@azure/msal-browser 2.37.1 → 2.38.1

package/dist/index.cjs.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.37.1 2023-06-07 */
+/*! @azure/msal-browser v2.38.1 2023-08-07 */
 'use strict';
 'use strict';
 
@@ -117,7 +117,7 @@ function __spread() {
     return ar;
 }
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*! *****************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -204,7 +204,7 @@ function __spreadArrays() {
     return r;
 }
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -568,6 +568,7 @@ var CacheOutcome;
     CacheOutcome["NO_CACHED_ACCESS_TOKEN"] = "2";
     CacheOutcome["CACHED_ACCESS_TOKEN_EXPIRED"] = "3";
     CacheOutcome["REFRESH_CACHED_ACCESS_TOKEN"] = "4";
+    CacheOutcome["CLAIMS_REQUESTED_CACHE_SKIPPED"] = "5";
 })(CacheOutcome || (CacheOutcome = {}));
 var JsonTypes;
 (function (JsonTypes) {
@@ -576,7 +577,7 @@ var JsonTypes;
     JsonTypes["Pop"] = "pop";
 })(JsonTypes || (JsonTypes = {}));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -632,7 +633,7 @@ var AuthError = /** @class */ (function (_super) {
     return AuthError;
 }(Error));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -707,7 +708,7 @@ var DEFAULT_CRYPTO_IMPLEMENTATION = {
     }
 };
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1222,7 +1223,7 @@ var ClientAuthError = /** @class */ (function (_super) {
     return ClientAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1347,7 +1348,7 @@ var StringUtils = /** @class */ (function () {
     return StringUtils;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1537,12 +1538,12 @@ var Logger = /** @class */ (function () {
     return Logger;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /* eslint-disable header/header */
 var name$1 = "@azure/msal-common";
-var version$1 = "13.1.0";
+var version$1 = "13.2.1";
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1563,7 +1564,7 @@ exports.AzureCloudInstance = void 0;
     AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
 })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1828,7 +1829,7 @@ var ClientConfigurationError = /** @class */ (function (_super) {
     return ClientConfigurationError;
 }(ClientAuthError));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2027,7 +2028,7 @@ var ScopeSet = /** @class */ (function () {
     return ScopeSet;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2065,7 +2066,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2081,7 +2082,7 @@ var AuthorityType;
     AuthorityType[AuthorityType["Ciam"] = 3] = "Ciam";
 })(AuthorityType || (AuthorityType = {}));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2320,7 +2321,7 @@ var AccountEntity = /** @class */ (function () {
     return AccountEntity;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2372,7 +2373,7 @@ var AuthToken = /** @class */ (function () {
     return AuthToken;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3420,7 +3421,7 @@ var DefaultStorageClass = /** @class */ (function (_super) {
     return DefaultStorageClass;
 }(CacheManager));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3440,6 +3441,9 @@ var DEFAULT_LOGGER_IMPLEMENTATION = {
     logLevel: exports.LogLevel.Info,
     correlationId: Constants.EMPTY_STRING
 };
+var DEFAULT_CACHE_OPTIONS = {
+    claimsBasedCachingEnabled: true
+};
 var DEFAULT_NETWORK_IMPLEMENTATION = {
     sendGetRequestAsync: function () {
         return __awaiter(this, void 0, void 0, function () {
@@ -3488,12 +3492,13 @@ var DEFAULT_TELEMETRY_OPTIONS = {
  * @returns Configuration
  */
 function buildClientConfiguration(_a) {
-    var userAuthOptions = _a.authOptions, userSystemOptions = _a.systemOptions, userLoggerOption = _a.loggerOptions, storageImplementation = _a.storageInterface, networkImplementation = _a.networkInterface, cryptoImplementation = _a.cryptoInterface, clientCredentials = _a.clientCredentials, libraryInfo = _a.libraryInfo, telemetry = _a.telemetry, serverTelemetryManager = _a.serverTelemetryManager, persistencePlugin = _a.persistencePlugin, serializableCache = _a.serializableCache;
+    var userAuthOptions = _a.authOptions, userSystemOptions = _a.systemOptions, userLoggerOption = _a.loggerOptions, userCacheOptions = _a.cacheOptions, storageImplementation = _a.storageInterface, networkImplementation = _a.networkInterface, cryptoImplementation = _a.cryptoInterface, clientCredentials = _a.clientCredentials, libraryInfo = _a.libraryInfo, telemetry = _a.telemetry, serverTelemetryManager = _a.serverTelemetryManager, persistencePlugin = _a.persistencePlugin, serializableCache = _a.serializableCache;
     var loggerOptions = __assign(__assign({}, DEFAULT_LOGGER_IMPLEMENTATION), userLoggerOption);
     return {
         authOptions: buildAuthOptions(userAuthOptions),
         systemOptions: __assign(__assign({}, DEFAULT_SYSTEM_OPTIONS), userSystemOptions),
         loggerOptions: loggerOptions,
+        cacheOptions: __assign(__assign({}, DEFAULT_CACHE_OPTIONS), userCacheOptions),
         storageInterface: storageImplementation || new DefaultStorageClass(userAuthOptions.clientId, DEFAULT_CRYPTO_IMPLEMENTATION, new Logger(loggerOptions)),
         networkInterface: networkImplementation || DEFAULT_NETWORK_IMPLEMENTATION,
         cryptoInterface: cryptoImplementation || DEFAULT_CRYPTO_IMPLEMENTATION,
@@ -3513,7 +3518,7 @@ function buildAuthOptions(authOptions) {
     return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
 }
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3533,7 +3538,7 @@ var ServerError = /** @class */ (function (_super) {
     return ServerError;
 }(AuthError));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3629,7 +3634,7 @@ var ThrottlingUtils = /** @class */ (function () {
     return ThrottlingUtils;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3678,7 +3683,7 @@ var NetworkManager = /** @class */ (function () {
     return NetworkManager;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3689,7 +3694,7 @@ var CcsCredentialType;
     CcsCredentialType["UPN"] = "UPN";
 })(CcsCredentialType || (CcsCredentialType = {}));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3780,7 +3785,7 @@ var RequestValidator = /** @class */ (function () {
     return RequestValidator;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4158,7 +4163,7 @@ var RequestParameterBuilder = /** @class */ (function () {
     return RequestParameterBuilder;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4260,7 +4265,7 @@ var BaseClient = /** @class */ (function () {
     return BaseClient;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4398,7 +4403,7 @@ var CredentialEntity = /** @class */ (function () {
     return CredentialEntity;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4462,7 +4467,7 @@ var IdTokenEntity = /** @class */ (function (_super) {
     return IdTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4512,7 +4517,7 @@ var TimeUtils = /** @class */ (function () {
     return TimeUtils;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4626,7 +4631,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
     return AccessTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4693,7 +4698,7 @@ var RefreshTokenEntity = /** @class */ (function (_super) {
     return RefreshTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4772,7 +4777,7 @@ var InteractionRequiredAuthError = /** @class */ (function (_super) {
     return InteractionRequiredAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4788,7 +4793,7 @@ var CacheRecord = /** @class */ (function () {
     return CacheRecord;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4859,7 +4864,7 @@ var ProtocolUtils = /** @class */ (function () {
     return ProtocolUtils;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5093,7 +5098,7 @@ var UrlString = /** @class */ (function () {
     return UrlString;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5322,7 +5327,7 @@ var IntFields = new Set([
     "status",
 ]);
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5431,7 +5436,7 @@ var PopTokenGenerator = /** @class */ (function () {
     return PopTokenGenerator;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5501,7 +5506,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return AppMetadataEntity;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5537,7 +5542,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return TokenCacheContext;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5824,7 +5829,7 @@ var ResponseHandler = /** @class */ (function () {
     return ResponseHandler;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6302,7 +6307,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
     return AuthorizationCodeClient;
 }(BaseClient));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6576,7 +6581,7 @@ var RefreshTokenClient = /** @class */ (function (_super) {
     return RefreshTokenClient;
 }(BaseClient));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6620,11 +6625,11 @@ var SilentFlowClient = /** @class */ (function (_super) {
      * @param request
      */
     SilentFlowClient.prototype.acquireCachedToken = function (request) {
-        var _a, _b, _c, _d;
+        var _a, _b, _c, _d, _e;
         return __awaiter(this, void 0, void 0, function () {
             var environment, cacheRecord;
-            return __generator(this, function (_e) {
-                switch (_e.label) {
+            return __generator(this, function (_f) {
+                switch (_f.label) {
                     case 0:
                         // Cannot renew token if no request object is given.
                         if (!request) {
@@ -6636,6 +6641,12 @@ var SilentFlowClient = /** @class */ (function (_super) {
                             this.logger.info("SilentFlowClient:acquireCachedToken - Skipping cache because forceRefresh is true.");
                             throw ClientAuthError.createRefreshRequiredError();
                         }
+                        else if (!this.config.cacheOptions.claimsBasedCachingEnabled && !StringUtils.isEmptyObj(request.claims)) {
+                            // Must refresh due to presence of claims in request preventing cache lookup
+                            (_b = this.serverTelemetryManager) === null || _b === void 0 ? void 0 : _b.setCacheOutcome(CacheOutcome.CLAIMS_REQUESTED_CACHE_SKIPPED);
+                            this.logger.info("SilentFlowClient:acquireCachedToken - Skipping cache because claims-based caching is disabled and claims were requested.");
+                            throw ClientAuthError.createRefreshRequiredError();
+                        }
                         // We currently do not support silent flow for account === null use cases; This will be revisited for confidential flow usecases
                         if (!request.account) {
                             throw ClientAuthError.createNoAccountInSilentRequestError();
@@ -6644,20 +6655,20 @@ var SilentFlowClient = /** @class */ (function (_super) {
                         cacheRecord = this.cacheManager.readCacheRecord(request.account, request, environment);
                         if (!cacheRecord.accessToken) {
                             // Must refresh due to non-existent access_token.
-                            (_b = this.serverTelemetryManager) === null || _b === void 0 ? void 0 : _b.setCacheOutcome(CacheOutcome.NO_CACHED_ACCESS_TOKEN);
+                            (_c = this.serverTelemetryManager) === null || _c === void 0 ? void 0 : _c.setCacheOutcome(CacheOutcome.NO_CACHED_ACCESS_TOKEN);
                             this.logger.info("SilentFlowClient:acquireCachedToken - No access token found in cache for the given properties.");
                             throw ClientAuthError.createRefreshRequiredError();
                         }
                         else if (TimeUtils.wasClockTurnedBack(cacheRecord.accessToken.cachedAt) ||
                             TimeUtils.isTokenExpired(cacheRecord.accessToken.expiresOn, this.config.systemOptions.tokenRenewalOffsetSeconds)) {
                             // Must refresh due to expired access_token.
-                            (_c = this.serverTelemetryManager) === null || _c === void 0 ? void 0 : _c.setCacheOutcome(CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED);
+                            (_d = this.serverTelemetryManager) === null || _d === void 0 ? void 0 : _d.setCacheOutcome(CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED);
                             this.logger.info("SilentFlowClient:acquireCachedToken - Cached access token is expired or will expire within " + this.config.systemOptions.tokenRenewalOffsetSeconds + " seconds.");
                             throw ClientAuthError.createRefreshRequiredError();
                         }
                         else if (cacheRecord.accessToken.refreshOn && TimeUtils.isTokenExpired(cacheRecord.accessToken.refreshOn, 0)) {
                             // Must refresh due to the refresh_in value.
-                            (_d = this.serverTelemetryManager) === null || _d === void 0 ? void 0 : _d.setCacheOutcome(CacheOutcome.REFRESH_CACHED_ACCESS_TOKEN);
+                            (_e = this.serverTelemetryManager) === null || _e === void 0 ? void 0 : _e.setCacheOutcome(CacheOutcome.REFRESH_CACHED_ACCESS_TOKEN);
                             this.logger.info("SilentFlowClient:acquireCachedToken - Cached access token's refreshOn property has been exceeded'.");
                             throw ClientAuthError.createRefreshRequiredError();
                         }
@@ -6665,7 +6676,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
                             this.config.serverTelemetryManager.incrementCacheHits();
                         }
                         return [4 /*yield*/, this.generateResultFromCacheRecord(cacheRecord, request)];
-                    case 1: return [2 /*return*/, _e.sent()];
+                    case 1: return [2 /*return*/, _f.sent()];
                 }
             });
         });
@@ -6700,7 +6711,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
     return SilentFlowClient;
 }(BaseClient));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6712,7 +6723,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6721,7 +6732,7 @@ var rawMetdataJSON = { "endpointMetadata": { "https://login.microsoftonline.com/
 var EndpointMetadata = rawMetdataJSON.endpointMetadata;
 var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6735,7 +6746,7 @@ exports.ProtocolMode = void 0;
     ProtocolMode["OIDC"] = "OIDC";
 })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6812,7 +6823,7 @@ var AuthorityMetadataEntity = /** @class */ (function () {
     return AuthorityMetadataEntity;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6822,7 +6833,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6832,7 +6843,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6964,7 +6975,7 @@ var RegionDiscovery = /** @class */ (function () {
     return RegionDiscovery;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7405,42 +7416,35 @@ var Authority = /** @class */ (function () {
     };
     /**
      * Update the retrieved metadata with regional information.
+     * User selected Azure region will be used if configured.
      */
     Authority.prototype.updateMetadataWithRegionalInformation = function (metadata) {
-        var _a, _b, _c, _d, _e, _f, _g;
+        var _a, _b, _c, _d;
         return __awaiter(this, void 0, void 0, function () {
-            var autodetectedRegionName, azureRegion;
-            return __generator(this, function (_h) {
-                switch (_h.label) {
+            var userConfiguredAzureRegion, autodetectedRegionName;
+            return __generator(this, function (_e) {
+                switch (_e.label) {
                     case 0:
                         (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(exports.PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
-                        (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(exports.PerformanceEvents.RegionDiscoveryDetectRegion, this.correlationId);
-                        return [4 /*yield*/, this.regionDiscovery.detectRegion((_c = this.authorityOptions.azureRegionConfiguration) === null || _c === void 0 ? void 0 : _c.environmentRegion, this.regionDiscoveryMetadata)];
-                    case 1:
-                        autodetectedRegionName = _h.sent();
-                        azureRegion = ((_d = this.authorityOptions.azureRegionConfiguration) === null || _d === void 0 ? void 0 : _d.azureRegion) === Constants.AZURE_REGION_AUTO_DISCOVER_FLAG
-                            ? autodetectedRegionName
-                            : (_e = this.authorityOptions.azureRegionConfiguration) === null || _e === void 0 ? void 0 : _e.azureRegion;
-                        if (((_f = this.authorityOptions.azureRegionConfiguration) === null || _f === void 0 ? void 0 : _f.azureRegion) === Constants.AZURE_REGION_AUTO_DISCOVER_FLAG) {
-                            this.regionDiscoveryMetadata.region_outcome = autodetectedRegionName ?
-                                RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_SUCCESSFUL :
-                                RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_FAILED;
-                        }
-                        else {
-                            if (autodetectedRegionName) {
-                                this.regionDiscoveryMetadata.region_outcome = (((_g = this.authorityOptions.azureRegionConfiguration) === null || _g === void 0 ? void 0 : _g.azureRegion) === autodetectedRegionName) ?
-                                    RegionDiscoveryOutcomes.CONFIGURED_MATCHES_DETECTED :
-                                    RegionDiscoveryOutcomes.CONFIGURED_NOT_DETECTED;
-                            }
-                            else {
-                                this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.CONFIGURED_NO_AUTO_DETECTION;
-                            }
+                        userConfiguredAzureRegion = (_b = this.authorityOptions.azureRegionConfiguration) === null || _b === void 0 ? void 0 : _b.azureRegion;
+                        if (!userConfiguredAzureRegion) return [3 /*break*/, 2];
+                        if (userConfiguredAzureRegion !== Constants.AZURE_REGION_AUTO_DISCOVER_FLAG) {
+                            this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.CONFIGURED_NO_AUTO_DETECTION;
+                            this.regionDiscoveryMetadata.region_used = userConfiguredAzureRegion;
+                            return [2 /*return*/, Authority.replaceWithRegionalInformation(metadata, userConfiguredAzureRegion)];
                         }
-                        if (azureRegion) {
-                            this.regionDiscoveryMetadata.region_used = azureRegion;
-                            return [2 /*return*/, Authority.replaceWithRegionalInformation(metadata, azureRegion)];
+                        (_c = this.performanceClient) === null || _c === void 0 ? void 0 : _c.setPreQueueTime(exports.PerformanceEvents.RegionDiscoveryDetectRegion, this.correlationId);
+                        return [4 /*yield*/, this.regionDiscovery.detectRegion((_d = this.authorityOptions.azureRegionConfiguration) === null || _d === void 0 ? void 0 : _d.environmentRegion, this.regionDiscoveryMetadata)];
+                    case 1:
+                        autodetectedRegionName = _e.sent();
+                        if (autodetectedRegionName) {
+                            this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_SUCCESSFUL;
+                            this.regionDiscoveryMetadata.region_used = autodetectedRegionName;
+                            return [2 /*return*/, Authority.replaceWithRegionalInformation(metadata, autodetectedRegionName)];
                         }
-                        return [2 /*return*/, metadata];
+                        this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_FAILED;
+                        _e.label = 2;
+                    case 2: return [2 /*return*/, metadata];
                 }
             });
         });
@@ -7764,7 +7768,7 @@ var Authority = /** @class */ (function () {
     return Authority;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7828,7 +7832,7 @@ var AuthorityFactory = /** @class */ (function () {
     return AuthorityFactory;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7859,7 +7863,7 @@ var ServerTelemetryEntity = /** @class */ (function () {
     return ServerTelemetryEntity;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7887,7 +7891,7 @@ var ThrottlingEntity = /** @class */ (function () {
     return ThrottlingEntity;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7904,7 +7908,7 @@ var StubbedNetworkModule = {
     }
 };
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7949,7 +7953,7 @@ var JoseHeaderError = /** @class */ (function (_super) {
     return JoseHeaderError;
 }(AuthError));
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7989,7 +7993,7 @@ var JoseHeader = /** @class */ (function () {
     return JoseHeader;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8048,7 +8052,7 @@ var AuthenticationHeaderParser = /** @class */ (function () {
     return AuthenticationHeaderParser;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8210,7 +8214,7 @@ var ServerTelemetryManager = /** @class */ (function () {
     return ServerTelemetryManager;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8613,7 +8617,7 @@ var PerformanceClient = /** @class */ (function () {
     return PerformanceClient;
 }());
 
-/*! @azure/msal-common v13.1.0 2023-06-07 */
+/*! @azure/msal-common v13.2.1 2023-08-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10831,14 +10835,15 @@ var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
         temporaryCacheLocation: exports.BrowserCacheLocation.MemoryStorage,
         storeAuthStateInCookie: false,
         secureCookies: false,
-        cacheMigrationEnabled: false
+        cacheMigrationEnabled: false,
+        claimsBasedCachingEnabled: true
     };
     return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger);
 };
 
 /* eslint-disable header/header */
 var name = "@azure/msal-browser";
-var version = "2.37.1";
+var version = "2.38.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11337,7 +11342,7 @@ var BaseInteractionClient = /** @class */ (function () {
                             }
                             this.logger.verbose("Authentication Scheme set to \"" + validatedRequest.authenticationScheme + "\" as configured in Auth request");
                         }
-                        if (!(request.claims && !StringUtils.isEmpty(request.claims))) return [3 /*break*/, 4];
+                        if (!(this.config.cache.claimsBasedCachingEnabled && request.claims && !StringUtils.isEmptyObj(request.claims))) return [3 /*break*/, 4];
                         _a = validatedRequest;
                         return [4 /*yield*/, this.browserCrypto.hashString(request.claims)];
                     case 3:
@@ -11601,6 +11606,9 @@ var StandardInteractionClient = /** @class */ (function (_super) {
                                     logLevel: logger.logLevel,
                                     correlationId: this.correlationId
                                 },
+                                cacheOptions: {
+                                    claimsBasedCachingEnabled: this.config.cache.claimsBasedCachingEnabled
+                                },
                                 cryptoInterface: this.browserCrypto,
                                 networkInterface: this.networkClient,
                                 storageInterface: this.browserStorage,
@@ -14001,7 +14009,8 @@ function buildConfiguration(_a, isBrowserEnvironment) {
         storeAuthStateInCookie: false,
         secureCookies: false,
         // Default cache migration to true if cache location is localStorage since entries are preserved across tabs/windows. Migration has little to no benefit in sessionStorage and memoryStorage
-        cacheMigrationEnabled: userInputCache && userInputCache.cacheLocation === exports.BrowserCacheLocation.LocalStorage ? true : false
+        cacheMigrationEnabled: userInputCache && userInputCache.cacheLocation === exports.BrowserCacheLocation.LocalStorage ? true : false,
+        claimsBasedCachingEnabled: true
     };
     // Default logger options for browser
     var DEFAULT_LOGGER_OPTIONS = {
@@ -16686,7 +16695,8 @@ var ClientApplication = /** @class */ (function () {
             temporaryCacheLocation: exports.BrowserCacheLocation.MemoryStorage,
             storeAuthStateInCookie: false,
             secureCookies: false,
-            cacheMigrationEnabled: false
+            cacheMigrationEnabled: false,
+            claimsBasedCachingEnabled: true
         };
         this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger);
         // Initialize the token cache
@@ -17863,13 +17873,15 @@ var PublicClientApplication = /** @class */ (function (_super) {
                             return _this.acquireTokenByRefreshToken(silentRequest_1, requestWithCLP_1).catch(function (refreshTokenError) {
                                 var isServerError = refreshTokenError instanceof ServerError;
                                 var isInteractionRequiredError = refreshTokenError instanceof InteractionRequiredAuthError;
+                                var rtNotFound = (refreshTokenError.errorCode === InteractionRequiredAuthErrorMessage.noTokensFoundError.code);
                                 var isInvalidGrantError = (refreshTokenError.errorCode === BrowserConstants.INVALID_GRANT_ERROR);
                                 if ((!isServerError ||
                                     !isInvalidGrantError ||
                                     isInteractionRequiredError ||
                                     requestWithCLP_1.cacheLookupPolicy === exports.CacheLookupPolicy.AccessTokenAndRefreshToken ||
                                     requestWithCLP_1.cacheLookupPolicy === exports.CacheLookupPolicy.RefreshToken)
-                                    && (requestWithCLP_1.cacheLookupPolicy !== exports.CacheLookupPolicy.Skip)) {
+                                    && (requestWithCLP_1.cacheLookupPolicy !== exports.CacheLookupPolicy.Skip)
+                                    && !rtNotFound) {
                                     throw refreshTokenError;
                                 }
                                 _this.logger.verbose("Refresh token expired/invalid or CacheLookupPolicy is set to Skip, attempting acquire token by iframe.", request.correlationId);