Expanding or Disabling the Prompt Value Validation

[msaldaco]

Core Library

MSAL.js (@azure/msal-browser)

Wrapper Library

MSAL Angular (@azure/msal-angular)

Public or Confidential Client?

Public

Description

Hi,

We are using the Duende Identity Server framework and have implemented some custom prompt modes. When we were testing the modes with msal.js we discovered that it only allows the prompt values in this const object here:

microsoft-authentication-library-for-js/lib/msal-common/src/utils/Constants.ts

Line 143 in 92ffb70

export const PromptValue = {

Would it be possible to expand the list of prompt values available in the prompt validation here in msal-common for the validatePrompt method? Such as through the discovery document's prompt_values_supported or when configuring the MSAL client:

microsoft-authentication-library-for-js/lib/msal-common/src/request/RequestValidator.ts

Line 32 in 92ffb70

static validatePrompt(prompt: string): void {

Or, if this isn't possible, would it be possible to expand the MSAL client configuration to allow disabling this validation as needed?

[msaldaco]

As addendum, the OIDC spec seems to allow for expanding prompt values with new one (https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest at the prompt parameter), and it is a space delimited. It might be better to remove the validation altogether; or to add an option for configurating validation as needed by the developers and leaving it null or undefined otherwise.