@azure/msal-browser 3.26.0 → 3.26.1

package/dist/telemetry/BrowserPerformanceMeasurement.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.26.0 2024-10-08 */
+/*! @azure/msal-browser v3.26.1 2024-10-08 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/utils/BrowserConstants.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.26.0 2024-10-08 */
+/*! @azure/msal-browser v3.26.1 2024-10-08 */
 'use strict';
 import { OIDC_DEFAULT_SCOPES } from '@azure/msal-common/browser';
 

package/dist/utils/BrowserProtocolUtils.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.26.0 2024-10-08 */
+/*! @azure/msal-browser v3.26.1 2024-10-08 */
 'use strict';
 import { ProtocolUtils, createClientAuthError, ClientAuthErrorCodes } from '@azure/msal-common/browser';
 

package/dist/utils/BrowserUtils.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.26.0 2024-10-08 */
+/*! @azure/msal-browser v3.26.1 2024-10-08 */
 'use strict';
 import { UrlString } from '@azure/msal-common/browser';
 export { invoke, invokeAsync } from '@azure/msal-common/browser';

package/lib/msal-browser.cjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.26.0 2024-10-08 */
+/*! @azure/msal-browser v3.26.1 2024-10-08 */
 'use strict';
 'use strict';
 
@@ -10234,7 +10234,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.26.0";
+const version = "3.26.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -17544,7 +17544,9 @@ class NestedAppAuthController {
             const naaRequest = this.nestedAppAuthAdapter.toNaaTokenRequest(validRequest);
             const reqTimestamp = nowSeconds();
             const response = await this.bridgeProxy.getTokenInteractive(naaRequest);
-            const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
+            const result = {
+                ...this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp),
+            };
             // cache the tokens in the response
             await this.hydrateCache(result, request);
             this.browserStorage.setActiveAccount(result.account);
@@ -17628,7 +17630,22 @@ class NestedAppAuthController {
         atsMeasurement?.add({
             nestedAppAuthRequest: true,
         });
-        const result = await this.acquireTokenFromCacheInternal(request);
+        // if the request has claims, we cannot look up in the cache
+        if (request.claims) {
+            this.logger.verbose("Claims are present in the request, skipping cache lookup");
+            return null;
+        }
+        // respect cache lookup policy
+        let result = null;
+        switch (request.cacheLookupPolicy) {
+            case CacheLookupPolicy.Default:
+            case CacheLookupPolicy.AccessToken:
+            case CacheLookupPolicy.AccessTokenAndRefreshToken:
+                result = await this.acquireTokenFromCacheInternal(request);
+                break;
+            default:
+                return null;
+        }
         if (result) {
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, result);
             atsMeasurement?.add({
@@ -17681,13 +17698,10 @@ class NestedAppAuthController {
         if (!cachedAccessToken) {
             this.logger.verbose("No cached access token found");
             return Promise.resolve(null);
-            // If access token has expired, remove the token from cache and return null
         }
         else if (wasClockTurnedBack(cachedAccessToken.cachedAt) ||
             isTokenExpired(cachedAccessToken.expiresOn, this.config.system.tokenRenewalOffsetSeconds)) {
-            this.logger.verbose("Cached access token has expired, deleting all related tokens from cache");
-            const accountEntity = AccountEntity.createFromAccountInfo(currentAccount);
-            await this.browserStorage.removeAccountContext(accountEntity);
+            this.logger.verbose("Cached access token has expired");
             return Promise.resolve(null);
         }
         const cachedIdToken = this.browserStorage.getIdToken(currentAccount, tokenKeys, currentAccount.tenantId, this.performanceClient, authRequest.correlationId);