CHANGELOG.md

Change Log - @azure/msal-browser

This log was last generated on Tue, 05 Nov 2024 18:58:45 GMT and should not be manually modified.

3.27.0

Tue, 05 Nov 2024 18:58:45 GMT

Minor changes

• Capture runtime errors in telemetry for submeasures ([email protected])
• Additional network failure telemetry ([email protected])
• Add first order broker parameters #7348 ([email protected])
• Bump @azure/msal-common to v14.16.0
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1
• Bump rollup-msal to v0.0.0

Patches

• Move requestId telemetry collection ([email protected])

3.26.1

Tue, 08 Oct 2024 20:45:26 GMT

Patches

• Respect cache policy and claims set in the request #7363 ([email protected])
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1
• Bump rollup-msal to v0.0.0

3.26.0

Tue, 08 Oct 2024 16:51:05 GMT

Minor changes

• Add optional event type filter to addEventCallback #7351 ([email protected])
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1
• Bump rollup-msal to v0.0.0

Patches

• Bug fixes for windowless PCA ([email protected])

3.25.0

Thu, 03 Oct 2024 00:40:42 GMT

Minor changes

• Mute no_server_response error when back navigation is detected #7342 ([email protected])
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1
• Bump rollup-msal to v0.0.0

3.24.0

Thu, 19 Sep 2024 23:48:30 GMT

Minor changes

• Fix type resolution when using moduleResolution node16 ([email protected])
• Allow passing popup parent for multi-window flows ([email protected])
• Add 'instance_aware' auth config param #7259 ([email protected])
• Bump @azure/msal-common to v14.15.0
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1
• Bump rollup-msal to v0.0.0

Patches

• Add clientLibrary and clientLibraryVersion parameters to NAA Request (#7297) ([email protected])
• Add __initializeNestedAppAuth function for Nested App Auth (#7289) ([email protected])

3.23.0

Tue, 03 Sep 2024 21:57:24 GMT

Minor changes

• Bump version ([email protected])
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

3.22.1

Tue, 03 Sep 2024 21:30:55 GMT

Patches

• Bump version ([email protected])
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

3.22.0

Wed, 28 Aug 2024 23:06:01 GMT

Minor changes

• Remove retry for popup and redirect #7270 ([email protected])
• Revert 'Use high precision TS for NAA message time (#7243)' ([email protected])
• Bump @azure/msal-common to v14.14.2
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

3.21.0

Tue, 13 Aug 2024 23:25:07 GMT

Minor changes

• Retry in RedirectClient for invalid_grant errors #7231 ([email protected])
• Retry in SilentIframeClient for invalid_grant errors #7218 ([email protected])
• Retry in PopupClient for invalid_grant errors #7216 ([email protected])
• Bump @azure/msal-common to v14.14.1
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

Patches

• Update request retry for invalid_grant #7249 ([email protected])
• onRedirectNavigate deprecation fix #7251 ([email protected])
• Use high precision TS for NAA message time #7243 ([email protected])

3.20.0

Tue, 23 Jul 2024 14:19:34 GMT

Minor changes

• Track MSAL node SKU for broker flows #7213 ([email protected])
• Track MSAL SKU for broker flows #7182 ([email protected])
• Bump @azure/msal-common to v14.14.0
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

3.19.1

Tue, 16 Jul 2024 18:22:27 GMT

Patches

• Generate tenantProfile even without idTokenClaims ([email protected])
• Bump @azure/msal-common to v14.13.1
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

3.19.0

Fri, 12 Jul 2024 19:56:47 GMT

Minor changes

• Add missing param to PCA.initialize #7194 ([email protected])
• Add correlation id param to initialize and clearTokensAndKeysWithClaims APIs to streamline telemetry data analysis #7190 ([email protected])
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

Patches

• Remove onRedirectNative call back function in native ATRedirect calls #7193 ([email protected])

3.18.0

Mon, 01 Jul 2024 19:18:29 GMT

Minor changes

• Add main field to package.json ([email protected])
• Relax loadExternalTokens requirements to allow loading access or refresh tokens without id_token ([email protected])
• Bump @azure/msal-common to v14.13.0
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

Patches

• fix : msal-browser acquireTokenSilentAsync memory leak ([email protected])
• Update error message typo in NAA errors ([email protected])

3.17.0

Mon, 10 Jun 2024 22:30:36 GMT

Minor changes

• Add support for apps to set their own reqCnf and correct native flows cnf format #6357 ([email protected])
• Bump @azure/msal-common to v14.12.0
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

3.16.0

Tue, 04 Jun 2024 00:08:57 GMT

Minor changes

• Instrument pre-redirect flow #7134 ([email protected])
• Bump @azure/msal-common to v14.11.0
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

3.15.0

Tue, 28 May 2024 21:37:23 GMT

Minor changes

• Add createNestablePublicClientApplication() ([email protected])
• Instrument preflight check errors #7113 ([email protected])
• Support cache in NAA apps #7072 ([email protected])
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

Patches

• Fix miscalculation of expiresIn in hydrateCache() API ([email protected])

3.14.0

Mon, 06 May 2024 23:48:17 GMT

Minor changes

• Instrument scenario id for tracking custom user prompts #7043 ([email protected])
• Discard empty redirect telemetry events with no error codes #7058 ([email protected])
• Export invoke and invokeAsync functions #7065 ([email protected])
• Instrument account type #7049 ([email protected])
• Bump @azure/msal-common to v14.10.0
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

Patches

• Add getAccount API to IPublicClientApplication (#7019) ([email protected])
• Fix uncaught exceptions in acquireTokenSilent #7073 ([email protected])
• Add additional logging for Nested App Auth initialization errors (#7064) ([email protected])

3.13.0

Thu, 11 Apr 2024 21:46:57 GMT

Minor changes

• Capture and instrument cache errors #7021 ([email protected])
• Bump @azure/msal-common to v14.9.0
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

Patches

• Nested App Auth: allow empty parameters for loginPopup (#6941) ([email protected])
• Improve perf and reliability of parallel acquireTokenSilent calls that must fallback to iframes #6962 ([email protected])
• fix handleRedirectPromise memoization #6998 ([email protected])
• Add classname to silent token renewal iframe HTML element #6985 ([email protected])

3.11.1

Wed, 27 Mar 2024 18:41:17 GMT

Patches

• Bump @azure/msal-common to v14.8.1
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

3.11.0

Fri, 22 Mar 2024 20:32:39 GMT

Minor changes

• Instrument non-auth error name and stack #6937 ([email protected])
• Capture telemetry event tree #6948 ([email protected])
• Move preflightBrowserEnvironmentCheck to BrowserUtils ([email protected])
• Bump @azure/msal-common to v14.8.0
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

Patches

• Fix AcquireTokenSilentAsync sub-measurement instrumentation #6947 ([email protected])
• Export IPerformanceClient and StubPerformanceClient ([email protected])
• move build request functions ([email protected])
• Internal refactor of async storage ([email protected])
• Fix compatibility issue with Nested App Auth and msal-react (#6892) ([email protected])
• Minor cache cleanup ([email protected])

3.10.0

Sat, 17 Feb 2024 01:49:05 GMT

Minor changes

• Export createGuid function #6868 ([email protected])
• Use UUIDv7 in PerformanceClient #6866 ([email protected])
• Bump @azure/msal-common to v14.7.1
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

Patches

• Add ID Token secret to AccountInfo in all reponses #6903 ([email protected])
• Bug fix for user switch error and broker app's native account id being stored in embedded app cache #6846 ([email protected])
• Remove invalid prompt for silent request instead of throwing an error #6895 ([email protected])

3.9.0

Wed, 07 Feb 2024 22:00:37 GMT

Minor changes

• Instrument handleRedirectPromise() #6861 ([email protected])
• Make BrowserCrypto generate UUID v7 by default #6841 ([email protected])
• Add active account update event #6854 ([email protected])
• Bump @azure/msal-common to v14.7.0
• Bump eslint-config-msal to v0.0.0
• Bump msal-test-utils to v0.0.1

Patches

• reduce number of calls to resolveEndpoints ([email protected])

3.7.1

Tue, 23 Jan 2024 00:06:05 GMT

Patches

• Support state on acquireTokenSilent ([email protected])
• Fix bug affecting metadata resolution for tenanted authorities ([email protected])
• Bump @azure/msal-common to v14.6.1

3.7.0

Tue, 09 Jan 2024 00:03:25 GMT

Minor changes

• Dynamically load BrowserPerformanceMeasurement to capture browser perf measurements if session storage flag is set #6748 ([email protected])
• Check RT expiration before attempting to redeem it #6703 ([email protected])
• Bump @azure/msal-common to v14.6.0

Patches

• Fix token refreshes with relative redirectUri #6761 ([email protected])
• Change Nested App Auth internal schema (#6737) ([email protected])
• Allow overriding log level and PII setting with session storage key-values #6704 ([email protected])
• Fix external account loading #6744 ([email protected])
• Handle bad_token by removing bad refresh token from cache #6757 ([email protected])
• Convert ThrottlingEntity into a Type ([email protected])
• Refactor AuthorityMetadataEntity into type ([email protected])
• Refactor appMetadataEntity into Type ([email protected])

3.6.0

Fri, 01 Dec 2023 18:46:06 GMT

Minor changes

• Increase default iframe timout to 10s #6700 ([email protected])
• Add support for Multi-tenant accounts and cross-tenant token caching #6466 ([email protected])
• Bump @azure/msal-common to v14.5.0

Patches

• Nested App Auth minor fixes (#6672) ([email protected])
• Performance optimization when creating hidden iframe ([email protected])
• Nested App Auth fix for Android response (#6707) ([email protected])
• Fix logoutPopup request type ([email protected])
• Fix bug causing temporary cache not to be cleared #6676 ([email protected])

3.5.0

Tue, 07 Nov 2023 00:01:50 GMT

Minor changes

• Optimize response parsing & address bugs related to query response type #6646 ([email protected])
• Convert ServerTelemetryEntity to Type instead of Class #6651 ([email protected])
• Make SHR header configurable #6654 ([email protected])
• Bump @azure/msal-common to v14.4.0

Patches

• Generate one correlation id across a flow #6650 ([email protected])
• Fix race condition which may cause popups not to close #6652 ([email protected])

3.4.0

Mon, 30 Oct 2023 21:38:24 GMT

Minor changes

• Don't use temporary cache for silent & popup flows #6586 ([email protected])
• Refactor token cache entities to be defined as Types rather than Classes #6580 ([email protected])
• Bump @azure/msal-common to v14.3.0

Patches

• Fix iframe fallback when RT is not found in cache ([email protected])
• Use invokeAsync in popup/redirect flows ([email protected])
• Add inlineDynamicImports to rollup config to fix CJS build. Make factory methods basic functions #6615 ([email protected])

3.3.0

Wed, 18 Oct 2023 17:24:19 GMT

Minor changes

• Build account objects from cached ID Token #6529 ([email protected])
• Added new PublicClientNext and additional Operating Contexts and associated Controllers; Initially to address NestedAppAuth. #6359 (email not defined)
• Replace custom encoder with TextEncoder in code challenge generator #6560 ([email protected])
• Preconnect to authority to speed up /token calls #6550 ([email protected])
• Bump @azure/msal-common to v14.2.0

Patches

• Instrument create/remove hidden iframe & refactor monitorIframeForHash #6533 ([email protected])
• Additional ATS instrumentation #6562 ([email protected])
• addressing rollup issue based on combined configuration (email not defined)

3.2.0

Thu, 05 Oct 2023 18:06:42 GMT

Minor changes

• Modified proactive refresh in silent-flow to also return the cached token when the token needs to be refreshed #6397. ([email protected])
• Refactor BrowserConfigurationAuthError #6473 ([email protected])
• Add getAccount and enhance account filtering #6499 ([email protected])
• Bump @azure/msal-common to v14.1.0

Patches

• doc: JSDoc for deprecated BrowserAuthErrorMessage ([email protected])
• Instrument Crypto APIs #6512 ([email protected])
• Refactor ClientAuthError for reduced size #6433 ([email protected])
• Fix monitorIframeForHash telemetry event name ([email protected])
• Use the proper algo name for window.crypto.subtle.digest() #6521 ([email protected])
• use invoke for telem measurements #6486 ([email protected])
• Refactor NativeAuthError, JoseHeaderError and AuthError for reduced size #6497 ([email protected])
• Update telemetry measurements to use invoke #6484 ([email protected])
• Add tokenBodyParameters support in RefreshTokenClient #6504 ([email protected])
• Refactor ClientConfigurationError #6471 ([email protected])
• Refactor InteractionRequiredAuthError #6472 ([email protected])
• Bug fix: id token Base64 decoding #6535 ([email protected])
• Add missing queue measurement instrumentation #6480 ([email protected])

3.1.0

Tue, 05 Sep 2023 22:13:47 GMT

Minor changes

• Remove legacy code (IE11 Detection, XHRClient and custom GUID Generator) ([email protected])
• Remove redundant controller internal methods and classes from internals #6413 ([email protected])
• New API to silently clear cache #6374 ([email protected])
• Remove browser internals #6420 ([email protected])
• Bump @azure/msal-common to v14.0.3

Patches

• Clear claims from cache when config is not set #6430 ([email protected])
• Add a linter rule to avoid floating promises #6421 ([email protected])
• Make AuthToken methods instead of class #6423 ([email protected])
• Make eventName of type string for BrowserPerformanceClient and PerformanceClient #6386 ([email protected])
• Refactor BrowserAuthError to reduce size ([email protected])
• Make base64 encoder and decoder methods instead of classes #6416 ([email protected])
• Instrument ssoSilent #6383 ([email protected])
• Fix for source-map related errors #6398 ([email protected])

Changes

• Remove isEmpty helper API ([email protected])

3.0.2

Fri, 18 Aug 2023 18:40:03 GMT

Patches

• Fix input parameter type for addEventCallback ([email protected])
• Extend hydrateCache request type to include ssoSilentRequest, PopupRequest and RedirectRequest #6329 ([email protected])
• Bump @azure/msal-common to v14.0.2

3.0.1

Fri, 11 Aug 2023 19:00:44 GMT

Patches

• Update dist settings for packages #6322 ([email protected])
• Add tokenBodyParameters to silent and interaction request types #6325 ([email protected])
• Bump @azure/msal-common to v14.0.1

Changes

• Pick up broker extra query params #6286 ([email protected])

3.0.0

Mon, 07 Aug 2023 18:15:15 GMT

Major Changes

• Revert allowNativeBroker default to false #6280 ([email protected])
• Throw when initialize has not been called #6233 ([email protected])
• allowNativeBroker configuration defaults to true #5616 ([email protected])
• Fix telemetry typos #5868 ([email protected])

Minor Changes

• Expose CacheRecord as part of internals API #6291 ([email protected])
• Add exports to package.json and update type to module #6194 ([email protected])
• Added OIDCOptions parameter to config ([email protected])
• Expose BrowserPerformanceClient and BrowserPerformanceMeasurement artifacts as public #6273 ([email protected])
• Update "PerformanceClient" for better usability/extendibility #6270 ([email protected])
• Add hydrateCache API #6271 ([email protected])
• Add storeInCache request parameter to control which tokens are persisted to the cache ([email protected])
• Make claims-based caching configurable #6163 ([email protected])
• Update string conversion function ([email protected])
• Make account info mandatory for AuthenticationResult and CacheRecord types #6156 ([email protected])
• Export IdTokenClaims & PromptValue types ([email protected])
• Switch from enums to object literals to reduce the bundle size #6056 ([email protected])
• Fix inProgress state reset when page restored from bfCache #6037 ([email protected])
• Remove legacy MsCrypto and MsrCrypto polyfill to reduce the bundle size #6086 ([email protected])
• Update bundled files to be included in published package #5997 ([email protected])
• Revert to common as a regular dependency #5985 ([email protected])
• Add CIAM support for v3(#5915) ([email protected])
• Add temporaryCacheLocation to Cache Options #5725 ([email protected])
• Randomize native extension response identifiers to facilitate concurrency #5903 ([email protected])

Patches

• Bump @azure/msal-common to v14.0.0
• Treat invalid_method as a fatal error for WAM #6094 ([email protected])
• Added authority check for native and silent flows #6002 ([email protected])
• Fix silent cache lookup bugs for native flows #6067 ([email protected])
• ignore native broker initialize check if application is not top-frame #6129 ([email protected])
• Fix prepack hook #5967 ([email protected])
• Bundle local version of msal-common into msal-browser #5953 ([email protected])
• Fix missing idToken in response after refresh #5871 ([email protected])
• Improve iframe error detection #5891 ([email protected])
• Fix: dSTS Token dummy aud claim value for requests with scope input by using v2.0 endpoint ([email protected])
• Exception is thrown in acquireTokenByClientCredential if tenantId is missing #5805 ([email protected])
• removeAccount does not throw if account does not exist in cache #5911 ([email protected])
• Remove unused enum ([email protected])

2.37.0

Mon, 01 May 2023 20:47:44 GMT

Minor changes

• Add temporaryCacheLocation to Cache Options #5725 ([email protected])
• Bump @azure/msal-common to v13.0.0

Patches

• Fix missing idToken in response after refresh #5870 ([email protected])

2.35.0

Mon, 03 Apr 2023 21:29:32 GMT

Minor changes

• Optimize account lookups in cache #5792 ([email protected])
• Optimize token lookups in cache #5806 ([email protected])
• Bump @azure/msal-common to v12.0.0

Patches

• Fix missing telemetry queue information #5809 ([email protected])
• Dup code removal in NativeInteractionClient (#5768) ([email protected])

2.34.0

Tue, 07 Mar 2023 16:48:51 GMT

Minor changes

• Reduce telemetry RAM footprint and improve usability/readability #5676 ([email protected])
• Capture native bridge telemetry data points #5698 ([email protected])
• Bump @azure/msal-common to v11.0.0

Patches

• Reduce preQueueTimeByCorrelationId RAM footprint #5681 ([email protected])
• exporting native classes as internals and separating out native telemetry #5692 ([email protected])
• Remove deprecated telemetry flushMeasurements() function from unit tests #5718 ([email protected])
• Refactor handleNativeResponse (#5757) ([email protected])
• Add support for hybrid flow with native bridge enabled #5759 ([email protected])

2.33.0

Mon, 06 Feb 2023 18:51:51 GMT

Minor changes

• Add JS Queue Measurements to acquireTokenSilent #5352 ([email protected])
• proxyUrl is now passed to msal-node's httpClient via it's constructor #5599 ([email protected])
• Bump @azure/msal-common to v10.0.0

Patches

• Removed tokenQueryParameters from Public Client flows because they don't use the /token endpoint. #5573 ([email protected])
• Export browser telemetry classes #5641 ([email protected])
• Adding page visibility change event for silent calls like AcquireTokenSilent #5555 ([email protected])
• Revert typo changes #5582 ([email protected])

2.32.2

Mon, 09 Jan 2023 22:44:57 GMT

Patches

• Export CryptoOps and NativeAuthError for internal use #5482 ([email protected])
• added http version changes #5211 ([email protected])
• fix typos #5531 ([email protected])
• fix logger explicitly set to undefined error #5355 ([email protected])
• Log number of accounts in trace mode. #5529 ([email protected])
• Bump @azure/msal-common to v9.0.2

2.32.1

Wed, 07 Dec 2022 16:53:07 GMT

Patches

• Added caching methods to set or get redirect context of application during redirect flow. #5411 ([email protected])
• Bump @azure/msal-common to v9.0.1

2.32.0

Mon, 21 Nov 2022 19:14:45 GMT

Minor changes

• Added logging to Authority class ([email protected])
• Bump @azure/msal-common to v9.0.0

Patches

• Export popup attributes #5364 ([email protected])

2.31.0

Mon, 07 Nov 2022 22:46:55 GMT

Minor changes

• Add static fields to telemetry #5224 ([email protected])
• Bump @azure/msal-common to v8.0.0

Patches

• Add MATS fields to telemetry #5308 ([email protected])
• Fix double prompt in native broker redirect flow #5239 ([email protected])

2.30.0

Mon, 10 Oct 2022 22:27:02 GMT

Minor changes

• Extend msal-browser TokenCache to load refresh tokens #5233 ([email protected])
• Make popup poll interval configurable #5276 ([email protected])
• Bump @azure/msal-common to v7.6.0

2.29.0

Mon, 03 Oct 2022 22:12:26 GMT

Minor changes

• Implemented Cache Lookup Policy for acquireTokenSilent #5014 ([email protected])
• Add support for MSR Crypto #3826 ([email protected])
• Add x-ms-request-id to perf telemetry logging #5244 ([email protected])
• Added 'no_session' to prompt enum #5131 ([email protected])
• Bump @azure/msal-common to v7.5.0

Patches

• Include Refresh token size in perf telemetry data #5250 ([email protected])

2.28.3

Mon, 12 Sep 2022 18:19:32 GMT

Patches

• Fix keystore clearing on Firefox #5112 ([email protected])
• Restore error codes for acquireTokenSilent telemetry #5190 ([email protected])
• Bump @azure/msal-common to v7.4.1

2.28.2

Fri, 02 Sep 2022 18:06:53 GMT

Patches

• Bump @azure/msal-common to v7.4.0

2.28.1

Mon, 01 Aug 2022 22:22:35 GMT

Patches

• Rename native request property scopes to scope #5043 ([email protected])
• adding network performance measurement #4834 ([email protected])
• Send login_hint claim instead of sid if available #4990 ([email protected])
• Bump @azure/msal-common to v7.3.0

2.28.0

Mon, 18 Jul 2022 23:26:21 GMT

Minor changes

• Added new token size field in the perf telemetry data #4973 ([email protected])
• Add local cache support for JS-WAM bridge #4971 ([email protected])
• Bump @azure/msal-common to v7.2.0

Patches

• Fix bug with activeAccount when two accounts have same local account id #5004 ([email protected])

2.27.0

Tue, 05 Jul 2022 22:37:04 GMT

Minor changes

• feat: adding authority metadata resiliency #4536 ([email protected])
• Bump @azure/msal-common to v7.1.0

Patches

• Fix prompt behavior for native broker requests #4949 ([email protected])
• Non-fatal native broker errors should clear interaction in progress flag #4950 ([email protected])
• Mark temporary cache cookies as SameSite lax #4957 ([email protected])
• Handle ACCOUNT_UNAVAILABLE error status from native broker #4951 ([email protected])

2.26.0

Mon, 13 Jun 2022 22:28:09 GMT

Minor changes

• Add errorCode and subErrorCode to client telemetry events (#4863) ([email protected])
• Bump @azure/msal-common to v7.0.0

Patches

• Add strict assertion checks for OBO clients (#4691) ([email protected])
• Update redirect_in_iframe message to include messaging for embedded applications #4895 ([email protected])
• preflightBrowserEnvironmentCheck should not always set interaction in progress #4893 ([email protected])
• Return correct fromCache value when tokens are acquired from native broker #4880 ([email protected])

2.25.0

Mon, 06 Jun 2022 22:13:00 GMT

Minor changes

• Fix empty hash errors in popups #4793 ([email protected])
• Add PoP support for Encrypted Access Tokens #4730 ([email protected])
• Bump @azure/msal-common to v6.4.0

Patches

• Add keyId to SHR header and make x5c_ca claim type string array #4729 ([email protected])
• Fixes assignment of expiresOn inside loadExternalTokens to fix issue where all access tokens appear expired during E2E #4711 ([email protected])
• SHR params renamed as per MSAL JS's naming convention #4794 ([email protected])
• Fallback to web flow when native broker throws 'DISABLED' status #4837 ([email protected])
• Change log message level in initialize from warning to info #4820 ([email protected])

2.24.0

Mon, 02 May 2022 22:23:33 GMT

Minor changes

• Move internals needed for msal-browser-1p to separate export #4742 ([email protected])
• Add support for acquiring tokens from the native broker #4531 ([email protected])
• Bump @azure/msal-common to v6.3.0

Patches

• Fix for WAM window parenting #4755 ([email protected])
• Ensure interaction status is properly set during logout with onRedirectNavigate #4719 ([email protected])

2.23.0

Mon, 04 Apr 2022 21:12:42 GMT

Minor changes

• Add performance telemetry API #4570 ([email protected])
• Add Client Application telemetry parameters to MSAL #4616 ([email protected])
• Bump @azure/msal-common to v6.2.0

Patches

• Fix persistent key store deletion on logout #4617 ([email protected])

2.22.1

Mon, 07 Mar 2022 23:28:43 GMT

Patches

• Clear temporary cache when back button is clicked during redirect flow #4513 ([email protected])
• Don't reassign request object properties #4563 ([email protected])

2.22.0

Tue, 08 Feb 2022 00:41:06 GMT

Minor changes

• Add support for logout_hint #4450 ([email protected])
• Add AzureCloudInstance to JS libraries ([email protected])
• Bump @azure/msal-common to v6.1.0

Patches

• Expose OIDC_DEFAULT_SCOPES constant #4280 ([email protected])
• Improve reliability of interaction_in_progress #4460 ([email protected])
• Clear hash only if it contains known response properties #4415 ([email protected])
• Adding exports and other changes for extensibility #4459 ([email protected])

2.21.0

Tue, 04 Jan 2022 00:20:29 GMT

Minor changes

• Add support for requested claims in silent token acquisition #4296 ([email protected])
• Bump @azure/msal-common to v6.0.0

Patches

• Clear interaction status even if there is no ongoing request #4314 ([email protected])

2.20.0

Tue, 07 Dec 2021 00:17:01 GMT

Minor changes

• Add acquireTokenByCode API for hybrid spa flow #3978 ([email protected])
• Bump @azure/msal-common to v5.2.0

Patches

• Fix circular dependencies in AuthenticationHeaderParser and AsyncMemoryStorage #4235 ([email protected])

2.19.0

Mon, 01 Nov 2021 23:53:21 GMT

Minor changes

• Add support for in-memory storage of token binding keys #4183 ([email protected])
• Add support for ephemeral SSH certificate acquisition #4178 ([email protected])
• Add support for in-memory storage of token binding keys #4183 ([email protected])
• Add support for SHR nonce #3999 ([email protected])
• Bump @azure/msal-common to v5.1.0

Patches

• Add support for different key types in IndexedDB storage #4052 ([email protected])
• Ensure correlation is passed to all interaction clients in acquireTokenSilent #4186 ([email protected])
• Fix typo in noTokenRequestCacheError (#4136) ([email protected])
• Fix redirect processing when allowRedirectInIframe: true #4142 ([email protected])

2.18.0

Mon, 04 Oct 2021 23:12:35 GMT

Minor changes

• Emit event when user logs in or out from a different tab or window #3981 ([email protected])
• Remove requirement of user hint on ssoSilent API #4123 ([email protected])
• Bump @azure/msal-common to v5.0.1

Patches

• Consistently export error types and messages for errors thrown by MSAL #4117 ([email protected])
• Move helper functions up to BaseInteractionClient #4049 ([email protected])
• Export library version #4124 ([email protected])

2.17.0

Tue, 07 Sep 2021 23:22:24 GMT

Minor changes

• Add configuration for popup window size and placement #3946 ([email protected])
• Add API to sideload tokens to msal-browser #3895 ([email protected])
• Add SignedHttpRequest class #3058 ([email protected])
• Refactor acquireToken logic into InteractionClients #3871 ([email protected])

Patches

• Clear cache before constructing logout url #3982 ([email protected])
• Add pop params to request thumbprint #3973 ([email protected])
• Update ADAL to MSAL SSO logic to use preferred_username instead of upn by default #3945 ([email protected])
• Populate msal v2 loginHint from cached msal v1 id token #4027 ([email protected])
• Throw interaction in progress if any msal instance has interaction in progress #4014 ([email protected])
• Only emit handleRedirect start event on first invocation of handleRedirectPromise #4013 ([email protected])
• Add correlationId to AuthenticationResult type #3947 ([email protected])
• Remove token binding key from key store when refreshing pop token #3500 ([email protected])
• Fix clearing active account on logout #3948 ([email protected])
• Add correlationId to errors thrown #3930 ([email protected])

2.16.0

Thu, 22 Jul 2021 22:50:22 GMT

Minor changes

• Msal-Browser supports parallel silent requests #3837 ([email protected])
• Persist active account #3755 ([email protected])

Patches

• Add fix for loginRedirect failure when angular index.html base href is different from the origin (#3875) ([email protected])
• fix: fixing the npm audit issues ([email protected])
• Expose isInPopup helper function #3825 ([email protected])

2.15.0

Mon, 28 Jun 2021 23:39:48 GMT

Minor changes

• Add correlationId to log messages #3601 ([email protected])
• Add CCS parameters to headers or form_data #3636 ([email protected])

Patches

• Update monitor_window_timeout error message with link to error docs #3783 ([email protected])
• Refactor event APIs into EventHandler class #3770 ([email protected])
• Fix logoutPopup parameter type on IPublicClientApplication #3663 ([email protected])

2.14.2

Wed, 12 May 2021 18:35:03 GMT

Patches

• Adjust log messages #3589 ([email protected])
• Fix hash removal from URL and browser history after interactive request #3609 ([email protected])
• Update account equality check #3527 ([email protected])
• Close popup if error is thrown before popup window navigation occurs #3572 ([email protected])
• change msal-browser/msal-common to preserveModules to enable tree-shaking #3300 ([email protected])

2.14.1

Thu, 22 Apr 2021 23:26:08 GMT

Patches

• Add .browserslistrc #3471 ([email protected])
• Look for temp cache items in local storage as fallback #3509 ([email protected])

2.14.0

Wed, 14 Apr 2021 18:39:53 GMT

Minor changes

• Add support for AccessToken_With_AuthScheme credential type #3426 ([email protected])

Patches

• Make SHR parameters optional (#3320) ([email protected])

2.13.1

Wed, 31 Mar 2021 22:25:57 GMT

Patches

• Export PopupEvent #3360 ([email protected])

2.13.0

Wed, 24 Mar 2021 22:55:46 GMT

Minor changes

• Add logoutPopup API #3044 ([email protected])

Patches

• Fix errors thrown on cache lookups when reading non-msal cache values #3245 ([email protected])
• Update blockReloadInIframe error message with link to error doc #3294 ([email protected])
• Block nested popups #3249 ([email protected])

2.12.1

Mon, 15 Mar 2021 23:45:17 GMT

Patches

• Clear temporary cache cookies on page load #3129 ([email protected])
• Throw BrowserAuthError when fetch fails #3146 ([email protected])

2.12.0

Wed, 03 Mar 2021 21:47:05 GMT

Minor changes

• Add option to make MSAL browser cookies secure (#3001) ([email protected])
• Add setNavigationClient API and expose INavigationClient interface (#2985) ([email protected])

Patches

• Separate telemetry for ssoSilent and ATS iframe renewal (#3064) ([email protected])
• Add instrumentation to msal-browser (#3004) ([email protected])
• Memoize multiple calls to handleRedirectPromise (#3072) ([email protected])

2.11.2

Thu, 18 Feb 2021 00:34:32 GMT

Patches

• Ensure scrollbars are enabled for popups in browser ([email protected])

2.11.1

Tue, 09 Feb 2021 01:48:22 GMT

Patches

• Fix version.json import errors (#2993) ([email protected])
• Add missing network types to browser exports (#2995) ([email protected])
• Ignore OIDC scopes during cache lookup or replacement (#2969) ([email protected])
• Allow apps to not use the current page as default postLogoutRedirectUri in MSAL Browser (#2789) ([email protected])
• Fix PCA stub errors (#2963) ([email protected])

2.11.0

Tue, 02 Feb 2021 01:56:47 GMT

Minor changes

• Add initializeWrapperLibrary API (#2845) ([email protected])
• Add getInteractionStatusFromEvent to msal-browser (#2885) ([email protected])

Patches

• Fix temp cache cleanup when using localStorage (#2935) ([email protected])
• Get package version from version.json (#2915) ([email protected])

2.10.0

Thu, 21 Jan 2021 21:48:01 GMT

Minor changes

• Authority metadata caching (#2758) ([email protected])

Patches

• Fix handling of multiple popup windows (#2842) ([email protected])
• redirectStartPage supports relative URIs (#2866) ([email protected])

2.9.0

Tue, 12 Jan 2021 00:51:26 GMT

Minor changes

• Adding an active account API to PublicClientApplication (#2728) ([email protected])
• Add internal in-memory storage to BrowserCacheManager (#2765) ([email protected])
• Enable strict TypeScript option (#2792) ([email protected])

2.8.0

Mon, 07 Dec 2020 22:19:03 GMT

Minor changes

• Enable the instance_aware flow (#1804) ([email protected])

Patches

• Fix clearing of temporary cache items (#2696) ([email protected])
• Add exports to index.ts (#2680) ([email protected])
• Expose idTokenClaims on AccountInfo (#2554) ([email protected])
• Add onRedirectNavigate to redirect operations in browser (#2669) ([email protected])
• Update Internal PCA Configuration (#2602) ([email protected])
• Add allowRedirectInIframe flag to browser (#2593) ([email protected])
• Log messages contain package name and version (#2589) ([email protected])
• Update request types (#2512) ([email protected])

2.7.0

Wed, 11 Nov 2020 23:33:20 GMT

Minor changes

• Support relative paths on redirectUri parameter (#2560) ([email protected])

Patches

• Adds getAccountByLocalId to PCA Interface (#2588) ([email protected])
• Add navigateFrameWait and change loadFrameTimeout to browser to match core behavior (#2545) ([email protected])

2.6.1

Tue, 10 Nov 2020 01:48:44 GMT

Patches

• Export stubbed PCA instance (#2540) ([email protected])

2.6.0

Sat, 07 Nov 2020 01:50:14 GMT

Minor changes

• Fixing a bug and adding localAccountId in AccountInfo interface (#2516) ([email protected])

2.5.2

Mon, 02 Nov 2020 23:33:39 GMT

Patches

• Fix JSON.parse issue and cache value validation (#2527) ([email protected])

2.5.1

Fri, 30 Oct 2020 00:52:19 GMT

Patches

• Restore string to cacheLocation type (#2523) ([email protected])

2.5.0

Thu, 29 Oct 2020 20:36:48 GMT

Minor changes

• Add getLogger and setLogger to msal-browser (#2513) ([email protected])
• Adding memory storage option for cache location (#2481) ([email protected])

Patches

• Add handleRedirect End Event (#2518) ([email protected])
• Ensure history.replaceState is a function ([email protected])
• Allow hash to be passed into handleRedirectPromise, reset non-msal after processing ([email protected])

2.4.1

Mon, 26 Oct 2020 21:00:29 GMT

Patches

• msal-browser and msal-node cache Interfaces to msal-common updated (#2415) ([email protected])

2.4.0

Tue, 20 Oct 2020 23:47:28 GMT

Minor changes

• Add removeEventCallback API (#2462) ([email protected])
• Add event api to msal-browser (#2394) ([email protected])

Patches

• Use history API to clear hash for msal-browser ([email protected])
• Export InteractionType (#2438) ([email protected])
• Add extraQueryParameters to acquireTokenSilent in msal-browser ([email protected])
• Fix unexpected interaction_required error in redirect flow (#2404) ([email protected])
• Adds support for any OIDC-compliant authority (#2389). ([email protected])

2.3.1

Wed, 14 Oct 2020 23:45:07 GMT

Patches

• Remove rogue console.log() in the BrowserCrypto.ts file and add a lint rule to prevent future issues (#2410) ([email protected])
• Check for Headers class when configuring network client ([email protected])
• Update getItem to return ServerTelemetryEntity (#2223) ([email protected])

2.3.0

Fri, 02 Oct 2020 17:42:35 GMT

Minor changes

• Implementation of Access Token Proof-of-Possession Flow (#2151, #2153, #2154, #2209, #2289) ([email protected])

2.2.1

Wed, 30 Sep 2020 17:58:33 GMT

Patches

• Support SSR in msal-browser (#2073) ([email protected])

2.2.0

Thu, 17 Sep 2020 23:16:22 GMT

Minor changes

• Added client-side throttling to enhance server stability (#1907) ([email protected])

Patches

• Fix issue with base64 encoding of spaces (#2248) ([email protected])
• Properly support multiple concurrent RT requests (#2290) ([email protected])
• Default scope addition done in msal-common (#2267) ([email protected])
• acquireTokenSilent calls ssoSilent (#2264) ([email protected])
• Check for interaction in progress when processing redirect hash (#2183) ([email protected])
• Creating ClientApplication.ts subclass (#2199) ([email protected])
• Add SsoSilentRequest for ssoSilent, update tests and samples ([email protected])
• Add Angular 10 browser sample, update documentation ([email protected])

2.1.0

Tue, 25 Aug 2020 00:40:45 GMT

Minor changes

• Client Capabilities Support (#2169) ([email protected])

Patches

• update APP_META_DATA to APP_METADATA ([email protected])
• Add getAccountByHomeId API (#2114) ([email protected])
• Change msal-browser loginPopup and openPopup, add ability to configure popup delay (#2132) ([email protected])
• Update POST header to type Record (#2128) ([email protected])

2.0.2

Thu, 13 Aug 2020 02:20:48 GMT

Patches

• Fix hash parsing issue from #2118 and back button cache clearing (#2129) ([email protected])

2.0.1

Breaking Changes

• None

Features and Fixes

• Make request object optional for login APIs in PublicClientApplication (#2061)
• Fix getAccountByUsername() API signatures to return null (#2059)
• (#2078) Fix issues with handleRedirectPromise() where:
  • state mismatches occur if handleRedirectPromise() is called multiple times.
  • currentUrl and loginRequestUrl being evaluated as not equal if one has a trailing slash and the other does not
  • When loginRequestUrl is not in the cache, msal redirects to the homepage but would not process the hash
• Add sid from AuthorizationUrlRequest to SSO check in ssoSilent() (#2030)
• Add interaction type to platform state and check before processing hash (#2045)
• Implements telemetry error calculation and caching for server telemetry information in browser scenarios (#1918)
• Fix promise handling in PublicClientApplication (#2091)

2.0.0

Breaking Changes

• None

Features and Fixes

• Fix an issue where logout was not clearing all accounts (#1919)
• Typescript sample for browser (#1920)
• Add SilentRequest.ts object (#1964)
• Fix an issue where popup window position value did not have a floor (#1981)
• Fix an issue where getAccountByUsername was case-sensitive for the given username (#1982)
• Fix an issue where openid and profile were being added to silent requests (#1962)
• Fix an issue where the hash was not handled if navigateToLoginRequestUrl=false (#1973)
• Fix an error that occurs when the request object is not provided to login and the redirectStartPage is expected (#1998)

2.0.0-beta.4

Breaking Changes

• Updated all APIs to send openid and profile by default in all requests (#1868)

Features and Fixes

• add interface for PublicClientApplication (#1870)
• Update monitorIframeForHash to be purely time-based (#1873)
• Instantiate Logger instance for PublicClientApplication (#1882)
• Fix an issue with encoding in cookies and state values (#1852)
• Fix issue where cache isn't being cleaned correctly (#1856)
• Fix issue where expiration isn't calculated correctly (#1860)
• Fix an issue where the crypto APIs were not truly random (#1872)
• Remove all non-application specific initialization from PublicClientApplication constructor (#1885, #1886)
• Added support for IE11 (#1883, #1884)
• Added support for redirection to pages with custom hashes or query params (#1862)
• Remove deprecated handleRedirectCallback() API (#1863)
• Remove function typings for redirectUri and postLogoutRedirectUri (#1861).
• Add support for Instance Discovery, combine all authority classes into a single generic class (#1811)

2.0.0-beta.3

Breaking Changes

• @azure/msal-browser now follows a unified cache schema similar to other MSAL libraries (#1624, #1655, #1680, #1711, #1762, #1771)
• Updated browser library to follow common format for request, response, and client configurations (#1682, #1711, #1762, #1770, #1771, #1793)
• Account interface updated to AccountInfo.ts (#1789)

Features and Fixes

• add setKnownAuthorities to constructor call for B2C Authority scenarios (#1646)
• Library state is now sent as a encoded JSON object (#1790)
• Added a request object for logout APIs, made logout async (#1802)

2.0.0-beta.2

• Fixed an issue where the system config values were being overwritten with undefined (#1631)

2.0.0-beta.1

Features

• Added a silent iframe flow in the @azure/msal-browser package (#1451)
  • Includes an ssoSilent() API to acquire tokens silently with a user context (loginHint)

Bugs

• Fixed an issue where TokenResponse is not exported

Enhancements

• handleRedirectCallback flow was modified, will be deprecated in favor of handleRedirectPromise(), added log message (#1490, #1543)

2.0.0-beta.0

Features

• Removed client_secret from config and added docs for new registration experience (#1421)

Enhancements

• Test pipelines in place. (#1393)
• Added docs and samples. (#1421, #1321)

Bugs

• Minor bug fixes from unit testing. (#1236)
• navigateToLoginRequestUrl works correctly (#1320)

2.0.0-alpha.0

Features

• Added Rollup as build tool (#1108)
• Added APIs and major type files (#1109)
• Added tests and code coverage (#1127)
• Added Authority and protocol classes (#1133)
• Added browser storage implementation (#1140)
• Added implementation of crypto for browser (#1141)
• Added fetch client (#1144)
• Creating of login url (#1149)
• Added logger class (#1155)
• Added redirect handling code (#1164)
• Successful token exchange (#1181)
• Response handling code (#1183)
• Token caching (#1185)
• Popup handling (#1190)
• Silent renewal using refresh tokens and logout (#1208)
• SSO fixes for login_hint (#1211)

0.0.1

• Created library with initial files for repo structure, build and package dependencies