@azure/msal-browser 4.9.1 → 4.11.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v4.9.1 2025-03-26 */
+/*! @azure/msal-browser v4.11.0 2025-04-16 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -62,10 +62,26 @@ const Constants = {
     INVALID_INSTANCE: "invalid_instance",
 };
 const HttpStatus = {
+    SUCCESS: 200,
+    SUCCESS_RANGE_START: 200,
+    SUCCESS_RANGE_END: 299,
+    REDIRECT: 302,
+    CLIENT_ERROR: 400,
     CLIENT_ERROR_RANGE_START: 400,
+    BAD_REQUEST: 400,
+    UNAUTHORIZED: 401,
+    NOT_FOUND: 404,
+    REQUEST_TIMEOUT: 408,
+    GONE: 410,
+    TOO_MANY_REQUESTS: 429,
     CLIENT_ERROR_RANGE_END: 499,
+    SERVER_ERROR: 500,
     SERVER_ERROR_RANGE_START: 500,
-    SERVER_ERROR_RANGE_END: 599};
+    SERVICE_UNAVAILABLE: 503,
+    GATEWAY_TIMEOUT: 504,
+    SERVER_ERROR_RANGE_END: 599,
+    MULTI_SIDED_ERROR: 600,
+};
 const OIDC_DEFAULT_SCOPES = [
     Constants.OPENID_SCOPE,
     Constants.PROFILE_SCOPE,
@@ -131,6 +147,7 @@ const CodeChallengeMethodValues = {
  */
 const OAuthResponseType = {
     CODE: "code",
+    IDTOKEN_TOKEN: "id_token token",
     IDTOKEN_TOKEN_REFRESHTOKEN: "id_token token refresh_token",
 };
 /**
@@ -145,19 +162,29 @@ const ServerResponseType = {
  * allowed values for response_mode
  */
 const ResponseMode = {
-    QUERY: "query"};
+    QUERY: "query",
+    FRAGMENT: "fragment",
+    FORM_POST: "form_post",
+};
 /**
  * allowed grant_type
  */
 const GrantType = {
+    IMPLICIT_GRANT: "implicit",
     AUTHORIZATION_CODE_GRANT: "authorization_code",
-    REFRESH_TOKEN_GRANT: "refresh_token"};
+    CLIENT_CREDENTIALS_GRANT: "client_credentials",
+    RESOURCE_OWNER_PASSWORD_GRANT: "password",
+    REFRESH_TOKEN_GRANT: "refresh_token",
+    DEVICE_CODE_GRANT: "device_code",
+    JWT_BEARER: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+};
 /**
  * Account types in Cache
  */
 const CacheAccountType = {
     MSSTS_ACCOUNT_TYPE: "MSSTS",
     ADFS_ACCOUNT_TYPE: "ADFS",
+    MSAV1_ACCOUNT_TYPE: "MSA",
     GENERIC_ACCOUNT_TYPE: "Generic", // NTLM, Kerberos, FBA, Basic etc
 };
 /**
@@ -194,6 +221,7 @@ const AuthorityMetadataSource = {
 };
 const SERVER_TELEM_CONSTANTS = {
     SCHEMA_VERSION: 5,
+    MAX_CUR_HEADER_BYTES: 80,
     MAX_LAST_HEADER_BYTES: 330,
     MAX_CACHED_ERRORS: 50,
     CACHE_KEY: "server-telemetry",
@@ -248,7 +276,9 @@ const RegionDiscoverySources = {
  * Region Discovery Outcomes
  */
 const RegionDiscoveryOutcomes = {
+    CONFIGURED_MATCHES_DETECTED: "1",
     CONFIGURED_NO_AUTO_DETECTION: "2",
+    CONFIGURED_NOT_DETECTED: "3",
     AUTO_DETECTION_REQUESTED_SUCCESSFUL: "4",
     AUTO_DETECTION_REQUESTED_FAILED: "5",
 };
@@ -275,7 +305,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -292,7 +322,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -341,7 +371,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -439,7 +469,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -691,7 +721,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -730,7 +760,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -921,12 +951,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "15.4.0";
+const version$1 = "15.5.1";
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -946,7 +976,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1007,7 +1037,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1062,7 +1092,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1389,7 +1419,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1443,7 +1473,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1581,7 +1611,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1678,7 +1708,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1869,7 +1899,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1909,7 +1939,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1988,7 +2018,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2003,7 +2033,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2025,7 +2055,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2049,7 +2079,7 @@ const ProtocolMode = {
     EAR: "EAR",
 };
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2292,7 +2322,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2342,15 +2372,22 @@ function getDeserializedResponse(responseString) {
 /**
  * Utility to create a URL from the params map
  */
-function mapToQueryString(parameters) {
+function mapToQueryString(parameters, encodeExtraParams = true, extraQueryParameters) {
     const queryParameterArray = new Array();
     parameters.forEach((value, key) => {
-        queryParameterArray.push(`${key}=${encodeURIComponent(value)}`);
+        if (!encodeExtraParams &&
+            extraQueryParameters &&
+            key in extraQueryParameters) {
+            queryParameterArray.push(`${key}=${value}`);
+        }
+        else {
+            queryParameterArray.push(`${key}=${encodeURIComponent(value)}`);
+        }
     });
     return queryParameterArray.join("&");
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2514,7 +2551,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2545,6 +2582,7 @@ const rawMetdataJSON = {
         },
     },
     instanceDiscoveryMetadata: {
+        tenant_discovery_endpoint: "https://{canonicalAuthority}/v2.0/.well-known/openid-configuration",
         metadata: [
             {
                 preferred_network: "login.microsoftonline.com",
@@ -2653,7 +2691,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2661,7 +2699,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
 const cacheUnknownErrorCode = "cache_error_unknown";
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2688,7 +2726,7 @@ class CacheError extends Error {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3873,7 +3911,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3961,6 +3999,7 @@ function buildAuthOptions(authOptions) {
         azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS,
         skipAuthorityMetadataCache: false,
         instanceAware: false,
+        encodeExtraQueryParams: false,
         ...authOptions,
     };
 }
@@ -3972,7 +4011,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3982,7 +4021,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4032,7 +4071,7 @@ const INSTANCE_AWARE = "instance_aware";
 const EAR_JWK = "ear_jwk";
 const EAR_JWE_CRYPTO = "ear_jwe_crypto";
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4400,7 +4439,7 @@ function addEARParameters(parameters, jwk) {
     parameters.set(EAR_JWE_CRYPTO, jweCryptoB64Encoded);
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4412,7 +4451,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4422,7 +4461,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4432,7 +4471,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4924,6 +4963,7 @@ const PerformanceEventAbbreviations = new Map([
  * @enum {number}
  */
 const PerformanceEventStatus = {
+    NotStarted: 0,
     InProgress: 1,
     Completed: 2,
 };
@@ -4944,7 +4984,7 @@ const IntFields = new Set([
     "encryptedCacheExpiredCount",
 ]);
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5040,7 +5080,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5149,7 +5189,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5988,7 +6028,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6019,7 +6059,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6038,7 +6078,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6059,7 +6099,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6146,7 +6186,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6176,7 +6216,7 @@ function createNetworkError(error, httpStatus, responseHeaders) {
     return new NetworkError(error, httpStatus, responseHeaders);
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6324,7 +6364,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6350,7 +6390,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6438,7 +6478,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6510,14 +6550,16 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
 const KeyLocation = {
-    SW: "sw"};
+    SW: "sw",
+    UHW: "uhw",
+};
 /** @internal */
 class PopTokenGenerator {
     constructor(cryptoUtils, performanceClient) {
@@ -6592,7 +6634,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6619,7 +6661,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6950,7 +6992,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7017,7 +7059,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7035,7 +7077,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7264,11 +7306,11 @@ class AuthorizationCodeClient extends BaseClient {
         if (this.config.authOptions.instanceAware) {
             addInstanceAware(parameters);
         }
-        return mapToQueryString(parameters);
+        return mapToQueryString(parameters, this.config.authOptions.encodeExtraQueryParams, request.extraQueryParameters);
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7477,7 +7519,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7575,7 +7617,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7590,7 +7632,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7733,8 +7775,8 @@ function getStandardAuthorizeRequestParameters(authOptions, request, logger, per
  * @param requestParameters
  * @returns
  */
-function getAuthorizeUrl(authority, requestParameters) {
-    const queryString = mapToQueryString(requestParameters);
+function getAuthorizeUrl(authority, requestParameters, encodeParams, extraQueryParameters) {
+    const queryString = mapToQueryString(requestParameters, encodeParams, extraQueryParameters);
     return UrlString.appendQueryString(authority.authorizationEndpoint, queryString);
 }
 /**
@@ -7814,7 +7856,7 @@ function extractLoginHint(account) {
     return account.idTokenClaims?.login_hint || null;
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7872,7 +7914,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8135,7 +8177,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8143,7 +8185,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8168,7 +8210,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8208,7 +8250,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8287,7 +8329,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v15.4.0 2025-03-26 */
+/*! @azure/msal-common v15.5.1 2025-04-16 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9277,6 +9319,10 @@ function createBrowserAuthError(errorCode, subError) {
  * Constants
  */
 const BrowserConstants = {
+    /**
+     * Interaction in progress cache value
+     */
+    INTERACTION_IN_PROGRESS_VALUE: "interaction_in_progress",
     /**
      * Invalid grant error code
      */
@@ -9325,6 +9371,10 @@ const HTTP_REQUEST_TYPE = {
     GET: "GET",
     POST: "POST",
 };
+const INTERACTION_TYPE = {
+    SIGNIN: "signin",
+    SIGNOUT: "signout",
+};
 /**
  * Temporary cache keys for MSAL, deleted after any request.
  */
@@ -10290,6 +10340,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
         skipAuthorityMetadataCache: false,
         supportsNestedAppAuth: false,
         instanceAware: false,
+        encodeExtraQueryParams: false,
     };
     // Default cache options for browser
     const DEFAULT_CACHE_OPTIONS = {
@@ -10376,7 +10427,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "4.9.1";
+const version = "4.11.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -12462,7 +12513,7 @@ class BrowserCacheManager extends CacheManager {
         return parsedRequest;
     }
     isInteractionInProgress(matchClientId) {
-        const clientId = this.getInteractionInProgress();
+        const clientId = this.getInteractionInProgress()?.clientId;
         if (matchClientId) {
             return clientId === this.clientId;
         }
@@ -12472,9 +12523,10 @@ class BrowserCacheManager extends CacheManager {
     }
     getInteractionInProgress() {
         const key = `${Constants.CACHE_PREFIX}.${TemporaryCacheKeys.INTERACTION_STATUS_KEY}`;
-        return this.getTemporaryCache(key, false);
+        const value = this.getTemporaryCache(key, false);
+        return value ? JSON.parse(value) : null;
     }
-    setInteractionInProgress(inProgress) {
+    setInteractionInProgress(inProgress, type = INTERACTION_TYPE.SIGNIN) {
         // Ensure we don't overwrite interaction in progress for a different clientId
         const key = `${Constants.CACHE_PREFIX}.${TemporaryCacheKeys.INTERACTION_STATUS_KEY}`;
         if (inProgress) {
@@ -12483,11 +12535,11 @@ class BrowserCacheManager extends CacheManager {
             }
             else {
                 // No interaction is in progress
-                this.setTemporaryCache(key, this.clientId, false);
+                this.setTemporaryCache(key, JSON.stringify({ clientId: this.clientId, type }), false);
             }
         }
         else if (!inProgress &&
-            this.getInteractionInProgress() === this.clientId) {
+            this.getInteractionInProgress()?.clientId === this.clientId) {
             this.removeTemporaryItem(key);
         }
     }
@@ -14431,7 +14483,7 @@ async function getAuthCodeRequestUrl(config, authority, request, logger, perform
     addResponseType(parameters, OAuthResponseType.CODE);
     addCodeChallengeParams(parameters, request.codeChallenge, Constants.S256_CODE_CHALLENGE_METHOD);
     addExtraQueryParameters(parameters, request.extraQueryParameters || {});
-    return getAuthorizeUrl(authority, parameters);
+    return getAuthorizeUrl(authority, parameters, config.auth.encodeExtraQueryParams, request.extraQueryParameters);
 }
 /**
  * Gets the form that will be posted to /authorize with request parameters when using EAR
@@ -14445,7 +14497,7 @@ async function getEARForm(frame, config, authority, request, logger, performance
     addEARParameters(parameters, request.earJwk);
     const queryParams = new Map();
     addExtraQueryParameters(queryParams, request.extraQueryParameters || {});
-    const url = getAuthorizeUrl(authority, queryParams);
+    const url = getAuthorizeUrl(authority, queryParams, config.auth.encodeExtraQueryParams, request.extraQueryParameters);
     return createForm(frame, url, parameters);
 }
 /**
@@ -15443,7 +15495,7 @@ class RedirectClient extends StandardInteractionClient {
                     this.logger.verbose("Logout onRedirectNavigate did not return false, navigating");
                     // Ensure interaction is in progress
                     if (!this.browserStorage.getInteractionInProgress()) {
-                        this.browserStorage.setInteractionInProgress(true);
+                        this.browserStorage.setInteractionInProgress(true, INTERACTION_TYPE.SIGNOUT);
                     }
                     await this.navigationClient.navigateExternal(logoutUri, navigationOptions);
                     return;
@@ -15457,7 +15509,7 @@ class RedirectClient extends StandardInteractionClient {
             else {
                 // Ensure interaction is in progress
                 if (!this.browserStorage.getInteractionInProgress()) {
-                    this.browserStorage.setInteractionInProgress(true);
+                    this.browserStorage.setInteractionInProgress(true, INTERACTION_TYPE.SIGNOUT);
                 }
                 await this.navigationClient.navigateExternal(logoutUri, navigationOptions);
                 return;
@@ -16295,29 +16347,41 @@ class StandardController {
             this.logger.info("handleRedirectPromise called but there is no interaction in progress, returning null.");
             return null;
         }
+        const interactionType = this.browserStorage.getInteractionInProgress()?.type;
+        if (interactionType === INTERACTION_TYPE.SIGNOUT) {
+            this.logger.verbose("handleRedirectPromise removing interaction_in_progress flag and returning null after sign-out");
+            this.browserStorage.setInteractionInProgress(false);
+            return Promise.resolve(null);
+        }
         const loggedInAccounts = this.getAllAccounts();
         const platformBrokerRequest = this.browserStorage.getCachedNativeRequest();
         const useNative = platformBrokerRequest &&
             NativeMessageHandler.isPlatformBrokerAvailable(this.config, this.logger, this.nativeExtensionProvider) &&
             this.nativeExtensionProvider &&
             !hash;
-        let rootMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenRedirect, platformBrokerRequest?.correlationId || "");
+        let rootMeasurement;
         this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, exports.InteractionType.Redirect);
         let redirectResponse;
-        if (useNative && this.nativeExtensionProvider) {
-            this.logger.trace("handleRedirectPromise - acquiring token from native platform");
-            const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.handleRedirectPromise, this.performanceClient, this.nativeExtensionProvider, platformBrokerRequest.accountId, this.nativeInternalStorage, platformBrokerRequest.correlationId);
-            redirectResponse = invokeAsync(nativeClient.handleRedirectPromise.bind(nativeClient), PerformanceEvents.HandleNativeRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(this.performanceClient, rootMeasurement.event.correlationId);
+        try {
+            if (useNative && this.nativeExtensionProvider) {
+                rootMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenRedirect, platformBrokerRequest?.correlationId || "");
+                this.logger.trace("handleRedirectPromise - acquiring token from native platform");
+                const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.handleRedirectPromise, this.performanceClient, this.nativeExtensionProvider, platformBrokerRequest.accountId, this.nativeInternalStorage, platformBrokerRequest.correlationId);
+                redirectResponse = invokeAsync(nativeClient.handleRedirectPromise.bind(nativeClient), PerformanceEvents.HandleNativeRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(this.performanceClient, rootMeasurement.event.correlationId);
+            }
+            else {
+                const [standardRequest, codeVerifier] = this.browserStorage.getCachedRequest();
+                const correlationId = standardRequest.correlationId;
+                // Reset rootMeasurement now that we have correlationId
+                rootMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenRedirect, correlationId);
+                this.logger.trace("handleRedirectPromise - acquiring token from web flow");
+                const redirectClient = this.createRedirectClient(correlationId);
+                redirectResponse = invokeAsync(redirectClient.handleRedirectPromise.bind(redirectClient), PerformanceEvents.HandleRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(hash, standardRequest, codeVerifier, rootMeasurement);
+            }
         }
-        else {
-            const [standardRequest, codeVerifier] = this.browserStorage.getCachedRequest();
-            const correlationId = standardRequest.correlationId;
-            // Reset rootMeasurement now that we have correlationId
-            rootMeasurement.discard();
-            rootMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenRedirect, correlationId);
-            this.logger.trace("handleRedirectPromise - acquiring token from web flow");
-            const redirectClient = this.createRedirectClient(correlationId);
-            redirectResponse = invokeAsync(redirectClient.handleRedirectPromise.bind(redirectClient), PerformanceEvents.HandleRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(hash, standardRequest, codeVerifier, rootMeasurement);
+        catch (e) {
+            this.browserStorage.resetRequestCache();
+            throw e;
         }
         return redirectResponse
             .then((result) => {
@@ -16423,7 +16487,7 @@ class StandardController {
         const isLoggedIn = this.getAllAccounts().length > 0;
         try {
             redirectPreflightCheck(this.initialized, this.config);
-            this.browserStorage.setInteractionInProgress(true);
+            this.browserStorage.setInteractionInProgress(true, INTERACTION_TYPE.SIGNIN);
             if (isLoggedIn) {
                 this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Redirect, request);
             }
@@ -16488,7 +16552,7 @@ class StandardController {
         try {
             this.logger.verbose("acquireTokenPopup called", correlationId);
             preflightCheck(this.initialized, atPopupMeasurement);
-            this.browserStorage.setInteractionInProgress(true);
+            this.browserStorage.setInteractionInProgress(true, INTERACTION_TYPE.SIGNIN);
         }
         catch (e) {
             // Since this function is syncronous we need to reject
@@ -16863,7 +16927,7 @@ class StandardController {
     async logoutRedirect(logoutRequest) {
         const correlationId = this.getRequestCorrelationId(logoutRequest);
         redirectPreflightCheck(this.initialized, this.config);
-        this.browserStorage.setInteractionInProgress(true);
+        this.browserStorage.setInteractionInProgress(true, INTERACTION_TYPE.SIGNOUT);
         const redirectClient = this.createRedirectClient(correlationId);
         return redirectClient.logout(logoutRequest);
     }
@@ -16875,7 +16939,7 @@ class StandardController {
         try {
             const correlationId = this.getRequestCorrelationId(logoutRequest);
             preflightCheck$1(this.initialized);
-            this.browserStorage.setInteractionInProgress(true);
+            this.browserStorage.setInteractionInProgress(true, INTERACTION_TYPE.SIGNOUT);
             const popupClient = this.createPopupClient(correlationId);
             return popupClient.logout(logoutRequest).finally(() => {
                 this.browserStorage.setInteractionInProgress(false);
@@ -17295,7 +17359,9 @@ class StandardController {
     async acquireTokenSilentDeduped(request, account, correlationId) {
         const thumbprint = getRequestThumbprint(this.config.auth.clientId, {
             ...request,
-            authority: request.authority || this.config.auth.authority}, account.homeAccountId);
+            authority: request.authority || this.config.auth.authority,
+            correlationId: correlationId,
+        }, account.homeAccountId);
         const silentRequestKey = JSON.stringify(thumbprint);
         const inProgressRequest = this.activeSilentTokenRequests.get(silentRequestKey);
         if (typeof inProgressRequest === "undefined") {
@@ -17922,7 +17988,7 @@ class NestedAppAuthController {
             });
             return result;
         }
-        this.logger.error("Cached tokens are not found for the account, proceeding with silent token request.");
+        this.logger.warning("Cached tokens are not found for the account, proceeding with silent token request.");
         this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null);
         atsMeasurement?.end({
             success: false,