@azure/msal-browser

Tue, 05 Sep 2023 22:13:47 GMT

Minor changes

• Remove legacy code (IE11 Detection, XHRClient and custom GUID Generator) (thomas.norling@microsoft.com)
• Remove redundant controller internal methods and classes from internals #6413 (kshabelko@microsoft.com)
• New API to silently clear cache #6374 (lalimasharda@microsoft.com)
• Remove browser internals #6420 (kshabelko@microsoft.com)
• Bump @azure/msal-common to v14.0.3

Patches

• Clear claims from cache when config is not set #6430 (sameera.gajjarapu@microsoft.com)
• Add a linter rule to avoid floating promises #6421 (sameera.gajjarapu@microsoft.com)
• Make AuthToken methods instead of class #6423 (thomas.norling@microsoft.com)
• Make eventName of type string for BrowserPerformanceClient and PerformanceClient #6386 (kshabelko@microsoft.com)
• Refactor BrowserAuthError to reduce size (thomas.norling@microsoft.com)
• Make base64 encoder and decoder methods instead of classes #6416 (thomas.norling@microsoft.com)
• Instrument ssoSilent #6383 (thomas.norling@microsoft.com)
• Fix for source-map related errors #6398 (lalimasharda@microsoft.com)

Changes

• Remove isEmpty helper API (thomas.norling@microsoft.com)

Fri, 18 Aug 2023 18:40:03 GMT

Patches

• Fix input parameter type for addEventCallback (thomas.norling@microsoft.com)
• Extend hydrateCache request type to include ssoSilentRequest, PopupRequest and RedirectRequest #6329 (thomas.norling@microsoft.com)
• Bump @azure/msal-common to v14.0.2

Fri, 11 Aug 2023 19:00:44 GMT

Patches

• Update dist settings for packages #6322 (hemoral@microsoft.com)
• Add tokenBodyParameters to silent and interaction request types #6325 (kshabelko@microsoft.com)
• Bump @azure/msal-common to v14.0.1

Changes

• Pick up broker extra query params #6286 (kshabelko@microsoft.com)

Mon, 07 Aug 2023 18:15:15 GMT

Major Changes

• Revert allowNativeBroker default to false #6280 (hemoral@microsoft.com)
• Throw when initialize has not been called #6233 (hemoral@microsoft.com)
• allowNativeBroker configuration defaults to true #5616 (hemoral@microsoft.com)
• Fix telemetry typos #5868 (kshabelko@microsoft.com)

Minor Changes

• Expose CacheRecord as part of internals API #6291 (kshabelko@microsoft.com)
• Add exports to package.json and update type to module #6194 (thomas.norling@microsoft.com)
• Added OIDCOptions parameter to config (shylasummers@users.noreply.github.com)
• Expose BrowserPerformanceClient and BrowserPerformanceMeasurement artifacts as public #6273 (kshabelko@microsoft.com)
• Update "PerformanceClient" for better usability/extendibility #6270 (kshabelko@microsoft.com)
• Add hydrateCache API #6271 (thomas.norling@microsoft.com)
• Add storeInCache request parameter to control which tokens are persisted to the cache (thomas.norling@microsoft.com)
• Make claims-based caching configurable #6163 (hemoral@microsoft.com)
• Update string conversion function (thomas.norling@microsoft.com)
• Make account info mandatory for AuthenticationResult and CacheRecord types #6156 (kshabelko@microsoft.com)
• Export IdTokenClaims & PromptValue types (thomas.norling@microsoft.com)
• Switch from enums to object literals to reduce the bundle size #6056 (kshabelko@microsoft.com)
• Fix inProgress state reset when page restored from bfCache #6037 (thomas.norling@microsoft.com)
• Remove legacy MsCrypto and MsrCrypto polyfill to reduce the bundle size #6086 (kshabelko@microsoft.com)
• Update bundled files to be included in published package #5997 (hemoral@microsoft.com)
• Revert to common as a regular dependency #5985 (hemoral@microsoft.com)
• Add CIAM support for v3(#5915) (sameera.gajjarapu@microsoft.com)
• Add temporaryCacheLocation to Cache Options #5725 (nicolas.zawada@gmail.com)
• Randomize native extension response identifiers to facilitate concurrency #5903 (kshabelko@microsoft.com)

Patches

• Bump @azure/msal-common to v14.0.0
• Treat invalid_method as a fatal error for WAM #6094 (thomas.norling@microsoft.com)
• Added authority check for native and silent flows #6002 (lalimasharda@microsoft.com)
• Fix silent cache lookup bugs for native flows #6067 (sameera.gajjarapu@microsoft.com)
• ignore native broker initialize check if application is not top-frame #6129 (lalimasharda@microsoft.com)
• Fix prepack hook #5967 (kshabelko@microsoft.com)
• Bundle local version of msal-common into msal-browser #5953 (kshabelko@microsoft.com)
• Fix missing idToken in response after refresh #5871 (thomas.norling@microsoft.com)
• Improve iframe error detection #5891 (thomas.norling@microsoft.com)
• Fix: Legacy authority token dummy aud claim value for requests with scope input by using v2.0 endpoint (kapjain@microsoft.com)
• Exception is thrown in acquireTokenByClientCredential if tenantId is missing #5805 (rginsburg@microsoft.com)
• removeAccount does not throw if account does not exist in cache #5911 (thomas.norling@microsoft.com)
• Remove unused enum (thomas.norling@microsoft.com)

Mon, 01 May 2023 20:47:44 GMT

Minor changes

• Add temporaryCacheLocation to Cache Options #5725 (nicolas.zawada@gmail.com)
• Bump @azure/msal-common to v13.0.0

Patches

• Fix missing idToken in response after refresh #5870 (thomas.norling@microsoft.com)

Mon, 03 Apr 2023 21:29:32 GMT

Minor changes

• Optimize account lookups in cache #5792 (thomas.norling@microsoft.com)
• Optimize token lookups in cache #5806 (thomas.norling@microsoft.com)
• Bump @azure/msal-common to v12.0.0

Patches

• Fix missing telemetry queue information #5809 (kshabelko@microsoft.com)
• Dup code removal in NativeInteractionClient (#5768) (sameera.gajjarapu@microsoft.com)

Tue, 07 Mar 2023 16:48:51 GMT

Minor changes

• Reduce telemetry RAM footprint and improve usability/readability #5676 (kshabelko@microsoft.com)
• Capture native bridge telemetry data points #5698 (kshabelko@microsoft.com)
• Bump @azure/msal-common to v11.0.0

Patches

• Reduce preQueueTimeByCorrelationId RAM footprint #5681 (kshabelko@microsoft.com)
• exporting native classes as internals and separating out native telemetry #5692 (lalimasharda@microsoft.com)
• Remove deprecated telemetry flushMeasurements() function from unit tests #5718 (kshabelko@microsoft.com)
• Refactor handleNativeResponse (#5757) (sameera.gajjarapu@microsoft.com)
• Add support for hybrid flow with native bridge enabled #5759 (lalimasharda@microsoft.com)

Mon, 06 Feb 2023 18:51:51 GMT

Minor changes

• Add JS Queue Measurements to acquireTokenSilent #5352 (joarroyo@microsoft.com)
• proxyUrl is now passed to msal-node's httpClient via it's constructor #5599 (rginsburg@microsoft.com)
• Bump @azure/msal-common to v10.0.0

Patches

• Removed tokenQueryParameters from Public Client flows because they don't use the /token endpoint. #5573 (rginsburg@microsoft.com)
• Export browser telemetry classes #5641 (kshabelko@microsoft.com)
• Adding page visibility change event for silent calls like AcquireTokenSilent #5555 (kshabelko@microsoft.com)
• Revert typo changes #5582 (joarroyo@microsoft.com)

Mon, 09 Jan 2023 22:44:57 GMT

Patches

• Export CryptoOps and NativeAuthError for internal use #5482 (lalimasharda@microsoft.com)
• added http version changes #5211 (bmahal@microsoft.com)
• fix typos #5531 (bmahal@microsoft.com)
• fix logger explicitly set to undefined error #5355 (bmahal@microsoft.com)
• Log number of accounts in trace mode. #5529 (kshabelko@microsoft.com)
• Bump @azure/msal-common to v9.0.2

Wed, 07 Dec 2022 16:53:07 GMT

Patches

• Added caching methods to set or get redirect context of application during redirect flow. #5411 (lalimasharda@microsoft.com)
• Bump @azure/msal-common to v9.0.1

Mon, 21 Nov 2022 19:14:45 GMT

Minor changes

• Added logging to Authority class (rginsburg@microsoft.com)
• Bump @azure/msal-common to v9.0.0

Patches

• Export popup attributes #5364 (hemoral@microsoft.com)

Mon, 07 Nov 2022 22:46:55 GMT

Minor changes

• Add static fields to telemetry #5224 (thomas.norling@microsoft.com)
• Bump @azure/msal-common to v8.0.0

Patches

• Add MATS fields to telemetry #5308 (thomas.norling@microsoft.com)
• Fix double prompt in native broker redirect flow #5239 (thomas.norling@microsoft.com)

Mon, 10 Oct 2022 22:27:02 GMT

Minor changes

• Extend msal-browser TokenCache to load refresh tokens #5233 (louisv@microsoft.com)
• Make popup poll interval configurable #5276 (hemoral@microsoft.com)
• Bump @azure/msal-common to v7.6.0

Mon, 03 Oct 2022 22:12:26 GMT

Minor changes

• Implemented Cache Lookup Policy for acquireTokenSilent #5014 (rginsburg@microsoft.com)
• Add support for MSR Crypto #3826 (janutter@microsoft.com)
• Add x-ms-request-id to perf telemetry logging #5244 (joarroyo@microsoft.com)
• Added 'no_session' to prompt enum #5131 (rginsburg@microsoft.com)
• Bump @azure/msal-common to v7.5.0

Patches

• Include Refresh token size in perf telemetry data #5250 (bmahal@microsoft.com)

Mon, 12 Sep 2022 18:19:32 GMT

Patches

• Fix keystore clearing on Firefox #5112 (hemoral@microsoft.com)
• Restore error codes for acquireTokenSilent telemetry #5190 (janutter@microsoft.com)
• Bump @azure/msal-common to v7.4.1

Fri, 02 Sep 2022 18:06:53 GMT

Patches

• Bump @azure/msal-common to v7.4.0

Mon, 01 Aug 2022 22:22:35 GMT

Patches

• Rename native request property scopes to scope #5043 (thomas.norling@microsoft.com)
• adding network performance measurement #4834 (ellymakuba@microsoft.com)
• Send login_hint claim instead of sid if available #4990 (janutter@microsoft.com)
• Bump @azure/msal-common to v7.3.0

Mon, 18 Jul 2022 23:26:21 GMT

Minor changes

• Added new token size field in the perf telemetry data #4973 (bmahal@microsoft.com)
• Add local cache support for JS-WAM bridge #4971 (sameera.gajjarapu@microsoft.com)
• Bump @azure/msal-common to v7.2.0

Patches

• Fix bug with activeAccount when two accounts have same local account id #5004 (t-ssummers@microsoft.com)

Tue, 05 Jul 2022 22:37:04 GMT

Minor changes

• feat: adding authority metadata resiliency #4536 (samuelkamau@microsoft.com)
• Bump @azure/msal-common to v7.1.0

Patches

• Fix prompt behavior for native broker requests #4949 (thomas.norling@microsoft.com)
• Non-fatal native broker errors should clear interaction in progress flag #4950 (thomas.norling@microsoft.com)
• Mark temporary cache cookies as SameSite lax #4957 (janutter@microsoft.com)
• Handle ACCOUNT_UNAVAILABLE error status from native broker #4951 (thomas.norling@microsoft.com)

Mon, 13 Jun 2022 22:28:09 GMT

Minor changes

• Add errorCode and subErrorCode to client telemetry events (#4863) (sameera.gajjarapu@microsoft.com)
• Bump @azure/msal-common to v7.0.0

Patches

• Add strict assertion checks for OBO clients (#4691) (bmahal@microsoft.com)
• Update redirect_in_iframe message to include messaging for embedded applications #4895 (janutter@microsoft.com)
• preflightBrowserEnvironmentCheck should not always set interaction in progress #4893 (janutter@microsoft.com)
• Return correct fromCache value when tokens are acquired from native broker #4880 (thomas.norling@microsoft.com)

Mon, 06 Jun 2022 22:13:00 GMT

Minor changes

• Fix empty hash errors in popups #4793 (thomas.norling@microsoft.com)
• Add PoP support for Encrypted Access Tokens #4730 (hemoral@microsoft.com)
• Bump @azure/msal-common to v6.4.0

Patches

• Add keyId to SHR header and make x5c_ca claim type string array #4729 (hemoral@microsoft.com)
• Fixes assignment of expiresOn inside loadExternalTokens to fix issue where all access tokens appear expired during E2E #4711 (paulrsauer@gmail.com)
• SHR params renamed as per MSAL JS's naming convention #4794 (sameera.gajjarapu@microsoft.com)
• Fallback to web flow when native broker throws 'DISABLED' status #4837 (thomas.norling@microsoft.com)
• Change log message level in initialize from warning to info #4820 (thomas.norling@microsoft.com)

Mon, 02 May 2022 22:23:33 GMT

Minor changes

• Move internals needed for msal-browser-1p to separate export #4742 (janutter@microsoft.com)
• Add support for acquiring tokens from the native broker #4531 (thomas.norling@microsoft.com)
• Bump @azure/msal-common to v6.3.0

Patches

• Fix for WAM window parenting #4755 (thomas.norling@microsoft.com)
• Ensure interaction status is properly set during logout with onRedirectNavigate #4719 (janutter@microsoft.com)

Mon, 04 Apr 2022 21:12:42 GMT

Minor changes

• Add performance telemetry API #4570 (janutter@microsoft.com)
• Add Client Application telemetry parameters to MSAL #4616 (prithviraj.kanherkar@microsoft.com)
• Bump @azure/msal-common to v6.2.0

Patches

• Fix persistent key store deletion on logout #4617 (hemoral@microsoft.com)

Mon, 07 Mar 2022 23:28:43 GMT

Patches

• Clear temporary cache when back button is clicked during redirect flow #4513 (thomas.norling@microsoft.com)
• Don't reassign request object properties #4563 (thomas.norling@microsoft.com)

Tue, 08 Feb 2022 00:41:06 GMT

Minor changes

• Add support for logout_hint #4450 (hemoral@microsoft.com)
• Add AzureCloudInstance to JS libraries (sameera.gajjarapu@microsoft.com)
• Bump @azure/msal-common to v6.1.0

Patches

• Expose OIDC_DEFAULT_SCOPES constant #4280 (thomas.norling@microsoft.com)
• Improve reliability of interaction_in_progress #4460 (thomas.norling@microsoft.com)
• Clear hash only if it contains known response properties #4415 (thomas.norling@microsoft.com)
• Adding exports and other changes for extensibility #4459 (prkanher@microsoft.com)

Tue, 04 Jan 2022 00:20:29 GMT

Minor changes

• Add support for requested claims in silent token acquisition #4296 (hemoral@microsoft.com)
• Bump @azure/msal-common to v6.0.0

Patches

• Clear interaction status even if there is no ongoing request #4314 (janutter@microsoft.com)

Tue, 07 Dec 2021 00:17:01 GMT

Minor changes

• Add acquireTokenByCode API for hybrid spa flow #3978 (janutter@microsoft.com)
• Bump @azure/msal-common to v5.2.0

Patches

• Fix circular dependencies in AuthenticationHeaderParser and AsyncMemoryStorage #4235 (hemoral@microsoft.com)

Mon, 01 Nov 2021 23:53:21 GMT

Minor changes

• Add support for in-memory storage of token binding keys #4183 (hemoral@microsoft.com)
• Add support for ephemeral SSH certificate acquisition #4178 (hemoral@microsoft.com)
• Add support for in-memory storage of token binding keys #4183 (hemoral@microsoft.com)
• Add support for SHR nonce #3999 (hemoral@microsoft.com)
• Bump @azure/msal-common to v5.1.0

Patches

• Add support for different key types in IndexedDB storage #4052 (hemoral@microsoft.com)
• Ensure correlation is passed to all interaction clients in acquireTokenSilent #4186 (janutter@microsoft.com)
• Fix typo in noTokenRequestCacheError (#4136) (Michael.Currie@rjwgroup.com)
• Fix redirect processing when allowRedirectInIframe: true #4142 (thomas.norling@microsoft.com)

Mon, 04 Oct 2021 23:12:35 GMT

Minor changes

• Emit event when user logs in or out from a different tab or window #3981 (thomas.norling@microsoft.com)
• Remove requirement of user hint on ssoSilent API #4123 (prkanher@microsoft.com)
• Bump @azure/msal-common to v5.0.1

Patches

• Consistently export error types and messages for errors thrown by MSAL #4117 (jagore@microsoft.com)
• Move helper functions up to BaseInteractionClient #4049 (thomas.norling@microsoft.com)
• Export library version #4124 (thomas.norling@microsoft.com)

Tue, 07 Sep 2021 23:22:24 GMT

Minor changes

• Add configuration for popup window size and placement #3946 (joarroyo@microsoft.com)
• Add API to sideload tokens to msal-browser #3895 (joarroyo@microsoft.com)
• Add SignedHttpRequest class #3058 (janutter@microsoft.com)
• Refactor acquireToken logic into InteractionClients #3871 (thomas.norling@microsoft.com)

Patches

• Clear cache before constructing logout url #3982 (thomas.norling@microsoft.com)
• Add pop params to request thumbprint #3973 (hemoral@microsoft.com)
• Update ADAL to MSAL SSO logic to use preferred_username instead of upn by default #3945 (ellymakuba@microsoft.com)
• Populate msal v2 loginHint from cached msal v1 id token #4027 (janutter@microsoft.com)
• Throw interaction in progress if any msal instance has interaction in progress #4014 (thomas.norling@microsoft.com)
• Only emit handleRedirect start event on first invocation of handleRedirectPromise #4013 (thomas.norling@microsoft.com)
• Add correlationId to AuthenticationResult type #3947 (thomas.norling@microsoft.com)
• Remove token binding key from key store when refreshing pop token #3500 (hemoral@microsoft.com)
• Fix clearing active account on logout #3948 (hemoral@microsoft.com)
• Add correlationId to errors thrown #3930 (thomas.norling@microsoft.com)

Thu, 22 Jul 2021 22:50:22 GMT

Minor changes

• Msal-Browser supports parallel silent requests #3837 (joarroyo@microsoft.com)
• Persist active account #3755 (thomas.norling@microsoft.com)

Patches

• Add fix for loginRedirect failure when angular index.html base href is different from the origin (#3875) (rishanthakumar@gmail.com)
• fix: fixing the npm audit issues (samuelkamau@microsoft.com)
• Expose isInPopup helper function #3825 (thomas.norling@microsoft.com)

Mon, 28 Jun 2021 23:39:48 GMT

Minor changes

• Add correlationId to log messages #3601 (joarroyo@microsoft.com)
• Add CCS parameters to headers or form_data #3636 (prkanher@microsoft.com)

Patches

• Update monitor_window_timeout error message with link to error docs #3783 (thomas.norling@microsoft.com)
• Refactor event APIs into EventHandler class #3770 (thomas.norling@microsoft.com)
• Fix logoutPopup parameter type on IPublicClientApplication #3663 (thomas.norling@microsoft.com)

Wed, 12 May 2021 18:35:03 GMT

Patches

• Adjust log messages #3589 (joarroyo@microsoft.com)
• Fix hash removal from URL and browser history after interactive request #3609 (hemoral@microsoft.com)
• Update account equality check #3527 (thomas.norling@microsoft.com)
• Close popup if error is thrown before popup window navigation occurs #3572 (thomas.norling@microsoft.com)
• change msal-browser/msal-common to preserveModules to enable tree-shaking #3300 (oo.thomas96@gmail.com)

Thu, 22 Apr 2021 23:26:08 GMT

Patches

• Add .browserslistrc #3471 (thomas.norling@microsoft.com)
• Look for temp cache items in local storage as fallback #3509 (janutter@microsoft.com)

Wed, 14 Apr 2021 18:39:53 GMT

Minor changes

• Add support for AccessToken_With_AuthScheme credential type #3426 (hectormgdev@gmail.com)

Patches

• Make SHR parameters optional (#3320) (hemoral@microsoft.com)

Wed, 31 Mar 2021 22:25:57 GMT

Patches

• Export PopupEvent #3360 (joarroyo@microsoft.com)

Wed, 24 Mar 2021 22:55:46 GMT

Minor changes

• Add logoutPopup API #3044 (thomas.norling@microsoft.com)

Patches

• Fix errors thrown on cache lookups when reading non-msal cache values #3245 (thomas.norling@microsoft.com)
• Update blockReloadInIframe error message with link to error doc #3294 (thomas.norling@microsoft.com)
• Block nested popups #3249 (thomas.norling@microsoft.com)

Mon, 15 Mar 2021 23:45:17 GMT

Patches

• Clear temporary cache cookies on page load #3129 (prkanher@microsoft.com)
• Throw BrowserAuthError when fetch fails #3146 (thomas.norling@microsoft.com)

Wed, 03 Mar 2021 21:47:05 GMT

Minor changes

• Add option to make MSAL browser cookies secure (#3001) (hemoral@microsoft.com)
• Add setNavigationClient API and expose INavigationClient interface (#2985) (thomas.norling@microsoft.com)

Patches

• Separate telemetry for ssoSilent and ATS iframe renewal (#3064) (thomas.norling@microsoft.com)
• Add instrumentation to msal-browser (#3004) (joarroyo@microsoft.com)
• Memoize multiple calls to handleRedirectPromise (#3072) (thomas.norling@microsoft.com)