@azure/msal-browser 2.25.0 → 2.26.0

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.25.0 2022-06-06 */
+/*! @azure/msal-browser v2.26.0 2022-06-13 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -107,7 +107,7 @@
         return ar;
     }
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*! *****************************************************************************
     Copyright (c) Microsoft Corporation.
 
@@ -194,7 +194,7 @@
         return r;
     }
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -568,7 +568,7 @@
         JsonTypes["Jwk"] = "JWK";
     })(JsonTypes || (JsonTypes = {}));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -612,7 +612,7 @@
         return AuthError;
     }(Error));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -687,7 +687,7 @@
         }
     };
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1159,7 +1159,7 @@
         return ClientAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1284,7 +1284,7 @@
         return StringUtils;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1464,12 +1464,12 @@
         return Logger;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /* eslint-disable header/header */
     var name$1 = "@azure/msal-common";
-    var version$1 = "6.4.0";
+    var version$1 = "7.0.0";
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1490,7 +1490,7 @@
         AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
     })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1513,9 +1513,9 @@
      *      familyId: Family ID identifier, usually only used for refresh tokens
      *      realm: Full tenant or organizational identifier that the account belongs to
      *      target: Permissions that are included in the token, or for refresh tokens, the resource identifier.
-     *      oboAssertion: access token passed in as part of OBO request
      *      tokenType: Matches the authentication scheme for which the token was issued (i.e. Bearer or pop)
      *      requestedClaimsHash: Matches the SHA 256 hash of the claims object included in the token request
+     *      userAssertionHash: Matches the SHA 256 hash of the obo_assertion for the OBO flow
      * }
      */
     var CredentialEntity = /** @class */ (function () {
@@ -1649,7 +1649,7 @@
         return CredentialEntity;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1904,7 +1904,7 @@
         return ClientConfigurationError;
     }(ClientAuthError));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2088,7 +2088,7 @@
         return ScopeSet;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2126,7 +2126,7 @@
         };
     }
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2140,7 +2140,7 @@
         AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
     })(AuthorityType || (AuthorityType = {}));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2165,7 +2165,6 @@
      *      clientInfo: Full base64 encoded client info received from ESTS
      *      lastModificationTime: last time this entity was modified in the cache
      *      lastModificationApp:
-     *      oboAssertion: access token passed in as part of OBO request
      *      idTokenClaims: Object containing claims parsed from ID token
      *      nativeAccountId: Account identifier on the native device
      * }
@@ -2244,7 +2243,7 @@
          * @param idToken
          * @param policy
          */
-        AccountEntity.createAccount = function (clientInfo, homeAccountId, idToken, authority, oboAssertion, cloudGraphHostName, msGraphHost, environment, nativeAccountId) {
+        AccountEntity.createAccount = function (clientInfo, homeAccountId, idToken, authority, cloudGraphHostName, msGraphHost, environment, nativeAccountId) {
             var _a, _b, _c, _d, _e, _f;
             var account = new AccountEntity();
             account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
@@ -2258,7 +2257,6 @@
             account.environment = env;
             // non AAD scenarios can have empty realm
             account.realm = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.tid) || Constants.EMPTY_STRING;
-            account.oboAssertion = oboAssertion;
             if (idToken) {
                 account.idTokenClaims = idToken.claims;
                 // How do you account for MSA CID here?
@@ -2279,14 +2277,13 @@
          * @param authority
          * @param idToken
          */
-        AccountEntity.createGenericAccount = function (homeAccountId, idToken, authority, oboAssertion, cloudGraphHostName, msGraphHost, environment) {
+        AccountEntity.createGenericAccount = function (homeAccountId, idToken, authority, cloudGraphHostName, msGraphHost, environment) {
             var _a, _b, _c, _d;
             var account = new AccountEntity();
             account.authorityType = (authority && authority.authorityType === AuthorityType.Adfs) ? CacheAccountType.ADFS_ACCOUNT_TYPE : CacheAccountType.GENERIC_ACCOUNT_TYPE;
             account.homeAccountId = homeAccountId;
             // non AAD scenarios can have empty realm
             account.realm = Constants.EMPTY_STRING;
-            account.oboAssertion = oboAssertion;
             var env = environment || authority && authority.getPreferredCache();
             if (!env) {
                 throw ClientAuthError.createInvalidCacheEnvironmentError();
@@ -2378,7 +2375,7 @@
         return AccountEntity;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2416,7 +2413,7 @@
         return AuthToken;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2579,7 +2576,7 @@
          * @param target
          */
         CacheManager.prototype.getCredentialsFilteredBy = function (filter) {
-            return this.getCredentialsFilteredByInternal(filter.homeAccountId, filter.environment, filter.credentialType, filter.clientId, filter.familyId, filter.realm, filter.target, filter.oboAssertion, filter.tokenType, filter.keyId, filter.requestedClaimsHash);
+            return this.getCredentialsFilteredByInternal(filter.homeAccountId, filter.environment, filter.credentialType, filter.clientId, filter.familyId, filter.realm, filter.target, filter.userAssertionHash, filter.tokenType, filter.keyId, filter.requestedClaimsHash);
         };
         /**
          * Support function to help match credentials
@@ -2589,10 +2586,10 @@
          * @param clientId
          * @param realm
          * @param target
-         * @param oboAssertion
+         * @param userAssertionHash
          * @param tokenType
          */
-        CacheManager.prototype.getCredentialsFilteredByInternal = function (homeAccountId, environment, credentialType, clientId, familyId, realm, target, oboAssertion, tokenType, keyId, requestedClaimsHash) {
+        CacheManager.prototype.getCredentialsFilteredByInternal = function (homeAccountId, environment, credentialType, clientId, familyId, realm, target, userAssertionHash, tokenType, keyId, requestedClaimsHash) {
             var _this = this;
             var allCacheKeys = this.getKeys();
             var matchingCredentials = {
@@ -2611,7 +2608,7 @@
                 if (!entity) {
                     return;
                 }
-                if (!!oboAssertion && !_this.matchOboAssertion(entity, oboAssertion)) {
+                if (!!userAssertionHash && !_this.matchUserAssertionHash(entity, userAssertionHash)) {
                     return;
                 }
                 if (!!homeAccountId && !_this.matchHomeAccountId(entity, homeAccountId)) {
@@ -2942,7 +2939,7 @@
                 target: scopes.printScopesLowerCase(),
                 tokenType: authScheme,
                 keyId: request.sshKid,
-                requestedClaimsHash: request.requestedClaimsHash
+                requestedClaimsHash: request.requestedClaimsHash,
             };
             var credentialCache = this.getCredentialsFilteredBy(accessTokenFilter);
             var accessTokens = Object.keys(credentialCache.accessTokens).map(function (key) { return credentialCache.accessTokens[key]; });
@@ -2968,7 +2965,7 @@
                 environment: account.environment,
                 credentialType: CredentialType.REFRESH_TOKEN,
                 clientId: clientId,
-                familyId: id
+                familyId: id,
             };
             var credentialCache = this.getCredentialsFilteredBy(refreshTokenFilter);
             var refreshTokens = Object.keys(credentialCache.refreshTokens).map(function (key) { return credentialCache.refreshTokens[key]; });
@@ -3020,8 +3017,8 @@
          * @param value
          * @param oboAssertion
          */
-        CacheManager.prototype.matchOboAssertion = function (entity, oboAssertion) {
-            return !!(entity.oboAssertion && oboAssertion === entity.oboAssertion);
+        CacheManager.prototype.matchUserAssertionHash = function (entity, userAssertionHash) {
+            return !!(entity.userAssertionHash && userAssertionHash === entity.userAssertionHash);
         };
         /**
          * helper to match environment
@@ -3258,7 +3255,7 @@
         return DefaultStorageClass;
     }(CacheManager));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3352,7 +3349,7 @@
         return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS }, authOptions);
     }
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3372,7 +3369,7 @@
         return ServerError;
     }(AuthError));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3468,7 +3465,7 @@
         return ThrottlingUtils;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3517,7 +3514,7 @@
         return NetworkManager;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3528,7 +3525,7 @@
         CcsCredentialType["UPN"] = "UPN";
     })(CcsCredentialType || (CcsCredentialType = {}));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3617,7 +3614,7 @@
         return BaseClient;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3703,7 +3700,7 @@
         return RequestValidator;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3937,14 +3934,18 @@
          * @param clientAssertion
          */
         RequestParameterBuilder.prototype.addClientAssertion = function (clientAssertion) {
-            this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION, encodeURIComponent(clientAssertion));
+            if (!StringUtils.isEmpty(clientAssertion)) {
+                this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION, encodeURIComponent(clientAssertion));
+            }
         };
         /**
          * add clientAssertionType for confidential client flows
          * @param clientAssertionType
          */
         RequestParameterBuilder.prototype.addClientAssertionType = function (clientAssertionType) {
-            this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION_TYPE, encodeURIComponent(clientAssertionType));
+            if (!StringUtils.isEmpty(clientAssertionType)) {
+                this.parameters.set(AADServerParamKeys.CLIENT_ASSERTION_TYPE, encodeURIComponent(clientAssertionType));
+            }
         };
         /**
          * add OBO assertion for confidential client flows
@@ -4077,7 +4078,7 @@
         return RequestParameterBuilder;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4112,7 +4113,7 @@
          * @param clientId
          * @param authority
          */
-        IdTokenEntity.createIdTokenEntity = function (homeAccountId, environment, idToken, clientId, tenantId, oboAssertion) {
+        IdTokenEntity.createIdTokenEntity = function (homeAccountId, environment, idToken, clientId, tenantId) {
             var idTokenEntity = new IdTokenEntity();
             idTokenEntity.credentialType = CredentialType.ID_TOKEN;
             idTokenEntity.homeAccountId = homeAccountId;
@@ -4120,7 +4121,6 @@
             idTokenEntity.clientId = clientId;
             idTokenEntity.secret = idToken;
             idTokenEntity.realm = tenantId;
-            idTokenEntity.oboAssertion = oboAssertion;
             return idTokenEntity;
         };
         /**
@@ -4142,7 +4142,7 @@
         return IdTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4192,7 +4192,7 @@
         return TimeUtils;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4238,7 +4238,7 @@
          * @param expiresOn
          * @param extExpiresOn
          */
-        AccessTokenEntity.createAccessTokenEntity = function (homeAccountId, environment, accessToken, clientId, tenantId, scopes, expiresOn, extExpiresOn, cryptoUtils, refreshOn, tokenType, oboAssertion, keyId, requestedClaims, requestedClaimsHash) {
+        AccessTokenEntity.createAccessTokenEntity = function (homeAccountId, environment, accessToken, clientId, tenantId, scopes, expiresOn, extExpiresOn, cryptoUtils, refreshOn, tokenType, userAssertionHash, keyId, requestedClaims, requestedClaimsHash) {
             var _a, _b;
             var atEntity = new AccessTokenEntity();
             atEntity.homeAccountId = homeAccountId;
@@ -4259,7 +4259,7 @@
             atEntity.clientId = clientId;
             atEntity.realm = tenantId;
             atEntity.target = scopes;
-            atEntity.oboAssertion = oboAssertion;
+            atEntity.userAssertionHash = userAssertionHash;
             atEntity.tokenType = StringUtils.isEmpty(tokenType) ? exports.AuthenticationScheme.BEARER : tokenType;
             if (requestedClaims) {
                 atEntity.requestedClaims = requestedClaims;
@@ -4306,7 +4306,7 @@
         return AccessTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4343,14 +4343,14 @@
          * @param clientId
          * @param authority
          */
-        RefreshTokenEntity.createRefreshTokenEntity = function (homeAccountId, environment, refreshToken, clientId, familyId, oboAssertion) {
+        RefreshTokenEntity.createRefreshTokenEntity = function (homeAccountId, environment, refreshToken, clientId, familyId, userAssertionHash) {
             var rtEntity = new RefreshTokenEntity();
             rtEntity.clientId = clientId;
             rtEntity.credentialType = CredentialType.REFRESH_TOKEN;
             rtEntity.environment = environment;
             rtEntity.homeAccountId = homeAccountId;
             rtEntity.secret = refreshToken;
-            rtEntity.oboAssertion = oboAssertion;
+            rtEntity.userAssertionHash = userAssertionHash;
             if (familyId)
                 rtEntity.familyId = familyId;
             return rtEntity;
@@ -4373,7 +4373,7 @@
         return RefreshTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4437,7 +4437,7 @@
         return InteractionRequiredAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4453,7 +4453,7 @@
         return CacheRecord;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4524,7 +4524,7 @@
         return ProtocolUtils;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4725,7 +4725,7 @@
         return UrlString;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4826,7 +4826,7 @@
         return PopTokenGenerator;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4896,7 +4896,7 @@
         return AppMetadataEntity;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4932,7 +4932,7 @@
         return TokenCacheContext;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4993,7 +4993,7 @@
          * @param serverTokenResponse
          * @param authority
          */
-        ResponseHandler.prototype.handleServerTokenResponse = function (serverTokenResponse, authority, reqTimestamp, request, authCodePayload, oboAssertion, handlingRefreshTokenResponse) {
+        ResponseHandler.prototype.handleServerTokenResponse = function (serverTokenResponse, authority, reqTimestamp, request, authCodePayload, userAssertionHash, handlingRefreshTokenResponse) {
             return __awaiter(this, void 0, void 0, function () {
                 var idTokenObj, requestStateObj, cacheRecord, cacheContext, key, account;
                 return __generator(this, function (_a) {
@@ -5015,7 +5015,7 @@
                             }
                             // Add keyId from request to serverTokenResponse if defined
                             serverTokenResponse.key_id = serverTokenResponse.key_id || request.sshKid || undefined;
-                            cacheRecord = this.generateCacheRecord(serverTokenResponse, authority, reqTimestamp, request, idTokenObj, oboAssertion, authCodePayload);
+                            cacheRecord = this.generateCacheRecord(serverTokenResponse, authority, reqTimestamp, request, idTokenObj, userAssertionHash, authCodePayload);
                             _a.label = 1;
                         case 1:
                             _a.trys.push([1, , 5, 8]);
@@ -5063,7 +5063,7 @@
          * @param idTokenObj
          * @param authority
          */
-        ResponseHandler.prototype.generateCacheRecord = function (serverTokenResponse, authority, reqTimestamp, request, idTokenObj, oboAssertion, authCodePayload) {
+        ResponseHandler.prototype.generateCacheRecord = function (serverTokenResponse, authority, reqTimestamp, request, idTokenObj, userAssertionHash, authCodePayload) {
             var env = authority.getPreferredCache();
             if (StringUtils.isEmpty(env)) {
                 throw ClientAuthError.createInvalidCacheEnvironmentError();
@@ -5072,8 +5072,8 @@
             var cachedIdToken;
             var cachedAccount;
             if (!StringUtils.isEmpty(serverTokenResponse.id_token) && !!idTokenObj) {
-                cachedIdToken = IdTokenEntity.createIdTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.id_token || Constants.EMPTY_STRING, this.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING, oboAssertion);
-                cachedAccount = this.generateAccountEntity(serverTokenResponse, idTokenObj, authority, oboAssertion, authCodePayload);
+                cachedIdToken = IdTokenEntity.createIdTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.id_token || Constants.EMPTY_STRING, this.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);
+                cachedAccount = this.generateAccountEntity(serverTokenResponse, idTokenObj, authority, authCodePayload);
             }
             // AccessToken
             var cachedAccessToken = null;
@@ -5091,12 +5091,12 @@
                 var extendedTokenExpirationSeconds = tokenExpirationSeconds + extExpiresIn;
                 var refreshOnSeconds = refreshIn && refreshIn > 0 ? reqTimestamp + refreshIn : undefined;
                 // non AAD scenarios can have empty realm
-                cachedAccessToken = AccessTokenEntity.createAccessTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.access_token || Constants.EMPTY_STRING, this.clientId, idTokenObj ? idTokenObj.claims.tid || Constants.EMPTY_STRING : authority.tenant, responseScopes.printScopes(), tokenExpirationSeconds, extendedTokenExpirationSeconds, this.cryptoObj, refreshOnSeconds, serverTokenResponse.token_type, oboAssertion, serverTokenResponse.key_id, request.claims, request.requestedClaimsHash);
+                cachedAccessToken = AccessTokenEntity.createAccessTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.access_token || Constants.EMPTY_STRING, this.clientId, idTokenObj ? idTokenObj.claims.tid || Constants.EMPTY_STRING : authority.tenant, responseScopes.printScopes(), tokenExpirationSeconds, extendedTokenExpirationSeconds, this.cryptoObj, refreshOnSeconds, serverTokenResponse.token_type, userAssertionHash, serverTokenResponse.key_id, request.claims, request.requestedClaimsHash);
             }
             // refreshToken
             var cachedRefreshToken = null;
             if (!StringUtils.isEmpty(serverTokenResponse.refresh_token)) {
-                cachedRefreshToken = RefreshTokenEntity.createRefreshTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.refresh_token || Constants.EMPTY_STRING, this.clientId, serverTokenResponse.foci, oboAssertion);
+                cachedRefreshToken = RefreshTokenEntity.createRefreshTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.refresh_token || Constants.EMPTY_STRING, this.clientId, serverTokenResponse.foci, userAssertionHash);
             }
             // appMetadata
             var cachedAppMetadata = null;
@@ -5111,22 +5111,22 @@
          * @param idToken
          * @param authority
          */
-        ResponseHandler.prototype.generateAccountEntity = function (serverTokenResponse, idToken, authority, oboAssertion, authCodePayload) {
+        ResponseHandler.prototype.generateAccountEntity = function (serverTokenResponse, idToken, authority, authCodePayload) {
             var authorityType = authority.authorityType;
             var cloudGraphHostName = authCodePayload ? authCodePayload.cloud_graph_host_name : Constants.EMPTY_STRING;
             var msGraphhost = authCodePayload ? authCodePayload.msgraph_host : Constants.EMPTY_STRING;
             // ADFS does not require client_info in the response
             if (authorityType === AuthorityType.Adfs) {
                 this.logger.verbose("Authority type is ADFS, creating ADFS account");
-                return AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, oboAssertion, cloudGraphHostName, msGraphhost);
+                return AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost);
             }
             // This fallback applies to B2C as well as they fall under an AAD account type.
             if (StringUtils.isEmpty(serverTokenResponse.client_info) && authority.protocolMode === "AAD") {
                 throw ClientAuthError.createClientInfoEmptyError();
             }
             return serverTokenResponse.client_info ?
-                AccountEntity.createAccount(serverTokenResponse.client_info, this.homeAccountIdentifier, idToken, authority, oboAssertion, cloudGraphHostName, msGraphhost) :
-                AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, oboAssertion, cloudGraphHostName, msGraphhost);
+                AccountEntity.createAccount(serverTokenResponse.client_info, this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost) :
+                AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost);
         };
         /**
          * Creates an @AuthenticationResult from @CacheRecord , @IdToken , and a boolean that states whether or not the result is from cache.
@@ -5202,7 +5202,7 @@
         return ResponseHandler;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5406,8 +5406,8 @@
                             if (this.config.clientCredentials.clientSecret) {
                                 parameterBuilder.addClientSecret(this.config.clientCredentials.clientSecret);
                             }
-                            clientAssertion = request.clientAssertion || this.config.clientCredentials.clientAssertion;
-                            if (clientAssertion) {
+                            if (this.config.clientCredentials.clientAssertion) {
+                                clientAssertion = this.config.clientCredentials.clientAssertion;
                                 parameterBuilder.addClientAssertion(clientAssertion.assertion);
                                 parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
                             }
@@ -5637,7 +5637,7 @@
         return AuthorizationCodeClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5799,8 +5799,8 @@
                             if (this.config.clientCredentials.clientSecret) {
                                 parameterBuilder.addClientSecret(this.config.clientCredentials.clientSecret);
                             }
-                            clientAssertion = request.clientAssertion || this.config.clientCredentials.clientAssertion;
-                            if (clientAssertion) {
+                            if (this.config.clientCredentials.clientAssertion) {
+                                clientAssertion = this.config.clientCredentials.clientAssertion;
                                 parameterBuilder.addClientAssertion(clientAssertion.assertion);
                                 parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
                             }
@@ -5850,7 +5850,7 @@
         return RefreshTokenClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5966,7 +5966,7 @@
         return SilentFlowClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5977,7 +5977,7 @@
             response.hasOwnProperty("issuer"));
     }
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5991,7 +5991,7 @@
         ProtocolMode["OIDC"] = "OIDC";
     })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6066,7 +6066,7 @@
         return AuthorityMetadataEntity;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6076,7 +6076,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6198,7 +6198,7 @@
         return RegionDiscovery;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6788,7 +6788,7 @@
         return Authority;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6849,7 +6849,7 @@
         return AuthorityFactory;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6880,7 +6880,7 @@
         return ServerTelemetryEntity;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6908,7 +6908,7 @@
         return ThrottlingEntity;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6925,7 +6925,7 @@
         }
     };
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6970,7 +6970,7 @@
         return JoseHeaderError;
     }(AuthError));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7010,7 +7010,7 @@
         return JoseHeader;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7069,7 +7069,7 @@
         return AuthenticationHeaderParser;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7231,7 +7231,7 @@
         return ServerTelemetryManager;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -7328,7 +7328,7 @@
         PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
     })(PerformanceEventStatus || (PerformanceEventStatus = {}));
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7598,7 +7598,7 @@
         return PerformanceClient;
     }());
 
-    /*! @azure/msal-common v6.4.0 2022-06-06 */
+    /*! @azure/msal-common v7.0.0 2022-06-13 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7700,7 +7700,7 @@
         },
         redirectInIframeError: {
             code: "redirect_in_iframe",
-            desc: "Code flow is not supported inside an iframe. Please ensure you are using MSAL.js in a top frame of the window if using the redirect APIs, or use the popup APIs."
+            desc: "Redirects are not supported for iframed or brokered applications. Please ensure you are using MSAL.js in a top frame of the window if using the redirect APIs, or use the popup APIs."
         },
         blockTokenRequestsInHiddenIframeError: {
             code: "block_iframe_reload",
@@ -7925,7 +7925,7 @@
             return new BrowserAuthError(BrowserAuthErrorMessage.monitorIframeTimeoutError.code, BrowserAuthErrorMessage.monitorIframeTimeoutError.desc);
         };
         /**
-         * Creates an error thrown when navigateWindow is called inside an iframe.
+         * Creates an error thrown when navigateWindow is called inside an iframe or brokered applications.
          * @param windowParentCheck
          */
         BrowserAuthError.createRedirectInIframeError = function (windowParentCheck) {
@@ -8144,7 +8144,8 @@
     };
     var NativeConstants = {
         CHANNEL_ID: "53ee284d-920a-4b59-9d30-a60315b26836",
-        PREFERRED_EXTENSION_ID: "ppnbnpeolgkicgegkbkbjmhlideopiji"
+        PREFERRED_EXTENSION_ID: "ppnbnpeolgkicgegkbkbjmhlideopiji",
+        MATS_TELEMETRY: "MATS"
     };
     var NativeExtensionMethod;
     (function (NativeExtensionMethod) {
@@ -9394,7 +9395,7 @@
 
     /* eslint-disable header/header */
     var name = "@azure/msal-browser";
-    var version = "2.25.0";
+    var version = "2.26.0";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10188,6 +10189,8 @@
                                 })
                                     .catch(function (error) {
                                     getAuthorityMeasurement.endMeasurement({
+                                        errorCode: error.errorCode,
+                                        subErrorCode: error.subError,
                                         success: false
                                     });
                                     throw error;
@@ -10674,6 +10677,8 @@
                                     .catch(function (error) {
                                     nativeATMeasurement.endMeasurement({
                                         success: false,
+                                        errorCode: error.errorCode,
+                                        subErrorCode: error.subError,
                                         isNativeBroker: true
                                     });
                                     throw error;
@@ -10792,7 +10797,7 @@
          */
         NativeInteractionClient.prototype.handleNativeResponse = function (response, request, reqTimestamp) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var idTokenObj, authority, authorityPreferredCache, homeAccountIdentifier, accountEntity, responseScopes, accountProperties, uid, tid, responseAccessToken, responseTokenType, _a, popTokenGenerator, shrParameters, result;
+                var idTokenObj, authority, authorityPreferredCache, homeAccountIdentifier, accountEntity, responseScopes, accountProperties, uid, tid, responseAccessToken, responseTokenType, _a, popTokenGenerator, shrParameters, mats, result;
                 var _this = this;
                 return __generator$1(this, function (_b) {
                     switch (_b.label) {
@@ -10808,7 +10813,7 @@
                             authority = _b.sent();
                             authorityPreferredCache = authority.getPreferredCache();
                             homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenObj);
-                            accountEntity = AccountEntity.createAccount(response.client_info, homeAccountIdentifier, idTokenObj, undefined, undefined, undefined, undefined, authorityPreferredCache, response.account.id);
+                            accountEntity = AccountEntity.createAccount(response.client_info, homeAccountIdentifier, idTokenObj, undefined, undefined, undefined, authorityPreferredCache, response.account.id);
                             this.browserStorage.setAccount(accountEntity);
                             responseScopes = response.scopes ? ScopeSet.fromString(response.scopes) : ScopeSet.fromString(request.scopes);
                             accountProperties = response.account.properties || {};
@@ -10853,6 +10858,7 @@
                             }
                             _b.label = 5;
                         case 5:
+                            mats = this.getMATSFromResponse(response);
                             result = {
                                 authority: authority.canonicalAuthority,
                                 uniqueId: uid,
@@ -10862,7 +10868,7 @@
                                 idToken: response.id_token,
                                 idTokenClaims: idTokenObj.claims,
                                 accessToken: responseAccessToken,
-                                fromCache: false,
+                                fromCache: mats ? this.isResponseFromCache(mats) : false,
                                 expiresOn: new Date(Number(reqTimestamp + response.expires_in) * 1000),
                                 tokenType: responseTokenType,
                                 correlationId: this.correlationId,
@@ -10895,6 +10901,34 @@
                 throw NativeAuthError.createUnexpectedError("Response missing expected properties.");
             }
         };
+        /**
+         * Gets MATS telemetry from native response
+         * @param response
+         * @returns
+         */
+        NativeInteractionClient.prototype.getMATSFromResponse = function (response) {
+            if (response.properties.MATS) {
+                try {
+                    return JSON.parse(response.properties.MATS);
+                }
+                catch (e) {
+                    this.logger.error("NativeInteractionClient - Error parsing MATS telemetry, returning null instead");
+                }
+            }
+            return null;
+        };
+        /**
+         * Returns whether or not response came from native cache
+         * @param response
+         * @returns
+         */
+        NativeInteractionClient.prototype.isResponseFromCache = function (mats) {
+            if (typeof mats.is_cached === "undefined") {
+                this.logger.verbose("NativeInteractionClient - MATS telemetry does not contain field indicating if response was served from cache. Returning false.");
+                return false;
+            }
+            return !!mats.is_cached;
+        };
         /**
          * Translates developer provided request object into NativeRequest object
          * @param request
@@ -10923,7 +10957,7 @@
                                         throw BrowserAuthError.createNativePromptParameterNotSupportedError();
                                 }
                             }
-                            validatedRequest = __assign$1(__assign$1({}, request), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scopes: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), extendedExpiryToken: false // Make this configurable?
+                            validatedRequest = __assign$1(__assign$1({}, request), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scopes: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), { telemetry: NativeConstants.MATS_TELEMETRY }), extendedExpiryToken: false // Make this configurable?
                              });
                             if (!(request.authenticationScheme === exports.AuthenticationScheme.POP)) return [3 /*break*/, 2];
                             shrParameters = {
@@ -12333,6 +12367,8 @@
                             serverTelemetryManager.cacheFailedRequest(e_1);
                             this.browserStorage.cleanRequestByState(silentRequest.state);
                             acquireTokenMeasurement.endMeasurement({
+                                errorCode: e_1 instanceof AuthError && e_1.errorCode || undefined,
+                                subErrorCode: e_1 instanceof AuthError && e_1.subError || undefined,
                                 success: false
                             });
                             throw e_1;
@@ -12437,6 +12473,8 @@
                                 this.logger.verbose("Signing keypair for bound access token not found. Refreshing bound access token and generating a new crypto keypair.");
                             }
                             acquireTokenMeasurement.endMeasurement({
+                                errorCode: error_1 instanceof AuthError && error_1.errorCode || undefined,
+                                subErrorCode: error_1 instanceof AuthError && error_1.subError || undefined,
                                 success: false
                             });
                             throw error_1;
@@ -12531,6 +12569,8 @@
                                     }
                                     serverTelemetryManager.cacheFailedRequest(e);
                                     acquireTokenMeasurement.endMeasurement({
+                                        errorCode: e.errorCode,
+                                        subErrorCode: e.subError,
                                         success: false
                                     });
                                     throw e;
@@ -14207,8 +14247,8 @@
             var idTokenEntity = IdTokenEntity.createIdTokenEntity(homeAccountId, environment, idToken, this.config.auth.clientId, tenantId);
             var idAuthToken = new AuthToken(idToken, this.cryptoObj);
             var accountEntity = options.clientInfo ?
-                AccountEntity.createAccount(options.clientInfo, homeAccountId, idAuthToken, undefined, undefined, undefined, undefined, environment) :
-                AccountEntity.createGenericAccount(homeAccountId, idAuthToken, undefined, undefined, undefined, undefined, environment);
+                AccountEntity.createAccount(options.clientInfo, homeAccountId, idAuthToken, undefined, undefined, undefined, environment) :
+                AccountEntity.createGenericAccount(homeAccountId, idAuthToken, undefined, undefined, undefined, environment);
             if (this.isBrowserEnvironment) {
                 this.logger.verbose("TokenCache - loading id token");
                 this.storage.setAccount(accountEntity);
@@ -14739,6 +14779,8 @@
                     _this.eventHandler.emitEvent(exports.EventType.LOGIN_FAILURE, exports.InteractionType.Popup, null, e);
                 }
                 atPopupMeasurement.endMeasurement({
+                    errorCode: e.errorCode,
+                    subErrorCode: e.subError,
                     success: false
                 });
                 atPopupMeasurement.flushMeasurement();
@@ -14792,13 +14834,16 @@
                     return [2 /*return*/, result.then(function (response) {
                             _this.eventHandler.emitEvent(exports.EventType.SSO_SILENT_SUCCESS, exports.InteractionType.Silent, response);
                             ssoSilentMeasurement.endMeasurement({
-                                success: true
+                                success: true,
+                                isNativeBroker: response.fromNativeBroker
                             });
                             ssoSilentMeasurement.flushMeasurement();
                             return response;
                         }).catch(function (e) {
                             _this.eventHandler.emitEvent(exports.EventType.SSO_SILENT_FAILURE, exports.InteractionType.Silent, null, e);
                             ssoSilentMeasurement.endMeasurement({
+                                errorCode: e.errorCode,
+                                subErrorCode: e.subError,
                                 success: false
                             });
                             ssoSilentMeasurement.flushMeasurement();
@@ -14838,7 +14883,8 @@
                                     _this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_BY_CODE_SUCCESS, exports.InteractionType.Silent, result);
                                     _this.hybridAuthCodeResponses.delete(hybridAuthCode_1);
                                     atbcMeasurement.endMeasurement({
-                                        success: true
+                                        success: true,
+                                        isNativeBroker: result.fromNativeBroker
                                     });
                                     atbcMeasurement.flushMeasurement();
                                     return result;
@@ -14847,6 +14893,8 @@
                                     _this.hybridAuthCodeResponses.delete(hybridAuthCode_1);
                                     _this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, exports.InteractionType.Silent, null, error);
                                     atbcMeasurement.endMeasurement({
+                                        errorCode: error.errorCode,
+                                        subErrorCode: error.subError,
                                         success: false
                                     });
                                     atbcMeasurement.flushMeasurement();
@@ -14884,6 +14932,8 @@
                     catch (e) {
                         this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, exports.InteractionType.Silent, null, e);
                         atbcMeasurement.endMeasurement({
+                            errorCode: e instanceof AuthError && e.errorCode || undefined,
+                            subErrorCode: e instanceof AuthError && e.subError || undefined,
                             success: false
                         });
                         throw e;
@@ -14959,6 +15009,8 @@
                                 })
                                     .catch(function (error) {
                                     atbrtMeasurement.endMeasurement({
+                                        errorCode: error.errorCode,
+                                        subErrorCode: error.subError,
                                         success: false
                                     });
                                     throw error;
@@ -15108,9 +15160,13 @@
         // #region Helpers
         /**
          * Helper to validate app environment before making an auth request
-         * * @param interactionType
+         *
+         * @protected
+         * @param {InteractionType} interactionType What kind of interaction is being used
+         * @param {boolean} [setInteractionInProgress=true] Whether to set interaction in progress temp cache flag
          */
-        ClientApplication.prototype.preflightBrowserEnvironmentCheck = function (interactionType) {
+        ClientApplication.prototype.preflightBrowserEnvironmentCheck = function (interactionType, setInteractionInProgress) {
+            if (setInteractionInProgress === void 0) { setInteractionInProgress = true; }
             this.logger.verbose("preflightBrowserEnvironmentCheck started");
             // Block request if not in browser environment
             BrowserUtils.blockNonBrowserEnvironment(this.isBrowserEnvironment);
@@ -15129,20 +15185,23 @@
                 throw BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError();
             }
             if (interactionType === exports.InteractionType.Redirect || interactionType === exports.InteractionType.Popup) {
-                this.preflightInteractiveRequest();
+                this.preflightInteractiveRequest(setInteractionInProgress);
             }
         };
         /**
-         * Helper to validate app environment before making a request.
-         * @param request
-         * @param interactionType
+         * Preflight check for interactive requests
+         *
+         * @protected
+         * @param {boolean} setInteractionInProgress Whether to set interaction in progress temp cache flag
          */
-        ClientApplication.prototype.preflightInteractiveRequest = function () {
+        ClientApplication.prototype.preflightInteractiveRequest = function (setInteractionInProgress) {
             this.logger.verbose("preflightInteractiveRequest called, validating app environment");
             // block the reload if it occurred inside a hidden iframe
             BrowserUtils.blockReloadInHiddenIframes();
             // Set interaction in progress temporary cache or throw if alread set.
-            this.browserStorage.setInteractionInProgress(true);
+            if (setInteractionInProgress) {
+                this.browserStorage.setInteractionInProgress(true);
+            }
         };
         /**
          * Acquire a token from native device (e.g. WAM)
@@ -15451,7 +15510,8 @@
                             _this.activeSilentTokenRequests.delete(silentRequestKey);
                             atsMeasurement.endMeasurement({
                                 success: true,
-                                fromCache: result.fromCache
+                                fromCache: result.fromCache,
+                                isNativeBroker: result.fromNativeBroker
                             });
                             atsMeasurement.flushMeasurement();
                             return result;
@@ -15459,6 +15519,8 @@
                             .catch(function (error) {
                             _this.activeSilentTokenRequests.delete(silentRequestKey);
                             atsMeasurement.endMeasurement({
+                                errorCode: error.errorCode,
+                                subErrorCode: error.subError,
                                 success: false
                             });
                             atsMeasurement.flushMeasurement();
@@ -15527,12 +15589,15 @@
                                 _this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, response);
                                 astsAsyncMeasurement.endMeasurement({
                                     success: true,
-                                    fromCache: response.fromCache
+                                    fromCache: response.fromCache,
+                                    isNativeBroker: response.fromNativeBroker
                                 });
                                 return response;
                             }).catch(function (tokenRenewalError) {
                                 _this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, tokenRenewalError);
                                 astsAsyncMeasurement.endMeasurement({
+                                    errorCode: tokenRenewalError.errorCode,
+                                    subErrorCode: tokenRenewalError.subError,
                                     success: false
                                 });
                                 throw tokenRenewalError;