@azure/msal-browser 2.31.0 → 2.32.1

package/dist/index.cjs.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.31.0 2022-11-07 */
+/*! @azure/msal-browser v2.32.1 2022-12-07 */
 'use strict';
 'use strict';
 
@@ -117,7 +117,7 @@ function __spread() {
     return ar;
 }
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*! *****************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -204,7 +204,7 @@ function __spreadArrays() {
     return r;
 }
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -247,6 +247,7 @@ var Constants = {
     AUTHORIZATION_PENDING: "authorization_pending",
     NOT_DEFINED: "not_defined",
     EMPTY_STRING: "",
+    NOT_APPLICABLE: "N/A",
     FORWARD_SLASH: "/",
     IMDS_ENDPOINT: "http://169.254.169.254/metadata/instance/compute/location",
     IMDS_VERSION: "2020-06-01",
@@ -257,7 +258,8 @@ var Constants = {
     KNOWN_PUBLIC_CLOUDS: ["login.microsoftonline.com", "login.windows.net", "login.microsoft.com", "sts.windows.net"],
     TOKEN_RESPONSE_TYPE: "token",
     ID_TOKEN_RESPONSE_TYPE: "id_token",
-    SHR_NONCE_VALIDITY: 240
+    SHR_NONCE_VALIDITY: 240,
+    INVALID_INSTANCE: "invalid_instance",
 };
 var OIDC_DEFAULT_SCOPES = [
     Constants.OPENID_SCOPE,
@@ -585,7 +587,7 @@ var JsonTypes;
     JsonTypes["Jwk"] = "JWK";
 })(JsonTypes || (JsonTypes = {}));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -641,7 +643,7 @@ var AuthError = /** @class */ (function (_super) {
     return AuthError;
 }(Error));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -716,7 +718,7 @@ var DEFAULT_CRYPTO_IMPLEMENTATION = {
     }
 };
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1211,7 +1213,7 @@ var ClientAuthError = /** @class */ (function (_super) {
     return ClientAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1336,7 +1338,7 @@ var StringUtils = /** @class */ (function () {
     return StringUtils;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1516,12 +1518,12 @@ var Logger = /** @class */ (function () {
     return Logger;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /* eslint-disable header/header */
 var name$1 = "@azure/msal-common";
-var version$1 = "8.0.0";
+var version$1 = "9.0.1";
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1542,7 +1544,7 @@ exports.AzureCloudInstance = void 0;
     AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
 })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1701,7 +1703,7 @@ var CredentialEntity = /** @class */ (function () {
     return CredentialEntity;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1956,7 +1958,7 @@ var ClientConfigurationError = /** @class */ (function (_super) {
     return ClientConfigurationError;
 }(ClientAuthError));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2140,7 +2142,7 @@ var ScopeSet = /** @class */ (function () {
     return ScopeSet;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2178,7 +2180,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2193,7 +2195,7 @@ var AuthorityType;
     AuthorityType[AuthorityType["Dsts"] = 2] = "Dsts";
 })(AuthorityType || (AuthorityType = {}));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2432,7 +2434,7 @@ var AccountEntity = /** @class */ (function () {
     return AccountEntity;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2484,7 +2486,7 @@ var AuthToken = /** @class */ (function () {
     return AuthToken;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3363,7 +3365,7 @@ var DefaultStorageClass = /** @class */ (function (_super) {
     return DefaultStorageClass;
 }(CacheManager));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3457,7 +3459,7 @@ function buildAuthOptions(authOptions) {
     return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
 }
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3477,7 +3479,7 @@ var ServerError = /** @class */ (function (_super) {
     return ServerError;
 }(AuthError));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3573,7 +3575,7 @@ var ThrottlingUtils = /** @class */ (function () {
     return ThrottlingUtils;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3622,7 +3624,7 @@ var NetworkManager = /** @class */ (function () {
     return NetworkManager;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3633,7 +3635,7 @@ var CcsCredentialType;
     CcsCredentialType["UPN"] = "UPN";
 })(CcsCredentialType || (CcsCredentialType = {}));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3724,7 +3726,7 @@ var BaseClient = /** @class */ (function () {
     return BaseClient;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3810,7 +3812,7 @@ var RequestValidator = /** @class */ (function () {
     return RequestValidator;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4188,7 +4190,7 @@ var RequestParameterBuilder = /** @class */ (function () {
     return RequestParameterBuilder;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4252,7 +4254,7 @@ var IdTokenEntity = /** @class */ (function (_super) {
     return IdTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4302,7 +4304,7 @@ var TimeUtils = /** @class */ (function () {
     return TimeUtils;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4416,7 +4418,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
     return AccessTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4483,7 +4485,7 @@ var RefreshTokenEntity = /** @class */ (function (_super) {
     return RefreshTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4558,7 +4560,7 @@ var InteractionRequiredAuthError = /** @class */ (function (_super) {
     return InteractionRequiredAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4574,7 +4576,7 @@ var CacheRecord = /** @class */ (function () {
     return CacheRecord;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4645,7 +4647,7 @@ var ProtocolUtils = /** @class */ (function () {
     return ProtocolUtils;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4879,7 +4881,7 @@ var UrlString = /** @class */ (function () {
     return UrlString;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4980,7 +4982,7 @@ var PopTokenGenerator = /** @class */ (function () {
     return PopTokenGenerator;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5050,7 +5052,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return AppMetadataEntity;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5086,7 +5088,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return TokenCacheContext;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5366,7 +5368,7 @@ var ResponseHandler = /** @class */ (function () {
     return ResponseHandler;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5819,7 +5821,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
     return AuthorizationCodeClient;
 }(BaseClient));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5944,7 +5946,7 @@ var PerformanceEventStatus;
     PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
 })(PerformanceEventStatus || (PerformanceEventStatus = {}));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6209,7 +6211,7 @@ var RefreshTokenClient = /** @class */ (function (_super) {
     return RefreshTokenClient;
 }(BaseClient));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6333,7 +6335,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
     return SilentFlowClient;
 }(BaseClient));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6345,7 +6347,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6354,7 +6356,7 @@ var rawMetdataJSON = { "endpointMetadata": { "https://login.microsoftonline.com/
 var EndpointMetadata = rawMetdataJSON.endpointMetadata;
 var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6368,7 +6370,7 @@ exports.ProtocolMode = void 0;
     ProtocolMode["OIDC"] = "OIDC";
 })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6445,7 +6447,7 @@ var AuthorityMetadataEntity = /** @class */ (function () {
     return AuthorityMetadataEntity;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6455,7 +6457,17 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+function isCloudInstanceDiscoveryErrorResponse(response) {
+    return (response.hasOwnProperty("error") &&
+        response.hasOwnProperty("error_description"));
+}
+
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6577,7 +6589,7 @@ var RegionDiscovery = /** @class */ (function () {
     return RegionDiscovery;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6588,7 +6600,7 @@ var RegionDiscovery = /** @class */ (function () {
  * endpoint. It will store the pertinent config data in this object for use during token calls.
  */
 var Authority = /** @class */ (function () {
-    function Authority(authority, networkInterface, cacheManager, authorityOptions, proxyUrl) {
+    function Authority(authority, networkInterface, cacheManager, authorityOptions, logger, proxyUrl) {
         this.canonicalAuthority = authority;
         this._canonicalAuthority.validateAsUri();
         this.networkInterface = networkInterface;
@@ -6597,6 +6609,7 @@ var Authority = /** @class */ (function () {
         this.regionDiscovery = new RegionDiscovery(networkInterface);
         this.regionDiscoveryMetadata = { region_used: undefined, region_source: undefined, region_outcome: undefined };
         this.proxyUrl = proxyUrl || Constants.EMPTY_STRING;
+        this.logger = logger;
     }
     Object.defineProperty(Authority.prototype, "authorityType", {
         // See above for AuthorityType
@@ -7023,36 +7036,50 @@ var Authority = /** @class */ (function () {
      */
     Authority.prototype.updateCloudDiscoveryMetadata = function (metadataEntity) {
         return __awaiter(this, void 0, void 0, function () {
-            var metadata, harcodedMetadata;
+            var metadata, metadataEntityExpired, harcodedMetadata;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
+                        this.logger.verbose("Attempting to get cloud discovery metadata in the config");
+                        this.logger.verbosePii("Known Authorities: " + (this.authorityOptions.knownAuthorities || Constants.NOT_APPLICABLE));
+                        this.logger.verbosePii("Authority Metadata: " + (this.authorityOptions.authorityMetadata || Constants.NOT_APPLICABLE));
+                        this.logger.verbosePii("Canonical Authority: " + (metadataEntity.canonical_authority || Constants.NOT_APPLICABLE));
                         metadata = this.getCloudDiscoveryMetadataFromConfig();
                         if (metadata) {
+                            this.logger.verbose("Found cloud discovery metadata in the config.");
                             metadataEntity.updateCloudDiscoveryMetadata(metadata, false);
                             return [2 /*return*/, AuthorityMetadataSource.CONFIG];
                         }
-                        // If The cached metadata came from config but that config was not passed to this instance, we must go to the network
-                        if (this.isAuthoritySameType(metadataEntity) && metadataEntity.aliasesFromNetwork && !metadataEntity.isExpired()) {
+                        // If the cached metadata came from config but that config was not passed to this instance, we must go to the network
+                        this.logger.verbose("Did not find cloud discovery metadata in the config... Attempting to get cloud discovery metadata from the cache.");
+                        metadataEntityExpired = metadataEntity.isExpired();
+                        if (this.isAuthoritySameType(metadataEntity) && metadataEntity.aliasesFromNetwork && !metadataEntityExpired) {
+                            this.logger.verbose("Found metadata in the cache.");
                             // No need to update
                             return [2 /*return*/, AuthorityMetadataSource.CACHE];
                         }
-                        harcodedMetadata = this.getCloudDiscoveryMetadataFromHarcodedValues();
+                        else if (metadataEntityExpired) {
+                            this.logger.verbose("The metadata entity is expired.");
+                        }
+                        this.logger.verbose("Did not find cloud discovery metadata in the cache... Attempting to get cloud discovery metadata from the network.");
                         return [4 /*yield*/, this.getCloudDiscoveryMetadataFromNetwork()];
                     case 1:
                         metadata = _a.sent();
                         if (metadata) {
+                            this.logger.verbose("cloud discovery metadata was successfully returned from getCloudDiscoveryMetadataFromNetwork()");
                             metadataEntity.updateCloudDiscoveryMetadata(metadata, true);
                             return [2 /*return*/, AuthorityMetadataSource.NETWORK];
                         }
+                        this.logger.verbose("Did not find cloud discovery metadata from the network... Attempting to get cloud discovery metadata from hardcoded values.");
+                        harcodedMetadata = this.getCloudDiscoveryMetadataFromHarcodedValues();
                         if (harcodedMetadata && !this.options.skipAuthorityMetadataCache) {
+                            this.logger.verbose("Found cloud discovery metadata from hardcoded values.");
                             metadataEntity.updateCloudDiscoveryMetadata(harcodedMetadata, false);
                             return [2 /*return*/, AuthorityMetadataSource.HARDCODED_VALUES];
                         }
-                        else {
-                            // Metadata could not be obtained from config, cache or network
-                            throw ClientConfigurationError.createUntrustedAuthorityError();
-                        }
+                        // Metadata could not be obtained from the config, cache, network or hardcoded values
+                        this.logger.error("Did not find cloud discovery metadata from hardcoded values... Metadata could not be obtained from config, cache, network or hardcoded values. Throwing Untrusted Authority Error.");
+                        throw ClientConfigurationError.createUntrustedAuthorityError();
                 }
             });
         });
@@ -7063,19 +7090,28 @@ var Authority = /** @class */ (function () {
     Authority.prototype.getCloudDiscoveryMetadataFromConfig = function () {
         // Check if network response was provided in config
         if (this.authorityOptions.cloudDiscoveryMetadata) {
+            this.logger.verbose("The cloud discovery metadata has been provided as a network response, in the config.");
             try {
+                this.logger.verbose("Attempting to parse the cloud discovery metadata.");
                 var parsedResponse = JSON.parse(this.authorityOptions.cloudDiscoveryMetadata);
                 var metadata = Authority.getCloudDiscoveryMetadataFromNetworkResponse(parsedResponse.metadata, this.hostnameAndPort);
+                this.logger.verbose("Parsed the cloud discovery metadata.");
                 if (metadata) {
+                    this.logger.verbose("There is returnable metadata attached to the parsed cloud discovery metadata.");
                     return metadata;
                 }
+                else {
+                    this.logger.verbose("There is no metadata attached to the parsed cloud discovery metadata.");
+                }
             }
             catch (e) {
+                this.logger.verbose("Unable to parse the cloud discovery metadata. Throwing Invalid Cloud Discovery Metadata Error.");
                 throw ClientConfigurationError.createInvalidCloudDiscoveryMetadataError();
             }
         }
         // If cloudDiscoveryMetadata is empty or does not contain the host, check knownAuthorities
         if (this.isInKnownAuthorities()) {
+            this.logger.verbose("The host is included in knownAuthorities. Creating new cloud discovery metadata from the host.");
             return Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
         }
         return null;
@@ -7087,7 +7123,7 @@ var Authority = /** @class */ (function () {
      */
     Authority.prototype.getCloudDiscoveryMetadataFromNetwork = function () {
         return __awaiter(this, void 0, void 0, function () {
-            var instanceDiscoveryEndpoint, options, match, response, metadata;
+            var instanceDiscoveryEndpoint, options, match, response, typedResponseBody, metadata, error_1, typedError;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
@@ -7103,21 +7139,47 @@ var Authority = /** @class */ (function () {
                         return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(instanceDiscoveryEndpoint, options)];
                     case 2:
                         response = _a.sent();
-                        metadata = isCloudInstanceDiscoveryResponse(response.body)
-                            ? response.body.metadata
-                            : [];
-                        if (metadata.length === 0) {
-                            // If no metadata is returned, authority is untrusted
+                        typedResponseBody = void 0;
+                        metadata = void 0;
+                        if (isCloudInstanceDiscoveryResponse(response.body)) {
+                            typedResponseBody = response.body;
+                            metadata = typedResponseBody.metadata;
+                            this.logger.verbosePii("tenant_discovery_endpoint is: " + typedResponseBody.tenant_discovery_endpoint);
+                        }
+                        else if (isCloudInstanceDiscoveryErrorResponse(response.body)) {
+                            this.logger.warning("A CloudInstanceDiscoveryErrorResponse was returned. The cloud instance discovery network request's status code is: " + response.status);
+                            typedResponseBody = response.body;
+                            if (typedResponseBody.error === Constants.INVALID_INSTANCE) {
+                                this.logger.error("The CloudInstanceDiscoveryErrorResponse error is invalid_instance.");
+                                return [2 /*return*/, null];
+                            }
+                            this.logger.warning("The CloudInstanceDiscoveryErrorResponse error is " + typedResponseBody.error);
+                            this.logger.warning("The CloudInstanceDiscoveryErrorResponse error description is " + typedResponseBody.error_description);
+                            this.logger.warning("Setting the value of the CloudInstanceDiscoveryMetadata (returned from the network) to []");
+                            metadata = [];
+                        }
+                        else {
+                            this.logger.error("AAD did not return a CloudInstanceDiscoveryResponse or CloudInstanceDiscoveryErrorResponse");
                             return [2 /*return*/, null];
                         }
+                        this.logger.verbose("Attempting to find a match between the developer's authority and the CloudInstanceDiscoveryMetadata returned from the network request.");
                         match = Authority.getCloudDiscoveryMetadataFromNetworkResponse(metadata, this.hostnameAndPort);
                         return [3 /*break*/, 4];
                     case 3:
-                        _a.sent();
+                        error_1 = _a.sent();
+                        if (error_1 instanceof AuthError) {
+                            this.logger.error("There was a network error while attempting to get the cloud discovery instance metadata.\nError: " + error_1.errorCode + "\nError Description: " + error_1.errorMessage);
+                        }
+                        else {
+                            typedError = error_1;
+                            this.logger.error("A non-MSALJS error was thrown while attempting to get the cloud instance discovery metadata.\nError: " + typedError.name + "\nError Description: " + typedError.message);
+                        }
                         return [2 /*return*/, null];
                     case 4:
+                        // Custom Domain scenario, host is trusted because Instance Discovery call succeeded
                         if (!match) {
-                            // Custom Domain scenario, host is trusted because Instance Discovery call succeeded
+                            this.logger.warning("The developer's authority was not found within the CloudInstanceDiscoveryMetadata returned from the network request.");
+                            this.logger.verbose("Creating custom Authority for custom domain scenario.");
                             match = Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
                         }
                         return [2 /*return*/, match];
@@ -7249,7 +7311,7 @@ var Authority = /** @class */ (function () {
     return Authority;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7268,13 +7330,13 @@ var AuthorityFactory = /** @class */ (function () {
      * @param networkClient
      * @param protocolMode
      */
-    AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, proxyUrl) {
+    AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, logger, proxyUrl) {
         return __awaiter(this, void 0, void 0, function () {
             var acquireTokenAuthority, e_1;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, proxyUrl);
+                        acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, proxyUrl);
                         _a.label = 1;
                     case 1:
                         _a.trys.push([1, 3, , 4]);
@@ -7300,17 +7362,17 @@ var AuthorityFactory = /** @class */ (function () {
      * @param networkInterface
      * @param protocolMode
      */
-    AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions, proxyUrl) {
+    AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions, logger, proxyUrl) {
         // Throw error if authority url is empty
         if (StringUtils.isEmpty(authorityUrl)) {
             throw ClientConfigurationError.createUrlEmptyError();
         }
-        return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, proxyUrl);
+        return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, logger, proxyUrl);
     };
     return AuthorityFactory;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7341,7 +7403,7 @@ var ServerTelemetryEntity = /** @class */ (function () {
     return ServerTelemetryEntity;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7369,7 +7431,7 @@ var ThrottlingEntity = /** @class */ (function () {
     return ThrottlingEntity;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7386,7 +7448,7 @@ var StubbedNetworkModule = {
     }
 };
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7431,7 +7493,7 @@ var JoseHeaderError = /** @class */ (function (_super) {
     return JoseHeaderError;
 }(AuthError));
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7471,7 +7533,7 @@ var JoseHeader = /** @class */ (function () {
     return JoseHeader;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7530,7 +7592,7 @@ var AuthenticationHeaderParser = /** @class */ (function () {
     return AuthenticationHeaderParser;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7692,7 +7754,7 @@ var ServerTelemetryManager = /** @class */ (function () {
     return ServerTelemetryManager;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7987,7 +8049,7 @@ var PerformanceClient = /** @class */ (function () {
     return PerformanceClient;
 }());
 
-/*! @azure/msal-common v8.0.0 2022-11-07 */
+/*! @azure/msal-common v9.0.1 2022-12-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8576,6 +8638,7 @@ var TemporaryCacheKeys;
     TemporaryCacheKeys["CCS_CREDENTIAL"] = "ccs.credential";
     TemporaryCacheKeys["CORRELATION_ID"] = "request.correlationId";
     TemporaryCacheKeys["NATIVE_REQUEST"] = "request.native";
+    TemporaryCacheKeys["REDIRECT_CONTEXT"] = "request.redirect.context";
 })(TemporaryCacheKeys || (TemporaryCacheKeys = {}));
 /**
  * Cache keys stored in-memory
@@ -9849,6 +9912,19 @@ var BrowserCacheManager = /** @class */ (function (_super) {
         }
         return currentCacheKey;
     };
+    /**
+     * Returns application id as redirect context during AcquireTokenRedirect flow.
+     */
+    BrowserCacheManager.prototype.getRedirectRequestContext = function () {
+        return this.getTemporaryCache(TemporaryCacheKeys.REDIRECT_CONTEXT, true);
+    };
+    /**
+     * Sets application id as the redirect context during AcquireTokenRedirect flow.
+     * @param value
+     */
+    BrowserCacheManager.prototype.setRedirectRequestContext = function (value) {
+        this.setTemporaryCache(TemporaryCacheKeys.REDIRECT_CONTEXT, value, true);
+    };
     return BrowserCacheManager;
 }(CacheManager));
 var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
@@ -9862,7 +9938,7 @@ var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
 
 /* eslint-disable header/header */
 var name = "@azure/msal-browser";
-var version = "2.31.0";
+var version = "2.32.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10415,11 +10491,11 @@ var BaseInteractionClient = /** @class */ (function () {
                         };
                         if (!requestAuthority) return [3 /*break*/, 2];
                         this.logger.verbose("Creating discovered authority with request authority");
-                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(requestAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions)];
+                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(requestAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger)];
                     case 1: return [2 /*return*/, _a.sent()];
                     case 2:
                         this.logger.verbose("Creating discovered authority with configured authority");
-                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(this.config.auth.authority, this.config.system.networkClient, this.browserStorage, authorityOptions)];
+                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(this.config.auth.authority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger)];
                     case 3: return [2 /*return*/, _a.sent()];
                 }
             });
@@ -10648,7 +10724,7 @@ var StandardInteractionClient = /** @class */ (function (_super) {
                         userAuthority = requestAuthority ? requestAuthority : this.config.auth.authority;
                         builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);
                         this.logger.verbose("Creating discovered authority with configured authority", this.correlationId);
-                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions)
+                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger)
                                 .then(function (result) {
                                 getAuthorityMeasurement.endMeasurement({
                                     success: true
@@ -10826,7 +10902,7 @@ var InteractionHandler = /** @class */ (function () {
                 switch (_a.label) {
                     case 0:
                         cloudInstanceAuthorityUri = "https://" + cloudInstanceHostname + "/" + authority.tenant + "/";
-                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(cloudInstanceAuthorityUri, networkModule, this.browserStorage, authority.options)];
+                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(cloudInstanceAuthorityUri, networkModule, this.browserStorage, authority.options, this.logger)];
                     case 1:
                         cloudInstanceAuthority = _a.sent();
                         this.authModule.updateAuthority(cloudInstanceAuthority);
@@ -14945,7 +15021,7 @@ var TokenCache = /** @class */ (function () {
                 authorityMetadata: this.config.auth.authorityMetadata,
                 skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,
             };
-            authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions);
+            authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions, this.logger);
             // "clientInfo" from options takes precedence over "clientInfo" in response
             if (options.clientInfo) {
                 this.logger.trace("TokenCache - homeAccountId from options");