@azure/msal-browser 2.35.0 → 2.37.0

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.35.0 2023-04-03 */
+/*! @azure/msal-browser v2.37.0 2023-05-01 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -119,7 +119,7 @@
         return ar;
     }
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*! *****************************************************************************
     Copyright (c) Microsoft Corporation.
 
@@ -206,7 +206,7 @@
         return r;
     }
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -226,6 +226,9 @@
         DSTS: "dstsv2",
         // Default AAD Instance Discovery Endpoint
         AAD_INSTANCE_DISCOVERY_ENDPT: "https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=",
+        // CIAM URL
+        CIAM_AUTH_URL: ".ciamlogin.com",
+        AAD_TENANT_DOMAIN_SUFFIX: ".onmicrosoft.com",
         // Resource delimiter - used for certain cache entries
         RESOURCE_DELIM: "|",
         // Placeholder for non-existent account ids/objects
@@ -575,7 +578,7 @@
         JsonTypes["Pop"] = "pop";
     })(JsonTypes || (JsonTypes = {}));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -631,7 +634,7 @@
         return AuthError;
     }(Error));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -706,7 +709,7 @@
         }
     };
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1221,7 +1224,7 @@
         return ClientAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1346,7 +1349,7 @@
         return StringUtils;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1536,12 +1539,12 @@
         return Logger;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /* eslint-disable header/header */
     var name$1 = "@azure/msal-common";
-    var version$1 = "12.0.0";
+    var version$1 = "13.0.0";
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1562,7 +1565,7 @@
         AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
     })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1817,7 +1820,7 @@
         return ClientConfigurationError;
     }(ClientAuthError));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2016,7 +2019,7 @@
         return ScopeSet;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2054,7 +2057,7 @@
         };
     }
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2067,9 +2070,10 @@
         AuthorityType[AuthorityType["Default"] = 0] = "Default";
         AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
         AuthorityType[AuthorityType["Dsts"] = 2] = "Dsts";
+        AuthorityType[AuthorityType["Ciam"] = 3] = "Ciam";
     })(AuthorityType || (AuthorityType = {}));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2308,7 +2312,7 @@
         return AccountEntity;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2360,7 +2364,7 @@
         return AuthToken;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3408,7 +3412,7 @@
         return DefaultStorageClass;
     }(CacheManager));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3501,7 +3505,7 @@
         return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
     }
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3521,7 +3525,7 @@
         return ServerError;
     }(AuthError));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3617,7 +3621,7 @@
         return ThrottlingUtils;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3666,7 +3670,7 @@
         return NetworkManager;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3677,7 +3681,7 @@
         CcsCredentialType["UPN"] = "UPN";
     })(CcsCredentialType || (CcsCredentialType = {}));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3768,7 +3772,7 @@
         return RequestValidator;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4146,7 +4150,7 @@
         return RequestParameterBuilder;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4248,7 +4252,7 @@
         return BaseClient;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4386,7 +4390,7 @@
         return CredentialEntity;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4450,7 +4454,7 @@
         return IdTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4500,7 +4504,7 @@
         return TimeUtils;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4614,7 +4618,7 @@
         return AccessTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4681,7 +4685,7 @@
         return RefreshTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4760,7 +4764,7 @@
         return InteractionRequiredAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4776,7 +4780,7 @@
         return CacheRecord;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4847,7 +4851,7 @@
         return ProtocolUtils;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5081,7 +5085,7 @@
         return UrlString;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5310,7 +5314,7 @@
         "status",
     ]);
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5419,7 +5423,7 @@
         return PopTokenGenerator;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5489,7 +5493,7 @@
         return AppMetadataEntity;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5525,7 +5529,7 @@
         return TokenCacheContext;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5812,7 +5816,7 @@
         return ResponseHandler;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6290,7 +6294,7 @@
         return AuthorizationCodeClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6564,7 +6568,7 @@
         return RefreshTokenClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6688,7 +6692,7 @@
         return SilentFlowClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6700,7 +6704,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6709,7 +6713,7 @@
     var EndpointMetadata = rawMetdataJSON.endpointMetadata;
     var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6723,7 +6727,7 @@
         ProtocolMode["OIDC"] = "OIDC";
     })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6800,7 +6804,7 @@
         return AuthorityMetadataEntity;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6810,7 +6814,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6820,7 +6824,7 @@
             response.hasOwnProperty("error_description"));
     }
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6952,7 +6956,7 @@
         return RegionDiscovery;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6978,6 +6982,10 @@
         Object.defineProperty(Authority.prototype, "authorityType", {
             // See above for AuthorityType
             get: function () {
+                // CIAM auth url pattern is being standardized as: <tenant>.ciamlogin.com
+                if (this.canonicalAuthorityUrlComponents.HostNameAndPort.endsWith(Constants.CIAM_AUTH_URL)) {
+                    return AuthorityType.Ciam;
+                }
                 var pathSegments = this.canonicalAuthorityUrlComponents.PathSegments;
                 if (pathSegments.length) {
                     switch (pathSegments[0].toLowerCase()) {
@@ -7265,7 +7273,6 @@
                                 // No need to update
                                 return [2 /*return*/, AuthorityMetadataSource.CACHE];
                             }
-                            harcodedMetadata = this.getEndpointMetadataFromHardcodedValues();
                             (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(exports.PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
                             return [4 /*yield*/, this.getEndpointMetadataFromNetwork()];
                         case 1:
@@ -7281,6 +7288,7 @@
                             metadataEntity.updateEndpointMetadata(metadata, true);
                             return [2 /*return*/, AuthorityMetadataSource.NETWORK];
                         case 4:
+                            harcodedMetadata = this.getEndpointMetadataFromHardcodedValues();
                             if (!(harcodedMetadata && !this.authorityOptions.skipAuthorityMetadataCache)) return [3 /*break*/, 7];
                             if (!((_e = this.authorityOptions.azureRegionConfiguration) === null || _e === void 0 ? void 0 : _e.azureRegion)) return [3 /*break*/, 6];
                             (_f = this.performanceClient) === null || _f === void 0 ? void 0 : _f.setPreQueueTime(exports.PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
@@ -7405,8 +7413,8 @@
         /**
          * Updates the AuthorityMetadataEntity with new aliases, preferred_network and preferred_cache
          * and returns where the information was retrieved from
-         * @param cachedMetadata
-         * @param newMetadata
+         * @param metadataEntity
+         * @returns AuthorityMetadataSource
          */
         Authority.prototype.updateCloudDiscoveryMetadata = function (metadataEntity) {
             var _a, _b;
@@ -7416,6 +7424,7 @@
                     switch (_c.label) {
                         case 0:
                             (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(exports.PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);
+                            // attempt to read metadata from the config
                             this.logger.verbose("Attempting to get cloud discovery metadata in the config");
                             this.logger.verbosePii("Known Authorities: " + (this.authorityOptions.knownAuthorities || Constants.NOT_APPLICABLE));
                             this.logger.verbosePii("Authority Metadata: " + (this.authorityOptions.authorityMetadata || Constants.NOT_APPLICABLE));
@@ -7465,6 +7474,11 @@
          * Parse cloudDiscoveryMetadata config or check knownAuthorities
          */
         Authority.prototype.getCloudDiscoveryMetadataFromConfig = function () {
+            // CIAM does not support cloud discovery metadata
+            if (this.authorityType === AuthorityType.Ciam) {
+                this.logger.verbose("CIAM authorities do not support cloud discovery metadata, generate the aliases from authority host.");
+                return Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
+            }
             // Check if network response was provided in config
             if (this.authorityOptions.cloudDiscoveryMetadata) {
                 this.logger.verbose("The cloud discovery metadata has been provided as a network response, in the config.");
@@ -7684,10 +7698,30 @@
             }
             return metadata;
         };
+        /**
+         * Transform CIAM_AUTHORIY as per the below rules:
+         * If no path segments found and it is a CIAM authority (hostname ends with .ciamlogin.com), then transform it
+         *
+         * NOTE: The transformation path should go away once STS supports CIAM with the format: `tenantIdorDomain.ciamlogin.com`
+         * `ciamlogin.com` can also change in the future and we should accommodate the same
+         *
+         * @param authority
+         */
+        Authority.transformCIAMAuthority = function (authority) {
+            var ciamAuthority = authority.endsWith(Constants.FORWARD_SLASH) ? authority : "" + authority + Constants.FORWARD_SLASH;
+            var authorityUrl = new UrlString(authority);
+            var authorityUrlComponents = authorityUrl.getUrlComponents();
+            // check if transformation is needed
+            if (authorityUrlComponents.PathSegments.length === 0 && (authorityUrlComponents.HostNameAndPort.endsWith(Constants.CIAM_AUTH_URL))) {
+                var tenantIdOrDomain = authorityUrlComponents.HostNameAndPort.split(".")[0];
+                ciamAuthority = "" + ciamAuthority + tenantIdOrDomain + Constants.AAD_TENANT_DOMAIN_SUFFIX;
+            }
+            return ciamAuthority;
+        };
         return Authority;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7708,12 +7742,13 @@
          */
         AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
             return __awaiter(this, void 0, void 0, function () {
-                var acquireTokenAuthority, e_1;
+                var authorityUriFinal, acquireTokenAuthority, e_1;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
                             performanceClient === null || performanceClient === void 0 ? void 0 : performanceClient.addQueueMeasurement(exports.PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
-                            acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
+                            authorityUriFinal = Authority.transformCIAMAuthority(authorityUri);
+                            acquireTokenAuthority = AuthorityFactory.createInstance(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
                             _a.label = 1;
                         case 1:
                             _a.trys.push([1, 3, , 4]);
@@ -7750,7 +7785,7 @@
         return AuthorityFactory;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7781,7 +7816,7 @@
         return ServerTelemetryEntity;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7809,7 +7844,7 @@
         return ThrottlingEntity;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7826,7 +7861,7 @@
         }
     };
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7871,7 +7906,7 @@
         return JoseHeaderError;
     }(AuthError));
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7911,7 +7946,7 @@
         return JoseHeader;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7970,7 +8005,7 @@
         return AuthenticationHeaderParser;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8132,7 +8167,7 @@
         return ServerTelemetryManager;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8535,7 +8570,7 @@
         return PerformanceClient;
     }());
 
-    /*! @azure/msal-common v12.0.0 2023-04-03 */
+    /*! @azure/msal-common v13.0.0 2023-05-01 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9508,7 +9543,7 @@
             _this.logger = logger;
             _this.internalStorage = new MemoryStorage();
             _this.browserStorage = _this.setupBrowserStorage(_this.cacheConfig.cacheLocation);
-            _this.temporaryCacheStorage = _this.setupTemporaryCacheStorage(_this.cacheConfig.cacheLocation);
+            _this.temporaryCacheStorage = _this.setupTemporaryCacheStorage(_this.cacheConfig.temporaryCacheLocation, _this.cacheConfig.cacheLocation);
             // Migrate cache entries from older versions of MSAL.
             if (cacheConfig.cacheMigrationEnabled) {
                 _this.migrateCacheEntries();
@@ -9525,7 +9560,6 @@
                 case exports.BrowserCacheLocation.LocalStorage:
                 case exports.BrowserCacheLocation.SessionStorage:
                     try {
-                        // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
                         return new BrowserStorage(cacheLocation);
                     }
                     catch (e) {
@@ -9538,16 +9572,20 @@
             return new MemoryStorage();
         };
         /**
-         *
+         * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured temporaryCacheLocation.
+         * @param temporaryCacheLocation
          * @param cacheLocation
          */
-        BrowserCacheManager.prototype.setupTemporaryCacheStorage = function (cacheLocation) {
+        BrowserCacheManager.prototype.setupTemporaryCacheStorage = function (temporaryCacheLocation, cacheLocation) {
             switch (cacheLocation) {
                 case exports.BrowserCacheLocation.LocalStorage:
                 case exports.BrowserCacheLocation.SessionStorage:
                     try {
-                        // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
-                        return new BrowserStorage(exports.BrowserCacheLocation.SessionStorage);
+                        /*
+                         * When users do not explicitly choose their own temporaryCacheLocation,
+                         * temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
+                         */
+                        return new BrowserStorage(temporaryCacheLocation || exports.BrowserCacheLocation.SessionStorage);
                     }
                     catch (e) {
                         this.logger.verbose(e);
@@ -9912,7 +9950,7 @@
                     var accessRemoval = tokenKeys.accessToken.indexOf(key);
                     if (accessRemoval > -1) {
                         this.logger.info("BrowserCacheManager: removeTokenKey - accessToken removed from map");
-                        tokenKeys.idToken.splice(accessRemoval, 1);
+                        tokenKeys.accessToken.splice(accessRemoval, 1);
                     }
                     else {
                         this.logger.info("BrowserCacheManager: removeTokenKey - accessToken does not exist in map. Either it was previously removed or it was never added.");
@@ -9923,7 +9961,7 @@
                     var refreshRemoval = tokenKeys.refreshToken.indexOf(key);
                     if (refreshRemoval > -1) {
                         this.logger.info("BrowserCacheManager: removeTokenKey - refreshToken removed from map");
-                        tokenKeys.idToken.splice(refreshRemoval, 1);
+                        tokenKeys.refreshToken.splice(refreshRemoval, 1);
                     }
                     else {
                         this.logger.info("BrowserCacheManager: removeTokenKey - refreshToken does not exist in map. Either it was previously removed or it was never added.");
@@ -10747,6 +10785,7 @@
     var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
         var cacheOptions = {
             cacheLocation: exports.BrowserCacheLocation.MemoryStorage,
+            temporaryCacheLocation: exports.BrowserCacheLocation.MemoryStorage,
             storeAuthStateInCookie: false,
             secureCookies: false,
             cacheMigrationEnabled: false
@@ -10756,7 +10795,7 @@
 
     /* eslint-disable header/header */
     var name = "@azure/msal-browser";
-    var version = "2.35.0";
+    var version = "2.37.0";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -13880,6 +13919,7 @@
         // Default cache options for browser
         var DEFAULT_CACHE_OPTIONS = {
             cacheLocation: exports.BrowserCacheLocation.SessionStorage,
+            temporaryCacheLocation: exports.BrowserCacheLocation.SessionStorage,
             storeAuthStateInCookie: false,
             secureCookies: false,
             // Default cache migration to true if cache location is localStorage since entries are preserved across tabs/windows. Migration has little to no benefit in sessionStorage and memoryStorage
@@ -16565,6 +16605,7 @@
             // initialize in memory storage for native flows
             var nativeCacheOptions = {
                 cacheLocation: exports.BrowserCacheLocation.MemoryStorage,
+                temporaryCacheLocation: exports.BrowserCacheLocation.MemoryStorage,
                 storeAuthStateInCookie: false,
                 secureCookies: false,
                 cacheMigrationEnabled: false