@azure/msal-browser 3.8.1-beta.0 → 3.10.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v3.8.1-beta.0 2024-02-07 */
+/*! @azure/msal-browser v3.10.0 2024-02-17 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -297,7 +297,7 @@ const JsonWebTokenTypes = {
     Pop: "pop",
 };
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -314,7 +314,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -363,7 +363,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -461,7 +461,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -713,7 +713,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -746,7 +746,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -937,12 +937,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "14.6.2-beta.0";
+const version$1 = "14.7.1";
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -962,7 +962,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1023,7 +1023,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1060,7 +1060,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1387,7 +1387,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1441,7 +1441,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1579,7 +1579,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1676,7 +1676,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1876,7 +1876,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1916,7 +1916,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1954,7 +1954,7 @@ function buildTenantProfileFromIdTokenClaims(homeAccountId, idTokenClaims) {
  * @param idTokenClaims
  * @returns
  */
-function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenClaims) {
+function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenClaims, idTokenSecret) {
     let updatedAccountInfo = baseAccountInfo;
     // Tenant Profile overrides passed in account info
     if (tenantProfile) {
@@ -1971,13 +1971,14 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
             ...updatedAccountInfo,
             ...claimsSourcedTenantProfile,
             idTokenClaims: idTokenClaims,
+            idToken: idTokenSecret,
         };
         return updatedAccountInfo;
     }
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1992,7 +1993,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2014,7 +2015,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2027,7 +2028,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2274,7 +2275,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2321,7 +2322,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2485,7 +2486,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2625,7 +2626,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2716,7 +2717,7 @@ class CacheManager {
             }
         }
         // Expand tenant profile into account info based on matching tenant profile and if available matching ID token claims
-        tenantedAccountInfo = updateAccountTenantProfileData(accountInfo, tenantProfile, idTokenClaims);
+        tenantedAccountInfo = updateAccountTenantProfileData(accountInfo, tenantProfile, idTokenClaims, idToken?.secret);
         return tenantedAccountInfo;
     }
     getTenantProfilesFromAccountEntity(accountEntity, targetTenantId, tenantProfileFilter) {
@@ -3865,7 +3866,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3965,7 +3966,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3982,7 +3983,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4080,7 +4081,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4117,7 +4118,7 @@ class NetworkManager {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4127,7 +4128,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4174,7 +4175,7 @@ const SID = "sid";
 const LOGIN_HINT = "login_hint";
 const DOMAIN_HINT = "domain_hint";
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4258,7 +4259,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4642,7 +4643,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4654,7 +4655,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4664,7 +4665,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4674,7 +4675,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4935,7 +4936,7 @@ const IntFields = new Set([
     "multiMatchedRT",
 ]);
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5031,7 +5032,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5140,7 +5141,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5937,8 +5938,10 @@ function getTenantFromAuthorityString(authority) {
      *  AAD Authority - domain/tenantId -> Credentials are cached with realm = tenantId
      *  B2C Authority - domain/{tenantId}?/.../policy -> Credentials are cached with realm = policy
      *  tenantId is downcased because B2C policies can have mixed case but tfp claim is downcased
+     *
+     * Note that we may not have any path segments in certain OIDC scenarios.
      */
-    const tenantId = authorityUrlComponents.PathSegments.slice(-1)[0].toLowerCase();
+    const tenantId = authorityUrlComponents.PathSegments.slice(-1)[0]?.toLowerCase();
     switch (tenantId) {
         case AADAuthorityConstants.COMMON:
         case AADAuthorityConstants.ORGANIZATIONS:
@@ -5973,7 +5976,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6004,7 +6007,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6107,7 +6110,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6133,7 +6136,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6220,7 +6223,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6236,7 +6239,7 @@ class CacheRecord {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6308,7 +6311,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6393,7 +6396,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6420,7 +6423,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6710,7 +6713,7 @@ class ResponseHandler {
         }
         const accountInfo = cacheRecord.account
             ? updateAccountTenantProfileData(cacheRecord.account.getAccountInfo(), undefined, // tenantProfile optional
-            idTokenClaims)
+            idTokenClaims, cacheRecord.idToken?.secret)
             : null;
         return {
             authority: authority.canonicalAuthority,
@@ -6773,7 +6776,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, idTokenClai
     return baseAccount;
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7178,7 +7181,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7385,7 +7388,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7516,7 +7519,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7531,7 +7534,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7539,7 +7542,7 @@ const StubbedNetworkModule = {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7564,7 +7567,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7604,7 +7607,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7662,7 +7665,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7866,7 +7869,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7945,7 +7948,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v14.6.2-beta.0 2024-02-07 */
+/*! @azure/msal-common v14.7.1 2024-02-17 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8931,6 +8934,149 @@ const LOG_LEVEL_CACHE_KEY = "msal.browser.log.level";
 const LOG_PII_CACHE_KEY = "msal.browser.log.pii";
 const BROWSER_PERF_ENABLED_KEY = "msal.browser.performance.enabled";
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * This file defines functions used by the browser library to perform cryptography operations such as
+ * hashing and encoding. It also has helper functions to validate the availability of specific APIs.
+ */
+/**
+ * See here for more info on RsaHashedKeyGenParams: https://developer.mozilla.org/en-US/docs/Web/API/RsaHashedKeyGenParams
+ */
+// RSA KeyGen Algorithm
+const PKCS1_V15_KEYGEN_ALG = "RSASSA-PKCS1-v1_5";
+// SHA-256 hashing algorithm
+const S256_HASH_ALG = "SHA-256";
+// MOD length for PoP tokens
+const MODULUS_LENGTH = 2048;
+// Public Exponent
+const PUBLIC_EXPONENT = new Uint8Array([0x01, 0x00, 0x01]);
+// UUID hex digits
+const UUID_CHARS = "0123456789abcdef";
+// Array to store UINT32 random value
+const UINT32_ARR = new Uint32Array(1);
+const keygenAlgorithmOptions = {
+    name: PKCS1_V15_KEYGEN_ALG,
+    hash: S256_HASH_ALG,
+    modulusLength: MODULUS_LENGTH,
+    publicExponent: PUBLIC_EXPONENT,
+};
+/**
+ * Check whether browser crypto is available.
+ */
+function validateCryptoAvailable(logger) {
+    if ("crypto" in window) {
+        logger.verbose("BrowserCrypto: modern crypto interface available");
+    }
+    else {
+        logger.error("BrowserCrypto: crypto interface is unavailable");
+        throw createBrowserAuthError(cryptoNonExistent);
+    }
+}
+/**
+ * Returns a sha-256 hash of the given dataString as an ArrayBuffer.
+ * @param dataString {string} data string
+ * @param performanceClient {?IPerformanceClient}
+ * @param correlationId {?string} correlation id
+ */
+async function sha256Digest(dataString, performanceClient, correlationId) {
+    performanceClient?.addQueueMeasurement(PerformanceEvents.Sha256Digest, correlationId);
+    const encoder = new TextEncoder();
+    const data = encoder.encode(dataString);
+    return window.crypto.subtle.digest(S256_HASH_ALG, data);
+}
+/**
+ * Populates buffer with cryptographically random values.
+ * @param dataBuffer
+ */
+function getRandomValues(dataBuffer) {
+    return window.crypto.getRandomValues(dataBuffer);
+}
+/**
+ * Returns random Uint32 value.
+ * @returns {number}
+ */
+function getRandomUint32() {
+    window.crypto.getRandomValues(UINT32_ARR);
+    return UINT32_ARR[0];
+}
+/**
+ * Creates a UUID v7 from the current timestamp.
+ * Implementation relies on the system clock to guarantee increasing order of generated identifiers.
+ * @returns {number}
+ */
+function createNewGuid() {
+    const currentTimestamp = Date.now();
+    const baseRand = getRandomUint32() * 0x400 + (getRandomUint32() & 0x3ff);
+    // Result byte array
+    const bytes = new Uint8Array(16);
+    // A 12-bit `rand_a` field value
+    const randA = Math.trunc(baseRand / 2 ** 30);
+    // The higher 30 bits of 62-bit `rand_b` field value
+    const randBHi = baseRand & (2 ** 30 - 1);
+    // The lower 32 bits of 62-bit `rand_b` field value
+    const randBLo = getRandomUint32();
+    bytes[0] = currentTimestamp / 2 ** 40;
+    bytes[1] = currentTimestamp / 2 ** 32;
+    bytes[2] = currentTimestamp / 2 ** 24;
+    bytes[3] = currentTimestamp / 2 ** 16;
+    bytes[4] = currentTimestamp / 2 ** 8;
+    bytes[5] = currentTimestamp;
+    bytes[6] = 0x70 | (randA >>> 8);
+    bytes[7] = randA;
+    bytes[8] = 0x80 | (randBHi >>> 24);
+    bytes[9] = randBHi >>> 16;
+    bytes[10] = randBHi >>> 8;
+    bytes[11] = randBHi;
+    bytes[12] = randBLo >>> 24;
+    bytes[13] = randBLo >>> 16;
+    bytes[14] = randBLo >>> 8;
+    bytes[15] = randBLo;
+    let text = "";
+    for (let i = 0; i < bytes.length; i++) {
+        text += UUID_CHARS.charAt(bytes[i] >>> 4);
+        text += UUID_CHARS.charAt(bytes[i] & 0xf);
+        if (i === 3 || i === 5 || i === 7 || i === 9) {
+            text += "-";
+        }
+    }
+    return text;
+}
+/**
+ * Generates a keypair based on current keygen algorithm config.
+ * @param extractable
+ * @param usages
+ */
+async function generateKeyPair(extractable, usages) {
+    return window.crypto.subtle.generateKey(keygenAlgorithmOptions, extractable, usages);
+}
+/**
+ * Export key as Json Web Key (JWK)
+ * @param key
+ */
+async function exportJwk(key) {
+    return window.crypto.subtle.exportKey(KEY_FORMAT_JWK, key);
+}
+/**
+ * Imports key as Json Web Key (JWK), can set extractable and usages.
+ * @param key
+ * @param extractable
+ * @param usages
+ */
+async function importJwk(key, extractable, usages) {
+    return window.crypto.subtle.importKey(KEY_FORMAT_JWK, key, keygenAlgorithmOptions, extractable, usages);
+}
+/**
+ * Signs given data with given key
+ * @param key
+ * @param data
+ */
+async function sign(key, data) {
+    return window.crypto.subtle.sign(keygenAlgorithmOptions, key, data);
+}
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -9056,6 +9202,13 @@ function preconnect(authority) {
         catch { }
     }, 10000); // 10s Timeout
 }
+/**
+ * Wrapper function that creates a UUID v7 from the current timestamp.
+ * @returns {string}
+ */
+function createGuid() {
+    return createNewGuid();
+}
 
 var BrowserUtils = /*#__PURE__*/Object.freeze({
     __proto__: null,
@@ -9065,6 +9218,7 @@ var BrowserUtils = /*#__PURE__*/Object.freeze({
     blockRedirectInIframe: blockRedirectInIframe,
     blockReloadInHiddenIframes: blockReloadInHiddenIframes,
     clearHash: clearHash,
+    createGuid: createGuid,
     getCurrentUri: getCurrentUri,
     getHomepage: getHomepage,
     isInIframe: isInIframe,
@@ -9345,7 +9499,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.8.1-beta.0";
+const version = "3.10.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9852,149 +10006,6 @@ function base64DecToArr(base64String) {
     return Uint8Array.from(binString, (m) => m.codePointAt(0) || 0);
 }
 
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * This file defines functions used by the browser library to perform cryptography operations such as
- * hashing and encoding. It also has helper functions to validate the availability of specific APIs.
- */
-/**
- * See here for more info on RsaHashedKeyGenParams: https://developer.mozilla.org/en-US/docs/Web/API/RsaHashedKeyGenParams
- */
-// RSA KeyGen Algorithm
-const PKCS1_V15_KEYGEN_ALG = "RSASSA-PKCS1-v1_5";
-// SHA-256 hashing algorithm
-const S256_HASH_ALG = "SHA-256";
-// MOD length for PoP tokens
-const MODULUS_LENGTH = 2048;
-// Public Exponent
-const PUBLIC_EXPONENT = new Uint8Array([0x01, 0x00, 0x01]);
-// UUID hex digits
-const UUID_CHARS = "0123456789abcdef";
-// Array to store UINT32 random value
-const UINT32_ARR = new Uint32Array(1);
-const keygenAlgorithmOptions = {
-    name: PKCS1_V15_KEYGEN_ALG,
-    hash: S256_HASH_ALG,
-    modulusLength: MODULUS_LENGTH,
-    publicExponent: PUBLIC_EXPONENT,
-};
-/**
- * Check whether browser crypto is available.
- */
-function validateCryptoAvailable(logger) {
-    if ("crypto" in window) {
-        logger.verbose("BrowserCrypto: modern crypto interface available");
-    }
-    else {
-        logger.error("BrowserCrypto: crypto interface is unavailable");
-        throw createBrowserAuthError(cryptoNonExistent);
-    }
-}
-/**
- * Returns a sha-256 hash of the given dataString as an ArrayBuffer.
- * @param dataString {string} data string
- * @param performanceClient {?IPerformanceClient}
- * @param correlationId {?string} correlation id
- */
-async function sha256Digest(dataString, performanceClient, correlationId) {
-    performanceClient?.addQueueMeasurement(PerformanceEvents.Sha256Digest, correlationId);
-    const encoder = new TextEncoder();
-    const data = encoder.encode(dataString);
-    return window.crypto.subtle.digest(S256_HASH_ALG, data);
-}
-/**
- * Populates buffer with cryptographically random values.
- * @param dataBuffer
- */
-function getRandomValues(dataBuffer) {
-    return window.crypto.getRandomValues(dataBuffer);
-}
-/**
- * Returns random Uint32 value.
- * @returns {number}
- */
-function getRandomUint32() {
-    window.crypto.getRandomValues(UINT32_ARR);
-    return UINT32_ARR[0];
-}
-/**
- * Creates a UUID v7 from the current timestamp.
- * Implementation relies on the system clock to guarantee increasing order of generated identifiers.
- * @returns {number}
- */
-function createNewGuid() {
-    const currentTimestamp = Date.now();
-    const baseRand = getRandomUint32() * 0x400 + (getRandomUint32() & 0x3ff);
-    // Result byte array
-    const bytes = new Uint8Array(16);
-    // A 12-bit `rand_a` field value
-    const randA = Math.trunc(baseRand / 2 ** 30);
-    // The higher 30 bits of 62-bit `rand_b` field value
-    const randBHi = baseRand & (2 ** 30 - 1);
-    // The lower 32 bits of 62-bit `rand_b` field value
-    const randBLo = getRandomUint32();
-    bytes[0] = currentTimestamp / 2 ** 40;
-    bytes[1] = currentTimestamp / 2 ** 32;
-    bytes[2] = currentTimestamp / 2 ** 24;
-    bytes[3] = currentTimestamp / 2 ** 16;
-    bytes[4] = currentTimestamp / 2 ** 8;
-    bytes[5] = currentTimestamp;
-    bytes[6] = 0x70 | (randA >>> 8);
-    bytes[7] = randA;
-    bytes[8] = 0x80 | (randBHi >>> 24);
-    bytes[9] = randBHi >>> 16;
-    bytes[10] = randBHi >>> 8;
-    bytes[11] = randBHi;
-    bytes[12] = randBLo >>> 24;
-    bytes[13] = randBLo >>> 16;
-    bytes[14] = randBLo >>> 8;
-    bytes[15] = randBLo;
-    let text = "";
-    for (let i = 0; i < bytes.length; i++) {
-        text += UUID_CHARS.charAt(bytes[i] >>> 4);
-        text += UUID_CHARS.charAt(bytes[i] & 0xf);
-        if (i === 3 || i === 5 || i === 7 || i === 9) {
-            text += "-";
-        }
-    }
-    return text;
-}
-/**
- * Generates a keypair based on current keygen algorithm config.
- * @param extractable
- * @param usages
- */
-async function generateKeyPair(extractable, usages) {
-    return window.crypto.subtle.generateKey(keygenAlgorithmOptions, extractable, usages);
-}
-/**
- * Export key as Json Web Key (JWK)
- * @param key
- */
-async function exportJwk(key) {
-    return window.crypto.subtle.exportKey(KEY_FORMAT_JWK, key);
-}
-/**
- * Imports key as Json Web Key (JWK), can set extractable and usages.
- * @param key
- * @param extractable
- * @param usages
- */
-async function importJwk(key, extractable, usages) {
-    return window.crypto.subtle.importKey(KEY_FORMAT_JWK, key, keygenAlgorithmOptions, extractable, usages);
-}
-/**
- * Signs given data with given key
- * @param key
- * @param data
- */
-async function sign(key, data) {
-    return window.crypto.subtle.sign(keygenAlgorithmOptions, key, data);
-}
-
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12746,6 +12757,7 @@ class NativeInteractionClient extends BaseInteractionClient {
             const fullAccount = {
                 ...account,
                 idTokenClaims: result?.idTokenClaims,
+                idToken: result?.idToken,
             };
             return {
                 ...result,
@@ -12847,15 +12859,19 @@ class NativeInteractionClient extends BaseInteractionClient {
      */
     async handleNativeResponse(response, request, reqTimestamp) {
         this.logger.trace("NativeInteractionClient - handleNativeResponse called.");
-        if (response.account.id !== request.accountId) {
+        // generate identifiers
+        const idTokenClaims = extractTokenClaims(response.id_token, base64Decode);
+        const homeAccountIdentifier = this.createHomeAccountIdentifier(response, idTokenClaims);
+        const cachedhomeAccountId = this.browserStorage.getAccountInfoFilteredBy({
+            nativeAccountId: request.accountId,
+        })?.homeAccountId;
+        if (homeAccountIdentifier !== cachedhomeAccountId &&
+            response.account.id !== request.accountId) {
             // User switch in native broker prompt is not supported. All users must first sign in through web flow to ensure server state is in sync
             throw createNativeAuthError(userSwitch);
         }
         // Get the preferred_cache domain for the given authority
         const authority = await this.getDiscoveredAuthority(request.authority);
-        // generate identifiers
-        const idTokenClaims = extractTokenClaims(response.id_token, base64Decode);
-        const homeAccountIdentifier = this.createHomeAccountIdentifier(response, idTokenClaims);
         const baseAccount = buildAccountToCache(this.browserStorage, authority, homeAccountIdentifier, idTokenClaims, base64Decode, response.client_info, undefined, // environment
         idTokenClaims.tid, undefined, // auth code payload
         response.account.id, this.logger);
@@ -12951,7 +12967,14 @@ class NativeInteractionClient extends BaseInteractionClient {
             idTokenClaims.tid ||
             Constants.EMPTY_STRING;
         const accountInfo = updateAccountTenantProfileData(accountEntity.getAccountInfo(), undefined, // tenantProfile optional
-        idTokenClaims);
+        idTokenClaims, response.id_token);
+        /**
+         * In pairwise broker flows, this check prevents the broker's native account id
+         * from being returned over the embedded app's account id.
+         */
+        if (accountInfo.nativeAccountId !== response.account.id) {
+            accountInfo.nativeAccountId = response.account.id;
+        }
         // generate PoP token as needed
         const responseAccessToken = await this.generatePopAccessToken(response, request);
         const tokenType = request.tokenType === AuthenticationScheme.POP
@@ -14613,17 +14636,20 @@ class SilentIframeClient extends StandardInteractionClient {
             (!request.account || !request.account.username)) {
             this.logger.warning("No user hint provided. The authorization server may need more information to complete this request.");
         }
-        // Check that prompt is set to none or no_session, throw error if it is set to anything else.
-        if (request.prompt &&
-            request.prompt !== PromptValue.NONE &&
-            request.prompt !== PromptValue.NO_SESSION) {
-            throw createBrowserAuthError(silentPromptValueError);
+        // Check the prompt value
+        const inputRequest = { ...request };
+        if (inputRequest.prompt) {
+            if (inputRequest.prompt !== PromptValue.NONE &&
+                inputRequest.prompt !== PromptValue.NO_SESSION) {
+                this.logger.warning(`SilentIframeClient. Replacing invalid prompt ${inputRequest.prompt} with ${PromptValue.NONE}`);
+                inputRequest.prompt = PromptValue.NONE;
+            }
+        }
+        else {
+            inputRequest.prompt = PromptValue.NONE;
         }
         // Create silent request
-        const silentRequest = await invokeAsync(this.initializeAuthorizationRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.logger, this.performanceClient, request.correlationId)({
-            ...request,
-            prompt: request.prompt || PromptValue.NONE,
-        }, exports.InteractionType.Silent);
+        const silentRequest = await invokeAsync(this.initializeAuthorizationRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.logger, this.performanceClient, request.correlationId)(inputRequest, exports.InteractionType.Silent);
         preconnect(silentRequest.authority);
         const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
         try {
@@ -17617,7 +17643,7 @@ class BrowserPerformanceClient extends PerformanceClient {
         }, intFields);
     }
     generateId() {
-        return window.crypto.randomUUID();
+        return createNewGuid();
     }
     getPageVisibility() {
         return document.visibilityState?.toString() || null;