npm - @azure/msal-browser - Versions diffs - 5.17.0 → 5.17.1 - Mend

@azure/msal-browser 5.17.0 → 5.17.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (220) hide show

package/lib/custom-auth-path/msal-custom-auth.js CHANGED Viewed

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.17.0 2026-07-07 */
+/*! @azure/msal-browser v5.17.1 2026-07-15 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -6,7 +6,7 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msalCustomAuth = {}));
 })(this, (function (exports) { 'use strict';
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -58,7 +58,7 @@
     const RESOURCE = "resource";
     const CLI_DATA = "clidata";
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -289,7 +289,7 @@
     // Token renewal offset default in seconds
     const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -318,7 +318,7 @@
         return new AuthError(code, correlationId, additionalMessage || getDefaultErrorMessage$1(code));
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -341,7 +341,7 @@
         return new ClientAuthError(errorCode, correlationId, additionalMessage);
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -378,7 +378,7 @@
     const resourceParameterRequired = "resource_parameter_required";
     const misplacedResourceParam = "misplaced_resource_parameter";
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -416,7 +416,7 @@
         };
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -482,7 +482,7 @@
         return matches[2];
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -570,7 +570,7 @@
         return updatedAccountInfo;
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -585,7 +585,7 @@
         Ciam: 3,
     };
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -607,7 +607,7 @@
         return null;
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -631,7 +631,7 @@
         EAR: "EAR",
     };
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /**
      * Returns the AccountInfo interface for this account.
      * @internal
@@ -820,7 +820,7 @@
             entity.hasOwnProperty("authorityType"));
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -830,7 +830,7 @@
      */
     const unexpectedError = "unexpected_error";
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -850,7 +850,7 @@
         return new ClientConfigurationError(errorCode, correlationId);
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -876,7 +876,7 @@
     const invalidPlatformBrokerConfiguration = "invalid_platform_broker_configuration";
     const issuerValidationFailed = "issuer_validation_failed";
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -888,7 +888,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -968,7 +968,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1126,7 +1126,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1292,7 +1292,7 @@
         return null;
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1301,7 +1301,7 @@
         // AzureCloudInstance is not specified.
         None: "none"};
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1311,7 +1311,7 @@
             response.hasOwnProperty("metadata"));
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1321,7 +1321,7 @@
             response.hasOwnProperty("error_description"));
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1392,7 +1392,7 @@
     const CacheManagerGetRefreshToken = "cacheManagerGetRefreshToken";
     const SetUserData = "setUserData";
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1485,7 +1485,7 @@
         };
     };
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1596,7 +1596,7 @@
         },
     };
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1661,7 +1661,7 @@
         return cachedAtSec > nowSeconds();
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1928,7 +1928,7 @@
         return metadata.expiresAt <= nowSeconds();
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2898,7 +2898,7 @@
         };
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2932,7 +2932,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3128,7 +3128,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3543,7 +3543,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3665,12 +3665,16 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
+    /**
+     * Default crypto implementation used when a platform-specific implementation has
+     * not been provided.
+     */
     const DEFAULT_CRYPTO_IMPLEMENTATION = {
         createNewGuid: () => {
             throw createClientAuthError(methodNotImplemented, "");
@@ -3704,7 +3708,7 @@
         },
     };
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3979,12 +3983,12 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /* eslint-disable header/header */
     const name$1 = "@azure/msal-common";
-    const version$1 = "16.11.1";
+    const version$1 = "16.11.2";
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3992,7 +3996,7 @@
     const cacheQuotaExceeded = "cache_quota_exceeded";
     const cacheErrorUnknown = "cache_error_unknown";
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4030,7 +4034,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5177,7 +5181,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5191,7 +5195,7 @@
     const PerformanceEventStatus = {
         InProgress: 1};
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5249,7 +5253,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5345,7 +5349,7 @@
         return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5372,7 +5376,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5452,7 +5456,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5503,7 +5507,7 @@
      */
     const interruptedUser = "interrupted_user";
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5570,7 +5574,7 @@
         return new InteractionRequiredAuthError(errorCode, correlationId, errorMessage);
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5589,7 +5593,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5660,7 +5664,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6011,7 +6015,7 @@
         return baseAccount;
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6021,7 +6025,7 @@
         UPN: "UPN",
     };
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6040,7 +6044,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6062,7 +6066,7 @@
         };
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6148,7 +6152,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6179,7 +6183,7 @@
         return new NetworkError(error, httpStatus, responseHeaders);
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6295,7 +6299,7 @@
         return response;
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6552,7 +6556,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6779,7 +6783,7 @@
         return account.loginHint || account.idTokenClaims?.login_hint || null;
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6800,7 +6804,7 @@
         return new JoseHeaderError(code, correlationId);
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6808,7 +6812,7 @@
     const missingKidError = "missing_kid_error";
     const missingAlgError = "missing_alg_error";
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6848,7 +6852,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7069,7 +7073,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7362,7 +7366,7 @@
         clearNativeBrokerErrorCode() { }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7470,7 +7474,7 @@
         }
     }
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7486,7 +7490,7 @@
         },
     };
-    /*! @azure/msal-common v16.11.1 2026-07-07 */
+    /*! @azure/msal-common v16.11.2 2026-07-15 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7914,7 +7918,7 @@
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "5.17.0";
+    const version = "5.17.1";
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8585,6 +8589,7 @@
     const getRequestFailed = "get_request_failed";
     const failedToParseResponse = "failed_to_parse_response";
     const cryptoKeyNotFound = "crypto_key_not_found";
+    const invalidPublicJwk = "invalid_public_jwk";
     const authCodeRequired = "auth_code_required";
     const authCodeOrNativeAccountIdRequired = "auth_code_or_nativeAccountId_required";
     const spaCodeAndNativeAccountIdPresent = "spa_code_and_nativeAccountId_present";
@@ -8906,6 +8911,12 @@
     const HKDF = "HKDF";
     // SHA-256 hashing algorithm
     const S256_HASH_ALG = "SHA-256";
+    const JSON_WEB_KEY_TYPE_EC = "EC";
+    const JSON_WEB_KEY_TYPE_RSA = "RSA";
+    const MISSING_JWK_KTY_SUBERROR = "missing_jwk_kty";
+    const UNSUPPORTED_JWK_KTY_SUBERROR = "unsupported_jwk_kty";
+    const MISSING_JWK_MEMBER_SUBERROR = "missing_jwk_member";
+    const EMPTY_JWK_MEMBER_SUBERROR = "empty_jwk_member";
     // MOD length for PoP tokens
     const MODULUS_LENGTH = 2048;
     // Public Exponent
@@ -8922,12 +8933,15 @@
     const DERIVE_KEY = "deriveKey";
     // Suberror
     const SUBTLE_SUBERROR = "crypto_subtle_undefined";
-    const keygenAlgorithmOptions = {
+    const RSA_KEYGEN_ALGORITHM_OPTIONS = {
         name: PKCS1_V15_KEYGEN_ALG,
         hash: S256_HASH_ALG,
         modulusLength: MODULUS_LENGTH,
         publicExponent: PUBLIC_EXPONENT,
     };
+    const RSA_SIGN_ALGORITHM_OPTIONS = {
+        name: PKCS1_V15_KEYGEN_ALG,
+    };
     /**
      * Check whether browser crypto is available.
      */
@@ -9011,12 +9025,13 @@
         return text;
     }
     /**
-     * Generates a keypair based on current keygen algorithm config.
+     * Generates a keypair based on the provided algorithm config.
      * @param extractable
      * @param usages
+     * @param algorithm
      */
-    async function generateKeyPair(extractable, usages) {
-        return window.crypto.subtle.generateKey(keygenAlgorithmOptions, extractable, usages);
+    async function generateKeyPair(extractable, usages, algorithm) {
+        return window.crypto.subtle.generateKey(algorithm, extractable, usages);
     }
     /**
      * Export key as Json Web Key (JWK)
@@ -9030,17 +9045,19 @@
      * @param key
      * @param extractable
      * @param usages
+     * @param algorithm
      */
-    async function importJwk(key, extractable, usages) {
-        return window.crypto.subtle.importKey(KEY_FORMAT_JWK, key, keygenAlgorithmOptions, extractable, usages);
+    async function importJwk(key, extractable, usages, algorithm) {
+        return window.crypto.subtle.importKey(KEY_FORMAT_JWK, key, algorithm, extractable, usages);
     }
     /**
-     * Signs given data with given key
+     * Signs given data with given key.
      * @param key
      * @param data
+     * @param algorithm
      */
-    async function sign(key, data) {
-        return window.crypto.subtle.sign(keygenAlgorithmOptions, key, data);
+    async function sign(key, data, algorithm) {
+        return window.crypto.subtle.sign(algorithm, key, data);
     }
     /**
      * Generates Base64 encoded jwk used in the Encrypted Authorize Response (EAR) flow
@@ -9183,6 +9200,43 @@
         const hashBuffer = await sha256Digest(plainText);
         const hashBytes = new Uint8Array(hashBuffer);
         return urlEncodeArr(hashBytes);
+    }
+    const JWK_THUMBPRINT_REQUIRED_MEMBERS = {
+        [JSON_WEB_KEY_TYPE_EC]: ["crv", "kty", "x", "y"],
+        [JSON_WEB_KEY_TYPE_RSA]: ["e", "kty", "n"],
+    };
+    function getJwkThumbprintMembers(publicJwk) {
+        const kty = publicJwk.kty;
+        if (typeof kty !== "string" || kty.length === 0) {
+            throw createBrowserAuthError(invalidPublicJwk, "", MISSING_JWK_KTY_SUBERROR);
+        }
+        const requiredMembers = JWK_THUMBPRINT_REQUIRED_MEMBERS[kty];
+        if (!requiredMembers) {
+            throw createBrowserAuthError(invalidPublicJwk, "", UNSUPPORTED_JWK_KTY_SUBERROR);
+        }
+        return requiredMembers.reduce((thumbprintMembers, memberName) => {
+            const memberValue = publicJwk[memberName];
+            if (typeof memberValue !== "string") {
+                throw createBrowserAuthError(invalidPublicJwk, "", MISSING_JWK_MEMBER_SUBERROR);
+            }
+            if (memberValue.length === 0) {
+                throw createBrowserAuthError(invalidPublicJwk, "", EMPTY_JWK_MEMBER_SUBERROR);
+            }
+            thumbprintMembers[memberName] = memberValue;
+            return thumbprintMembers;
+        }, {});
+    }
+    /**
+     * Computes an RFC 7638 JWK thumbprint for a public key.
+     * The required members for the JWK key type are serialised in lexicographic order
+     * and the SHA-256 digest is returned as a base64url string.
+     * @internal
+     */
+    async function computeJwkThumbprint(publicJwk) {
+        const thumbprintMembers = getJwkThumbprintMembers(publicJwk);
+        // RFC 7638 §3.3: use only required members, sorted lexicographically
+        const thumbprintJson = JSON.stringify(thumbprintMembers, Object.keys(thumbprintMembers).sort());
+        return hashString(thumbprintJson);
     }
     /*
@@ -14444,20 +14498,14 @@
         async getPublicKeyThumbprint(request) {
             const publicKeyThumbMeasurement = this.performanceClient?.startMeasurement(CryptoOptsGetPublicKeyThumbprint, request.correlationId);
             // Generate Keypair
-            const keyPair = await generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES);
+            const keyPair = await generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES, RSA_KEYGEN_ALGORITHM_OPTIONS);
             // Generate Thumbprint for Public Key
             const publicKeyJwk = await exportJwk(keyPair.publicKey);
-            const pubKeyThumprintObj = {
-                e: publicKeyJwk.e,
-                kty: publicKeyJwk.kty,
-                n: publicKeyJwk.n,
-            };
-            const publicJwkString = getSortedObjectString(pubKeyThumprintObj);
-            const publicJwkHash = await this.hashString(publicJwkString);
+            const publicJwkHash = await computeJwkThumbprint(publicKeyJwk);
             // Generate Thumbprint for Private Key
             const privateKeyJwk = await exportJwk(keyPair.privateKey);
             // Re-import private key to make it unextractable
-            const unextractablePrivateKey = await importJwk(privateKeyJwk, false, ["sign"]);
+            const unextractablePrivateKey = await importJwk(privateKeyJwk, false, ["sign"], RSA_KEYGEN_ALGORITHM_OPTIONS);
             // Store Keypair data in keystore
             await this.cache.setItem(publicJwkHash, {
                 privateKey: unextractablePrivateKey,
@@ -14542,7 +14590,7 @@
             // Sign token
             const encoder = new TextEncoder();
             const tokenBuffer = encoder.encode(tokenString);
-            const signatureBuffer = await sign(cachedKeyPair.privateKey, tokenBuffer);
+            const signatureBuffer = await sign(cachedKeyPair.privateKey, tokenBuffer, RSA_SIGN_ALGORITHM_OPTIONS);
             const encodedSignature = urlEncodeArr(new Uint8Array(signatureBuffer));
             const signedJwt = `${tokenString}.${encodedSignature}`;
             if (signJwtMeasurement) {