@azure/msal-browser 5.14.0 → 5.15.0

package/src/controllers/StandardController.ts

@@ -1307,7 +1307,8 @@ export class StandardController implements IController {
             if (request.code && request.nativeAccountId) {
                 // Throw error in case server returns both spa_code and spa_accountid in exchange for auth code.
                 throw createBrowserAuthError(
-                    BrowserAuthErrorCodes.spaCodeAndNativeAccountIdPresent
+                    BrowserAuthErrorCodes.spaCodeAndNativeAccountIdPresent,
+                    correlationId
                 );
             } else if (request.code) {
                 const hybridAuthCode = request.code;
@@ -1404,12 +1405,14 @@ export class StandardController implements IController {
                     return result;
                 } else {
                     throw createBrowserAuthError(
-                        BrowserAuthErrorCodes.unableToAcquireTokenFromNativePlatform
+                        BrowserAuthErrorCodes.unableToAcquireTokenFromNativePlatform,
+                        correlationId
                     );
                 }
             } else {
                 throw createBrowserAuthError(
-                    BrowserAuthErrorCodes.authCodeOrNativeAccountIdRequired
+                    BrowserAuthErrorCodes.authCodeOrNativeAccountIdRequired,
+                    correlationId
                 );
             }
         } catch (e) {
@@ -1505,7 +1508,8 @@ export class StandardController implements IController {
                 )(commonRequest);
             default:
                 throw createClientAuthError(
-                    ClientAuthErrorCodes.tokenRefreshRequired
+                    ClientAuthErrorCodes.tokenRefreshRequired,
+                    commonRequest.correlationId
                 );
         }
     }
@@ -1538,7 +1542,8 @@ export class StandardController implements IController {
                 )(commonRequest);
             default:
                 throw createClientAuthError(
-                    ClientAuthErrorCodes.tokenRefreshRequired
+                    ClientAuthErrorCodes.tokenRefreshRequired,
+                    commonRequest.correlationId
                 );
         }
     }
@@ -1738,6 +1743,7 @@ export class StandardController implements IController {
                     ? TimeUtils.toSecondsFromDate(result.extExpiresOn)
                     : 0,
                 base64Decode,
+                request.correlationId || "",
                 undefined, // refreshOn
                 result.tokenType as Constants.AuthenticationScheme,
                 undefined, // userAssertionHash
@@ -1784,7 +1790,8 @@ export class StandardController implements IController {
         this.logger.trace("acquireTokenNative called", correlationId);
         if (!this.platformAuthProvider) {
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.nativeConnectionNotEstablished
+                BrowserAuthErrorCodes.nativeConnectionNotEstablished,
+                correlationId
             );
         }
 
@@ -2195,7 +2202,10 @@ export class StandardController implements IController {
 
         const account = request.account || this.getActiveAccount();
         if (!account) {
-            throw createBrowserAuthError(BrowserAuthErrorCodes.noAccountError);
+            throw createBrowserAuthError(
+                BrowserAuthErrorCodes.noAccountError,
+                correlationId
+            );
         }
 
         return this.acquireTokenSilentDeduped(request, account, correlationId)
@@ -2219,7 +2229,7 @@ export class StandardController implements IController {
             .catch((error: Error) => {
                 if (error instanceof AuthError) {
                     // Ensures PWB scenarios can correctly match request to response
-                    error.setCorrelationId(correlationId);
+                    error.correlationId = correlationId;
                 }
 
                 atsMeasurement.end(
@@ -2530,7 +2540,8 @@ export class StandardController implements IController {
                     this.platformAuthProvider = undefined; // Prevent future requests from continuing to attempt
                     // Cache will not contain tokens, given that previous WAM requests succeeded. Skip cache and RT renewal and go straight to iframe renewal
                     throw createClientAuthError(
-                        ClientAuthErrorCodes.tokenRefreshRequired
+                        ClientAuthErrorCodes.tokenRefreshRequired,
+                        silentRequest.correlationId
                     );
                 }
                 throw e;

package/src/crypto/BrowserCrypto.ts

@@ -59,15 +59,20 @@ export function validateCryptoAvailable(
 ): void {
     if (!window) {
         throw createBrowserAuthError(
-            BrowserAuthErrorCodes.nonBrowserEnvironment
+            BrowserAuthErrorCodes.nonBrowserEnvironment,
+            ""
         );
     }
     if (!window.crypto) {
-        throw createBrowserAuthError(BrowserAuthErrorCodes.cryptoNonExistent);
+        throw createBrowserAuthError(
+            BrowserAuthErrorCodes.cryptoNonExistent,
+            ""
+        );
     }
     if (!skipValidateSubtleCrypto && !window.crypto.subtle) {
         throw createBrowserAuthError(
             BrowserAuthErrorCodes.cryptoNonExistent,
+            "",
             SUBTLE_SUBERROR
         );
     }
@@ -260,6 +265,7 @@ export async function decryptEarResponse(
     if (earJweParts.length !== 5) {
         throw createBrowserAuthError(
             BrowserAuthErrorCodes.failedToDecryptEarResponse,
+            "",
             "jwe_length"
         );
     }
@@ -267,6 +273,7 @@ export async function decryptEarResponse(
     const key = await importEarKey(earJwk).catch(() => {
         throw createBrowserAuthError(
             BrowserAuthErrorCodes.failedToDecryptEarResponse,
+            "",
             "import_key"
         );
     });
@@ -298,6 +305,7 @@ export async function decryptEarResponse(
     } catch (e) {
         throw createBrowserAuthError(
             BrowserAuthErrorCodes.failedToDecryptEarResponse,
+            "",
             "decrypt"
         );
     }

package/src/crypto/CryptoOps.ts

@@ -183,7 +183,8 @@ export class CryptoOps implements ICrypto {
         const keyFound = await this.cache.containsKey(kid, correlationId);
         if (keyFound) {
             throw createClientAuthError(
-                ClientAuthErrorCodes.bindingKeyNotRemoved
+                ClientAuthErrorCodes.bindingKeyNotRemoved,
+                correlationId
             );
         }
     }
@@ -242,7 +243,8 @@ export class CryptoOps implements ICrypto {
 
         if (!cachedKeyPair) {
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.cryptoKeyNotFound
+                BrowserAuthErrorCodes.cryptoKeyNotFound,
+                correlationId || ""
             );
         }
 

package/src/crypto/PkceGenerator.ts

@@ -76,7 +76,10 @@ function generateCodeVerifier(
         const pkceCodeVerifierB64: string = urlEncodeArr(buffer);
         return pkceCodeVerifierB64;
     } catch (e) {
-        throw createBrowserAuthError(BrowserAuthErrorCodes.pkceNotCreated);
+        throw createBrowserAuthError(
+            BrowserAuthErrorCodes.pkceNotCreated,
+            correlationId
+        );
     }
 }
 
@@ -102,6 +105,9 @@ async function generateCodeChallengeFromVerifier(
         // encode hash as base64
         return urlEncodeArr(new Uint8Array(pkceHashedCodeVerifier));
     } catch (e) {
-        throw createBrowserAuthError(BrowserAuthErrorCodes.pkceNotCreated);
+        throw createBrowserAuthError(
+            BrowserAuthErrorCodes.pkceNotCreated,
+            correlationId
+        );
     }
 }

package/src/custom_auth/core/CustomAuthAuthority.ts

@@ -37,8 +37,10 @@ export class CustomAuthAuthority extends Authority {
         performanceClient: IPerformanceClient,
         private customAuthProxyDomain?: string
     ) {
-        const ciamAuthorityUrl =
-            CustomAuthAuthority.transformCIAMAuthority(authority);
+        const ciamAuthorityUrl = CustomAuthAuthority.transformCIAMAuthority(
+            authority,
+            ""
+        );
 
         const authorityOptions: AuthorityOptions = {
             protocolMode: config.system.protocolMode,

package/src/custom_auth/get_account/interaction_client/CustomAuthSilentCacheClient.ts

@@ -135,7 +135,8 @@ export class CustomAuthSilentCacheClient extends CustomAuthInteractionClientBase
         if (postLogoutRedirectUri) {
             const absoluteRedirectUri = UrlString.getAbsoluteUrl(
                 postLogoutRedirectUri,
-                getCurrentUri()
+                getCurrentUri(),
+                correlationId
             );
 
             this.logger.verbose(

package/src/encode/Base64Decode.ts

@@ -38,7 +38,8 @@ export function base64DecToArr(base64String: string): Uint8Array {
             break;
         default:
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.invalidBase64String
+                BrowserAuthErrorCodes.invalidBase64String,
+                ""
             );
     }
     const binString = atob(encodedString);

package/src/error/BrowserAuthError.ts

@@ -15,8 +15,13 @@ export function getDefaultErrorMessage(code: string): string {
  * Browser library error class thrown by the MSAL.js library for SPAs
  */
 export class BrowserAuthError extends AuthError {
-    constructor(errorCode: string, subError?: string) {
-        super(errorCode, getDefaultErrorMessage(errorCode), subError);
+    constructor(errorCode: string, correlationId: string, subError?: string) {
+        super(
+            errorCode,
+            correlationId,
+            getDefaultErrorMessage(errorCode),
+            subError
+        );
 
         Object.setPrototypeOf(this, BrowserAuthError.prototype);
         this.name = "BrowserAuthError";
@@ -25,7 +30,8 @@ export class BrowserAuthError extends AuthError {
 
 export function createBrowserAuthError(
     errorCode: string,
+    correlationId: string,
     subError?: string
 ): BrowserAuthError {
-    return new BrowserAuthError(errorCode, subError);
+    return new BrowserAuthError(errorCode, correlationId, subError);
 }

package/src/error/BrowserConfigurationAuthError.ts

@@ -11,8 +11,12 @@ export { BrowserConfigurationAuthErrorCodes };
  * Browser library error class thrown by the MSAL.js library for SPAs
  */
 export class BrowserConfigurationAuthError extends AuthError {
-    constructor(errorCode: string, errorMessage?: string) {
-        super(errorCode, errorMessage);
+    constructor(
+        errorCode: string,
+        correlationId: string,
+        errorMessage?: string
+    ) {
+        super(errorCode, correlationId, errorMessage);
         this.name = "BrowserConfigurationAuthError";
 
         Object.setPrototypeOf(this, BrowserConfigurationAuthError.prototype);
@@ -20,10 +24,12 @@ export class BrowserConfigurationAuthError extends AuthError {
 }
 
 export function createBrowserConfigurationAuthError(
-    errorCode: string
+    errorCode: string,
+    correlationId: string
 ): BrowserConfigurationAuthError {
     return new BrowserConfigurationAuthError(
         errorCode,
+        correlationId,
         getDefaultErrorMessage(errorCode)
     );
 }

package/src/error/NativeAuthError.ts

@@ -32,8 +32,17 @@ const INVALID_METHOD_ERROR = -2147186943;
 export class NativeAuthError extends AuthError {
     ext: OSError | undefined;
 
-    constructor(errorCode: string, description?: string, ext?: OSError) {
-        super(errorCode, description || getDefaultErrorMessage(errorCode));
+    constructor(
+        errorCode: string,
+        correlationId: string,
+        description?: string,
+        ext?: OSError
+    ) {
+        super(
+            errorCode,
+            correlationId,
+            description || getDefaultErrorMessage(errorCode)
+        );
 
         Object.setPrototypeOf(this, NativeAuthError.prototype);
         this.name = "NativeAuthError";
@@ -79,32 +88,56 @@ export function isFatalNativeAuthError(error: NativeAuthError): boolean {
  */
 export function createNativeAuthError(
     code: string,
+    correlationId: string,
     description?: string,
     ext?: OSError
 ): AuthError {
+    let error: AuthError;
     if (ext && ext.status) {
         switch (ext.status) {
             case NativeStatusCodes.ACCOUNT_UNAVAILABLE:
-                return createInteractionRequiredAuthError(
+                error = createInteractionRequiredAuthError(
                     InteractionRequiredAuthErrorCodes.nativeAccountUnavailable,
+                    correlationId,
                     getDefaultErrorMessage(code)
                 );
+                break;
             case NativeStatusCodes.USER_INTERACTION_REQUIRED:
-                return new InteractionRequiredAuthError(code, description);
+                error = new InteractionRequiredAuthError(
+                    code,
+                    correlationId,
+                    description
+                );
+                break;
             case NativeStatusCodes.USER_CANCEL:
-                return createBrowserAuthError(
-                    BrowserAuthErrorCodes.userCancelled
+                error = createBrowserAuthError(
+                    BrowserAuthErrorCodes.userCancelled,
+                    correlationId
                 );
+                break;
             case NativeStatusCodes.NO_NETWORK:
-                return createBrowserAuthError(
-                    BrowserAuthErrorCodes.noNetworkConnectivity
+                error = createBrowserAuthError(
+                    BrowserAuthErrorCodes.noNetworkConnectivity,
+                    correlationId
                 );
+                break;
             case NativeStatusCodes.UI_NOT_ALLOWED:
-                return createInteractionRequiredAuthError(
-                    InteractionRequiredAuthErrorCodes.uiNotAllowed
+                error = createInteractionRequiredAuthError(
+                    InteractionRequiredAuthErrorCodes.uiNotAllowed,
+                    correlationId
+                );
+                break;
+            default:
+                error = new NativeAuthError(
+                    code,
+                    correlationId,
+                    description,
+                    ext
                 );
         }
+        return error;
     }
 
-    return new NativeAuthError(code, description, ext);
+    error = new NativeAuthError(code, correlationId, description, ext);
+    return error;
 }

package/src/error/NestedAppAuthError.ts

@@ -7,14 +7,24 @@ import { AuthError } from "@azure/msal-common/browser";
 import { unsupportedMethod } from "./NativeAuthErrorCodes.js";
 
 export class NestedAppAuthError extends AuthError {
-    constructor(errorCode: string, errorMessage?: string) {
-        super(errorCode, errorMessage);
+    constructor(
+        errorCode: string,
+        correlationId: string,
+        errorMessage?: string
+    ) {
+        super(errorCode, correlationId, errorMessage);
 
         Object.setPrototypeOf(this, NestedAppAuthError.prototype);
         this.name = "NestedAppAuthError";
     }
 
-    public static createUnsupportedError(): NestedAppAuthError {
-        return new NestedAppAuthError(unsupportedMethod);
+    public static createUnsupportedError(
+        correlationId?: string
+    ): NestedAppAuthError {
+        /*
+         * Some controller stubs (perf callbacks, getPerformanceClient, getRedirectResponse)
+         * have no request param and thus no correlationId to forward
+         */
+        return new NestedAppAuthError(unsupportedMethod, correlationId || "");
     }
 }

package/src/interaction_client/BaseInteractionClient.ts

@@ -97,7 +97,11 @@ export function getRedirectUri(
 ): string {
     logger.verbose("getRedirectUri called", correlationId);
     const redirectUri = requestRedirectUri || clientConfigRedirectUri || "";
-    return UrlString.getAbsoluteUrl(redirectUri, BrowserUtils.getCurrentUri());
+    return UrlString.getAbsoluteUrl(
+        redirectUri,
+        BrowserUtils.getCurrentUri(),
+        correlationId
+    );
 }
 
 /**
@@ -189,7 +193,7 @@ export async function getDiscoveredAuthority(
     const userAuthority =
         account && resolvedInstanceAware
             ? config.auth.authority.replace(
-                  UrlString.getDomainFromUrl(resolvedAuthority),
+                  UrlString.getDomainFromUrl(resolvedAuthority, correlationId),
                   account.environment
               )
             : resolvedAuthority;
@@ -217,7 +221,8 @@ export async function getDiscoveredAuthority(
 
     if (account && !discoveredAuthority.isAlias(account.environment)) {
         throw createClientConfigurationError(
-            ClientConfigurationErrorCodes.authorityMismatch
+            ClientConfigurationErrorCodes.authorityMismatch,
+            correlationId
         );
     }
 

package/src/interaction_client/PlatformAuthInteractionClient.ts

@@ -266,7 +266,10 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
         return {
             authority: request.authority,
             correlationId: this.correlationId,
-            scopes: ScopeSet.fromString(request.scope).asArray(),
+            scopes: ScopeSet.fromString(
+                request.scope,
+                this.correlationId
+            ).asArray(),
             account: cachedAccount,
             forceRefresh: false,
         };
@@ -287,7 +290,10 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
                 "NativeInteractionClient:acquireTokensFromCache - No nativeAccountId provided",
                 this.correlationId
             );
-            throw createClientAuthError(ClientAuthErrorCodes.noAccountFound);
+            throw createClientAuthError(
+                ClientAuthErrorCodes.noAccountFound,
+                this.correlationId
+            );
         }
         // fetch the account from browser cache
         const account = this.browserStorage.getBaseAccountInfo(
@@ -298,7 +304,10 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
         );
 
         if (!account) {
-            throw createClientAuthError(ClientAuthErrorCodes.noAccountFound);
+            throw createClientAuthError(
+                ClientAuthErrorCodes.noAccountFound,
+                this.correlationId
+            );
         }
 
         // leverage silent flow for cached tokens retrieval
@@ -320,7 +329,8 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
 
             const idTokenClaims = AuthToken.extractTokenClaims(
                 idToken?.secret || "",
-                base64Decode
+                base64Decode,
+                this.correlationId
             );
 
             const fullAccount = updateAccountTenantProfileData(
@@ -395,7 +405,8 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
         const redirectUri = navigateToLoginRequestUrl
             ? UrlString.getAbsoluteUrl(
                   request.redirectStartPage || window.location.href,
-                  getCurrentUri()
+                  getCurrentUri(),
+                  this.correlationId
               )
             : getRedirectUri(
                   request.redirectUri,
@@ -522,7 +533,8 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
         // generate identifiers
         const idTokenClaims = AuthToken.extractTokenClaims(
             response.id_token,
-            base64Decode
+            base64Decode,
+            this.correlationId
         );
 
         const homeAccountIdentifier = this.createHomeAccountIdentifier(
@@ -552,7 +564,10 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
             response.account.id !== request.accountId
         ) {
             // User switch in native broker prompt is not supported. All users must first sign in through web flow to ensure server state is in sync
-            throw createNativeAuthError(NativeAuthErrorCodes.userSwitch);
+            throw createNativeAuthError(
+                NativeAuthErrorCodes.userSwitch,
+                this.correlationId
+            );
         }
 
         // Get the preferred_cache domain for the given authority
@@ -640,8 +655,8 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
      */
     generateScopes(requestScopes: string, responseScopes?: string): ScopeSet {
         return responseScopes
-            ? ScopeSet.fromString(responseScopes)
-            : ScopeSet.fromString(requestScopes);
+            ? ScopeSet.fromString(responseScopes, this.correlationId)
+            : ScopeSet.fromString(requestScopes, this.correlationId);
     }
 
     /**
@@ -689,7 +704,10 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
              * PopTokenGenerator to query the full key for signing
              */
             if (!request.keyId) {
-                throw createClientAuthError(ClientAuthErrorCodes.keyIdMissing);
+                throw createClientAuthError(
+                    ClientAuthErrorCodes.keyIdMissing,
+                    this.correlationId
+                );
             }
             return popTokenGenerator.signPopToken(
                 response.access_token,
@@ -751,6 +769,13 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
          */
         if (accountInfo.nativeAccountId !== response.account.id) {
             accountInfo.nativeAccountId = response.account.id;
+            // Also update the matching tenant profile (source of truth)
+            const targetTenantId = tid || accountInfo.tenantId;
+            const tenantProfile =
+                accountInfo.tenantProfiles?.get(targetTenantId);
+            if (tenantProfile) {
+                tenantProfile.nativeAccountId = response.account.id;
+            }
         }
 
         // generate PoP token as needed
@@ -861,6 +886,7 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
                 tokenExpirationSeconds,
                 0,
                 base64Decode,
+                request.correlationId,
                 undefined,
                 request.tokenType as Constants.AuthenticationScheme,
                 undefined,
@@ -994,16 +1020,13 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
 
         // scopes are expected to be received by the native broker as "scope" and will be added to the request below. Other properties that should be dropped from the request to the native broker can be included in the object destructuring here.
         const { scopes, claims, ...remainingProperties } = request;
-        const scopeSet = new ScopeSet(scopes || []);
+        const scopeSet = new ScopeSet(scopes || [], this.correlationId);
         scopeSet.appendScopes(Constants.OIDC_DEFAULT_SCOPES);
 
-        const mergedClaims =
-            configClaims && configClaims.length
-                ? RequestParameterBuilder.addClientCapabilitiesToClaims(
-                      claims,
-                      configClaims
-                  )
-                : claims;
+        const mergedClaims = RequestParameterBuilder.buildMergedClaims(
+            claims,
+            configClaims?.length ? configClaims : undefined
+        );
 
         const validatedRequest: PlatformAuthRequest = {
             ...remainingProperties,
@@ -1032,7 +1055,8 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
         // Check for PoP token requests: signPopToken should only be set to true if popKid is not set
         if (validatedRequest.signPopToken && !!request.popKid) {
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.invalidPopTokenRequest
+                BrowserAuthErrorCodes.invalidPopTokenRequest,
+                this.correlationId
             );
         }
 
@@ -1110,7 +1134,10 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
             );
         }
 
-        const canonicalAuthority = new UrlString(requestAuthority);
+        const canonicalAuthority = new UrlString(
+            requestAuthority,
+            this.correlationId
+        );
         canonicalAuthority.validateAsUri();
         return canonicalAuthority;
     }
@@ -1154,7 +1181,8 @@ export class PlatformAuthInteractionClient extends BaseInteractionClient {
                     this.correlationId
                 );
                 throw createBrowserAuthError(
-                    BrowserAuthErrorCodes.nativePromptNotSupported
+                    BrowserAuthErrorCodes.nativePromptNotSupported,
+                    this.correlationId
                 );
         }
     }

package/src/interaction_client/PopupClient.ts

@@ -434,7 +434,7 @@ export class PopupClient extends StandardInteractionClient {
             popupParams.popup?.close();
 
             if (e instanceof AuthError) {
-                (e as AuthError).setCorrelationId(this.correlationId);
+                (e as AuthError).correlationId = this.correlationId;
                 serverTelemetryManager.cacheFailedRequest(e);
             }
             throw e;
@@ -759,7 +759,8 @@ export class PopupClient extends StandardInteractionClient {
                         };
                         const absoluteUrl = UrlString.getAbsoluteUrl(
                             mainWindowRedirectUri,
-                            BrowserUtils.getCurrentUri()
+                            BrowserUtils.getCurrentUri(),
+                            this.correlationId
                         );
                         await this.navigationClient.navigateInternal(
                             absoluteUrl,
@@ -779,7 +780,8 @@ export class PopupClient extends StandardInteractionClient {
                 validRequest.state || "",
                 {
                     interactionType: InteractionType.Popup,
-                }
+                },
+                validRequest.correlationId
             );
 
             // Create logout string and navigate user window to logout.
@@ -818,7 +820,8 @@ export class PopupClient extends StandardInteractionClient {
                 };
                 const absoluteUrl = UrlString.getAbsoluteUrl(
                     mainWindowRedirectUri,
-                    BrowserUtils.getCurrentUri()
+                    BrowserUtils.getCurrentUri(),
+                    this.correlationId
                 );
 
                 this.logger.verbose(
@@ -844,7 +847,7 @@ export class PopupClient extends StandardInteractionClient {
             popupParams.popup?.close();
 
             if (e instanceof AuthError) {
-                (e as AuthError).setCorrelationId(this.correlationId);
+                (e as AuthError).correlationId = this.correlationId;
                 serverTelemetryManager.cacheFailedRequest(e);
             }
             this.eventHandler.emitEvent(
@@ -886,7 +889,8 @@ export class PopupClient extends StandardInteractionClient {
             // Throw error if request URL is empty.
             this.logger.error("Navigate url is empty", this.correlationId);
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.emptyNavigateUri
+                BrowserAuthErrorCodes.emptyNavigateUri,
+                this.correlationId
             );
         }
     }
@@ -927,7 +931,8 @@ export class PopupClient extends StandardInteractionClient {
             // Popup will be null if popups are blocked
             if (!popupWindow) {
                 throw createBrowserAuthError(
-                    BrowserAuthErrorCodes.emptyWindowError
+                    BrowserAuthErrorCodes.emptyWindowError,
+                    this.correlationId
                 );
             }
             try {
@@ -958,7 +963,8 @@ export class PopupClient extends StandardInteractionClient {
                 this.correlationId
             );
             throw createBrowserAuthError(
-                BrowserAuthErrorCodes.popupWindowError
+                BrowserAuthErrorCodes.popupWindowError,
+                this.correlationId
             );
         }
     }