npm - @azure/msal-browser - Versions diffs - 5.17.0 → 5.17.1 - Mend

@azure/msal-browser 5.17.0 → 5.17.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (220) hide show

package/lib/custom-auth-path/msal-custom-auth.cjs CHANGED Viewed

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v5.17.0 2026-07-07 */
+/*! @azure/msal-browser v5.17.1 2026-07-15 */
 'use strict';
 'use strict';
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -54,7 +54,7 @@ const EAR_JWE_CRYPTO = "ear_jwe_crypto";
 const RESOURCE = "resource";
 const CLI_DATA = "clidata";
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -285,7 +285,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -314,7 +314,7 @@ function createAuthError(code, correlationId, additionalMessage) {
     return new AuthError(code, correlationId, additionalMessage || getDefaultErrorMessage$1(code));
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -337,7 +337,7 @@ function createClientAuthError(errorCode, correlationId, additionalMessage) {
     return new ClientAuthError(errorCode, correlationId, additionalMessage);
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -374,7 +374,7 @@ const methodNotImplemented = "method_not_implemented";
 const resourceParameterRequired = "resource_parameter_required";
 const misplacedResourceParam = "misplaced_resource_parameter";
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -412,7 +412,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -478,7 +478,7 @@ function getJWSPayload(authToken, correlationId) {
     return matches[2];
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -566,7 +566,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -581,7 +581,7 @@ const AuthorityType = {
     Ciam: 3,
 };
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -603,7 +603,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -627,7 +627,7 @@ const ProtocolMode = {
     EAR: "EAR",
 };
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /**
  * Returns the AccountInfo interface for this account.
  * @internal
@@ -816,7 +816,7 @@ function isAccountEntity(entity) {
         entity.hasOwnProperty("authorityType"));
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -826,7 +826,7 @@ function isAccountEntity(entity) {
  */
 const unexpectedError = "unexpected_error";
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -846,7 +846,7 @@ function createClientConfigurationError(errorCode, correlationId) {
     return new ClientConfigurationError(errorCode, correlationId);
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -872,7 +872,7 @@ const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
 const invalidPlatformBrokerConfiguration = "invalid_platform_broker_configuration";
 const issuerValidationFailed = "issuer_validation_failed";
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -884,7 +884,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -964,7 +964,7 @@ class StringUtils {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1122,7 +1122,7 @@ class UrlString {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1288,7 +1288,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1297,7 +1297,7 @@ const AzureCloudInstance = {
     // AzureCloudInstance is not specified.
     None: "none"};
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1307,7 +1307,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1317,7 +1317,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1388,7 +1388,7 @@ const RegionDiscoveryGetCurrentVersion = "regionDiscoveryGetCurrentVersion";
 const CacheManagerGetRefreshToken = "cacheManagerGetRefreshToken";
 const SetUserData = "setUserData";
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1481,7 +1481,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1592,7 +1592,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1657,7 +1657,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1924,7 +1924,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2894,7 +2894,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2928,7 +2928,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3124,7 +3124,7 @@ class ScopeSet {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3539,7 +3539,7 @@ function addResource(parameters, resource) {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3661,12 +3661,16 @@ function validateUrl(url, logger, correlationId) {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/**
+ * Default crypto implementation used when a platform-specific implementation has
+ * not been provided.
+ */
 const DEFAULT_CRYPTO_IMPLEMENTATION = {
     createNewGuid: () => {
         throw createClientAuthError(methodNotImplemented, "");
@@ -3700,7 +3704,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3975,12 +3979,12 @@ class Logger {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "16.11.1";
+const version$1 = "16.11.2";
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3988,7 +3992,7 @@ const version$1 = "16.11.1";
 const cacheQuotaExceeded = "cache_quota_exceeded";
 const cacheErrorUnknown = "cache_error_unknown";
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4026,7 +4030,7 @@ function createCacheError(e) {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5173,7 +5177,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5187,7 +5191,7 @@ class DefaultStorageClass extends CacheManager {
 const PerformanceEventStatus = {
     InProgress: 1};
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5245,7 +5249,7 @@ class StubPerformanceClient {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5341,7 +5345,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5368,7 +5372,7 @@ function isOidcProtocolMode(config) {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5448,7 +5452,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5499,7 +5503,7 @@ const badToken = "bad_token";
  */
 const interruptedUser = "interrupted_user";
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5566,7 +5570,7 @@ function createInteractionRequiredAuthError(errorCode, correlationId, errorMessa
     return new InteractionRequiredAuthError(errorCode, correlationId, errorMessage);
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5585,7 +5589,7 @@ class ServerError extends AuthError {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5656,7 +5660,7 @@ function parseRequestState(base64Decode, state, correlationId) {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6007,7 +6011,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6017,7 +6021,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6036,7 +6040,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint, fmiP
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6058,7 +6062,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6144,7 +6148,7 @@ class ThrottlingUtils {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6175,7 +6179,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
     return new NetworkError(error, httpStatus, responseHeaders);
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6291,7 +6295,7 @@ async function sendPostRequest(thumbprint, tokenEndpoint, options, correlationId
     return response;
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6548,7 +6552,7 @@ class AuthorizationCodeClient {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6775,7 +6779,7 @@ function extractLoginHint(account) {
     return account.loginHint || account.idTokenClaims?.login_hint || null;
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6796,7 +6800,7 @@ function createJoseHeaderError(code, correlationId) {
     return new JoseHeaderError(code, correlationId);
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6804,7 +6808,7 @@ function createJoseHeaderError(code, correlationId) {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6844,7 +6848,7 @@ class JoseHeader {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7065,7 +7069,7 @@ class RefreshTokenClient {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7358,7 +7362,7 @@ class StubServerTelemetryManager extends ServerTelemetryManager {
     clearNativeBrokerErrorCode() { }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7466,7 +7470,7 @@ class SilentFlowClient {
     }
 }
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7482,7 +7486,7 @@ const StubbedNetworkModule = {
     },
 };
-/*! @azure/msal-common v16.11.1 2026-07-07 */
+/*! @azure/msal-common v16.11.2 2026-07-15 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7910,7 +7914,7 @@ function ensureArgumentIsJSONString(argName, argValue, correlationId) {
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "5.17.0";
+const version = "5.17.1";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8581,6 +8585,7 @@ const postRequestFailed = "post_request_failed";
 const getRequestFailed = "get_request_failed";
 const failedToParseResponse = "failed_to_parse_response";
 const cryptoKeyNotFound = "crypto_key_not_found";
+const invalidPublicJwk = "invalid_public_jwk";
 const authCodeRequired = "auth_code_required";
 const authCodeOrNativeAccountIdRequired = "auth_code_or_nativeAccountId_required";
 const spaCodeAndNativeAccountIdPresent = "spa_code_and_nativeAccountId_present";
@@ -8902,6 +8907,12 @@ const AES_GCM = "AES-GCM";
 const HKDF = "HKDF";
 // SHA-256 hashing algorithm
 const S256_HASH_ALG = "SHA-256";
+const JSON_WEB_KEY_TYPE_EC = "EC";
+const JSON_WEB_KEY_TYPE_RSA = "RSA";
+const MISSING_JWK_KTY_SUBERROR = "missing_jwk_kty";
+const UNSUPPORTED_JWK_KTY_SUBERROR = "unsupported_jwk_kty";
+const MISSING_JWK_MEMBER_SUBERROR = "missing_jwk_member";
+const EMPTY_JWK_MEMBER_SUBERROR = "empty_jwk_member";
 // MOD length for PoP tokens
 const MODULUS_LENGTH = 2048;
 // Public Exponent
@@ -8918,12 +8929,15 @@ const DECRYPT = "decrypt";
 const DERIVE_KEY = "deriveKey";
 // Suberror
 const SUBTLE_SUBERROR = "crypto_subtle_undefined";
-const keygenAlgorithmOptions = {
+const RSA_KEYGEN_ALGORITHM_OPTIONS = {
     name: PKCS1_V15_KEYGEN_ALG,
     hash: S256_HASH_ALG,
     modulusLength: MODULUS_LENGTH,
     publicExponent: PUBLIC_EXPONENT,
 };
+const RSA_SIGN_ALGORITHM_OPTIONS = {
+    name: PKCS1_V15_KEYGEN_ALG,
+};
 /**
  * Check whether browser crypto is available.
  */
@@ -9007,12 +9021,13 @@ function createNewGuid() {
     return text;
 }
 /**
- * Generates a keypair based on current keygen algorithm config.
+ * Generates a keypair based on the provided algorithm config.
  * @param extractable
  * @param usages
+ * @param algorithm
  */
-async function generateKeyPair(extractable, usages) {
-    return window.crypto.subtle.generateKey(keygenAlgorithmOptions, extractable, usages);
+async function generateKeyPair(extractable, usages, algorithm) {
+    return window.crypto.subtle.generateKey(algorithm, extractable, usages);
 }
 /**
  * Export key as Json Web Key (JWK)
@@ -9026,17 +9041,19 @@ async function exportJwk(key) {
  * @param key
  * @param extractable
  * @param usages
+ * @param algorithm
  */
-async function importJwk(key, extractable, usages) {
-    return window.crypto.subtle.importKey(KEY_FORMAT_JWK, key, keygenAlgorithmOptions, extractable, usages);
+async function importJwk(key, extractable, usages, algorithm) {
+    return window.crypto.subtle.importKey(KEY_FORMAT_JWK, key, algorithm, extractable, usages);
 }
 /**
- * Signs given data with given key
+ * Signs given data with given key.
  * @param key
  * @param data
+ * @param algorithm
  */
-async function sign(key, data) {
-    return window.crypto.subtle.sign(keygenAlgorithmOptions, key, data);
+async function sign(key, data, algorithm) {
+    return window.crypto.subtle.sign(algorithm, key, data);
 }
 /**
  * Generates Base64 encoded jwk used in the Encrypted Authorize Response (EAR) flow
@@ -9179,6 +9196,43 @@ async function hashString(plainText) {
     const hashBuffer = await sha256Digest(plainText);
     const hashBytes = new Uint8Array(hashBuffer);
     return urlEncodeArr(hashBytes);
+}
+const JWK_THUMBPRINT_REQUIRED_MEMBERS = {
+    [JSON_WEB_KEY_TYPE_EC]: ["crv", "kty", "x", "y"],
+    [JSON_WEB_KEY_TYPE_RSA]: ["e", "kty", "n"],
+};
+function getJwkThumbprintMembers(publicJwk) {
+    const kty = publicJwk.kty;
+    if (typeof kty !== "string" || kty.length === 0) {
+        throw createBrowserAuthError(invalidPublicJwk, "", MISSING_JWK_KTY_SUBERROR);
+    }
+    const requiredMembers = JWK_THUMBPRINT_REQUIRED_MEMBERS[kty];
+    if (!requiredMembers) {
+        throw createBrowserAuthError(invalidPublicJwk, "", UNSUPPORTED_JWK_KTY_SUBERROR);
+    }
+    return requiredMembers.reduce((thumbprintMembers, memberName) => {
+        const memberValue = publicJwk[memberName];
+        if (typeof memberValue !== "string") {
+            throw createBrowserAuthError(invalidPublicJwk, "", MISSING_JWK_MEMBER_SUBERROR);
+        }
+        if (memberValue.length === 0) {
+            throw createBrowserAuthError(invalidPublicJwk, "", EMPTY_JWK_MEMBER_SUBERROR);
+        }
+        thumbprintMembers[memberName] = memberValue;
+        return thumbprintMembers;
+    }, {});
+}
+/**
+ * Computes an RFC 7638 JWK thumbprint for a public key.
+ * The required members for the JWK key type are serialised in lexicographic order
+ * and the SHA-256 digest is returned as a base64url string.
+ * @internal
+ */
+async function computeJwkThumbprint(publicJwk) {
+    const thumbprintMembers = getJwkThumbprintMembers(publicJwk);
+    // RFC 7638 §3.3: use only required members, sorted lexicographically
+    const thumbprintJson = JSON.stringify(thumbprintMembers, Object.keys(thumbprintMembers).sort());
+    return hashString(thumbprintJson);
 }
 /*
@@ -14440,20 +14494,14 @@ class CryptoOps {
     async getPublicKeyThumbprint(request) {
         const publicKeyThumbMeasurement = this.performanceClient?.startMeasurement(CryptoOptsGetPublicKeyThumbprint, request.correlationId);
         // Generate Keypair
-        const keyPair = await generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES);
+        const keyPair = await generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES, RSA_KEYGEN_ALGORITHM_OPTIONS);
         // Generate Thumbprint for Public Key
         const publicKeyJwk = await exportJwk(keyPair.publicKey);
-        const pubKeyThumprintObj = {
-            e: publicKeyJwk.e,
-            kty: publicKeyJwk.kty,
-            n: publicKeyJwk.n,
-        };
-        const publicJwkString = getSortedObjectString(pubKeyThumprintObj);
-        const publicJwkHash = await this.hashString(publicJwkString);
+        const publicJwkHash = await computeJwkThumbprint(publicKeyJwk);
         // Generate Thumbprint for Private Key
         const privateKeyJwk = await exportJwk(keyPair.privateKey);
         // Re-import private key to make it unextractable
-        const unextractablePrivateKey = await importJwk(privateKeyJwk, false, ["sign"]);
+        const unextractablePrivateKey = await importJwk(privateKeyJwk, false, ["sign"], RSA_KEYGEN_ALGORITHM_OPTIONS);
         // Store Keypair data in keystore
         await this.cache.setItem(publicJwkHash, {
             privateKey: unextractablePrivateKey,
@@ -14538,7 +14586,7 @@ class CryptoOps {
         // Sign token
         const encoder = new TextEncoder();
         const tokenBuffer = encoder.encode(tokenString);
-        const signatureBuffer = await sign(cachedKeyPair.privateKey, tokenBuffer);
+        const signatureBuffer = await sign(cachedKeyPair.privateKey, tokenBuffer, RSA_SIGN_ALGORITHM_OPTIONS);
         const encodedSignature = urlEncodeArr(new Uint8Array(signatureBuffer));
         const signedJwt = `${tokenString}.${encodedSignature}`;
         if (signJwtMeasurement) {