@azure/msal-browser 3.26.0 → 3.26.1

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.26.0 2024-10-08 */
+/*! @azure/msal-browser v3.26.1 2024-10-08 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -10238,7 +10238,7 @@
 
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "3.26.0";
+    const version = "3.26.1";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -17548,7 +17548,9 @@
                 const naaRequest = this.nestedAppAuthAdapter.toNaaTokenRequest(validRequest);
                 const reqTimestamp = nowSeconds();
                 const response = await this.bridgeProxy.getTokenInteractive(naaRequest);
-                const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
+                const result = {
+                    ...this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp),
+                };
                 // cache the tokens in the response
                 await this.hydrateCache(result, request);
                 this.browserStorage.setActiveAccount(result.account);
@@ -17632,7 +17634,22 @@
             atsMeasurement?.add({
                 nestedAppAuthRequest: true,
             });
-            const result = await this.acquireTokenFromCacheInternal(request);
+            // if the request has claims, we cannot look up in the cache
+            if (request.claims) {
+                this.logger.verbose("Claims are present in the request, skipping cache lookup");
+                return null;
+            }
+            // respect cache lookup policy
+            let result = null;
+            switch (request.cacheLookupPolicy) {
+                case CacheLookupPolicy.Default:
+                case CacheLookupPolicy.AccessToken:
+                case CacheLookupPolicy.AccessTokenAndRefreshToken:
+                    result = await this.acquireTokenFromCacheInternal(request);
+                    break;
+                default:
+                    return null;
+            }
             if (result) {
                 this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, result);
                 atsMeasurement?.add({
@@ -17685,13 +17702,10 @@
             if (!cachedAccessToken) {
                 this.logger.verbose("No cached access token found");
                 return Promise.resolve(null);
-                // If access token has expired, remove the token from cache and return null
             }
             else if (wasClockTurnedBack(cachedAccessToken.cachedAt) ||
                 isTokenExpired(cachedAccessToken.expiresOn, this.config.system.tokenRenewalOffsetSeconds)) {
-                this.logger.verbose("Cached access token has expired, deleting all related tokens from cache");
-                const accountEntity = AccountEntity.createFromAccountInfo(currentAccount);
-                await this.browserStorage.removeAccountContext(accountEntity);
+                this.logger.verbose("Cached access token has expired");
                 return Promise.resolve(null);
             }
             const cachedIdToken = this.browserStorage.getIdToken(currentAccount, tokenKeys, currentAccount.tenantId, this.performanceClient, authRequest.correlationId);