@azure/msal-browser 4.0.1 → 4.1.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v4.0.1 2025-01-15 */
+/*! @azure/msal-browser v4.1.0 2025-02-03 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -306,7 +306,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -323,7 +323,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -372,7 +372,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -470,7 +470,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -722,7 +722,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -761,7 +761,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -952,12 +952,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "15.0.1";
+const version$1 = "15.1.0";
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -977,7 +977,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1038,7 +1038,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1075,7 +1075,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1402,7 +1402,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1456,7 +1456,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1594,7 +1594,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1691,7 +1691,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1711,8 +1711,10 @@ class ScopeSet {
         const filteredInput = scopeArr
             ? StringUtils.removeEmptyStringsFromArray(scopeArr)
             : [];
-        // Validate and filter scopes (validate function throws if validation fails)
-        this.validateInputScopes(filteredInput);
+        // Check if scopes array has at least one member
+        if (!filteredInput || !filteredInput.length) {
+            throw createClientConfigurationError(emptyInputScopesError);
+        }
         this.scopes = new Set(); // Iterator in constructor not supported by IE11
         filteredInput.forEach((scope) => this.scopes.add(scope));
     }
@@ -1742,17 +1744,6 @@ class ScopeSet {
         }
         return scopeSet;
     }
-    /**
-     * Used to validate the scopes input parameter requested  by the developer.
-     * @param {Array<string>} inputScopes - Developer requested permissions. Not all scopes are guaranteed to be included in the access token returned.
-     * @param {boolean} scopesRequired - Boolean indicating whether the scopes array is required or not
-     */
-    validateInputScopes(inputScopes) {
-        // Check if scopes are required but not given or is an empty array
-        if (!inputScopes || inputScopes.length < 1) {
-            throw createClientConfigurationError(emptyInputScopesError);
-        }
-    }
     /**
      * Check if a given scope is present in this set of scopes.
      * @param scope
@@ -1891,7 +1882,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1931,7 +1922,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2010,7 +2001,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2025,7 +2016,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2047,7 +2038,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2060,7 +2051,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2303,7 +2294,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2350,7 +2341,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2514,7 +2505,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2654,7 +2645,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2662,7 +2653,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
 const cacheUnknownErrorCode = "cache_error_unknown";
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2689,7 +2680,7 @@ class CacheError extends Error {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3874,7 +3865,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3973,7 +3964,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3983,7 +3974,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4033,7 +4024,7 @@ const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 const BROKER_CLIENT_ID = "brk_client_id";
 const BROKER_REDIRECT_URI = "brk_redirect_uri";
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4100,7 +4091,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4508,7 +4499,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4520,7 +4511,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4530,7 +4521,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4540,7 +4531,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5047,7 +5038,7 @@ const IntFields = new Set([
     "encryptedCacheExpiredCount",
 ]);
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5143,7 +5134,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5252,7 +5243,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6091,7 +6082,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6122,7 +6113,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6141,7 +6132,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6239,7 +6230,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6269,7 +6260,7 @@ function createNetworkError(error, httpStatus, responseHeaders) {
     return new NetworkError(error, httpStatus, responseHeaders);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6419,7 +6410,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6445,7 +6436,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6533,7 +6524,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6605,7 +6596,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6689,7 +6680,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6716,7 +6707,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7093,7 +7084,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7111,7 +7102,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7397,7 +7388,9 @@ class AuthorizationCodeClient extends BaseClient {
         }
         if (request.domainHint) {
             parameterBuilder.addDomainHint(request.domainHint);
+            this.performanceClient?.addFields({ domainHintFromRequest: true }, correlationId);
         }
+        this.performanceClient?.addFields({ prompt: request.prompt }, correlationId);
         // Add sid or loginHint with preference for login_hint claim (in request) -> sid -> loginHint (upn/email) -> username of AccountInfo object
         if (request.prompt !== PromptValue.SELECT_ACCOUNT) {
             // AAD will throw if prompt=select_account is passed with an account hint
@@ -7405,6 +7398,7 @@ class AuthorizationCodeClient extends BaseClient {
                 // SessionID is only used in silent calls
                 this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from request");
                 parameterBuilder.addSid(request.sid);
+                this.performanceClient?.addFields({ sidFromRequest: true }, correlationId);
             }
             else if (request.account) {
                 const accountSid = this.extractAccountSid(request.account);
@@ -7417,6 +7411,7 @@ class AuthorizationCodeClient extends BaseClient {
                 if (accountLoginHintClaim) {
                     this.logger.verbose("createAuthCodeUrlQueryString: login_hint claim present on account");
                     parameterBuilder.addLoginHint(accountLoginHintClaim);
+                    this.performanceClient?.addFields({ loginHintFromClaim: true }, correlationId);
                     try {
                         const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                         parameterBuilder.addCcsOid(clientInfo);
@@ -7432,6 +7427,7 @@ class AuthorizationCodeClient extends BaseClient {
                      */
                     this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from account");
                     parameterBuilder.addSid(accountSid);
+                    this.performanceClient?.addFields({ sidFromClaim: true }, correlationId);
                     try {
                         const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                         parameterBuilder.addCcsOid(clientInfo);
@@ -7444,11 +7440,13 @@ class AuthorizationCodeClient extends BaseClient {
                     this.logger.verbose("createAuthCodeUrlQueryString: Adding login_hint from request");
                     parameterBuilder.addLoginHint(request.loginHint);
                     parameterBuilder.addCcsUpn(request.loginHint);
+                    this.performanceClient?.addFields({ loginHintFromRequest: true }, correlationId);
                 }
                 else if (request.account.username) {
                     // Fallback to account username if provided
                     this.logger.verbose("createAuthCodeUrlQueryString: Adding login_hint from account");
                     parameterBuilder.addLoginHint(request.account.username);
+                    this.performanceClient?.addFields({ loginHintFromUpn: true }, correlationId);
                     try {
                         const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                         parameterBuilder.addCcsOid(clientInfo);
@@ -7462,6 +7460,7 @@ class AuthorizationCodeClient extends BaseClient {
                 this.logger.verbose("createAuthCodeUrlQueryString: No account, adding login_hint from request");
                 parameterBuilder.addLoginHint(request.loginHint);
                 parameterBuilder.addCcsUpn(request.loginHint);
+                this.performanceClient?.addFields({ loginHintFromRequest: true }, correlationId);
             }
         }
         else {
@@ -7553,7 +7552,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7633,6 +7632,7 @@ class RefreshTokenClient extends BaseClient {
         if (refreshToken.expiresOn &&
             isTokenExpired(refreshToken.expiresOn, request.refreshTokenExpirationOffsetSeconds ||
                 DEFAULT_REFRESH_TOKEN_EXPIRATION_OFFSET_SECONDS)) {
+            this.performanceClient?.addFields({ rtExpiresOnMs: Number(refreshToken.expiresOn) }, request.correlationId);
             throw createInteractionRequiredAuthError(refreshTokenExpired);
         }
         // attach cached RT size to the current measurement
@@ -7649,12 +7649,14 @@ class RefreshTokenClient extends BaseClient {
             return await invokeAsync(this.acquireToken.bind(this), PerformanceEvents.RefreshTokenClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(refreshTokenRequest);
         }
         catch (e) {
-            if (e instanceof InteractionRequiredAuthError &&
-                e.subError === badToken) {
-                // Remove bad refresh token from cache
-                this.logger.verbose("acquireTokenWithRefreshToken: bad refresh token, removing from cache");
-                const badRefreshTokenKey = generateCredentialKey(refreshToken);
-                this.cacheManager.removeRefreshToken(badRefreshTokenKey);
+            if (e instanceof InteractionRequiredAuthError) {
+                this.performanceClient?.addFields({ rtExpiresOnMs: Number(refreshToken.expiresOn) }, request.correlationId);
+                if (e.subError === badToken) {
+                    // Remove bad refresh token from cache
+                    this.logger.verbose("acquireTokenWithRefreshToken: bad refresh token, removing from cache");
+                    const badRefreshTokenKey = generateCredentialKey(refreshToken);
+                    this.cacheManager.removeRefreshToken(badRefreshTokenKey);
+                }
             }
             throw e;
         }
@@ -7773,7 +7775,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7784,44 +7786,6 @@ class SilentFlowClient extends BaseClient {
     constructor(configuration, performanceClient) {
         super(configuration, performanceClient);
     }
-    /**
-     * Retrieves a token from cache if it is still valid, or uses the cached refresh token to renew
-     * the given token and returns the renewed token
-     * @param request
-     */
-    async acquireToken(request) {
-        try {
-            const [authResponse, cacheOutcome] = await this.acquireCachedToken({
-                ...request,
-                scopes: request.scopes?.length
-                    ? request.scopes
-                    : [...OIDC_DEFAULT_SCOPES],
-            });
-            // if the token is not expired but must be refreshed; get a new one in the background
-            if (cacheOutcome === CacheOutcome.PROACTIVELY_REFRESHED) {
-                this.logger.info("SilentFlowClient:acquireCachedToken - Cached access token's refreshOn property has been exceeded'. It's not expired, but must be refreshed.");
-                // refresh the access token in the background
-                const refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
-                refreshTokenClient
-                    .acquireTokenByRefreshToken(request)
-                    .catch(() => {
-                    // do nothing, this is running in the background and no action is to be taken upon success or failure
-                });
-            }
-            // return the cached token
-            return authResponse;
-        }
-        catch (e) {
-            if (e instanceof ClientAuthError &&
-                e.errorCode === tokenRefreshRequired) {
-                const refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
-                return refreshTokenClient.acquireTokenByRefreshToken(request);
-            }
-            else {
-                throw e;
-            }
-        }
-    }
     /**
      * Retrieves token from cache or throws an error if it must be refreshed.
      * @param request
@@ -7909,7 +7873,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7924,7 +7888,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7982,7 +7946,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8245,7 +8209,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8253,7 +8217,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8278,7 +8242,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8318,7 +8282,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8397,7 +8361,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.1.0 2025-02-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10434,7 +10398,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "4.0.1";
+const version = "4.1.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11739,36 +11703,14 @@ class BrowserCacheManager extends CacheManager {
         this.cacheConfig = cacheConfig;
         this.logger = logger;
         this.internalStorage = new MemoryStorage();
-        this.browserStorage = this.setupBrowserStorage(this.cacheConfig.cacheLocation);
-        this.temporaryCacheStorage = this.setupBrowserStorage(this.cacheConfig.temporaryCacheLocation);
+        this.browserStorage = getStorageImplementation(clientId, cacheConfig.cacheLocation, logger, performanceClient);
+        this.temporaryCacheStorage = getStorageImplementation(clientId, cacheConfig.temporaryCacheLocation, logger, performanceClient);
         this.cookieStorage = new CookieStorage();
         this.performanceClient = performanceClient;
     }
     async initialize(correlationId) {
         await this.browserStorage.initialize(correlationId);
     }
-    /**
-     * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
-     * @param cacheLocation
-     */
-    setupBrowserStorage(cacheLocation) {
-        try {
-            switch (cacheLocation) {
-                case BrowserCacheLocation.LocalStorage:
-                    return new LocalStorage(this.clientId, this.logger, this.performanceClient);
-                case BrowserCacheLocation.SessionStorage:
-                    return new SessionStorage();
-                case BrowserCacheLocation.MemoryStorage:
-                default:
-                    break;
-            }
-        }
-        catch (e) {
-            this.logger.error(e);
-        }
-        this.cacheConfig.cacheLocation = BrowserCacheLocation.MemoryStorage;
-        return new MemoryStorage();
-    }
     /**
      * Parses passed value as JSON object, JSON.parse() will throw an error.
      * @param input
@@ -12661,6 +12603,27 @@ class BrowserCacheManager extends CacheManager {
         }
     }
 }
+/**
+ * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
+ * @param cacheLocation
+ */
+function getStorageImplementation(clientId, cacheLocation, logger, performanceClient) {
+    try {
+        switch (cacheLocation) {
+            case BrowserCacheLocation.LocalStorage:
+                return new LocalStorage(clientId, logger, performanceClient);
+            case BrowserCacheLocation.SessionStorage:
+                return new SessionStorage();
+            case BrowserCacheLocation.MemoryStorage:
+            default:
+                break;
+        }
+    }
+    catch (e) {
+        logger.error(e);
+    }
+    return new MemoryStorage();
+}
 const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient) => {
     const cacheOptions = {
         cacheLocation: BrowserCacheLocation.MemoryStorage,
@@ -13476,7 +13439,6 @@ class NativeInteractionClient extends BaseInteractionClient {
         this.nativeMessageHandler = provider;
         this.nativeStorageManager = nativeStorageImpl;
         this.silentCacheClient = new SilentCacheClient(config, this.nativeStorageManager, browserCrypto, logger, eventHandler, navigationClient, performanceClient, provider, correlationId);
-        this.serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
         const extensionName = this.nativeMessageHandler.getExtensionId() ===
             NativeConstants.PREFERRED_EXTENSION_ID
             ? "chrome"
@@ -13511,6 +13473,7 @@ class NativeInteractionClient extends BaseInteractionClient {
         // start the perf measurement
         const nativeATMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);
         const reqTimestamp = nowSeconds();
+        const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
         try {
             // initialize native request
             const nativeRequest = await this.initializeNativeRequest(request);
@@ -13543,7 +13506,7 @@ class NativeInteractionClient extends BaseInteractionClient {
                     isNativeBroker: true,
                     requestId: result.requestId,
                 });
-                this.serverTelemetryManager.clearNativeBrokerErrorCode();
+                serverTelemetryManager.clearNativeBrokerErrorCode();
                 return result;
             })
                 .catch((error) => {
@@ -13558,7 +13521,7 @@ class NativeInteractionClient extends BaseInteractionClient {
         }
         catch (e) {
             if (e instanceof NativeAuthError) {
-                this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
+                serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
             }
             throw e;
         }
@@ -13635,7 +13598,8 @@ class NativeInteractionClient extends BaseInteractionClient {
         catch (e) {
             // Only throw fatal errors here to allow application to fallback to regular redirect. Otherwise proceed and the error will be thrown in handleRedirectPromise
             if (e instanceof NativeAuthError) {
-                this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
+                const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
+                serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
                 if (isFatalNativeAuthError(e)) {
                     throw e;
                 }
@@ -13690,7 +13654,8 @@ class NativeInteractionClient extends BaseInteractionClient {
             const result = this.handleNativeResponse(response, request, reqTimestamp);
             this.browserStorage.setInteractionInProgress(false);
             const res = await result;
-            this.serverTelemetryManager.clearNativeBrokerErrorCode();
+            const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
+            serverTelemetryManager.clearNativeBrokerErrorCode();
             return res;
         }
         catch (e) {
@@ -14509,6 +14474,7 @@ class PopupClient extends StandardInteractionClient {
                 popupWindowAttributes: request.popupWindowAttributes || {},
                 popupWindowParent: request.popupWindowParent ?? window,
             };
+            this.performanceClient.addFields({ isAsyncPopup: this.config.system.asyncPopups }, this.correlationId);
             // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.
             if (this.config.system.asyncPopups) {
                 this.logger.verbose("asyncPopups set to true, acquiring token");
@@ -17629,10 +17595,7 @@ class NestedAppAuthController {
         this.nestedAppAuthAdapter = new NestedAppAuthAdapter(this.config.auth.clientId, this.config.auth.clientCapabilities, this.browserCrypto, this.logger);
         // Set the active account if available
         const accountContext = this.bridgeProxy.getAccountContext();
-        if (accountContext) {
-            const cachedAccount = getAccount(accountContext, this.logger, this.browserStorage);
-            setActiveAccount(cachedAccount, this.browserStorage);
-        }
+        this.currentAccountContext = accountContext ? accountContext : null;
     }
     /**
      * Factory function to create a new instance of NestedAppAuthController
@@ -17685,7 +17648,12 @@ class NestedAppAuthController {
             };
             // cache the tokens in the response
             await this.hydrateCache(result, request);
-            this.browserStorage.setActiveAccount(result.account);
+            // cache the account context in memory after successful token fetch
+            this.currentAccountContext = {
+                homeAccountId: result.account.homeAccountId,
+                environment: result.account.environment,
+                tenantId: result.account.tenantId,
+            };
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Popup, result);
             atPopupMeasurement.add({
                 accessTokenSize: result.accessToken.length,
@@ -17735,7 +17703,12 @@ class NestedAppAuthController {
             const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
             // cache the tokens in the response
             await this.hydrateCache(result, request);
-            this.browserStorage.setActiveAccount(result.account);
+            // cache the account context in memory after successful token fetch
+            this.currentAccountContext = {
+                homeAccountId: result.account.homeAccountId,
+                environment: result.account.environment,
+                tenantId: result.account.tenantId,
+            };
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, result);
             ssoSilentMeasurement?.add({
                 accessTokenSize: result.accessToken.length,
@@ -17771,8 +17744,16 @@ class NestedAppAuthController {
             this.logger.verbose("Claims are present in the request, skipping cache lookup");
             return null;
         }
+        // if the request has forceRefresh, we cannot look up in the cache
+        if (request.forceRefresh) {
+            this.logger.verbose("forceRefresh is set to true, skipping cache lookup");
+            return null;
+        }
         // respect cache lookup policy
         let result = null;
+        if (!request.cacheLookupPolicy) {
+            request.cacheLookupPolicy = CacheLookupPolicy.Default;
+        }
         switch (request.cacheLookupPolicy) {
             case CacheLookupPolicy.Default:
             case CacheLookupPolicy.AccessToken:
@@ -17806,12 +17787,11 @@ class NestedAppAuthController {
      * @returns
      */
     async acquireTokenFromCacheInternal(request) {
-        const accountContext = this.bridgeProxy.getAccountContext();
+        // always prioritize the account context from the bridge
+        const accountContext = this.bridgeProxy.getAccountContext() || this.currentAccountContext;
         let currentAccount = null;
         if (accountContext) {
-            const hubAccount = getAccount(accountContext, this.logger, this.browserStorage);
-            // always prioritize for hub account context, the reqirement of `request.account` will be removed soon
-            currentAccount = hubAccount || request.account;
+            currentAccount = getAccount(accountContext, this.logger, this.browserStorage);
         }
         // fall back to brokering if no cached account is found
         if (!currentAccount) {
@@ -18455,7 +18435,9 @@ async function createNestablePublicClientApplication(configuration) {
     await nestedAppAuth.initialize();
     if (nestedAppAuth.isAvailable()) {
         const controller = new NestedAppAuthController(nestedAppAuth);
-        return new PublicClientApplication(configuration, controller);
+        const nestablePCA = new PublicClientApplication(configuration, controller);
+        await nestablePCA.initialize();
+        return nestablePCA;
     }
     return createStandardPublicClientApplication(configuration);
 }