&&this.platformAuthProvider){let l=o?.correlationId||"";this.eventHandler.emitEvent(A.HANDLE_REDIRECT_START,l,E.Redirect),s=this.performanceClient.startMeasurement(Vn,l),this.logger.trace("12v7is",l),s.add({isPlatformBrokerRequest:!0});let h=new Rt(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,R.handleRedirectPromise,this.performanceClient,this.platformAuthProvider,o.accountId,this.nativeInternalStorage,o.correlationId);a=u(h.handleRedirectPromise.bind(h),Ml,this.logger,this.performanceClient,s.event.correlationId)()}else{let[l,h]=this.browserStorage.getCachedRequest("");c=l;let d=l.correlationId;this.eventHandler.emitEvent(A.HANDLE_REDIRECT_START,d,E.Redirect),s=this.performanceClient.startMeasurement(Vn,d),this.logger.trace("0znzs5",d);let m=this.createRedirectClient(d);a=u(m.handleRedirectPromise.bind(m),Nl,this.logger,this.performanceClient,s.event.correlationId)(l,h,s,e)}}catch(l){throw this.browserStorage.resetRequestCache(""),l}return a.then(l=>(l?(this.browserStorage.resetRequestCache(l.correlationId),this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_SUCCESS,l.correlationId,E.Redirect,l),this.logger.verbose("0ui8f5",l.correlationId),r.length<this.getAllAccounts().length&&(this.eventHandler.emitEvent(A.LOGIN_SUCCESS,l.correlationId,E.Redirect,l.account),this.logger.verbose("16im3l",l.correlationId)),s.end({success:!0},void 0,l.account),this.verifySsoCapability(c,E.Redirect)):s.event.errorCode?s.end({success:!1},void 0):s.discard(),this.eventHandler.emitEvent(A.HANDLE_REDIRECT_END,s.event.correlationId,E.Redirect),l)).catch(l=>{this.browserStorage.resetRequestCache(s.event.correlationId);let h=l;throw this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_FAILURE,s.event.correlationId,E.Redirect,null,h),this.eventHandler.emitEvent(A.HANDLE_REDIRECT_END,s.event.correlationId,E.Redirect),s.end({success:!1},h),l})}async acquireTokenRedirect(e){let t=this.getRequestCorrelationId(e);this.logger.verbose("0os66p",t),Mc(this.initialized,this.config),this.browserStorage.setInteractionInProgress(!0,Me.SIGNIN);let r=this.performanceClient.startMeasurement(Yh,t);r.add({scenarioId:e.scenarioId});let o=this.config.auth.onRedirectNavigate;this.config.auth.onRedirectNavigate=i=>{let s=typeof o=="function"?o(i):void 0;return r.add({navigateCallbackResult:s!==!1}),r.event=r.end({success:!0},void 0,e.account)||r.event,s};try{Mo(this.config.auth.isMcp,e),this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_START,t,E.Redirect,e);let i;if(this.platformAuthProvider&&this.canUsePlatformBroker(e)){let s=new Rt(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,R.acquireTokenRedirect,this.performanceClient,this.platformAuthProvider,this.getNativeAccountId(e),this.nativeInternalStorage,t);i=u(s.acquireTokenRedirect.bind(s),Il,this.logger,this.performanceClient,t)(e,r).catch(a=>{if(r.add({brokerErrorName:a.name,brokerErrorCode:a.errorCode}),a instanceof Ee&&_t(a))return this.platformAuthProvider=void 0,this.createRedirectClient(t).acquireToken(e);if(a instanceof H)return this.logger.verbose("1ipyz4",t),this.createRedirectClient(t).acquireToken(e);throw a})}else i=this.createRedirectClient(t).acquireToken(e);return await i}catch(i){throw this.browserStorage.resetRequestCache(t),r.event.status===2?this.performanceClient.startMeasurement(Vn,t).end({success:!1},i,e.account):r.end({success:!1},i,e.account),this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_FAILURE,t,E.Redirect,null,i),i}}acquireTokenPopup(e){let t=this.getRequestCorrelationId(e),r=this.performanceClient.startMeasurement(Wh,t);r.add({scenarioId:e.scenarioId});try{this.logger.verbose("0ch87b",t),li(this.initialized,r,this.config,e),this.browserStorage.setInteractionInProgress(!0,Me.SIGNIN,e.overrideInteractionInProgress,t)}catch(a){return Promise.reject(a)}let o=this.getAllAccounts();this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_START,t,E.Popup,e);let i,s=this.getPreGeneratedPkceCodes(t);return this.canUsePlatformBroker(e)?(r.add({isPlatformBrokerRequest:!0}),i=this.acquireTokenNative({...e,correlationId:t},R.acquireTokenPopup).then(a=>(r.end({success:!0,isNativeBroker:!0},void 0,a.account),a)).catch(a=>{if(r.add({brokerErrorName:a.name,brokerErrorCode:a.errorCode}),a instanceof Ee&&_t(a))return this.platformAuthProvider=void 0,this.createPopupClient(t).acquireToken(e,s);if(a instanceof H)return this.logger.verbose("0yy5fw",t),this.createPopupClient(t).acquireToken(e,s);throw a})):i=this.createPopupClient(t).acquireToken(e,s),i.then(a=>{let c=o.length<this.getAllAccounts().length;return this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_SUCCESS,t,E.Popup,a),c&&this.eventHandler.emitEvent(A.LOGIN_SUCCESS,t,E.Popup,a.account),r.end({success:!0,accessTokenSize:a.accessToken.length,idTokenSize:a.idToken.length},void 0,a.account),this.verifySsoCapability(e,E.Popup),a}).catch(a=>(this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_FAILURE,t,E.Popup,null,a),r.end({success:!1},a,e.account),Promise.reject(a))).finally(async()=>{this.browserStorage.setInteractionInProgress(!1),this.config.system.navigatePopups||await this.preGeneratePkceCodes(t)})}trackStateChangeWithMeasurement(e){let t=this.ssoSilentMeasurement||this.acquireTokenByCodeAsyncMeasurement;t&&(e.type==="visibilitychange"?(this.logger.info(`0yzimq ${t.event.name}`,t.event.correlationId),t.increment({visibilityChangeCount:1})):e.type==="online"?(this.logger.info(`1caf53 ${t.event.name}`,t.event.correlationId),t.increment({onlineStatusChangeCount:1})):e.type==="offline"&&(this.logger.info(`0fdyk7 ${t.event.name}`,t.event.correlationId),t.increment({onlineStatusChangeCount:1})))}addStateChangeListeners(e){document.addEventListener("visibilitychange",e),window.addEventListener("online",e),window.addEventListener("offline",e)}removeStateChangeListeners(e){document.removeEventListener("visibilitychange",e),window.removeEventListener("online",e),window.removeEventListener("offline",e)}getCachedSsoCapable(){try{let e=window.localStorage.getItem(Dc);if(e){let t=JSON.parse(e);if(t&&typeof t.ssoCapable=="boolean"&&t.expiresOn&&Date.now()<t.expiresOn)return t.ssoCapable}}catch{}}verifySsoCapability(e,t){if(!this.config.auth.verifySSO)return;let r=Dc,o=1440*60*1e3;if(this.getCachedSsoCapable()!==void 0){this.logger.verbose(`13poou ${t}`,"");return}let s=ue(),a=this.performanceClient.startMeasurement(Zh,s);a.add({"ext.interactionType":t}),this.logger.verbose(`0pbr0i ${t}`,s),setTimeout(()=>{let c={...e,correlationId:s};this.createSilentIframeClient(s).verifySso(c).then(h=>{this.logger.verbose(`1gd1iv ${t} ${h}`,s);try{let d=JSON.stringify({ssoCapable:h,expiresOn:Date.now()+o});window.localStorage.setItem(r,d)}catch{this.logger.warning(`18lmoj ${t}`,s)}a.end({fromCache:!1,success:h},void 0)}).catch(h=>{this.logger.warning(`05g83w ${t} ${h.message}`,s);try{window.localStorage.removeItem(r)}catch{this.logger.warning(`0nlf9q ${t}`,s)}a.end({fromCache:!1,success:!1},h)})},0)}async ssoSilent(e){let t=this.getRequestCorrelationId(e),r={...e,correlationId:t};this.ssoSilentMeasurement=this.performanceClient.startMeasurement(Qh,t),this.ssoSilentMeasurement?.add({scenarioId:e.scenarioId,ssoCapable:this.getCachedSsoCapable()}),li(this.initialized,this.ssoSilentMeasurement,this.config,r),this.ssoSilentMeasurement?.increment({visibilityChangeCount:0,onlineStatusChangeCount:0}),this.addStateChangeListeners(this.trackStateChangeWithMeasurement);let o=this.getAllAccounts();this.logger.verbose("0w1b45",t),this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_START,t,E.Silent,r);let i;return this.canUsePlatformBroker(r)?(this.ssoSilentMeasurement?.add({isPlatformBrokerRequest:!0}),i=this.acquireTokenNative(r,R.ssoSilent).catch(s=>{if(this.ssoSilentMeasurement?.add({brokerErrorName:s.name,brokerErrorCode:s.errorCode}),s instanceof Ee&&_t(s))return this.platformAuthProvider=void 0,this.createSilentIframeClient(r.correlationId).acquireToken(r);throw s})):i=this.createSilentIframeClient(r.correlationId).acquireToken(r),i.then(s=>{let a=o.length<this.getAllAccounts().length;return this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_SUCCESS,t,E.Silent,s),a&&this.eventHandler.emitEvent(A.LOGIN_SUCCESS,t,E.Silent,s.account),this.ssoSilentMeasurement?.end({success:!0,isNativeBroker:s.fromPlatformBroker,accessTokenSize:s.accessToken.length,idTokenSize:s.idToken.length},void 0,s.account),s}).catch(s=>{throw this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_FAILURE,t,E.Silent,null,s),this.ssoSilentMeasurement?.end({success:!1},s,e.account),s}).finally(()=>{this.removeStateChangeListeners(this.trackStateChangeWithMeasurement)})}async acquireTokenByCode(e){let t=this.getRequestCorrelationId(e);this.logger.trace("0ch6ga",t);let r=this.performanceClient.startMeasurement(Jh,t);li(this.initialized,r,this.config,e),this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_START,t,E.Silent,e),r.add({scenarioId:e.scenarioId});try{if(e.code&&e.nativeAccountId)throw f(dh,t);if(e.code){let o=e.code,i=this.hybridAuthCodeResponses.get(o);return i?(this.logger.verbose("0qgp28",t),r.discard()):(this.logger.verbose("06eh73",t),i=this.acquireTokenByCodeAsync({...e,correlationId:t}).then(s=>(this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_SUCCESS,t,E.Silent,s),this.hybridAuthCodeResponses.delete(o),r.end({success:!0,accessTokenSize:s.accessToken.length,idTokenSize:s.idToken.length},void 0,s.account),s)).catch(s=>{throw this.hybridAuthCodeResponses.delete(o),this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_FAILURE,t,E.Silent,null,s),r.end({success:!1},s),s}),this.hybridAuthCodeResponses.set(o,i)),await i}else if(e.nativeAccountId)if(this.canUsePlatformBroker(e,e.nativeAccountId)){r.add({isPlatformBrokerRequest:!0});let o=await this.acquireTokenNative({...e,correlationId:t},R.acquireTokenByCode,e.nativeAccountId).catch(i=>{throw r.add({brokerErrorName:i.name,brokerErrorCode:i.errorCode}),i instanceof Ee&&_t(i)&&(this.platformAuthProvider=void 0),i});return r.end({success:!0},void 0,o.account),o}else throw f(uh,t);else throw f(hh,t)}catch(o){throw this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_FAILURE,t,E.Silent,null,o),r.end({success:!1},o),o}}async acquireTokenByCodeAsync(e){let t=this.getRequestCorrelationId(e);return this.logger.trace("10d9hy",t),this.acquireTokenByCodeAsyncMeasurement=this.performanceClient.startMeasurement(Pl,t),this.acquireTokenByCodeAsyncMeasurement?.increment({visibilityChangeCount:0,onlineStatusChangeCount:0}),this.addStateChangeListeners(this.trackStateChangeWithMeasurement),await this.createSilentAuthCodeClient(t).acquireToken(e).then(i=>(this.acquireTokenByCodeAsyncMeasurement?.end({success:!0,fromCache:i.fromCache}),i)).catch(i=>{throw this.acquireTokenByCodeAsyncMeasurement?.end({success:!1},i),i}).finally(()=>{this.removeStateChangeListeners(this.trackStateChangeWithMeasurement)})}async acquireTokenFromCache(e,t){switch(t){case q.Default:case q.AccessToken:case q.AccessTokenAndRefreshToken:let r=this.createSilentCacheClient(e.correlationId);return u(r.acquireToken.bind(r),yl,this.logger,this.performanceClient,e.correlationId)(e);default:throw p(z.tokenRefreshRequired,e.correlationId)}}async acquireTokenByRefreshToken(e,t){switch(t){case q.Default:case q.AccessTokenAndRefreshToken:case q.RefreshToken:case q.RefreshTokenAndNetwork:let r=this.createSilentRefreshClient(e.correlationId);return u(r.acquireToken.bind(r),Al,this.logger,this.performanceClient,e.correlationId)(e);default:throw p(z.tokenRefreshRequired,e.correlationId)}}async acquireTokenBySilentIframe(e){let t=this.createSilentIframeClient(e.correlationId);return u(t.acquireToken.bind(t),El,this.logger,this.performanceClient,e.correlationId)(e)}async logoutRedirect(e){let t=this.getRequestCorrelationId(e);return Mc(this.initialized,this.config),this.browserStorage.setInteractionInProgress(!0,Me.SIGNOUT),this.createRedirectClient(t).logout(e)}logoutPopup(e){try{let t=this.getRequestCorrelationId(e);return Bn(this.initialized),this.browserStorage.setInteractionInProgress(!0,Me.SIGNOUT),this.createPopupClient(t).logout(e).finally(()=>{this.browserStorage.setInteractionInProgress(!1)})}catch(t){return Promise.reject(t)}}async clearCache(e){if(!this.isBrowserEnvironment)return;let t=this.getRequestCorrelationId(e);return this.createSilentCacheClient(t).logout(e)}getAllAccounts(e){return cd(this.logger,this.browserStorage,this.isBrowserEnvironment,this.getRequestCorrelationId(),e)}getAccount(e){return ld(e,this.logger,this.browserStorage,this.getRequestCorrelationId())}setActiveAccount(e){hd(e,this.browserStorage,this.getRequestCorrelationId())}getActiveAccount(){return dd(this.browserStorage,this.getRequestCorrelationId())}async hydrateCache(e,t){this.logger.verbose("16jycr",e.correlationId);let r=Ae.createAccountEntityFromAccountInfo(e.account,e.cloudGraphHostName,e.msGraphHost);if(await this.browserStorage.setAccount(r,e.correlationId,G.isKmsi(e.idTokenClaims),R.hydrateCache),e.fromPlatformBroker){this.logger.verbose("1i5atf",e.correlationId);let o=D.createIdTokenEntity(e.account.homeAccountId,e.account.environment,e.idToken,this.config.auth.clientId,e.tenantId),i=D.createAccessTokenEntity(e.account.homeAccountId,e.account.environment,e.accessToken,this.config.auth.clientId,e.tenantId,e.scopes.join(" "),e.expiresOn?Q.toSecondsFromDate(e.expiresOn):0,e.extExpiresOn?Q.toSecondsFromDate(e.extExpiresOn):0,b,t.correlationId||"",void 0,e.tokenType,void 0,t.sshKid);t.resource&&(i.resource=t.resource);let s=G.isKmsi(e.idTokenClaims);await this.browserStorage.setIdTokenCredential(o,e.correlationId,s),await this.nativeInternalStorage.setAccessTokenCredential(i,e.correlationId,s)}else return this.browserStorage.hydrateCache(e,t)}async acquireTokenNative(e,t,r,o){let i=this.getRequestCorrelationId(e);if(this.logger.trace("0b9y3p",i),!this.platformAuthProvider)throw f(Dn,i);let s=new Rt(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,t,this.performanceClient,this.platformAuthProvider,r||this.getNativeAccountId(e),this.nativeInternalStorage,i);return u(s.acquireToken.bind(s),yr,this.logger,this.performanceClient,i)(e,o)}canUsePlatformBroker(e,t){let r=this.getRequestCorrelationId(e);if(this.logger.trace("1n9lbl",r),!this.platformAuthProvider)return this.logger.trace("0vnu11",r),!1;if(!dt(this.config,this.logger,r,this.platformAuthProvider,e.authenticationScheme))return this.logger.trace("0yoy1g",r),!1;if(e.prompt)switch(e.prompt){case C.PromptValue.NONE:case C.PromptValue.CONSENT:case C.PromptValue.LOGIN:this.logger.trace("0vdv8e",r);break;default:return this.logger.trace(`0pdzw6 ${e.prompt}`,r),!1}return!t&&!this.getNativeAccountId(e)?(this.logger.trace("16lbtk",r),!1):!0}getNativeAccountId(e){let t=e.account||this.getAccount({loginHint:e.loginHint,sid:e.sid})||(!e.loginHint&&!e.sid?this.getActiveAccount():null);return t&&t.nativeAccountId||""}createPopupClient(e){return new oi(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider,this.operatingContext.getResponseHandlers()?.waitForPopupResponse)}createRedirectClient(e){return new ni(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider)}createSilentIframeClient(e){return new ii(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,R.ssoSilent,this.performanceClient,this.nativeInternalStorage,e,this.platformAuthProvider,this.operatingContext.getResponseHandlers()?.waitForIframeResponse)}createSilentCacheClient(e){return new Hr(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,e,this.platformAuthProvider)}createSilentRefreshClient(e){return new si(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,this.performanceClient,e,this.platformAuthProvider)}createSilentAuthCodeClient(e){return new ci(this.config,this.browserStorage,this.browserCrypto,this.logger,this.eventHandler,this.navigationClient,R.acquireTokenByCode,this.performanceClient,e,this.platformAuthProvider)}addEventCallback(e,t){return this.eventHandler.addEventCallback(e,t)}removeEventCallback(e){this.eventHandler.removeEventCallback(e)}addPerformanceCallback(e){return Pc(),this.performanceClient.addPerformanceCallback(e)}removePerformanceCallback(e){return this.performanceClient.removePerformanceCallback(e)}getLogger(){return this.logger}setLogger(e){this.logger=e}initializeWrapperLibrary(e,t){this.browserStorage.setWrapperMetadata(e,t)}setNavigationClient(e){this.navigationClient=e}getConfiguration(){return this.config}getPerformanceClient(){return this.performanceClient}isBrowserEnv(){return this.isBrowserEnvironment}getRequestCorrelationId(e){return e?.correlationId?e.correlationId:this.isBrowserEnvironment?ue():""}async loginRedirect(e){let t=this.getRequestCorrelationId(e);return this.logger.verbose("0lz9hf",t),this.acquireTokenRedirect({correlationId:t,...e||yc})}loginPopup(e){let t=this.getRequestCorrelationId(e);return this.logger.verbose("0qw7v5",t),this.acquireTokenPopup({correlationId:t,...e||yc})}async acquireTokenSilent(e){let t=this.getRequestCorrelationId(e),r=this.performanceClient.startMeasurement(jh,t);r.add({cacheLookupPolicy:e.cacheLookupPolicy,scenarioId:e.scenarioId,ssoCapable:this.getCachedSsoCapable()}),li(this.initialized,r,this.config,e),this.logger.verbose("0x1c4s",t);let o=e.account||this.getActiveAccount();if(!o)throw f(nh,t);return this.acquireTokenSilentDeduped(e,o,t).then(i=>(r.end({success:!0,fromCache:i.fromCache,accessTokenSize:i.accessToken.length,idTokenSize:i.idToken.length},void 0,i.account),{...i,state:e.state,correlationId:t})).catch(i=>{throw i instanceof I&&(i.correlationId=t),r.end({success:!1},i,o),i})}async acquireTokenSilentDeduped(e,t,r){let o=tt(this.config.auth.clientId,{...e,authority:e.authority||this.config.auth.authority,correlationId:r},t.homeAccountId),i=JSON.stringify(o),s=this.activeSilentTokenRequests.get(i);if(typeof s>"u"){this.logger.verbose("0fcjbk",r),this.performanceClient.addFields({deduped:!1},r);let a=u(this.acquireTokenSilentAsync.bind(this),fl,this.logger,this.performanceClient,r)({...e,correlationId:r},t);return this.activeSilentTokenRequests.set(i,a),a.finally(()=>{this.activeSilentTokenRequests.delete(i)})}else return this.logger.verbose("1yq7nb",r),this.performanceClient.addFields({deduped:!0},r),s}async acquireTokenSilentAsync(e,t){let r=a=>this.trackStateChange(e.correlationId,a);this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_START,e.correlationId,E.Silent,e),e.correlationId&&this.performanceClient.incrementFields({visibilityChangeCount:0,onlineStatusChangeCount:0},e.correlationId),this.addStateChangeListeners(r);let o=await u(ud,wl,this.logger,this.performanceClient,e.correlationId)(e,t,this.config,this.performanceClient,this.logger),i=e.cacheLookupPolicy||q.Default;return this.acquireTokenSilentNoIframe(o,i).catch(async a=>{if(Dp(a,i)){let l=`${a.errorCode}${a.subError?`|${a.subError}`:""}`;if(this.performanceClient.addFields({silentRefreshReason:l},e.correlationId),this.activeIframeRequest)if(i!==q.Skip){let[h,d]=this.activeIframeRequest;this.logger.verbose(`1w8fso ${d}`,o.correlationId);let m=this.performanceClient.startMeasurement(Tl,o.correlationId);m.add({awaitIframeCorrelationId:d});let g=await h;if(m.end({success:g}),g)return this.logger.verbose(`0ywzzi ${d}`,o.correlationId),this.acquireTokenSilentNoIframe(o,i);throw this.logger.info(`17y14q ${d}`,o.correlationId),a}else return this.logger.warning("1bd4p8",o.correlationId),u(this.acquireTokenBySilentIframe.bind(this),ac,this.logger,this.performanceClient,o.correlationId)(o);else{let h;return this.activeIframeRequest=[new Promise(d=>{h=d}),o.correlationId],this.logger.verbose("0rh08z",o.correlationId),u(this.acquireTokenBySilentIframe.bind(this),ac,this.logger,this.performanceClient,o.correlationId)(o).then(d=>(h(!0),d)).catch(d=>{throw h(!1),d}).finally(()=>{this.activeIframeRequest=void 0})}}else throw a}).then(a=>(this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_SUCCESS,e.correlationId,E.Silent,a),e.correlationId&&this.performanceClient.addFields({fromCache:a.fromCache,isNativeBroker:a.fromPlatformBroker},e.correlationId),a)).catch(a=>{throw this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_FAILURE,e.correlationId,E.Silent,null,a),a}).finally(()=>{this.removeStateChangeListeners(r)})}async acquireTokenSilentNoIframe(e,t){return dt(this.config,this.logger,e.correlationId,this.platformAuthProvider,e.authenticationScheme)&&e.account.nativeAccountId?(this.logger.verbose("0sczo4",e.correlationId),this.performanceClient.addFields({isPlatformBrokerRequest:!0},e.correlationId),this.acquireTokenNative(e,R.acquireTokenSilent_silentFlow,e.account.nativeAccountId,t).catch(async r=>{throw this.performanceClient.addFields({brokerErrorName:r.name,brokerErrorCode:r.errorCode},e.correlationId),r instanceof Ee&&_t(r)?(this.logger.verbose("07rkmb",e.correlationId),this.platformAuthProvider=void 0,p(z.tokenRefreshRequired,e.correlationId)):r})):(this.logger.verbose("0ox81t",e.correlationId),t===q.AccessToken&&this.logger.verbose("0fvwxe",e.correlationId),u(this.acquireTokenFromCache.bind(this),ml,this.logger,this.performanceClient,e.correlationId)(e,t).catch(r=>{if(t===q.AccessToken)throw r;return this.eventHandler.emitEvent(A.ACQUIRE_TOKEN_NETWORK_START,e.correlationId,E.Silent,e),u(this.acquireTokenByRefreshToken.bind(this),pl,this.logger,this.performanceClient,e.correlationId)(e,t)}))}async preGeneratePkceCodes(e){return this.logger.verbose("1x6uj6",e),this.pkceCode=await u(Ue,Ne,this.logger,this.performanceClient,e)(this.performanceClient,this.logger,e),Promise.resolve()}getPreGeneratedPkceCodes(e){let t=this.pkceCode?{...this.pkceCode}:void 0;return this.pkceCode=void 0,t?this.logger.verbose("12js1o",e):this.logger.verbose("1oe9ci",e),this.performanceClient.addFields({usePreGeneratedPkce:!!t},e),t}logMultipleInstances(e,t){let r=this.config.auth.clientId;if(!window)return;window.msal=window.msal||{},window.msal.clientIds=window.msal.clientIds||[],window.msal.clientIds.length>0&&this.logger.verbose("1qtz3l",t),window.msal.clientIds.push(r),xd(r,e,this.logger,t)}};function Dp(n,e){let t=!(n instanceof H&&n.subError!==Be.badToken),r=n.errorCode===X.INVALID_GRANT_ERROR||n.errorCode===z.tokenRefreshRequired,o=t&&r||n.errorCode===Be.noTokensFound||n.errorCode===Be.refreshTokenExpired,i=_h.includes(e);return o&&i}var di=class n{static loggerCallback(e,t){switch(e){case v.Error:console.error(t);return;case v.Info:console.info(t);return;case v.Verbose:console.debug(t);return;case v.Warning:console.warn(t);return;default:console.log(t);return}}constructor(e,t){this.browserEnvironment=typeof window<"u",this.config=Pd(e,this.browserEnvironment),this.responseHandlers=t;let r;try{r=window[ae.SessionStorage]}catch{}let o=r?.getItem(rd),i=r?.getItem(od)?.toLowerCase(),s=i==="true"?!0:i==="false"?!1:void 0,a={...this.config.system.loggerOptions},c=o&&Object.keys(v).includes(o)?v[o]:void 0;c&&(a.loggerCallback=n.loggerCallback,a.logLevel=c),s!==void 0&&(a.piiLoggingEnabled=s),this.logger=new j(a,wt,Z),this.available=!1}getConfig(){return this.config}getResponseHandlers(){return this.responseHandlers}getLogger(){return this.logger}isAvailable(){return this.available}isBrowserEnvironment(){return this.browserEnvironment}};var Gr=class n extends di{getModuleName(){return n.MODULE_NAME}getId(){return n.ID}async initialize(e){return this.available=typeof window<"u",this.available}};Gr.MODULE_NAME="";Gr.ID="StandardOperatingContext";var Bo=class{constructor(e,t){this.controller=t||new hi(new Gr(e,{waitForPopupResponse:this.waitForPopupResponse.bind(this),waitForIframeResponse:this.waitForIframeResponse.bind(this)}))}async waitForPopupResponse(e,t,r){let o=this.controller;return Yt(o.getConfiguration().system.popupBridgeTimeout,o.getLogger(),e,o.getPerformanceClient())}async waitForIframeResponse(e,t){let r=this.controller,o=r.getConfiguration();return Yt(o.system.iframeBridgeTimeout,r.getLogger(),t,r.getPerformanceClient(),o.experimental)}async initialize(e){return this.controller.initialize(e)}async acquireTokenPopup(e){return this.controller.acquireTokenPopup(e)}acquireTokenRedirect(e){return this.controller.acquireTokenRedirect(e)}acquireTokenSilent(e){return this.controller.acquireTokenSilent(e)}acquireTokenByCode(e){return this.controller.acquireTokenByCode(e)}addEventCallback(e,t){return this.controller.addEventCallback(e,t)}removeEventCallback(e){return this.controller.removeEventCallback(e)}addPerformanceCallback(e){return this.controller.addPerformanceCallback(e)}removePerformanceCallback(e){return this.controller.removePerformanceCallback(e)}getAccount(e){return this.controller.getAccount(e)}getAllAccounts(e){return this.controller.getAllAccounts(e)}handleRedirectPromise(e){return this.controller.handleRedirectPromise(e)}loginPopup(e){return this.controller.loginPopup(e)}loginRedirect(e){return this.controller.loginRedirect(e)}logoutRedirect(e){return this.controller.logoutRedirect(e)}logoutPopup(e){return this.controller.logoutPopup(e)}ssoSilent(e){return this.controller.ssoSilent(e)}getLogger(){return this.controller.getLogger()}setLogger(e){this.controller.setLogger(e)}setActiveAccount(e){this.controller.setActiveAccount(e)}getActiveAccount(){return this.controller.getActiveAccount()}initializeWrapperLibrary(e,t){return this.controller.initializeWrapperLibrary(e,t)}setNavigationClient(e){this.controller.setNavigationClient(e)}getConfiguration(){return this.controller.getConfiguration()}async hydrateCache(e,t){return this.controller.hydrateCache(e,t)}clearCache(e){return this.controller.clearCache(e)}};var bR=C.AuthenticationScheme,PR=C.ResponseMode,NR=C.PromptValue,MR=C.JsonWebTokenTypes,UR=C.OIDC_DEFAULT_SCOPES;var zo=null,ui="";function mi(){if(!zo)throw new Error("MSAL n'est pas initialise.");return zo}function pi(){let n=mi();return n.getActiveAccount()??n.getAllAccounts()[0]??null}async function xp(n,e,t,r){if(zo)return;if(!n||!e||!t||!r)throw new Error("La configuration Azure du frontend est incomplete.");ui=t,zo=await Bo.createPublicClientApplication({auth:{clientId:e,authority:`https://login.microsoftonline.com/${n}`,redirectUri:r,postLogoutRedirectUri:r},cache:{cacheLocation:"sessionStorage"}});let o=pi();o&&zo.setActiveAccount(o)}async function Lp(){let n=mi(),e=await n.loginPopup({scopes:["openid","profile","email",ui]});n.setActiveAccount(e.account)}async function Hp(){let n=mi(),e=pi();if(!e)throw new Error("Aucun compte Microsoft connecte.");try{return(await n.acquireTokenSilent({account:e,scopes:[ui]})).accessToken}catch(t){if(!(t instanceof H))throw t;return(await n.acquireTokenPopup({account:e,scopes:[ui]})).accessToken}}function Fp(){return pi()!==null}async function Kp(){let n=mi(),e=pi();e&&await n.logoutPopup({account:e})}globalThis.emeMsal={getAccessToken:Hp,hasAccount:Fp,initialize:xp,signIn:Lp,signOut:Kp};})();
/*! Bundled license information:

@azure/msal-common/dist-browser/constants/AADServerParamKeys.mjs:
@azure/msal-common/dist-browser/utils/Constants.mjs:
@azure/msal-common/dist-browser/error/AuthError.mjs:
@azure/msal-common/dist-browser/error/ClientAuthError.mjs:
@azure/msal-common/dist-browser/error/ClientAuthErrorCodes.mjs:
@azure/msal-common/dist-browser/account/ClientInfo.mjs:
@azure/msal-common/dist-browser/account/AuthToken.mjs:
@azure/msal-common/dist-browser/account/AccountInfo.mjs:
@azure/msal-common/dist-browser/authority/AuthorityType.mjs:
@azure/msal-common/dist-browser/account/TokenClaims.mjs:
@azure/msal-common/dist-browser/authority/ProtocolMode.mjs:
@azure/msal-common/dist-browser/cache/utils/AccountEntityUtils.mjs:
@azure/msal-common/dist-browser/error/AuthErrorCodes.mjs:
@azure/msal-common/dist-browser/error/ClientConfigurationError.mjs:
@azure/msal-common/dist-browser/error/ClientConfigurationErrorCodes.mjs:
@azure/msal-common/dist-browser/authority/OpenIdConfigResponse.mjs:
@azure/msal-common/dist-browser/utils/StringUtils.mjs:
@azure/msal-common/dist-browser/url/UrlString.mjs:
@azure/msal-common/dist-browser/authority/AuthorityMetadata.mjs:
@azure/msal-common/dist-browser/authority/AuthorityOptions.mjs:
@azure/msal-common/dist-browser/authority/CloudInstanceDiscoveryResponse.mjs:
@azure/msal-common/dist-browser/authority/CloudInstanceDiscoveryErrorResponse.mjs:
@azure/msal-common/dist-browser/telemetry/performance/PerformanceEvents.mjs:
@azure/msal-common/dist-browser/utils/FunctionWrappers.mjs:
@azure/msal-common/dist-browser/authority/RegionDiscovery.mjs:
@azure/msal-common/dist-browser/utils/TimeUtils.mjs:
@azure/msal-common/dist-browser/cache/utils/CacheHelpers.mjs:
@azure/msal-common/dist-browser/authority/Authority.mjs:
@azure/msal-common/dist-browser/authority/AuthorityFactory.mjs:
@azure/msal-common/dist-browser/request/ScopeSet.mjs:
@azure/msal-common/dist-browser/request/RequestParameterBuilder.mjs:
@azure/msal-common/dist-browser/utils/UrlUtils.mjs:
@azure/msal-common/dist-browser/crypto/ICrypto.mjs:
@azure/msal-common/dist-browser/logger/Logger.mjs:
@azure/msal-common/dist-browser/packageMetadata.mjs:
@azure/msal-common/dist-browser/error/CacheErrorCodes.mjs:
@azure/msal-common/dist-browser/error/CacheError.mjs:
@azure/msal-common/dist-browser/cache/CacheManager.mjs:
@azure/msal-common/dist-browser/telemetry/performance/PerformanceEvent.mjs:
@azure/msal-common/dist-browser/telemetry/performance/StubPerformanceClient.mjs:
@azure/msal-common/dist-browser/config/ClientConfiguration.mjs:
@azure/msal-common/dist-browser/cache/persistence/TokenCacheContext.mjs:
@azure/msal-common/dist-browser/crypto/PopTokenGenerator.mjs:
@azure/msal-common/dist-browser/error/InteractionRequiredAuthErrorCodes.mjs:
@azure/msal-common/dist-browser/error/InteractionRequiredAuthError.mjs:
@azure/msal-common/dist-browser/error/ServerError.mjs:
@azure/msal-common/dist-browser/utils/ProtocolUtils.mjs:
@azure/msal-common/dist-browser/response/ResponseHandler.mjs:
@azure/msal-common/dist-browser/account/CcsCredential.mjs:
@azure/msal-common/dist-browser/utils/ClientAssertionUtils.mjs:
@azure/msal-common/dist-browser/network/RequestThumbprint.mjs:
@azure/msal-common/dist-browser/network/ThrottlingUtils.mjs:
@azure/msal-common/dist-browser/error/NetworkError.mjs:
@azure/msal-common/dist-browser/protocol/Token.mjs:
@azure/msal-common/dist-browser/client/AuthorizationCodeClient.mjs:
@azure/msal-common/dist-browser/protocol/Authorize.mjs:
@azure/msal-common/dist-browser/error/JoseHeaderError.mjs:
@azure/msal-common/dist-browser/error/JoseHeaderErrorCodes.mjs:
@azure/msal-common/dist-browser/crypto/JoseHeader.mjs:
@azure/msal-common/dist-browser/client/RefreshTokenClient.mjs:
@azure/msal-common/dist-browser/telemetry/server/ServerTelemetryManager.mjs:
@azure/msal-common/dist-browser/client/SilentFlowClient.mjs:
@azure/msal-common/dist-browser/network/INetworkModule.mjs:
@azure/msal-common/dist-browser/request/BaseAuthRequest.mjs:
@azure/msal-common/dist-browser/index-browser.mjs:
  (*! @azure/msal-common v16.11.2 2026-07-15 *)

@azure/msal-browser/dist/telemetry/BrowserPerformanceEvents.mjs:
@azure/msal-browser/dist/error/BrowserAuthError.mjs:
@azure/msal-browser/dist/error/BrowserAuthErrorCodes.mjs:
@azure/msal-browser/dist/encode/Base64Decode.mjs:
@azure/msal-browser/dist/utils/BrowserConstants.mjs:
@azure/msal-browser/dist/encode/Base64Encode.mjs:
@azure/msal-browser/dist/crypto/BrowserCrypto.mjs:
@azure/msal-browser/dist/error/BrowserConfigurationAuthError.mjs:
@azure/msal-browser/dist/error/BrowserConfigurationAuthErrorCodes.mjs:
@azure/msal-browser/dist/utils/BrowserUtils.mjs:
@azure/msal-browser/dist/cache/DatabaseStorage.mjs:
@azure/msal-browser/dist/cache/MemoryStorage.mjs:
@azure/msal-browser/dist/cache/AsyncMemoryStorage.mjs:
@azure/msal-browser/dist/crypto/CryptoOps.mjs:
@azure/msal-browser/dist/telemetry/BrowserRootPerformanceEvents.mjs:
@azure/msal-browser/dist/cache/CacheKeys.mjs:
@azure/msal-browser/dist/cache/CookieStorage.mjs:
@azure/msal-browser/dist/cache/CacheHelpers.mjs:
@azure/msal-browser/dist/cache/EncryptedData.mjs:
@azure/msal-browser/dist/cache/LocalStorage.mjs:
@azure/msal-browser/dist/cache/SessionStorage.mjs:
@azure/msal-browser/dist/event/EventType.mjs:
@azure/msal-browser/dist/packageMetadata.mjs:
@azure/msal-browser/dist/utils/Helpers.mjs:
@azure/msal-browser/dist/cache/BrowserCacheManager.mjs:
@azure/msal-browser/dist/cache/AccountManager.mjs:
@azure/msal-browser/dist/event/EventHandler.mjs:
@azure/msal-browser/dist/interaction_client/BaseInteractionClient.mjs:
@azure/msal-browser/dist/request/RequestHelpers.mjs:
@azure/msal-browser/dist/interaction_client/StandardInteractionClient.mjs:
@azure/msal-browser/dist/popup_relay/constants.mjs:
@azure/msal-browser/dist/popup_relay/relayClient.mjs:
@azure/msal-browser/dist/utils/BrowserProtocolUtils.mjs:
@azure/msal-browser/dist/response/ResponseHandler.mjs:
@azure/msal-browser/dist/interaction_handler/InteractionHandler.mjs:
@azure/msal-browser/dist/error/NativeAuthErrorCodes.mjs:
@azure/msal-browser/dist/broker/nativeBroker/NativeStatusCodes.mjs:
@azure/msal-browser/dist/error/NativeAuthError.mjs:
@azure/msal-browser/dist/interaction_client/SilentCacheClient.mjs:
@azure/msal-browser/dist/interaction_client/PlatformAuthInteractionClient.mjs:
@azure/msal-browser/dist/protocol/Authorize.mjs:
@azure/msal-browser/dist/crypto/PkceGenerator.mjs:
@azure/msal-browser/dist/navigation/NavigationClient.mjs:
@azure/msal-browser/dist/network/FetchClient.mjs:
@azure/msal-browser/dist/config/Configuration.mjs:
@azure/msal-browser/dist/broker/nativeBroker/PlatformAuthExtensionHandler.mjs:
@azure/msal-browser/dist/broker/nativeBroker/PlatformAuthDOMHandler.mjs:
@azure/msal-browser/dist/broker/nativeBroker/PlatformAuthProvider.mjs:
@azure/msal-browser/dist/interaction_client/PopupClient.mjs:
@azure/msal-browser/dist/interaction_client/RedirectClient.mjs:
@azure/msal-browser/dist/interaction_handler/SilentHandler.mjs:
@azure/msal-browser/dist/interaction_client/SilentIframeClient.mjs:
@azure/msal-browser/dist/interaction_client/SilentRefreshClient.mjs:
@azure/msal-browser/dist/interaction_client/HybridSpaAuthorizationCodeClient.mjs:
@azure/msal-browser/dist/interaction_client/SilentAuthCodeClient.mjs:
@azure/msal-browser/dist/utils/MsalFrameStatsUtils.mjs:
@azure/msal-browser/dist/controllers/StandardController.mjs:
@azure/msal-browser/dist/operatingcontext/BaseOperatingContext.mjs:
@azure/msal-browser/dist/operatingcontext/StandardOperatingContext.mjs:
@azure/msal-browser/dist/app/PublicClientApplication.mjs:
@azure/msal-browser/dist/index.mjs:
  (*! @azure/msal-browser v5.17.1 2026-07-15 *)
*/