@azure/msal-browser 2.31.0 → 2.32.1

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.31.0 2022-11-07 */
+/*! @azure/msal-browser v2.32.1 2022-12-07 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -119,7 +119,7 @@
         return ar;
     }
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*! *****************************************************************************
     Copyright (c) Microsoft Corporation.
 
@@ -206,7 +206,7 @@
         return r;
     }
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -249,6 +249,7 @@
         AUTHORIZATION_PENDING: "authorization_pending",
         NOT_DEFINED: "not_defined",
         EMPTY_STRING: "",
+        NOT_APPLICABLE: "N/A",
         FORWARD_SLASH: "/",
         IMDS_ENDPOINT: "http://169.254.169.254/metadata/instance/compute/location",
         IMDS_VERSION: "2020-06-01",
@@ -259,7 +260,8 @@
         KNOWN_PUBLIC_CLOUDS: ["login.microsoftonline.com", "login.windows.net", "login.microsoft.com", "sts.windows.net"],
         TOKEN_RESPONSE_TYPE: "token",
         ID_TOKEN_RESPONSE_TYPE: "id_token",
-        SHR_NONCE_VALIDITY: 240
+        SHR_NONCE_VALIDITY: 240,
+        INVALID_INSTANCE: "invalid_instance",
     };
     var OIDC_DEFAULT_SCOPES = [
         Constants.OPENID_SCOPE,
@@ -587,7 +589,7 @@
         JsonTypes["Jwk"] = "JWK";
     })(JsonTypes || (JsonTypes = {}));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -643,7 +645,7 @@
         return AuthError;
     }(Error));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -718,7 +720,7 @@
         }
     };
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1213,7 +1215,7 @@
         return ClientAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1338,7 +1340,7 @@
         return StringUtils;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1518,12 +1520,12 @@
         return Logger;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /* eslint-disable header/header */
     var name$1 = "@azure/msal-common";
-    var version$1 = "8.0.0";
+    var version$1 = "9.0.1";
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1544,7 +1546,7 @@
         AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
     })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1703,7 +1705,7 @@
         return CredentialEntity;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1958,7 +1960,7 @@
         return ClientConfigurationError;
     }(ClientAuthError));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2142,7 +2144,7 @@
         return ScopeSet;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2180,7 +2182,7 @@
         };
     }
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2195,7 +2197,7 @@
         AuthorityType[AuthorityType["Dsts"] = 2] = "Dsts";
     })(AuthorityType || (AuthorityType = {}));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2434,7 +2436,7 @@
         return AccountEntity;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2486,7 +2488,7 @@
         return AuthToken;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3365,7 +3367,7 @@
         return DefaultStorageClass;
     }(CacheManager));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3459,7 +3461,7 @@
         return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
     }
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3479,7 +3481,7 @@
         return ServerError;
     }(AuthError));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3575,7 +3577,7 @@
         return ThrottlingUtils;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3624,7 +3626,7 @@
         return NetworkManager;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3635,7 +3637,7 @@
         CcsCredentialType["UPN"] = "UPN";
     })(CcsCredentialType || (CcsCredentialType = {}));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3726,7 +3728,7 @@
         return BaseClient;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3812,7 +3814,7 @@
         return RequestValidator;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4190,7 +4192,7 @@
         return RequestParameterBuilder;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4254,7 +4256,7 @@
         return IdTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4304,7 +4306,7 @@
         return TimeUtils;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4418,7 +4420,7 @@
         return AccessTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4485,7 +4487,7 @@
         return RefreshTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4560,7 +4562,7 @@
         return InteractionRequiredAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4576,7 +4578,7 @@
         return CacheRecord;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4647,7 +4649,7 @@
         return ProtocolUtils;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4881,7 +4883,7 @@
         return UrlString;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4982,7 +4984,7 @@
         return PopTokenGenerator;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5052,7 +5054,7 @@
         return AppMetadataEntity;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5088,7 +5090,7 @@
         return TokenCacheContext;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5368,7 +5370,7 @@
         return ResponseHandler;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5821,7 +5823,7 @@
         return AuthorizationCodeClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5946,7 +5948,7 @@
         PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
     })(PerformanceEventStatus || (PerformanceEventStatus = {}));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6211,7 +6213,7 @@
         return RefreshTokenClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6335,7 +6337,7 @@
         return SilentFlowClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6347,7 +6349,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6356,7 +6358,7 @@
     var EndpointMetadata = rawMetdataJSON.endpointMetadata;
     var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6370,7 +6372,7 @@
         ProtocolMode["OIDC"] = "OIDC";
     })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6447,7 +6449,7 @@
         return AuthorityMetadataEntity;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6457,7 +6459,17 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    function isCloudInstanceDiscoveryErrorResponse(response) {
+        return (response.hasOwnProperty("error") &&
+            response.hasOwnProperty("error_description"));
+    }
+
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6579,7 +6591,7 @@
         return RegionDiscovery;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6590,7 +6602,7 @@
      * endpoint. It will store the pertinent config data in this object for use during token calls.
      */
     var Authority = /** @class */ (function () {
-        function Authority(authority, networkInterface, cacheManager, authorityOptions, proxyUrl) {
+        function Authority(authority, networkInterface, cacheManager, authorityOptions, logger, proxyUrl) {
             this.canonicalAuthority = authority;
             this._canonicalAuthority.validateAsUri();
             this.networkInterface = networkInterface;
@@ -6599,6 +6611,7 @@
             this.regionDiscovery = new RegionDiscovery(networkInterface);
             this.regionDiscoveryMetadata = { region_used: undefined, region_source: undefined, region_outcome: undefined };
             this.proxyUrl = proxyUrl || Constants.EMPTY_STRING;
+            this.logger = logger;
         }
         Object.defineProperty(Authority.prototype, "authorityType", {
             // See above for AuthorityType
@@ -7025,36 +7038,50 @@
          */
         Authority.prototype.updateCloudDiscoveryMetadata = function (metadataEntity) {
             return __awaiter(this, void 0, void 0, function () {
-                var metadata, harcodedMetadata;
+                var metadata, metadataEntityExpired, harcodedMetadata;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
+                            this.logger.verbose("Attempting to get cloud discovery metadata in the config");
+                            this.logger.verbosePii("Known Authorities: " + (this.authorityOptions.knownAuthorities || Constants.NOT_APPLICABLE));
+                            this.logger.verbosePii("Authority Metadata: " + (this.authorityOptions.authorityMetadata || Constants.NOT_APPLICABLE));
+                            this.logger.verbosePii("Canonical Authority: " + (metadataEntity.canonical_authority || Constants.NOT_APPLICABLE));
                             metadata = this.getCloudDiscoveryMetadataFromConfig();
                             if (metadata) {
+                                this.logger.verbose("Found cloud discovery metadata in the config.");
                                 metadataEntity.updateCloudDiscoveryMetadata(metadata, false);
                                 return [2 /*return*/, AuthorityMetadataSource.CONFIG];
                             }
-                            // If The cached metadata came from config but that config was not passed to this instance, we must go to the network
-                            if (this.isAuthoritySameType(metadataEntity) && metadataEntity.aliasesFromNetwork && !metadataEntity.isExpired()) {
+                            // If the cached metadata came from config but that config was not passed to this instance, we must go to the network
+                            this.logger.verbose("Did not find cloud discovery metadata in the config... Attempting to get cloud discovery metadata from the cache.");
+                            metadataEntityExpired = metadataEntity.isExpired();
+                            if (this.isAuthoritySameType(metadataEntity) && metadataEntity.aliasesFromNetwork && !metadataEntityExpired) {
+                                this.logger.verbose("Found metadata in the cache.");
                                 // No need to update
                                 return [2 /*return*/, AuthorityMetadataSource.CACHE];
                             }
-                            harcodedMetadata = this.getCloudDiscoveryMetadataFromHarcodedValues();
+                            else if (metadataEntityExpired) {
+                                this.logger.verbose("The metadata entity is expired.");
+                            }
+                            this.logger.verbose("Did not find cloud discovery metadata in the cache... Attempting to get cloud discovery metadata from the network.");
                             return [4 /*yield*/, this.getCloudDiscoveryMetadataFromNetwork()];
                         case 1:
                             metadata = _a.sent();
                             if (metadata) {
+                                this.logger.verbose("cloud discovery metadata was successfully returned from getCloudDiscoveryMetadataFromNetwork()");
                                 metadataEntity.updateCloudDiscoveryMetadata(metadata, true);
                                 return [2 /*return*/, AuthorityMetadataSource.NETWORK];
                             }
+                            this.logger.verbose("Did not find cloud discovery metadata from the network... Attempting to get cloud discovery metadata from hardcoded values.");
+                            harcodedMetadata = this.getCloudDiscoveryMetadataFromHarcodedValues();
                             if (harcodedMetadata && !this.options.skipAuthorityMetadataCache) {
+                                this.logger.verbose("Found cloud discovery metadata from hardcoded values.");
                                 metadataEntity.updateCloudDiscoveryMetadata(harcodedMetadata, false);
                                 return [2 /*return*/, AuthorityMetadataSource.HARDCODED_VALUES];
                             }
-                            else {
-                                // Metadata could not be obtained from config, cache or network
-                                throw ClientConfigurationError.createUntrustedAuthorityError();
-                            }
+                            // Metadata could not be obtained from the config, cache, network or hardcoded values
+                            this.logger.error("Did not find cloud discovery metadata from hardcoded values... Metadata could not be obtained from config, cache, network or hardcoded values. Throwing Untrusted Authority Error.");
+                            throw ClientConfigurationError.createUntrustedAuthorityError();
                     }
                 });
             });
@@ -7065,19 +7092,28 @@
         Authority.prototype.getCloudDiscoveryMetadataFromConfig = function () {
             // Check if network response was provided in config
             if (this.authorityOptions.cloudDiscoveryMetadata) {
+                this.logger.verbose("The cloud discovery metadata has been provided as a network response, in the config.");
                 try {
+                    this.logger.verbose("Attempting to parse the cloud discovery metadata.");
                     var parsedResponse = JSON.parse(this.authorityOptions.cloudDiscoveryMetadata);
                     var metadata = Authority.getCloudDiscoveryMetadataFromNetworkResponse(parsedResponse.metadata, this.hostnameAndPort);
+                    this.logger.verbose("Parsed the cloud discovery metadata.");
                     if (metadata) {
+                        this.logger.verbose("There is returnable metadata attached to the parsed cloud discovery metadata.");
                         return metadata;
                     }
+                    else {
+                        this.logger.verbose("There is no metadata attached to the parsed cloud discovery metadata.");
+                    }
                 }
                 catch (e) {
+                    this.logger.verbose("Unable to parse the cloud discovery metadata. Throwing Invalid Cloud Discovery Metadata Error.");
                     throw ClientConfigurationError.createInvalidCloudDiscoveryMetadataError();
                 }
             }
             // If cloudDiscoveryMetadata is empty or does not contain the host, check knownAuthorities
             if (this.isInKnownAuthorities()) {
+                this.logger.verbose("The host is included in knownAuthorities. Creating new cloud discovery metadata from the host.");
                 return Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
             }
             return null;
@@ -7089,7 +7125,7 @@
          */
         Authority.prototype.getCloudDiscoveryMetadataFromNetwork = function () {
             return __awaiter(this, void 0, void 0, function () {
-                var instanceDiscoveryEndpoint, options, match, response, metadata;
+                var instanceDiscoveryEndpoint, options, match, response, typedResponseBody, metadata, error_1, typedError;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
@@ -7105,21 +7141,47 @@
                             return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(instanceDiscoveryEndpoint, options)];
                         case 2:
                             response = _a.sent();
-                            metadata = isCloudInstanceDiscoveryResponse(response.body)
-                                ? response.body.metadata
-                                : [];
-                            if (metadata.length === 0) {
-                                // If no metadata is returned, authority is untrusted
+                            typedResponseBody = void 0;
+                            metadata = void 0;
+                            if (isCloudInstanceDiscoveryResponse(response.body)) {
+                                typedResponseBody = response.body;
+                                metadata = typedResponseBody.metadata;
+                                this.logger.verbosePii("tenant_discovery_endpoint is: " + typedResponseBody.tenant_discovery_endpoint);
+                            }
+                            else if (isCloudInstanceDiscoveryErrorResponse(response.body)) {
+                                this.logger.warning("A CloudInstanceDiscoveryErrorResponse was returned. The cloud instance discovery network request's status code is: " + response.status);
+                                typedResponseBody = response.body;
+                                if (typedResponseBody.error === Constants.INVALID_INSTANCE) {
+                                    this.logger.error("The CloudInstanceDiscoveryErrorResponse error is invalid_instance.");
+                                    return [2 /*return*/, null];
+                                }
+                                this.logger.warning("The CloudInstanceDiscoveryErrorResponse error is " + typedResponseBody.error);
+                                this.logger.warning("The CloudInstanceDiscoveryErrorResponse error description is " + typedResponseBody.error_description);
+                                this.logger.warning("Setting the value of the CloudInstanceDiscoveryMetadata (returned from the network) to []");
+                                metadata = [];
+                            }
+                            else {
+                                this.logger.error("AAD did not return a CloudInstanceDiscoveryResponse or CloudInstanceDiscoveryErrorResponse");
                                 return [2 /*return*/, null];
                             }
+                            this.logger.verbose("Attempting to find a match between the developer's authority and the CloudInstanceDiscoveryMetadata returned from the network request.");
                             match = Authority.getCloudDiscoveryMetadataFromNetworkResponse(metadata, this.hostnameAndPort);
                             return [3 /*break*/, 4];
                         case 3:
-                            _a.sent();
+                            error_1 = _a.sent();
+                            if (error_1 instanceof AuthError) {
+                                this.logger.error("There was a network error while attempting to get the cloud discovery instance metadata.\nError: " + error_1.errorCode + "\nError Description: " + error_1.errorMessage);
+                            }
+                            else {
+                                typedError = error_1;
+                                this.logger.error("A non-MSALJS error was thrown while attempting to get the cloud instance discovery metadata.\nError: " + typedError.name + "\nError Description: " + typedError.message);
+                            }
                             return [2 /*return*/, null];
                         case 4:
+                            // Custom Domain scenario, host is trusted because Instance Discovery call succeeded
                             if (!match) {
-                                // Custom Domain scenario, host is trusted because Instance Discovery call succeeded
+                                this.logger.warning("The developer's authority was not found within the CloudInstanceDiscoveryMetadata returned from the network request.");
+                                this.logger.verbose("Creating custom Authority for custom domain scenario.");
                                 match = Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
                             }
                             return [2 /*return*/, match];
@@ -7251,7 +7313,7 @@
         return Authority;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7270,13 +7332,13 @@
          * @param networkClient
          * @param protocolMode
          */
-        AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, proxyUrl) {
+        AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, logger, proxyUrl) {
             return __awaiter(this, void 0, void 0, function () {
                 var acquireTokenAuthority, e_1;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
-                            acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, proxyUrl);
+                            acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, proxyUrl);
                             _a.label = 1;
                         case 1:
                             _a.trys.push([1, 3, , 4]);
@@ -7302,17 +7364,17 @@
          * @param networkInterface
          * @param protocolMode
          */
-        AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions, proxyUrl) {
+        AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions, logger, proxyUrl) {
             // Throw error if authority url is empty
             if (StringUtils.isEmpty(authorityUrl)) {
                 throw ClientConfigurationError.createUrlEmptyError();
             }
-            return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, proxyUrl);
+            return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, logger, proxyUrl);
         };
         return AuthorityFactory;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7343,7 +7405,7 @@
         return ServerTelemetryEntity;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7371,7 +7433,7 @@
         return ThrottlingEntity;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7388,7 +7450,7 @@
         }
     };
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7433,7 +7495,7 @@
         return JoseHeaderError;
     }(AuthError));
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7473,7 +7535,7 @@
         return JoseHeader;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7532,7 +7594,7 @@
         return AuthenticationHeaderParser;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7694,7 +7756,7 @@
         return ServerTelemetryManager;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7989,7 +8051,7 @@
         return PerformanceClient;
     }());
 
-    /*! @azure/msal-common v8.0.0 2022-11-07 */
+    /*! @azure/msal-common v9.0.1 2022-12-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8578,6 +8640,7 @@
         TemporaryCacheKeys["CCS_CREDENTIAL"] = "ccs.credential";
         TemporaryCacheKeys["CORRELATION_ID"] = "request.correlationId";
         TemporaryCacheKeys["NATIVE_REQUEST"] = "request.native";
+        TemporaryCacheKeys["REDIRECT_CONTEXT"] = "request.redirect.context";
     })(TemporaryCacheKeys || (TemporaryCacheKeys = {}));
     /**
      * Cache keys stored in-memory
@@ -9851,6 +9914,19 @@
             }
             return currentCacheKey;
         };
+        /**
+         * Returns application id as redirect context during AcquireTokenRedirect flow.
+         */
+        BrowserCacheManager.prototype.getRedirectRequestContext = function () {
+            return this.getTemporaryCache(TemporaryCacheKeys.REDIRECT_CONTEXT, true);
+        };
+        /**
+         * Sets application id as the redirect context during AcquireTokenRedirect flow.
+         * @param value
+         */
+        BrowserCacheManager.prototype.setRedirectRequestContext = function (value) {
+            this.setTemporaryCache(TemporaryCacheKeys.REDIRECT_CONTEXT, value, true);
+        };
         return BrowserCacheManager;
     }(CacheManager));
     var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
@@ -9864,7 +9940,7 @@
 
     /* eslint-disable header/header */
     var name = "@azure/msal-browser";
-    var version = "2.31.0";
+    var version = "2.32.1";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10417,11 +10493,11 @@
                             };
                             if (!requestAuthority) return [3 /*break*/, 2];
                             this.logger.verbose("Creating discovered authority with request authority");
-                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(requestAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions)];
+                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(requestAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger)];
                         case 1: return [2 /*return*/, _a.sent()];
                         case 2:
                             this.logger.verbose("Creating discovered authority with configured authority");
-                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(this.config.auth.authority, this.config.system.networkClient, this.browserStorage, authorityOptions)];
+                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(this.config.auth.authority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger)];
                         case 3: return [2 /*return*/, _a.sent()];
                     }
                 });
@@ -10650,7 +10726,7 @@
                             userAuthority = requestAuthority ? requestAuthority : this.config.auth.authority;
                             builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);
                             this.logger.verbose("Creating discovered authority with configured authority", this.correlationId);
-                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions)
+                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger)
                                     .then(function (result) {
                                     getAuthorityMeasurement.endMeasurement({
                                         success: true
@@ -10828,7 +10904,7 @@
                     switch (_a.label) {
                         case 0:
                             cloudInstanceAuthorityUri = "https://" + cloudInstanceHostname + "/" + authority.tenant + "/";
-                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(cloudInstanceAuthorityUri, networkModule, this.browserStorage, authority.options)];
+                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(cloudInstanceAuthorityUri, networkModule, this.browserStorage, authority.options, this.logger)];
                         case 1:
                             cloudInstanceAuthority = _a.sent();
                             this.authModule.updateAuthority(cloudInstanceAuthority);
@@ -14947,7 +15023,7 @@
                     authorityMetadata: this.config.auth.authorityMetadata,
                     skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,
                 };
-                authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions);
+                authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions, this.logger);
                 // "clientInfo" from options takes precedence over "clientInfo" in response
                 if (options.clientInfo) {
                     this.logger.trace("TokenCache - homeAccountId from options");