npm - @azure/msal-browser - Versions diffs - 5.2.0 → 5.4.0 - Mend

@azure/msal-browser 5.2.0 → 5.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (281) hide show

package/lib/msal-browser.cjs CHANGED Viewed

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v5.2.0 2026-02-10 */
+/*! @azure/msal-browser v5.4.0 2026-03-02 */
 'use strict';
 'use strict';
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -234,7 +234,7 @@ const JsonWebTokenTypes$1 = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -284,7 +284,7 @@ const INSTANCE_AWARE = "instance_aware";
 const EAR_JWK = "ear_jwk";
 const EAR_JWE_CRYPTO = "ear_jwe_crypto";
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -315,7 +315,7 @@ function createAuthError(code, additionalMessage) {
     return new AuthError(code, additionalMessage || getDefaultErrorMessage$1(code));
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -335,7 +335,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -413,26 +413,9 @@ class StringUtils {
             return null;
         }
     }
-    /**
-     * Tests if a given string matches a given pattern, with support for wildcards and queries.
-     * @param pattern Wildcard pattern to string match. Supports "*" for wildcards and "?" for queries
-     * @param input String to match against
-     */
-    static matchPattern(pattern, input) {
-        /**
-         * Wildcard support: https://stackoverflow.com/a/3117248/4888559
-         * Queries: replaces "?" in string with escaped "\?" for regex test
-         */
-        // eslint-disable-next-line security/detect-non-literal-regexp
-        const regex = new RegExp(pattern
-            .replace(/\\/g, "\\\\")
-            .replace(/\*/g, "[^ ]*")
-            .replace(/\?/g, "\\?"));
-        return regex.test(input);
-    }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -455,7 +438,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -509,7 +492,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -593,7 +576,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userCanceled: userCanceled
 });
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -788,7 +771,7 @@ class ScopeSet {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1155,7 +1138,7 @@ function addEARParameters(parameters, jwk) {
     parameters.set(EAR_JWE_CRYPTO, jweCryptoB64Encoded);
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1264,7 +1247,7 @@ function normalizeUrlForComparison(url) {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1303,7 +1286,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1578,12 +1561,12 @@ class Logger {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "16.0.4";
+const version$1 = "16.2.0";
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1603,7 +1586,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1685,7 +1668,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1765,7 +1748,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1922,7 +1905,7 @@ class UrlString {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2079,7 +2062,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2087,7 +2070,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceeded = "cache_quota_exceeded";
 const cacheErrorUnknown = "cache_error_unknown";
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2125,7 +2108,7 @@ function createCacheError(e) {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2163,7 +2146,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2178,7 +2161,7 @@ const AuthorityType = {
     Ciam: 3,
 };
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2200,7 +2183,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2224,7 +2207,7 @@ const ProtocolMode = {
     EAR: "EAR",
 };
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /**
  * Returns the AccountInfo interface for this account.
  */
@@ -2399,7 +2382,7 @@ function isAccountEntity(entity) {
         entity.hasOwnProperty("authorityType"));
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3496,7 +3479,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3511,6 +3494,12 @@ const PerformanceEventStatus = {
     InProgress: 1,
     Completed: 2,
 };
+/**
+ * Prefix used to mark telemetry field names as dynamic.
+ * Fields with this prefix in addFields/incrementFields calls will be routed
+ * to the PerformanceEvent.ext sub-object.
+ */
+const EXT_FIELD_PREFIX = "ext.";
 const IntFields = new Set([
     "accessTokenSize",
     "durationMs",
@@ -3537,7 +3526,7 @@ const IntFields = new Set([
     "upgradedCacheCount",
 ]);
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3592,7 +3581,7 @@ class StubPerformanceClient {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3686,7 +3675,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3705,27 +3694,63 @@ class ServerError extends AuthError {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-// Codes defined by MSAL
+/**
+ * MSAL-defined interaction required error code indicating no tokens are found in cache.
+ * @public
+ */
 const noTokensFound = "no_tokens_found";
+/**
+ * MSAL-defined error code indicating a native account is unavailable on the platform.
+ * @public
+ */
 const nativeAccountUnavailable = "native_account_unavailable";
+/**
+ * MSAL-defined error code indicating the refresh token has expired and user interaction is needed.
+ * @public
+ */
 const refreshTokenExpired = "refresh_token_expired";
+/**
+ * MSAL-defined error code indicating UI/UX is not allowed (e.g., blocked by policy), requiring alternate interaction.
+ * @public
+ */
 const uxNotAllowed = "ux_not_allowed";
-// Codes potentially returned by server
+/**
+ * Server-originated error code indicating interaction is required to complete the request.
+ * @public
+ */
 const interactionRequired = "interaction_required";
+/**
+ * Server-originated error code indicating user consent is required.
+ * @public
+ */
 const consentRequired = "consent_required";
+/**
+ * Server-originated error code indicating user login is required.
+ * @public
+ */
 const loginRequired = "login_required";
-const badToken = "bad_token";
+/**
+ * Server-originated error code indicating the token is invalid or corrupted.
+ * @public
+ */
+const badToken = "bad_token";
+/**
+ * Server-originated error code indicating the user is in an interrupted state and interaction is required.
+ * @public
+ */
+const interruptedUser = "interrupted_user";
 var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     __proto__: null,
     badToken: badToken,
     consentRequired: consentRequired,
     interactionRequired: interactionRequired,
+    interruptedUser: interruptedUser,
     loginRequired: loginRequired,
     nativeAccountUnavailable: nativeAccountUnavailable,
     noTokensFound: noTokensFound,
@@ -3733,7 +3758,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     uxNotAllowed: uxNotAllowed
 });
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3748,6 +3773,7 @@ const InteractionRequiredServerErrorMessage = [
     loginRequired,
     badToken,
     uxNotAllowed,
+    interruptedUser,
 ];
 const InteractionRequiredAuthSubErrorMessage = [
     "message_only",
@@ -3757,6 +3783,7 @@ const InteractionRequiredAuthSubErrorMessage = [
     "consent_required",
     "bad_token",
     "ux_not_allowed",
+    "interrupted_user",
 ];
 /**
  * Error thrown when user interaction is required.
@@ -3799,7 +3826,7 @@ function createInteractionRequiredAuthError(errorCode, errorMessage) {
     return new InteractionRequiredAuthError(errorCode, errorMessage);
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3867,7 +3894,7 @@ function parseRequestState(base64Decode, state) {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3932,7 +3959,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4003,7 +4030,7 @@ const RegionDiscoveryGetCurrentVersion = "regionDiscoveryGetCurrentVersion";
 const CacheManagerGetRefreshToken = "cacheManagerGetRefreshToken";
 const SetUserData = "setUserData";
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4026,8 +4053,7 @@ const invoke = (callback, eventName, logger, telemetryClient, correlationId) =>
         const inProgressEvent = telemetryClient.startMeasurement(eventName, correlationId);
         if (correlationId) {
             // Track number of times this API is called in a single request
-            const eventCount = eventName + "CallCount";
-            telemetryClient.incrementFields({ [eventCount]: 1 }, correlationId);
+            telemetryClient.incrementFields({ [`ext.${eventName}CallCount`]: 1 }, correlationId);
         }
         try {
             const result = callback(...args);
@@ -4071,8 +4097,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
         const inProgressEvent = telemetryClient.startMeasurement(eventName, correlationId);
         if (correlationId) {
             // Track number of times this API is called in a single request
-            const eventCount = eventName + "CallCount";
-            telemetryClient.incrementFields({ [eventCount]: 1 }, correlationId);
+            telemetryClient.incrementFields({ [`ext.${eventName}CallCount`]: 1 }, correlationId);
         }
         return callback(...args)
             .then((response) => {
@@ -4098,7 +4123,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4178,7 +4203,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4205,7 +4230,7 @@ class PopTokenGenerator {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4464,7 +4489,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4800,7 +4825,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4810,7 +4835,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4828,7 +4853,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4849,7 +4874,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
     };
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4935,7 +4960,7 @@ class ThrottlingUtils {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4966,7 +4991,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
     return new NetworkError(error, httpStatus, responseHeaders);
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5080,7 +5105,7 @@ async function sendPostRequest(thumbprint, tokenEndpoint, options, correlationId
     return response;
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5092,7 +5117,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5102,7 +5127,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5112,7 +5137,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5217,7 +5242,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6037,7 +6062,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6071,7 +6096,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6331,7 +6356,7 @@ class AuthorizationCodeClient {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6556,7 +6581,7 @@ class RefreshTokenClient {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6665,7 +6690,7 @@ class SilentFlowClient {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6680,7 +6705,7 @@ const StubbedNetworkModule = {
     },
 };
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6904,7 +6929,7 @@ function extractLoginHint(account) {
     return account.loginHint || account.idTokenClaims?.login_hint || null;
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6962,7 +6987,7 @@ class AuthenticationHeaderParser {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6979,7 +7004,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7240,7 +7265,7 @@ class ServerTelemetryManager {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7261,7 +7286,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code);
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7269,7 +7294,7 @@ function createJoseHeaderError(code) {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7309,7 +7334,7 @@ class JoseHeader {
     }
 }
-/*! @azure/msal-common v16.0.4 2026-02-10 */
+/*! @azure/msal-common v16.2.0 2026-03-02 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7608,9 +7633,13 @@ class PerformanceClient {
         if (error) {
             addError(error, this.logger, rootEvent);
         }
-        // Add sub-measurement attribute to root event.
+        // Add sub-measurement attribute to root event's ext field.
         if (!isRoot) {
-            rootEvent[event.name + "DurationMs"] = Math.floor(event.durationMs);
+            rootEvent.ext = {
+                ...rootEvent.ext,
+                ...event.ext,
+            };
+            rootEvent.ext[event.name + "DurationMs"] = Math.floor(event.durationMs);
             return { ...rootEvent };
         }
         if (isRoot &&
@@ -7656,10 +7685,32 @@ class PerformanceClient {
     addFields(fields, correlationId) {
         const event = this.eventsByCorrelationId.get(correlationId);
         if (event) {
-            this.eventsByCorrelationId.set(correlationId, {
+            const staticFields = {};
+            const dynamicFields = {};
+            for (const key in fields) {
+                if (key.startsWith(EXT_FIELD_PREFIX)) {
+                    const dynamicKey = key.slice(EXT_FIELD_PREFIX.length);
+                    const value = fields[key];
+                    if (typeof value === "string" ||
+                        typeof value === "number") {
+                        dynamicFields[dynamicKey] = value;
+                    }
+                }
+                else {
+                    staticFields[key] = fields[key];
+                }
+            }
+            const updatedEvent = {
                 ...event,
-                ...fields,
-            });
+                ...staticFields,
+            };
+            if (Object.keys(dynamicFields).length) {
+                updatedEvent.ext = {
+                    ...updatedEvent.ext,
+                    ...dynamicFields,
+                };
+            }
+            this.eventsByCorrelationId.set(correlationId, updatedEvent);
         }
         else {
             this.logger.trace("0thl6s", correlationId);
@@ -7674,13 +7725,32 @@ class PerformanceClient {
         const event = this.eventsByCorrelationId.get(correlationId);
         if (event) {
             for (const counter in fields) {
-                if (!event.hasOwnProperty(counter)) {
-                    event[counter] = 0;
+                if (counter.startsWith(EXT_FIELD_PREFIX)) {
+                    event.ext = event.ext || {};
+                    // Route to ext sub-object
+                    const dynamicKey = counter.slice(EXT_FIELD_PREFIX.length);
+                    const currentValue = event.ext[dynamicKey];
+                    if (currentValue === undefined) {
+                        event.ext[dynamicKey] = 0;
+                    }
+                    else if (isNaN(Number(currentValue))) {
+                        return;
+                    }
+                    event.ext[dynamicKey] =
+                        (Number(event.ext[dynamicKey]) || 0) +
+                            (fields[counter] ?? 0);
                 }
-                else if (isNaN(Number(event[counter]))) {
-                    return;
+                else {
+                    /* eslint-disable custom-msal/no-dynamic-telemetry-fields -- internal dispatching of static fields by name */
+                    if (!event.hasOwnProperty(counter)) {
+                        event[counter] = 0;
+                    }
+                    else if (isNaN(Number(event[counter]))) {
+                        return;
+                    }
+                    event[counter] += fields[counter];
+                    /* eslint-enable custom-msal/no-dynamic-telemetry-fields */
                 }
-                event[counter] += fields[counter];
             }
         }
         else {
@@ -7773,9 +7843,11 @@ class PerformanceClient {
      */
     truncateIntegralFields(event) {
         this.intFields.forEach((key) => {
+            /* eslint-disable custom-msal/no-dynamic-telemetry-fields -- internal truncation of known integer fields */
             if (key in event && typeof event[key] === "number") {
                 event[key] = Math.floor(event[key]);
             }
+            /* eslint-enable custom-msal/no-dynamic-telemetry-fields */
         });
     }
     /**
@@ -10135,7 +10207,7 @@ const EventType = {
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "5.2.0";
+const version = "5.4.0";
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -16342,6 +16414,10 @@ class StandardController {
         const result = this.acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy).catch(async (refreshTokenError) => {
             const shouldTryToResolveSilently = checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, cacheLookupPolicy);
             if (shouldTryToResolveSilently) {
+                const silentRefreshReason = `${refreshTokenError.errorCode}${refreshTokenError.subError
+                    ? `|${refreshTokenError.subError}`
+                    : ""}`;
+                this.performanceClient.addFields({ silentRefreshReason }, request.correlationId);
                 if (!this.activeIframeRequest) {
                     let _resolve;
                     // Always set the active request tracker immediately after checking it to prevent races