@azure/msal-browser 2.28.0 → 2.28.1

package/dist/index.cjs.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.28.0 2022-07-18 */
+/*! @azure/msal-browser v2.28.1 2022-08-01 */
 'use strict';
 'use strict';
 
@@ -44,6 +44,18 @@ var __assign$1 = function() {
     return __assign$1.apply(this, arguments);
 };
 
+function __rest(s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+}
+
 function __awaiter$1(thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -105,7 +117,7 @@ function __spread() {
     return ar;
 }
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*! *****************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -192,7 +204,7 @@ function __spreadArrays() {
     return r;
 }
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -569,7 +581,7 @@ var JsonTypes;
     JsonTypes["Jwk"] = "JWK";
 })(JsonTypes || (JsonTypes = {}));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -582,6 +594,10 @@ var AuthErrorMessage = {
     unexpectedError: {
         code: "unexpected_error",
         desc: "Unexpected error in authentication."
+    },
+    postRequestFailed: {
+        code: "post_request_failed",
+        desc: "Post request failed from the network, could be a 4xx/5xx or a network unavailability. Please check the exact error code for details."
     }
 };
 /**
@@ -610,10 +626,18 @@ var AuthError = /** @class */ (function (_super) {
     AuthError.createUnexpectedError = function (errDesc) {
         return new AuthError(AuthErrorMessage.unexpectedError.code, AuthErrorMessage.unexpectedError.desc + ": " + errDesc);
     };
+    /**
+     * Creates an error for post request failures.
+     * @param errDesc
+     * @returns
+     */
+    AuthError.createPostRequestFailed = function (errDesc) {
+        return new AuthError(AuthErrorMessage.postRequestFailed.code, AuthErrorMessage.postRequestFailed.desc + ": " + errDesc);
+    };
     return AuthError;
 }(Error));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -688,7 +712,7 @@ var DEFAULT_CRYPTO_IMPLEMENTATION = {
     }
 };
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1160,7 +1184,7 @@ var ClientAuthError = /** @class */ (function (_super) {
     return ClientAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1285,7 +1309,7 @@ var StringUtils = /** @class */ (function () {
     return StringUtils;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1465,12 +1489,12 @@ var Logger = /** @class */ (function () {
     return Logger;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /* eslint-disable header/header */
 var name$1 = "@azure/msal-common";
-var version$1 = "7.2.0";
+var version$1 = "7.3.0";
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1491,7 +1515,7 @@ exports.AzureCloudInstance = void 0;
     AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
 })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1650,7 +1674,7 @@ var CredentialEntity = /** @class */ (function () {
     return CredentialEntity;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1905,7 +1929,7 @@ var ClientConfigurationError = /** @class */ (function (_super) {
     return ClientConfigurationError;
 }(ClientAuthError));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2089,7 +2113,7 @@ var ScopeSet = /** @class */ (function () {
     return ScopeSet;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2127,7 +2151,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2141,7 +2165,7 @@ var AuthorityType;
     AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
 })(AuthorityType || (AuthorityType = {}));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2376,7 +2400,7 @@ var AccountEntity = /** @class */ (function () {
     return AccountEntity;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2414,7 +2438,7 @@ var AuthToken = /** @class */ (function () {
     return AuthToken;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3288,7 +3312,7 @@ var DefaultStorageClass = /** @class */ (function (_super) {
     return DefaultStorageClass;
 }(CacheManager));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3382,7 +3406,7 @@ function buildAuthOptions(authOptions) {
     return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
 }
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3402,7 +3426,7 @@ var ServerError = /** @class */ (function (_super) {
     return ServerError;
 }(AuthError));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3498,7 +3522,7 @@ var ThrottlingUtils = /** @class */ (function () {
     return ThrottlingUtils;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3547,7 +3571,7 @@ var NetworkManager = /** @class */ (function () {
     return NetworkManager;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3558,7 +3582,7 @@ var CcsCredentialType;
     CcsCredentialType["UPN"] = "UPN";
 })(CcsCredentialType || (CcsCredentialType = {}));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3568,7 +3592,7 @@ var CcsCredentialType;
  * Base application class which will construct requests to send to and handle responses from the Microsoft STS using the authorization code flow.
  */
 var BaseClient = /** @class */ (function () {
-    function BaseClient(configuration) {
+    function BaseClient(configuration, performanceClient) {
         // Set the configuration
         this.config = buildClientConfiguration(configuration);
         // Initialize the logger
@@ -3585,6 +3609,8 @@ var BaseClient = /** @class */ (function () {
         this.serverTelemetryManager = this.config.serverTelemetryManager;
         // set Authority
         this.authority = this.config.authOptions.authority;
+        // set performance telemetry client
+        this.performanceClient = performanceClient;
     }
     /**
      * Creates default headers for requests to token endpoint
@@ -3647,7 +3673,7 @@ var BaseClient = /** @class */ (function () {
     return BaseClient;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3733,7 +3759,7 @@ var RequestValidator = /** @class */ (function () {
     return RequestValidator;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4111,7 +4137,7 @@ var RequestParameterBuilder = /** @class */ (function () {
     return RequestParameterBuilder;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4175,7 +4201,7 @@ var IdTokenEntity = /** @class */ (function (_super) {
     return IdTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4225,7 +4251,7 @@ var TimeUtils = /** @class */ (function () {
     return TimeUtils;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4339,7 +4365,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
     return AccessTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4406,7 +4432,7 @@ var RefreshTokenEntity = /** @class */ (function (_super) {
     return RefreshTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4481,7 +4507,7 @@ var InteractionRequiredAuthError = /** @class */ (function (_super) {
     return InteractionRequiredAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4497,7 +4523,7 @@ var CacheRecord = /** @class */ (function () {
     return CacheRecord;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4568,7 +4594,7 @@ var ProtocolUtils = /** @class */ (function () {
     return ProtocolUtils;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4769,7 +4795,7 @@ var UrlString = /** @class */ (function () {
     return UrlString;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4870,7 +4896,7 @@ var PopTokenGenerator = /** @class */ (function () {
     return PopTokenGenerator;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4940,7 +4966,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return AppMetadataEntity;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4976,7 +5002,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return TokenCacheContext;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5247,7 +5273,7 @@ var ResponseHandler = /** @class */ (function () {
     return ResponseHandler;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5535,7 +5561,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
      */
     AuthorizationCodeClient.prototype.createAuthCodeUrlQueryString = function (request) {
         return __awaiter(this, void 0, void 0, function () {
-            var parameterBuilder, requestScopes, correlationId, accountSid, clientInfo, clientInfo, popTokenGenerator, reqCnfData;
+            var parameterBuilder, requestScopes, correlationId, accountSid, accountLoginHintClaim, clientInfo, clientInfo, clientInfo, popTokenGenerator, reqCnfData;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
@@ -5565,7 +5591,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
                         if (request.domainHint) {
                             parameterBuilder.addDomainHint(request.domainHint);
                         }
-                        // Add sid or loginHint with preference for sid -> loginHint -> username of AccountInfo object
+                        // Add sid or loginHint with preference for login_hint claim (in request) -> sid -> loginHint (upn/email) -> username of AccountInfo object
                         if (request.prompt !== PromptValue.SELECT_ACCOUNT) {
                             // AAD will throw if prompt=select_account is passed with an account hint
                             if (request.sid && request.prompt === PromptValue.NONE) {
@@ -5575,9 +5601,24 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
                             }
                             else if (request.account) {
                                 accountSid = this.extractAccountSid(request.account);
-                                // If account and loginHint are provided, we will check account first for sid before adding loginHint
-                                if (accountSid && request.prompt === PromptValue.NONE) {
-                                    // SessionId is only used in silent calls
+                                accountLoginHintClaim = this.extractLoginHint(request.account);
+                                // If login_hint claim is present, use it over sid/username
+                                if (accountLoginHintClaim) {
+                                    this.logger.verbose("createAuthCodeUrlQueryString: login_hint claim present on account");
+                                    parameterBuilder.addLoginHint(accountLoginHintClaim);
+                                    try {
+                                        clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
+                                        parameterBuilder.addCcsOid(clientInfo);
+                                    }
+                                    catch (e) {
+                                        this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
+                                    }
+                                }
+                                else if (accountSid && request.prompt === PromptValue.NONE) {
+                                    /*
+                                     * If account and loginHint are provided, we will check account first for sid before adding loginHint
+                                     * SessionId is only used in silent calls
+                                     */
                                     this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from account");
                                     parameterBuilder.addSid(accountSid);
                                     try {
@@ -5585,7 +5626,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
                                         parameterBuilder.addCcsOid(clientInfo);
                                     }
                                     catch (e) {
-                                        this.logger.verbose("Could not parse home account ID for CCS Header: " + e);
+                                        this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
                                     }
                                 }
                                 else if (request.loginHint) {
@@ -5602,7 +5643,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
                                         parameterBuilder.addCcsOid(clientInfo);
                                     }
                                     catch (e) {
-                                        this.logger.verbose("Could not parse home account ID for CCS Header: " + e);
+                                        this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
                                     }
                                 }
                             }
@@ -5673,16 +5714,135 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
      * @param account
      */
     AuthorizationCodeClient.prototype.extractAccountSid = function (account) {
-        if (account.idTokenClaims) {
-            var tokenClaims = account.idTokenClaims;
-            return tokenClaims.sid || null;
-        }
-        return null;
+        var _a;
+        return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a.sid) || null;
+    };
+    AuthorizationCodeClient.prototype.extractLoginHint = function (account) {
+        var _a;
+        return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a.login_hint) || null;
     };
     return AuthorizationCodeClient;
 }(BaseClient));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Enumeration of operations that are instrumented by have their performance measured by the PerformanceClient.
+ *
+ * @export
+ * @enum {number}
+ */
+exports.PerformanceEvents = void 0;
+(function (PerformanceEvents) {
+    /**
+     * acquireTokenByCode API (msal-browser and msal-node).
+     * Used to acquire tokens by trading an authorization code against the token endpoint.
+     */
+    PerformanceEvents["AcquireTokenByCode"] = "acquireTokenByCode";
+    /**
+     * acquireTokenByRefreshToken API (msal-browser and msal-node).
+     * Used to renew an access token using a refresh token against the token endpoint.
+     */
+    PerformanceEvents["AcquireTokenByRefreshToken"] = "acquireTokenByRefreshToken";
+    /**
+     * acquireTokenSilent API (msal-browser and msal-node).
+     * Used to silently acquire a new access token (from the cache or the network).
+     */
+    PerformanceEvents["AcquireTokenSilent"] = "acquireTokenSilent";
+    /**
+     * acquireTokenSilentAsync (msal-browser).
+     * Internal API for acquireTokenSilent.
+     */
+    PerformanceEvents["AcquireTokenSilentAsync"] = "acquireTokenSilentAsync";
+    /**
+     * acquireTokenPopup (msal-browser).
+     * Used to acquire a new access token interactively through pop ups
+     */
+    PerformanceEvents["AcquireTokenPopup"] = "acquireTokenPopup";
+    /**
+     * getPublicKeyThumbprint API in CryptoOpts class (msal-browser).
+     * Used to generate a public/private keypair and generate a public key thumbprint for pop requests.
+     */
+    PerformanceEvents["CryptoOptsGetPublicKeyThumbprint"] = "cryptoOptsGetPublicKeyThumbprint";
+    /**
+     * signJwt API in CryptoOpts class (msal-browser).
+     * Used to signed a pop token.
+     */
+    PerformanceEvents["CryptoOptsSignJwt"] = "cryptoOptsSignJwt";
+    /**
+     * acquireToken API in the SilentCacheClient class (msal-browser).
+     * Used to read access tokens from the cache.
+     */
+    PerformanceEvents["SilentCacheClientAcquireToken"] = "silentCacheClientAcquireToken";
+    /**
+     * acquireToken API in the SilentIframeClient class (msal-browser).
+     * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.
+     */
+    PerformanceEvents["SilentIframeClientAcquireToken"] = "silentIframeClientAcquireToken";
+    /**
+     * acquireToken API in SilentRereshClient (msal-browser).
+     * Used to acquire a new set of tokens from the token endpoint using a refresh token.
+     */
+    PerformanceEvents["SilentRefreshClientAcquireToken"] = "silentRefreshClientAcquireToken";
+    /**
+     * ssoSilent API (msal-browser).
+     * Used to silently acquire an authorization code and set of tokens using a hidden iframe.
+     */
+    PerformanceEvents["SsoSilent"] = "ssoSilent";
+    /**
+     * getDiscoveredAuthority API in StandardInteractionClient class (msal-browser).
+     * Used to load authority metadata for a request.
+     */
+    PerformanceEvents["StandardInteractionClientGetDiscoveredAuthority"] = "standardInteractionClientGetDiscoveredAuthority";
+    /**
+     * acquireToken APIs in msal-browser.
+     * Used to make an /authorize endpoint call with native brokering enabled.
+     */
+    PerformanceEvents["FetchAccountIdWithNativeBroker"] = "fetchAccountIdWithNativeBroker";
+    /**
+     * acquireToken API in NativeInteractionClient class (msal-browser).
+     * Used to acquire a token from Native component when native brokering is enabled.
+     */
+    PerformanceEvents["NativeInteractionClientAcquireToken"] = "nativeInteractionClientAcquireToken";
+    /**
+     * Time spent on the network for refresh token acquisition
+     */
+    PerformanceEvents["RefreshTokenClientExecuteTokenRequest"] = "refreshTokenClientExecuteTokenRequest";
+    /**
+     * Time spent creating default headers for requests to token endpoint
+     */
+    PerformanceEvents["BaseClientCreateTokenRequestHeaders"] = "baseClientCreateTokenRequestHeaders";
+    /**
+     * Used to measure the time taken for completing embedded-broker handshake (PW-Broker).
+     */
+    PerformanceEvents["BrokerHandhshake"] = "brokerHandshake";
+    /**
+     * acquireTokenByRefreshToken API in BrokerClientApplication (PW-Broker) .
+     */
+    PerformanceEvents["AcquireTokenByRefreshTokenInBroker"] = "acquireTokenByRefreshTokenInBroker";
+    /**
+     * acquireToken API in BrokerClientApplication.
+     * Used to acquire a token on behalf of the embedded application (PW-Broker).
+     */
+    PerformanceEvents["AcquireTokenByBroker"] = "acquireTokenByBroker";
+})(exports.PerformanceEvents || (exports.PerformanceEvents = {}));
+/**
+ * State of the performance event.
+ *
+ * @export
+ * @enum {number}
+ */
+var PerformanceEventStatus;
+(function (PerformanceEventStatus) {
+    PerformanceEventStatus[PerformanceEventStatus["NotStarted"] = 0] = "NotStarted";
+    PerformanceEventStatus[PerformanceEventStatus["InProgress"] = 1] = "InProgress";
+    PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
+})(PerformanceEventStatus || (PerformanceEventStatus = {}));
+
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5693,8 +5853,8 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
  */
 var RefreshTokenClient = /** @class */ (function (_super) {
     __extends(RefreshTokenClient, _super);
-    function RefreshTokenClient(configuration) {
-        return _super.call(this, configuration) || this;
+    function RefreshTokenClient(configuration, performanceClient) {
+        return _super.call(this, configuration, performanceClient) || this;
     }
     RefreshTokenClient.prototype.acquireToken = function (request) {
         return __awaiter(this, void 0, void 0, function () {
@@ -5780,13 +5940,16 @@ var RefreshTokenClient = /** @class */ (function (_super) {
      * @param authority
      */
     RefreshTokenClient.prototype.executeTokenRequest = function (request, authority) {
+        var _a;
         return __awaiter(this, void 0, void 0, function () {
-            var requestBody, queryParameters, headers, thumbprint, endpoint;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.createTokenRequestBody(request)];
+            var acquireTokenMeasurement, requestBody, queryParameters, headers, thumbprint, endpoint;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        acquireTokenMeasurement = (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.startMeasurement(exports.PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
+                        return [4 /*yield*/, this.createTokenRequestBody(request)];
                     case 1:
-                        requestBody = _a.sent();
+                        requestBody = _b.sent();
                         queryParameters = this.createTokenQueryParameters(request);
                         headers = this.createTokenRequestHeaders(request.ccsCredential);
                         thumbprint = {
@@ -5801,7 +5964,19 @@ var RefreshTokenClient = /** @class */ (function (_super) {
                             sshKid: request.sshKid
                         };
                         endpoint = UrlString.appendQueryString(authority.tokenEndpoint, queryParameters);
-                        return [2 /*return*/, this.executePostToTokenEndpoint(endpoint, requestBody, headers, thumbprint)];
+                        return [2 /*return*/, this.executePostToTokenEndpoint(endpoint, requestBody, headers, thumbprint)
+                                .then(function (result) {
+                                acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                    success: true
+                                });
+                                return result;
+                            })
+                                .catch(function (error) {
+                                acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                    success: false
+                                });
+                                throw error;
+                            })];
                 }
             });
         });
@@ -5822,11 +5997,14 @@ var RefreshTokenClient = /** @class */ (function (_super) {
      * @param request
      */
     RefreshTokenClient.prototype.createTokenRequestBody = function (request) {
+        var _a;
         return __awaiter(this, void 0, void 0, function () {
-            var parameterBuilder, correlationId, clientAssertion, popTokenGenerator, reqCnfData, clientInfo;
-            return __generator(this, function (_a) {
-                switch (_a.label) {
+            var correlationId, acquireTokenMeasurement, parameterBuilder, clientAssertion, popTokenGenerator, reqCnfData, clientInfo;
+            return __generator(this, function (_b) {
+                switch (_b.label) {
                     case 0:
+                        correlationId = request.correlationId;
+                        acquireTokenMeasurement = (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.startMeasurement(exports.PerformanceEvents.BaseClientCreateTokenRequestHeaders, correlationId);
                         parameterBuilder = new RequestParameterBuilder();
                         parameterBuilder.addClientId(this.config.authOptions.clientId);
                         parameterBuilder.addScopes(request.scopes);
@@ -5838,7 +6016,6 @@ var RefreshTokenClient = /** @class */ (function (_super) {
                         if (this.serverTelemetryManager) {
                             parameterBuilder.addServerTelemetry(this.serverTelemetryManager);
                         }
-                        correlationId = request.correlationId || this.config.cryptoInterface.createNewGuid();
                         parameterBuilder.addCorrelationId(correlationId);
                         parameterBuilder.addRefreshToken(request.refreshToken);
                         if (this.config.clientCredentials.clientSecret) {
@@ -5853,7 +6030,7 @@ var RefreshTokenClient = /** @class */ (function (_super) {
                         popTokenGenerator = new PopTokenGenerator(this.cryptoUtils);
                         return [4 /*yield*/, popTokenGenerator.generateCnf(request)];
                     case 1:
-                        reqCnfData = _a.sent();
+                        reqCnfData = _b.sent();
                         // SPA PoP requires full Base64Url encoded req_cnf string (unhashed)
                         parameterBuilder.addPopToken(reqCnfData.reqCnfString);
                         return [3 /*break*/, 3];
@@ -5863,10 +6040,13 @@ var RefreshTokenClient = /** @class */ (function (_super) {
                                 parameterBuilder.addSshJwk(request.sshJwk);
                             }
                             else {
+                                acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                    success: false
+                                });
                                 throw ClientConfigurationError.createMissingSshJwkError();
                             }
                         }
-                        _a.label = 3;
+                        _b.label = 3;
                     case 3:
                         if (!StringUtils.isEmptyObj(request.claims) || this.config.authOptions.clientCapabilities && this.config.authOptions.clientCapabilities.length > 0) {
                             parameterBuilder.addClaims(request.claims, this.config.authOptions.clientCapabilities);
@@ -5887,6 +6067,9 @@ var RefreshTokenClient = /** @class */ (function (_super) {
                                     break;
                             }
                         }
+                        acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                            success: true
+                        });
                         return [2 /*return*/, parameterBuilder.createQueryString()];
                 }
             });
@@ -5895,7 +6078,7 @@ var RefreshTokenClient = /** @class */ (function (_super) {
     return RefreshTokenClient;
 }(BaseClient));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5903,8 +6086,8 @@ var RefreshTokenClient = /** @class */ (function (_super) {
  */
 var SilentFlowClient = /** @class */ (function (_super) {
     __extends(SilentFlowClient, _super);
-    function SilentFlowClient(configuration) {
-        return _super.call(this, configuration) || this;
+    function SilentFlowClient(configuration, performanceClient) {
+        return _super.call(this, configuration, performanceClient) || this;
     }
     /**
      * Retrieves a token from cache if it is still valid, or uses the cached refresh token to renew
@@ -5923,7 +6106,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
                     case 2:
                         e_1 = _a.sent();
                         if (e_1 instanceof ClientAuthError && e_1.errorCode === ClientAuthErrorMessage.tokenRefreshRequired.code) {
-                            refreshTokenClient = new RefreshTokenClient(this.config);
+                            refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
                             return [2 /*return*/, refreshTokenClient.acquireTokenByRefreshToken(request)];
                         }
                         else {
@@ -6011,7 +6194,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
     return SilentFlowClient;
 }(BaseClient));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6023,7 +6206,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6032,7 +6215,7 @@ var rawMetdataJSON = { "endpointMetadata": { "https://login.microsoftonline.com/
 var EndpointMetadata = rawMetdataJSON.endpointMetadata;
 var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6046,7 +6229,7 @@ exports.ProtocolMode = void 0;
     ProtocolMode["OIDC"] = "OIDC";
 })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6123,7 +6306,7 @@ var AuthorityMetadataEntity = /** @class */ (function () {
     return AuthorityMetadataEntity;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6133,7 +6316,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6255,7 +6438,7 @@ var RegionDiscovery = /** @class */ (function () {
     return RegionDiscovery;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6917,7 +7100,7 @@ var Authority = /** @class */ (function () {
     return Authority;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6978,7 +7161,7 @@ var AuthorityFactory = /** @class */ (function () {
     return AuthorityFactory;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7009,7 +7192,7 @@ var ServerTelemetryEntity = /** @class */ (function () {
     return ServerTelemetryEntity;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7037,7 +7220,7 @@ var ThrottlingEntity = /** @class */ (function () {
     return ThrottlingEntity;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7054,7 +7237,7 @@ var StubbedNetworkModule = {
     }
 };
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7099,7 +7282,7 @@ var JoseHeaderError = /** @class */ (function (_super) {
     return JoseHeaderError;
 }(AuthError));
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7139,7 +7322,7 @@ var JoseHeader = /** @class */ (function () {
     return JoseHeader;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7198,7 +7381,7 @@ var AuthenticationHeaderParser = /** @class */ (function () {
     return AuthenticationHeaderParser;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7360,117 +7543,7 @@ var ServerTelemetryManager = /** @class */ (function () {
     return ServerTelemetryManager;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * Enumeration of operations that are instrumented by have their performance measured by the PerformanceClient.
- *
- * @export
- * @enum {number}
- */
-exports.PerformanceEvents = void 0;
-(function (PerformanceEvents) {
-    /**
-     * acquireTokenByCode API (msal-browser and msal-node).
-     * Used to acquire tokens by trading an authorization code against the token endpoint.
-     */
-    PerformanceEvents["AcquireTokenByCode"] = "acquireTokenByCode";
-    /**
-     * acquireTokenByRefreshToken API (msal-browser and msal-node).
-     * Used to renew an access token using a refresh token against the token endpoint.
-     */
-    PerformanceEvents["AcquireTokenByRefreshToken"] = "acquireTokenByRefreshToken";
-    /**
-     * acquireTokenSilent API (msal-browser and msal-node).
-     * Used to silently acquire a new access token (from the cache or the network).
-     */
-    PerformanceEvents["AcquireTokenSilent"] = "acquireTokenSilent";
-    /**
-     * acquireTokenSilentAsync (msal-browser).
-     * Internal API for acquireTokenSilent.
-     */
-    PerformanceEvents["AcquireTokenSilentAsync"] = "acquireTokenSilentAsync";
-    /**
-     * acquireTokenPopup (msal-browser).
-     * Used to acquire a new access token interactively through pop ups
-     */
-    PerformanceEvents["AcquireTokenPopup"] = "acquireTokenPopup";
-    /**
-     * getPublicKeyThumbprint API in CryptoOpts class (msal-browser).
-     * Used to generate a public/private keypair and generate a public key thumbprint for pop requests.
-     */
-    PerformanceEvents["CryptoOptsGetPublicKeyThumbprint"] = "cryptoOptsGetPublicKeyThumbprint";
-    /**
-     * signJwt API in CryptoOpts class (msal-browser).
-     * Used to signed a pop token.
-     */
-    PerformanceEvents["CryptoOptsSignJwt"] = "cryptoOptsSignJwt";
-    /**
-     * acquireToken API in the SilentCacheClient class (msal-browser).
-     * Used to read access tokens from the cache.
-     */
-    PerformanceEvents["SilentCacheClientAcquireToken"] = "silentCacheClientAcquireToken";
-    /**
-     * acquireToken API in the SilentIframeClient class (msal-browser).
-     * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.
-     */
-    PerformanceEvents["SilentIframeClientAcquireToken"] = "silentIframeClientAcquireToken";
-    /**
-     * acquireToken API in SilentRereshClient (msal-browser).
-     * Used to acquire a new set of tokens from the token endpoint using a refresh token.
-     */
-    PerformanceEvents["SilentRefreshClientAcquireToken"] = "silentRefreshClientAcquireToken";
-    /**
-     * ssoSilent API (msal-browser).
-     * Used to silently acquire an authorization code and set of tokens using a hidden iframe.
-     */
-    PerformanceEvents["SsoSilent"] = "ssoSilent";
-    /**
-     * getDiscoveredAuthority API in StandardInteractionClient class (msal-browser).
-     * Used to load authority metadata for a request.
-     */
-    PerformanceEvents["StandardInteractionClientGetDiscoveredAuthority"] = "standardInteractionClientGetDiscoveredAuthority";
-    /**
-     * acquireToken APIs in msal-browser.
-     * Used to make an /authorize endpoint call with native brokering enabled.
-     */
-    PerformanceEvents["FetchAccountIdWithNativeBroker"] = "fetchAccountIdWithNativeBroker";
-    /**
-     * acquireToken API in NativeInteractionClient class (msal-browser).
-     * Used to acquire a token from Native component when native brokering is enabled.
-     */
-    PerformanceEvents["NativeInteractionClientAcquireToken"] = "nativeInteractionClientAcquireToken";
-    /**
-     * Used to measure the time taken for completing embedded-broker handshake (PW-Broker).
-     */
-    PerformanceEvents["BrokerHandhshake"] = "brokerHandshake";
-    /**
-     * acquireTokenByRefreshToken API in BrokerClientApplication (PW-Broker) .
-     */
-    PerformanceEvents["AcquireTokenByRefreshTokenInBroker"] = "acquireTokenByRefreshTokenInBroker";
-    /**
-     * acquireToken API in BrokerClientApplication.
-     * Used to acquire a token on behalf of the embedded application (PW-Broker).
-     */
-    PerformanceEvents["AcquireTokenByBroker"] = "acquireTokenByBroker";
-})(exports.PerformanceEvents || (exports.PerformanceEvents = {}));
-/**
- * State of the performance event.
- *
- * @export
- * @enum {number}
- */
-var PerformanceEventStatus;
-(function (PerformanceEventStatus) {
-    PerformanceEventStatus[PerformanceEventStatus["NotStarted"] = 0] = "NotStarted";
-    PerformanceEventStatus[PerformanceEventStatus["InProgress"] = 1] = "InProgress";
-    PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
-})(PerformanceEventStatus || (PerformanceEventStatus = {}));
-
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7746,7 +7819,7 @@ var PerformanceClient = /** @class */ (function () {
     return PerformanceClient;
 }());
 
-/*! @azure/msal-common v7.2.0 2022-07-18 */
+/*! @azure/msal-common v7.3.0 2022-08-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9574,7 +9647,7 @@ var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
 
 /* eslint-disable header/header */
 var name = "@azure/msal-browser";
-var version = "2.28.0";
+var version = "2.28.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10895,7 +10968,7 @@ var SilentCacheClient = /** @class */ (function (_super) {
                     case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];
                     case 1:
                         clientConfig = _a.sent();
-                        return [2 /*return*/, new SilentFlowClient(clientConfig)];
+                        return [2 /*return*/, new SilentFlowClient(clientConfig, this.performanceClient)];
                 }
             });
         });
@@ -11004,7 +11077,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
         return {
             authority: request.authority,
             correlationId: this.correlationId,
-            scopes: ScopeSet.fromString(request.scopes).asArray(),
+            scopes: ScopeSet.fromString(request.scope).asArray(),
             account: cachedAccount,
             forceRefresh: false,
         };
@@ -11170,7 +11243,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                         homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenObj);
                         accountEntity = AccountEntity.createAccount(response.client_info, homeAccountIdentifier, idTokenObj, undefined, undefined, undefined, authorityPreferredCache, response.account.id);
                         this.browserStorage.setAccount(accountEntity);
-                        responseScopes = response.scopes ? ScopeSet.fromString(response.scopes) : ScopeSet.fromString(request.scopes);
+                        responseScopes = response.scope ? ScopeSet.fromString(response.scope) : ScopeSet.fromString(request.scope);
                         accountProperties = response.account.properties || {};
                         uid = accountProperties["UID"] || idTokenObj.claims.oid || idTokenObj.claims.sub || Constants.EMPTY_STRING;
                         tid = accountProperties["TenantId"] || idTokenObj.claims.tid || Constants.EMPTY_STRING;
@@ -11258,7 +11331,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
             response.hasOwnProperty("id_token") &&
             response.hasOwnProperty("client_info") &&
             response.hasOwnProperty("account") &&
-            response.hasOwnProperty("scopes") &&
+            response.hasOwnProperty("scope") &&
             response.hasOwnProperty("expires_in")) {
             return response;
         }
@@ -11300,7 +11373,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
      */
     NativeInteractionClient.prototype.initializeNativeRequest = function (request) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var authority, canonicalAuthority, scopes, scopeSet, getPrompt, validatedRequest, shrParameters, popTokenGenerator, reqCnfData;
+            var authority, canonicalAuthority, scopes, remainingProperties, scopeSet, getPrompt, validatedRequest, shrParameters, popTokenGenerator, reqCnfData;
             var _this = this;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
@@ -11309,8 +11382,8 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                         authority = request.authority || this.config.auth.authority;
                         canonicalAuthority = new UrlString(authority);
                         canonicalAuthority.validateAsUri();
-                        scopes = request && request.scopes || [];
-                        scopeSet = new ScopeSet(scopes);
+                        scopes = request.scopes, remainingProperties = __rest(request, ["scopes"]);
+                        scopeSet = new ScopeSet(scopes || []);
                         scopeSet.appendScopes(OIDC_DEFAULT_SCOPES);
                         getPrompt = function () {
                             // If request is silent, prompt is always none
@@ -11337,7 +11410,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                                     throw BrowserAuthError.createNativePromptParameterNotSupportedError();
                             }
                         };
-                        validatedRequest = __assign$1(__assign$1({}, request), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scopes: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), prompt: getPrompt(), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), { telemetry: NativeConstants.MATS_TELEMETRY }), extendedExpiryToken: false // Make this configurable?
+                        validatedRequest = __assign$1(__assign$1({}, remainingProperties), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scope: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), prompt: getPrompt(), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), { telemetry: NativeConstants.MATS_TELEMETRY }), extendedExpiryToken: false // Make this configurable?
                          });
                         if (!(request.authenticationScheme === exports.AuthenticationScheme.POP)) return [3 /*break*/, 2];
                         shrParameters = {
@@ -12887,7 +12960,7 @@ var SilentRefreshClient = /** @class */ (function (_super) {
                     case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];
                     case 1:
                         clientConfig = _a.sent();
-                        return [2 /*return*/, new RefreshTokenClient(clientConfig)];
+                        return [2 /*return*/, new RefreshTokenClient(clientConfig, this.performanceClient)];
                 }
             });
         });