@azure/msal-browser 2.35.0 → 2.37.0

package/dist/index.cjs.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.35.0 2023-04-03 */
+/*! @azure/msal-browser v2.37.0 2023-05-01 */
 'use strict';
 'use strict';
 
@@ -117,7 +117,7 @@ function __spread() {
     return ar;
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*! *****************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -204,7 +204,7 @@ function __spreadArrays() {
     return r;
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -224,6 +224,9 @@ var Constants = {
     DSTS: "dstsv2",
     // Default AAD Instance Discovery Endpoint
     AAD_INSTANCE_DISCOVERY_ENDPT: "https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=",
+    // CIAM URL
+    CIAM_AUTH_URL: ".ciamlogin.com",
+    AAD_TENANT_DOMAIN_SUFFIX: ".onmicrosoft.com",
     // Resource delimiter - used for certain cache entries
     RESOURCE_DELIM: "|",
     // Placeholder for non-existent account ids/objects
@@ -573,7 +576,7 @@ var JsonTypes;
     JsonTypes["Pop"] = "pop";
 })(JsonTypes || (JsonTypes = {}));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -629,7 +632,7 @@ var AuthError = /** @class */ (function (_super) {
     return AuthError;
 }(Error));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -704,7 +707,7 @@ var DEFAULT_CRYPTO_IMPLEMENTATION = {
     }
 };
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1219,7 +1222,7 @@ var ClientAuthError = /** @class */ (function (_super) {
     return ClientAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1344,7 +1347,7 @@ var StringUtils = /** @class */ (function () {
     return StringUtils;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1534,12 +1537,12 @@ var Logger = /** @class */ (function () {
     return Logger;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /* eslint-disable header/header */
 var name$1 = "@azure/msal-common";
-var version$1 = "12.0.0";
+var version$1 = "13.0.0";
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1560,7 +1563,7 @@ exports.AzureCloudInstance = void 0;
     AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
 })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1815,7 +1818,7 @@ var ClientConfigurationError = /** @class */ (function (_super) {
     return ClientConfigurationError;
 }(ClientAuthError));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2014,7 +2017,7 @@ var ScopeSet = /** @class */ (function () {
     return ScopeSet;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2052,7 +2055,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2065,9 +2068,10 @@ var AuthorityType;
     AuthorityType[AuthorityType["Default"] = 0] = "Default";
     AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
     AuthorityType[AuthorityType["Dsts"] = 2] = "Dsts";
+    AuthorityType[AuthorityType["Ciam"] = 3] = "Ciam";
 })(AuthorityType || (AuthorityType = {}));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2306,7 +2310,7 @@ var AccountEntity = /** @class */ (function () {
     return AccountEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2358,7 +2362,7 @@ var AuthToken = /** @class */ (function () {
     return AuthToken;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3406,7 +3410,7 @@ var DefaultStorageClass = /** @class */ (function (_super) {
     return DefaultStorageClass;
 }(CacheManager));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3499,7 +3503,7 @@ function buildAuthOptions(authOptions) {
     return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3519,7 +3523,7 @@ var ServerError = /** @class */ (function (_super) {
     return ServerError;
 }(AuthError));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3615,7 +3619,7 @@ var ThrottlingUtils = /** @class */ (function () {
     return ThrottlingUtils;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3664,7 +3668,7 @@ var NetworkManager = /** @class */ (function () {
     return NetworkManager;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3675,7 +3679,7 @@ var CcsCredentialType;
     CcsCredentialType["UPN"] = "UPN";
 })(CcsCredentialType || (CcsCredentialType = {}));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3766,7 +3770,7 @@ var RequestValidator = /** @class */ (function () {
     return RequestValidator;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4144,7 +4148,7 @@ var RequestParameterBuilder = /** @class */ (function () {
     return RequestParameterBuilder;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4246,7 +4250,7 @@ var BaseClient = /** @class */ (function () {
     return BaseClient;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4384,7 +4388,7 @@ var CredentialEntity = /** @class */ (function () {
     return CredentialEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4448,7 +4452,7 @@ var IdTokenEntity = /** @class */ (function (_super) {
     return IdTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4498,7 +4502,7 @@ var TimeUtils = /** @class */ (function () {
     return TimeUtils;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4612,7 +4616,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
     return AccessTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4679,7 +4683,7 @@ var RefreshTokenEntity = /** @class */ (function (_super) {
     return RefreshTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4758,7 +4762,7 @@ var InteractionRequiredAuthError = /** @class */ (function (_super) {
     return InteractionRequiredAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4774,7 +4778,7 @@ var CacheRecord = /** @class */ (function () {
     return CacheRecord;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4845,7 +4849,7 @@ var ProtocolUtils = /** @class */ (function () {
     return ProtocolUtils;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5079,7 +5083,7 @@ var UrlString = /** @class */ (function () {
     return UrlString;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5308,7 +5312,7 @@ var IntFields = new Set([
     "status",
 ]);
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5417,7 +5421,7 @@ var PopTokenGenerator = /** @class */ (function () {
     return PopTokenGenerator;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5487,7 +5491,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return AppMetadataEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5523,7 +5527,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return TokenCacheContext;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5810,7 +5814,7 @@ var ResponseHandler = /** @class */ (function () {
     return ResponseHandler;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6288,7 +6292,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
     return AuthorizationCodeClient;
 }(BaseClient));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6562,7 +6566,7 @@ var RefreshTokenClient = /** @class */ (function (_super) {
     return RefreshTokenClient;
 }(BaseClient));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6686,7 +6690,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
     return SilentFlowClient;
 }(BaseClient));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6698,7 +6702,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6707,7 +6711,7 @@ var rawMetdataJSON = { "endpointMetadata": { "https://login.microsoftonline.com/
 var EndpointMetadata = rawMetdataJSON.endpointMetadata;
 var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6721,7 +6725,7 @@ exports.ProtocolMode = void 0;
     ProtocolMode["OIDC"] = "OIDC";
 })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6798,7 +6802,7 @@ var AuthorityMetadataEntity = /** @class */ (function () {
     return AuthorityMetadataEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6808,7 +6812,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6818,7 +6822,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6950,7 +6954,7 @@ var RegionDiscovery = /** @class */ (function () {
     return RegionDiscovery;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6976,6 +6980,10 @@ var Authority = /** @class */ (function () {
     Object.defineProperty(Authority.prototype, "authorityType", {
         // See above for AuthorityType
         get: function () {
+            // CIAM auth url pattern is being standardized as: <tenant>.ciamlogin.com
+            if (this.canonicalAuthorityUrlComponents.HostNameAndPort.endsWith(Constants.CIAM_AUTH_URL)) {
+                return AuthorityType.Ciam;
+            }
             var pathSegments = this.canonicalAuthorityUrlComponents.PathSegments;
             if (pathSegments.length) {
                 switch (pathSegments[0].toLowerCase()) {
@@ -7263,7 +7271,6 @@ var Authority = /** @class */ (function () {
                             // No need to update
                             return [2 /*return*/, AuthorityMetadataSource.CACHE];
                         }
-                        harcodedMetadata = this.getEndpointMetadataFromHardcodedValues();
                         (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(exports.PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
                         return [4 /*yield*/, this.getEndpointMetadataFromNetwork()];
                     case 1:
@@ -7279,6 +7286,7 @@ var Authority = /** @class */ (function () {
                         metadataEntity.updateEndpointMetadata(metadata, true);
                         return [2 /*return*/, AuthorityMetadataSource.NETWORK];
                     case 4:
+                        harcodedMetadata = this.getEndpointMetadataFromHardcodedValues();
                         if (!(harcodedMetadata && !this.authorityOptions.skipAuthorityMetadataCache)) return [3 /*break*/, 7];
                         if (!((_e = this.authorityOptions.azureRegionConfiguration) === null || _e === void 0 ? void 0 : _e.azureRegion)) return [3 /*break*/, 6];
                         (_f = this.performanceClient) === null || _f === void 0 ? void 0 : _f.setPreQueueTime(exports.PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
@@ -7403,8 +7411,8 @@ var Authority = /** @class */ (function () {
     /**
      * Updates the AuthorityMetadataEntity with new aliases, preferred_network and preferred_cache
      * and returns where the information was retrieved from
-     * @param cachedMetadata
-     * @param newMetadata
+     * @param metadataEntity
+     * @returns AuthorityMetadataSource
      */
     Authority.prototype.updateCloudDiscoveryMetadata = function (metadataEntity) {
         var _a, _b;
@@ -7414,6 +7422,7 @@ var Authority = /** @class */ (function () {
                 switch (_c.label) {
                     case 0:
                         (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(exports.PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);
+                        // attempt to read metadata from the config
                         this.logger.verbose("Attempting to get cloud discovery metadata in the config");
                         this.logger.verbosePii("Known Authorities: " + (this.authorityOptions.knownAuthorities || Constants.NOT_APPLICABLE));
                         this.logger.verbosePii("Authority Metadata: " + (this.authorityOptions.authorityMetadata || Constants.NOT_APPLICABLE));
@@ -7463,6 +7472,11 @@ var Authority = /** @class */ (function () {
      * Parse cloudDiscoveryMetadata config or check knownAuthorities
      */
     Authority.prototype.getCloudDiscoveryMetadataFromConfig = function () {
+        // CIAM does not support cloud discovery metadata
+        if (this.authorityType === AuthorityType.Ciam) {
+            this.logger.verbose("CIAM authorities do not support cloud discovery metadata, generate the aliases from authority host.");
+            return Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
+        }
         // Check if network response was provided in config
         if (this.authorityOptions.cloudDiscoveryMetadata) {
             this.logger.verbose("The cloud discovery metadata has been provided as a network response, in the config.");
@@ -7682,10 +7696,30 @@ var Authority = /** @class */ (function () {
         }
         return metadata;
     };
+    /**
+     * Transform CIAM_AUTHORIY as per the below rules:
+     * If no path segments found and it is a CIAM authority (hostname ends with .ciamlogin.com), then transform it
+     *
+     * NOTE: The transformation path should go away once STS supports CIAM with the format: `tenantIdorDomain.ciamlogin.com`
+     * `ciamlogin.com` can also change in the future and we should accommodate the same
+     *
+     * @param authority
+     */
+    Authority.transformCIAMAuthority = function (authority) {
+        var ciamAuthority = authority.endsWith(Constants.FORWARD_SLASH) ? authority : "" + authority + Constants.FORWARD_SLASH;
+        var authorityUrl = new UrlString(authority);
+        var authorityUrlComponents = authorityUrl.getUrlComponents();
+        // check if transformation is needed
+        if (authorityUrlComponents.PathSegments.length === 0 && (authorityUrlComponents.HostNameAndPort.endsWith(Constants.CIAM_AUTH_URL))) {
+            var tenantIdOrDomain = authorityUrlComponents.HostNameAndPort.split(".")[0];
+            ciamAuthority = "" + ciamAuthority + tenantIdOrDomain + Constants.AAD_TENANT_DOMAIN_SUFFIX;
+        }
+        return ciamAuthority;
+    };
     return Authority;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7706,12 +7740,13 @@ var AuthorityFactory = /** @class */ (function () {
      */
     AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
         return __awaiter(this, void 0, void 0, function () {
-            var acquireTokenAuthority, e_1;
+            var authorityUriFinal, acquireTokenAuthority, e_1;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         performanceClient === null || performanceClient === void 0 ? void 0 : performanceClient.addQueueMeasurement(exports.PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
-                        acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
+                        authorityUriFinal = Authority.transformCIAMAuthority(authorityUri);
+                        acquireTokenAuthority = AuthorityFactory.createInstance(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
                         _a.label = 1;
                     case 1:
                         _a.trys.push([1, 3, , 4]);
@@ -7748,7 +7783,7 @@ var AuthorityFactory = /** @class */ (function () {
     return AuthorityFactory;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7779,7 +7814,7 @@ var ServerTelemetryEntity = /** @class */ (function () {
     return ServerTelemetryEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7807,7 +7842,7 @@ var ThrottlingEntity = /** @class */ (function () {
     return ThrottlingEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7824,7 +7859,7 @@ var StubbedNetworkModule = {
     }
 };
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7869,7 +7904,7 @@ var JoseHeaderError = /** @class */ (function (_super) {
     return JoseHeaderError;
 }(AuthError));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7909,7 +7944,7 @@ var JoseHeader = /** @class */ (function () {
     return JoseHeader;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7968,7 +8003,7 @@ var AuthenticationHeaderParser = /** @class */ (function () {
     return AuthenticationHeaderParser;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8130,7 +8165,7 @@ var ServerTelemetryManager = /** @class */ (function () {
     return ServerTelemetryManager;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8533,7 +8568,7 @@ var PerformanceClient = /** @class */ (function () {
     return PerformanceClient;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.0.0 2023-05-01 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9506,7 +9541,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
         _this.logger = logger;
         _this.internalStorage = new MemoryStorage();
         _this.browserStorage = _this.setupBrowserStorage(_this.cacheConfig.cacheLocation);
-        _this.temporaryCacheStorage = _this.setupTemporaryCacheStorage(_this.cacheConfig.cacheLocation);
+        _this.temporaryCacheStorage = _this.setupTemporaryCacheStorage(_this.cacheConfig.temporaryCacheLocation, _this.cacheConfig.cacheLocation);
         // Migrate cache entries from older versions of MSAL.
         if (cacheConfig.cacheMigrationEnabled) {
             _this.migrateCacheEntries();
@@ -9523,7 +9558,6 @@ var BrowserCacheManager = /** @class */ (function (_super) {
             case exports.BrowserCacheLocation.LocalStorage:
             case exports.BrowserCacheLocation.SessionStorage:
                 try {
-                    // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
                     return new BrowserStorage(cacheLocation);
                 }
                 catch (e) {
@@ -9536,16 +9570,20 @@ var BrowserCacheManager = /** @class */ (function (_super) {
         return new MemoryStorage();
     };
     /**
-     *
+     * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured temporaryCacheLocation.
+     * @param temporaryCacheLocation
      * @param cacheLocation
      */
-    BrowserCacheManager.prototype.setupTemporaryCacheStorage = function (cacheLocation) {
+    BrowserCacheManager.prototype.setupTemporaryCacheStorage = function (temporaryCacheLocation, cacheLocation) {
         switch (cacheLocation) {
             case exports.BrowserCacheLocation.LocalStorage:
             case exports.BrowserCacheLocation.SessionStorage:
                 try {
-                    // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
-                    return new BrowserStorage(exports.BrowserCacheLocation.SessionStorage);
+                    /*
+                     * When users do not explicitly choose their own temporaryCacheLocation,
+                     * temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
+                     */
+                    return new BrowserStorage(temporaryCacheLocation || exports.BrowserCacheLocation.SessionStorage);
                 }
                 catch (e) {
                     this.logger.verbose(e);
@@ -9910,7 +9948,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
                 var accessRemoval = tokenKeys.accessToken.indexOf(key);
                 if (accessRemoval > -1) {
                     this.logger.info("BrowserCacheManager: removeTokenKey - accessToken removed from map");
-                    tokenKeys.idToken.splice(accessRemoval, 1);
+                    tokenKeys.accessToken.splice(accessRemoval, 1);
                 }
                 else {
                     this.logger.info("BrowserCacheManager: removeTokenKey - accessToken does not exist in map. Either it was previously removed or it was never added.");
@@ -9921,7 +9959,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
                 var refreshRemoval = tokenKeys.refreshToken.indexOf(key);
                 if (refreshRemoval > -1) {
                     this.logger.info("BrowserCacheManager: removeTokenKey - refreshToken removed from map");
-                    tokenKeys.idToken.splice(refreshRemoval, 1);
+                    tokenKeys.refreshToken.splice(refreshRemoval, 1);
                 }
                 else {
                     this.logger.info("BrowserCacheManager: removeTokenKey - refreshToken does not exist in map. Either it was previously removed or it was never added.");
@@ -10745,6 +10783,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
 var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
     var cacheOptions = {
         cacheLocation: exports.BrowserCacheLocation.MemoryStorage,
+        temporaryCacheLocation: exports.BrowserCacheLocation.MemoryStorage,
         storeAuthStateInCookie: false,
         secureCookies: false,
         cacheMigrationEnabled: false
@@ -10754,7 +10793,7 @@ var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
 
 /* eslint-disable header/header */
 var name = "@azure/msal-browser";
-var version = "2.35.0";
+var version = "2.37.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -13878,6 +13917,7 @@ function buildConfiguration(_a, isBrowserEnvironment) {
     // Default cache options for browser
     var DEFAULT_CACHE_OPTIONS = {
         cacheLocation: exports.BrowserCacheLocation.SessionStorage,
+        temporaryCacheLocation: exports.BrowserCacheLocation.SessionStorage,
         storeAuthStateInCookie: false,
         secureCookies: false,
         // Default cache migration to true if cache location is localStorage since entries are preserved across tabs/windows. Migration has little to no benefit in sessionStorage and memoryStorage
@@ -16563,6 +16603,7 @@ var ClientApplication = /** @class */ (function () {
         // initialize in memory storage for native flows
         var nativeCacheOptions = {
             cacheLocation: exports.BrowserCacheLocation.MemoryStorage,
+            temporaryCacheLocation: exports.BrowserCacheLocation.MemoryStorage,
             storeAuthStateInCookie: false,
             secureCookies: false,
             cacheMigrationEnabled: false