npm - @azure/msal-browser - Versions diffs - 4.21.0 → 4.22.0 - Mend

@azure/msal-browser 4.21.0 → 4.22.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (365) hide show

package/lib/custom-auth-path/msal-custom-auth.cjs CHANGED Viewed

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v4.21.0 2025-08-19 */
+/*! @azure/msal-browser v4.22.0 2025-09-03 */
 'use strict';
 'use strict';
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -276,7 +276,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -287,7 +287,7 @@ const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 const unexpectedError = "unexpected_error";
 const postRequestFailed$1 = "post_request_failed";
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -322,7 +322,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -372,7 +372,7 @@ const missingTenantIdError = "missing_tenant_id_error";
 const methodNotImplemented = "method_not_implemented";
 const nestedAppAuthBridgeDisabled = "nested_app_auth_bridge_disabled";
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -446,7 +446,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -485,7 +485,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -676,12 +676,12 @@ class Logger {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
 const version$1 = "15.12.0";
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -690,7 +690,7 @@ const AzureCloudInstance = {
     // AzureCloudInstance is not specified.
     None: "none"};
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -719,7 +719,7 @@ const authorityMismatch = "authority_mismatch";
 const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
 const invalidAuthorizePostBodyParameters = "invalid_authorize_post_body_parameters";
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -764,7 +764,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -861,7 +861,7 @@ class StringUtils {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1056,7 +1056,7 @@ class ScopeSet {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1138,7 +1138,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1199,7 +1199,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1315,7 +1315,7 @@ function normalizeUrlForComparison(url) {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1479,7 +1479,7 @@ class UrlString {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1618,7 +1618,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1626,7 +1626,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceeded = "cache_quota_exceeded";
 const cacheErrorUnknown = "cache_error_unknown";
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1671,7 +1671,7 @@ function createCacheError(e) {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2779,7 +2779,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2803,7 +2803,7 @@ const ProtocolMode = {
     EAR: "EAR",
 };
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3070,7 +3070,7 @@ const PerformanceEvents = {
 const PerformanceEventStatus = {
     InProgress: 1};
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3149,7 +3149,7 @@ class StubPerformanceClient {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3249,7 +3249,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3259,7 +3259,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3299,7 +3299,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3349,7 +3349,7 @@ const INSTANCE_AWARE = "instance_aware";
 const EAR_JWK = "ear_jwk";
 const EAR_JWE_CRYPTO = "ear_jwe_crypto";
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3729,7 +3729,7 @@ function addPostBodyParameters(parameters, bodyParameters) {
     });
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3744,7 +3744,7 @@ const AuthorityType = {
     Ciam: 3,
 };
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3756,7 +3756,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3766,7 +3766,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3776,7 +3776,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3872,7 +3872,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3978,7 +3978,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4043,7 +4043,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4305,7 +4305,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5144,7 +5144,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5175,7 +5175,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5194,7 +5194,7 @@ class ServerError extends AuthError {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5215,7 +5215,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5302,7 +5302,7 @@ class ThrottlingUtils {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5333,7 +5333,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
     return new NetworkError(error, httpStatus, responseHeaders);
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5481,7 +5481,7 @@ class BaseClient {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5503,7 +5503,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5718,7 +5718,7 @@ class AccountEntity {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5734,7 +5734,7 @@ const consentRequired = "consent_required";
 const loginRequired = "login_required";
 const badToken = "bad_token";
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5806,7 +5806,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5878,7 +5878,7 @@ class ProtocolUtils {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5960,7 +5960,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5987,7 +5987,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6318,7 +6318,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6336,7 +6336,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6571,7 +6571,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6780,7 +6780,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6878,7 +6878,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6893,7 +6893,7 @@ const StubbedNetworkModule = {
     },
 };
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7117,7 +7117,7 @@ function extractLoginHint(account) {
     return account.loginHint || account.idTokenClaims?.login_hint || null;
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7380,7 +7380,7 @@ class ServerTelemetryManager {
     }
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7388,7 +7388,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7413,7 +7413,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
-/*! @azure/msal-common v15.12.0 2025-08-19 */
+/*! @azure/msal-common v15.12.0 2025-09-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7553,8 +7553,10 @@ class AuthFlowResultBase {
  * Error when no required authentication method by Microsoft Entra is supported
  */
 class RedirectError extends CustomAuthError {
-    constructor(correlationId) {
-        super("redirect", "No required authentication method by Microsoft Entra is supported, a fallback to the web-based authentication flow is needed.", correlationId);
+    constructor(correlationId, redirectReason) {
+        super("redirect", redirectReason ||
+            "Redirect Error, a fallback to the browser-delegated authentication is needed. Use loginPopup instead.", correlationId);
+        this.redirectReason = redirectReason;
         Object.setPrototypeOf(this, RedirectError.prototype);
     }
 }
@@ -7735,6 +7737,13 @@ class AuthActionErrorBase extends AuthFlowErrorBase {
     isTokenExpired() {
         return this.isTokenExpiredError();
     }
+    /**
+     * Check if client app supports the challenge type configured in Entra.
+     * @returns {boolean} True if client app doesn't support the challenge type configured in Entra, "loginPopup" function is required to continue the operation.
+     */
+    isRedirectRequired() {
+        return this.isRedirectError();
+    }
 }
 /*
@@ -7811,7 +7820,7 @@ function ensureArgumentIsJSONString(argName, argValue, correlationId) {
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "4.21.0";
+const version = "4.22.0";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7984,13 +7993,6 @@ class SignInError extends AuthActionErrorBase {
     isUnsupportedChallengeType() {
         return this.isUnsupportedChallengeTypeError();
     }
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired() {
-        return this.isRedirectError();
-    }
 }
 class SignInSubmitPasswordError extends AuthActionErrorBase {
     /**
@@ -8011,13 +8013,6 @@ class SignInSubmitCodeError extends AuthActionErrorBase {
     }
 }
 class SignInResendCodeError extends AuthActionErrorBase {
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired() {
-        return this.isRedirectError();
-    }
 }
 /*
@@ -8631,13 +8626,6 @@ class SignUpError extends AuthActionErrorBase {
     isUnsupportedChallengeType() {
         return this.isUnsupportedChallengeTypeError();
     }
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired() {
-        return this.isRedirectError();
-    }
 }
 class SignUpSubmitPasswordError extends AuthActionErrorBase {
     /**
@@ -8647,13 +8635,6 @@ class SignUpSubmitPasswordError extends AuthActionErrorBase {
     isInvalidPassword() {
         return (this.isPasswordIncorrectError() || this.isInvalidNewPasswordError());
     }
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired() {
-        return this.isRedirectError();
-    }
 }
 class SignUpSubmitCodeError extends AuthActionErrorBase {
     /**
@@ -8663,13 +8644,6 @@ class SignUpSubmitCodeError extends AuthActionErrorBase {
     isInvalidCode() {
         return this.isInvalidCodeError();
     }
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired() {
-        return this.isRedirectError();
-    }
 }
 class SignUpSubmitAttributesError extends AuthActionErrorBase {
     /**
@@ -8686,22 +8660,8 @@ class SignUpSubmitAttributesError extends AuthActionErrorBase {
     isAttributesValidationFailed() {
         return this.isAttributeValidationFailedError();
     }
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired() {
-        return this.isRedirectError();
-    }
 }
 class SignUpResendCodeError extends AuthActionErrorBase {
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if "loginPopup" function is required to continue sthe operation.
-     */
-    isRedirectRequired() {
-        return this.isRedirectError();
-    }
 }
 /*
@@ -10613,7 +10573,9 @@ class CustomAuthInteractionClientBase extends StandardInteractionClient {
         return challengeType.join(" ");
     }
     getScopes(scopes) {
-        if (!!scopes && scopes.length > 0) ;
+        if (!!scopes && scopes.length > 0) {
+            return scopes;
+        }
         return [
             Constants.OPENID_SCOPE,
             Constants.PROFILE_SCOPE,
@@ -10901,13 +10863,6 @@ class ResetPasswordError extends AuthActionErrorBase {
     isUnsupportedChallengeType() {
         return this.isUnsupportedChallengeTypeError();
     }
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if client app doesn't support the challenge type configured in Entra, "loginPopup" function is required to continue the operation.
-     */
-    isRedirectRequired() {
-        return this.isRedirectError();
-    }
 }
 class ResetPasswordSubmitPasswordError extends AuthActionErrorBase {
     /**
@@ -10937,22 +10892,8 @@ class ResetPasswordSubmitCodeError extends AuthActionErrorBase {
     isInvalidCode() {
         return this.isInvalidCodeError();
     }
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if client app doesn't support the challenge type configured in Entra, "loginPopup" function is required to continue the operation.
-     */
-    isRedirectRequired() {
-        return this.isRedirectError();
-    }
 }
 class ResetPasswordResendCodeError extends AuthActionErrorBase {
-    /**
-     * Check if client app supports the challenge type configured in Entra.
-     * @returns {boolean} True if client app doesn't support the challenge type configured in Entra, "loginPopup" function is required to continue the operation.
-     */
-    isRedirectRequired() {
-        return this.isRedirectError();
-    }
 }
 /*
@@ -11323,10 +11264,18 @@ function parseUrl(url) {
         throw new ParsedUrlError(InvalidUrl, `The URL "${url}" is invalid: ${e}`);
     }
 }
-function buildUrl(baseUrl, path) {
+function buildUrl(baseUrl, path, queryParams) {
     const newBaseUrl = !baseUrl.endsWith("/") ? `${baseUrl}/` : baseUrl;
     const newPath = path.startsWith("/") ? path.slice(1) : path;
     const url = new URL(newPath, newBaseUrl);
+    // Add query parameters if provided
+    if (queryParams) {
+        Object.entries(queryParams).forEach(([key, value]) => {
+            if (value !== undefined && value !== null) {
+                url.searchParams.set(key, String(value));
+            }
+        });
+    }
     return url;
 }
@@ -11660,9 +11609,10 @@ class CustomAuthInterationClientFactory {
  * Licensed under the MIT License.
  */
 class BaseApiClient {
-    constructor(baseUrl, clientId, httpClient) {
+    constructor(baseUrl, clientId, httpClient, customAuthApiQueryParams) {
         this.clientId = clientId;
         this.httpClient = httpClient;
+        this.customAuthApiQueryParams = customAuthApiQueryParams;
         this.baseRequestUrl = parseUrl(!baseUrl.endsWith("/") ? `${baseUrl}/` : baseUrl);
     }
     async request(endpoint, data, telemetryManager, correlationId) {
@@ -11671,7 +11621,7 @@ class BaseApiClient {
             ...data,
         });
         const headers = this.getCommonHeaders(correlationId, telemetryManager);
-        const url = buildUrl(this.baseRequestUrl.href, endpoint);
+        const url = buildUrl(this.baseRequestUrl.href, endpoint, this.customAuthApiQueryParams);
         let response;
         try {
             response = await this.httpClient.post(url, formData, headers);
@@ -11712,7 +11662,7 @@ class BaseApiClient {
             // Ensure the response doesn't have redirect challenge type
             if (typeof responseData === "object" &&
                 responseData.challenge_type === ChallengeType.REDIRECT) {
-                throw new RedirectError(correlationId);
+                throw new RedirectError(correlationId, responseData.redirect_reason);
             }
             return {
                 ...responseData,
@@ -11736,6 +11686,10 @@ class BaseApiClient {
  * Licensed under the MIT License.
  */
 class ResetPasswordApiClient extends BaseApiClient {
+    constructor(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams) {
+        super(customAuthApiBaseUrl, clientId, httpClient, customAuthApiQueryParams);
+        this.capabilities = capabilities;
+    }
     /**
      * Start the password reset flow
      */
@@ -11743,6 +11697,9 @@ class ResetPasswordApiClient extends BaseApiClient {
         const result = await this.request(RESET_PWD_START, {
             challenge_type: params.challenge_type,
             username: params.username,
+            ...(this.capabilities && {
+                capabilities: this.capabilities,
+            }),
         }, params.telemetryManager, params.correlationId);
         this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
         return result;
@@ -11813,6 +11770,10 @@ class ResetPasswordApiClient extends BaseApiClient {
  * Licensed under the MIT License.
  */
 class SignupApiClient extends BaseApiClient {
+    constructor(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams) {
+        super(customAuthApiBaseUrl, clientId, httpClient, customAuthApiQueryParams);
+        this.capabilities = capabilities;
+    }
     /**
      * Start the sign-up flow
      */
@@ -11824,6 +11785,9 @@ class SignupApiClient extends BaseApiClient {
                 attributes: JSON.stringify(params.attributes),
             }),
             challenge_type: params.challenge_type,
+            ...(this.capabilities && {
+                capabilities: this.capabilities,
+            }),
         }, params.telemetryManager, params.correlationId);
         this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
         return result;
@@ -11876,6 +11840,10 @@ class SignupApiClient extends BaseApiClient {
  * Licensed under the MIT License.
  */
 class SignInApiClient extends BaseApiClient {
+    constructor(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams) {
+        super(customAuthApiBaseUrl, clientId, httpClient, customAuthApiQueryParams);
+        this.capabilities = capabilities;
+    }
     /**
      * Initiates the sign-in flow
      * @param username User's email
@@ -11885,6 +11853,9 @@ class SignInApiClient extends BaseApiClient {
         const result = await this.request(SIGNIN_INITIATE, {
             username: params.username,
             challenge_type: params.challenge_type,
+            ...(this.capabilities && {
+                capabilities: this.capabilities,
+            }),
         }, params.telemetryManager, params.correlationId);
         this.ensureContinuationTokenIsValid(result.continuation_token, params.correlationId);
         return result;
@@ -11982,10 +11953,10 @@ class SignInApiClient extends BaseApiClient {
  * Licensed under the MIT License.
  */
 class CustomAuthApiClient {
-    constructor(customAuthApiBaseUrl, clientId, httpClient) {
-        this.signInApi = new SignInApiClient(customAuthApiBaseUrl, clientId, httpClient);
-        this.signUpApi = new SignupApiClient(customAuthApiBaseUrl, clientId, httpClient);
-        this.resetPasswordApi = new ResetPasswordApiClient(customAuthApiBaseUrl, clientId, httpClient);
+    constructor(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams) {
+        this.signInApi = new SignInApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
+        this.signUpApi = new SignupApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
+        this.resetPasswordApi = new ResetPasswordApiClient(customAuthApiBaseUrl, clientId, httpClient, capabilities, customAuthApiQueryParams);
     }
 }
@@ -19816,7 +19787,7 @@ class CustomAuthStandardController extends StandardController {
         this.customAuthConfig = operatingContext.getCustomAuthConfig();
         this.authority = new CustomAuthAuthority(this.customAuthConfig.auth.authority, this.customAuthConfig, this.networkClient, this.browserStorage, this.logger, this.customAuthConfig.customAuth?.authApiProxyUrl);
         const interactionClientFactory = new CustomAuthInterationClientFactory(this.customAuthConfig, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, this.performanceClient, customAuthApiClient ??
-            new CustomAuthApiClient(this.authority.getCustomAuthApiDomain(), this.customAuthConfig.auth.clientId, new FetchHttpClient(this.logger)), this.authority);
+            new CustomAuthApiClient(this.authority.getCustomAuthApiDomain(), this.customAuthConfig.auth.clientId, new FetchHttpClient(this.logger), this.customAuthConfig.customAuth?.capabilities?.join(" "), this.customAuthConfig.customAuth?.customAuthApiQueryParams), this.authority);
         this.signInClient = interactionClientFactory.create(SignInClient);
         this.signUpClient = interactionClientFactory.create(SignUpClient);
         this.resetPasswordClient =