npm - @azure/msal-browser - Versions diffs - 4.26.2 → 4.27.0 - Mend

@azure/msal-browser 4.26.2 → 4.27.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (286) hide show

package/lib/msal-browser.cjs CHANGED Viewed

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v4.26.2 2025-11-19 */
+/*! @azure/msal-browser v4.27.0 2025-12-04 */
 'use strict';
 'use strict';
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -279,7 +279,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -296,7 +296,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -345,7 +345,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -445,7 +445,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -702,7 +702,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -741,7 +741,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -932,12 +932,12 @@ class Logger {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "15.13.2";
+const version$1 = "15.13.3";
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -957,7 +957,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -984,7 +984,8 @@ const cannotSetOIDCOptions = "cannot_set_OIDCOptions";
 const cannotAllowPlatformBroker = "cannot_allow_platform_broker";
 const authorityMismatch = "authority_mismatch";
 const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
-const invalidAuthorizePostBodyParameters = "invalid_authorize_post_body_parameters";
+const invalidAuthorizePostBodyParameters = "invalid_authorize_post_body_parameters";
+const invalidPlatformBrokerConfiguration = "invalid_platform_broker_configuration";
 var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     __proto__: null,
@@ -1000,6 +1001,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     invalidClaims: invalidClaims,
     invalidCloudDiscoveryMetadata: invalidCloudDiscoveryMetadata,
     invalidCodeChallengeMethod: invalidCodeChallengeMethod,
+    invalidPlatformBrokerConfiguration: invalidPlatformBrokerConfiguration,
     invalidRequestMethodForEAR: invalidRequestMethodForEAR,
     logoutRequestEmpty: logoutRequestEmpty,
     missingNonceAuthenticationHeader: missingNonceAuthenticationHeader,
@@ -1013,7 +1015,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1043,6 +1045,7 @@ const ClientConfigurationErrorMessages = {
     [authorityMismatch]: "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.",
     [invalidAuthorizePostBodyParameters]: "Invalid authorize post body parameters provided. If you are using authorizePostBodyParameters, the request method must be POST. Please check the request method and parameters.",
     [invalidRequestMethodForEAR]: "Invalid request method for EAR protocol mode. The request method cannot be GET when using EAR protocol mode. Please change the request method to POST.",
+    [invalidPlatformBrokerConfiguration]: "Invalid platform broker configuration. `allowPlatformBrokerWithDOM` can only be enabled when `allowPlatformBroker` is enabled.",
 };
 /**
  * ClientConfigurationErrorMessage class containing string constants used by error codes and messages.
@@ -1141,6 +1144,10 @@ const ClientConfigurationErrorMessage = {
         code: invalidRequestMethodForEAR,
         desc: ClientConfigurationErrorMessages[invalidRequestMethodForEAR],
     },
+    invalidPlatformBrokerConfiguration: {
+        code: invalidPlatformBrokerConfiguration,
+        desc: ClientConfigurationErrorMessages[invalidPlatformBrokerConfiguration],
+    },
 };
 /**
  * Error thrown when there is an error in configuration of the MSAL.js library.
@@ -1156,7 +1163,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1253,7 +1260,7 @@ class StringUtils {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1448,7 +1455,7 @@ class ScopeSet {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1488,7 +1495,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1570,7 +1577,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1585,7 +1592,7 @@ const AuthorityType = {
     Ciam: 3,
 };
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1607,7 +1614,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1631,7 +1638,7 @@ const ProtocolMode = {
     EAR: "EAR",
 };
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1852,7 +1859,7 @@ class AccountEntity {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1933,7 +1940,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2049,7 +2056,7 @@ function normalizeUrlForComparison(url) {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2213,7 +2220,7 @@ class UrlString {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2352,7 +2359,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2360,7 +2367,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceeded = "cache_quota_exceeded";
 const cacheErrorUnknown = "cache_error_unknown";
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2405,7 +2412,7 @@ function createCacheError(e) {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3515,7 +3522,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4037,7 +4044,7 @@ const IntFields = new Set([
     "upgradedCacheCount",
 ]);
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4116,7 +4123,7 @@ class StubPerformanceClient {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4216,7 +4223,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4226,7 +4233,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4276,7 +4283,7 @@ const INSTANCE_AWARE = "instance_aware";
 const EAR_JWK = "ear_jwk";
 const EAR_JWE_CRYPTO = "ear_jwe_crypto";
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4656,7 +4663,7 @@ function addPostBodyParameters(parameters, bodyParameters) {
     });
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4668,7 +4675,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4678,7 +4685,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4688,7 +4695,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4784,7 +4791,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4890,7 +4897,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4955,7 +4962,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5217,7 +5224,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6056,7 +6063,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6087,7 +6094,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6106,7 +6113,7 @@ class ServerError extends AuthError {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6127,7 +6134,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6214,7 +6221,7 @@ class ThrottlingUtils {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6245,7 +6252,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
     return new NetworkError(error, httpStatus, responseHeaders);
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6393,7 +6400,7 @@ class BaseClient {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6421,7 +6428,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     uxNotAllowed: uxNotAllowed
 });
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6511,7 +6518,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6583,7 +6590,7 @@ class ProtocolUtils {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6665,7 +6672,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6692,7 +6699,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7023,7 +7030,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7041,7 +7048,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7276,7 +7283,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7485,7 +7492,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7583,7 +7590,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7598,7 +7605,7 @@ const StubbedNetworkModule = {
     },
 };
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7822,7 +7829,7 @@ function extractLoginHint(account) {
     return account.loginHint || account.idTokenClaims?.login_hint || null;
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7880,7 +7887,7 @@ class AuthenticationHeaderParser {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8143,7 +8150,7 @@ class ServerTelemetryManager {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8151,7 +8158,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8176,7 +8183,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8216,7 +8223,7 @@ class JoseHeader {
     }
 }
-/*! @azure/msal-common v15.13.2 2025-11-19 */
+/*! @azure/msal-common v15.13.3 2025-12-04 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10286,6 +10293,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
         asyncPopups: false,
         allowRedirectInIframe: false,
         allowPlatformBroker: false,
+        allowPlatformBrokerWithDOM: false,
         nativeBrokerHandshakeTimeout: userInputSystem?.nativeBrokerHandshakeTimeout ||
             DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS,
         pollIntervalMilliseconds: BrowserConstants.DEFAULT_POLL_INTERVAL_MS,
@@ -10332,7 +10340,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "4.26.2";
+const version = "4.27.0";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10346,7 +10354,6 @@ const ACCOUNT_SCHEMA_VERSION = 2;
 const LOG_LEVEL_CACHE_KEY = `${PREFIX}.${BROWSER_PREFIX}.log.level`;
 const LOG_PII_CACHE_KEY = `${PREFIX}.${BROWSER_PREFIX}.log.pii`;
 const BROWSER_PERF_ENABLED_KEY = `${PREFIX}.${BROWSER_PREFIX}.performance.enabled`;
-const PLATFORM_AUTH_DOM_SUPPORT = `${PREFIX}.${BROWSER_PREFIX}.platform.auth.dom`;
 const VERSION_CACHE_KEY = `${PREFIX}.version`;
 const ACCOUNT_KEYS = "account.keys";
 const TOKEN_KEYS = "token.keys";
@@ -15429,7 +15436,7 @@ class PlatformAuthDOMHandler {
  * @param perfClient
  * @returns
  */
-async function isPlatformBrokerAvailable(loggerOptions, perfClient, correlationId) {
+async function isPlatformBrokerAvailable(loggerOptions, perfClient, correlationId, domConfig) {
     const logger = new Logger(loggerOptions || {}, name, version);
     logger.trace("isPlatformBrokerAvailable called");
     const performanceClient = perfClient || new StubPerformanceClient();
@@ -15437,11 +15444,10 @@ async function isPlatformBrokerAvailable(loggerOptions, perfClient, correlationI
         logger.trace("Non-browser environment detected, returning false");
         return false;
     }
-    return !!(await getPlatformAuthProvider(logger, performanceClient, correlationId || createNewGuid()));
+    return !!(await getPlatformAuthProvider(logger, performanceClient, correlationId || createNewGuid(), undefined, domConfig));
 }
-async function getPlatformAuthProvider(logger, performanceClient, correlationId, nativeBrokerHandshakeTimeout) {
+async function getPlatformAuthProvider(logger, performanceClient, correlationId, nativeBrokerHandshakeTimeout, enablePlatformBrokerDOMSupport) {
     logger.trace("getPlatformAuthProvider called", correlationId);
-    const enablePlatformBrokerDOMSupport = isDomEnabledForPlatformAuth();
     logger.trace("Has client allowed platform auth via DOM API: " +
         enablePlatformBrokerDOMSupport);
     let platformAuthProvider;
@@ -15466,22 +15472,6 @@ async function getPlatformAuthProvider(logger, performanceClient, correlationId,
     }
     return platformAuthProvider;
 }
-/**
- * Returns true if the DOM API support for platform auth is enabled in session storage
- * @returns boolean
- * @deprecated
- */
-function isDomEnabledForPlatformAuth() {
-    let sessionStorage;
-    try {
-        sessionStorage = window[BrowserCacheLocation.SessionStorage];
-        // Mute errors if it's a non-browser environment or cookies are blocked.
-        return sessionStorage?.getItem(PLATFORM_AUTH_DOM_SUPPORT) === "true";
-    }
-    catch (e) {
-        return false;
-    }
-}
 /**
  * Returns boolean indicating whether or not the request should attempt to use native broker
  * @param logger
@@ -15491,6 +15481,11 @@ function isDomEnabledForPlatformAuth() {
  */
 function isPlatformAuthAllowed(config, logger, platformAuthProvider, authenticationScheme) {
     logger.trace("isPlatformAuthAllowed called");
+    // throw an error if allowPlatformBroker is not enabled and allowPlatformBrokerWithDOM is enabled
+    if (!config.system.allowPlatformBroker &&
+        config.system.allowPlatformBrokerWithDOM) {
+        throw createClientConfigurationError(invalidPlatformBrokerConfiguration);
+    }
     if (!config.system.allowPlatformBroker) {
         logger.trace("isPlatformAuthAllowed: allowPlatformBroker is not enabled, returning false");
         // Developer disabled WAM
@@ -17243,7 +17238,7 @@ class StandardController {
         if (allowPlatformBroker) {
             try {
                 // check if platform authentication is available via DOM or browser extension and create relevant handlers
-                this.platformAuthProvider = await getPlatformAuthProvider(this.logger, this.performanceClient, initCorrelationId, this.config.system.nativeBrokerHandshakeTimeout);
+                this.platformAuthProvider = await getPlatformAuthProvider(this.logger, this.performanceClient, initCorrelationId, this.config.system.nativeBrokerHandshakeTimeout, this.config.system.allowPlatformBrokerWithDOM);
             }
             catch (e) {
                 this.logger.verbose(e);