search

AzureAD / microsoft-authentication-library-for-js

Microsoft Authentication Library (MSAL) for JS
http://aka.ms/aadv2
MIT License
3.67k stars 2.65k forks source link

Shr pop token support not working in node extensions on windows #7336

Open KarishmaGhiya opened 1 month ago

KarishmaGhiya commented 1 month ago

Core Library

MSAL Node (@azure/msal-node)

Core Library Version

2.14.0

Wrapper Library

MSAL Node Extensions (@azure/msal-node-extensions)

Wrapper Library Version

1.2.0

Public or Confidential Client?

Public

Description

I am trying to use the SHR Pop token support in Azure SDK Identity JS library on windows broker using the @azure/msal-node-extensions through the acquireTokenInteractive and acquireTokenSilent methods.

Current observations and testing:

  1. The typings of the request inputs for the methods acquireTokenInteractive and acquireTokenSilent do not support the required fields for pop token support.

  2. When i ignore the typings and typecast to any to do the end-to-end testing of msal with the identity sdk, I get the 401 error, hinting that the feature may not be implemented or enabled in msal.

Error

I receive the challenge nonce from the first request and when i pass it to the second request, I get the following error:

{"error":{"code":"InvalidAuthenticationToken","message":"IDX14102: Unable to decode the header '[PII of type 'Microsoft.IdentityModel.Logging.SecurityArtifact' is hidden. For more details, seehttps://aka.ms/IdentityModel/PII.]'as Base64Url encoded string.","innerError":{"date":"2024-09-23T22:05:56","request-id":"9b32fbce-8c82-4840-87a3-4e3229cc5a7d","client-request-id":"9b32fbce-8c82-4840-87a3-4e3229cc5a7d"}}}

I also verified that the authorization header has been set correctly in our requests.

Error Message

{"error":{"code":"InvalidAuthenticationToken","message":"IDX14102: Unable to decode the header '[PII of type 'Microsoft.IdentityModel.Logging.SecurityArtifact' is hidden. For more details, seehttps://aka.ms/IdentityModel/PII.]'as Base64Url encoded string.","innerError":{"date":"2024-09-23T22:05:56","request-id":"9b32fbce-8c82-4840-87a3-4e3229cc5a7d","client-request-id":"9b32fbce-8c82-4840-87a3-4e3229cc5a7d"}}}

MSAL Logs

[test-proxy] Test proxy executable already exists at C:\Users\kaghiya\AppData\Local\azsdk-dev-tool-nodejs\Cache\test-proxy\1.0.0-dev.20240823.1\Azure.Sdk.Tools.TestProxy.exe, not downloading it. [node-tests] [node-tests] azure:core-client:warning The baseUri option for SDK Clients has been deprecated, please use endpoint instead. [node-tests] [node-tests] InteractiveBrowserCredential [node-tests] within the send request - request url https://graph.microsoft.com/v1.0/me [node-tests] azure:identity:info MsalClient => getToken() => Attempting to acquire token interactively [node-tests] within the send request - request method GET [node-tests] azure:identity:info InteractiveBrowserCredential => getToken() => Creating new PublicClientApplication with CAE disabled. [node-tests] azure:identity:info InteractiveBrowserCredential => getToken() => No cached account found in local state, attempting to load it from MSAL cache. [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:41 GMT] : [] : @azure/msal-node@2.13.1 : Info - getTokenCache called [node-tests] azure:identity:verbose MsalClient => Authentication will resume through the broker [node-tests] azure:identity:verbose MsalClient => Attempting broker authentication without the default broker account [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:41 GMT] : [5ea7a52a-4bba-431e-9afc-ddfbb6e773ae] : @azure/msal-node-extensions@1.1.0 : Info - Calling native interop SignIn API [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:41 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0001] INFO SetCorrelationId:220 Set correlation ID: 5ea7a52a-4bba-431e-9afc-ddfbb6e773ae [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:41 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO ModifyAndValidateAuthParameters:182 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)' [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:41 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO ModifyAndValidateAuthParameters:199 Authority Realm: 3539240a-3160-4406-932b-9afaa7e0fd24 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:41 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING StorageTokenResponse:14 No credentials found in the cache [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:41 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING TryReadUniversalStorage:771 No id token found in the cache [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:41 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING TryReadUniversalStorage:787 No access token found in the cache [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:41 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING TryReadUniversalStorage:857 No account found in cache, will still return a token if found [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:41 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING ReadAccountById:225 Account id is empty - account not found [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 error: [Tue, 24 Sep 2024 20:37:41 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Error - [MSAL:0002] ERROR ErrorInternalImpl:134 Created an error: 8xg43, StatusInternal::InteractionRequired, InternalEvent::None, Error Code 0, Context 'Could not find an account. Both local account ID and legacy MacOS user ID are not present' [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 error: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Error - [MSAL:0002] ERROR ErrorInternalImpl:134 Created an error: 7q6cn, StatusInternal::InteractionRequired, InternalEvent::None, Error Code 3399614476, Context '(pii)' [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:323 Printing Telemetry for Correlation ID: 5ea7a52a-4bba-431e-9afc-ddfbb6e773ae [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: start_time, Value: 2024-09-24T20:37:41.000Z [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: api_name, Value: SignIn [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: was_request_throttled, Value: false [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: authority_type, Value: Unknown [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: msal_version, Value: 1.0.0+local [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: api_status_code, Value: StatusInternal::InteractionRequired [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: client_id, Value: 036fe08b-f460-4344-9108-2f8042ce1020 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: correlation_id, Value: 5ea7a52a-4bba-431e-9afc-ddfbb6e773ae [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: stop_time, Value: 2024-09-24T20:37:43.000Z [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: all_error_tags, Value: 7q6cn|7q6cn [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: msalruntime_version, Value: 0.13.6 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: request_eligible_for_broker, Value: true [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: broker_app_used, Value: true [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: additional_query_parameters_count, Value: 1 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: is_successful, Value: false [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: api_error_tag, Value: 7q6cn [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: server_suberror_code, Value: basic_action [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: wam_telemetry, Value: {"x_ms_clitelem":"1,50076,0,399718.4637,","ui_visible":false,"server_sub_code":"basic_action","server_error_code":50076,"scope":"https://graph.microsoft.com/.default offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/036fe08b-f460-4344-9108-2f8042ce1020","provider_id":"https://login.windows.net","oauth_error_code":"interaction_required","http_status":400,"http_event_count":1,"http_content_type":"application/json; charset=utf-8","http_content_size":688,"device_join":"dj","correlation_id":"{5ea7a52a-4bba-431e-9afc-ddfbb6e773ae}","client_id":"036fe08b-f460-4344-9108-2f8042ce1020","cache_event_count":0,"broker_version":"10.0.22621.4246","authority":"https://login.microsoftonline.com/3539240a-3160-4406-932b-9afaa7e0fd24","api_error_code":-895352820,"account_join_on_start":"primary","account_join_on_end":"primary","silent_code":0,"silent_bi_sub_code":0,"silent_message":"","silent_status":0,"is_cached":0} [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: api_error_code, Value: 3399614476 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: api_error_context, Value: (pii) [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: authorization_type, Value: WindowsIntegratedAuth [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: request_duration, Value: 2350 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:336 Printing Execution Flow: [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:342 {"t":"646u1","tid":2,"ts":0,"l":2},{"t":"8b2yn","tid":2,"ts":0,"l":2},{"t":"8dqkx","tid":2,"ts":0,"l":2},{"t":"8dqik","tid":2,"ts":0,"l":2},{"t":"8b2hr","tid":2,"ts":0,"l":2},{"t":"8dqik","tid":2,"ts":10,"l":2},{"t":"8b2ht","tid":2,"ts":10,"l":2},{"t":"7e60d","tid":2,"ts":10,"l":2,"a":2,"ie":0},{"t":"7e60e","tid":2,"ts":10,"l":2,"a":2,"ie":1},{"t":"8dqin","tid":2,"ts":10,"l":2},{"t":"7e60f","tid":2,"ts":10,"l":2,"a":2,"ie":0},{"t":"7e60g","tid":2,"ts":10,"l":2,"a":2,"ie":1},{"t":"8dqiq","tid":2,"ts":10,"l":2},{"t":"8dqir","tid":2,"ts":10,"l":2},{"t":"7e60h","tid":2,"ts":10,"l":2,"a":2,"ie":0},{"t":"7e60i","tid":2,"ts":10,"l":2,"a":2,"ie":1},{"t":"8dqit","tid":2,"ts":10,"l":2},{"t":"8dqiu","tid":2,"ts":10,"l":2},{"t":"8b2hu","tid":2,"ts":10,"l":2},{"t":"8dqig","tid":2,"ts":10,"l":2},{"t":"5b8fg","tid":2,"ts":10,"l":2},{"t":"694nj","tid":2,"ts":10,"l":2,"a":10,"ie":0},{"t":"6layj","tid":2,"ts":804,"l":2},{"t":"58yep","tid":2,"ts":2342,"l":2},{"t":"694nk","tid":2,"ts":2342,"l":2,"a":10,"ie":1},{"t":"8dqk1","tid":2,"ts":2342,"l":2},{"t":"646u1","tid":2,"ts":2342,"l":2} [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING ValidateParams:234 Attempted to add a field to already finalized telemetry. Ignoring this field. [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING ValidateParams:234 Attempted to add a field to already finalized telemetry. Ignoring this field. [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING ValidateParams:234 Attempted to add a field to already finalized telemetry. Ignoring this field. [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING ValidateParams:234 Attempted to add a field to already finalized telemetry. Ignoring this field. [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING ValidateParams:234 Attempted to add a field to already finalized telemetry. Ignoring this field. [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING ValidateParams:234 Attempted to add a field to already finalized telemetry. Ignoring this field. [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING FinalizeEvent:185 Attempted to finalize a telemetry event more than once, returning already-finalized value. [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0001] INFO SetCorrelationId:220 Set correlation ID: 5ea7a52a-4bba-431e-9afc-ddfbb6e773ae [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0001] INFO ModifyAndValidateAuthParameters:182 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)' [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:43 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0001] INFO ModifyAndValidateAuthParameters:199 Authority Realm: 3539240a-3160-4406-932b-9afaa7e0fd24 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:323 Printing Telemetry for Correlation ID: 5ea7a52a-4bba-431e-9afc-ddfbb6e773ae [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: start_time, Value: 2024-09-24T20:37:41.000Z [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: access_token_expiry_time, Value: 2024-09-24T22:06:56.000Z [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: msal_version, Value: 1.0.0+local [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: authority_type, Value: AAD [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: api_name, Value: SignIn [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: was_request_throttled, Value: false [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: client_id, Value: 036fe08b-f460-4344-9108-2f8042ce1020 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: correlation_id, Value: 5ea7a52a-4bba-431e-9afc-ddfbb6e773ae [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: msalruntime_version, Value: 0.13.6 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: all_error_tags, Value: 7q6cn|7q6cn [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: stop_time, Value: 2024-09-24T20:37:58.000Z [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: request_eligible_for_broker, Value: true [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: broker_app_used, Value: true [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: additional_query_parameters_count, Value: 1 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: is_successful, Value: true [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: server_suberror_code, Value: basic_action [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: wam_telemetry, Value: {"x_ms_clitelem":"1,0,0,,","ui_visible":true,"tenant_id":"3539240a-3160-4406-932b-9afaa7e0fd24","scope":"https://graph.microsoft.com/.default offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/036fe08b-f460-4344-9108-2f8042ce1020","provider_id":"https://login.windows.net","prompt_behavior":"select_account","idp":"https://sts.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/","http_status":200,"http_event_count":4,"http_content_type":"application/jose; charset=utf-8","http_content_size":10232,"device_join":"dj","correlation_id":"{5ea7a52a-4bba-431e-9afc-ddfbb6e773ae}","client_id":"036fe08b-f460-4344-9108-2f8042ce1020","cache_event_count":0,"broker_version":"10.0.22621.4246","authority":"https://login.microsoftonline.com/3539240a-3160-4406-932b-9afaa7e0fd24","api_error_code":0,"account_join_on_start":"primary","account_join_on_end":"not_joined","account_id":"31c136ee-2d6f-4e9c-9799-aa2c0fe3f1c6","silent_code":0,"silent_bi_sub_code":0,"silent_message":"","silent_status":3,"is_cached":0} [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: authorization_type, Value: CompleteBrokerResult [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: request_duration, Value: 14945 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: ui_event_count, Value: 1 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: write_token, Value: AT|ID [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:336 Printing Execution Flow: [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:342 {"t":"646u1","tid":1,"ts":0,"l":2},{"t":"8dqkl","tid":1,"ts":0,"l":2,"a":9,"ie":0},{"t":"8dql1","tid":3,"ts":14929,"l":2},{"t":"8dqkn","tid":3,"ts":14930,"l":2,"a":5,"ie":1},{"t":"8dqko","tid":3,"ts":14930,"l":2,"a":9,"ie":1},{"t":"8dqkr","tid":3,"ts":14930,"l":2},{"t":"8b2yn","tid":2,"ts":14930,"l":2},{"t":"8dqlh","tid":2,"ts":14930,"l":2},{"t":"8dqli","tid":2,"ts":14930,"l":2},{"t":"8dqln","tid":2,"ts":14930,"l":2},{"t":"7e60p","tid":2,"ts":14930,"l":2,"a":3,"ie":0},{"t":"7e60q","tid":2,"ts":14936,"l":2,"a":3,"ie":1},{"t":"7e60v","tid":2,"ts":14936,"l":2,"a":2,"ie":0},{"t":"7e60w","tid":2,"ts":14936,"l":2,"a":2,"ie":1},{"t":"7e60r","tid":2,"ts":14936,"l":2,"a":3,"ie":0},{"t":"6ou2y","tid":2,"ts":14941,"l":2,"a":3,"ie":1},{"t":"8dqi6","tid":2,"ts":14941,"l":2},{"t":"7e60t","tid":2,"ts":14941,"l":2,"a":3,"ie":0},{"t":"7e60u","tid":2,"ts":14943,"l":2,"a":3,"ie":1},{"t":"6xuag","tid":2,"ts":14943,"l":2} [node-tests] azure:identity:info InteractiveBrowserCredential => getToken() => SUCCESS. Scopes: https://graph.microsoft.com/.default. [node-tests] azure:core-rest-pipeline:info No cached TLS Agent exist, creating a new Agent [node-tests] first response [node-tests] { [node-tests] status: 401, [node-tests] headers: HttpHeadersImpl { [node-tests] _headersMap: Map(8) { [node-tests] 'transfer-encoding' => [Object], [node-tests] 'content-type' => [Object], [node-tests] 'strict-transport-security' => [Object], [node-tests] 'request-id' => [Object], [node-tests] 'client-request-id' => [Object], [node-tests] 'x-ms-ags-diagnostic' => [Object], [node-tests] 'www-authenticate' => [Object], [node-tests] 'date' => [Object] [node-tests] } [node-tests] }, [node-tests] request: PipelineRequestImpl { [node-tests] url: 'https://graph.microsoft.com/v1.0/me', [node-tests] body: undefined, [node-tests] headers: HttpHeadersImpl { _headersMap: [Map] }, [node-tests] method: 'GET', [node-tests] timeout: 0, [node-tests] multipartBody: undefined, [node-tests] formData: undefined, [node-tests] disableKeepAlive: false, [node-tests] proxySettings: undefined, [node-tests] streamResponseStatusCodes: undefined, [node-tests] withCredentials: false, [node-tests] abortSignal: undefined, [node-tests] tracingOptions: undefined, [node-tests] onUploadProgress: undefined, [node-tests] onDownloadProgress: undefined, [node-tests] requestId: 'e64814d5-a9ee-4f01-9c55-a92329c28cd4', [node-tests] allowInsecureConnection: false, [node-tests] enableBrowserStreams: false [node-tests] }, [node-tests] bodyAsText: {"error":{"code":"InvalidAuthenticationToken","message":"IDX14102: Unable to decode the header '[PII of type 'Microsoft.IdentityModel.Logging.SecurityArtifact' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]' as Base64Url encoded string.","innerError":{"date":"2024-09-24T20:39:51","request-id":"468b9201-0605-4a2c-85a5-e4d9e83fa39d","client-request-id":"468b9201-0605-4a2c-85a5-e4d9e83fa39d"}}} [node-tests] } [node-tests] azure:identity:info MsalClient => getToken() => Attempting to acquire token interactively [node-tests] azure:identity:info InteractiveBrowserCredential => getToken() => Existing PublicClientApplication found in cache, returning it. [node-tests] azure:identity:info InteractiveBrowserCredential => getToken() => Attempting to acquire token silently [node-tests] within the challenge request url https://graph.microsoft.com/v1.0/me [node-tests] within the challenge request method GET [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:323 Printing Telemetry for Correlation ID: 19b2216d-f0cb-49dc-830e-2d7bdabd8d48 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:331 Key: start_time, Value: 2024-09-24T20:37:58.000Z [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:331 Key: api_name, Value: ReadAccountById [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:331 Key: was_request_throttled, Value: false [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:331 Key: authority_type, Value: Unknown [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:331 Key: msal_version, Value: 1.0.0+local [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:331 Key: correlation_id, Value: 19b2216d-f0cb-49dc-830e-2d7bdabd8d48 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:331 Key: stop_time, Value: 2024-09-24T20:37:58.000Z [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:331 Key: msalruntime_version, Value: 0.13.6 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:331 Key: is_successful, Value: true [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0004] INFO LogTelemetryData:331 Key: request_duration, Value: 0 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0005] INFO SetCorrelationId:220 Set correlation ID: 19b2216d-f0cb-49dc-830e-2d7bdabd8d48 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0005] INFO EnqueueBackgroundRequest:664 The original authority is 'https://login.microsoftonline.com/3539240a-3160-4406-932b-9afaa7e0fd24' [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0005] INFO ModifyAndValidateAuthParameters:182 Additional query parameter added successfully. Key: '(pii)' Value: '(pii)' [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0005] INFO ModifyAndValidateAuthParameters:199 Authority Realm: 3539240a-3160-4406-932b-9afaa7e0fd24 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING TryReadUniversalStorage:787 No access token found in the cache [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 error: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Error - [MSAL:0002] ERROR ErrorInternalImpl:134 Created an error: 9u8f4, StatusInternal::InteractionRequired, InternalEvent::None, Error Code 0, Context 'No refresh tokens available in the cache, but an account was found on disk. RT likely deleted.' [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 warning: [Tue, 24 Sep 2024 20:37:58 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Warning - [MSAL:0002] WARNING GetPlatformPropertiesFromStorage:2016 No account found in cache. [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:323 Printing Telemetry for Correlation ID: 19b2216d-f0cb-49dc-830e-2d7bdabd8d48 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: auth_header_response_pop, Value: success [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: start_time, Value: 2024-09-24T20:37:58.000Z [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: api_name, Value: AcquireTokenSilently [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: was_request_throttled, Value: false [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: authority_type, Value: AAD [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: access_token_expiry_time, Value: 2024-09-24T21:52:22.000Z [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: read_token, Value: ID [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: msal_version, Value: 1.0.0+local [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: client_id, Value: 036fe08b-f460-4344-9108-2f8042ce1020 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: correlation_id, Value: 19b2216d-f0cb-49dc-830e-2d7bdabd8d48 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: stop_time, Value: 2024-09-24T20:38:00.000Z [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: msalruntime_version, Value: 0.13.6 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: original_authority, Value: https://login.microsoftonline.com/3539240a-3160-4406-932b-9afaa7e0fd24 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: request_eligible_for_broker, Value: true [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: broker_app_used, Value: true [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: additional_query_parameters_count, Value: 1 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: is_successful, Value: true [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: data_signing_time, Value: 2 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: asymmetric_pop_key_external, Value: false [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: prefer_vsm_asymmetric_key, Value: false [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: asymmetric_key_vsm_pop, Value: Status:false [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: key_load_time, Value: 4 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: req_cnf_response_pop, Value: success [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: wam_telemetry, Value: {"x_ms_clitelem":"1,0,0,2022.7361,","ui_visible":false,"tenant_id":"3539240a-3160-4406-932b-9afaa7e0fd24","scope":"https://graph.microsoft.com/.default offline_access openid profile","redirect_uri":"ms-appx-web://Microsoft.AAD.BrokerPlugin/036fe08b-f460-4344-9108-2f8042ce1020","provider_id":"https://login.windows.net","idp":"https://sts.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/","http_status":200,"http_event_count":1,"http_content_type":"application/jose; charset=utf-8","http_content_size":10360,"device_join":"dj","correlation_id":"{19b2216d-f0cb-49dc-830e-2d7bdabd8d48}","client_id":"036fe08b-f460-4344-9108-2f8042ce1020","cache_event_count":0,"broker_version":"10.0.22621.4246","authority":"https://login.microsoftonline.com/3539240a-3160-4406-932b-9afaa7e0fd24","api_error_code":0,"account_join_on_start":"primary","account_join_on_end":"not_joined","account_id":"31c136ee-2d6f-4e9c-9799-aa2c0fe3f1c6","silent_code":0,"silent_bi_sub_code":0,"silent_message":"","silent_status":0,"is_cached":0} [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: write_token, Value: AT|ID [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: cached_pop_key_stored_in_hw, Value: false [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: pop_gen_auth_header_success, Value: true [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: authorization_type, Value: WindowsIntegratedAuth [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:331 Key: request_duration, Value: 1608 [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:336 Printing Execution Flow: [node-tests] azure:identity:info InteractiveBrowserCredential => MSAL Node V2 info message: [Tue, 24 Sep 2024 20:38:00 GMT] : [] : @azure/msal-node-extensions@1.1.0 : Info - [MSAL:0002] INFO LogTelemetryData:342 {"t":"8b2yn","tid":2,"ts":0,"l":2},{"t":"8dqkx","tid":2,"ts":0,"l":2},{"t":"8dqik","tid":2,"ts":0,"l":2},{"t":"8b2ht","tid":2,"ts":0,"l":2},{"t":"7e60d","tid":2,"ts":0,"l":2,"a":2,"ie":0},{"t":"7e60e","tid":2,"ts":1,"l":2,"a":2,"ie":1},{"t":"8dqin","tid":2,"ts":1,"l":2},{"t":"7e60f","tid":2,"ts":1,"l":2,"a":2,"ie":0},{"t":"7e60g","tid":2,"ts":2,"l":2,"a":2,"ie":1},{"t":"8dqir","tid":2,"ts":2,"l":2},{"t":"7e60h","tid":2,"ts":2,"l":2,"a":2,"ie":0},{"t":"7e60i","tid":2,"ts":2,"l":2,"a":2,"ie":1},{"t":"8dqit","tid":2,"ts":2,"l":2},{"t":"8b2hu","tid":2,"ts":2,"l":2},{"t":"8dqig","tid":2,"ts":2,"l":2},{"t":"5b8fg","tid":2,"ts":5,"l":2},{"t":"8dqk0","tid":2,"ts":5,"l":2},{"t":"7e607","tid":2,"ts":5,"l":2,"a":2,"ie":0},{"t":"7e608","tid":2,"ts":5,"l":2,"a":2,"ie":1},{"t":"8dqjd","tid":2,"ts":5,"l":2},{"t":"694nj","tid":2,"ts":5,"l":2,"a":10,"ie":0},{"t":"6omfm","tid":2,"ts":18,"l":2},{"t":"4ynq6","tid":2,"ts":27,"l":2},{"t":"6layj","tid":2,"ts":31,"l":2},{"t":"8dql1","tid":2,"ts":1596,"l":2},{"t":"58yep","tid":2,"ts":1596,"l":2},{"t":"694nk","tid":2,"ts":1597,"l":2,"a":10,"ie":1},{"t":"8dqk1","tid":2,"ts":1597,"l":2},{"t":"8dqlh","tid":2,"ts":1597,"l":2},{"t":"8dqli","tid":2,"ts":1597,"l":2},{"t":"8dqln","tid":2,"ts":1597,"l":2},{"t":"7e60p","tid":2,"ts":1597,"l":2,"a":3,"ie":0},{"t":"7e60q","tid":2,"ts":1601,"l":2,"a":3,"ie":1},{"t":"4zbmt","tid":2,"ts":1601,"l":2},{"t":"4zbmu","tid":2,"ts":1601,"l":2},{"t":"7e60v","tid":2,"ts":1601,"l":2,"a":2,"ie":0},{"t":"7e60w","tid":2,"ts":1602,"l":2,"a":2,"ie":1},{"t":"7e60r","tid":2,"ts":1602,"l":2,"a":3,"ie":0},{"t":"6ou2y","tid":2,"ts":1606,"l":2,"a":3,"ie":1},{"t":"6xuag","tid":2,"ts":1609,"l":2} [node-tests] we found access token [node-tests] { [node-tests] token: '', [node-tests] expiresOnTimestamp: 1727214742, [node-tests] refreshAfterTimestamp: undefined, [node-tests] tokenType: 'pop' [node-tests] }

[node-tests] within the send request - should request url https://graph.microsoft.com/v1.0/me [node-tests] within the send request - ahould request method GET [node-tests] azure:identity:info InteractiveBrowserCredential => getToken() => SUCCESS. Scopes: https://graph.microsoft.com/.default. [node-tests] Response => [node-tests] { [node-tests] status: 401, [node-tests] headers: HttpHeadersImpl { [node-tests] _headersMap: Map(8) { [node-tests] 'transfer-encoding' => [Object], [node-tests] 'content-type' => [Object], [node-tests] 'strict-transport-security' => [Object], [node-tests] 'request-id' => [Object], [node-tests] 'client-request-id' => [Object], [node-tests] 'x-ms-ags-diagnostic' => [Object], [node-tests] 'www-authenticate' => [Object], [node-tests] 'date' => [Object] [node-tests] } [node-tests] }, [node-tests] request: PipelineRequestImpl { [node-tests] url: 'https://graph.microsoft.com/v1.0/me', [node-tests] body: undefined, [node-tests] headers: HttpHeadersImpl { _headersMap: [Map] }, [node-tests] method: 'GET', [node-tests] timeout: 0, [node-tests] multipartBody: undefined, [node-tests] formData: undefined, [node-tests] disableKeepAlive: false, [node-tests] proxySettings: undefined, [node-tests] streamResponseStatusCodes: undefined, [node-tests] withCredentials: false, [node-tests] abortSignal: undefined, [node-tests] tracingOptions: undefined, [node-tests] onUploadProgress: undefined, [node-tests] onDownloadProgress: undefined, [node-tests] requestId: 'e64814d5-a9ee-4f01-9c55-a92329c28cd4', [node-tests] allowInsecureConnection: false, [node-tests] enableBrowserStreams: false [node-tests] }, [node-tests] bodyAsText: {"error":{"code":"InvalidAuthenticationToken","message":"IDX14102: Unable to decode the header '[PII of type 'Microsoft.IdentityModel.Logging.SecurityArtifact' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]' as Base64Url encoded string.","innerError":{"date":"2024-09-24T20:39:52","request-id":"0080e2e2-2e0e-4138-ab26-024cd94f7d2e","client-request-id":"0080e2e2-2e0e-4138-ab26-024cd94f7d2e"}}} [node-tests] } [node-tests] {"error":{"code":"InvalidAuthenticationToken","message":"IDX14102: Unable to decode the header '[PII of type 'Microsoft.IdentityModel.Logging.SecurityArtifact' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]' as Base64Url encoded string.","innerError":{"date":"2024-09-24T20:39:52","request-id":"0080e2e2-2e0e-4138-ab26-024cd94f7d2e","client-request-id":"0080e2e2-2e0e-4138-ab26-024cd94f7d2e"}}} [node-tests] 401 [node-tests] {"error":{"code":"InvalidAuthenticationToken","message":"IDX14102: Unable to decode the header '[PII of type 'Microsoft.IdentityModel.Logging.SecurityArtifact' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]' as Base64Url encoded string.","innerError":{"date":"2024-09-24T20:39:52","request-id":"0080e2e2-2e0e-4138-ab26-024cd94f7d2e","client-request-id":"0080e2e2-2e0e-4138-ab26-024cd94f7d2e"}}} [node-tests] √ supports pop token authentication (19060ms) [node-tests] [node-tests] [node-tests] 1 passing (19s)

Network Trace (Preferrably Fiddler)

MSAL Configuration

auth: {
      clientId: process.env.CLIENT_ID,
      authority: process.env.AUTHORITY,
  },

// we also set the native broker through azure identity sdk

Relevant Code Snippets

/* the options are passed in by customers which are then passed to msal's public application's `acquireTokenSilent` and `acquireTokenInteractive` as shown in the following code snippet */
if(options.proofOfPossessionOptions){
      (silentRequest as any).shrNonce = options.proofOfPossessionOptions.nonce;
      (silentRequest as any).authenticationScheme = "pop";
      (silentRequest as any).resourceRequestMethod = options.proofOfPossessionOptions.resourceRequestMethod;
      (silentRequest as any).resourceRequestUri = options.proofOfPossessionOptions.resourceRequestUri;
    }
    state.logger.getToken.info("Attempting to acquire token silently");
    return app.acquireTokenSilent(silentRequest);

Reproduction Steps

Please see the attached PR - https://github.com/Azure/azure-sdk-for-js/pull/30961 You can set up the client id and tenant id, and run the electron app in this PR under the sub-path - sdk\identity\identity-broker\samples\v2\javascript https://github.com/Azure/azure-sdk-for-js/blob/65e00c381e0a28cda23ed5ee82fd0d46682e9160/sdk/identity/identity-broker/samples/v2/javascript/

Expected Behavior

When we receive the challenge nonce from the first request and pass it to the second request, the authentication should succeed and return an access token.

Identity Provider

Entra ID (formerly Azure AD) / MSA

Browsers Affected (Select all that apply)

None (Server)

Regression

No response

Source

Internal (Microsoft)