@azure/msal-browser 4.0.1 → 4.1.0

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.0.1 2025-01-15 */
+/*! @azure/msal-browser v4.1.0 2025-02-03 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -6,7 +6,7 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msal = {}));
 })(this, (function (exports) { 'use strict';
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -310,7 +310,7 @@
     // Token renewal offset default in seconds
     const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -327,7 +327,7 @@
         unexpectedError: unexpectedError
     });
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -376,7 +376,7 @@
             : AuthErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -474,7 +474,7 @@
         userTimeoutReached: userTimeoutReached
     });
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -726,7 +726,7 @@
         return new ClientAuthError(errorCode, additionalMessage);
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -765,7 +765,7 @@
         },
     };
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -956,12 +956,12 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /* eslint-disable header/header */
     const name$1 = "@azure/msal-common";
-    const version$1 = "15.0.1";
+    const version$1 = "15.1.0";
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -981,7 +981,7 @@
         AzureUsGovernment: "https://login.microsoftonline.us",
     };
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1042,7 +1042,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1079,7 +1079,7 @@
         return cachedAtSec > nowSeconds();
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1406,7 +1406,7 @@
         return metadata.expiresAt <= nowSeconds();
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1460,7 +1460,7 @@
         urlParseError: urlParseError
     });
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1598,7 +1598,7 @@
         return new ClientConfigurationError(errorCode);
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1695,7 +1695,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1715,8 +1715,10 @@
             const filteredInput = scopeArr
                 ? StringUtils.removeEmptyStringsFromArray(scopeArr)
                 : [];
-            // Validate and filter scopes (validate function throws if validation fails)
-            this.validateInputScopes(filteredInput);
+            // Check if scopes array has at least one member
+            if (!filteredInput || !filteredInput.length) {
+                throw createClientConfigurationError(emptyInputScopesError);
+            }
             this.scopes = new Set(); // Iterator in constructor not supported by IE11
             filteredInput.forEach((scope) => this.scopes.add(scope));
         }
@@ -1746,17 +1748,6 @@
             }
             return scopeSet;
         }
-        /**
-         * Used to validate the scopes input parameter requested  by the developer.
-         * @param {Array<string>} inputScopes - Developer requested permissions. Not all scopes are guaranteed to be included in the access token returned.
-         * @param {boolean} scopesRequired - Boolean indicating whether the scopes array is required or not
-         */
-        validateInputScopes(inputScopes) {
-            // Check if scopes are required but not given or is an empty array
-            if (!inputScopes || inputScopes.length < 1) {
-                throw createClientConfigurationError(emptyInputScopesError);
-            }
-        }
         /**
          * Check if a given scope is present in this set of scopes.
          * @param scope
@@ -1895,7 +1886,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1935,7 +1926,7 @@
         };
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2014,7 +2005,7 @@
         return updatedAccountInfo;
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2029,7 +2020,7 @@
         Ciam: 3,
     };
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2051,7 +2042,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2064,7 +2055,7 @@
         OIDC: "OIDC",
     };
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2307,7 +2298,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2354,7 +2345,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2518,7 +2509,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2658,7 +2649,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2666,7 +2657,7 @@
     const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
     const cacheUnknownErrorCode = "cache_error_unknown";
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2693,7 +2684,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3878,7 +3869,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3977,7 +3968,7 @@
         return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3987,7 +3978,7 @@
         UPN: "UPN",
     };
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4037,7 +4028,7 @@
     const BROKER_CLIENT_ID = "brk_client_id";
     const BROKER_REDIRECT_URI = "brk_redirect_uri";
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4104,7 +4095,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4512,7 +4503,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4524,7 +4515,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4534,7 +4525,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4544,7 +4535,7 @@
             response.hasOwnProperty("error_description"));
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5051,7 +5042,7 @@
         "encryptedCacheExpiredCount",
     ]);
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5147,7 +5138,7 @@
         };
     };
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5256,7 +5247,7 @@
         },
     };
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6095,7 +6086,7 @@
         };
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6126,7 +6117,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6145,7 +6136,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6243,7 +6234,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6273,7 +6264,7 @@
         return new NetworkError(error, httpStatus, responseHeaders);
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6423,7 +6414,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6449,7 +6440,7 @@
         refreshTokenExpired: refreshTokenExpired
     });
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6537,7 +6528,7 @@
         return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6609,7 +6600,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6693,7 +6684,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6720,7 +6711,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7097,7 +7088,7 @@
         return baseAccount;
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -7115,7 +7106,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7401,7 +7392,9 @@
             }
             if (request.domainHint) {
                 parameterBuilder.addDomainHint(request.domainHint);
+                this.performanceClient?.addFields({ domainHintFromRequest: true }, correlationId);
             }
+            this.performanceClient?.addFields({ prompt: request.prompt }, correlationId);
             // Add sid or loginHint with preference for login_hint claim (in request) -> sid -> loginHint (upn/email) -> username of AccountInfo object
             if (request.prompt !== PromptValue.SELECT_ACCOUNT) {
                 // AAD will throw if prompt=select_account is passed with an account hint
@@ -7409,6 +7402,7 @@
                     // SessionID is only used in silent calls
                     this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from request");
                     parameterBuilder.addSid(request.sid);
+                    this.performanceClient?.addFields({ sidFromRequest: true }, correlationId);
                 }
                 else if (request.account) {
                     const accountSid = this.extractAccountSid(request.account);
@@ -7421,6 +7415,7 @@
                     if (accountLoginHintClaim) {
                         this.logger.verbose("createAuthCodeUrlQueryString: login_hint claim present on account");
                         parameterBuilder.addLoginHint(accountLoginHintClaim);
+                        this.performanceClient?.addFields({ loginHintFromClaim: true }, correlationId);
                         try {
                             const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                             parameterBuilder.addCcsOid(clientInfo);
@@ -7436,6 +7431,7 @@
                          */
                         this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from account");
                         parameterBuilder.addSid(accountSid);
+                        this.performanceClient?.addFields({ sidFromClaim: true }, correlationId);
                         try {
                             const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                             parameterBuilder.addCcsOid(clientInfo);
@@ -7448,11 +7444,13 @@
                         this.logger.verbose("createAuthCodeUrlQueryString: Adding login_hint from request");
                         parameterBuilder.addLoginHint(request.loginHint);
                         parameterBuilder.addCcsUpn(request.loginHint);
+                        this.performanceClient?.addFields({ loginHintFromRequest: true }, correlationId);
                     }
                     else if (request.account.username) {
                         // Fallback to account username if provided
                         this.logger.verbose("createAuthCodeUrlQueryString: Adding login_hint from account");
                         parameterBuilder.addLoginHint(request.account.username);
+                        this.performanceClient?.addFields({ loginHintFromUpn: true }, correlationId);
                         try {
                             const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                             parameterBuilder.addCcsOid(clientInfo);
@@ -7466,6 +7464,7 @@
                     this.logger.verbose("createAuthCodeUrlQueryString: No account, adding login_hint from request");
                     parameterBuilder.addLoginHint(request.loginHint);
                     parameterBuilder.addCcsUpn(request.loginHint);
+                    this.performanceClient?.addFields({ loginHintFromRequest: true }, correlationId);
                 }
             }
             else {
@@ -7557,7 +7556,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7637,6 +7636,7 @@
             if (refreshToken.expiresOn &&
                 isTokenExpired(refreshToken.expiresOn, request.refreshTokenExpirationOffsetSeconds ||
                     DEFAULT_REFRESH_TOKEN_EXPIRATION_OFFSET_SECONDS)) {
+                this.performanceClient?.addFields({ rtExpiresOnMs: Number(refreshToken.expiresOn) }, request.correlationId);
                 throw createInteractionRequiredAuthError(refreshTokenExpired);
             }
             // attach cached RT size to the current measurement
@@ -7653,12 +7653,14 @@
                 return await invokeAsync(this.acquireToken.bind(this), PerformanceEvents.RefreshTokenClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(refreshTokenRequest);
             }
             catch (e) {
-                if (e instanceof InteractionRequiredAuthError &&
-                    e.subError === badToken) {
-                    // Remove bad refresh token from cache
-                    this.logger.verbose("acquireTokenWithRefreshToken: bad refresh token, removing from cache");
-                    const badRefreshTokenKey = generateCredentialKey(refreshToken);
-                    this.cacheManager.removeRefreshToken(badRefreshTokenKey);
+                if (e instanceof InteractionRequiredAuthError) {
+                    this.performanceClient?.addFields({ rtExpiresOnMs: Number(refreshToken.expiresOn) }, request.correlationId);
+                    if (e.subError === badToken) {
+                        // Remove bad refresh token from cache
+                        this.logger.verbose("acquireTokenWithRefreshToken: bad refresh token, removing from cache");
+                        const badRefreshTokenKey = generateCredentialKey(refreshToken);
+                        this.cacheManager.removeRefreshToken(badRefreshTokenKey);
+                    }
                 }
                 throw e;
             }
@@ -7777,7 +7779,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7788,44 +7790,6 @@
         constructor(configuration, performanceClient) {
             super(configuration, performanceClient);
         }
-        /**
-         * Retrieves a token from cache if it is still valid, or uses the cached refresh token to renew
-         * the given token and returns the renewed token
-         * @param request
-         */
-        async acquireToken(request) {
-            try {
-                const [authResponse, cacheOutcome] = await this.acquireCachedToken({
-                    ...request,
-                    scopes: request.scopes?.length
-                        ? request.scopes
-                        : [...OIDC_DEFAULT_SCOPES],
-                });
-                // if the token is not expired but must be refreshed; get a new one in the background
-                if (cacheOutcome === CacheOutcome.PROACTIVELY_REFRESHED) {
-                    this.logger.info("SilentFlowClient:acquireCachedToken - Cached access token's refreshOn property has been exceeded'. It's not expired, but must be refreshed.");
-                    // refresh the access token in the background
-                    const refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
-                    refreshTokenClient
-                        .acquireTokenByRefreshToken(request)
-                        .catch(() => {
-                        // do nothing, this is running in the background and no action is to be taken upon success or failure
-                    });
-                }
-                // return the cached token
-                return authResponse;
-            }
-            catch (e) {
-                if (e instanceof ClientAuthError &&
-                    e.errorCode === tokenRefreshRequired) {
-                    const refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
-                    return refreshTokenClient.acquireTokenByRefreshToken(request);
-                }
-                else {
-                    throw e;
-                }
-            }
-        }
         /**
          * Retrieves token from cache or throws an error if it must be refreshed.
          * @param request
@@ -7913,7 +7877,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7928,7 +7892,7 @@
         },
     };
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7986,7 +7950,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8249,7 +8213,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -8257,7 +8221,7 @@
     const missingKidError = "missing_kid_error";
     const missingAlgError = "missing_alg_error";
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8282,7 +8246,7 @@
         return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8322,7 +8286,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8401,7 +8365,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.1 2025-01-15 */
+    /*! @azure/msal-common v15.1.0 2025-02-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10438,7 +10402,7 @@
 
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "4.0.1";
+    const version = "4.1.0";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11743,36 +11707,14 @@
             this.cacheConfig = cacheConfig;
             this.logger = logger;
             this.internalStorage = new MemoryStorage();
-            this.browserStorage = this.setupBrowserStorage(this.cacheConfig.cacheLocation);
-            this.temporaryCacheStorage = this.setupBrowserStorage(this.cacheConfig.temporaryCacheLocation);
+            this.browserStorage = getStorageImplementation(clientId, cacheConfig.cacheLocation, logger, performanceClient);
+            this.temporaryCacheStorage = getStorageImplementation(clientId, cacheConfig.temporaryCacheLocation, logger, performanceClient);
             this.cookieStorage = new CookieStorage();
             this.performanceClient = performanceClient;
         }
         async initialize(correlationId) {
             await this.browserStorage.initialize(correlationId);
         }
-        /**
-         * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
-         * @param cacheLocation
-         */
-        setupBrowserStorage(cacheLocation) {
-            try {
-                switch (cacheLocation) {
-                    case BrowserCacheLocation.LocalStorage:
-                        return new LocalStorage(this.clientId, this.logger, this.performanceClient);
-                    case BrowserCacheLocation.SessionStorage:
-                        return new SessionStorage();
-                    case BrowserCacheLocation.MemoryStorage:
-                    default:
-                        break;
-                }
-            }
-            catch (e) {
-                this.logger.error(e);
-            }
-            this.cacheConfig.cacheLocation = BrowserCacheLocation.MemoryStorage;
-            return new MemoryStorage();
-        }
         /**
          * Parses passed value as JSON object, JSON.parse() will throw an error.
          * @param input
@@ -12665,6 +12607,27 @@
             }
         }
     }
+    /**
+     * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
+     * @param cacheLocation
+     */
+    function getStorageImplementation(clientId, cacheLocation, logger, performanceClient) {
+        try {
+            switch (cacheLocation) {
+                case BrowserCacheLocation.LocalStorage:
+                    return new LocalStorage(clientId, logger, performanceClient);
+                case BrowserCacheLocation.SessionStorage:
+                    return new SessionStorage();
+                case BrowserCacheLocation.MemoryStorage:
+                default:
+                    break;
+            }
+        }
+        catch (e) {
+            logger.error(e);
+        }
+        return new MemoryStorage();
+    }
     const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient) => {
         const cacheOptions = {
             cacheLocation: BrowserCacheLocation.MemoryStorage,
@@ -13480,7 +13443,6 @@
             this.nativeMessageHandler = provider;
             this.nativeStorageManager = nativeStorageImpl;
             this.silentCacheClient = new SilentCacheClient(config, this.nativeStorageManager, browserCrypto, logger, eventHandler, navigationClient, performanceClient, provider, correlationId);
-            this.serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
             const extensionName = this.nativeMessageHandler.getExtensionId() ===
                 NativeConstants.PREFERRED_EXTENSION_ID
                 ? "chrome"
@@ -13515,6 +13477,7 @@
             // start the perf measurement
             const nativeATMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);
             const reqTimestamp = nowSeconds();
+            const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
             try {
                 // initialize native request
                 const nativeRequest = await this.initializeNativeRequest(request);
@@ -13547,7 +13510,7 @@
                         isNativeBroker: true,
                         requestId: result.requestId,
                     });
-                    this.serverTelemetryManager.clearNativeBrokerErrorCode();
+                    serverTelemetryManager.clearNativeBrokerErrorCode();
                     return result;
                 })
                     .catch((error) => {
@@ -13562,7 +13525,7 @@
             }
             catch (e) {
                 if (e instanceof NativeAuthError) {
-                    this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
+                    serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
                 }
                 throw e;
             }
@@ -13639,7 +13602,8 @@
             catch (e) {
                 // Only throw fatal errors here to allow application to fallback to regular redirect. Otherwise proceed and the error will be thrown in handleRedirectPromise
                 if (e instanceof NativeAuthError) {
-                    this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
+                    const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
+                    serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
                     if (isFatalNativeAuthError(e)) {
                         throw e;
                     }
@@ -13694,7 +13658,8 @@
                 const result = this.handleNativeResponse(response, request, reqTimestamp);
                 this.browserStorage.setInteractionInProgress(false);
                 const res = await result;
-                this.serverTelemetryManager.clearNativeBrokerErrorCode();
+                const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
+                serverTelemetryManager.clearNativeBrokerErrorCode();
                 return res;
             }
             catch (e) {
@@ -14513,6 +14478,7 @@
                     popupWindowAttributes: request.popupWindowAttributes || {},
                     popupWindowParent: request.popupWindowParent ?? window,
                 };
+                this.performanceClient.addFields({ isAsyncPopup: this.config.system.asyncPopups }, this.correlationId);
                 // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.
                 if (this.config.system.asyncPopups) {
                     this.logger.verbose("asyncPopups set to true, acquiring token");
@@ -17633,10 +17599,7 @@
             this.nestedAppAuthAdapter = new NestedAppAuthAdapter(this.config.auth.clientId, this.config.auth.clientCapabilities, this.browserCrypto, this.logger);
             // Set the active account if available
             const accountContext = this.bridgeProxy.getAccountContext();
-            if (accountContext) {
-                const cachedAccount = getAccount(accountContext, this.logger, this.browserStorage);
-                setActiveAccount(cachedAccount, this.browserStorage);
-            }
+            this.currentAccountContext = accountContext ? accountContext : null;
         }
         /**
          * Factory function to create a new instance of NestedAppAuthController
@@ -17689,7 +17652,12 @@
                 };
                 // cache the tokens in the response
                 await this.hydrateCache(result, request);
-                this.browserStorage.setActiveAccount(result.account);
+                // cache the account context in memory after successful token fetch
+                this.currentAccountContext = {
+                    homeAccountId: result.account.homeAccountId,
+                    environment: result.account.environment,
+                    tenantId: result.account.tenantId,
+                };
                 this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Popup, result);
                 atPopupMeasurement.add({
                     accessTokenSize: result.accessToken.length,
@@ -17739,7 +17707,12 @@
                 const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
                 // cache the tokens in the response
                 await this.hydrateCache(result, request);
-                this.browserStorage.setActiveAccount(result.account);
+                // cache the account context in memory after successful token fetch
+                this.currentAccountContext = {
+                    homeAccountId: result.account.homeAccountId,
+                    environment: result.account.environment,
+                    tenantId: result.account.tenantId,
+                };
                 this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, result);
                 ssoSilentMeasurement?.add({
                     accessTokenSize: result.accessToken.length,
@@ -17775,8 +17748,16 @@
                 this.logger.verbose("Claims are present in the request, skipping cache lookup");
                 return null;
             }
+            // if the request has forceRefresh, we cannot look up in the cache
+            if (request.forceRefresh) {
+                this.logger.verbose("forceRefresh is set to true, skipping cache lookup");
+                return null;
+            }
             // respect cache lookup policy
             let result = null;
+            if (!request.cacheLookupPolicy) {
+                request.cacheLookupPolicy = CacheLookupPolicy.Default;
+            }
             switch (request.cacheLookupPolicy) {
                 case CacheLookupPolicy.Default:
                 case CacheLookupPolicy.AccessToken:
@@ -17810,12 +17791,11 @@
          * @returns
          */
         async acquireTokenFromCacheInternal(request) {
-            const accountContext = this.bridgeProxy.getAccountContext();
+            // always prioritize the account context from the bridge
+            const accountContext = this.bridgeProxy.getAccountContext() || this.currentAccountContext;
             let currentAccount = null;
             if (accountContext) {
-                const hubAccount = getAccount(accountContext, this.logger, this.browserStorage);
-                // always prioritize for hub account context, the reqirement of `request.account` will be removed soon
-                currentAccount = hubAccount || request.account;
+                currentAccount = getAccount(accountContext, this.logger, this.browserStorage);
             }
             // fall back to brokering if no cached account is found
             if (!currentAccount) {
@@ -18459,7 +18439,9 @@
         await nestedAppAuth.initialize();
         if (nestedAppAuth.isAvailable()) {
             const controller = new NestedAppAuthController(nestedAppAuth);
-            return new PublicClientApplication(configuration, controller);
+            const nestablePCA = new PublicClientApplication(configuration, controller);
+            await nestablePCA.initialize();
+            return nestablePCA;
         }
         return createStandardPublicClientApplication(configuration);
     }