@azure/msal-browser 2.25.0 → 2.26.0

package/dist/index.cjs.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.25.0 2022-06-06 */
+/*! @azure/msal-browser v2.26.0 2022-06-13 */
 'use strict';
 'use strict';
 
@@ -105,7 +105,7 @@ function __spread() {
     return ar;
 }
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*! *****************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -192,7 +192,7 @@ function __spreadArrays() {
     return r;
 }
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -566,7 +566,7 @@ var JsonTypes;
     JsonTypes["Jwk"] = "JWK";
 })(JsonTypes || (JsonTypes = {}));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -610,7 +610,7 @@ var AuthError = /** @class */ (function (_super) {
     return AuthError;
 }(Error));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -685,7 +685,7 @@ var DEFAULT_CRYPTO_IMPLEMENTATION = {
     }
 };
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1157,7 +1157,7 @@ var ClientAuthError = /** @class */ (function (_super) {
     return ClientAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1282,7 +1282,7 @@ var StringUtils = /** @class */ (function () {
     return StringUtils;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1462,12 +1462,12 @@ var Logger = /** @class */ (function () {
     return Logger;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /* eslint-disable header/header */
 var name$1 = "@azure/msal-common";
-var version$1 = "6.4.0";
+var version$1 = "7.0.0";
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1488,7 +1488,7 @@ exports.AzureCloudInstance = void 0;
     AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
 })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1511,9 +1511,9 @@ exports.AzureCloudInstance = void 0;
  *      familyId: Family ID identifier, usually only used for refresh tokens
  *      realm: Full tenant or organizational identifier that the account belongs to
  *      target: Permissions that are included in the token, or for refresh tokens, the resource identifier.
- *      oboAssertion: access token passed in as part of OBO request
  *      tokenType: Matches the authentication scheme for which the token was issued (i.e. Bearer or pop)
  *      requestedClaimsHash: Matches the SHA 256 hash of the claims object included in the token request
+ *      userAssertionHash: Matches the SHA 256 hash of the obo_assertion for the OBO flow
  * }
  */
 var CredentialEntity = /** @class */ (function () {
@@ -1647,7 +1647,7 @@ var CredentialEntity = /** @class */ (function () {
     return CredentialEntity;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1902,7 +1902,7 @@ var ClientConfigurationError = /** @class */ (function (_super) {
     return ClientConfigurationError;
 }(ClientAuthError));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2086,7 +2086,7 @@ var ScopeSet = /** @class */ (function () {
     return ScopeSet;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2124,7 +2124,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2138,7 +2138,7 @@ var AuthorityType;
     AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
 })(AuthorityType || (AuthorityType = {}));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2163,7 +2163,6 @@ var AuthorityType;
  *      clientInfo: Full base64 encoded client info received from ESTS
  *      lastModificationTime: last time this entity was modified in the cache
  *      lastModificationApp:
- *      oboAssertion: access token passed in as part of OBO request
  *      idTokenClaims: Object containing claims parsed from ID token
  *      nativeAccountId: Account identifier on the native device
  * }
@@ -2242,7 +2241,7 @@ var AccountEntity = /** @class */ (function () {
      * @param idToken
      * @param policy
      */
-    AccountEntity.createAccount = function (clientInfo, homeAccountId, idToken, authority, oboAssertion, cloudGraphHostName, msGraphHost, environment, nativeAccountId) {
+    AccountEntity.createAccount = function (clientInfo, homeAccountId, idToken, authority, cloudGraphHostName, msGraphHost, environment, nativeAccountId) {
         var _a, _b, _c, _d, _e, _f;
         var account = new AccountEntity();
         account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
@@ -2256,7 +2255,6 @@ var AccountEntity = /** @class */ (function () {
         account.environment = env;
         // non AAD scenarios can have empty realm
         account.realm = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.tid) || Constants.EMPTY_STRING;
-        account.oboAssertion = oboAssertion;
         if (idToken) {
             account.idTokenClaims = idToken.claims;
             // How do you account for MSA CID here?
@@ -2277,14 +2275,13 @@ var AccountEntity = /** @class */ (function () {
      * @param authority
      * @param idToken
      */
-    AccountEntity.createGenericAccount = function (homeAccountId, idToken, authority, oboAssertion, cloudGraphHostName, msGraphHost, environment) {
+    AccountEntity.createGenericAccount = function (homeAccountId, idToken, authority, cloudGraphHostName, msGraphHost, environment) {
         var _a, _b, _c, _d;
         var account = new AccountEntity();
         account.authorityType = (authority && authority.authorityType === AuthorityType.Adfs) ? CacheAccountType.ADFS_ACCOUNT_TYPE : CacheAccountType.GENERIC_ACCOUNT_TYPE;
         account.homeAccountId = homeAccountId;
         // non AAD scenarios can have empty realm
         account.realm = Constants.EMPTY_STRING;
-        account.oboAssertion = oboAssertion;
         var env = environment || authority && authority.getPreferredCache();
         if (!env) {
             throw ClientAuthError.createInvalidCacheEnvironmentError();
@@ -2376,7 +2373,7 @@ var AccountEntity = /** @class */ (function () {
     return AccountEntity;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2414,7 +2411,7 @@ var AuthToken = /** @class */ (function () {
     return AuthToken;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2577,7 +2574,7 @@ var CacheManager = /** @class */ (function () {
      * @param target
      */
     CacheManager.prototype.getCredentialsFilteredBy = function (filter) {
-        return this.getCredentialsFilteredByInternal(filter.homeAccountId, filter.environment, filter.credentialType, filter.clientId, filter.familyId, filter.realm, filter.target, filter.oboAssertion, filter.tokenType, filter.keyId, filter.requestedClaimsHash);
+        return this.getCredentialsFilteredByInternal(filter.homeAccountId, filter.environment, filter.credentialType, filter.clientId, filter.familyId, filter.realm, filter.target, filter.userAssertionHash, filter.tokenType, filter.keyId, filter.requestedClaimsHash);
     };
     /**
      * Support function to help match credentials
@@ -2587,10 +2584,10 @@ var CacheManager = /** @class */ (function () {
      * @param clientId
      * @param realm
      * @param target
-     * @param oboAssertion
+     * @param userAssertionHash
      * @param tokenType
      */
-    CacheManager.prototype.getCredentialsFilteredByInternal = function (homeAccountId, environment, credentialType, clientId, familyId, realm, target, oboAssertion, tokenType, keyId, requestedClaimsHash) {
+    CacheManager.prototype.getCredentialsFilteredByInternal = function (homeAccountId, environment, credentialType, clientId, familyId, realm, target, userAssertionHash, tokenType, keyId, requestedClaimsHash) {
         var _this = this;
         var allCacheKeys = this.getKeys();
         var matchingCredentials = {
@@ -2609,7 +2606,7 @@ var CacheManager = /** @class */ (function () {
             if (!entity) {
                 return;
             }
-            if (!!oboAssertion && !_this.matchOboAssertion(entity, oboAssertion)) {
+            if (!!userAssertionHash && !_this.matchUserAssertionHash(entity, userAssertionHash)) {
                 return;
             }
             if (!!homeAccountId && !_this.matchHomeAccountId(entity, homeAccountId)) {
@@ -2940,7 +2937,7 @@ var CacheManager = /** @class */ (function () {
             target: scopes.printScopesLowerCase(),
             tokenType: authScheme,
             keyId: request.sshKid,
-            requestedClaimsHash: request.requestedClaimsHash
+            requestedClaimsHash: request.requestedClaimsHash,
         };
         var credentialCache = this.getCredentialsFilteredBy(accessTokenFilter);
         var accessTokens = Object.keys(credentialCache.accessTokens).map(function (key) { return credentialCache.accessTokens[key]; });
@@ -2966,7 +2963,7 @@ var CacheManager = /** @class */ (function () {
             environment: account.environment,
             credentialType: CredentialType.REFRESH_TOKEN,
             clientId: clientId,
-            familyId: id
+            familyId: id,
         };
         var credentialCache = this.getCredentialsFilteredBy(refreshTokenFilter);
         var refreshTokens = Object.keys(credentialCache.refreshTokens).map(function (key) { return credentialCache.refreshTokens[key]; });
@@ -3018,8 +3015,8 @@ var CacheManager = /** @class */ (function () {
      * @param value
      * @param oboAssertion
      */
-    CacheManager.prototype.matchOboAssertion = function (entity, oboAssertion) {
-        return !!(entity.oboAssertion && oboAssertion === entity.oboAssertion);
+    CacheManager.prototype.matchUserAssertionHash = function (entity, userAssertionHash) {
+        return !!(entity.userAssertionHash && userAssertionHash === entity.userAssertionHash);
     };
     /**
      * helper to match environment
@@ -3256,7 +3253,7 @@ var DefaultStorageClass = /** @class */ (function (_super) {
     return DefaultStorageClass;
 }(CacheManager));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3350,7 +3347,7 @@ function buildAuthOptions(authOptions) {
     return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS }, authOptions);
 }
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3370,7 +3367,7 @@ var ServerError = /** @class */ (function (_super) {
     return ServerError;
 }(AuthError));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3466,7 +3463,7 @@ var ThrottlingUtils = /** @class */ (function () {
     return ThrottlingUtils;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3515,7 +3512,7 @@ var NetworkManager = /** @class */ (function () {
     return NetworkManager;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3526,7 +3523,7 @@ var CcsCredentialType;
     CcsCredentialType["UPN"] = "UPN";
 })(CcsCredentialType || (CcsCredentialType = {}));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3615,7 +3612,7 @@ var BaseClient = /** @class */ (function () {
     return BaseClient;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3701,7 +3698,7 @@ var RequestValidator = /** @class */ (function () {
     return RequestValidator;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3935,14 +3932,18 @@ var RequestParameterBuilder = /** @class */ (function () {
      * @param clientAssertion
      */
     RequestParameterBuilder.prototype.addClientAssertion = function (clientAssertion) {
-        this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION, encodeURIComponent(clientAssertion));
+        if (!StringUtils.isEmpty(clientAssertion)) {
+            this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION, encodeURIComponent(clientAssertion));
+        }
     };
     /**
      * add clientAssertionType for confidential client flows
      * @param clientAssertionType
      */
     RequestParameterBuilder.prototype.addClientAssertionType = function (clientAssertionType) {
-        this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION_TYPE, encodeURIComponent(clientAssertionType));
+        if (!StringUtils.isEmpty(clientAssertionType)) {
+            this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION_TYPE, encodeURIComponent(clientAssertionType));
+        }
     };
     /**
      * add OBO assertion for confidential client flows
@@ -4075,7 +4076,7 @@ var RequestParameterBuilder = /** @class */ (function () {
     return RequestParameterBuilder;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4110,7 +4111,7 @@ var IdTokenEntity = /** @class */ (function (_super) {
      * @param clientId
      * @param authority
      */
-    IdTokenEntity.createIdTokenEntity = function (homeAccountId, environment, idToken, clientId, tenantId, oboAssertion) {
+    IdTokenEntity.createIdTokenEntity = function (homeAccountId, environment, idToken, clientId, tenantId) {
         var idTokenEntity = new IdTokenEntity();
         idTokenEntity.credentialType = CredentialType.ID_TOKEN;
         idTokenEntity.homeAccountId = homeAccountId;
@@ -4118,7 +4119,6 @@ var IdTokenEntity = /** @class */ (function (_super) {
         idTokenEntity.clientId = clientId;
         idTokenEntity.secret = idToken;
         idTokenEntity.realm = tenantId;
-        idTokenEntity.oboAssertion = oboAssertion;
         return idTokenEntity;
     };
     /**
@@ -4140,7 +4140,7 @@ var IdTokenEntity = /** @class */ (function (_super) {
     return IdTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4190,7 +4190,7 @@ var TimeUtils = /** @class */ (function () {
     return TimeUtils;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4236,7 +4236,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
      * @param expiresOn
      * @param extExpiresOn
      */
-    AccessTokenEntity.createAccessTokenEntity = function (homeAccountId, environment, accessToken, clientId, tenantId, scopes, expiresOn, extExpiresOn, cryptoUtils, refreshOn, tokenType, oboAssertion, keyId, requestedClaims, requestedClaimsHash) {
+    AccessTokenEntity.createAccessTokenEntity = function (homeAccountId, environment, accessToken, clientId, tenantId, scopes, expiresOn, extExpiresOn, cryptoUtils, refreshOn, tokenType, userAssertionHash, keyId, requestedClaims, requestedClaimsHash) {
         var _a, _b;
         var atEntity = new AccessTokenEntity();
         atEntity.homeAccountId = homeAccountId;
@@ -4257,7 +4257,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
         atEntity.clientId = clientId;
         atEntity.realm = tenantId;
         atEntity.target = scopes;
-        atEntity.oboAssertion = oboAssertion;
+        atEntity.userAssertionHash = userAssertionHash;
         atEntity.tokenType = StringUtils.isEmpty(tokenType) ? exports.AuthenticationScheme.BEARER : tokenType;
         if (requestedClaims) {
             atEntity.requestedClaims = requestedClaims;
@@ -4304,7 +4304,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
     return AccessTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4341,14 +4341,14 @@ var RefreshTokenEntity = /** @class */ (function (_super) {
      * @param clientId
      * @param authority
      */
-    RefreshTokenEntity.createRefreshTokenEntity = function (homeAccountId, environment, refreshToken, clientId, familyId, oboAssertion) {
+    RefreshTokenEntity.createRefreshTokenEntity = function (homeAccountId, environment, refreshToken, clientId, familyId, userAssertionHash) {
         var rtEntity = new RefreshTokenEntity();
         rtEntity.clientId = clientId;
         rtEntity.credentialType = CredentialType.REFRESH_TOKEN;
         rtEntity.environment = environment;
         rtEntity.homeAccountId = homeAccountId;
         rtEntity.secret = refreshToken;
-        rtEntity.oboAssertion = oboAssertion;
+        rtEntity.userAssertionHash = userAssertionHash;
         if (familyId)
             rtEntity.familyId = familyId;
         return rtEntity;
@@ -4371,7 +4371,7 @@ var RefreshTokenEntity = /** @class */ (function (_super) {
     return RefreshTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4435,7 +4435,7 @@ var InteractionRequiredAuthError = /** @class */ (function (_super) {
     return InteractionRequiredAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4451,7 +4451,7 @@ var CacheRecord = /** @class */ (function () {
     return CacheRecord;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4522,7 +4522,7 @@ var ProtocolUtils = /** @class */ (function () {
     return ProtocolUtils;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4723,7 +4723,7 @@ var UrlString = /** @class */ (function () {
     return UrlString;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4824,7 +4824,7 @@ var PopTokenGenerator = /** @class */ (function () {
     return PopTokenGenerator;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4894,7 +4894,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return AppMetadataEntity;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4930,7 +4930,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return TokenCacheContext;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4991,7 +4991,7 @@ var ResponseHandler = /** @class */ (function () {
      * @param serverTokenResponse
      * @param authority
      */
-    ResponseHandler.prototype.handleServerTokenResponse = function (serverTokenResponse, authority, reqTimestamp, request, authCodePayload, oboAssertion, handlingRefreshTokenResponse) {
+    ResponseHandler.prototype.handleServerTokenResponse = function (serverTokenResponse, authority, reqTimestamp, request, authCodePayload, userAssertionHash, handlingRefreshTokenResponse) {
         return __awaiter(this, void 0, void 0, function () {
             var idTokenObj, requestStateObj, cacheRecord, cacheContext, key, account;
             return __generator(this, function (_a) {
@@ -5013,7 +5013,7 @@ var ResponseHandler = /** @class */ (function () {
                         }
                         // Add keyId from request to serverTokenResponse if defined
                         serverTokenResponse.key_id = serverTokenResponse.key_id || request.sshKid || undefined;
-                        cacheRecord = this.generateCacheRecord(serverTokenResponse, authority, reqTimestamp, request, idTokenObj, oboAssertion, authCodePayload);
+                        cacheRecord = this.generateCacheRecord(serverTokenResponse, authority, reqTimestamp, request, idTokenObj, userAssertionHash, authCodePayload);
                         _a.label = 1;
                     case 1:
                         _a.trys.push([1, , 5, 8]);
@@ -5061,7 +5061,7 @@ var ResponseHandler = /** @class */ (function () {
      * @param idTokenObj
      * @param authority
      */
-    ResponseHandler.prototype.generateCacheRecord = function (serverTokenResponse, authority, reqTimestamp, request, idTokenObj, oboAssertion, authCodePayload) {
+    ResponseHandler.prototype.generateCacheRecord = function (serverTokenResponse, authority, reqTimestamp, request, idTokenObj, userAssertionHash, authCodePayload) {
         var env = authority.getPreferredCache();
         if (StringUtils.isEmpty(env)) {
             throw ClientAuthError.createInvalidCacheEnvironmentError();
@@ -5070,8 +5070,8 @@ var ResponseHandler = /** @class */ (function () {
         var cachedIdToken;
         var cachedAccount;
         if (!StringUtils.isEmpty(serverTokenResponse.id_token) && !!idTokenObj) {
-            cachedIdToken = IdTokenEntity.createIdTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.id_token || Constants.EMPTY_STRING, this.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING, oboAssertion);
-            cachedAccount = this.generateAccountEntity(serverTokenResponse, idTokenObj, authority, oboAssertion, authCodePayload);
+            cachedIdToken = IdTokenEntity.createIdTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.id_token || Constants.EMPTY_STRING, this.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);
+            cachedAccount = this.generateAccountEntity(serverTokenResponse, idTokenObj, authority, authCodePayload);
         }
         // AccessToken
         var cachedAccessToken = null;
@@ -5089,12 +5089,12 @@ var ResponseHandler = /** @class */ (function () {
             var extendedTokenExpirationSeconds = tokenExpirationSeconds + extExpiresIn;
             var refreshOnSeconds = refreshIn && refreshIn > 0 ? reqTimestamp + refreshIn : undefined;
             // non AAD scenarios can have empty realm
-            cachedAccessToken = AccessTokenEntity.createAccessTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.access_token || Constants.EMPTY_STRING, this.clientId, idTokenObj ? idTokenObj.claims.tid || Constants.EMPTY_STRING : authority.tenant, responseScopes.printScopes(), tokenExpirationSeconds, extendedTokenExpirationSeconds, this.cryptoObj, refreshOnSeconds, serverTokenResponse.token_type, oboAssertion, serverTokenResponse.key_id, request.claims, request.requestedClaimsHash);
+            cachedAccessToken = AccessTokenEntity.createAccessTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.access_token || Constants.EMPTY_STRING, this.clientId, idTokenObj ? idTokenObj.claims.tid || Constants.EMPTY_STRING : authority.tenant, responseScopes.printScopes(), tokenExpirationSeconds, extendedTokenExpirationSeconds, this.cryptoObj, refreshOnSeconds, serverTokenResponse.token_type, userAssertionHash, serverTokenResponse.key_id, request.claims, request.requestedClaimsHash);
         }
         // refreshToken
         var cachedRefreshToken = null;
         if (!StringUtils.isEmpty(serverTokenResponse.refresh_token)) {
-            cachedRefreshToken = RefreshTokenEntity.createRefreshTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.refresh_token || Constants.EMPTY_STRING, this.clientId, serverTokenResponse.foci, oboAssertion);
+            cachedRefreshToken = RefreshTokenEntity.createRefreshTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.refresh_token || Constants.EMPTY_STRING, this.clientId, serverTokenResponse.foci, userAssertionHash);
         }
         // appMetadata
         var cachedAppMetadata = null;
@@ -5109,22 +5109,22 @@ var ResponseHandler = /** @class */ (function () {
      * @param idToken
      * @param authority
      */
-    ResponseHandler.prototype.generateAccountEntity = function (serverTokenResponse, idToken, authority, oboAssertion, authCodePayload) {
+    ResponseHandler.prototype.generateAccountEntity = function (serverTokenResponse, idToken, authority, authCodePayload) {
         var authorityType = authority.authorityType;
         var cloudGraphHostName = authCodePayload ? authCodePayload.cloud_graph_host_name : Constants.EMPTY_STRING;
         var msGraphhost = authCodePayload ? authCodePayload.msgraph_host : Constants.EMPTY_STRING;
         // ADFS does not require client_info in the response
         if (authorityType === AuthorityType.Adfs) {
             this.logger.verbose("Authority type is ADFS, creating ADFS account");
-            return AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, oboAssertion, cloudGraphHostName, msGraphhost);
+            return AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost);
         }
         // This fallback applies to B2C as well as they fall under an AAD account type.
         if (StringUtils.isEmpty(serverTokenResponse.client_info) && authority.protocolMode === "AAD") {
             throw ClientAuthError.createClientInfoEmptyError();
         }
         return serverTokenResponse.client_info ?
-            AccountEntity.createAccount(serverTokenResponse.client_info, this.homeAccountIdentifier, idToken, authority, oboAssertion, cloudGraphHostName, msGraphhost) :
-            AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, oboAssertion, cloudGraphHostName, msGraphhost);
+            AccountEntity.createAccount(serverTokenResponse.client_info, this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost) :
+            AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost);
     };
     /**
      * Creates an @AuthenticationResult from @CacheRecord , @IdToken , and a boolean that states whether or not the result is from cache.
@@ -5200,7 +5200,7 @@ var ResponseHandler = /** @class */ (function () {
     return ResponseHandler;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5404,8 +5404,8 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
                         if (this.config.clientCredentials.clientSecret) {
                             parameterBuilder.addClientSecret(this.config.clientCredentials.clientSecret);
                         }
-                        clientAssertion = request.clientAssertion || this.config.clientCredentials.clientAssertion;
-                        if (clientAssertion) {
+                        if (this.config.clientCredentials.clientAssertion) {
+                            clientAssertion = this.config.clientCredentials.clientAssertion;
                             parameterBuilder.addClientAssertion(clientAssertion.assertion);
                             parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
                         }
@@ -5635,7 +5635,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
     return AuthorizationCodeClient;
 }(BaseClient));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5797,8 +5797,8 @@ var RefreshTokenClient = /** @class */ (function (_super) {
                         if (this.config.clientCredentials.clientSecret) {
                             parameterBuilder.addClientSecret(this.config.clientCredentials.clientSecret);
                         }
-                        clientAssertion = request.clientAssertion || this.config.clientCredentials.clientAssertion;
-                        if (clientAssertion) {
+                        if (this.config.clientCredentials.clientAssertion) {
+                            clientAssertion = this.config.clientCredentials.clientAssertion;
                             parameterBuilder.addClientAssertion(clientAssertion.assertion);
                             parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
                         }
@@ -5848,7 +5848,7 @@ var RefreshTokenClient = /** @class */ (function (_super) {
     return RefreshTokenClient;
 }(BaseClient));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5964,7 +5964,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
     return SilentFlowClient;
 }(BaseClient));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5975,7 +5975,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("issuer"));
 }
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5989,7 +5989,7 @@ exports.ProtocolMode = void 0;
     ProtocolMode["OIDC"] = "OIDC";
 })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6064,7 +6064,7 @@ var AuthorityMetadataEntity = /** @class */ (function () {
     return AuthorityMetadataEntity;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6074,7 +6074,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6196,7 +6196,7 @@ var RegionDiscovery = /** @class */ (function () {
     return RegionDiscovery;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6786,7 +6786,7 @@ var Authority = /** @class */ (function () {
     return Authority;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6847,7 +6847,7 @@ var AuthorityFactory = /** @class */ (function () {
     return AuthorityFactory;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6878,7 +6878,7 @@ var ServerTelemetryEntity = /** @class */ (function () {
     return ServerTelemetryEntity;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6906,7 +6906,7 @@ var ThrottlingEntity = /** @class */ (function () {
     return ThrottlingEntity;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6923,7 +6923,7 @@ var StubbedNetworkModule = {
     }
 };
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6968,7 +6968,7 @@ var JoseHeaderError = /** @class */ (function (_super) {
     return JoseHeaderError;
 }(AuthError));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7008,7 +7008,7 @@ var JoseHeader = /** @class */ (function () {
     return JoseHeader;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7067,7 +7067,7 @@ var AuthenticationHeaderParser = /** @class */ (function () {
     return AuthenticationHeaderParser;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7229,7 +7229,7 @@ var ServerTelemetryManager = /** @class */ (function () {
     return ServerTelemetryManager;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7326,7 +7326,7 @@ var PerformanceEventStatus;
     PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
 })(PerformanceEventStatus || (PerformanceEventStatus = {}));
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7596,7 +7596,7 @@ var PerformanceClient = /** @class */ (function () {
     return PerformanceClient;
 }());
 
-/*! @azure/msal-common v6.4.0 2022-06-06 */
+/*! @azure/msal-common v7.0.0 2022-06-13 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7698,7 +7698,7 @@ var BrowserAuthErrorMessage = {
     },
     redirectInIframeError: {
         code: "redirect_in_iframe",
-        desc: "Code flow is not supported inside an iframe. Please ensure you are using MSAL.js in a top frame of the window if using the redirect APIs, or use the popup APIs."
+        desc: "Redirects are not supported for iframed or brokered applications. Please ensure you are using MSAL.js in a top frame of the window if using the redirect APIs, or use the popup APIs."
     },
     blockTokenRequestsInHiddenIframeError: {
         code: "block_iframe_reload",
@@ -7923,7 +7923,7 @@ var BrowserAuthError = /** @class */ (function (_super) {
         return new BrowserAuthError(BrowserAuthErrorMessage.monitorIframeTimeoutError.code, BrowserAuthErrorMessage.monitorIframeTimeoutError.desc);
     };
     /**
-     * Creates an error thrown when navigateWindow is called inside an iframe.
+     * Creates an error thrown when navigateWindow is called inside an iframe or brokered applications.
      * @param windowParentCheck
      */
     BrowserAuthError.createRedirectInIframeError = function (windowParentCheck) {
@@ -8142,7 +8142,8 @@ var BrowserConstants = {
 };
 var NativeConstants = {
     CHANNEL_ID: "53ee284d-920a-4b59-9d30-a60315b26836",
-    PREFERRED_EXTENSION_ID: "ppnbnpeolgkicgegkbkbjmhlideopiji"
+    PREFERRED_EXTENSION_ID: "ppnbnpeolgkicgegkbkbjmhlideopiji",
+    MATS_TELEMETRY: "MATS"
 };
 var NativeExtensionMethod;
 (function (NativeExtensionMethod) {
@@ -9392,7 +9393,7 @@ var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
 
 /* eslint-disable header/header */
 var name = "@azure/msal-browser";
-var version = "2.25.0";
+var version = "2.26.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10186,6 +10187,8 @@ var StandardInteractionClient = /** @class */ (function (_super) {
                             })
                                 .catch(function (error) {
                                 getAuthorityMeasurement.endMeasurement({
+                                    errorCode: error.errorCode,
+                                    subErrorCode: error.subError,
                                     success: false
                                 });
                                 throw error;
@@ -10672,6 +10675,8 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                                 .catch(function (error) {
                                 nativeATMeasurement.endMeasurement({
                                     success: false,
+                                    errorCode: error.errorCode,
+                                    subErrorCode: error.subError,
                                     isNativeBroker: true
                                 });
                                 throw error;
@@ -10790,7 +10795,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
      */
     NativeInteractionClient.prototype.handleNativeResponse = function (response, request, reqTimestamp) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var idTokenObj, authority, authorityPreferredCache, homeAccountIdentifier, accountEntity, responseScopes, accountProperties, uid, tid, responseAccessToken, responseTokenType, _a, popTokenGenerator, shrParameters, result;
+            var idTokenObj, authority, authorityPreferredCache, homeAccountIdentifier, accountEntity, responseScopes, accountProperties, uid, tid, responseAccessToken, responseTokenType, _a, popTokenGenerator, shrParameters, mats, result;
             var _this = this;
             return __generator$1(this, function (_b) {
                 switch (_b.label) {
@@ -10806,7 +10811,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                         authority = _b.sent();
                         authorityPreferredCache = authority.getPreferredCache();
                         homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenObj);
-                        accountEntity = AccountEntity.createAccount(response.client_info, homeAccountIdentifier, idTokenObj, undefined, undefined, undefined, undefined, authorityPreferredCache, response.account.id);
+                        accountEntity = AccountEntity.createAccount(response.client_info, homeAccountIdentifier, idTokenObj, undefined, undefined, undefined, authorityPreferredCache, response.account.id);
                         this.browserStorage.setAccount(accountEntity);
                         responseScopes = response.scopes ? ScopeSet.fromString(response.scopes) : ScopeSet.fromString(request.scopes);
                         accountProperties = response.account.properties || {};
@@ -10851,6 +10856,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                         }
                         _b.label = 5;
                     case 5:
+                        mats = this.getMATSFromResponse(response);
                         result = {
                             authority: authority.canonicalAuthority,
                             uniqueId: uid,
@@ -10860,7 +10866,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                             idToken: response.id_token,
                             idTokenClaims: idTokenObj.claims,
                             accessToken: responseAccessToken,
-                            fromCache: false,
+                            fromCache: mats ? this.isResponseFromCache(mats) : false,
                             expiresOn: new Date(Number(reqTimestamp + response.expires_in) * 1000),
                             tokenType: responseTokenType,
                             correlationId: this.correlationId,
@@ -10893,6 +10899,34 @@ var NativeInteractionClient = /** @class */ (function (_super) {
             throw NativeAuthError.createUnexpectedError("Response missing expected properties.");
         }
     };
+    /**
+     * Gets MATS telemetry from native response
+     * @param response
+     * @returns
+     */
+    NativeInteractionClient.prototype.getMATSFromResponse = function (response) {
+        if (response.properties.MATS) {
+            try {
+                return JSON.parse(response.properties.MATS);
+            }
+            catch (e) {
+                this.logger.error("NativeInteractionClient - Error parsing MATS telemetry, returning null instead");
+            }
+        }
+        return null;
+    };
+    /**
+     * Returns whether or not response came from native cache
+     * @param response
+     * @returns
+     */
+    NativeInteractionClient.prototype.isResponseFromCache = function (mats) {
+        if (typeof mats.is_cached === "undefined") {
+            this.logger.verbose("NativeInteractionClient - MATS telemetry does not contain field indicating if response was served from cache. Returning false.");
+            return false;
+        }
+        return !!mats.is_cached;
+    };
     /**
      * Translates developer provided request object into NativeRequest object
      * @param request
@@ -10921,7 +10955,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                                     throw BrowserAuthError.createNativePromptParameterNotSupportedError();
                             }
                         }
-                        validatedRequest = __assign$1(__assign$1({}, request), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scopes: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), extendedExpiryToken: false // Make this configurable?
+                        validatedRequest = __assign$1(__assign$1({}, request), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scopes: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), { telemetry: NativeConstants.MATS_TELEMETRY }), extendedExpiryToken: false // Make this configurable?
                          });
                         if (!(request.authenticationScheme === exports.AuthenticationScheme.POP)) return [3 /*break*/, 2];
                         shrParameters = {
@@ -12331,6 +12365,8 @@ var SilentIframeClient = /** @class */ (function (_super) {
                         serverTelemetryManager.cacheFailedRequest(e_1);
                         this.browserStorage.cleanRequestByState(silentRequest.state);
                         acquireTokenMeasurement.endMeasurement({
+                            errorCode: e_1 instanceof AuthError && e_1.errorCode || undefined,
+                            subErrorCode: e_1 instanceof AuthError && e_1.subError || undefined,
                             success: false
                         });
                         throw e_1;
@@ -12435,6 +12471,8 @@ var SilentCacheClient = /** @class */ (function (_super) {
                             this.logger.verbose("Signing keypair for bound access token not found. Refreshing bound access token and generating a new crypto keypair.");
                         }
                         acquireTokenMeasurement.endMeasurement({
+                            errorCode: error_1 instanceof AuthError && error_1.errorCode || undefined,
+                            subErrorCode: error_1 instanceof AuthError && error_1.subError || undefined,
                             success: false
                         });
                         throw error_1;
@@ -12529,6 +12567,8 @@ var SilentRefreshClient = /** @class */ (function (_super) {
                                 }
                                 serverTelemetryManager.cacheFailedRequest(e);
                                 acquireTokenMeasurement.endMeasurement({
+                                    errorCode: e.errorCode,
+                                    subErrorCode: e.subError,
                                     success: false
                                 });
                                 throw e;
@@ -14205,8 +14245,8 @@ var TokenCache = /** @class */ (function () {
         var idTokenEntity = IdTokenEntity.createIdTokenEntity(homeAccountId, environment, idToken, this.config.auth.clientId, tenantId);
         var idAuthToken = new AuthToken(idToken, this.cryptoObj);
         var accountEntity = options.clientInfo ?
-            AccountEntity.createAccount(options.clientInfo, homeAccountId, idAuthToken, undefined, undefined, undefined, undefined, environment) :
-            AccountEntity.createGenericAccount(homeAccountId, idAuthToken, undefined, undefined, undefined, undefined, environment);
+            AccountEntity.createAccount(options.clientInfo, homeAccountId, idAuthToken, undefined, undefined, undefined, environment) :
+            AccountEntity.createGenericAccount(homeAccountId, idAuthToken, undefined, undefined, undefined, environment);
         if (this.isBrowserEnvironment) {
             this.logger.verbose("TokenCache - loading id token");
             this.storage.setAccount(accountEntity);
@@ -14737,6 +14777,8 @@ var ClientApplication = /** @class */ (function () {
                 _this.eventHandler.emitEvent(exports.EventType.LOGIN_FAILURE, exports.InteractionType.Popup, null, e);
             }
             atPopupMeasurement.endMeasurement({
+                errorCode: e.errorCode,
+                subErrorCode: e.subError,
                 success: false
             });
             atPopupMeasurement.flushMeasurement();
@@ -14790,13 +14832,16 @@ var ClientApplication = /** @class */ (function () {
                 return [2 /*return*/, result.then(function (response) {
                         _this.eventHandler.emitEvent(exports.EventType.SSO_SILENT_SUCCESS, exports.InteractionType.Silent, response);
                         ssoSilentMeasurement.endMeasurement({
-                            success: true
+                            success: true,
+                            isNativeBroker: response.fromNativeBroker
                         });
                         ssoSilentMeasurement.flushMeasurement();
                         return response;
                     }).catch(function (e) {
                         _this.eventHandler.emitEvent(exports.EventType.SSO_SILENT_FAILURE, exports.InteractionType.Silent, null, e);
                         ssoSilentMeasurement.endMeasurement({
+                            errorCode: e.errorCode,
+                            subErrorCode: e.subError,
                             success: false
                         });
                         ssoSilentMeasurement.flushMeasurement();
@@ -14836,7 +14881,8 @@ var ClientApplication = /** @class */ (function () {
                                 _this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_BY_CODE_SUCCESS, exports.InteractionType.Silent, result);
                                 _this.hybridAuthCodeResponses.delete(hybridAuthCode_1);
                                 atbcMeasurement.endMeasurement({
-                                    success: true
+                                    success: true,
+                                    isNativeBroker: result.fromNativeBroker
                                 });
                                 atbcMeasurement.flushMeasurement();
                                 return result;
@@ -14845,6 +14891,8 @@ var ClientApplication = /** @class */ (function () {
                                 _this.hybridAuthCodeResponses.delete(hybridAuthCode_1);
                                 _this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, exports.InteractionType.Silent, null, error);
                                 atbcMeasurement.endMeasurement({
+                                    errorCode: error.errorCode,
+                                    subErrorCode: error.subError,
                                     success: false
                                 });
                                 atbcMeasurement.flushMeasurement();
@@ -14882,6 +14930,8 @@ var ClientApplication = /** @class */ (function () {
                 catch (e) {
                     this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, exports.InteractionType.Silent, null, e);
                     atbcMeasurement.endMeasurement({
+                        errorCode: e instanceof AuthError && e.errorCode || undefined,
+                        subErrorCode: e instanceof AuthError && e.subError || undefined,
                         success: false
                     });
                     throw e;
@@ -14957,6 +15007,8 @@ var ClientApplication = /** @class */ (function () {
                             })
                                 .catch(function (error) {
                                 atbrtMeasurement.endMeasurement({
+                                    errorCode: error.errorCode,
+                                    subErrorCode: error.subError,
                                     success: false
                                 });
                                 throw error;
@@ -15106,9 +15158,13 @@ var ClientApplication = /** @class */ (function () {
     // #region Helpers
     /**
      * Helper to validate app environment before making an auth request
-     * * @param interactionType
+     *
+     * @protected
+     * @param {InteractionType} interactionType What kind of interaction is being used
+     * @param {boolean} [setInteractionInProgress=true] Whether to set interaction in progress temp cache flag
      */
-    ClientApplication.prototype.preflightBrowserEnvironmentCheck = function (interactionType) {
+    ClientApplication.prototype.preflightBrowserEnvironmentCheck = function (interactionType, setInteractionInProgress) {
+        if (setInteractionInProgress === void 0) { setInteractionInProgress = true; }
         this.logger.verbose("preflightBrowserEnvironmentCheck started");
         // Block request if not in browser environment
         BrowserUtils.blockNonBrowserEnvironment(this.isBrowserEnvironment);
@@ -15127,20 +15183,23 @@ var ClientApplication = /** @class */ (function () {
             throw BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError();
         }
         if (interactionType === exports.InteractionType.Redirect || interactionType === exports.InteractionType.Popup) {
-            this.preflightInteractiveRequest();
+            this.preflightInteractiveRequest(setInteractionInProgress);
         }
     };
     /**
-     * Helper to validate app environment before making a request.
-     * @param request
-     * @param interactionType
+     * Preflight check for interactive requests
+     *
+     * @protected
+     * @param {boolean} setInteractionInProgress Whether to set interaction in progress temp cache flag
      */
-    ClientApplication.prototype.preflightInteractiveRequest = function () {
+    ClientApplication.prototype.preflightInteractiveRequest = function (setInteractionInProgress) {
         this.logger.verbose("preflightInteractiveRequest called, validating app environment");
         // block the reload if it occurred inside a hidden iframe
         BrowserUtils.blockReloadInHiddenIframes();
         // Set interaction in progress temporary cache or throw if alread set.
-        this.browserStorage.setInteractionInProgress(true);
+        if (setInteractionInProgress) {
+            this.browserStorage.setInteractionInProgress(true);
+        }
     };
     /**
      * Acquire a token from native device (e.g. WAM)
@@ -15449,7 +15508,8 @@ var PublicClientApplication = /** @class */ (function (_super) {
                         _this.activeSilentTokenRequests.delete(silentRequestKey);
                         atsMeasurement.endMeasurement({
                             success: true,
-                            fromCache: result.fromCache
+                            fromCache: result.fromCache,
+                            isNativeBroker: result.fromNativeBroker
                         });
                         atsMeasurement.flushMeasurement();
                         return result;
@@ -15457,6 +15517,8 @@ var PublicClientApplication = /** @class */ (function (_super) {
                         .catch(function (error) {
                         _this.activeSilentTokenRequests.delete(silentRequestKey);
                         atsMeasurement.endMeasurement({
+                            errorCode: error.errorCode,
+                            subErrorCode: error.subError,
                             success: false
                         });
                         atsMeasurement.flushMeasurement();
@@ -15525,12 +15587,15 @@ var PublicClientApplication = /** @class */ (function (_super) {
                             _this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, response);
                             astsAsyncMeasurement.endMeasurement({
                                 success: true,
-                                fromCache: response.fromCache
+                                fromCache: response.fromCache,
+                                isNativeBroker: response.fromNativeBroker
                             });
                             return response;
                         }).catch(function (tokenRenewalError) {
                             _this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, tokenRenewalError);
                             astsAsyncMeasurement.endMeasurement({
+                                errorCode: tokenRenewalError.errorCode,
+                                subErrorCode: tokenRenewalError.subError,
                                 success: false
                             });
                             throw tokenRenewalError;