@azure/msal-browser 3.13.0 → 3.14.0

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.13.0 2024-04-11 */
+/*! @azure/msal-browser v3.14.0 2024-05-07 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -6,7 +6,7 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msal = {}));
 })(this, (function (exports) { 'use strict';
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -70,10 +70,11 @@
         INVALID_INSTANCE: "invalid_instance",
     };
     const HttpStatus = {
-        SUCCESS_RANGE_START: 200,
         SUCCESS: 200,
+        SUCCESS_RANGE_START: 200,
         SUCCESS_RANGE_END: 299,
         REDIRECT: 302,
+        CLIENT_ERROR: 400,
         CLIENT_ERROR_RANGE_START: 400,
         BAD_REQUEST: 400,
         UNAUTHORIZED: 401,
@@ -81,11 +82,12 @@
         REQUEST_TIMEOUT: 408,
         TOO_MANY_REQUESTS: 429,
         CLIENT_ERROR_RANGE_END: 499,
+        SERVER_ERROR: 500,
         SERVER_ERROR_RANGE_START: 500,
-        INTERNAL_SERVER_ERROR: 500,
         SERVICE_UNAVAILABLE: 503,
         GATEWAY_TIMEOUT: 504,
         SERVER_ERROR_RANGE_END: 599,
+        MULTI_SIDED_ERROR: 600,
     };
     const OIDC_DEFAULT_SCOPES = [
         Constants.OPENID_SCOPE,
@@ -312,7 +314,7 @@
     // Token renewal offset default in seconds
     const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -329,7 +331,7 @@
         unexpectedError: unexpectedError
     });
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -378,7 +380,7 @@
             : AuthErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -476,7 +478,7 @@
         userTimeoutReached: userTimeoutReached
     });
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -728,7 +730,7 @@
         return new ClientAuthError(errorCode, additionalMessage);
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -761,7 +763,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -952,12 +954,12 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /* eslint-disable header/header */
     const name$1 = "@azure/msal-common";
-    const version$1 = "14.9.0";
+    const version$1 = "14.10.0";
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -977,7 +979,7 @@
         AzureUsGovernment: "https://login.microsoftonline.us",
     };
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1038,7 +1040,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1075,7 +1077,7 @@
         return cachedAtSec > nowSeconds();
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1402,7 +1404,7 @@
         return metadata.expiresAt <= nowSeconds();
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1456,7 +1458,7 @@
         urlParseError: urlParseError
     });
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1594,7 +1596,7 @@
         return new ClientConfigurationError(errorCode);
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1691,7 +1693,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1891,7 +1893,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1931,7 +1933,7 @@
         };
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1993,7 +1995,7 @@
         return updatedAccountInfo;
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2008,7 +2010,7 @@
         Ciam: 3,
     };
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2030,7 +2032,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2043,7 +2045,7 @@
         OIDC: "OIDC",
     };
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2290,7 +2292,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2337,7 +2339,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2501,7 +2503,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2641,7 +2643,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2649,7 +2651,7 @@
     const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
     const cacheUnknownErrorCode = "cache_error_unknown";
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2676,7 +2678,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3931,7 +3933,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4029,7 +4031,7 @@
         return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4039,14 +4041,15 @@
      * Error thrown when there is an error with the server code, for example, unavailability.
      */
     class ServerError extends AuthError {
-        constructor(errorCode, errorMessage, subError) {
+        constructor(errorCode, errorMessage, subError, errorNo) {
             super(errorCode, errorMessage, subError);
             this.name = "ServerError";
+            this.errorNo = errorNo;
             Object.setPrototypeOf(this, ServerError.prototype);
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4144,7 +4147,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4181,7 +4184,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4191,7 +4194,7 @@
         UPN: "UPN",
     };
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4238,7 +4241,7 @@
     const LOGIN_HINT = "login_hint";
     const DOMAIN_HINT = "domain_hint";
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4322,7 +4325,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4706,7 +4709,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4718,7 +4721,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4728,7 +4731,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4738,7 +4741,7 @@
             response.hasOwnProperty("error_description"));
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5213,7 +5216,7 @@
         "multiMatchedRT",
     ]);
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5309,7 +5312,7 @@
         };
     };
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5418,7 +5421,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6257,7 +6260,7 @@
         };
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6288,7 +6291,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6391,7 +6394,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6417,7 +6420,7 @@
         refreshTokenExpired: refreshTokenExpired
     });
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6468,7 +6471,7 @@
      * Error thrown when user interaction is required.
      */
     class InteractionRequiredAuthError extends AuthError {
-        constructor(errorCode, errorMessage, subError, timestamp, traceId, correlationId, claims) {
+        constructor(errorCode, errorMessage, subError, timestamp, traceId, correlationId, claims, errorNo) {
             super(errorCode, errorMessage, subError);
             Object.setPrototypeOf(this, InteractionRequiredAuthError.prototype);
             this.timestamp = timestamp || Constants.EMPTY_STRING;
@@ -6476,6 +6479,7 @@
             this.correlationId = correlationId || Constants.EMPTY_STRING;
             this.claims = claims || Constants.EMPTY_STRING;
             this.name = "InteractionRequiredAuthError";
+            this.errorNo = errorNo;
         }
     }
     /**
@@ -6504,7 +6508,7 @@
         return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6520,7 +6524,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6592,7 +6596,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6677,7 +6681,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6704,12 +6708,19 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
+    function parseServerErrorNo(serverResponse) {
+        const errorCodePrefix = "code=";
+        const errorCodePrefixIndex = serverResponse.error_uri?.lastIndexOf(errorCodePrefix);
+        return errorCodePrefixIndex && errorCodePrefixIndex >= 0
+            ? serverResponse.error_uri?.substring(errorCodePrefixIndex + errorCodePrefix.length)
+            : undefined;
+    }
     /**
      * Class that handles response parsing.
      * @internal
@@ -6757,10 +6768,11 @@
             if (serverResponse.error ||
                 serverResponse.error_description ||
                 serverResponse.suberror) {
+                const serverErrorNo = parseServerErrorNo(serverResponse);
                 if (isInteractionRequiredError(serverResponse.error, serverResponse.error_description, serverResponse.suberror)) {
-                    throw new InteractionRequiredAuthError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || "", serverResponse.trace_id || "", serverResponse.correlation_id || "", serverResponse.claims || "");
+                    throw new InteractionRequiredAuthError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || "", serverResponse.trace_id || "", serverResponse.correlation_id || "", serverResponse.claims || "", serverErrorNo);
                 }
-                throw new ServerError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror);
+                throw new ServerError(serverResponse.error || "", serverResponse.error_description, serverResponse.suberror, serverErrorNo);
             }
         }
         /**
@@ -6774,7 +6786,10 @@
                 serverResponse.error_description ||
                 serverResponse.suberror) {
                 const errString = `${serverResponse.error_codes} - [${serverResponse.timestamp}]: ${serverResponse.error_description} - Correlation ID: ${serverResponse.correlation_id} - Trace ID: ${serverResponse.trace_id}`;
-                const serverError = new ServerError(serverResponse.error, errString, serverResponse.suberror);
+                const serverErrorNo = serverResponse.error_codes?.length
+                    ? serverResponse.error_codes[0]
+                    : undefined;
+                const serverError = new ServerError(serverResponse.error, errString, serverResponse.suberror, serverErrorNo);
                 // check if 500 error
                 if (refreshAccessToken &&
                     serverResponse.status &&
@@ -6794,7 +6809,7 @@
                     return;
                 }
                 if (isInteractionRequiredError(serverResponse.error, serverResponse.error_description, serverResponse.suberror)) {
-                    throw new InteractionRequiredAuthError(serverResponse.error, serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || Constants.EMPTY_STRING, serverResponse.trace_id || Constants.EMPTY_STRING, serverResponse.correlation_id || Constants.EMPTY_STRING, serverResponse.claims || Constants.EMPTY_STRING);
+                    throw new InteractionRequiredAuthError(serverResponse.error, serverResponse.error_description, serverResponse.suberror, serverResponse.timestamp || Constants.EMPTY_STRING, serverResponse.trace_id || Constants.EMPTY_STRING, serverResponse.correlation_id || Constants.EMPTY_STRING, serverResponse.claims || Constants.EMPTY_STRING, serverErrorNo);
                 }
                 throw serverError;
             }
@@ -7057,7 +7072,25 @@
         return baseAccount;
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
+        if (typeof clientAssertion === "string") {
+            return clientAssertion;
+        }
+        else {
+            const config = {
+                clientId: clientId,
+                tokenEndpoint: tokenEndpoint,
+            };
+            return clientAssertion(config);
+        }
+    }
+
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7218,7 +7251,7 @@
             }
             if (this.config.clientCredentials.clientAssertion) {
                 const clientAssertion = this.config.clientCredentials.clientAssertion;
-                parameterBuilder.addClientAssertion(clientAssertion.assertion);
+                parameterBuilder.addClientAssertion(await getClientAssertion(clientAssertion.assertion, this.config.authOptions.clientId, request.resourceRequestUri));
                 parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
             }
             parameterBuilder.addGrantType(GrantType.AUTHORIZATION_CODE_GRANT);
@@ -7466,7 +7499,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7626,7 +7659,7 @@
             }
             if (this.config.clientCredentials.clientAssertion) {
                 const clientAssertion = this.config.clientCredentials.clientAssertion;
-                parameterBuilder.addClientAssertion(clientAssertion.assertion);
+                parameterBuilder.addClientAssertion(await getClientAssertion(clientAssertion.assertion, this.config.authOptions.clientId, request.resourceRequestUri));
                 parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
             }
             if (request.authenticationScheme === AuthenticationScheme.POP) {
@@ -7673,7 +7706,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7809,7 +7842,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7824,7 +7857,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -7832,7 +7865,7 @@
     const missingKidError = "missing_kid_error";
     const missingAlgError = "missing_alg_error";
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7857,7 +7890,7 @@
         return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7897,7 +7930,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7955,7 +7988,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8159,7 +8192,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8238,7 +8271,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*! @azure/msal-common v14.10.0 2024-05-07 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8336,6 +8369,10 @@
         else if (error instanceof AuthError) {
             event.errorCode = error.errorCode;
             event.subErrorCode = error.subError;
+            if (error instanceof ServerError ||
+                error instanceof InteractionRequiredAuthError) {
+                event.serverErrorNo = error.errorNo;
+            }
             return;
         }
         else if (error instanceof CacheError) {
@@ -8618,7 +8655,7 @@
             const context = JSON.stringify(endContext(event, this.abbreviations, this.eventStack.get(rootEvent.correlationId), error));
             if (isRoot) {
                 queueInfo = this.getQueueInfo(event.correlationId);
-                this.discardCache(rootEvent.correlationId);
+                this.discardMeasurements(rootEvent.correlationId);
             }
             else {
                 rootEvent.incompleteSubMeasurements?.delete(event.eventId);
@@ -8740,21 +8777,13 @@
             };
         }
         /**
-         * Removes measurements for a given correlation id.
+         * Removes measurements and aux data for a given correlation id.
          *
          * @param {string} correlationId
          */
         discardMeasurements(correlationId) {
             this.logger.trace("PerformanceClient: Performance measurements discarded", correlationId);
             this.eventsByCorrelationId.delete(correlationId);
-        }
-        /**
-         * Removes cache for a given correlation id.
-         *
-         * @param {string} correlationId correlation identifier
-         */
-        discardCache(correlationId) {
-            this.discardMeasurements(correlationId);
             this.logger.trace("PerformanceClient: QueueMeasurements discarded", correlationId);
             this.queueMeasurements.delete(correlationId);
             this.logger.trace("PerformanceClient: Pre-queue times discarded", correlationId);
@@ -8769,6 +8798,12 @@
          * @returns {string}
          */
         addPerformanceCallback(callback) {
+            for (const [id, cb] of this.callbacks) {
+                if (cb.toString() === callback.toString()) {
+                    this.logger.warning(`PerformanceClient: Performance callback is already registered with id: ${id}`);
+                    return id;
+                }
+            }
             const callbackId = this.generateId();
             this.callbacks.set(callbackId, callback);
             this.logger.verbose(`PerformanceClient: Performance callback registered with id: ${callbackId}`);
@@ -9818,6 +9853,8 @@
         createGuid: createGuid,
         getCurrentUri: getCurrentUri,
         getHomepage: getHomepage,
+        invoke: invoke,
+        invokeAsync: invokeAsync,
         isInIframe: isInIframe,
         isInPopup: isInPopup,
         preconnect: preconnect,
@@ -10098,7 +10135,7 @@
 
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "3.13.0";
+    const version = "3.14.0";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10401,6 +10438,9 @@
              * TODO: Add implementation to check for presence of inject Nested App Auth Bridge JavaScript interface
              *
              */
+            if (!this.getConfig().auth.supportsNestedAppAuth) {
+                return false;
+            }
             try {
                 if (typeof window !== "undefined") {
                     const bridgeProxy = await BridgeProxy.create();
@@ -10415,22 +10455,18 @@
                                 await bridgeProxy.getActiveAccount();
                         }
                     }
-                    catch (e) {
-                        this.activeAccount = undefined;
+                    catch {
+                        // Ignore errors
                     }
                     this.bridgeProxy = bridgeProxy;
                     this.available = bridgeProxy !== undefined;
                 }
-                else {
-                    this.available = false;
-                }
             }
-            catch (e) {
-                this.available = false;
-            }
-            finally {
-                return this.available;
+            catch (ex) {
+                this.logger.infoPii(`Could not initialize Nested App Auth bridge (${ex})`);
             }
+            this.logger.info(`Nested App Auth Bridge available: ${this.available}`);
+            return this.available;
         }
     }
     /*
@@ -10502,8 +10538,7 @@
         const teamsApp = new TeamsAppOperatingContext(config);
         const operatingContexts = [standard.initialize(), teamsApp.initialize()];
         await Promise.all(operatingContexts);
-        if (teamsApp.isAvailable() &&
-            teamsApp.getConfig().auth.supportsNestedAppAuth) {
+        if (teamsApp.isAvailable()) {
             const controller = await Promise.resolve().then(function () { return NestedAppAuthController$1; });
             return controller.NestedAppAuthController.createController(teamsApp);
         }
@@ -14696,11 +14731,10 @@
          * Checks if navigateToLoginRequestUrl is set, and:
          * - if true, performs logic to cache and navigate
          * - if false, handles hash string and parses response
-         * @param hash {string?} url hash
-         * @param performanceClient {IPerformanceClient?}
-         * @param correlationId {string?} correlation identifier
+         * @param hash {string} url hash
+         * @param parentMeasurement {InProgressPerformanceEvent} parent measurement
          */
-        async handleRedirectPromise(hash, performanceClient, correlationId) {
+        async handleRedirectPromise(hash = "", parentMeasurement) {
             const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.handleRedirectPromise);
             try {
                 if (!this.browserStorage.isInteractionInProgress(true)) {
@@ -14712,9 +14746,7 @@
                     // Not a recognized server response hash or hash not associated with a redirect request
                     this.logger.info("handleRedirectPromise did not detect a response as a result of a redirect. Cleaning temporary cache.");
                     this.browserStorage.cleanRequestByInteractionType(exports.InteractionType.Redirect);
-                    if (performanceClient && correlationId) {
-                        performanceClient?.addFields({ errorCode: "no_server_response" }, correlationId);
-                    }
+                    parentMeasurement.event.errorCode = "no_server_response";
                     return null;
                 }
                 // If navigateToLoginRequestUrl is true, get the url where the redirect request was initiated
@@ -15530,6 +15562,19 @@
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
+    function getAccountType(account) {
+        const idTokenClaims = account?.idTokenClaims;
+        if (idTokenClaims?.tfp || idTokenClaims?.acr) {
+            return "B2C";
+        }
+        if (!idTokenClaims?.tid) {
+            return undefined;
+        }
+        else if (idTokenClaims?.tid === "9188040d-6c67-4c5b-b112-36a304b66dad") {
+            return "MSA";
+        }
+        return "AAD";
+    }
     class StandardController {
         /**
          * @constructor
@@ -15699,7 +15744,7 @@
             else {
                 this.logger.trace("handleRedirectPromise - acquiring token from web flow");
                 const redirectClient = this.createRedirectClient(correlationId);
-                redirectResponse = invokeAsync(redirectClient.handleRedirectPromise.bind(redirectClient), PerformanceEvents.HandleRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(hash, this.performanceClient, rootMeasurement.event.correlationId);
+                redirectResponse = invokeAsync(redirectClient.handleRedirectPromise.bind(redirectClient), PerformanceEvents.HandleRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(hash, rootMeasurement);
             }
             return redirectResponse
                 .then((result) => {
@@ -15714,10 +15759,24 @@
                         this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Redirect, result);
                         this.logger.verbose("handleRedirectResponse returned result, acquire token success");
                     }
-                    rootMeasurement.end({ success: true });
+                    rootMeasurement.end({
+                        success: true,
+                        accountType: getAccountType(result.account),
+                    });
+                }
+                else {
+                    /*
+                     * Instrument an event only if an error code is set. Otherwise, discard it when the redirect response
+                     * is empty and the error code is missing.
+                     */
+                    if (rootMeasurement.event.errorCode) {
+                        rootMeasurement.end({ success: false });
+                    }
+                    else {
+                        rootMeasurement.discard();
+                    }
                 }
                 this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
-                rootMeasurement.end({ success: false });
                 return result;
             })
                 .catch((e) => {
@@ -15807,6 +15866,10 @@
         acquireTokenPopup(request) {
             const correlationId = this.getRequestCorrelationId(request);
             const atPopupMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPopup, correlationId);
+            atPopupMeasurement.add({
+                scenarioId: request.scenarioId,
+                accountType: getAccountType(request.account),
+            });
             try {
                 this.logger.verbose("acquireTokenPopup called", correlationId);
                 preflightCheck(this.initialized);
@@ -15836,6 +15899,7 @@
                         success: true,
                         isNativeBroker: true,
                         requestId: response.requestId,
+                        accountType: getAccountType(response.account),
                     });
                     return response;
                 })
@@ -15871,13 +15935,12 @@
                 else {
                     this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Popup, result);
                 }
-                atPopupMeasurement.add({
-                    accessTokenSize: result.accessToken.length,
-                    idTokenSize: result.idToken.length,
-                });
                 atPopupMeasurement.end({
                     success: true,
                     requestId: result.requestId,
+                    accessTokenSize: result.accessToken.length,
+                    idTokenSize: result.idToken.length,
+                    accountType: getAccountType(result.account),
                 });
                 return result;
             })
@@ -15936,6 +15999,10 @@
             this.ssoSilentMeasurement?.increment({
                 visibilityChangeCount: 0,
             });
+            this.ssoSilentMeasurement?.add({
+                scenarioId: request.scenarioId,
+                accountType: getAccountType(request.account),
+            });
             document.addEventListener("visibilitychange", this.trackPageVisibilityWithMeasurement);
             this.logger.verbose("ssoSilent called", correlationId);
             this.eventHandler.emitEvent(EventType.SSO_SILENT_START, exports.InteractionType.Silent, validRequest);
@@ -15958,14 +16025,13 @@
             return result
                 .then((response) => {
                 this.eventHandler.emitEvent(EventType.SSO_SILENT_SUCCESS, exports.InteractionType.Silent, response);
-                this.ssoSilentMeasurement?.add({
-                    accessTokenSize: response.accessToken.length,
-                    idTokenSize: response.idToken.length,
-                });
                 this.ssoSilentMeasurement?.end({
                     success: true,
                     isNativeBroker: response.fromNativeBroker,
                     requestId: response.requestId,
+                    accessTokenSize: response.accessToken.length,
+                    idTokenSize: response.idToken.length,
+                    accountType: getAccountType(response.account),
                 });
                 return response;
             })
@@ -15996,6 +16062,7 @@
             preflightCheck(this.initialized);
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_START, exports.InteractionType.Silent, request);
             const atbcMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenByCode, correlationId);
+            atbcMeasurement.add({ scenarioId: request.scenarioId });
             try {
                 if (request.code && request.nativeAccountId) {
                     // Throw error in case server returns both spa_code and spa_accountid in exchange for auth code.
@@ -16013,14 +16080,13 @@
                             .then((result) => {
                             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_SUCCESS, exports.InteractionType.Silent, result);
                             this.hybridAuthCodeResponses.delete(hybridAuthCode);
-                            atbcMeasurement.add({
-                                accessTokenSize: result.accessToken.length,
-                                idTokenSize: result.idToken.length,
-                            });
                             atbcMeasurement.end({
                                 success: true,
                                 isNativeBroker: result.fromNativeBroker,
                                 requestId: result.requestId,
+                                accessTokenSize: result.accessToken.length,
+                                idTokenSize: result.idToken.length,
+                                accountType: getAccountType(result.account),
                             });
                             return result;
                         })
@@ -16042,7 +16108,7 @@
                 }
                 else if (request.nativeAccountId) {
                     if (this.canUseNative(request, request.nativeAccountId)) {
-                        return await this.acquireTokenNative({
+                        const result = await this.acquireTokenNative({
                             ...request,
                             correlationId,
                         }, ApiId.acquireTokenByCode, request.nativeAccountId).catch((e) => {
@@ -16053,6 +16119,11 @@
                             }
                             throw e;
                         });
+                        atbcMeasurement.end({
+                            accountType: getAccountType(result.account),
+                            success: true,
+                        });
+                        return result;
                     }
                     else {
                         throw createBrowserAuthError(unableToAcquireTokenFromNativePlatform);
@@ -16615,6 +16686,7 @@
             const atsMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenSilent, correlationId);
             atsMeasurement.add({
                 cacheLookupPolicy: request.cacheLookupPolicy,
+                scenarioId: request.scenarioId,
             });
             preflightCheck(this.initialized);
             this.logger.verbose("acquireTokenSilent called", correlationId);
@@ -16622,6 +16694,7 @@
             if (!account) {
                 throw createBrowserAuthError(noAccountError);
             }
+            atsMeasurement.add({ accountType: getAccountType(account) });
             const thumbprint = {
                 clientId: this.config.auth.clientId,
                 authority: request.authority || Constants.EMPTY_STRING,
@@ -16645,16 +16718,14 @@
                 }, account)
                     .then((result) => {
                     this.activeSilentTokenRequests.delete(silentRequestKey);
-                    atsMeasurement.add({
-                        accessTokenSize: result.accessToken.length,
-                        idTokenSize: result.idToken.length,
-                    });
                     atsMeasurement.end({
                         success: true,
                         fromCache: result.fromCache,
                         isNativeBroker: result.fromNativeBroker,
                         cacheLookupPolicy: request.cacheLookupPolicy,
                         requestId: result.requestId,
+                        accessTokenSize: result.accessToken.length,
+                        idTokenSize: result.idToken.length,
                     });
                     return result;
                 })
@@ -16700,23 +16771,22 @@
                 const shouldTryToResolveSilently = checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, cacheLookupPolicy);
                 if (shouldTryToResolveSilently) {
                     if (!this.activeIframeRequest) {
-                        let _resolve, _reject;
+                        let _resolve;
                         // Always set the active request tracker immediately after checking it to prevent races
                         this.activeIframeRequest = [
-                            new Promise((resolve, reject) => {
+                            new Promise((resolve) => {
                                 _resolve = resolve;
-                                _reject = reject;
                             }),
                             silentRequest.correlationId,
                         ];
                         this.logger.verbose("Refresh token expired/invalid or CacheLookupPolicy is set to Skip, attempting acquire token by iframe.", silentRequest.correlationId);
                         return invokeAsync(this.acquireTokenBySilentIframe.bind(this), PerformanceEvents.AcquireTokenBySilentIframe, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest)
                             .then((iframeResult) => {
-                            _resolve();
+                            _resolve(true);
                             return iframeResult;
                         })
                             .catch((e) => {
-                            _reject(e);
+                            _resolve(false);
                             throw e;
                         })
                             .finally(() => {
@@ -16730,21 +16800,20 @@
                         awaitConcurrentIframeMeasure.add({
                             awaitIframeCorrelationId: activeCorrelationId,
                         });
-                        // Await for errors first so we can distinguish errors thrown by activePromise versus errors thrown by .then below
-                        await activePromise.catch(() => {
-                            awaitConcurrentIframeMeasure.end({
-                                success: false,
-                            });
-                            this.logger.info(`Iframe request with correlationId: ${activeCorrelationId} failed. Interaction is required.`);
-                            // If previous iframe request failed, it's unlikely to succeed this time. Throw original error.
-                            throw refreshTokenError;
+                        const activePromiseResult = await activePromise;
+                        awaitConcurrentIframeMeasure.end({
+                            success: activePromiseResult,
                         });
-                        return activePromise.then(() => {
-                            awaitConcurrentIframeMeasure.end({ success: true });
+                        if (activePromiseResult) {
                             this.logger.verbose(`Parallel iframe request with correlationId: ${activeCorrelationId} succeeded. Retrying cache and/or RT redemption`, silentRequest.correlationId);
                             // Retry cache lookup and/or RT exchange after iframe completes
                             return this.acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy);
-                        });
+                        }
+                        else {
+                            this.logger.info(`Iframe request with correlationId: ${activeCorrelationId} failed. Interaction is required.`);
+                            // If previous iframe request failed, it's unlikely to succeed this time. Throw original error.
+                            throw refreshTokenError;
+                        }
                     }
                     else {
                         // Cache policy set to skip and another iframe request is already in progress
@@ -17851,6 +17920,9 @@
         getAllAccounts: () => {
             return [];
         },
+        getAccount: () => {
+            return null;
+        },
         getAccountByHomeId: () => {
             return null;
         },