@azure/msal-browser 2.28.0 → 2.28.1

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.28.0 2022-07-18 */
+/*! @azure/msal-browser v2.28.1 2022-08-01 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -46,6 +46,18 @@
         return __assign$1.apply(this, arguments);
     };
 
+    function __rest(s, e) {
+        var t = {};
+        for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+            t[p] = s[p];
+        if (s != null && typeof Object.getOwnPropertySymbols === "function")
+            for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+                if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                    t[p[i]] = s[p[i]];
+            }
+        return t;
+    }
+
     function __awaiter$1(thisArg, _arguments, P, generator) {
         function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
         return new (P || (P = Promise))(function (resolve, reject) {
@@ -107,7 +119,7 @@
         return ar;
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*! *****************************************************************************
     Copyright (c) Microsoft Corporation.
 
@@ -194,7 +206,7 @@
         return r;
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -571,7 +583,7 @@
         JsonTypes["Jwk"] = "JWK";
     })(JsonTypes || (JsonTypes = {}));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -584,6 +596,10 @@
         unexpectedError: {
             code: "unexpected_error",
             desc: "Unexpected error in authentication."
+        },
+        postRequestFailed: {
+            code: "post_request_failed",
+            desc: "Post request failed from the network, could be a 4xx/5xx or a network unavailability. Please check the exact error code for details."
         }
     };
     /**
@@ -612,10 +628,18 @@
         AuthError.createUnexpectedError = function (errDesc) {
             return new AuthError(AuthErrorMessage.unexpectedError.code, AuthErrorMessage.unexpectedError.desc + ": " + errDesc);
         };
+        /**
+         * Creates an error for post request failures.
+         * @param errDesc
+         * @returns
+         */
+        AuthError.createPostRequestFailed = function (errDesc) {
+            return new AuthError(AuthErrorMessage.postRequestFailed.code, AuthErrorMessage.postRequestFailed.desc + ": " + errDesc);
+        };
         return AuthError;
     }(Error));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -690,7 +714,7 @@
         }
     };
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1162,7 +1186,7 @@
         return ClientAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1287,7 +1311,7 @@
         return StringUtils;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1467,12 +1491,12 @@
         return Logger;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /* eslint-disable header/header */
     var name$1 = "@azure/msal-common";
-    var version$1 = "7.2.0";
+    var version$1 = "7.3.0";
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1493,7 +1517,7 @@
         AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
     })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1652,7 +1676,7 @@
         return CredentialEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1907,7 +1931,7 @@
         return ClientConfigurationError;
     }(ClientAuthError));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2091,7 +2115,7 @@
         return ScopeSet;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2129,7 +2153,7 @@
         };
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2143,7 +2167,7 @@
         AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
     })(AuthorityType || (AuthorityType = {}));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2378,7 +2402,7 @@
         return AccountEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2416,7 +2440,7 @@
         return AuthToken;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3290,7 +3314,7 @@
         return DefaultStorageClass;
     }(CacheManager));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3384,7 +3408,7 @@
         return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3404,7 +3428,7 @@
         return ServerError;
     }(AuthError));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3500,7 +3524,7 @@
         return ThrottlingUtils;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3549,7 +3573,7 @@
         return NetworkManager;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3560,7 +3584,7 @@
         CcsCredentialType["UPN"] = "UPN";
     })(CcsCredentialType || (CcsCredentialType = {}));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3570,7 +3594,7 @@
      * Base application class which will construct requests to send to and handle responses from the Microsoft STS using the authorization code flow.
      */
     var BaseClient = /** @class */ (function () {
-        function BaseClient(configuration) {
+        function BaseClient(configuration, performanceClient) {
             // Set the configuration
             this.config = buildClientConfiguration(configuration);
             // Initialize the logger
@@ -3587,6 +3611,8 @@
             this.serverTelemetryManager = this.config.serverTelemetryManager;
             // set Authority
             this.authority = this.config.authOptions.authority;
+            // set performance telemetry client
+            this.performanceClient = performanceClient;
         }
         /**
          * Creates default headers for requests to token endpoint
@@ -3649,7 +3675,7 @@
         return BaseClient;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3735,7 +3761,7 @@
         return RequestValidator;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4113,7 +4139,7 @@
         return RequestParameterBuilder;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4177,7 +4203,7 @@
         return IdTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4227,7 +4253,7 @@
         return TimeUtils;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4341,7 +4367,7 @@
         return AccessTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4408,7 +4434,7 @@
         return RefreshTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4483,7 +4509,7 @@
         return InteractionRequiredAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4499,7 +4525,7 @@
         return CacheRecord;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4570,7 +4596,7 @@
         return ProtocolUtils;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4771,7 +4797,7 @@
         return UrlString;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4872,7 +4898,7 @@
         return PopTokenGenerator;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4942,7 +4968,7 @@
         return AppMetadataEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4978,7 +5004,7 @@
         return TokenCacheContext;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5249,7 +5275,7 @@
         return ResponseHandler;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5537,7 +5563,7 @@
          */
         AuthorizationCodeClient.prototype.createAuthCodeUrlQueryString = function (request) {
             return __awaiter(this, void 0, void 0, function () {
-                var parameterBuilder, requestScopes, correlationId, accountSid, clientInfo, clientInfo, popTokenGenerator, reqCnfData;
+                var parameterBuilder, requestScopes, correlationId, accountSid, accountLoginHintClaim, clientInfo, clientInfo, clientInfo, popTokenGenerator, reqCnfData;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
@@ -5567,7 +5593,7 @@
                             if (request.domainHint) {
                                 parameterBuilder.addDomainHint(request.domainHint);
                             }
-                            // Add sid or loginHint with preference for sid -> loginHint -> username of AccountInfo object
+                            // Add sid or loginHint with preference for login_hint claim (in request) -> sid -> loginHint (upn/email) -> username of AccountInfo object
                             if (request.prompt !== PromptValue.SELECT_ACCOUNT) {
                                 // AAD will throw if prompt=select_account is passed with an account hint
                                 if (request.sid && request.prompt === PromptValue.NONE) {
@@ -5577,9 +5603,24 @@
                                 }
                                 else if (request.account) {
                                     accountSid = this.extractAccountSid(request.account);
-                                    // If account and loginHint are provided, we will check account first for sid before adding loginHint
-                                    if (accountSid && request.prompt === PromptValue.NONE) {
-                                        // SessionId is only used in silent calls
+                                    accountLoginHintClaim = this.extractLoginHint(request.account);
+                                    // If login_hint claim is present, use it over sid/username
+                                    if (accountLoginHintClaim) {
+                                        this.logger.verbose("createAuthCodeUrlQueryString: login_hint claim present on account");
+                                        parameterBuilder.addLoginHint(accountLoginHintClaim);
+                                        try {
+                                            clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
+                                            parameterBuilder.addCcsOid(clientInfo);
+                                        }
+                                        catch (e) {
+                                            this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
+                                        }
+                                    }
+                                    else if (accountSid && request.prompt === PromptValue.NONE) {
+                                        /*
+                                         * If account and loginHint are provided, we will check account first for sid before adding loginHint
+                                         * SessionId is only used in silent calls
+                                         */
                                         this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from account");
                                         parameterBuilder.addSid(accountSid);
                                         try {
@@ -5587,7 +5628,7 @@
                                             parameterBuilder.addCcsOid(clientInfo);
                                         }
                                         catch (e) {
-                                            this.logger.verbose("Could not parse home account ID for CCS Header: " + e);
+                                            this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
                                         }
                                     }
                                     else if (request.loginHint) {
@@ -5604,7 +5645,7 @@
                                             parameterBuilder.addCcsOid(clientInfo);
                                         }
                                         catch (e) {
-                                            this.logger.verbose("Could not parse home account ID for CCS Header: " + e);
+                                            this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
                                         }
                                     }
                                 }
@@ -5675,16 +5716,135 @@
          * @param account
          */
         AuthorizationCodeClient.prototype.extractAccountSid = function (account) {
-            if (account.idTokenClaims) {
-                var tokenClaims = account.idTokenClaims;
-                return tokenClaims.sid || null;
-            }
-            return null;
+            var _a;
+            return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a.sid) || null;
+        };
+        AuthorizationCodeClient.prototype.extractLoginHint = function (account) {
+            var _a;
+            return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a.login_hint) || null;
         };
         return AuthorizationCodeClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    /**
+     * Enumeration of operations that are instrumented by have their performance measured by the PerformanceClient.
+     *
+     * @export
+     * @enum {number}
+     */
+    exports.PerformanceEvents = void 0;
+    (function (PerformanceEvents) {
+        /**
+         * acquireTokenByCode API (msal-browser and msal-node).
+         * Used to acquire tokens by trading an authorization code against the token endpoint.
+         */
+        PerformanceEvents["AcquireTokenByCode"] = "acquireTokenByCode";
+        /**
+         * acquireTokenByRefreshToken API (msal-browser and msal-node).
+         * Used to renew an access token using a refresh token against the token endpoint.
+         */
+        PerformanceEvents["AcquireTokenByRefreshToken"] = "acquireTokenByRefreshToken";
+        /**
+         * acquireTokenSilent API (msal-browser and msal-node).
+         * Used to silently acquire a new access token (from the cache or the network).
+         */
+        PerformanceEvents["AcquireTokenSilent"] = "acquireTokenSilent";
+        /**
+         * acquireTokenSilentAsync (msal-browser).
+         * Internal API for acquireTokenSilent.
+         */
+        PerformanceEvents["AcquireTokenSilentAsync"] = "acquireTokenSilentAsync";
+        /**
+         * acquireTokenPopup (msal-browser).
+         * Used to acquire a new access token interactively through pop ups
+         */
+        PerformanceEvents["AcquireTokenPopup"] = "acquireTokenPopup";
+        /**
+         * getPublicKeyThumbprint API in CryptoOpts class (msal-browser).
+         * Used to generate a public/private keypair and generate a public key thumbprint for pop requests.
+         */
+        PerformanceEvents["CryptoOptsGetPublicKeyThumbprint"] = "cryptoOptsGetPublicKeyThumbprint";
+        /**
+         * signJwt API in CryptoOpts class (msal-browser).
+         * Used to signed a pop token.
+         */
+        PerformanceEvents["CryptoOptsSignJwt"] = "cryptoOptsSignJwt";
+        /**
+         * acquireToken API in the SilentCacheClient class (msal-browser).
+         * Used to read access tokens from the cache.
+         */
+        PerformanceEvents["SilentCacheClientAcquireToken"] = "silentCacheClientAcquireToken";
+        /**
+         * acquireToken API in the SilentIframeClient class (msal-browser).
+         * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.
+         */
+        PerformanceEvents["SilentIframeClientAcquireToken"] = "silentIframeClientAcquireToken";
+        /**
+         * acquireToken API in SilentRereshClient (msal-browser).
+         * Used to acquire a new set of tokens from the token endpoint using a refresh token.
+         */
+        PerformanceEvents["SilentRefreshClientAcquireToken"] = "silentRefreshClientAcquireToken";
+        /**
+         * ssoSilent API (msal-browser).
+         * Used to silently acquire an authorization code and set of tokens using a hidden iframe.
+         */
+        PerformanceEvents["SsoSilent"] = "ssoSilent";
+        /**
+         * getDiscoveredAuthority API in StandardInteractionClient class (msal-browser).
+         * Used to load authority metadata for a request.
+         */
+        PerformanceEvents["StandardInteractionClientGetDiscoveredAuthority"] = "standardInteractionClientGetDiscoveredAuthority";
+        /**
+         * acquireToken APIs in msal-browser.
+         * Used to make an /authorize endpoint call with native brokering enabled.
+         */
+        PerformanceEvents["FetchAccountIdWithNativeBroker"] = "fetchAccountIdWithNativeBroker";
+        /**
+         * acquireToken API in NativeInteractionClient class (msal-browser).
+         * Used to acquire a token from Native component when native brokering is enabled.
+         */
+        PerformanceEvents["NativeInteractionClientAcquireToken"] = "nativeInteractionClientAcquireToken";
+        /**
+         * Time spent on the network for refresh token acquisition
+         */
+        PerformanceEvents["RefreshTokenClientExecuteTokenRequest"] = "refreshTokenClientExecuteTokenRequest";
+        /**
+         * Time spent creating default headers for requests to token endpoint
+         */
+        PerformanceEvents["BaseClientCreateTokenRequestHeaders"] = "baseClientCreateTokenRequestHeaders";
+        /**
+         * Used to measure the time taken for completing embedded-broker handshake (PW-Broker).
+         */
+        PerformanceEvents["BrokerHandhshake"] = "brokerHandshake";
+        /**
+         * acquireTokenByRefreshToken API in BrokerClientApplication (PW-Broker) .
+         */
+        PerformanceEvents["AcquireTokenByRefreshTokenInBroker"] = "acquireTokenByRefreshTokenInBroker";
+        /**
+         * acquireToken API in BrokerClientApplication.
+         * Used to acquire a token on behalf of the embedded application (PW-Broker).
+         */
+        PerformanceEvents["AcquireTokenByBroker"] = "acquireTokenByBroker";
+    })(exports.PerformanceEvents || (exports.PerformanceEvents = {}));
+    /**
+     * State of the performance event.
+     *
+     * @export
+     * @enum {number}
+     */
+    var PerformanceEventStatus;
+    (function (PerformanceEventStatus) {
+        PerformanceEventStatus[PerformanceEventStatus["NotStarted"] = 0] = "NotStarted";
+        PerformanceEventStatus[PerformanceEventStatus["InProgress"] = 1] = "InProgress";
+        PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
+    })(PerformanceEventStatus || (PerformanceEventStatus = {}));
+
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5695,8 +5855,8 @@
      */
     var RefreshTokenClient = /** @class */ (function (_super) {
         __extends(RefreshTokenClient, _super);
-        function RefreshTokenClient(configuration) {
-            return _super.call(this, configuration) || this;
+        function RefreshTokenClient(configuration, performanceClient) {
+            return _super.call(this, configuration, performanceClient) || this;
         }
         RefreshTokenClient.prototype.acquireToken = function (request) {
             return __awaiter(this, void 0, void 0, function () {
@@ -5782,13 +5942,16 @@
          * @param authority
          */
         RefreshTokenClient.prototype.executeTokenRequest = function (request, authority) {
+            var _a;
             return __awaiter(this, void 0, void 0, function () {
-                var requestBody, queryParameters, headers, thumbprint, endpoint;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.createTokenRequestBody(request)];
+                var acquireTokenMeasurement, requestBody, queryParameters, headers, thumbprint, endpoint;
+                return __generator(this, function (_b) {
+                    switch (_b.label) {
+                        case 0:
+                            acquireTokenMeasurement = (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.startMeasurement(exports.PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
+                            return [4 /*yield*/, this.createTokenRequestBody(request)];
                         case 1:
-                            requestBody = _a.sent();
+                            requestBody = _b.sent();
                             queryParameters = this.createTokenQueryParameters(request);
                             headers = this.createTokenRequestHeaders(request.ccsCredential);
                             thumbprint = {
@@ -5803,7 +5966,19 @@
                                 sshKid: request.sshKid
                             };
                             endpoint = UrlString.appendQueryString(authority.tokenEndpoint, queryParameters);
-                            return [2 /*return*/, this.executePostToTokenEndpoint(endpoint, requestBody, headers, thumbprint)];
+                            return [2 /*return*/, this.executePostToTokenEndpoint(endpoint, requestBody, headers, thumbprint)
+                                    .then(function (result) {
+                                    acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                        success: true
+                                    });
+                                    return result;
+                                })
+                                    .catch(function (error) {
+                                    acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                        success: false
+                                    });
+                                    throw error;
+                                })];
                     }
                 });
             });
@@ -5824,11 +5999,14 @@
          * @param request
          */
         RefreshTokenClient.prototype.createTokenRequestBody = function (request) {
+            var _a;
             return __awaiter(this, void 0, void 0, function () {
-                var parameterBuilder, correlationId, clientAssertion, popTokenGenerator, reqCnfData, clientInfo;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
+                var correlationId, acquireTokenMeasurement, parameterBuilder, clientAssertion, popTokenGenerator, reqCnfData, clientInfo;
+                return __generator(this, function (_b) {
+                    switch (_b.label) {
                         case 0:
+                            correlationId = request.correlationId;
+                            acquireTokenMeasurement = (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.startMeasurement(exports.PerformanceEvents.BaseClientCreateTokenRequestHeaders, correlationId);
                             parameterBuilder = new RequestParameterBuilder();
                             parameterBuilder.addClientId(this.config.authOptions.clientId);
                             parameterBuilder.addScopes(request.scopes);
@@ -5840,7 +6018,6 @@
                             if (this.serverTelemetryManager) {
                                 parameterBuilder.addServerTelemetry(this.serverTelemetryManager);
                             }
-                            correlationId = request.correlationId || this.config.cryptoInterface.createNewGuid();
                             parameterBuilder.addCorrelationId(correlationId);
                             parameterBuilder.addRefreshToken(request.refreshToken);
                             if (this.config.clientCredentials.clientSecret) {
@@ -5855,7 +6032,7 @@
                             popTokenGenerator = new PopTokenGenerator(this.cryptoUtils);
                             return [4 /*yield*/, popTokenGenerator.generateCnf(request)];
                         case 1:
-                            reqCnfData = _a.sent();
+                            reqCnfData = _b.sent();
                             // SPA PoP requires full Base64Url encoded req_cnf string (unhashed)
                             parameterBuilder.addPopToken(reqCnfData.reqCnfString);
                             return [3 /*break*/, 3];
@@ -5865,10 +6042,13 @@
                                     parameterBuilder.addSshJwk(request.sshJwk);
                                 }
                                 else {
+                                    acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                        success: false
+                                    });
                                     throw ClientConfigurationError.createMissingSshJwkError();
                                 }
                             }
-                            _a.label = 3;
+                            _b.label = 3;
                         case 3:
                             if (!StringUtils.isEmptyObj(request.claims) || this.config.authOptions.clientCapabilities && this.config.authOptions.clientCapabilities.length > 0) {
                                 parameterBuilder.addClaims(request.claims, this.config.authOptions.clientCapabilities);
@@ -5889,6 +6069,9 @@
                                         break;
                                 }
                             }
+                            acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                success: true
+                            });
                             return [2 /*return*/, parameterBuilder.createQueryString()];
                     }
                 });
@@ -5897,7 +6080,7 @@
         return RefreshTokenClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5905,8 +6088,8 @@
      */
     var SilentFlowClient = /** @class */ (function (_super) {
         __extends(SilentFlowClient, _super);
-        function SilentFlowClient(configuration) {
-            return _super.call(this, configuration) || this;
+        function SilentFlowClient(configuration, performanceClient) {
+            return _super.call(this, configuration, performanceClient) || this;
         }
         /**
          * Retrieves a token from cache if it is still valid, or uses the cached refresh token to renew
@@ -5925,7 +6108,7 @@
                         case 2:
                             e_1 = _a.sent();
                             if (e_1 instanceof ClientAuthError && e_1.errorCode === ClientAuthErrorMessage.tokenRefreshRequired.code) {
-                                refreshTokenClient = new RefreshTokenClient(this.config);
+                                refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
                                 return [2 /*return*/, refreshTokenClient.acquireTokenByRefreshToken(request)];
                             }
                             else {
@@ -6013,7 +6196,7 @@
         return SilentFlowClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6025,7 +6208,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6034,7 +6217,7 @@
     var EndpointMetadata = rawMetdataJSON.endpointMetadata;
     var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6048,7 +6231,7 @@
         ProtocolMode["OIDC"] = "OIDC";
     })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6125,7 +6308,7 @@
         return AuthorityMetadataEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6135,7 +6318,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6257,7 +6440,7 @@
         return RegionDiscovery;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6919,7 +7102,7 @@
         return Authority;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6980,7 +7163,7 @@
         return AuthorityFactory;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7011,7 +7194,7 @@
         return ServerTelemetryEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7039,7 +7222,7 @@
         return ThrottlingEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7056,7 +7239,7 @@
         }
     };
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7101,7 +7284,7 @@
         return JoseHeaderError;
     }(AuthError));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7141,7 +7324,7 @@
         return JoseHeader;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7200,7 +7383,7 @@
         return AuthenticationHeaderParser;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7362,117 +7545,7 @@
         return ServerTelemetryManager;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    /**
-     * Enumeration of operations that are instrumented by have their performance measured by the PerformanceClient.
-     *
-     * @export
-     * @enum {number}
-     */
-    exports.PerformanceEvents = void 0;
-    (function (PerformanceEvents) {
-        /**
-         * acquireTokenByCode API (msal-browser and msal-node).
-         * Used to acquire tokens by trading an authorization code against the token endpoint.
-         */
-        PerformanceEvents["AcquireTokenByCode"] = "acquireTokenByCode";
-        /**
-         * acquireTokenByRefreshToken API (msal-browser and msal-node).
-         * Used to renew an access token using a refresh token against the token endpoint.
-         */
-        PerformanceEvents["AcquireTokenByRefreshToken"] = "acquireTokenByRefreshToken";
-        /**
-         * acquireTokenSilent API (msal-browser and msal-node).
-         * Used to silently acquire a new access token (from the cache or the network).
-         */
-        PerformanceEvents["AcquireTokenSilent"] = "acquireTokenSilent";
-        /**
-         * acquireTokenSilentAsync (msal-browser).
-         * Internal API for acquireTokenSilent.
-         */
-        PerformanceEvents["AcquireTokenSilentAsync"] = "acquireTokenSilentAsync";
-        /**
-         * acquireTokenPopup (msal-browser).
-         * Used to acquire a new access token interactively through pop ups
-         */
-        PerformanceEvents["AcquireTokenPopup"] = "acquireTokenPopup";
-        /**
-         * getPublicKeyThumbprint API in CryptoOpts class (msal-browser).
-         * Used to generate a public/private keypair and generate a public key thumbprint for pop requests.
-         */
-        PerformanceEvents["CryptoOptsGetPublicKeyThumbprint"] = "cryptoOptsGetPublicKeyThumbprint";
-        /**
-         * signJwt API in CryptoOpts class (msal-browser).
-         * Used to signed a pop token.
-         */
-        PerformanceEvents["CryptoOptsSignJwt"] = "cryptoOptsSignJwt";
-        /**
-         * acquireToken API in the SilentCacheClient class (msal-browser).
-         * Used to read access tokens from the cache.
-         */
-        PerformanceEvents["SilentCacheClientAcquireToken"] = "silentCacheClientAcquireToken";
-        /**
-         * acquireToken API in the SilentIframeClient class (msal-browser).
-         * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.
-         */
-        PerformanceEvents["SilentIframeClientAcquireToken"] = "silentIframeClientAcquireToken";
-        /**
-         * acquireToken API in SilentRereshClient (msal-browser).
-         * Used to acquire a new set of tokens from the token endpoint using a refresh token.
-         */
-        PerformanceEvents["SilentRefreshClientAcquireToken"] = "silentRefreshClientAcquireToken";
-        /**
-         * ssoSilent API (msal-browser).
-         * Used to silently acquire an authorization code and set of tokens using a hidden iframe.
-         */
-        PerformanceEvents["SsoSilent"] = "ssoSilent";
-        /**
-         * getDiscoveredAuthority API in StandardInteractionClient class (msal-browser).
-         * Used to load authority metadata for a request.
-         */
-        PerformanceEvents["StandardInteractionClientGetDiscoveredAuthority"] = "standardInteractionClientGetDiscoveredAuthority";
-        /**
-         * acquireToken APIs in msal-browser.
-         * Used to make an /authorize endpoint call with native brokering enabled.
-         */
-        PerformanceEvents["FetchAccountIdWithNativeBroker"] = "fetchAccountIdWithNativeBroker";
-        /**
-         * acquireToken API in NativeInteractionClient class (msal-browser).
-         * Used to acquire a token from Native component when native brokering is enabled.
-         */
-        PerformanceEvents["NativeInteractionClientAcquireToken"] = "nativeInteractionClientAcquireToken";
-        /**
-         * Used to measure the time taken for completing embedded-broker handshake (PW-Broker).
-         */
-        PerformanceEvents["BrokerHandhshake"] = "brokerHandshake";
-        /**
-         * acquireTokenByRefreshToken API in BrokerClientApplication (PW-Broker) .
-         */
-        PerformanceEvents["AcquireTokenByRefreshTokenInBroker"] = "acquireTokenByRefreshTokenInBroker";
-        /**
-         * acquireToken API in BrokerClientApplication.
-         * Used to acquire a token on behalf of the embedded application (PW-Broker).
-         */
-        PerformanceEvents["AcquireTokenByBroker"] = "acquireTokenByBroker";
-    })(exports.PerformanceEvents || (exports.PerformanceEvents = {}));
-    /**
-     * State of the performance event.
-     *
-     * @export
-     * @enum {number}
-     */
-    var PerformanceEventStatus;
-    (function (PerformanceEventStatus) {
-        PerformanceEventStatus[PerformanceEventStatus["NotStarted"] = 0] = "NotStarted";
-        PerformanceEventStatus[PerformanceEventStatus["InProgress"] = 1] = "InProgress";
-        PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
-    })(PerformanceEventStatus || (PerformanceEventStatus = {}));
-
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7748,7 +7821,7 @@
         return PerformanceClient;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.3.0 2022-08-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9576,7 +9649,7 @@
 
     /* eslint-disable header/header */
     var name = "@azure/msal-browser";
-    var version = "2.28.0";
+    var version = "2.28.1";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10897,7 +10970,7 @@
                         case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];
                         case 1:
                             clientConfig = _a.sent();
-                            return [2 /*return*/, new SilentFlowClient(clientConfig)];
+                            return [2 /*return*/, new SilentFlowClient(clientConfig, this.performanceClient)];
                     }
                 });
             });
@@ -11006,7 +11079,7 @@
             return {
                 authority: request.authority,
                 correlationId: this.correlationId,
-                scopes: ScopeSet.fromString(request.scopes).asArray(),
+                scopes: ScopeSet.fromString(request.scope).asArray(),
                 account: cachedAccount,
                 forceRefresh: false,
             };
@@ -11172,7 +11245,7 @@
                             homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenObj);
                             accountEntity = AccountEntity.createAccount(response.client_info, homeAccountIdentifier, idTokenObj, undefined, undefined, undefined, authorityPreferredCache, response.account.id);
                             this.browserStorage.setAccount(accountEntity);
-                            responseScopes = response.scopes ? ScopeSet.fromString(response.scopes) : ScopeSet.fromString(request.scopes);
+                            responseScopes = response.scope ? ScopeSet.fromString(response.scope) : ScopeSet.fromString(request.scope);
                             accountProperties = response.account.properties || {};
                             uid = accountProperties["UID"] || idTokenObj.claims.oid || idTokenObj.claims.sub || Constants.EMPTY_STRING;
                             tid = accountProperties["TenantId"] || idTokenObj.claims.tid || Constants.EMPTY_STRING;
@@ -11260,7 +11333,7 @@
                 response.hasOwnProperty("id_token") &&
                 response.hasOwnProperty("client_info") &&
                 response.hasOwnProperty("account") &&
-                response.hasOwnProperty("scopes") &&
+                response.hasOwnProperty("scope") &&
                 response.hasOwnProperty("expires_in")) {
                 return response;
             }
@@ -11302,7 +11375,7 @@
          */
         NativeInteractionClient.prototype.initializeNativeRequest = function (request) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var authority, canonicalAuthority, scopes, scopeSet, getPrompt, validatedRequest, shrParameters, popTokenGenerator, reqCnfData;
+                var authority, canonicalAuthority, scopes, remainingProperties, scopeSet, getPrompt, validatedRequest, shrParameters, popTokenGenerator, reqCnfData;
                 var _this = this;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
@@ -11311,8 +11384,8 @@
                             authority = request.authority || this.config.auth.authority;
                             canonicalAuthority = new UrlString(authority);
                             canonicalAuthority.validateAsUri();
-                            scopes = request && request.scopes || [];
-                            scopeSet = new ScopeSet(scopes);
+                            scopes = request.scopes, remainingProperties = __rest(request, ["scopes"]);
+                            scopeSet = new ScopeSet(scopes || []);
                             scopeSet.appendScopes(OIDC_DEFAULT_SCOPES);
                             getPrompt = function () {
                                 // If request is silent, prompt is always none
@@ -11339,7 +11412,7 @@
                                         throw BrowserAuthError.createNativePromptParameterNotSupportedError();
                                 }
                             };
-                            validatedRequest = __assign$1(__assign$1({}, request), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scopes: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), prompt: getPrompt(), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), { telemetry: NativeConstants.MATS_TELEMETRY }), extendedExpiryToken: false // Make this configurable?
+                            validatedRequest = __assign$1(__assign$1({}, remainingProperties), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scope: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), prompt: getPrompt(), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), { telemetry: NativeConstants.MATS_TELEMETRY }), extendedExpiryToken: false // Make this configurable?
                              });
                             if (!(request.authenticationScheme === exports.AuthenticationScheme.POP)) return [3 /*break*/, 2];
                             shrParameters = {
@@ -12889,7 +12962,7 @@
                         case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];
                         case 1:
                             clientConfig = _a.sent();
-                            return [2 /*return*/, new RefreshTokenClient(clientConfig)];
+                            return [2 /*return*/, new RefreshTokenClient(clientConfig, this.performanceClient)];
                     }
                 });
             });