npm - @azure/msal-browser - Versions diffs - 4.26.0 → 4.26.2 - Mend

@azure/msal-browser 4.26.0 → 4.26.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (391) hide show

package/lib/msal-browser.js CHANGED Viewed

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.26.0 2025-10-29 */
+/*! @azure/msal-browser v4.26.2 2025-11-19 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -6,7 +6,7 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msal = {}));
 })(this, (function (exports) { 'use strict';
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -283,7 +283,7 @@
     // Token renewal offset default in seconds
     const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -300,7 +300,7 @@
         unexpectedError: unexpectedError
     });
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -349,7 +349,7 @@
             : AuthErrorMessages[code]);
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -397,7 +397,8 @@
     const userCanceled = "user_canceled";
     const missingTenantIdError = "missing_tenant_id_error";
     const methodNotImplemented = "method_not_implemented";
-    const nestedAppAuthBridgeDisabled = "nested_app_auth_bridge_disabled";
+    const nestedAppAuthBridgeDisabled = "nested_app_auth_bridge_disabled";
+    const platformBrokerError = "platform_broker_error";
     var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
         __proto__: null,
@@ -436,6 +437,7 @@
         nonceMismatch: nonceMismatch,
         nullOrEmptyToken: nullOrEmptyToken,
         openIdConfigError: openIdConfigError,
+        platformBrokerError: platformBrokerError,
         requestCannotBeMade: requestCannotBeMade,
         stateMismatch: stateMismatch,
         stateNotFound: stateNotFound,
@@ -447,7 +449,7 @@
         userTimeoutReached: userTimeoutReached
     });
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -504,6 +506,7 @@
         [missingTenantIdError]: "A tenant id - not common, organizations, or consumers - must be specified when using the client_credentials flow.",
         [methodNotImplemented]: "This method has not been implemented",
         [nestedAppAuthBridgeDisabled]: "The nested app auth bridge is disabled",
+        [platformBrokerError]: "An error occurred in the native broker. See the platformBrokerError property for details.",
     };
     /**
      * String constants used by error codes and messages.
@@ -682,6 +685,10 @@
             code: nestedAppAuthBridgeDisabled,
             desc: ClientAuthErrorMessages[nestedAppAuthBridgeDisabled],
         },
+        platformBrokerError: {
+            code: platformBrokerError,
+            desc: ClientAuthErrorMessages[platformBrokerError],
+        },
     };
     /**
      * Error thrown when there is an error in the client code running on the browser.
@@ -699,7 +706,7 @@
         return new ClientAuthError(errorCode, additionalMessage);
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -738,7 +745,7 @@
         },
     };
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -929,12 +936,12 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /* eslint-disable header/header */
     const name$1 = "@azure/msal-common";
-    const version$1 = "15.13.1";
+    const version$1 = "15.13.2";
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -954,7 +961,7 @@
         AzureUsGovernment: "https://login.microsoftonline.us",
     };
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1010,7 +1017,7 @@
         urlParseError: urlParseError
     });
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1153,7 +1160,7 @@
         return new ClientConfigurationError(errorCode);
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1250,7 +1257,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1445,7 +1452,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1485,7 +1492,7 @@
         };
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1567,7 +1574,7 @@
         return updatedAccountInfo;
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1582,7 +1589,7 @@
         Ciam: 3,
     };
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1604,7 +1611,7 @@
         return null;
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1628,7 +1635,7 @@
         EAR: "EAR",
     };
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1849,7 +1856,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1930,7 +1937,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2046,7 +2053,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2210,7 +2217,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2349,7 +2356,7 @@
         return null;
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2357,7 +2364,7 @@
     const cacheQuotaExceeded = "cache_quota_exceeded";
     const cacheErrorUnknown = "cache_error_unknown";
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2402,7 +2409,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3512,7 +3519,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4034,7 +4041,7 @@
         "upgradedCacheCount",
     ]);
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4113,7 +4120,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4213,7 +4220,7 @@
         return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4223,7 +4230,7 @@
         UPN: "UPN",
     };
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4273,7 +4280,7 @@
     const EAR_JWK = "ear_jwk";
     const EAR_JWE_CRYPTO = "ear_jwe_crypto";
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4653,7 +4660,7 @@
         });
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4665,7 +4672,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4675,7 +4682,7 @@
             response.hasOwnProperty("metadata"));
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4685,7 +4692,7 @@
             response.hasOwnProperty("error_description"));
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4781,7 +4788,7 @@
         };
     };
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4887,7 +4894,7 @@
         },
     };
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4952,7 +4959,7 @@
         return cachedAtSec > nowSeconds();
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5214,7 +5221,7 @@
         return metadata.expiresAt <= nowSeconds();
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6053,7 +6060,7 @@
         };
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6084,7 +6091,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6103,7 +6110,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6124,7 +6131,7 @@
         };
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6211,7 +6218,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6242,7 +6249,7 @@
         return new NetworkError(error, httpStatus, responseHeaders);
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6390,7 +6397,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6418,7 +6425,7 @@
         uxNotAllowed: uxNotAllowed
     });
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6508,7 +6515,7 @@
         return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6580,7 +6587,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6662,7 +6669,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6689,7 +6696,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7020,7 +7027,7 @@
         return baseAccount;
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -7038,7 +7045,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7273,7 +7280,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7482,7 +7489,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7580,7 +7587,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7595,7 +7602,7 @@
         },
     };
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7819,7 +7826,7 @@
         return account.loginHint || account.idTokenClaims?.login_hint || null;
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7877,7 +7884,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8140,7 +8147,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -8148,7 +8155,7 @@
     const missingKidError = "missing_kid_error";
     const missingAlgError = "missing_alg_error";
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8173,7 +8180,7 @@
         return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8213,7 +8220,7 @@
         }
     }
-    /*! @azure/msal-common v15.13.1 2025-10-29 */
+    /*! @azure/msal-common v15.13.2 2025-11-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10329,7 +10336,7 @@
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "4.26.0";
+    const version = "4.26.2";
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -13750,12 +13757,13 @@
         async getClientConfiguration(params) {
             const { serverTelemetryManager, requestAuthority, requestAzureCloudOptions, requestExtraQueryParameters, account, } = params;
             this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
-            const discoveredAuthority = await invokeAsync(this.getDiscoveredAuthority.bind(this), PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.logger, this.performanceClient, this.correlationId)({
-                requestAuthority,
-                requestAzureCloudOptions,
-                requestExtraQueryParameters,
-                account,
-            });
+            const discoveredAuthority = params.authority ||
+                (await invokeAsync(this.getDiscoveredAuthority.bind(this), PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.logger, this.performanceClient, this.correlationId)({
+                    requestAuthority,
+                    requestAzureCloudOptions,
+                    requestExtraQueryParameters,
+                    account,
+                }));
             const logger = this.config.system.loggerOptions;
             return {
                 authOptions: {
@@ -14818,6 +14826,8 @@
         const parameters = await getStandardParameters(config, authority, request, logger, performanceClient);
         addResponseType(parameters, OAuthResponseType.IDTOKEN_TOKEN_REFRESHTOKEN);
         addEARParameters(parameters, request.earJwk);
+        // Also add codeChallenge as backup in case EAR is not supported
+        addCodeChallengeParams(parameters, request.codeChallenge, Constants.S256_CODE_CHALLENGE_METHOD);
         const queryParams = new Map();
         addExtraQueryParameters(queryParams, request.extraQueryParameters || {});
         const url = getAuthorizeUrl(authority, queryParams, config.auth.encodeExtraQueryParams, request.extraQueryParameters);
@@ -15612,7 +15622,7 @@
             const isPlatformBroker = isPlatformAuthAllowed(this.config, this.logger, this.platformAuthProvider, request.authenticationScheme);
             validRequest.platformBroker = isPlatformBroker;
             if (this.config.auth.protocolMode === ProtocolMode.EAR) {
-                return this.executeEarFlow(validRequest, popupParams);
+                return this.executeEarFlow(validRequest, popupParams, pkceCodes);
             }
             else {
                 return this.executeCodeFlow(validRequest, popupParams, pkceCodes);
@@ -15672,7 +15682,7 @@
          * Executes EAR flow
          * @param request
          */
-        async executeEarFlow(request, popupParams) {
+        async executeEarFlow(request, popupParams, pkceCodes) {
             const correlationId = request.correlationId;
             // Get the frame handle for the silent request
             const discoveredAuthority = await invokeAsync(this.getDiscoveredAuthority.bind(this), PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.logger, this.performanceClient, correlationId)({
@@ -15682,9 +15692,12 @@
                 account: request.account,
             });
             const earJwk = await invokeAsync(generateEarKey, PerformanceEvents.GenerateEarKey, this.logger, this.performanceClient, correlationId)();
+            const pkce = pkceCodes ||
+                (await invokeAsync(generatePkceCodes, PerformanceEvents.GeneratePkceCodes, this.logger, this.performanceClient, correlationId)(this.performanceClient, this.logger, correlationId));
             const popupRequest = {
                 ...request,
                 earJwk: earJwk,
+                codeChallenge: pkce.challenge,
             };
             const popupWindow = popupParams.popup || this.openPopup("about:blank", popupParams);
             const form = await getEARForm(popupWindow.document, this.config, discoveredAuthority, popupRequest, this.logger, this.performanceClient);
@@ -15692,7 +15705,20 @@
             // Monitor the popup for the hash. Return the string value and close the popup when the hash is received. Default timeout is 60 seconds.
             const responseString = await invokeAsync(this.monitorPopupForHash.bind(this), PerformanceEvents.SilentHandlerMonitorIframeForHash, this.logger, this.performanceClient, correlationId)(popupWindow, popupParams.popupWindowParent);
             const serverParams = invoke(deserializeResponse, PerformanceEvents.DeserializeResponse, this.logger, this.performanceClient, this.correlationId)(responseString, this.config.auth.OIDCOptions.serverResponseType, this.logger);
-            return invokeAsync(handleResponseEAR, PerformanceEvents.HandleResponseEar, this.logger, this.performanceClient, correlationId)(popupRequest, serverParams, ApiId.acquireTokenPopup, this.config, discoveredAuthority, this.browserStorage, this.nativeStorage, this.eventHandler, this.logger, this.performanceClient, this.platformAuthProvider);
+            if (!serverParams.ear_jwe && serverParams.code) {
+                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, correlationId)({
+                    serverTelemetryManager: this.initializeServerTelemetryManager(ApiId.acquireTokenPopup),
+                    requestAuthority: request.authority,
+                    requestAzureCloudOptions: request.azureCloudOptions,
+                    requestExtraQueryParameters: request.extraQueryParameters,
+                    account: request.account,
+                    authority: discoveredAuthority,
+                });
+                return invokeAsync(handleResponseCode, PerformanceEvents.HandleResponseCode, this.logger, this.performanceClient, correlationId)(popupRequest, serverParams, pkce.verifier, ApiId.acquireTokenPopup, this.config, authClient, this.browserStorage, this.nativeStorage, this.eventHandler, this.logger, this.performanceClient, this.platformAuthProvider);
+            }
+            else {
+                return invokeAsync(handleResponseEAR, PerformanceEvents.HandleResponseEar, this.logger, this.performanceClient, correlationId)(popupRequest, serverParams, ApiId.acquireTokenPopup, this.config, discoveredAuthority, this.browserStorage, this.nativeStorage, this.eventHandler, this.logger, this.performanceClient, this.platformAuthProvider);
+            }
         }
         async executeCodeFlowWithPost(request, popupParams, authClient, pkceVerifier) {
             const correlationId = request.correlationId;
@@ -16101,11 +16127,13 @@
                 account: request.account,
             });
             const earJwk = await invokeAsync(generateEarKey, PerformanceEvents.GenerateEarKey, this.logger, this.performanceClient, correlationId)();
+            const pkceCodes = await invokeAsync(generatePkceCodes, PerformanceEvents.GeneratePkceCodes, this.logger, this.performanceClient, correlationId)(this.performanceClient, this.logger, correlationId);
             const redirectRequest = {
                 ...request,
                 earJwk: earJwk,
+                codeChallenge: pkceCodes.challenge,
             };
-            this.browserStorage.cacheAuthorizeRequest(redirectRequest);
+            this.browserStorage.cacheAuthorizeRequest(redirectRequest, pkceCodes.verifier);
             const form = await getEARForm(document, this.config, discoveredAuthority, redirectRequest, this.logger, this.performanceClient);
             form.submit();
             return new Promise((resolve, reject) => {
@@ -16563,6 +16591,7 @@
         authFrame.style.width = authFrame.style.height = "0";
         authFrame.style.border = "0";
         authFrame.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms");
+        authFrame.setAttribute("allow", "local-network-access *");
         document.body.appendChild(authFrame);
         return authFrame;
     }
@@ -16670,16 +16699,32 @@
                 account: request.account,
             });
             const earJwk = await invokeAsync(generateEarKey, PerformanceEvents.GenerateEarKey, this.logger, this.performanceClient, correlationId)();
+            const pkceCodes = await invokeAsync(generatePkceCodes, PerformanceEvents.GeneratePkceCodes, this.logger, this.performanceClient, correlationId)(this.performanceClient, this.logger, correlationId);
             const silentRequest = {
                 ...request,
                 earJwk: earJwk,
+                codeChallenge: pkceCodes.challenge,
             };
             const msalFrame = await invokeAsync(initiateEarRequest, PerformanceEvents.SilentHandlerInitiateAuthRequest, this.logger, this.performanceClient, correlationId)(this.config, discoveredAuthority, silentRequest, this.logger, this.performanceClient);
             const responseType = this.config.auth.OIDCOptions.serverResponseType;
             // Monitor the window for the hash. Return the string value and close the popup when the hash is received. Default timeout is 60 seconds.
             const responseString = await invokeAsync(monitorIframeForHash, PerformanceEvents.SilentHandlerMonitorIframeForHash, this.logger, this.performanceClient, correlationId)(msalFrame, this.config.system.iframeHashTimeout, this.config.system.pollIntervalMilliseconds, this.performanceClient, this.logger, correlationId, responseType);
             const serverParams = invoke(deserializeResponse, PerformanceEvents.DeserializeResponse, this.logger, this.performanceClient, correlationId)(responseString, responseType, this.logger);
-            return invokeAsync(handleResponseEAR, PerformanceEvents.HandleResponseEar, this.logger, this.performanceClient, correlationId)(silentRequest, serverParams, this.apiId, this.config, discoveredAuthority, this.browserStorage, this.nativeStorage, this.eventHandler, this.logger, this.performanceClient, this.platformAuthProvider);
+            if (!serverParams.ear_jwe && serverParams.code) {
+                // If server doesn't support EAR, they may fallback to auth code flow instead
+                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, correlationId)({
+                    serverTelemetryManager: this.initializeServerTelemetryManager(this.apiId),
+                    requestAuthority: request.authority,
+                    requestAzureCloudOptions: request.azureCloudOptions,
+                    requestExtraQueryParameters: request.extraQueryParameters,
+                    account: request.account,
+                    authority: discoveredAuthority,
+                });
+                return invokeAsync(handleResponseCode, PerformanceEvents.HandleResponseCode, this.logger, this.performanceClient, correlationId)(silentRequest, serverParams, pkceCodes.verifier, this.apiId, this.config, authClient, this.browserStorage, this.nativeStorage, this.eventHandler, this.logger, this.performanceClient, this.platformAuthProvider);
+            }
+            else {
+                return invokeAsync(handleResponseEAR, PerformanceEvents.HandleResponseEar, this.logger, this.performanceClient, correlationId)(silentRequest, serverParams, this.apiId, this.config, discoveredAuthority, this.browserStorage, this.nativeStorage, this.eventHandler, this.logger, this.performanceClient, this.platformAuthProvider);
+            }
         }
         /**
          * Currently Unsupported