@azure/msal-browser 2.28.0 → 2.28.3

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.28.0 2022-07-18 */
+/*! @azure/msal-browser v2.28.3 2022-09-12 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -46,6 +46,18 @@
         return __assign$1.apply(this, arguments);
     };
 
+    function __rest(s, e) {
+        var t = {};
+        for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+            t[p] = s[p];
+        if (s != null && typeof Object.getOwnPropertySymbols === "function")
+            for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+                if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                    t[p[i]] = s[p[i]];
+            }
+        return t;
+    }
+
     function __awaiter$1(thisArg, _arguments, P, generator) {
         function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
         return new (P || (P = Promise))(function (resolve, reject) {
@@ -107,7 +119,7 @@
         return ar;
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*! *****************************************************************************
     Copyright (c) Microsoft Corporation.
 
@@ -194,7 +206,7 @@
         return r;
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -245,7 +257,7 @@
         KNOWN_PUBLIC_CLOUDS: ["login.microsoftonline.com", "login.windows.net", "login.microsoft.com", "sts.windows.net"],
         TOKEN_RESPONSE_TYPE: "token",
         ID_TOKEN_RESPONSE_TYPE: "id_token",
-        SHR_NONCE_VALIDITY: 240,
+        SHR_NONCE_VALIDITY: 240
     };
     var OIDC_DEFAULT_SCOPES = [
         Constants.OPENID_SCOPE,
@@ -571,7 +583,7 @@
         JsonTypes["Jwk"] = "JWK";
     })(JsonTypes || (JsonTypes = {}));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -584,6 +596,10 @@
         unexpectedError: {
             code: "unexpected_error",
             desc: "Unexpected error in authentication."
+        },
+        postRequestFailed: {
+            code: "post_request_failed",
+            desc: "Post request failed from the network, could be a 4xx/5xx or a network unavailability. Please check the exact error code for details."
         }
     };
     /**
@@ -612,10 +628,18 @@
         AuthError.createUnexpectedError = function (errDesc) {
             return new AuthError(AuthErrorMessage.unexpectedError.code, AuthErrorMessage.unexpectedError.desc + ": " + errDesc);
         };
+        /**
+         * Creates an error for post request failures.
+         * @param errDesc
+         * @returns
+         */
+        AuthError.createPostRequestFailed = function (errDesc) {
+            return new AuthError(AuthErrorMessage.postRequestFailed.code, AuthErrorMessage.postRequestFailed.desc + ": " + errDesc);
+        };
         return AuthError;
     }(Error));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -690,7 +714,7 @@
         }
     };
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1162,7 +1186,7 @@
         return ClientAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1287,7 +1311,7 @@
         return StringUtils;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1467,12 +1491,12 @@
         return Logger;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /* eslint-disable header/header */
     var name$1 = "@azure/msal-common";
-    var version$1 = "7.2.0";
+    var version$1 = "7.4.1";
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1493,7 +1517,7 @@
         AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
     })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1652,7 +1676,7 @@
         return CredentialEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1907,7 +1931,7 @@
         return ClientConfigurationError;
     }(ClientAuthError));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2091,7 +2115,7 @@
         return ScopeSet;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2111,7 +2135,7 @@
             return JSON.parse(decodedClientInfo);
         }
         catch (e) {
-            throw ClientAuthError.createClientInfoDecodingError(e);
+            throw ClientAuthError.createClientInfoDecodingError(e.message);
         }
     }
     /**
@@ -2129,7 +2153,7 @@
         };
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2143,7 +2167,7 @@
         AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
     })(AuthorityType || (AuthorityType = {}));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2378,7 +2402,7 @@
         return AccountEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2416,7 +2440,7 @@
         return AuthToken;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2447,6 +2471,7 @@
                     var accountInfo = accountEntity.getAccountInfo();
                     var idToken = _this.readIdTokenFromCache(_this.clientId, accountInfo);
                     if (idToken && !accountInfo.idTokenClaims) {
+                        accountInfo.idToken = idToken.secret;
                         accountInfo.idTokenClaims = new AuthToken(idToken.secret, _this.cryptoImpl).claims;
                     }
                     return accountInfo;
@@ -3290,7 +3315,7 @@
         return DefaultStorageClass;
     }(CacheManager));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3384,7 +3409,7 @@
         return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3404,7 +3429,7 @@
         return ServerError;
     }(AuthError));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3500,7 +3525,7 @@
         return ThrottlingUtils;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3549,7 +3574,7 @@
         return NetworkManager;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3560,7 +3585,7 @@
         CcsCredentialType["UPN"] = "UPN";
     })(CcsCredentialType || (CcsCredentialType = {}));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3570,7 +3595,7 @@
      * Base application class which will construct requests to send to and handle responses from the Microsoft STS using the authorization code flow.
      */
     var BaseClient = /** @class */ (function () {
-        function BaseClient(configuration) {
+        function BaseClient(configuration, performanceClient) {
             // Set the configuration
             this.config = buildClientConfiguration(configuration);
             // Initialize the logger
@@ -3587,6 +3612,8 @@
             this.serverTelemetryManager = this.config.serverTelemetryManager;
             // set Authority
             this.authority = this.config.authOptions.authority;
+            // set performance telemetry client
+            this.performanceClient = performanceClient;
         }
         /**
          * Creates default headers for requests to token endpoint
@@ -3649,7 +3676,7 @@
         return BaseClient;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3735,7 +3762,7 @@
         return RequestValidator;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4113,7 +4140,7 @@
         return RequestParameterBuilder;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4177,7 +4204,7 @@
         return IdTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4227,7 +4254,7 @@
         return TimeUtils;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4341,7 +4368,7 @@
         return AccessTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4408,7 +4435,7 @@
         return RefreshTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4483,7 +4510,7 @@
         return InteractionRequiredAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4499,7 +4526,7 @@
         return CacheRecord;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4570,7 +4597,7 @@
         return ProtocolUtils;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4733,6 +4760,21 @@
             }
             return Constants.EMPTY_STRING;
         };
+        /**
+         * Parses query string from given string. Returns empty string if no query symbol is found.
+         * @param queryString
+         */
+        UrlString.parseQueryString = function (queryString) {
+            var queryIndex1 = queryString.indexOf("?");
+            var queryIndex2 = queryString.indexOf("/?");
+            if (queryIndex2 > -1) {
+                return queryString.substring(queryIndex2 + 2);
+            }
+            else if (queryIndex1 > -1) {
+                return queryString.substring(queryIndex1 + 1);
+            }
+            return Constants.EMPTY_STRING;
+        };
         UrlString.constructAuthorityUriFromObject = function (urlObject) {
             return new UrlString(urlObject.Protocol + "//" + urlObject.HostNameAndPort + "/" + urlObject.PathSegments.join("/"));
         };
@@ -4754,6 +4796,24 @@
             }
             return deserializedHash;
         };
+        /**
+         * Returns URL query string as server auth code response object.
+         */
+        UrlString.getDeserializedQueryString = function (query) {
+            // Check if given query is empty
+            if (StringUtils.isEmpty(query)) {
+                return {};
+            }
+            // Strip the ? symbol if present
+            var parsedQueryString = UrlString.parseQueryString(query);
+            // If ? symbol was not present, above will return empty string, so give original query value
+            var deserializedQueryString = StringUtils.queryStringToObject(StringUtils.isEmpty(parsedQueryString) ? query : parsedQueryString);
+            // Check if deserialization didn't work
+            if (!deserializedQueryString) {
+                throw ClientAuthError.createHashNotDeserializedError(JSON.stringify(deserializedQueryString));
+            }
+            return deserializedQueryString;
+        };
         /**
          * Check if the hash of the URL string contains known properties
          */
@@ -4771,7 +4831,7 @@
         return UrlString;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4872,7 +4932,7 @@
         return PopTokenGenerator;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4942,7 +5002,7 @@
         return AppMetadataEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4978,7 +5038,7 @@
         return TokenCacheContext;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5249,7 +5309,7 @@
         return ResponseHandler;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5537,7 +5597,7 @@
          */
         AuthorizationCodeClient.prototype.createAuthCodeUrlQueryString = function (request) {
             return __awaiter(this, void 0, void 0, function () {
-                var parameterBuilder, requestScopes, correlationId, accountSid, clientInfo, clientInfo, popTokenGenerator, reqCnfData;
+                var parameterBuilder, requestScopes, correlationId, accountSid, accountLoginHintClaim, clientInfo, clientInfo, clientInfo, popTokenGenerator, reqCnfData;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
@@ -5567,7 +5627,7 @@
                             if (request.domainHint) {
                                 parameterBuilder.addDomainHint(request.domainHint);
                             }
-                            // Add sid or loginHint with preference for sid -> loginHint -> username of AccountInfo object
+                            // Add sid or loginHint with preference for login_hint claim (in request) -> sid -> loginHint (upn/email) -> username of AccountInfo object
                             if (request.prompt !== PromptValue.SELECT_ACCOUNT) {
                                 // AAD will throw if prompt=select_account is passed with an account hint
                                 if (request.sid && request.prompt === PromptValue.NONE) {
@@ -5577,9 +5637,24 @@
                                 }
                                 else if (request.account) {
                                     accountSid = this.extractAccountSid(request.account);
-                                    // If account and loginHint are provided, we will check account first for sid before adding loginHint
-                                    if (accountSid && request.prompt === PromptValue.NONE) {
-                                        // SessionId is only used in silent calls
+                                    accountLoginHintClaim = this.extractLoginHint(request.account);
+                                    // If login_hint claim is present, use it over sid/username
+                                    if (accountLoginHintClaim) {
+                                        this.logger.verbose("createAuthCodeUrlQueryString: login_hint claim present on account");
+                                        parameterBuilder.addLoginHint(accountLoginHintClaim);
+                                        try {
+                                            clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
+                                            parameterBuilder.addCcsOid(clientInfo);
+                                        }
+                                        catch (e) {
+                                            this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
+                                        }
+                                    }
+                                    else if (accountSid && request.prompt === PromptValue.NONE) {
+                                        /*
+                                         * If account and loginHint are provided, we will check account first for sid before adding loginHint
+                                         * SessionId is only used in silent calls
+                                         */
                                         this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from account");
                                         parameterBuilder.addSid(accountSid);
                                         try {
@@ -5587,7 +5662,7 @@
                                             parameterBuilder.addCcsOid(clientInfo);
                                         }
                                         catch (e) {
-                                            this.logger.verbose("Could not parse home account ID for CCS Header: " + e);
+                                            this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
                                         }
                                     }
                                     else if (request.loginHint) {
@@ -5604,7 +5679,7 @@
                                             parameterBuilder.addCcsOid(clientInfo);
                                         }
                                         catch (e) {
-                                            this.logger.verbose("Could not parse home account ID for CCS Header: " + e);
+                                            this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
                                         }
                                     }
                                 }
@@ -5675,16 +5750,135 @@
          * @param account
          */
         AuthorizationCodeClient.prototype.extractAccountSid = function (account) {
-            if (account.idTokenClaims) {
-                var tokenClaims = account.idTokenClaims;
-                return tokenClaims.sid || null;
-            }
-            return null;
+            var _a;
+            return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a.sid) || null;
+        };
+        AuthorizationCodeClient.prototype.extractLoginHint = function (account) {
+            var _a;
+            return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a.login_hint) || null;
         };
         return AuthorizationCodeClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    /**
+     * Enumeration of operations that are instrumented by have their performance measured by the PerformanceClient.
+     *
+     * @export
+     * @enum {number}
+     */
+    exports.PerformanceEvents = void 0;
+    (function (PerformanceEvents) {
+        /**
+         * acquireTokenByCode API (msal-browser and msal-node).
+         * Used to acquire tokens by trading an authorization code against the token endpoint.
+         */
+        PerformanceEvents["AcquireTokenByCode"] = "acquireTokenByCode";
+        /**
+         * acquireTokenByRefreshToken API (msal-browser and msal-node).
+         * Used to renew an access token using a refresh token against the token endpoint.
+         */
+        PerformanceEvents["AcquireTokenByRefreshToken"] = "acquireTokenByRefreshToken";
+        /**
+         * acquireTokenSilent API (msal-browser and msal-node).
+         * Used to silently acquire a new access token (from the cache or the network).
+         */
+        PerformanceEvents["AcquireTokenSilent"] = "acquireTokenSilent";
+        /**
+         * acquireTokenSilentAsync (msal-browser).
+         * Internal API for acquireTokenSilent.
+         */
+        PerformanceEvents["AcquireTokenSilentAsync"] = "acquireTokenSilentAsync";
+        /**
+         * acquireTokenPopup (msal-browser).
+         * Used to acquire a new access token interactively through pop ups
+         */
+        PerformanceEvents["AcquireTokenPopup"] = "acquireTokenPopup";
+        /**
+         * getPublicKeyThumbprint API in CryptoOpts class (msal-browser).
+         * Used to generate a public/private keypair and generate a public key thumbprint for pop requests.
+         */
+        PerformanceEvents["CryptoOptsGetPublicKeyThumbprint"] = "cryptoOptsGetPublicKeyThumbprint";
+        /**
+         * signJwt API in CryptoOpts class (msal-browser).
+         * Used to signed a pop token.
+         */
+        PerformanceEvents["CryptoOptsSignJwt"] = "cryptoOptsSignJwt";
+        /**
+         * acquireToken API in the SilentCacheClient class (msal-browser).
+         * Used to read access tokens from the cache.
+         */
+        PerformanceEvents["SilentCacheClientAcquireToken"] = "silentCacheClientAcquireToken";
+        /**
+         * acquireToken API in the SilentIframeClient class (msal-browser).
+         * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.
+         */
+        PerformanceEvents["SilentIframeClientAcquireToken"] = "silentIframeClientAcquireToken";
+        /**
+         * acquireToken API in SilentRereshClient (msal-browser).
+         * Used to acquire a new set of tokens from the token endpoint using a refresh token.
+         */
+        PerformanceEvents["SilentRefreshClientAcquireToken"] = "silentRefreshClientAcquireToken";
+        /**
+         * ssoSilent API (msal-browser).
+         * Used to silently acquire an authorization code and set of tokens using a hidden iframe.
+         */
+        PerformanceEvents["SsoSilent"] = "ssoSilent";
+        /**
+         * getDiscoveredAuthority API in StandardInteractionClient class (msal-browser).
+         * Used to load authority metadata for a request.
+         */
+        PerformanceEvents["StandardInteractionClientGetDiscoveredAuthority"] = "standardInteractionClientGetDiscoveredAuthority";
+        /**
+         * acquireToken APIs in msal-browser.
+         * Used to make an /authorize endpoint call with native brokering enabled.
+         */
+        PerformanceEvents["FetchAccountIdWithNativeBroker"] = "fetchAccountIdWithNativeBroker";
+        /**
+         * acquireToken API in NativeInteractionClient class (msal-browser).
+         * Used to acquire a token from Native component when native brokering is enabled.
+         */
+        PerformanceEvents["NativeInteractionClientAcquireToken"] = "nativeInteractionClientAcquireToken";
+        /**
+         * Time spent on the network for refresh token acquisition
+         */
+        PerformanceEvents["RefreshTokenClientExecuteTokenRequest"] = "refreshTokenClientExecuteTokenRequest";
+        /**
+         * Time spent creating default headers for requests to token endpoint
+         */
+        PerformanceEvents["BaseClientCreateTokenRequestHeaders"] = "baseClientCreateTokenRequestHeaders";
+        /**
+         * Used to measure the time taken for completing embedded-broker handshake (PW-Broker).
+         */
+        PerformanceEvents["BrokerHandhshake"] = "brokerHandshake";
+        /**
+         * acquireTokenByRefreshToken API in BrokerClientApplication (PW-Broker) .
+         */
+        PerformanceEvents["AcquireTokenByRefreshTokenInBroker"] = "acquireTokenByRefreshTokenInBroker";
+        /**
+         * acquireToken API in BrokerClientApplication.
+         * Used to acquire a token on behalf of the embedded application (PW-Broker).
+         */
+        PerformanceEvents["AcquireTokenByBroker"] = "acquireTokenByBroker";
+    })(exports.PerformanceEvents || (exports.PerformanceEvents = {}));
+    /**
+     * State of the performance event.
+     *
+     * @export
+     * @enum {number}
+     */
+    var PerformanceEventStatus;
+    (function (PerformanceEventStatus) {
+        PerformanceEventStatus[PerformanceEventStatus["NotStarted"] = 0] = "NotStarted";
+        PerformanceEventStatus[PerformanceEventStatus["InProgress"] = 1] = "InProgress";
+        PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
+    })(PerformanceEventStatus || (PerformanceEventStatus = {}));
+
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5695,8 +5889,8 @@
      */
     var RefreshTokenClient = /** @class */ (function (_super) {
         __extends(RefreshTokenClient, _super);
-        function RefreshTokenClient(configuration) {
-            return _super.call(this, configuration) || this;
+        function RefreshTokenClient(configuration, performanceClient) {
+            return _super.call(this, configuration, performanceClient) || this;
         }
         RefreshTokenClient.prototype.acquireToken = function (request) {
             return __awaiter(this, void 0, void 0, function () {
@@ -5782,13 +5976,16 @@
          * @param authority
          */
         RefreshTokenClient.prototype.executeTokenRequest = function (request, authority) {
+            var _a;
             return __awaiter(this, void 0, void 0, function () {
-                var requestBody, queryParameters, headers, thumbprint, endpoint;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.createTokenRequestBody(request)];
+                var acquireTokenMeasurement, requestBody, queryParameters, headers, thumbprint, endpoint;
+                return __generator(this, function (_b) {
+                    switch (_b.label) {
+                        case 0:
+                            acquireTokenMeasurement = (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.startMeasurement(exports.PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
+                            return [4 /*yield*/, this.createTokenRequestBody(request)];
                         case 1:
-                            requestBody = _a.sent();
+                            requestBody = _b.sent();
                             queryParameters = this.createTokenQueryParameters(request);
                             headers = this.createTokenRequestHeaders(request.ccsCredential);
                             thumbprint = {
@@ -5803,7 +6000,19 @@
                                 sshKid: request.sshKid
                             };
                             endpoint = UrlString.appendQueryString(authority.tokenEndpoint, queryParameters);
-                            return [2 /*return*/, this.executePostToTokenEndpoint(endpoint, requestBody, headers, thumbprint)];
+                            return [2 /*return*/, this.executePostToTokenEndpoint(endpoint, requestBody, headers, thumbprint)
+                                    .then(function (result) {
+                                    acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                        success: true
+                                    });
+                                    return result;
+                                })
+                                    .catch(function (error) {
+                                    acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                        success: false
+                                    });
+                                    throw error;
+                                })];
                     }
                 });
             });
@@ -5824,11 +6033,14 @@
          * @param request
          */
         RefreshTokenClient.prototype.createTokenRequestBody = function (request) {
+            var _a;
             return __awaiter(this, void 0, void 0, function () {
-                var parameterBuilder, correlationId, clientAssertion, popTokenGenerator, reqCnfData, clientInfo;
-                return __generator(this, function (_a) {
-                    switch (_a.label) {
+                var correlationId, acquireTokenMeasurement, parameterBuilder, clientAssertion, popTokenGenerator, reqCnfData, clientInfo;
+                return __generator(this, function (_b) {
+                    switch (_b.label) {
                         case 0:
+                            correlationId = request.correlationId;
+                            acquireTokenMeasurement = (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.startMeasurement(exports.PerformanceEvents.BaseClientCreateTokenRequestHeaders, correlationId);
                             parameterBuilder = new RequestParameterBuilder();
                             parameterBuilder.addClientId(this.config.authOptions.clientId);
                             parameterBuilder.addScopes(request.scopes);
@@ -5840,7 +6052,6 @@
                             if (this.serverTelemetryManager) {
                                 parameterBuilder.addServerTelemetry(this.serverTelemetryManager);
                             }
-                            correlationId = request.correlationId || this.config.cryptoInterface.createNewGuid();
                             parameterBuilder.addCorrelationId(correlationId);
                             parameterBuilder.addRefreshToken(request.refreshToken);
                             if (this.config.clientCredentials.clientSecret) {
@@ -5855,7 +6066,7 @@
                             popTokenGenerator = new PopTokenGenerator(this.cryptoUtils);
                             return [4 /*yield*/, popTokenGenerator.generateCnf(request)];
                         case 1:
-                            reqCnfData = _a.sent();
+                            reqCnfData = _b.sent();
                             // SPA PoP requires full Base64Url encoded req_cnf string (unhashed)
                             parameterBuilder.addPopToken(reqCnfData.reqCnfString);
                             return [3 /*break*/, 3];
@@ -5865,10 +6076,13 @@
                                     parameterBuilder.addSshJwk(request.sshJwk);
                                 }
                                 else {
+                                    acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                        success: false
+                                    });
                                     throw ClientConfigurationError.createMissingSshJwkError();
                                 }
                             }
-                            _a.label = 3;
+                            _b.label = 3;
                         case 3:
                             if (!StringUtils.isEmptyObj(request.claims) || this.config.authOptions.clientCapabilities && this.config.authOptions.clientCapabilities.length > 0) {
                                 parameterBuilder.addClaims(request.claims, this.config.authOptions.clientCapabilities);
@@ -5889,6 +6103,9 @@
                                         break;
                                 }
                             }
+                            acquireTokenMeasurement === null || acquireTokenMeasurement === void 0 ? void 0 : acquireTokenMeasurement.endMeasurement({
+                                success: true
+                            });
                             return [2 /*return*/, parameterBuilder.createQueryString()];
                     }
                 });
@@ -5897,7 +6114,7 @@
         return RefreshTokenClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5905,8 +6122,8 @@
      */
     var SilentFlowClient = /** @class */ (function (_super) {
         __extends(SilentFlowClient, _super);
-        function SilentFlowClient(configuration) {
-            return _super.call(this, configuration) || this;
+        function SilentFlowClient(configuration, performanceClient) {
+            return _super.call(this, configuration, performanceClient) || this;
         }
         /**
          * Retrieves a token from cache if it is still valid, or uses the cached refresh token to renew
@@ -5925,7 +6142,7 @@
                         case 2:
                             e_1 = _a.sent();
                             if (e_1 instanceof ClientAuthError && e_1.errorCode === ClientAuthErrorMessage.tokenRefreshRequired.code) {
-                                refreshTokenClient = new RefreshTokenClient(this.config);
+                                refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
                                 return [2 /*return*/, refreshTokenClient.acquireTokenByRefreshToken(request)];
                             }
                             else {
@@ -6013,7 +6230,7 @@
         return SilentFlowClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6025,7 +6242,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6034,7 +6251,7 @@
     var EndpointMetadata = rawMetdataJSON.endpointMetadata;
     var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6048,7 +6265,7 @@
         ProtocolMode["OIDC"] = "OIDC";
     })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6125,7 +6342,7 @@
         return AuthorityMetadataEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6135,7 +6352,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6257,7 +6474,7 @@
         return RegionDiscovery;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6919,7 +7136,7 @@
         return Authority;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6980,7 +7197,7 @@
         return AuthorityFactory;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7011,7 +7228,7 @@
         return ServerTelemetryEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7039,7 +7256,7 @@
         return ThrottlingEntity;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7056,7 +7273,7 @@
         }
     };
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7101,7 +7318,7 @@
         return JoseHeaderError;
     }(AuthError));
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7141,7 +7358,7 @@
         return JoseHeader;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7200,7 +7417,7 @@
         return AuthenticationHeaderParser;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7362,117 +7579,7 @@
         return ServerTelemetryManager;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    /**
-     * Enumeration of operations that are instrumented by have their performance measured by the PerformanceClient.
-     *
-     * @export
-     * @enum {number}
-     */
-    exports.PerformanceEvents = void 0;
-    (function (PerformanceEvents) {
-        /**
-         * acquireTokenByCode API (msal-browser and msal-node).
-         * Used to acquire tokens by trading an authorization code against the token endpoint.
-         */
-        PerformanceEvents["AcquireTokenByCode"] = "acquireTokenByCode";
-        /**
-         * acquireTokenByRefreshToken API (msal-browser and msal-node).
-         * Used to renew an access token using a refresh token against the token endpoint.
-         */
-        PerformanceEvents["AcquireTokenByRefreshToken"] = "acquireTokenByRefreshToken";
-        /**
-         * acquireTokenSilent API (msal-browser and msal-node).
-         * Used to silently acquire a new access token (from the cache or the network).
-         */
-        PerformanceEvents["AcquireTokenSilent"] = "acquireTokenSilent";
-        /**
-         * acquireTokenSilentAsync (msal-browser).
-         * Internal API for acquireTokenSilent.
-         */
-        PerformanceEvents["AcquireTokenSilentAsync"] = "acquireTokenSilentAsync";
-        /**
-         * acquireTokenPopup (msal-browser).
-         * Used to acquire a new access token interactively through pop ups
-         */
-        PerformanceEvents["AcquireTokenPopup"] = "acquireTokenPopup";
-        /**
-         * getPublicKeyThumbprint API in CryptoOpts class (msal-browser).
-         * Used to generate a public/private keypair and generate a public key thumbprint for pop requests.
-         */
-        PerformanceEvents["CryptoOptsGetPublicKeyThumbprint"] = "cryptoOptsGetPublicKeyThumbprint";
-        /**
-         * signJwt API in CryptoOpts class (msal-browser).
-         * Used to signed a pop token.
-         */
-        PerformanceEvents["CryptoOptsSignJwt"] = "cryptoOptsSignJwt";
-        /**
-         * acquireToken API in the SilentCacheClient class (msal-browser).
-         * Used to read access tokens from the cache.
-         */
-        PerformanceEvents["SilentCacheClientAcquireToken"] = "silentCacheClientAcquireToken";
-        /**
-         * acquireToken API in the SilentIframeClient class (msal-browser).
-         * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.
-         */
-        PerformanceEvents["SilentIframeClientAcquireToken"] = "silentIframeClientAcquireToken";
-        /**
-         * acquireToken API in SilentRereshClient (msal-browser).
-         * Used to acquire a new set of tokens from the token endpoint using a refresh token.
-         */
-        PerformanceEvents["SilentRefreshClientAcquireToken"] = "silentRefreshClientAcquireToken";
-        /**
-         * ssoSilent API (msal-browser).
-         * Used to silently acquire an authorization code and set of tokens using a hidden iframe.
-         */
-        PerformanceEvents["SsoSilent"] = "ssoSilent";
-        /**
-         * getDiscoveredAuthority API in StandardInteractionClient class (msal-browser).
-         * Used to load authority metadata for a request.
-         */
-        PerformanceEvents["StandardInteractionClientGetDiscoveredAuthority"] = "standardInteractionClientGetDiscoveredAuthority";
-        /**
-         * acquireToken APIs in msal-browser.
-         * Used to make an /authorize endpoint call with native brokering enabled.
-         */
-        PerformanceEvents["FetchAccountIdWithNativeBroker"] = "fetchAccountIdWithNativeBroker";
-        /**
-         * acquireToken API in NativeInteractionClient class (msal-browser).
-         * Used to acquire a token from Native component when native brokering is enabled.
-         */
-        PerformanceEvents["NativeInteractionClientAcquireToken"] = "nativeInteractionClientAcquireToken";
-        /**
-         * Used to measure the time taken for completing embedded-broker handshake (PW-Broker).
-         */
-        PerformanceEvents["BrokerHandhshake"] = "brokerHandshake";
-        /**
-         * acquireTokenByRefreshToken API in BrokerClientApplication (PW-Broker) .
-         */
-        PerformanceEvents["AcquireTokenByRefreshTokenInBroker"] = "acquireTokenByRefreshTokenInBroker";
-        /**
-         * acquireToken API in BrokerClientApplication.
-         * Used to acquire a token on behalf of the embedded application (PW-Broker).
-         */
-        PerformanceEvents["AcquireTokenByBroker"] = "acquireTokenByBroker";
-    })(exports.PerformanceEvents || (exports.PerformanceEvents = {}));
-    /**
-     * State of the performance event.
-     *
-     * @export
-     * @enum {number}
-     */
-    var PerformanceEventStatus;
-    (function (PerformanceEventStatus) {
-        PerformanceEventStatus[PerformanceEventStatus["NotStarted"] = 0] = "NotStarted";
-        PerformanceEventStatus[PerformanceEventStatus["InProgress"] = 1] = "InProgress";
-        PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
-    })(PerformanceEventStatus || (PerformanceEventStatus = {}));
-
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7748,7 +7855,7 @@
         return PerformanceClient;
     }());
 
-    /*! @azure/msal-common v7.2.0 2022-07-18 */
+    /*! @azure/msal-common v7.4.1 2022-09-12 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9576,7 +9683,7 @@
 
     /* eslint-disable header/header */
     var name = "@azure/msal-browser";
-    var version = "2.28.0";
+    var version = "2.28.3";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10897,7 +11004,7 @@
                         case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];
                         case 1:
                             clientConfig = _a.sent();
-                            return [2 /*return*/, new SilentFlowClient(clientConfig)];
+                            return [2 /*return*/, new SilentFlowClient(clientConfig, this.performanceClient)];
                     }
                 });
             });
@@ -11006,7 +11113,7 @@
             return {
                 authority: request.authority,
                 correlationId: this.correlationId,
-                scopes: ScopeSet.fromString(request.scopes).asArray(),
+                scopes: ScopeSet.fromString(request.scope).asArray(),
                 account: cachedAccount,
                 forceRefresh: false,
             };
@@ -11172,7 +11279,7 @@
                             homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenObj);
                             accountEntity = AccountEntity.createAccount(response.client_info, homeAccountIdentifier, idTokenObj, undefined, undefined, undefined, authorityPreferredCache, response.account.id);
                             this.browserStorage.setAccount(accountEntity);
-                            responseScopes = response.scopes ? ScopeSet.fromString(response.scopes) : ScopeSet.fromString(request.scopes);
+                            responseScopes = response.scope ? ScopeSet.fromString(response.scope) : ScopeSet.fromString(request.scope);
                             accountProperties = response.account.properties || {};
                             uid = accountProperties["UID"] || idTokenObj.claims.oid || idTokenObj.claims.sub || Constants.EMPTY_STRING;
                             tid = accountProperties["TenantId"] || idTokenObj.claims.tid || Constants.EMPTY_STRING;
@@ -11260,7 +11367,7 @@
                 response.hasOwnProperty("id_token") &&
                 response.hasOwnProperty("client_info") &&
                 response.hasOwnProperty("account") &&
-                response.hasOwnProperty("scopes") &&
+                response.hasOwnProperty("scope") &&
                 response.hasOwnProperty("expires_in")) {
                 return response;
             }
@@ -11302,7 +11409,7 @@
          */
         NativeInteractionClient.prototype.initializeNativeRequest = function (request) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var authority, canonicalAuthority, scopes, scopeSet, getPrompt, validatedRequest, shrParameters, popTokenGenerator, reqCnfData;
+                var authority, canonicalAuthority, scopes, remainingProperties, scopeSet, getPrompt, validatedRequest, shrParameters, popTokenGenerator, reqCnfData;
                 var _this = this;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
@@ -11311,8 +11418,8 @@
                             authority = request.authority || this.config.auth.authority;
                             canonicalAuthority = new UrlString(authority);
                             canonicalAuthority.validateAsUri();
-                            scopes = request && request.scopes || [];
-                            scopeSet = new ScopeSet(scopes);
+                            scopes = request.scopes, remainingProperties = __rest(request, ["scopes"]);
+                            scopeSet = new ScopeSet(scopes || []);
                             scopeSet.appendScopes(OIDC_DEFAULT_SCOPES);
                             getPrompt = function () {
                                 // If request is silent, prompt is always none
@@ -11339,7 +11446,7 @@
                                         throw BrowserAuthError.createNativePromptParameterNotSupportedError();
                                 }
                             };
-                            validatedRequest = __assign$1(__assign$1({}, request), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scopes: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), prompt: getPrompt(), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), { telemetry: NativeConstants.MATS_TELEMETRY }), extendedExpiryToken: false // Make this configurable?
+                            validatedRequest = __assign$1(__assign$1({}, remainingProperties), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scope: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), prompt: getPrompt(), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), { telemetry: NativeConstants.MATS_TELEMETRY }), extendedExpiryToken: false // Make this configurable?
                              });
                             if (!(request.authenticationScheme === exports.AuthenticationScheme.POP)) return [3 /*break*/, 2];
                             shrParameters = {
@@ -12889,7 +12996,7 @@
                         case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];
                         case 1:
                             clientConfig = _a.sent();
-                            return [2 /*return*/, new RefreshTokenClient(clientConfig)];
+                            return [2 /*return*/, new RefreshTokenClient(clientConfig, this.performanceClient)];
                     }
                 });
             });
@@ -14002,29 +14109,17 @@
          */
         DatabaseStorage.prototype.deleteDatabase = function () {
             return __awaiter$1(this, void 0, void 0, function () {
-                var existingDatabases, database;
                 return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            // Check if database being deleted exists
-                            if (this.db && this.dbOpen) {
-                                this.closeConnection();
-                            }
-                            return [4 /*yield*/, window.indexedDB.databases()];
-                        case 1:
-                            existingDatabases = _a.sent();
-                            database = existingDatabases.find(function (database) { return database.name === DB_NAME; });
-                            // If database exists, delete it
-                            if (database) {
-                                return [2 /*return*/, new Promise(function (resolve, reject) {
-                                        var deleteDbRequest = window.indexedDB.deleteDatabase(DB_NAME);
-                                        deleteDbRequest.addEventListener("success", function () { return resolve(true); });
-                                        deleteDbRequest.addEventListener("error", function () { return reject(false); });
-                                    })];
-                            }
-                            // Database doesn't exist, return true
-                            return [2 /*return*/, true];
+                    // Check if database being deleted exists
+                    if (this.db && this.dbOpen) {
+                        this.closeConnection();
                     }
+                    return [2 /*return*/, new Promise(function (resolve, reject) {
+                            var deleteDbRequest = window.indexedDB.deleteDatabase(DB_NAME);
+                            deleteDbRequest.addEventListener("success", function () { return resolve(true); });
+                            deleteDbRequest.addEventListener("blocked", function () { return resolve(true); });
+                            deleteDbRequest.addEventListener("error", function () { return reject(false); });
+                        })];
                 });
             });
         };
@@ -14193,34 +14288,38 @@
             });
         };
         /**
-         * Clears in-memory Map and tries to delete the IndexedDB database.
+         * Clears in-memory Map
+         */
+        AsyncMemoryStorage.prototype.clearInMemory = function () {
+            // InMemory cache is a Map instance, clear is straightforward
+            this.logger.verbose("Deleting in-memory keystore " + this.storeName);
+            this.inMemoryCache.clear();
+            this.logger.verbose("In-memory keystore " + this.storeName + " deleted");
+        };
+        /**
+         * Tries to delete the IndexedDB database
+         * @returns
          */
-        AsyncMemoryStorage.prototype.clear = function () {
+        AsyncMemoryStorage.prototype.clearPersistent = function () {
             return __awaiter$1(this, void 0, void 0, function () {
                 var dbDeleted, e_6;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
                         case 0:
-                            // InMemory cache is a Map instance, clear is straightforward
-                            this.logger.verbose("Deleting in-memory keystore " + this.storeName);
-                            this.inMemoryCache.clear();
-                            this.logger.verbose("In-memory keystore " + this.storeName + " deleted");
-                            this.logger.verbose("Deleting persistent keystore " + this.storeName);
-                            _a.label = 1;
-                        case 1:
-                            _a.trys.push([1, 3, , 4]);
+                            _a.trys.push([0, 2, , 3]);
+                            this.logger.verbose("Deleting persistent keystore");
                             return [4 /*yield*/, this.indexedDBCache.deleteDatabase()];
-                        case 2:
+                        case 1:
                             dbDeleted = _a.sent();
                             if (dbDeleted) {
-                                this.logger.verbose("Persistent keystore " + this.storeName + " deleted");
+                                this.logger.verbose("Persistent keystore deleted");
                             }
                             return [2 /*return*/, dbDeleted];
-                        case 3:
+                        case 2:
                             e_6 = _a.sent();
                             this.handleDatabaseAccessError(e_6);
                             return [2 /*return*/, false];
-                        case 4: return [2 /*return*/];
+                        case 3: return [2 /*return*/];
                     }
                 });
             });
@@ -14237,6 +14336,52 @@
         CryptoKeyStoreNames["asymmetricKeys"] = "asymmetricKeys";
         CryptoKeyStoreNames["symmetricKeys"] = "symmetricKeys";
     })(CryptoKeyStoreNames || (CryptoKeyStoreNames = {}));
+    /**
+     * MSAL CryptoKeyStore DB Version 2
+     */
+    var CryptoKeyStore = /** @class */ (function () {
+        function CryptoKeyStore(logger) {
+            this.logger = logger;
+            this.asymmetricKeys = new AsyncMemoryStorage(this.logger, CryptoKeyStoreNames.asymmetricKeys);
+            this.symmetricKeys = new AsyncMemoryStorage(this.logger, CryptoKeyStoreNames.symmetricKeys);
+        }
+        CryptoKeyStore.prototype.clear = function () {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var e_1;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            // Delete in-memory keystores
+                            this.asymmetricKeys.clearInMemory();
+                            this.symmetricKeys.clearInMemory();
+                            _a.label = 1;
+                        case 1:
+                            _a.trys.push([1, 3, , 4]);
+                            return [4 /*yield*/, this.asymmetricKeys.clearPersistent()];
+                        case 2:
+                            _a.sent();
+                            return [2 /*return*/, true];
+                        case 3:
+                            e_1 = _a.sent();
+                            if (e_1 instanceof Error) {
+                                this.logger.error("Clearing keystore failed with error: " + e_1.message);
+                            }
+                            else {
+                                this.logger.error("Clearing keystore failed with unknown error");
+                            }
+                            return [2 /*return*/, false];
+                        case 4: return [2 /*return*/];
+                    }
+                });
+            });
+        };
+        return CryptoKeyStore;
+    }());
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
     /**
      * This class implements MSAL's crypto interface, which allows it to perform base64 encoding and decoding, generating cryptographically random GUIDs and
      * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).
@@ -14250,10 +14395,7 @@
             this.b64Decode = new Base64Decode();
             this.guidGenerator = new GuidGenerator(this.browserCrypto);
             this.pkceGenerator = new PkceGenerator(this.browserCrypto);
-            this.cache = {
-                asymmetricKeys: new AsyncMemoryStorage(this.logger, CryptoKeyStoreNames.asymmetricKeys),
-                symmetricKeys: new AsyncMemoryStorage(this.logger, CryptoKeyStoreNames.symmetricKeys)
-            };
+            this.cache = new CryptoKeyStore(this.logger);
             this.performanceClient = performanceClient;
         }
         /**
@@ -14365,32 +14507,10 @@
          */
         CryptoOps.prototype.clearKeystore = function () {
             return __awaiter$1(this, void 0, void 0, function () {
-                var e_1;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
-                        case 0:
-                            _a.trys.push([0, 3, , 4]);
-                            this.logger.verbose("Deleting in-memory and persistent asymmetric key stores");
-                            return [4 /*yield*/, this.cache.asymmetricKeys.clear()];
-                        case 1:
-                            _a.sent();
-                            this.logger.verbose("Successfully deleted asymmetric key stores");
-                            this.logger.verbose("Deleting in-memory and persistent symmetric key stores");
-                            return [4 /*yield*/, this.cache.symmetricKeys.clear()];
-                        case 2:
-                            _a.sent();
-                            this.logger.verbose("Successfully deleted symmetric key stores");
-                            return [2 /*return*/, true];
-                        case 3:
-                            e_1 = _a.sent();
-                            if (e_1 instanceof Error) {
-                                this.logger.error("Clearing keystore failed with error: " + e_1.message);
-                            }
-                            else {
-                                this.logger.error("Clearing keystore failed with unknown error");
-                            }
-                            return [2 /*return*/, false];
-                        case 4: return [2 /*return*/];
+                        case 0: return [4 /*yield*/, this.cache.clear()];
+                        case 1: return [2 /*return*/, _a.sent()];
                     }
                 });
             });
@@ -15846,6 +15966,8 @@
                             .catch(function (error) {
                             _this.activeSilentTokenRequests.delete(silentRequestKey);
                             atsMeasurement.endMeasurement({
+                                errorCode: error.errorCode,
+                                subErrorCode: error.subError,
                                 success: false
                             });
                             atsMeasurement.flushMeasurement();