@azure/msal-browser 3.13.0 → 3.14.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v3.13.0 2024-04-11 */
+/*! @azure/msal-browser v3.14.0 2024-05-07 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -66,10 +66,11 @@ const Constants = {
     INVALID_INSTANCE: "invalid_instance",
 };
 const HttpStatus = {
-    SUCCESS_RANGE_START: 200,
     SUCCESS: 200,
+    SUCCESS_RANGE_START: 200,
     SUCCESS_RANGE_END: 299,
     REDIRECT: 302,
+    CLIENT_ERROR: 400,
     CLIENT_ERROR_RANGE_START: 400,
     BAD_REQUEST: 400,
     UNAUTHORIZED: 401,
@@ -77,11 +78,12 @@ const HttpStatus = {
     REQUEST_TIMEOUT: 408,
     TOO_MANY_REQUESTS: 429,
     CLIENT_ERROR_RANGE_END: 499,
+    SERVER_ERROR: 500,
     SERVER_ERROR_RANGE_START: 500,
-    INTERNAL_SERVER_ERROR: 500,
     SERVICE_UNAVAILABLE: 503,
     GATEWAY_TIMEOUT: 504,
     SERVER_ERROR_RANGE_END: 599,
+    MULTI_SIDED_ERROR: 600,
 };
 const OIDC_DEFAULT_SCOPES = [
     Constants.OPENID_SCOPE,
@@ -308,7 +310,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -325,7 +327,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -374,7 +376,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -472,7 +474,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -724,7 +726,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -757,7 +759,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -948,12 +950,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "14.9.0";
+const version$1 = "14.10.0";
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -973,7 +975,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1034,7 +1036,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1071,7 +1073,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1398,7 +1400,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1452,7 +1454,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1590,7 +1592,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1687,7 +1689,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1887,7 +1889,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1927,7 +1929,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1989,7 +1991,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2004,7 +2006,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2026,7 +2028,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2039,7 +2041,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2286,7 +2288,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2333,7 +2335,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2497,7 +2499,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2637,7 +2639,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2645,7 +2647,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
 const cacheUnknownErrorCode = "cache_error_unknown";
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2672,7 +2674,7 @@ class CacheError extends Error {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3927,7 +3929,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4025,7 +4027,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4035,14 +4037,15 @@ function isOidcProtocolMode(config) {
  * Error thrown when there is an error with the server code, for example, unavailability.
  */
 class ServerError extends AuthError {
-    constructor(errorCode, errorMessage, subError) {
+    constructor(errorCode, errorMessage, subError, errorNo) {
         super(errorCode, errorMessage, subError);
         this.name = "ServerError";
+        this.errorNo = errorNo;
         Object.setPrototypeOf(this, ServerError.prototype);
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4140,7 +4143,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4177,7 +4180,7 @@ class NetworkManager {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4187,7 +4190,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4234,7 +4237,7 @@ const SID = "sid";
 const LOGIN_HINT = "login_hint";
 const DOMAIN_HINT = "domain_hint";
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4318,7 +4321,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4702,7 +4705,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4714,7 +4717,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4724,7 +4727,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4734,7 +4737,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5209,7 +5212,7 @@ const IntFields = new Set([
     "multiMatchedRT",
 ]);
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5305,7 +5308,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5414,7 +5417,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6253,7 +6256,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6284,7 +6287,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6387,7 +6390,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6413,7 +6416,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6464,7 +6467,7 @@ const InteractionRequiredAuthErrorMessage = {
  * Error thrown when user interaction is required.
  */
 class InteractionRequiredAuthError extends AuthError {
-    constructor(errorCode, errorMessage, subError, timestamp, traceId, correlationId, claims) {
+    constructor(errorCode, errorMessage, subError, timestamp, traceId, correlationId, claims, errorNo) {
         super(errorCode, errorMessage, subError);
         Object.setPrototypeOf(this, InteractionRequiredAuthError.prototype);
         this.timestamp = timestamp || Constants.EMPTY_STRING;
@@ -6472,6 +6475,7 @@ class InteractionRequiredAuthError extends AuthError {
         this.correlationId = correlationId || Constants.EMPTY_STRING;
         this.claims = claims || Constants.EMPTY_STRING;
         this.name = "InteractionRequiredAuthError";
+        this.errorNo = errorNo;
     }
 }
 /**
@@ -6500,7 +6504,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6516,7 +6520,7 @@ class CacheRecord {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6588,7 +6592,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6673,7 +6677,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6700,12 +6704,19 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+function parseServerErrorNo(serverResponse) {
+    const errorCodePrefix = "code=";
+    const errorCodePrefixIndex = serverResponse.error_uri?.lastIndexOf(errorCodePrefix);
+    return errorCodePrefixIndex && errorCodePrefixIndex >= 0
+        ? serverResponse.error_uri?.substring(errorCodePrefixIndex + errorCodePrefix.length)
+        : undefined;
+}
 /**
  * Class that handles response parsing.
  * @internal
@@ -6753,10 +6764,11 @@ class ResponseHandler {
         if (serverResponse.error ||
             serverResponse.error_description ||
             serverResponse.suberror) {
+            const serverErrorNo = parseServerErrorNo(serverResponse);
             if (isInteractionRequiredError(serverResponse.error, serverResponse.error_description, serverResponse.suberror)) {
-                throw new InteractionRequiredAuthError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || "", serverResponse.trace_id || "", serverResponse.correlation_id || "", serverResponse.claims || "");
+                throw new InteractionRequiredAuthError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || "", serverResponse.trace_id || "", serverResponse.correlation_id || "", serverResponse.claims || "", serverErrorNo);
             }
-            throw new ServerError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror);
+            throw new ServerError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror, serverErrorNo);
         }
     }
     /**
@@ -6770,7 +6782,10 @@ class ResponseHandler {
             serverResponse.error_description ||
             serverResponse.suberror) {
             const errString = `${serverResponse.error_codes} - [${serverResponse.timestamp}]: ${serverResponse.error_description} - Correlation ID: ${serverResponse.correlation_id} - Trace ID: ${serverResponse.trace_id}`;
-            const serverError = new ServerError(serverResponse.error, errString, serverResponse.suberror);
+            const serverErrorNo = serverResponse.error_codes?.length
+                ? serverResponse.error_codes[0]
+                : undefined;
+            const serverError = new ServerError(serverResponse.error, errString, serverResponse.suberror, serverErrorNo);
             // check if 500 error
             if (refreshAccessToken &&
                 serverResponse.status &&
@@ -6790,7 +6805,7 @@ class ResponseHandler {
                 return;
             }
             if (isInteractionRequiredError(serverResponse.error, serverResponse.error_description, serverResponse.suberror)) {
-                throw new InteractionRequiredAuthError(serverResponse.error, serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || Constants.EMPTY_STRING, serverResponse.trace_id || Constants.EMPTY_STRING, serverResponse.correlation_id || Constants.EMPTY_STRING, serverResponse.claims || Constants.EMPTY_STRING);
+                throw new InteractionRequiredAuthError(serverResponse.error, serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || Constants.EMPTY_STRING, serverResponse.trace_id || Constants.EMPTY_STRING, serverResponse.correlation_id || Constants.EMPTY_STRING, serverResponse.claims || Constants.EMPTY_STRING, serverErrorNo);
             }
             throw serverError;
         }
@@ -7053,7 +7068,25 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, idTokenClai
     return baseAccount;
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
+    if (typeof clientAssertion === "string") {
+        return clientAssertion;
+    }
+    else {
+        const config = {
+            clientId: clientId,
+            tokenEndpoint: tokenEndpoint,
+        };
+        return clientAssertion(config);
+    }
+}
+
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7214,7 +7247,7 @@ class AuthorizationCodeClient extends BaseClient {
         }
         if (this.config.clientCredentials.clientAssertion) {
             const clientAssertion = this.config.clientCredentials.clientAssertion;
-            parameterBuilder.addClientAssertion(clientAssertion.assertion);
+            parameterBuilder.addClientAssertion(await getClientAssertion(clientAssertion.assertion, this.config.authOptions.clientId, request.resourceRequestUri));
             parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
         }
         parameterBuilder.addGrantType(GrantType.AUTHORIZATION_CODE_GRANT);
@@ -7462,7 +7495,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7622,7 +7655,7 @@ class RefreshTokenClient extends BaseClient {
         }
         if (this.config.clientCredentials.clientAssertion) {
             const clientAssertion = this.config.clientCredentials.clientAssertion;
-            parameterBuilder.addClientAssertion(clientAssertion.assertion);
+            parameterBuilder.addClientAssertion(await getClientAssertion(clientAssertion.assertion, this.config.authOptions.clientId, request.resourceRequestUri));
             parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
         }
         if (request.authenticationScheme === AuthenticationScheme.POP) {
@@ -7669,7 +7702,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7805,7 +7838,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7820,7 +7853,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7828,7 +7861,7 @@ const StubbedNetworkModule = {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7853,7 +7886,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7893,7 +7926,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7951,7 +7984,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8155,7 +8188,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8234,7 +8267,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v14.9.0 2024-04-11 */
+/*! @azure/msal-common v14.10.0 2024-05-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8332,6 +8365,10 @@ function addError(error, logger, event, stackMaxSize = 5) {
     else if (error instanceof AuthError) {
         event.errorCode = error.errorCode;
         event.subErrorCode = error.subError;
+        if (error instanceof ServerError ||
+            error instanceof InteractionRequiredAuthError) {
+            event.serverErrorNo = error.errorNo;
+        }
         return;
     }
     else if (error instanceof CacheError) {
@@ -8614,7 +8651,7 @@ class PerformanceClient {
         const context = JSON.stringify(endContext(event, this.abbreviations, this.eventStack.get(rootEvent.correlationId), error));
         if (isRoot) {
             queueInfo = this.getQueueInfo(event.correlationId);
-            this.discardCache(rootEvent.correlationId);
+            this.discardMeasurements(rootEvent.correlationId);
         }
         else {
             rootEvent.incompleteSubMeasurements?.delete(event.eventId);
@@ -8736,21 +8773,13 @@ class PerformanceClient {
         };
     }
     /**
-     * Removes measurements for a given correlation id.
+     * Removes measurements and aux data for a given correlation id.
      *
      * @param {string} correlationId
      */
     discardMeasurements(correlationId) {
         this.logger.trace("PerformanceClient: Performance measurements discarded", correlationId);
         this.eventsByCorrelationId.delete(correlationId);
-    }
-    /**
-     * Removes cache for a given correlation id.
-     *
-     * @param {string} correlationId correlation identifier
-     */
-    discardCache(correlationId) {
-        this.discardMeasurements(correlationId);
         this.logger.trace("PerformanceClient: QueueMeasurements discarded", correlationId);
         this.queueMeasurements.delete(correlationId);
         this.logger.trace("PerformanceClient: Pre-queue times discarded", correlationId);
@@ -8765,6 +8794,12 @@ class PerformanceClient {
      * @returns {string}
      */
     addPerformanceCallback(callback) {
+        for (const [id, cb] of this.callbacks) {
+            if (cb.toString() === callback.toString()) {
+                this.logger.warning(`PerformanceClient: Performance callback is already registered with id: ${id}`);
+                return id;
+            }
+        }
         const callbackId = this.generateId();
         this.callbacks.set(callbackId, callback);
         this.logger.verbose(`PerformanceClient: Performance callback registered with id: ${callbackId}`);
@@ -9814,6 +9849,8 @@ var BrowserUtils = /*#__PURE__*/Object.freeze({
     createGuid: createGuid,
     getCurrentUri: getCurrentUri,
     getHomepage: getHomepage,
+    invoke: invoke,
+    invokeAsync: invokeAsync,
     isInIframe: isInIframe,
     isInPopup: isInPopup,
     preconnect: preconnect,
@@ -10094,7 +10131,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.13.0";
+const version = "3.14.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10397,6 +10434,9 @@ class TeamsAppOperatingContext extends BaseOperatingContext {
          * TODO: Add implementation to check for presence of inject Nested App Auth Bridge JavaScript interface
          *
          */
+        if (!this.getConfig().auth.supportsNestedAppAuth) {
+            return false;
+        }
         try {
             if (typeof window !== "undefined") {
                 const bridgeProxy = await BridgeProxy.create();
@@ -10411,22 +10451,18 @@ class TeamsAppOperatingContext extends BaseOperatingContext {
                             await bridgeProxy.getActiveAccount();
                     }
                 }
-                catch (e) {
-                    this.activeAccount = undefined;
+                catch {
+                    // Ignore errors
                 }
                 this.bridgeProxy = bridgeProxy;
                 this.available = bridgeProxy !== undefined;
             }
-            else {
-                this.available = false;
-            }
         }
-        catch (e) {
-            this.available = false;
-        }
-        finally {
-            return this.available;
+        catch (ex) {
+            this.logger.infoPii(`Could not initialize Nested App Auth bridge (${ex})`);
         }
+        this.logger.info(`Nested App Auth Bridge available: ${this.available}`);
+        return this.available;
     }
 }
 /*
@@ -10498,8 +10534,7 @@ async function createController(config) {
     const teamsApp = new TeamsAppOperatingContext(config);
     const operatingContexts = [standard.initialize(), teamsApp.initialize()];
     await Promise.all(operatingContexts);
-    if (teamsApp.isAvailable() &&
-        teamsApp.getConfig().auth.supportsNestedAppAuth) {
+    if (teamsApp.isAvailable()) {
         const controller = await Promise.resolve().then(function () { return NestedAppAuthController$1; });
         return controller.NestedAppAuthController.createController(teamsApp);
     }
@@ -14692,11 +14727,10 @@ class RedirectClient extends StandardInteractionClient {
      * Checks if navigateToLoginRequestUrl is set, and:
      * - if true, performs logic to cache and navigate
      * - if false, handles hash string and parses response
-     * @param hash {string?} url hash
-     * @param performanceClient {IPerformanceClient?}
-     * @param correlationId {string?} correlation identifier
+     * @param hash {string} url hash
+     * @param parentMeasurement {InProgressPerformanceEvent} parent measurement
      */
-    async handleRedirectPromise(hash, performanceClient, correlationId) {
+    async handleRedirectPromise(hash = "", parentMeasurement) {
         const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.handleRedirectPromise);
         try {
             if (!this.browserStorage.isInteractionInProgress(true)) {
@@ -14708,9 +14742,7 @@ class RedirectClient extends StandardInteractionClient {
                 // Not a recognized server response hash or hash not associated with a redirect request
                 this.logger.info("handleRedirectPromise did not detect a response as a result of a redirect. Cleaning temporary cache.");
                 this.browserStorage.cleanRequestByInteractionType(exports.InteractionType.Redirect);
-                if (performanceClient && correlationId) {
-                    performanceClient?.addFields({ errorCode: "no_server_response" }, correlationId);
-                }
+                parentMeasurement.event.errorCode = "no_server_response";
                 return null;
             }
             // If navigateToLoginRequestUrl is true, get the url where the redirect request was initiated
@@ -15526,6 +15558,19 @@ class SilentAuthCodeClient extends StandardInteractionClient {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+function getAccountType(account) {
+    const idTokenClaims = account?.idTokenClaims;
+    if (idTokenClaims?.tfp || idTokenClaims?.acr) {
+        return "B2C";
+    }
+    if (!idTokenClaims?.tid) {
+        return undefined;
+    }
+    else if (idTokenClaims?.tid === "9188040d-6c67-4c5b-b112-36a304b66dad") {
+        return "MSA";
+    }
+    return "AAD";
+}
 class StandardController {
     /**
      * @constructor
@@ -15695,7 +15740,7 @@ class StandardController {
         else {
             this.logger.trace("handleRedirectPromise - acquiring token from web flow");
             const redirectClient = this.createRedirectClient(correlationId);
-            redirectResponse = invokeAsync(redirectClient.handleRedirectPromise.bind(redirectClient), PerformanceEvents.HandleRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(hash, this.performanceClient, rootMeasurement.event.correlationId);
+            redirectResponse = invokeAsync(redirectClient.handleRedirectPromise.bind(redirectClient), PerformanceEvents.HandleRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(hash, rootMeasurement);
         }
         return redirectResponse
             .then((result) => {
@@ -15710,10 +15755,24 @@ class StandardController {
                     this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Redirect, result);
                     this.logger.verbose("handleRedirectResponse returned result, acquire token success");
                 }
-                rootMeasurement.end({ success: true });
+                rootMeasurement.end({
+                    success: true,
+                    accountType: getAccountType(result.account),
+                });
+            }
+            else {
+                /*
+                 * Instrument an event only if an error code is set. Otherwise, discard it when the redirect response
+                 * is empty and the error code is missing.
+                 */
+                if (rootMeasurement.event.errorCode) {
+                    rootMeasurement.end({ success: false });
+                }
+                else {
+                    rootMeasurement.discard();
+                }
             }
             this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
-            rootMeasurement.end({ success: false });
             return result;
         })
             .catch((e) => {
@@ -15803,6 +15862,10 @@ class StandardController {
     acquireTokenPopup(request) {
         const correlationId = this.getRequestCorrelationId(request);
         const atPopupMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPopup, correlationId);
+        atPopupMeasurement.add({
+            scenarioId: request.scenarioId,
+            accountType: getAccountType(request.account),
+        });
         try {
             this.logger.verbose("acquireTokenPopup called", correlationId);
             preflightCheck(this.initialized);
@@ -15832,6 +15895,7 @@ class StandardController {
                     success: true,
                     isNativeBroker: true,
                     requestId: response.requestId,
+                    accountType: getAccountType(response.account),
                 });
                 return response;
             })
@@ -15867,13 +15931,12 @@ class StandardController {
             else {
                 this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Popup, result);
             }
-            atPopupMeasurement.add({
-                accessTokenSize: result.accessToken.length,
-                idTokenSize: result.idToken.length,
-            });
             atPopupMeasurement.end({
                 success: true,
                 requestId: result.requestId,
+                accessTokenSize: result.accessToken.length,
+                idTokenSize: result.idToken.length,
+                accountType: getAccountType(result.account),
             });
             return result;
         })
@@ -15932,6 +15995,10 @@ class StandardController {
         this.ssoSilentMeasurement?.increment({
             visibilityChangeCount: 0,
         });
+        this.ssoSilentMeasurement?.add({
+            scenarioId: request.scenarioId,
+            accountType: getAccountType(request.account),
+        });
         document.addEventListener("visibilitychange", this.trackPageVisibilityWithMeasurement);
         this.logger.verbose("ssoSilent called", correlationId);
         this.eventHandler.emitEvent(EventType.SSO_SILENT_START, exports.InteractionType.Silent, validRequest);
@@ -15954,14 +16021,13 @@ class StandardController {
         return result
             .then((response) => {
             this.eventHandler.emitEvent(EventType.SSO_SILENT_SUCCESS, exports.InteractionType.Silent, response);
-            this.ssoSilentMeasurement?.add({
-                accessTokenSize: response.accessToken.length,
-                idTokenSize: response.idToken.length,
-            });
             this.ssoSilentMeasurement?.end({
                 success: true,
                 isNativeBroker: response.fromNativeBroker,
                 requestId: response.requestId,
+                accessTokenSize: response.accessToken.length,
+                idTokenSize: response.idToken.length,
+                accountType: getAccountType(response.account),
             });
             return response;
         })
@@ -15992,6 +16058,7 @@ class StandardController {
         preflightCheck(this.initialized);
         this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_START, exports.InteractionType.Silent, request);
         const atbcMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenByCode, correlationId);
+        atbcMeasurement.add({ scenarioId: request.scenarioId });
         try {
             if (request.code && request.nativeAccountId) {
                 // Throw error in case server returns both spa_code and spa_accountid in exchange for auth code.
@@ -16009,14 +16076,13 @@ class StandardController {
                         .then((result) => {
                         this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_SUCCESS, exports.InteractionType.Silent, result);
                         this.hybridAuthCodeResponses.delete(hybridAuthCode);
-                        atbcMeasurement.add({
-                            accessTokenSize: result.accessToken.length,
-                            idTokenSize: result.idToken.length,
-                        });
                         atbcMeasurement.end({
                             success: true,
                             isNativeBroker: result.fromNativeBroker,
                             requestId: result.requestId,
+                            accessTokenSize: result.accessToken.length,
+                            idTokenSize: result.idToken.length,
+                            accountType: getAccountType(result.account),
                         });
                         return result;
                     })
@@ -16038,7 +16104,7 @@ class StandardController {
             }
             else if (request.nativeAccountId) {
                 if (this.canUseNative(request, request.nativeAccountId)) {
-                    return await this.acquireTokenNative({
+                    const result = await this.acquireTokenNative({
                         ...request,
                         correlationId,
                     }, ApiId.acquireTokenByCode, request.nativeAccountId).catch((e) => {
@@ -16049,6 +16115,11 @@ class StandardController {
                         }
                         throw e;
                     });
+                    atbcMeasurement.end({
+                        accountType: getAccountType(result.account),
+                        success: true,
+                    });
+                    return result;
                 }
                 else {
                     throw createBrowserAuthError(unableToAcquireTokenFromNativePlatform);
@@ -16611,6 +16682,7 @@ class StandardController {
         const atsMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenSilent, correlationId);
         atsMeasurement.add({
             cacheLookupPolicy: request.cacheLookupPolicy,
+            scenarioId: request.scenarioId,
         });
         preflightCheck(this.initialized);
         this.logger.verbose("acquireTokenSilent called", correlationId);
@@ -16618,6 +16690,7 @@ class StandardController {
         if (!account) {
             throw createBrowserAuthError(noAccountError);
         }
+        atsMeasurement.add({ accountType: getAccountType(account) });
         const thumbprint = {
             clientId: this.config.auth.clientId,
             authority: request.authority || Constants.EMPTY_STRING,
@@ -16641,16 +16714,14 @@ class StandardController {
             }, account)
                 .then((result) => {
                 this.activeSilentTokenRequests.delete(silentRequestKey);
-                atsMeasurement.add({
-                    accessTokenSize: result.accessToken.length,
-                    idTokenSize: result.idToken.length,
-                });
                 atsMeasurement.end({
                     success: true,
                     fromCache: result.fromCache,
                     isNativeBroker: result.fromNativeBroker,
                     cacheLookupPolicy: request.cacheLookupPolicy,
                     requestId: result.requestId,
+                    accessTokenSize: result.accessToken.length,
+                    idTokenSize: result.idToken.length,
                 });
                 return result;
             })
@@ -16696,23 +16767,22 @@ class StandardController {
             const shouldTryToResolveSilently = checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, cacheLookupPolicy);
             if (shouldTryToResolveSilently) {
                 if (!this.activeIframeRequest) {
-                    let _resolve, _reject;
+                    let _resolve;
                     // Always set the active request tracker immediately after checking it to prevent races
                     this.activeIframeRequest = [
-                        new Promise((resolve, reject) => {
+                        new Promise((resolve) => {
                             _resolve = resolve;
-                            _reject = reject;
                         }),
                         silentRequest.correlationId,
                     ];
                     this.logger.verbose("Refresh token expired/invalid or CacheLookupPolicy is set to Skip, attempting acquire token by iframe.", silentRequest.correlationId);
                     return invokeAsync(this.acquireTokenBySilentIframe.bind(this), PerformanceEvents.AcquireTokenBySilentIframe, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest)
                         .then((iframeResult) => {
-                        _resolve();
+                        _resolve(true);
                         return iframeResult;
                     })
                         .catch((e) => {
-                        _reject(e);
+                        _resolve(false);
                         throw e;
                     })
                         .finally(() => {
@@ -16726,21 +16796,20 @@ class StandardController {
                     awaitConcurrentIframeMeasure.add({
                         awaitIframeCorrelationId: activeCorrelationId,
                     });
-                    // Await for errors first so we can distinguish errors thrown by activePromise versus errors thrown by .then below
-                    await activePromise.catch(() => {
-                        awaitConcurrentIframeMeasure.end({
-                            success: false,
-                        });
-                        this.logger.info(`Iframe request with correlationId: ${activeCorrelationId} failed. Interaction is required.`);
-                        // If previous iframe request failed, it's unlikely to succeed this time. Throw original error.
-                        throw refreshTokenError;
+                    const activePromiseResult = await activePromise;
+                    awaitConcurrentIframeMeasure.end({
+                        success: activePromiseResult,
                     });
-                    return activePromise.then(() => {
-                        awaitConcurrentIframeMeasure.end({ success: true });
+                    if (activePromiseResult) {
                         this.logger.verbose(`Parallel iframe request with correlationId: ${activeCorrelationId} succeeded. Retrying cache and/or RT redemption`, silentRequest.correlationId);
                         // Retry cache lookup and/or RT exchange after iframe completes
                         return this.acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy);
-                    });
+                    }
+                    else {
+                        this.logger.info(`Iframe request with correlationId: ${activeCorrelationId} failed. Interaction is required.`);
+                        // If previous iframe request failed, it's unlikely to succeed this time. Throw original error.
+                        throw refreshTokenError;
+                    }
                 }
                 else {
                     // Cache policy set to skip and another iframe request is already in progress
@@ -17847,6 +17916,9 @@ const stubbedPublicClientApplication = {
     getAllAccounts: () => {
         return [];
     },
+    getAccount: () => {
+        return null;
+    },
     getAccountByHomeId: () => {
         return null;
     },