@azure/msal-browser 3.0.0 → 3.0.2

package/lib/{msal-browser.cjs.js → msal-browser.cjs}

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v3.0.0 2023-08-08 */
+/*! @azure/msal-browser v3.0.2 2023-08-18 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -362,7 +362,7 @@ const JsonTypes = {
     Pop: "pop",
 };
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -416,7 +416,7 @@ class AuthError extends Error {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -461,7 +461,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -983,7 +983,7 @@ class ClientAuthError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1110,7 +1110,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1310,12 +1310,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "14.0.0";
+const version$1 = "14.0.2";
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1335,7 +1335,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1617,7 +1617,7 @@ class ClientConfigurationError extends ClientAuthError {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1817,7 +1817,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1857,7 +1857,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1872,7 +1872,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1885,7 +1885,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1912,6 +1912,7 @@ const ProtocolMode = {
  *      idTokenClaims: Object containing claims parsed from ID token
  *      nativeAccountId: Account identifier on the native device
  * }
+ * @internal
  */
 class AccountEntity {
     /**
@@ -2108,7 +2109,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2159,7 +2160,7 @@ class AuthToken {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2167,6 +2168,7 @@ class AuthToken {
  */
 /**
  * Interface class which implement cache storage functions used by MSAL to perform validity checks, and store tokens.
+ * @internal
  */
 class CacheManager {
     constructor(clientId, cryptoImpl, logger) {
@@ -2653,7 +2655,11 @@ class CacheManager {
             return null;
         }
         else if (numIdTokens > 1) {
-            throw ClientAuthError.createMultipleMatchingTokensInCacheError();
+            this.commonLogger.info("CacheManager:getIdToken - Multiple id tokens found, clearing them");
+            idTokens.forEach((idToken) => {
+                this.removeIdToken(idToken.generateCredentialKey());
+            });
+            return null;
         }
         this.commonLogger.info("CacheManager:getIdToken - Returning id token");
         return idTokens[0];
@@ -2763,7 +2769,11 @@ class CacheManager {
             return null;
         }
         else if (numAccessTokens > 1) {
-            throw ClientAuthError.createMultipleMatchingTokensInCacheError();
+            this.commonLogger.info("CacheManager:getAccessToken - Multiple access tokens found, clearing them");
+            accessTokens.forEach((accessToken) => {
+                this.removeAccessToken(accessToken.generateCredentialKey());
+            });
+            return null;
         }
         this.commonLogger.info("CacheManager:getAccessToken - Returning access token");
         return accessTokens[0];
@@ -3075,6 +3085,7 @@ class CacheManager {
         return obj;
     }
 }
+/** @internal */
 class DefaultStorageClass extends CacheManager {
     setAccount() {
         const notImplErr = "Storage interface - setAccount() has not been implemented for the cacheStorage interface.";
@@ -3174,7 +3185,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3276,7 +3287,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3293,12 +3304,13 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class ThrottlingUtils {
     /**
      * Prepares a RequestThumbprint to be stored as a key.
@@ -3390,12 +3402,13 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class NetworkManager {
     constructor(networkClient, cacheManager) {
         this.networkClient = networkClient;
@@ -3426,7 +3439,7 @@ class NetworkManager {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3436,7 +3449,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3521,12 +3534,13 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class RequestParameterBuilder {
     constructor() {
         this.parameters = new Map();
@@ -3904,7 +3918,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3912,6 +3926,7 @@ class RequestParameterBuilder {
  */
 /**
  * Base application class which will construct requests to send to and handle responses from the Microsoft STS using the authorization code flow.
+ * @internal
  */
 class BaseClient {
     constructor(configuration, performanceClient) {
@@ -3999,7 +4014,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4138,7 +4153,7 @@ class CredentialEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4197,7 +4212,7 @@ class IdTokenEntity extends CredentialEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4244,7 +4259,7 @@ class TimeUtils {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4358,7 +4373,7 @@ class AccessTokenEntity extends CredentialEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4420,7 +4435,7 @@ class RefreshTokenEntity extends CredentialEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4501,11 +4516,12 @@ class InteractionRequiredAuthError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class CacheRecord {
     constructor(accountEntity, idTokenEntity, accessTokenEntity, refreshTokenEntity, appMetadataEntity) {
         this.account = accountEntity || null;
@@ -4516,7 +4532,7 @@ class CacheRecord {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4590,7 +4606,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4874,7 +4890,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5102,7 +5118,7 @@ const IntFields = new Set([
     "status",
 ]);
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5112,6 +5128,7 @@ const KeyLocation = {
     SW: "sw",
     UHW: "uhw",
 };
+/** @internal */
 class PopTokenGenerator {
     constructor(cryptoUtils, performanceClient) {
         this.cryptoUtils = cryptoUtils;
@@ -5187,7 +5204,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5256,7 +5273,7 @@ class AppMetadataEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5283,7 +5300,7 @@ class AppMetadataEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5291,6 +5308,7 @@ class AppMetadataEntity {
  */
 /**
  * Class that handles response parsing.
+ * @internal
  */
 class ResponseHandler {
     constructor(clientId, cacheStorage, cryptoObj, logger, serializableCache, persistencePlugin, performanceClient) {
@@ -5577,7 +5595,7 @@ class ResponseHandler {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5585,6 +5603,7 @@ class ResponseHandler {
  */
 /**
  * Oauth2.0 Authorization Code client
+ * @internal
  */
 class AuthorizationCodeClient extends BaseClient {
     constructor(configuration, performanceClient) {
@@ -5738,7 +5757,8 @@ class AuthorizationCodeClient extends BaseClient {
     async createTokenRequestBody(request) {
         this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);
         const parameterBuilder = new RequestParameterBuilder();
-        parameterBuilder.addClientId(this.config.authOptions.clientId);
+        parameterBuilder.addClientId(request.tokenBodyParameters?.[AADServerParamKeys.CLIENT_ID] ||
+            this.config.authOptions.clientId);
         /*
          * For hybrid spa flow, there will be a code but no verifier
          * In this scenario, don't include redirect uri as auth code will not be bound to redirect URI
@@ -5853,7 +5873,8 @@ class AuthorizationCodeClient extends BaseClient {
     async createAuthCodeUrlQueryString(request) {
         this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthClientCreateQueryString, request.correlationId);
         const parameterBuilder = new RequestParameterBuilder();
-        parameterBuilder.addClientId(this.config.authOptions.clientId);
+        parameterBuilder.addClientId(request.extraQueryParameters?.[AADServerParamKeys.CLIENT_ID] ||
+            this.config.authOptions.clientId);
         const requestScopes = [
             ...(request.scopes || []),
             ...(request.extraScopesToConsent || []),
@@ -6015,7 +6036,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6023,6 +6044,7 @@ class AuthorizationCodeClient extends BaseClient {
  */
 /**
  * OAuth2.0 refresh token client
+ * @internal
  */
 class RefreshTokenClient extends BaseClient {
     constructor(configuration, performanceClient) {
@@ -6257,12 +6279,13 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class SilentFlowClient extends BaseClient {
     constructor(configuration, performanceClient) {
         super(configuration, performanceClient);
@@ -6360,7 +6383,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6372,7 +6395,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7258,12 +7281,13 @@ for (const key in InstanceDiscoveryMetadata) {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class AuthorityMetadataEntity {
     constructor() {
         this.expiresAt =
@@ -7338,7 +7362,7 @@ class AuthorityMetadataEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7348,7 +7372,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7358,7 +7382,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7469,7 +7493,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7478,6 +7502,7 @@ RegionDiscovery.IMDS_OPTIONS = {
 /**
  * The authority class validates the authority URIs used by the user, and retrieves the OpenID Configuration Data from the
  * endpoint. It will store the pertinent config data in this object for use during token calls.
+ * @internal
  */
 class Authority {
     constructor(authority, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
@@ -7691,7 +7716,8 @@ class Authority {
     get defaultOpenIdConfigurationEndpoint() {
         const canonicalAuthorityHost = this.hostnameAndPort;
         if (this.authorityType === AuthorityType.Adfs ||
-            !this.isAliasOfKnownMicrosoftAuthority(canonicalAuthorityHost)) {
+            (this.protocolMode !== ProtocolMode.AAD &&
+                !this.isAliasOfKnownMicrosoftAuthority(canonicalAuthorityHost))) {
             return `${this.canonicalAuthority}.well-known/openid-configuration`;
         }
         return `${this.canonicalAuthority}v2.0/.well-known/openid-configuration`;
@@ -8233,12 +8259,13 @@ Authority.reservedTenantDomains = new Set([
     AADAuthorityConstants.ORGANIZATIONS,
 ]);
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class AuthorityFactory {
     /**
      * Create an authority object of the correct type based on the url
@@ -8283,7 +8310,7 @@ class AuthorityFactory {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8313,7 +8340,7 @@ class ServerTelemetryEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8339,7 +8366,7 @@ class ThrottlingEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8356,7 +8383,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8398,12 +8425,13 @@ class JoseHeaderError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class JoseHeader {
     constructor(options) {
         this.typ = options.typ;
@@ -8437,7 +8465,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8495,12 +8523,13 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/** @internal */
 class ServerTelemetryManager {
     constructor(telemetryRequest, cacheManager) {
         this.cacheOutcome = CacheOutcome.NO_CACHE_HIT;
@@ -8694,7 +8723,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9105,7 +9134,7 @@ class PerformanceClient {
     }
 }
 
-/*! @azure/msal-common v14.0.0 2023-08-08 */
+/*! @azure/msal-common v14.0.2 2023-08-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11350,7 +11379,7 @@ const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger) => {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.0.0";
+const version = "3.0.2";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -12574,6 +12603,10 @@ class SilentCacheClient extends StandardInteractionClient {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+const BrokerServerParamKeys = {
+    BROKER_CLIENT_ID: "brk_client_id",
+    BROKER_REDIRECT_URI: "brk_redirect_uri",
+};
 class NativeInteractionClient extends BaseInteractionClient {
     constructor(config, browserStorage, browserCrypto, logger, eventHandler, navigationClient, apiId, performanceClient, provider, accountId, nativeStorageImpl, correlationId) {
         super(config, browserStorage, browserCrypto, logger, eventHandler, navigationClient, performanceClient, provider, correlationId);
@@ -13065,10 +13098,14 @@ class NativeInteractionClient extends BaseInteractionClient {
             extraParameters: {
                 ...request.extraQueryParameters,
                 ...request.tokenQueryParameters,
-                telemetry: NativeConstants.MATS_TELEMETRY,
             },
             extendedExpiryToken: false, // Make this configurable?
         };
+        this.handleExtraBrokerParams(validatedRequest);
+        validatedRequest.extraParameters =
+            validatedRequest.extraParameters || {};
+        validatedRequest.extraParameters.telemetry =
+            NativeConstants.MATS_TELEMETRY;
         if (request.authenticationScheme === AuthenticationScheme.POP) {
             // add POP request type
             const shrParameters = {
@@ -13085,6 +13122,28 @@ class NativeInteractionClient extends BaseInteractionClient {
         }
         return validatedRequest;
     }
+    /**
+     * Handles extra broker request parameters
+     * @param request {NativeTokenRequest}
+     * @private
+     */
+    handleExtraBrokerParams(request) {
+        if (!request.extraParameters) {
+            return;
+        }
+        if (request.extraParameters.hasOwnProperty(BrokerServerParamKeys.BROKER_CLIENT_ID) &&
+            request.extraParameters.hasOwnProperty(BrokerServerParamKeys.BROKER_REDIRECT_URI) &&
+            request.extraParameters.hasOwnProperty(AADServerParamKeys.CLIENT_ID)) {
+            const child_client_id = request.extraParameters[AADServerParamKeys.CLIENT_ID];
+            const child_redirect_uri = request.redirectUri;
+            const brk_redirect_uri = request.extraParameters[BrokerServerParamKeys.BROKER_REDIRECT_URI];
+            request.extraParameters = {
+                child_client_id,
+                child_redirect_uri,
+            };
+            request.redirectUri = brk_redirect_uri;
+        }
+    }
 }
 
 /*
@@ -17797,7 +17856,7 @@ class PublicClientApplication {
      * Silently acquire an access token for a given set of scopes. Returns currently processing promise if parallel requests are made.
      *
      * @param {@link (SilentRequest:type)}
-     * @returns {Promise.<AuthenticationResult>} - a promise that is fulfilled when this function has completed, or rejected if an error was raised. Returns the {@link AuthResponse} object
+     * @returns {Promise.<AuthenticationResult>} - a promise that is fulfilled when this function has completed, or rejected if an error was raised. Returns the {@link AuthenticationResult} object
      */
     acquireTokenSilent(silentRequest) {
         return this.controller.acquireTokenSilent(silentRequest);
@@ -18021,6 +18080,7 @@ class PublicClientApplication {
     }
     /**
      * Returns the configuration object
+     * @internal
      */
     getConfiguration() {
         return this.controller.getConfiguration();
@@ -18508,4 +18568,4 @@ exports.WrapperSKU = WrapperSKU;
 exports.internals = internals;
 exports.stubbedPublicClientApplication = stubbedPublicClientApplication;
 exports.version = version;
-//# sourceMappingURL=msal-browser.cjs.js.map
+//# sourceMappingURL=msal-browser.cjs.map