CHANGELOG.md

Change Log - @azure/msal-browser

This log was last generated on Mon, 21 Nov 2022 19:14:45 GMT and should not be manually modified.

2.32.0

Mon, 21 Nov 2022 19:14:45 GMT

Minor changes

• Added logging to Authority class ([email protected])
• Bump @azure/msal-common to v9.0.0

Patches

• Export popup attributes #5364 ([email protected])

2.31.0

Mon, 07 Nov 2022 22:46:55 GMT

Minor changes

• Add static fields to telemetry #5224 ([email protected])
• Bump @azure/msal-common to v8.0.0

Patches

• Add MATS fields to telemetry #5308 ([email protected])
• Fix double prompt in native broker redirect flow #5239 ([email protected])

2.30.0

Mon, 10 Oct 2022 22:27:02 GMT

Minor changes

• Extend msal-browser TokenCache to load refresh tokens #5233 ([email protected])
• Make popup poll interval configurable #5276 ([email protected])
• Bump @azure/msal-common to v7.6.0

2.29.0

Mon, 03 Oct 2022 22:12:26 GMT

Minor changes

• Implemented Cache Lookup Policy for acquireTokenSilent #5014 ([email protected])
• Add support for MSR Crypto #3826 ([email protected])
• Add x-ms-request-id to perf telemetry logging #5244 ([email protected])
• Added 'no_session' to prompt enum #5131 ([email protected])
• Bump @azure/msal-common to v7.5.0

Patches

• Include Refresh token size in perf telemetry data #5250 ([email protected])

2.28.3

Mon, 12 Sep 2022 18:19:32 GMT

Patches

• Fix keystore clearing on Firefox #5112 ([email protected])
• Restore error codes for acquireTokenSilent telemetry #5190 ([email protected])
• Bump @azure/msal-common to v7.4.1

2.28.2

Fri, 02 Sep 2022 18:06:53 GMT

Patches

• Bump @azure/msal-common to v7.4.0

2.28.1

Mon, 01 Aug 2022 22:22:35 GMT

Patches

• Rename native request property scopes to scope #5043 ([email protected])
• adding network performance measurement #4834 ([email protected])
• Send login_hint claim instead of sid if available #4990 ([email protected])
• Bump @azure/msal-common to v7.3.0

2.28.0

Mon, 18 Jul 2022 23:26:21 GMT

Minor changes

• Added new token size field in the perf telemetry data #4973 ([email protected])
• Add local cache support for JS-WAM bridge #4971 ([email protected])
• Bump @azure/msal-common to v7.2.0

Patches

• Fix bug with activeAccount when two accounts have same local account id #5004 ([email protected])

2.27.0

Tue, 05 Jul 2022 22:37:04 GMT

Minor changes

• feat: adding authority metadata resiliency #4536 ([email protected])
• Bump @azure/msal-common to v7.1.0

Patches

• Fix prompt behavior for native broker requests #4949 ([email protected])
• Non-fatal native broker errors should clear interaction in progress flag #4950 ([email protected])
• Mark temporary cache cookies as SameSite lax #4957 ([email protected])
• Handle ACCOUNT_UNAVAILABLE error status from native broker #4951 ([email protected])

2.26.0

Mon, 13 Jun 2022 22:28:09 GMT

Minor changes

• Add errorCode and subErrorCode to client telemetry events (#4863) ([email protected])
• Bump @azure/msal-common to v7.0.0

Patches

• Add strict assertion checks for OBO clients (#4691) ([email protected])
• Update redirect_in_iframe message to include messaging for embedded applications #4895 ([email protected])
• preflightBrowserEnvironmentCheck should not always set interaction in progress #4893 ([email protected])
• Return correct fromCache value when tokens are acquired from native broker #4880 ([email protected])

2.25.0

Mon, 06 Jun 2022 22:13:00 GMT

Minor changes

• Fix empty hash errors in popups #4793 ([email protected])
• Add PoP support for Encrypted Access Tokens #4730 ([email protected])
• Bump @azure/msal-common to v6.4.0

Patches

• Add keyId to SHR header and make x5c_ca claim type string array #4729 ([email protected])
• Fixes assignment of expiresOn inside loadExternalTokens to fix issue where all access tokens appear expired during E2E #4711 ([email protected])
• SHR params renamed as per MSAL JS's naming convention #4794 ([email protected])
• Fallback to web flow when native broker throws 'DISABLED' status #4837 ([email protected])
• Change log message level in initialize from warning to info #4820 ([email protected])

2.24.0

Mon, 02 May 2022 22:23:33 GMT

Minor changes

• Move internals needed for msal-browser-1p to separate export #4742 ([email protected])
• Add support for acquiring tokens from the native broker #4531 ([email protected])
• Bump @azure/msal-common to v6.3.0

Patches

• Fix for WAM window parenting #4755 ([email protected])
• Ensure interaction status is properly set during logout with onRedirectNavigate #4719 ([email protected])

2.23.0

Mon, 04 Apr 2022 21:12:42 GMT

Minor changes

• Add performance telemetry API #4570 ([email protected])
• Add Client Application telemetry parameters to MSAL #4616 ([email protected])
• Bump @azure/msal-common to v6.2.0

Patches

• Fix persistent key store deletion on logout #4617 ([email protected])

2.22.1

Mon, 07 Mar 2022 23:28:43 GMT

Patches

• Clear temporary cache when back button is clicked during redirect flow #4513 ([email protected])
• Don't reassign request object properties #4563 ([email protected])

2.22.0

Tue, 08 Feb 2022 00:41:06 GMT

Minor changes

• Add support for logout_hint #4450 ([email protected])
• Add AzureCloudInstance to JS libraries ([email protected])
• Bump @azure/msal-common to v6.1.0

Patches

• Expose OIDC_DEFAULT_SCOPES constant #4280 ([email protected])
• Improve reliability of interaction_in_progress #4460 ([email protected])
• Clear hash only if it contains known response properties #4415 ([email protected])
• Adding exports and other changes for extensibility #4459 ([email protected])

2.21.0

Tue, 04 Jan 2022 00:20:29 GMT

Minor changes

• Add support for requested claims in silent token acquisition #4296 ([email protected])
• Bump @azure/msal-common to v6.0.0

Patches

• Clear interaction status even if there is no ongoing request #4314 ([email protected])

2.20.0

Tue, 07 Dec 2021 00:17:01 GMT

Minor changes

• Add acquireTokenByCode API for hybrid spa flow #3978 ([email protected])
• Bump @azure/msal-common to v5.2.0

Patches

• Fix circular dependencies in AuthenticationHeaderParser and AsyncMemoryStorage #4235 ([email protected])

2.19.0

Mon, 01 Nov 2021 23:53:21 GMT

Minor changes

• Add support for in-memory storage of token binding keys #4183 ([email protected])
• Add support for ephemeral SSH certificate acquisition #4178 ([email protected])
• Add support for in-memory storage of token binding keys #4183 ([email protected])
• Add support for SHR nonce #3999 ([email protected])
• Bump @azure/msal-common to v5.1.0

Patches

• Add support for different key types in IndexedDB storage #4052 ([email protected])
• Ensure correlation is passed to all interaction clients in acquireTokenSilent #4186 ([email protected])
• Fix typo in noTokenRequestCacheError (#4136) ([email protected])
• Fix redirect processing when allowRedirectInIframe: true #4142 ([email protected])

2.18.0

Mon, 04 Oct 2021 23:12:35 GMT

Minor changes

• Emit event when user logs in or out from a different tab or window #3981 ([email protected])
• Remove requirement of user hint on ssoSilent API #4123 ([email protected])
• Bump @azure/msal-common to v5.0.1

Patches

• Consistently export error types and messages for errors thrown by MSAL #4117 ([email protected])
• Move helper functions up to BaseInteractionClient #4049 ([email protected])
• Export library version #4124 ([email protected])

2.17.0

Tue, 07 Sep 2021 23:22:24 GMT

Minor changes

• Add configuration for popup window size and placement #3946 ([email protected])
• Add API to sideload tokens to msal-browser #3895 ([email protected])
• Add SignedHttpRequest class #3058 ([email protected])
• Refactor acquireToken logic into InteractionClients #3871 ([email protected])

Patches

• Clear cache before constructing logout url #3982 ([email protected])
• Add pop params to request thumbprint #3973 ([email protected])
• Update ADAL to MSAL SSO logic to use preferred_username instead of upn by default #3945 ([email protected])
• Populate msal v2 loginHint from cached msal v1 id token #4027 ([email protected])
• Throw interaction in progress if any msal instance has interaction in progress #4014 ([email protected])
• Only emit handleRedirect start event on first invocation of handleRedirectPromise #4013 ([email protected])
• Add correlationId to AuthenticationResult type #3947 ([email protected])
• Remove token binding key from key store when refreshing pop token #3500 ([email protected])
• Fix clearing active account on logout #3948 ([email protected])
• Add correlationId to errors thrown #3930 ([email protected])

2.16.0

Thu, 22 Jul 2021 22:50:22 GMT

Minor changes

• Msal-Browser supports parallel silent requests #3837 ([email protected])
• Persist active account #3755 ([email protected])

Patches

• Add fix for loginRedirect failure when angular index.html base href is different from the origin (#3875) ([email protected])
• fix: fixing the npm audit issues ([email protected])
• Expose isInPopup helper function #3825 ([email protected])

2.15.0

Mon, 28 Jun 2021 23:39:48 GMT

Minor changes

• Add correlationId to log messages #3601 ([email protected])
• Add CCS parameters to headers or form_data #3636 ([email protected])

Patches

• Update monitor_window_timeout error message with link to error docs #3783 ([email protected])
• Refactor event APIs into EventHandler class #3770 ([email protected])
• Fix logoutPopup parameter type on IPublicClientApplication #3663 ([email protected])

2.14.2

Wed, 12 May 2021 18:35:03 GMT

Patches

• Adjust log messages #3589 ([email protected])
• Fix hash removal from URL and browser history after interactive request #3609 ([email protected])
• Update account equality check #3527 ([email protected])
• Close popup if error is thrown before popup window navigation occurs #3572 ([email protected])
• change msal-browser/msal-common to preserveModules to enable tree-shaking #3300 ([email protected])

2.14.1

Thu, 22 Apr 2021 23:26:08 GMT

Patches

• Add .browserslistrc #3471 ([email protected])
• Look for temp cache items in local storage as fallback #3509 ([email protected])

2.14.0

Wed, 14 Apr 2021 18:39:53 GMT

Minor changes

• Add support for AccessToken_With_AuthScheme credential type #3426 ([email protected])

Patches

• Make SHR parameters optional (#3320) ([email protected])

2.13.1

Wed, 31 Mar 2021 22:25:57 GMT

Patches

• Export PopupEvent #3360 ([email protected])

2.13.0

Wed, 24 Mar 2021 22:55:46 GMT

Minor changes

• Add logoutPopup API #3044 ([email protected])

Patches

• Fix errors thrown on cache lookups when reading non-msal cache values #3245 ([email protected])
• Update blockReloadInIframe error message with link to error doc #3294 ([email protected])
• Block nested popups #3249 ([email protected])

2.12.1

Mon, 15 Mar 2021 23:45:17 GMT

Patches

• Clear temporary cache cookies on page load #3129 ([email protected])
• Throw BrowserAuthError when fetch fails #3146 ([email protected])

2.12.0

Wed, 03 Mar 2021 21:47:05 GMT

Minor changes

• Add option to make MSAL browser cookies secure (#3001) ([email protected])
• Add setNavigationClient API and expose INavigationClient interface (#2985) ([email protected])

Patches

• Separate telemetry for ssoSilent and ATS iframe renewal (#3064) ([email protected])
• Add instrumentation to msal-browser (#3004) ([email protected])
• Memoize multiple calls to handleRedirectPromise (#3072) ([email protected])

2.11.2

Thu, 18 Feb 2021 00:34:32 GMT

Patches

• Ensure scrollbars are enabled for popups in browser ([email protected])

2.11.1

Tue, 09 Feb 2021 01:48:22 GMT

Patches

• Fix version.json import errors (#2993) ([email protected])
• Add missing network types to browser exports (#2995) ([email protected])
• Ignore OIDC scopes during cache lookup or replacement (#2969) ([email protected])
• Allow apps to not use the current page as default postLogoutRedirectUri in MSAL Browser (#2789) ([email protected])
• Fix PCA stub errors (#2963) ([email protected])

2.11.0

Tue, 02 Feb 2021 01:56:47 GMT

Minor changes

• Add initializeWrapperLibrary API (#2845) ([email protected])
• Add getInteractionStatusFromEvent to msal-browser (#2885) ([email protected])

Patches

• Fix temp cache cleanup when using localStorage (#2935) ([email protected])
• Get package version from version.json (#2915) ([email protected])

2.10.0

Thu, 21 Jan 2021 21:48:01 GMT

Minor changes

• Authority metadata caching (#2758) ([email protected])

Patches

• Fix handling of multiple popup windows (#2842) ([email protected])
• redirectStartPage supports relative URIs (#2866) ([email protected])

2.9.0

Tue, 12 Jan 2021 00:51:26 GMT

Minor changes

• Adding an active account API to PublicClientApplication (#2728) ([email protected])
• Add internal in-memory storage to BrowserCacheManager (#2765) ([email protected])
• Enable strict TypeScript option (#2792) ([email protected])

2.8.0

Mon, 07 Dec 2020 22:19:03 GMT

Minor changes

• Enable the instance_aware flow (#1804) ([email protected])

Patches

• Fix clearing of temporary cache items (#2696) ([email protected])
• Add exports to index.ts (#2680) ([email protected])
• Expose idTokenClaims on AccountInfo (#2554) ([email protected])
• Add onRedirectNavigate to redirect operations in browser (#2669) ([email protected])
• Update Internal PCA Configuration (#2602) ([email protected])
• Add allowRedirectInIframe flag to browser (#2593) ([email protected])
• Log messages contain package name and version (#2589) ([email protected])
• Update request types (#2512) ([email protected])

2.7.0

Wed, 11 Nov 2020 23:33:20 GMT

Minor changes

• Support relative paths on redirectUri parameter (#2560) ([email protected])

Patches

• Adds getAccountByLocalId to PCA Interface (#2588) ([email protected])
• Add navigateFrameWait and change loadFrameTimeout to browser to match core behavior (#2545) ([email protected])

2.6.1

Tue, 10 Nov 2020 01:48:44 GMT

Patches

• Export stubbed PCA instance (#2540) ([email protected])

2.6.0

Sat, 07 Nov 2020 01:50:14 GMT

Minor changes

• Fixing a bug and adding localAccountId in AccountInfo interface (#2516) ([email protected])

2.5.2

Mon, 02 Nov 2020 23:33:39 GMT

Patches

• Fix JSON.parse issue and cache value validation (#2527) ([email protected])

2.5.1

Fri, 30 Oct 2020 00:52:19 GMT

Patches

• Restore string to cacheLocation type (#2523) ([email protected])

2.5.0

Thu, 29 Oct 2020 20:36:48 GMT

Minor changes

• Add getLogger and setLogger to msal-browser (#2513) ([email protected])
• Adding memory storage option for cache location (#2481) ([email protected])

Patches

• Add handleRedirect End Event (#2518) ([email protected])
• Ensure history.replaceState is a function ([email protected])
• Allow hash to be passed into handleRedirectPromise, reset non-msal after processing ([email protected])

2.4.1

Mon, 26 Oct 2020 21:00:29 GMT

Patches

• msal-browser and msal-node cache Interfaces to msal-common updated (#2415) ([email protected])

2.4.0

Tue, 20 Oct 2020 23:47:28 GMT

Minor changes

• Add removeEventCallback API (#2462) ([email protected])
• Add event api to msal-browser (#2394) ([email protected])

Patches

• Use history API to clear hash for msal-browser ([email protected])
• Export InteractionType (#2438) ([email protected])
• Add extraQueryParameters to acquireTokenSilent in msal-browser ([email protected])
• Fix unexpected interaction_required error in redirect flow (#2404) ([email protected])
• Adds support for any OIDC-compliant authority (#2389). ([email protected])

2.3.1

Wed, 14 Oct 2020 23:45:07 GMT

Patches

• Remove rogue console.log() in the BrowserCrypto.ts file and add a lint rule to prevent future issues (#2410) ([email protected])
• Check for Headers class when configuring network client ([email protected])
• Update getItem to return ServerTelemetryEntity (#2223) ([email protected])

2.3.0

Fri, 02 Oct 2020 17:42:35 GMT

Minor changes

• Implementation of Access Token Proof-of-Possession Flow (#2151, #2153, #2154, #2209, #2289) ([email protected])

2.2.1

Wed, 30 Sep 2020 17:58:33 GMT

Patches

• Support SSR in msal-browser (#2073) ([email protected])

2.2.0

Thu, 17 Sep 2020 23:16:22 GMT

Minor changes

• Added client-side throttling to enhance server stability (#1907) ([email protected])

Patches

• Fix issue with base64 encoding of spaces (#2248) ([email protected])
• Properly support multiple concurrent RT requests (#2290) ([email protected])
• Default scope addition done in msal-common (#2267) ([email protected])
• acquireTokenSilent calls ssoSilent (#2264) ([email protected])
• Check for interaction in progress when processing redirect hash (#2183) ([email protected])
• Creating ClientApplication.ts subclass (#2199) ([email protected])
• Add SsoSilentRequest for ssoSilent, update tests and samples ([email protected])
• Add Angular 10 browser sample, update documentation ([email protected])

2.1.0

Tue, 25 Aug 2020 00:40:45 GMT

Minor changes

• Client Capabilities Support (#2169) ([email protected])

Patches

• update APP_META_DATA to APP_METADATA ([email protected])
• Add getAccountByHomeId API (#2114) ([email protected])
• Change msal-browser loginPopup and openPopup, add ability to configure popup delay (#2132) ([email protected])
• Update POST header to type Record (#2128) ([email protected])

2.0.2

Thu, 13 Aug 2020 02:20:48 GMT

Patches

• Fix hash parsing issue from #2118 and back button cache clearing (#2129) ([email protected])

2.0.1

Breaking Changes

• None

Features and Fixes

• Make request object optional for login APIs in PublicClientApplication (#2061)
• Fix getAccountByUsername() API signatures to return null (#2059)
• (#2078) Fix issues with handleRedirectPromise() where:
  • state mismatches occur if handleRedirectPromise() is called multiple times.
  • currentUrl and loginRequestUrl being evaluated as not equal if one has a trailing slash and the other does not
  • When loginRequestUrl is not in the cache, msal redirects to the homepage but would not process the hash
• Add sid from AuthorizationUrlRequest to SSO check in ssoSilent() (#2030)
• Add interaction type to platform state and check before processing hash (#2045)
• Implements telemetry error calculation and caching for server telemetry information in browser scenarios (#1918)
• Fix promise handling in PublicClientApplication (#2091)

2.0.0

Breaking Changes

• None

Features and Fixes

• Fix an issue where logout was not clearing all accounts (#1919)
• Typescript sample for browser (#1920)
• Add SilentRequest.ts object (#1964)
• Fix an issue where popup window position value did not have a floor (#1981)
• Fix an issue where getAccountByUsername was case-sensitive for the given username (#1982)
• Fix an issue where openid and profile were being added to silent requests (#1962)
• Fix an issue where the hash was not handled if navigateToLoginRequestUrl=false (#1973)
• Fix an error that occurs when the request object is not provided to login and the redirectStartPage is expected (#1998)

2.0.0-beta.4

Breaking Changes

• Updated all APIs to send openid and profile by default in all requests (#1868)

Features and Fixes

• add interface for PublicClientApplication (#1870)
• Update monitorIframeForHash to be purely time-based (#1873)
• Instantiate Logger instance for PublicClientApplication (#1882)
• Fix an issue with encoding in cookies and state values (#1852)
• Fix issue where cache isn't being cleaned correctly (#1856)
• Fix issue where expiration isn't calculated correctly (#1860)
• Fix an issue where the crypto APIs were not truly random (#1872)
• Remove all non-application specific initialization from PublicClientApplication constructor (#1885, #1886)
• Added support for IE11 (#1883, #1884)
• Added support for redirection to pages with custom hashes or query params (#1862)
• Remove deprecated handleRedirectCallback() API (#1863)
• Remove function typings for redirectUri and postLogoutRedirectUri (#1861).
• Add support for Instance Discovery, combine all authority classes into a single generic class (#1811)

2.0.0-beta.3

Breaking Changes

• @azure/msal-browser now follows a unified cache schema similar to other MSAL libraries (#1624, #1655, #1680, #1711, #1762, #1771)
• Updated browser library to follow common format for request, response, and client configurations (#1682, #1711, #1762, #1770, #1771, #1793)
• Account interface updated to AccountInfo.ts (#1789)

Features and Fixes

• add setKnownAuthorities to constructor call for B2C Authority scenarios (#1646)
• Library state is now sent as a encoded JSON object (#1790)
• Added a request object for logout APIs, made logout async (#1802)

2.0.0-beta.2

• Fixed an issue where the system config values were being overwritten with undefined (#1631)

2.0.0-beta.1

Features

• Added a silent iframe flow in the @azure/msal-browser package (#1451)
  • Includes an ssoSilent() API to acquire tokens silently with a user context (loginHint)

Bugs

• Fixed an issue where TokenResponse is not exported

Enhancements

• handleRedirectCallback flow was modified, will be deprecated in favor of handleRedirectPromise(), added log message (#1490, #1543)

2.0.0-beta.0

Features

• Removed client_secret from config and added docs for new registration experience (#1421)

Enhancements

• Test pipelines in place. (#1393)
• Added docs and samples. (#1421, #1321)

Bugs

• Minor bug fixes from unit testing. (#1236)
• navigateToLoginRequestUrl works correctly (#1320)

2.0.0-alpha.0

Features

• Added Rollup as build tool (#1108)
• Added APIs and major type files (#1109)
• Added tests and code coverage (#1127)
• Added Authority and protocol classes (#1133)
• Added browser storage implementation (#1140)
• Added implementation of crypto for browser (#1141)
• Added fetch client (#1144)
• Creating of login url (#1149)
• Added logger class (#1155)
• Added redirect handling code (#1164)
• Successful token exchange (#1181)
• Response handling code (#1183)
• Token caching (#1185)
• Popup handling (#1190)
• Silent renewal using refresh tokens and logout (#1208)
• SSO fixes for login_hint (#1211)

0.0.1

• Created library with initial files for repo structure, build and package dependencies