npm - @azure/msal-browser - Versions diffs - 5.5.0 → 5.6.1 - Mend

@azure/msal-browser 5.5.0 → 5.6.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (330) hide show

package/lib/msal-browser.js CHANGED Viewed

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.5.0 2026-03-13 */
+/*! @azure/msal-browser v5.6.1 2026-03-19 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -6,7 +6,7 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msal = {}));
 })(this, (function (exports) { 'use strict';
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -238,7 +238,7 @@
     // Token renewal offset default in seconds
     const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -287,9 +287,10 @@
     const INSTANCE_AWARE = "instance_aware";
     const EAR_JWK = "ear_jwk";
     const EAR_JWE_CRYPTO = "ear_jwe_crypto";
-    const RESOURCE = "resource";
+    const RESOURCE = "resource";
+    const CLI_DATA = "clidata";
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -320,7 +321,7 @@
         return new AuthError(code, additionalMessage || getDefaultErrorMessage$1(code));
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -340,7 +341,7 @@
         return new ClientConfigurationError(errorCode);
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -420,7 +421,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -443,7 +444,7 @@
         return new ClientAuthError(errorCode, additionalMessage);
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -497,7 +498,7 @@
         urlParseError: urlParseError
     });
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -585,7 +586,7 @@
         userCanceled: userCanceled
     });
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -780,7 +781,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1046,6 +1047,12 @@
     function addClientInfo(parameters) {
         parameters.set(CLIENT_INFO, "1");
     }
+    /**
+     * add clidata=1 to request to indicate client data support
+     */
+    function addCliData(parameters) {
+        parameters.set(CLI_DATA, "1");
+    }
     function addInstanceAware(parameters) {
         if (!parameters.has(INSTANCE_AWARE)) {
             parameters.set(INSTANCE_AWARE, "true");
@@ -1152,7 +1159,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1261,7 +1268,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1300,7 +1307,7 @@
         },
     };
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1575,12 +1582,12 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /* eslint-disable header/header */
     const name$1 = "@azure/msal-common";
-    const version$1 = "16.3.0";
+    const version$1 = "16.4.0";
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1600,7 +1607,7 @@
         AzureUsGovernment: "https://login.microsoftonline.us",
     };
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1682,7 +1689,7 @@
         return updatedAccountInfo;
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1762,7 +1769,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1919,7 +1926,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2076,7 +2083,7 @@
         return null;
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2084,7 +2091,7 @@
     const cacheQuotaExceeded = "cache_quota_exceeded";
     const cacheErrorUnknown = "cache_error_unknown";
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2122,7 +2129,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2160,7 +2167,7 @@
         };
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2175,7 +2182,7 @@
         Ciam: 3,
     };
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2197,7 +2204,7 @@
         return null;
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2221,7 +2228,7 @@
         EAR: "EAR",
     };
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /**
      * Returns the AccountInfo interface for this account.
      */
@@ -2396,7 +2403,7 @@
             entity.hasOwnProperty("authorityType"));
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2426,6 +2433,11 @@
          * Gets first tenanted AccountInfo object found based on provided filters
          */
         getAccountInfoFilteredBy(accountFilter, correlationId) {
+            if (Object.keys(accountFilter).length === 0 ||
+                Object.values(accountFilter).every((value) => value === null || value === undefined || value === "")) {
+                this.commonLogger.warning("1skb02", correlationId);
+                return null;
+            }
             const allAccounts = this.getAllAccounts(accountFilter, correlationId);
             if (allAccounts.length > 1) {
                 // If one or more accounts are found, prioritize accounts that have an ID token
@@ -3493,7 +3505,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3543,7 +3555,7 @@
         "redirectBridgeMessageVersion",
     ]);
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3598,7 +3610,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3693,7 +3705,7 @@
         return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3712,7 +3724,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3776,7 +3788,7 @@
         uxNotAllowed: uxNotAllowed
     });
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3844,7 +3856,7 @@
         return new InteractionRequiredAuthError(errorCode, errorMessage);
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3912,7 +3924,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3977,7 +3989,7 @@
         return cachedAtSec > nowSeconds();
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4048,7 +4060,7 @@
     const CacheManagerGetRefreshToken = "cacheManagerGetRefreshToken";
     const SetUserData = "setUserData";
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4141,7 +4153,7 @@
         };
     };
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4221,7 +4233,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4248,7 +4260,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4507,7 +4519,7 @@
         return metadata.expiresAt <= nowSeconds();
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4848,7 +4860,7 @@
         return baseAccount;
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4858,7 +4870,7 @@
         UPN: "UPN",
     };
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4876,7 +4888,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4897,7 +4909,7 @@
         };
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4983,7 +4995,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5014,7 +5026,7 @@
         return new NetworkError(error, httpStatus, responseHeaders);
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5128,7 +5140,7 @@
         return response;
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5140,7 +5152,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5150,7 +5162,7 @@
             response.hasOwnProperty("metadata"));
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5160,7 +5172,7 @@
             response.hasOwnProperty("error_description"));
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5265,7 +5277,7 @@
         },
     };
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6085,7 +6097,7 @@
         };
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6119,7 +6131,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6380,7 +6392,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6605,7 +6617,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6721,7 +6733,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6736,7 +6748,7 @@
         },
     };
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6769,6 +6781,8 @@
         addResponseMode(parameters, request.responseMode);
         // add client_info=1
         addClientInfo(parameters);
+        // add clidata=1
+        addCliData(parameters);
         if (request.prompt) {
             addPrompt(parameters, request.prompt);
             performanceClient?.addFields({ prompt: request.prompt }, correlationId);
@@ -6961,7 +6975,7 @@
         return account.loginHint || account.idTokenClaims?.login_hint || null;
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6994,7 +7008,7 @@
         return Object.prototype.hasOwnProperty.call(params, "resource");
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7052,7 +7066,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -7069,7 +7083,7 @@
         unexpectedError: unexpectedError
     });
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7330,7 +7344,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7351,7 +7365,7 @@
         return new JoseHeaderError(code);
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -7359,7 +7373,7 @@
     const missingKidError = "missing_kid_error";
     const missingAlgError = "missing_alg_error";
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7399,7 +7413,7 @@
         }
     }
-    /*! @azure/msal-common v16.3.0 2026-03-13 */
+    /*! @azure/msal-common v16.4.0 2026-03-19 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7495,8 +7509,10 @@
         else if (error instanceof AuthError) {
             event.errorCode = error.errorCode;
             event.subErrorCode = error.subError;
-            if (error instanceof ServerError ||
-                error instanceof InteractionRequiredAuthError) {
+            if (!event.serverErrorNo &&
+                (error instanceof ServerError ||
+                    error instanceof InteractionRequiredAuthError) &&
+                error.errorNo) {
                 event.serverErrorNo = error.errorNo;
             }
             return;
@@ -10282,7 +10298,7 @@
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "5.5.0";
+    const version = "5.6.1";
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11685,10 +11701,6 @@
      */
     function getAccount(accountFilter, logger, browserStorage, correlationId) {
         logger.trace("0u7b90", correlationId);
-        if (Object.keys(accountFilter).length === 0) {
-            logger.warning("1kz0cu", correlationId);
-            return null;
-        }
         const account = browserStorage.getAccountInfoFilteredBy(accountFilter, correlationId);
         if (account) {
             logger.verbose("0btgll", correlationId);
@@ -13116,6 +13128,62 @@
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
+    const clientDataAccountTypeMapping = new Map([
+        ["e", "AAD"],
+        ["m", "MSA"],
+    ]);
+    /**
+     * Parses the clientdata response parameter from the /authorize endpoint.
+     *
+     * Logically, the clientdata value is URL-encoded and pipe-delimited:
+     *   urlencoded(account_type | error | sub_error | cloud_instance | caller_data_boundary)
+     *
+     * In normal browser flows, this value may already have been URL-decoded
+     * (e.g. by URLSearchParams). This function will only apply decodeURIComponent
+     * when the string appears to contain percent-encoded sequences to avoid
+     * double-decoding.
+     *
+     * @param clientdata - The raw clientdata string from the authorize response
+     * @returns Parsed ClientData object, or null if the input is empty/invalid
+     */
+    function parseClientData(clientdata) {
+        if (!clientdata) {
+            return null;
+        }
+        try {
+            // Only decode when the string appears to contain percent-encoded sequences
+            const shouldDecode = /%(?:[0-9A-Fa-f]{2})/.test(clientdata);
+            const decoded = shouldDecode
+                ? decodeURIComponent(clientdata)
+                : clientdata;
+            const parts = decoded.split("|");
+            if (parts.length < 5) {
+                return null;
+            }
+            return {
+                accountType: clientDataAccountTypeMapping.get(parts[0]?.trim() || "") || "",
+                error: parts[1]?.trim() || "",
+                subError: parts[2]?.trim() || "",
+                cloudInstance: parts[3]?.trim() || "",
+                callerDataBoundary: parts[4]?.trim() || "",
+            };
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Instruments account type, error, and suberror from clientdata
+     */
+    function instrumentClientData(response, correlationId, performanceClient) {
+        const parsed = parseClientData(response.clientdata);
+        parsed?.accountType &&
+            performanceClient.addFields({ accountType: parsed.accountType }, correlationId);
+        parsed?.error &&
+            performanceClient.addFields({ serverErrorNo: parsed.error }, correlationId);
+        parsed?.subError &&
+            performanceClient.addFields({ serverSubErrorNo: parsed.subError }, correlationId);
+    }
     /**
      * Returns map of parameters that are applicable to all calls to /authorize whether using PKCE or EAR
      * @param config
@@ -13285,6 +13353,8 @@
     async function handleResponseCode(request, response, codeVerifier, apiId, config, authClient, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider) {
         // Remove throttle if it exists
         ThrottlingUtils.removeThrottle(browserStorage, config.auth.clientId, request);
+        // Instrument clientdata telemetry fields from the authorize response
+        instrumentClientData(response, request.correlationId, performanceClient);
         if (response.accountId) {
             return invokeAsync(handleResponsePlatformBroker, HandleResponsePlatformBroker, logger, performanceClient, request.correlationId)(request, response.accountId, apiId, config, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider);
         }
@@ -13317,6 +13387,8 @@
     async function handleResponseEAR(request, response, apiId, config, authority, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider) {
         // Remove throttle if it exists
         ThrottlingUtils.removeThrottle(browserStorage, config.auth.clientId, request);
+        // Instrument clientdata telemetry fields from the authorize response
+        instrumentClientData(response, request.correlationId, performanceClient);
         // Validate state & check response for errors
         validateAuthorizationResponse(response, request.state);
         if (!response.ear_jwe) {
@@ -17752,6 +17824,7 @@
          * @returns Promise<boolean> indicating whether this operating context is currently available.
          */
         async initialize(correlationId) {
+            const cid = correlationId || "";
             try {
                 if (typeof window !== "undefined") {
                     if (typeof window.__initializeNestedAppAuth === "function") {
@@ -17769,9 +17842,9 @@
                 }
             }
             catch (ex) {
-                this.logger.infoPii("1mdxyj", correlationId);
+                this.logger.infoPii("1mdxyj", cid);
             }
-            this.logger.info("12jy9a", correlationId);
+            this.logger.info("12jy9a", cid);
             return this.available;
         }
     }
@@ -18063,10 +18136,10 @@
      *
      */
     async function createNestablePublicClientApplication(configuration, correlationId, pcaFactory) {
-        const cid = correlationId || createNewGuid();
         const nestedAppAuth = new NestedAppOperatingContext(configuration);
-        await nestedAppAuth.initialize(cid);
+        await nestedAppAuth.initialize(correlationId);
         if (nestedAppAuth.isAvailable()) {
+            const cid = correlationId || createNewGuid();
             const controller = new NestedAppAuthController(nestedAppAuth);
             const nestablePCA = pcaFactory
                 ? pcaFactory(configuration, controller)