@azure/communication-common/dist/commonjs/entraTokenCredential.js

Common package for Azure Communication services.

"use strict";
// Copyright (c) Microsoft Corporation.
// Licensed under the MIT License.
Object.defineProperty(exports, "__esModule", { value: true });
exports.EntraTokenCredential = void 0;
const core_client_1 = require("@azure-rest/core-client");
const core_rest_pipeline_1 = require("@azure/core-rest-pipeline");
const TeamsExtensionScopePrefix = "https://auth.msft.communication.azure.com/";
const CommunicationClientsScopePrefix = "https://communication.azure.com/clients/";
const TeamsExtensionEndpoint = "/access/teamsExtension/:exchangeAccessToken";
const TeamsExtensionApiVersion = "2025-06-30";
const CommunicationClientsEndpoint = "/access/entra/:exchangeAccessToken";
const CommunicationClientsApiVersion = "2025-03-02-preview";
/**
 * Represents a credential that exchanges an Entra token for an Azure Communication Services (ACS) token, enabling access to ACS resources.
 */
class EntraTokenCredential {
    constructor(options) {
        this.options = options;
        this.result = {
            entraToken: undefined,
            acsToken: { token: "", expiresOnTimestamp: 0 },
        };
        this.client = (0, core_client_1.getClient)(options.resourceEndpoint);
        this.httpClient = (0, core_rest_pipeline_1.createDefaultHttpClient)();
        this.options = options;
        this.options.scopes = this.options.scopes || [
            "https://communication.azure.com/clients/.default",
        ];
        // immediately fetch the token to pre-warm
        this.isPending = this.getToken();
    }
    async getToken(options) {
        var _a;
        if ((_a = options === null || options === void 0 ? void 0 : options.abortSignal) === null || _a === void 0 ? void 0 : _a.aborted) {
            return { token: "", expiresOnTimestamp: 0 };
        }
        // we're awaiting the token fetch, so we don't want to start another one
        // however, we're ignoring the new abortSignal, unfortunately
        if (!this.isPending) {
            this.isPending = this.getTokenInternal(options);
        }
        try {
            await this.isPending;
        }
        finally {
            this.isPending = null;
        }
        return this.result.acsToken;
    }
    async getTokenInternal(options) {
        const getTokenOptions = (options === null || options === void 0 ? void 0 : options.abortSignal) ? { abortSignal: options.abortSignal } : undefined;
        const token = await this.options.tokenCredential.getToken(this.options.scopes
            ? this.options.scopes
            : ["https://communication.azure.com/clients/.default"], getTokenOptions);
        const currentDateTime = new Date();
        const tokenExpiresOn = new Date(this.result.acsToken.expiresOnTimestamp);
        if (token === null) {
            this.result = {
                entraToken: undefined,
                acsToken: { token: "", expiresOnTimestamp: 0 },
            };
        }
        else if (this.result.acsToken.token === "" ||
            token.token !== this.result.entraToken ||
            tokenExpiresOn < currentDateTime) {
            const acsToken = await this.exchangeEntraToken(this.options.resourceEndpoint, token.token, getTokenOptions);
            this.result = {
                entraToken: token.token,
                acsToken,
            };
        }
        return this.result.acsToken;
    }
    dispose() {
        this.result = {
            entraToken: undefined,
            acsToken: { token: "", expiresOnTimestamp: 0 },
        };
    }
    async exchangeEntraToken(resourceEndpoint, entraToken, options) {
        const request = (0, core_rest_pipeline_1.createPipelineRequest)({
            url: this.createRequestUri(resourceEndpoint),
            method: "POST",
            headers: (0, core_rest_pipeline_1.createHttpHeaders)({
                Authorization: `Bearer ${entraToken}`,
                "Content-Type": "application/json",
                Accept: "application/json",
            }),
            abortSignal: options === null || options === void 0 ? void 0 : options.abortSignal,
            body: JSON.stringify({}),
        });
        const response = await this.client.pipeline.sendRequest(this.httpClient, request);
        if (response.status !== 200 || !response.bodyAsText) {
            throw new Error(`Service request failed. Status: ${response.status}, Body: ${response.bodyAsText}`);
        }
        const json = JSON.parse(response.bodyAsText);
        return {
            token: json.accessToken.token,
            expiresOnTimestamp: Date.parse(json.accessToken.expiresOn),
        };
    }
    createRequestUri(resourceEndpoint) {
        const [endpoint, apiVersion] = this.determineEndpointAndApiVersion();
        const requestUri = `${resourceEndpoint}${endpoint}?api-version=${apiVersion}`;
        return requestUri;
    }
    determineEndpointAndApiVersion() {
        if (!this.options.scopes || this.options.scopes.length === 0) {
            throw new Error(`Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`);
        }
        else if (this.options.scopes.every((scope) => scope.startsWith(TeamsExtensionScopePrefix))) {
            return [TeamsExtensionEndpoint, TeamsExtensionApiVersion];
        }
        else if (this.options.scopes.every((scope) => scope.startsWith(CommunicationClientsScopePrefix))) {
            return [CommunicationClientsEndpoint, CommunicationClientsApiVersion];
        }
        else {
            throw new Error(`Scopes validation failed. Ensure all scopes start with either {TeamsExtensionScopePrefix} or {CommunicationClientsScopePrefix}.`);
        }
    }
}
exports.EntraTokenCredential = EntraTokenCredential;
//# sourceMappingURL=entraTokenCredential.js.map