@azure/msal-browser 5.5.0 → 5.6.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (330) hide show
  1. package/dist/app/IPublicClientApplication.mjs +1 -1
  2. package/dist/app/PublicClientApplication.mjs +3 -3
  3. package/dist/app/PublicClientApplication.mjs.map +1 -1
  4. package/dist/broker/nativeBroker/NativeStatusCodes.mjs +1 -1
  5. package/dist/broker/nativeBroker/PlatformAuthDOMHandler.mjs +1 -1
  6. package/dist/broker/nativeBroker/PlatformAuthExtensionHandler.mjs +1 -1
  7. package/dist/broker/nativeBroker/PlatformAuthProvider.mjs +1 -1
  8. package/dist/cache/AccountManager.d.ts.map +1 -1
  9. package/dist/cache/AccountManager.mjs +1 -5
  10. package/dist/cache/AccountManager.mjs.map +1 -1
  11. package/dist/cache/AsyncMemoryStorage.mjs +1 -1
  12. package/dist/cache/BrowserCacheManager.mjs +1 -1
  13. package/dist/cache/CacheHelpers.mjs +1 -1
  14. package/dist/cache/CacheKeys.mjs +1 -1
  15. package/dist/cache/CookieStorage.mjs +1 -1
  16. package/dist/cache/DatabaseStorage.mjs +1 -1
  17. package/dist/cache/EncryptedData.mjs +1 -1
  18. package/dist/cache/LocalStorage.mjs +1 -1
  19. package/dist/cache/MemoryStorage.mjs +1 -1
  20. package/dist/cache/SessionStorage.mjs +1 -1
  21. package/dist/cache/TokenCache.mjs +1 -1
  22. package/dist/config/Configuration.mjs +1 -1
  23. package/dist/controllers/NestedAppAuthController.mjs +1 -1
  24. package/dist/controllers/StandardController.mjs +1 -1
  25. package/dist/crypto/BrowserCrypto.mjs +1 -1
  26. package/dist/crypto/CryptoOps.mjs +1 -1
  27. package/dist/crypto/PkceGenerator.mjs +1 -1
  28. package/dist/crypto/SignedHttpRequest.mjs +1 -1
  29. package/dist/custom-auth-path/app/PublicClientApplication.mjs +1 -1
  30. package/dist/custom-auth-path/broker/nativeBroker/NativeStatusCodes.mjs +1 -1
  31. package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthDOMHandler.mjs +1 -1
  32. package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthExtensionHandler.mjs +1 -1
  33. package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthProvider.mjs +1 -1
  34. package/dist/custom-auth-path/cache/AccountManager.d.ts.map +1 -1
  35. package/dist/custom-auth-path/cache/AccountManager.mjs +1 -5
  36. package/dist/custom-auth-path/cache/AccountManager.mjs.map +1 -1
  37. package/dist/custom-auth-path/cache/AsyncMemoryStorage.mjs +1 -1
  38. package/dist/custom-auth-path/cache/BrowserCacheManager.mjs +1 -1
  39. package/dist/custom-auth-path/cache/CacheHelpers.mjs +1 -1
  40. package/dist/custom-auth-path/cache/CacheKeys.mjs +1 -1
  41. package/dist/custom-auth-path/cache/CookieStorage.mjs +1 -1
  42. package/dist/custom-auth-path/cache/DatabaseStorage.mjs +1 -1
  43. package/dist/custom-auth-path/cache/EncryptedData.mjs +1 -1
  44. package/dist/custom-auth-path/cache/LocalStorage.mjs +1 -1
  45. package/dist/custom-auth-path/cache/MemoryStorage.mjs +1 -1
  46. package/dist/custom-auth-path/cache/SessionStorage.mjs +1 -1
  47. package/dist/custom-auth-path/config/Configuration.mjs +1 -1
  48. package/dist/custom-auth-path/controllers/StandardController.mjs +1 -1
  49. package/dist/custom-auth-path/crypto/BrowserCrypto.mjs +1 -1
  50. package/dist/custom-auth-path/crypto/CryptoOps.mjs +1 -1
  51. package/dist/custom-auth-path/crypto/PkceGenerator.mjs +1 -1
  52. package/dist/custom-auth-path/custom_auth/CustomAuthConstants.d.ts +1 -1
  53. package/dist/custom-auth-path/custom_auth/CustomAuthConstants.mjs +1 -1
  54. package/dist/custom-auth-path/custom_auth/CustomAuthPublicClientApplication.mjs +1 -1
  55. package/dist/custom-auth-path/custom_auth/controller/CustomAuthStandardController.mjs +1 -1
  56. package/dist/custom-auth-path/custom_auth/core/CustomAuthAuthority.mjs +1 -1
  57. package/dist/custom-auth-path/custom_auth/core/auth_flow/AuthFlowErrorBase.mjs +1 -1
  58. package/dist/custom-auth-path/custom_auth/core/auth_flow/AuthFlowResultBase.mjs +1 -1
  59. package/dist/custom-auth-path/custom_auth/core/auth_flow/AuthFlowState.mjs +1 -1
  60. package/dist/custom-auth-path/custom_auth/core/auth_flow/AuthFlowStateTypes.mjs +1 -1
  61. package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/error_type/AuthMethodRegistrationError.mjs +1 -1
  62. package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/result/AuthMethodRegistrationChallengeMethodResult.mjs +1 -1
  63. package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/result/AuthMethodRegistrationSubmitChallengeResult.mjs +1 -1
  64. package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationCompletedState.mjs +1 -1
  65. package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationFailedState.mjs +1 -1
  66. package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.mjs +1 -1
  67. package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/error_type/MfaError.mjs +1 -1
  68. package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/result/MfaRequestChallengeResult.mjs +1 -1
  69. package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/result/MfaSubmitChallengeResult.mjs +1 -1
  70. package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/state/MfaCompletedState.mjs +1 -1
  71. package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/state/MfaFailedState.mjs +1 -1
  72. package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/state/MfaState.mjs +1 -1
  73. package/dist/custom-auth-path/custom_auth/core/error/CustomAuthApiError.mjs +1 -1
  74. package/dist/custom-auth-path/custom_auth/core/error/CustomAuthError.mjs +1 -1
  75. package/dist/custom-auth-path/custom_auth/core/error/HttpError.mjs +1 -1
  76. package/dist/custom-auth-path/custom_auth/core/error/HttpErrorCodes.mjs +1 -1
  77. package/dist/custom-auth-path/custom_auth/core/error/InvalidArgumentError.mjs +1 -1
  78. package/dist/custom-auth-path/custom_auth/core/error/InvalidConfigurationError.mjs +1 -1
  79. package/dist/custom-auth-path/custom_auth/core/error/InvalidConfigurationErrorCodes.mjs +1 -1
  80. package/dist/custom-auth-path/custom_auth/core/error/MethodNotImplementedError.mjs +1 -1
  81. package/dist/custom-auth-path/custom_auth/core/error/MsalCustomAuthError.mjs +1 -1
  82. package/dist/custom-auth-path/custom_auth/core/error/NoCachedAccountFoundError.mjs +1 -1
  83. package/dist/custom-auth-path/custom_auth/core/error/ParsedUrlError.mjs +1 -1
  84. package/dist/custom-auth-path/custom_auth/core/error/ParsedUrlErrorCodes.mjs +1 -1
  85. package/dist/custom-auth-path/custom_auth/core/error/UnexpectedError.mjs +1 -1
  86. package/dist/custom-auth-path/custom_auth/core/error/UnsupportedEnvironmentError.mjs +1 -1
  87. package/dist/custom-auth-path/custom_auth/core/error/UserAccountAttributeError.mjs +1 -1
  88. package/dist/custom-auth-path/custom_auth/core/error/UserAlreadySignedInError.mjs +1 -1
  89. package/dist/custom-auth-path/custom_auth/core/interaction_client/CustomAuthInteractionClientBase.mjs +1 -1
  90. package/dist/custom-auth-path/custom_auth/core/interaction_client/CustomAuthInterationClientFactory.mjs +1 -1
  91. package/dist/custom-auth-path/custom_auth/core/interaction_client/jit/JitClient.mjs +1 -1
  92. package/dist/custom-auth-path/custom_auth/core/interaction_client/jit/result/JitActionResult.mjs +1 -1
  93. package/dist/custom-auth-path/custom_auth/core/interaction_client/mfa/MfaClient.mjs +1 -1
  94. package/dist/custom-auth-path/custom_auth/core/interaction_client/mfa/result/MfaActionResult.mjs +1 -1
  95. package/dist/custom-auth-path/custom_auth/core/network_client/custom_auth_api/BaseApiClient.mjs +1 -1
  96. package/dist/custom-auth-path/custom_auth/core/network_client/custom_auth_api/CustomAuthApiClient.mjs +1 -1
  97. package/dist/custom-auth-path/custom_auth/core/network_client/custom_auth_api/CustomAuthApiEndpoint.mjs +1 -1
  98. package/dist/custom-auth-path/custom_auth/core/network_client/custom_auth_api/RegisterApiClient.mjs +1 -1
  99. package/dist/custom-auth-path/custom_auth/core/network_client/custom_auth_api/ResetPasswordApiClient.mjs +1 -1
  100. package/dist/custom-auth-path/custom_auth/core/network_client/custom_auth_api/SignInApiClient.mjs +1 -1
  101. package/dist/custom-auth-path/custom_auth/core/network_client/custom_auth_api/SignupApiClient.mjs +1 -1
  102. package/dist/custom-auth-path/custom_auth/core/network_client/custom_auth_api/types/ApiErrorCodes.mjs +1 -1
  103. package/dist/custom-auth-path/custom_auth/core/network_client/custom_auth_api/types/ApiSuberrors.mjs +1 -1
  104. package/dist/custom-auth-path/custom_auth/core/network_client/http_client/FetchHttpClient.mjs +1 -1
  105. package/dist/custom-auth-path/custom_auth/core/network_client/http_client/IHttpClient.mjs +1 -1
  106. package/dist/custom-auth-path/custom_auth/core/telemetry/PublicApiId.mjs +1 -1
  107. package/dist/custom-auth-path/custom_auth/core/utils/ArgumentValidator.mjs +1 -1
  108. package/dist/custom-auth-path/custom_auth/core/utils/UrlUtils.mjs +1 -1
  109. package/dist/custom-auth-path/custom_auth/get_account/auth_flow/CustomAuthAccountData.mjs +1 -1
  110. package/dist/custom-auth-path/custom_auth/get_account/auth_flow/error_type/GetAccountError.mjs +1 -1
  111. package/dist/custom-auth-path/custom_auth/get_account/auth_flow/result/GetAccessTokenResult.mjs +1 -1
  112. package/dist/custom-auth-path/custom_auth/get_account/auth_flow/result/GetAccountResult.mjs +1 -1
  113. package/dist/custom-auth-path/custom_auth/get_account/auth_flow/result/SignOutResult.mjs +1 -1
  114. package/dist/custom-auth-path/custom_auth/get_account/auth_flow/state/GetAccessTokenState.mjs +1 -1
  115. package/dist/custom-auth-path/custom_auth/get_account/auth_flow/state/GetAccountState.mjs +1 -1
  116. package/dist/custom-auth-path/custom_auth/get_account/auth_flow/state/SignOutState.mjs +1 -1
  117. package/dist/custom-auth-path/custom_auth/get_account/interaction_client/CustomAuthSilentCacheClient.mjs +1 -1
  118. package/dist/custom-auth-path/custom_auth/index.mjs +1 -1
  119. package/dist/custom-auth-path/custom_auth/operating_context/CustomAuthOperatingContext.mjs +1 -1
  120. package/dist/custom-auth-path/custom_auth/reset_password/auth_flow/error_type/ResetPasswordError.mjs +1 -1
  121. package/dist/custom-auth-path/custom_auth/reset_password/auth_flow/result/ResetPasswordResendCodeResult.mjs +1 -1
  122. package/dist/custom-auth-path/custom_auth/reset_password/auth_flow/result/ResetPasswordStartResult.mjs +1 -1
  123. package/dist/custom-auth-path/custom_auth/reset_password/auth_flow/result/ResetPasswordSubmitCodeResult.mjs +1 -1
  124. package/dist/custom-auth-path/custom_auth/reset_password/auth_flow/result/ResetPasswordSubmitPasswordResult.mjs +1 -1
  125. package/dist/custom-auth-path/custom_auth/reset_password/auth_flow/state/ResetPasswordCodeRequiredState.mjs +1 -1
  126. package/dist/custom-auth-path/custom_auth/reset_password/auth_flow/state/ResetPasswordCompletedState.mjs +1 -1
  127. package/dist/custom-auth-path/custom_auth/reset_password/auth_flow/state/ResetPasswordFailedState.mjs +1 -1
  128. package/dist/custom-auth-path/custom_auth/reset_password/auth_flow/state/ResetPasswordPasswordRequiredState.mjs +1 -1
  129. package/dist/custom-auth-path/custom_auth/reset_password/auth_flow/state/ResetPasswordState.mjs +1 -1
  130. package/dist/custom-auth-path/custom_auth/reset_password/interaction_client/ResetPasswordClient.mjs +1 -1
  131. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/SignInScenario.mjs +1 -1
  132. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/error_type/SignInError.mjs +1 -1
  133. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/result/SignInResendCodeResult.mjs +1 -1
  134. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/result/SignInResult.mjs +1 -1
  135. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/result/SignInSubmitCodeResult.mjs +1 -1
  136. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/result/SignInSubmitPasswordResult.mjs +1 -1
  137. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/state/SignInCodeRequiredState.mjs +1 -1
  138. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/state/SignInCompletedState.mjs +1 -1
  139. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/state/SignInContinuationState.mjs +1 -1
  140. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/state/SignInFailedState.mjs +1 -1
  141. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/state/SignInPasswordRequiredState.mjs +1 -1
  142. package/dist/custom-auth-path/custom_auth/sign_in/auth_flow/state/SignInState.mjs +1 -1
  143. package/dist/custom-auth-path/custom_auth/sign_in/interaction_client/SignInClient.mjs +1 -1
  144. package/dist/custom-auth-path/custom_auth/sign_in/interaction_client/result/SignInActionResult.mjs +1 -1
  145. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/error_type/SignUpError.mjs +1 -1
  146. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/result/SignUpResendCodeResult.mjs +1 -1
  147. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/result/SignUpResult.mjs +1 -1
  148. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/result/SignUpSubmitAttributesResult.mjs +1 -1
  149. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/result/SignUpSubmitCodeResult.mjs +1 -1
  150. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/result/SignUpSubmitPasswordResult.mjs +1 -1
  151. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/state/SignUpAttributesRequiredState.mjs +1 -1
  152. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/state/SignUpCodeRequiredState.mjs +1 -1
  153. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/state/SignUpCompletedState.mjs +1 -1
  154. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/state/SignUpFailedState.mjs +1 -1
  155. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/state/SignUpPasswordRequiredState.mjs +1 -1
  156. package/dist/custom-auth-path/custom_auth/sign_up/auth_flow/state/SignUpState.mjs +1 -1
  157. package/dist/custom-auth-path/custom_auth/sign_up/interaction_client/SignUpClient.mjs +1 -1
  158. package/dist/custom-auth-path/custom_auth/sign_up/interaction_client/result/SignUpActionResult.mjs +1 -1
  159. package/dist/custom-auth-path/encode/Base64Decode.mjs +1 -1
  160. package/dist/custom-auth-path/encode/Base64Encode.mjs +1 -1
  161. package/dist/custom-auth-path/error/BrowserAuthError.mjs +1 -1
  162. package/dist/custom-auth-path/error/BrowserAuthErrorCodes.mjs +1 -1
  163. package/dist/custom-auth-path/error/BrowserConfigurationAuthError.mjs +1 -1
  164. package/dist/custom-auth-path/error/BrowserConfigurationAuthErrorCodes.mjs +1 -1
  165. package/dist/custom-auth-path/error/NativeAuthError.mjs +1 -1
  166. package/dist/custom-auth-path/error/NativeAuthErrorCodes.mjs +1 -1
  167. package/dist/custom-auth-path/event/EventHandler.mjs +1 -1
  168. package/dist/custom-auth-path/event/EventType.mjs +1 -1
  169. package/dist/custom-auth-path/interaction_client/BaseInteractionClient.mjs +1 -1
  170. package/dist/custom-auth-path/interaction_client/HybridSpaAuthorizationCodeClient.mjs +1 -1
  171. package/dist/custom-auth-path/interaction_client/PlatformAuthInteractionClient.mjs +1 -1
  172. package/dist/custom-auth-path/interaction_client/PopupClient.mjs +1 -1
  173. package/dist/custom-auth-path/interaction_client/RedirectClient.mjs +1 -1
  174. package/dist/custom-auth-path/interaction_client/SilentAuthCodeClient.mjs +1 -1
  175. package/dist/custom-auth-path/interaction_client/SilentCacheClient.mjs +1 -1
  176. package/dist/custom-auth-path/interaction_client/SilentIframeClient.mjs +1 -1
  177. package/dist/custom-auth-path/interaction_client/SilentRefreshClient.mjs +1 -1
  178. package/dist/custom-auth-path/interaction_client/StandardInteractionClient.mjs +1 -1
  179. package/dist/custom-auth-path/interaction_handler/InteractionHandler.mjs +1 -1
  180. package/dist/custom-auth-path/interaction_handler/SilentHandler.mjs +1 -1
  181. package/dist/custom-auth-path/log-strings-mapping.json +3 -7
  182. package/dist/custom-auth-path/navigation/NavigationClient.mjs +1 -1
  183. package/dist/custom-auth-path/network/FetchClient.mjs +1 -1
  184. package/dist/custom-auth-path/operatingcontext/BaseOperatingContext.d.ts +1 -1
  185. package/dist/custom-auth-path/operatingcontext/BaseOperatingContext.d.ts.map +1 -1
  186. package/dist/custom-auth-path/operatingcontext/BaseOperatingContext.mjs +1 -1
  187. package/dist/custom-auth-path/operatingcontext/NestedAppOperatingContext.d.ts +1 -1
  188. package/dist/custom-auth-path/operatingcontext/NestedAppOperatingContext.d.ts.map +1 -1
  189. package/dist/custom-auth-path/operatingcontext/StandardOperatingContext.d.ts +1 -1
  190. package/dist/custom-auth-path/operatingcontext/StandardOperatingContext.d.ts.map +1 -1
  191. package/dist/custom-auth-path/operatingcontext/StandardOperatingContext.mjs +1 -1
  192. package/dist/custom-auth-path/operatingcontext/StandardOperatingContext.mjs.map +1 -1
  193. package/dist/custom-auth-path/packageMetadata.d.ts +1 -1
  194. package/dist/custom-auth-path/packageMetadata.mjs +2 -2
  195. package/dist/custom-auth-path/protocol/Authorize.d.ts +33 -0
  196. package/dist/custom-auth-path/protocol/Authorize.d.ts.map +1 -1
  197. package/dist/custom-auth-path/protocol/Authorize.mjs +62 -2
  198. package/dist/custom-auth-path/protocol/Authorize.mjs.map +1 -1
  199. package/dist/custom-auth-path/request/RequestHelpers.mjs +1 -1
  200. package/dist/custom-auth-path/response/ResponseHandler.mjs +1 -1
  201. package/dist/custom-auth-path/telemetry/BrowserPerformanceEvents.mjs +1 -1
  202. package/dist/custom-auth-path/telemetry/BrowserRootPerformanceEvents.mjs +1 -1
  203. package/dist/custom-auth-path/utils/BrowserConstants.mjs +1 -1
  204. package/dist/custom-auth-path/utils/BrowserProtocolUtils.mjs +1 -1
  205. package/dist/custom-auth-path/utils/BrowserUtils.mjs +1 -1
  206. package/dist/custom-auth-path/utils/Helpers.mjs +1 -1
  207. package/dist/custom-auth-path/utils/MsalFrameStatsUtils.mjs +1 -1
  208. package/dist/custom_auth/CustomAuthConstants.d.ts +1 -1
  209. package/dist/encode/Base64Decode.mjs +1 -1
  210. package/dist/encode/Base64Encode.mjs +1 -1
  211. package/dist/error/BrowserAuthError.mjs +1 -1
  212. package/dist/error/BrowserAuthErrorCodes.mjs +1 -1
  213. package/dist/error/BrowserConfigurationAuthError.mjs +1 -1
  214. package/dist/error/BrowserConfigurationAuthErrorCodes.mjs +1 -1
  215. package/dist/error/NativeAuthError.mjs +1 -1
  216. package/dist/error/NativeAuthErrorCodes.mjs +1 -1
  217. package/dist/error/NestedAppAuthError.mjs +1 -1
  218. package/dist/event/EventHandler.mjs +1 -1
  219. package/dist/event/EventMessage.mjs +1 -1
  220. package/dist/event/EventType.mjs +1 -1
  221. package/dist/index.mjs +1 -1
  222. package/dist/interaction_client/BaseInteractionClient.mjs +1 -1
  223. package/dist/interaction_client/HybridSpaAuthorizationCodeClient.mjs +1 -1
  224. package/dist/interaction_client/PlatformAuthInteractionClient.mjs +1 -1
  225. package/dist/interaction_client/PopupClient.mjs +1 -1
  226. package/dist/interaction_client/RedirectClient.mjs +1 -1
  227. package/dist/interaction_client/SilentAuthCodeClient.mjs +1 -1
  228. package/dist/interaction_client/SilentCacheClient.mjs +1 -1
  229. package/dist/interaction_client/SilentIframeClient.mjs +1 -1
  230. package/dist/interaction_client/SilentRefreshClient.mjs +1 -1
  231. package/dist/interaction_client/StandardInteractionClient.mjs +1 -1
  232. package/dist/interaction_handler/InteractionHandler.mjs +1 -1
  233. package/dist/interaction_handler/SilentHandler.mjs +1 -1
  234. package/dist/log-strings-mapping.json +3 -7
  235. package/dist/naa/BridgeError.mjs +1 -1
  236. package/dist/naa/BridgeProxy.mjs +1 -1
  237. package/dist/naa/BridgeStatusCode.mjs +1 -1
  238. package/dist/naa/mapping/NestedAppAuthAdapter.mjs +1 -1
  239. package/dist/navigation/NavigationClient.mjs +1 -1
  240. package/dist/network/FetchClient.mjs +1 -1
  241. package/dist/operatingcontext/BaseOperatingContext.d.ts +1 -1
  242. package/dist/operatingcontext/BaseOperatingContext.d.ts.map +1 -1
  243. package/dist/operatingcontext/BaseOperatingContext.mjs +1 -1
  244. package/dist/operatingcontext/NestedAppOperatingContext.d.ts +1 -1
  245. package/dist/operatingcontext/NestedAppOperatingContext.d.ts.map +1 -1
  246. package/dist/operatingcontext/NestedAppOperatingContext.mjs +4 -3
  247. package/dist/operatingcontext/NestedAppOperatingContext.mjs.map +1 -1
  248. package/dist/operatingcontext/StandardOperatingContext.d.ts +1 -1
  249. package/dist/operatingcontext/StandardOperatingContext.d.ts.map +1 -1
  250. package/dist/operatingcontext/StandardOperatingContext.mjs +1 -1
  251. package/dist/operatingcontext/StandardOperatingContext.mjs.map +1 -1
  252. package/dist/packageMetadata.d.ts +1 -1
  253. package/dist/packageMetadata.mjs +2 -2
  254. package/dist/protocol/Authorize.d.ts +33 -0
  255. package/dist/protocol/Authorize.d.ts.map +1 -1
  256. package/dist/protocol/Authorize.mjs +62 -2
  257. package/dist/protocol/Authorize.mjs.map +1 -1
  258. package/dist/redirect-bridge/cache/AccountManager.d.ts.map +1 -1
  259. package/dist/redirect-bridge/cache/CacheKeys.mjs +1 -1
  260. package/dist/redirect-bridge/config/Configuration.mjs +1 -1
  261. package/dist/redirect-bridge/custom_auth/CustomAuthConstants.d.ts +1 -1
  262. package/dist/redirect-bridge/encode/Base64Decode.mjs +1 -1
  263. package/dist/redirect-bridge/error/BrowserAuthError.mjs +1 -1
  264. package/dist/redirect-bridge/error/BrowserAuthErrorCodes.mjs +1 -1
  265. package/dist/redirect-bridge/navigation/NavigationClient.mjs +1 -1
  266. package/dist/redirect-bridge/operatingcontext/BaseOperatingContext.d.ts +1 -1
  267. package/dist/redirect-bridge/operatingcontext/BaseOperatingContext.d.ts.map +1 -1
  268. package/dist/redirect-bridge/operatingcontext/NestedAppOperatingContext.d.ts +1 -1
  269. package/dist/redirect-bridge/operatingcontext/NestedAppOperatingContext.d.ts.map +1 -1
  270. package/dist/redirect-bridge/operatingcontext/StandardOperatingContext.d.ts +1 -1
  271. package/dist/redirect-bridge/operatingcontext/StandardOperatingContext.d.ts.map +1 -1
  272. package/dist/redirect-bridge/packageMetadata.d.ts +1 -1
  273. package/dist/redirect-bridge/protocol/Authorize.d.ts +33 -0
  274. package/dist/redirect-bridge/protocol/Authorize.d.ts.map +1 -1
  275. package/dist/redirect-bridge/redirect_bridge/index.mjs +1 -1
  276. package/dist/redirect-bridge/utils/BrowserConstants.mjs +1 -1
  277. package/dist/redirect-bridge/utils/BrowserUtils.mjs +1 -1
  278. package/dist/request/RequestHelpers.mjs +1 -1
  279. package/dist/response/ResponseHandler.mjs +1 -1
  280. package/dist/telemetry/BrowserPerformanceClient.mjs +1 -1
  281. package/dist/telemetry/BrowserPerformanceEvents.mjs +1 -1
  282. package/dist/telemetry/BrowserPerformanceMeasurement.mjs +1 -1
  283. package/dist/telemetry/BrowserRootPerformanceEvents.mjs +1 -1
  284. package/dist/utils/BrowserConstants.mjs +1 -1
  285. package/dist/utils/BrowserProtocolUtils.mjs +1 -1
  286. package/dist/utils/BrowserUtils.mjs +1 -1
  287. package/dist/utils/Helpers.mjs +1 -1
  288. package/dist/utils/MsalFrameStatsUtils.mjs +1 -1
  289. package/lib/custom-auth-path/log-strings-mapping.json +3 -7
  290. package/lib/custom-auth-path/msal-custom-auth.cjs +145 -74
  291. package/lib/custom-auth-path/msal-custom-auth.cjs.map +1 -1
  292. package/lib/custom-auth-path/types/cache/AccountManager.d.ts.map +1 -1
  293. package/lib/custom-auth-path/types/custom_auth/CustomAuthConstants.d.ts +1 -1
  294. package/lib/custom-auth-path/types/operatingcontext/BaseOperatingContext.d.ts +1 -1
  295. package/lib/custom-auth-path/types/operatingcontext/BaseOperatingContext.d.ts.map +1 -1
  296. package/lib/custom-auth-path/types/operatingcontext/NestedAppOperatingContext.d.ts +1 -1
  297. package/lib/custom-auth-path/types/operatingcontext/NestedAppOperatingContext.d.ts.map +1 -1
  298. package/lib/custom-auth-path/types/operatingcontext/StandardOperatingContext.d.ts +1 -1
  299. package/lib/custom-auth-path/types/operatingcontext/StandardOperatingContext.d.ts.map +1 -1
  300. package/lib/custom-auth-path/types/packageMetadata.d.ts +1 -1
  301. package/lib/custom-auth-path/types/protocol/Authorize.d.ts +33 -0
  302. package/lib/custom-auth-path/types/protocol/Authorize.d.ts.map +1 -1
  303. package/lib/log-strings-mapping.json +3 -7
  304. package/lib/msal-browser.cjs +153 -80
  305. package/lib/msal-browser.cjs.map +1 -1
  306. package/lib/msal-browser.js +153 -80
  307. package/lib/msal-browser.js.map +1 -1
  308. package/lib/msal-browser.min.js +2 -2
  309. package/lib/redirect-bridge/msal-redirect-bridge.js +10 -10
  310. package/lib/redirect-bridge/msal-redirect-bridge.js.map +1 -1
  311. package/lib/redirect-bridge/msal-redirect-bridge.min.js +1 -1
  312. package/lib/types/cache/AccountManager.d.ts.map +1 -1
  313. package/lib/types/custom_auth/CustomAuthConstants.d.ts +1 -1
  314. package/lib/types/operatingcontext/BaseOperatingContext.d.ts +1 -1
  315. package/lib/types/operatingcontext/BaseOperatingContext.d.ts.map +1 -1
  316. package/lib/types/operatingcontext/NestedAppOperatingContext.d.ts +1 -1
  317. package/lib/types/operatingcontext/NestedAppOperatingContext.d.ts.map +1 -1
  318. package/lib/types/operatingcontext/StandardOperatingContext.d.ts +1 -1
  319. package/lib/types/operatingcontext/StandardOperatingContext.d.ts.map +1 -1
  320. package/lib/types/packageMetadata.d.ts +1 -1
  321. package/lib/types/protocol/Authorize.d.ts +33 -0
  322. package/lib/types/protocol/Authorize.d.ts.map +1 -1
  323. package/package.json +2 -2
  324. package/src/app/PublicClientApplication.ts +2 -2
  325. package/src/cache/AccountManager.ts +0 -5
  326. package/src/operatingcontext/BaseOperatingContext.ts +1 -1
  327. package/src/operatingcontext/NestedAppOperatingContext.ts +4 -3
  328. package/src/operatingcontext/StandardOperatingContext.ts +1 -1
  329. package/src/packageMetadata.ts +1 -1
  330. package/src/protocol/Authorize.ts +100 -0
@@ -1,8 +1,8 @@
1
- /*! @azure/msal-browser v5.5.0 2026-03-13 */
1
+ /*! @azure/msal-browser v5.6.1 2026-03-19 */
2
2
  'use strict';
3
3
  'use strict';
4
4
 
5
- /*! @azure/msal-common v16.3.0 2026-03-13 */
5
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
6
6
  /*
7
7
  * Copyright (c) Microsoft Corporation. All rights reserved.
8
8
  * Licensed under the MIT License.
@@ -229,7 +229,7 @@ const JsonWebTokenTypes = {
229
229
  // Token renewal offset default in seconds
230
230
  const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
231
231
 
232
- /*! @azure/msal-common v16.3.0 2026-03-13 */
232
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
233
233
  /*
234
234
  * Copyright (c) Microsoft Corporation. All rights reserved.
235
235
  * Licensed under the MIT License.
@@ -278,9 +278,10 @@ const BROKER_REDIRECT_URI = "brk_redirect_uri";
278
278
  const INSTANCE_AWARE = "instance_aware";
279
279
  const EAR_JWK = "ear_jwk";
280
280
  const EAR_JWE_CRYPTO = "ear_jwe_crypto";
281
- const RESOURCE = "resource";
281
+ const RESOURCE = "resource";
282
+ const CLI_DATA = "clidata";
282
283
 
283
- /*! @azure/msal-common v16.3.0 2026-03-13 */
284
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
284
285
  /*
285
286
  * Copyright (c) Microsoft Corporation. All rights reserved.
286
287
  * Licensed under the MIT License.
@@ -311,7 +312,7 @@ function createAuthError(code, additionalMessage) {
311
312
  return new AuthError(code, additionalMessage || getDefaultErrorMessage$1(code));
312
313
  }
313
314
 
314
- /*! @azure/msal-common v16.3.0 2026-03-13 */
315
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
315
316
 
316
317
  /*
317
318
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -331,7 +332,7 @@ function createClientConfigurationError(errorCode) {
331
332
  return new ClientConfigurationError(errorCode);
332
333
  }
333
334
 
334
- /*! @azure/msal-common v16.3.0 2026-03-13 */
335
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
335
336
  /*
336
337
  * Copyright (c) Microsoft Corporation. All rights reserved.
337
338
  * Licensed under the MIT License.
@@ -411,7 +412,7 @@ class StringUtils {
411
412
  }
412
413
  }
413
414
 
414
- /*! @azure/msal-common v16.3.0 2026-03-13 */
415
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
415
416
 
416
417
  /*
417
418
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -434,7 +435,7 @@ function createClientAuthError(errorCode, additionalMessage) {
434
435
  return new ClientAuthError(errorCode, additionalMessage);
435
436
  }
436
437
 
437
- /*! @azure/msal-common v16.3.0 2026-03-13 */
438
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
438
439
  /*
439
440
  * Copyright (c) Microsoft Corporation. All rights reserved.
440
441
  * Licensed under the MIT License.
@@ -458,7 +459,7 @@ const cannotAllowPlatformBroker = "cannot_allow_platform_broker";
458
459
  const authorityMismatch = "authority_mismatch";
459
460
  const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
460
461
 
461
- /*! @azure/msal-common v16.3.0 2026-03-13 */
462
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
462
463
  /*
463
464
  * Copyright (c) Microsoft Corporation. All rights reserved.
464
465
  * Licensed under the MIT License.
@@ -497,7 +498,7 @@ const methodNotImplemented = "method_not_implemented";
497
498
  const resourceParameterRequired = "resource_parameter_required";
498
499
  const misplacedResourceParam = "misplaced_resource_parameter";
499
500
 
500
- /*! @azure/msal-common v16.3.0 2026-03-13 */
501
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
501
502
 
502
503
  /*
503
504
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -692,7 +693,7 @@ class ScopeSet {
692
693
  }
693
694
  }
694
695
 
695
- /*! @azure/msal-common v16.3.0 2026-03-13 */
696
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
696
697
 
697
698
  /*
698
699
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -958,6 +959,12 @@ function addGrantType(parameters, grantType) {
958
959
  function addClientInfo(parameters) {
959
960
  parameters.set(CLIENT_INFO, "1");
960
961
  }
962
+ /**
963
+ * add clidata=1 to request to indicate client data support
964
+ */
965
+ function addCliData(parameters) {
966
+ parameters.set(CLI_DATA, "1");
967
+ }
961
968
  function addInstanceAware(parameters) {
962
969
  if (!parameters.has(INSTANCE_AWARE)) {
963
970
  parameters.set(INSTANCE_AWARE, "true");
@@ -1064,7 +1071,7 @@ function addResource(parameters, resource) {
1064
1071
  }
1065
1072
  }
1066
1073
 
1067
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1074
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1068
1075
 
1069
1076
  /*
1070
1077
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1173,7 +1180,7 @@ function normalizeUrlForComparison(url) {
1173
1180
  }
1174
1181
  }
1175
1182
 
1176
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1183
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1177
1184
 
1178
1185
  /*
1179
1186
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1212,7 +1219,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
1212
1219
  },
1213
1220
  };
1214
1221
 
1215
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1222
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1216
1223
  /*
1217
1224
  * Copyright (c) Microsoft Corporation. All rights reserved.
1218
1225
  * Licensed under the MIT License.
@@ -1473,12 +1480,12 @@ class Logger {
1473
1480
  }
1474
1481
  }
1475
1482
 
1476
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1483
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1477
1484
  /* eslint-disable header/header */
1478
1485
  const name$1 = "@azure/msal-common";
1479
- const version$1 = "16.3.0";
1486
+ const version$1 = "16.4.0";
1480
1487
 
1481
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1488
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1482
1489
  /*
1483
1490
  * Copyright (c) Microsoft Corporation. All rights reserved.
1484
1491
  * Licensed under the MIT License.
@@ -1487,7 +1494,7 @@ const AzureCloudInstance = {
1487
1494
  // AzureCloudInstance is not specified.
1488
1495
  None: "none"};
1489
1496
 
1490
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1497
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1491
1498
  /*
1492
1499
  * Copyright (c) Microsoft Corporation. All rights reserved.
1493
1500
  * Licensed under the MIT License.
@@ -1569,7 +1576,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
1569
1576
  return updatedAccountInfo;
1570
1577
  }
1571
1578
 
1572
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1579
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1573
1580
 
1574
1581
  /*
1575
1582
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1649,7 +1656,7 @@ function checkMaxAge(authTime, maxAge) {
1649
1656
  }
1650
1657
  }
1651
1658
 
1652
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1659
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1653
1660
 
1654
1661
  /*
1655
1662
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1806,7 +1813,7 @@ class UrlString {
1806
1813
  }
1807
1814
  }
1808
1815
 
1809
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1816
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1810
1817
 
1811
1818
  /*
1812
1819
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1963,7 +1970,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
1963
1970
  return null;
1964
1971
  }
1965
1972
 
1966
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1973
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1967
1974
  /*
1968
1975
  * Copyright (c) Microsoft Corporation. All rights reserved.
1969
1976
  * Licensed under the MIT License.
@@ -1971,7 +1978,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
1971
1978
  const cacheQuotaExceeded = "cache_quota_exceeded";
1972
1979
  const cacheErrorUnknown = "cache_error_unknown";
1973
1980
 
1974
- /*! @azure/msal-common v16.3.0 2026-03-13 */
1981
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
1975
1982
 
1976
1983
  /*
1977
1984
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2009,7 +2016,7 @@ function createCacheError(e) {
2009
2016
  }
2010
2017
  }
2011
2018
 
2012
- /*! @azure/msal-common v16.3.0 2026-03-13 */
2019
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
2013
2020
 
2014
2021
  /*
2015
2022
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2047,7 +2054,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
2047
2054
  };
2048
2055
  }
2049
2056
 
2050
- /*! @azure/msal-common v16.3.0 2026-03-13 */
2057
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
2051
2058
  /*
2052
2059
  * Copyright (c) Microsoft Corporation. All rights reserved.
2053
2060
  * Licensed under the MIT License.
@@ -2062,7 +2069,7 @@ const AuthorityType = {
2062
2069
  Ciam: 3,
2063
2070
  };
2064
2071
 
2065
- /*! @azure/msal-common v16.3.0 2026-03-13 */
2072
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
2066
2073
  /*
2067
2074
  * Copyright (c) Microsoft Corporation. All rights reserved.
2068
2075
  * Licensed under the MIT License.
@@ -2084,7 +2091,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
2084
2091
  return null;
2085
2092
  }
2086
2093
 
2087
- /*! @azure/msal-common v16.3.0 2026-03-13 */
2094
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
2088
2095
  /*
2089
2096
  * Copyright (c) Microsoft Corporation. All rights reserved.
2090
2097
  * Licensed under the MIT License.
@@ -2108,7 +2115,7 @@ const ProtocolMode = {
2108
2115
  EAR: "EAR",
2109
2116
  };
2110
2117
 
2111
- /*! @azure/msal-common v16.3.0 2026-03-13 */
2118
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
2112
2119
  /**
2113
2120
  * Returns the AccountInfo interface for this account.
2114
2121
  */
@@ -2283,7 +2290,7 @@ function isAccountEntity(entity) {
2283
2290
  entity.hasOwnProperty("authorityType"));
2284
2291
  }
2285
2292
 
2286
- /*! @azure/msal-common v16.3.0 2026-03-13 */
2293
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
2287
2294
 
2288
2295
  /*
2289
2296
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2313,6 +2320,11 @@ class CacheManager {
2313
2320
  * Gets first tenanted AccountInfo object found based on provided filters
2314
2321
  */
2315
2322
  getAccountInfoFilteredBy(accountFilter, correlationId) {
2323
+ if (Object.keys(accountFilter).length === 0 ||
2324
+ Object.values(accountFilter).every((value) => value === null || value === undefined || value === "")) {
2325
+ this.commonLogger.warning("1skb02", correlationId);
2326
+ return null;
2327
+ }
2316
2328
  const allAccounts = this.getAllAccounts(accountFilter, correlationId);
2317
2329
  if (allAccounts.length > 1) {
2318
2330
  // If one or more accounts are found, prioritize accounts that have an ID token
@@ -3379,7 +3391,7 @@ class DefaultStorageClass extends CacheManager {
3379
3391
  }
3380
3392
  }
3381
3393
 
3382
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3394
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3383
3395
  /*
3384
3396
  * Copyright (c) Microsoft Corporation. All rights reserved.
3385
3397
  * Licensed under the MIT License.
@@ -3393,7 +3405,7 @@ class DefaultStorageClass extends CacheManager {
3393
3405
  const PerformanceEventStatus = {
3394
3406
  InProgress: 1};
3395
3407
 
3396
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3408
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3397
3409
 
3398
3410
  /*
3399
3411
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3448,7 +3460,7 @@ class StubPerformanceClient {
3448
3460
  }
3449
3461
  }
3450
3462
 
3451
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3463
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3452
3464
 
3453
3465
  /*
3454
3466
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3543,7 +3555,7 @@ function isOidcProtocolMode(config) {
3543
3555
  return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
3544
3556
  }
3545
3557
 
3546
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3558
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3547
3559
 
3548
3560
  /*
3549
3561
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3562,7 +3574,7 @@ class ServerError extends AuthError {
3562
3574
  }
3563
3575
  }
3564
3576
 
3565
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3577
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3566
3578
  /*
3567
3579
  * Copyright (c) Microsoft Corporation. All rights reserved.
3568
3580
  * Licensed under the MIT License.
@@ -3613,7 +3625,7 @@ const badToken = "bad_token";
3613
3625
  */
3614
3626
  const interruptedUser = "interrupted_user";
3615
3627
 
3616
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3628
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3617
3629
 
3618
3630
  /*
3619
3631
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3681,7 +3693,7 @@ function createInteractionRequiredAuthError(errorCode, errorMessage) {
3681
3693
  return new InteractionRequiredAuthError(errorCode, errorMessage);
3682
3694
  }
3683
3695
 
3684
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3696
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3685
3697
 
3686
3698
  /*
3687
3699
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3749,7 +3761,7 @@ function parseRequestState(base64Decode, state) {
3749
3761
  }
3750
3762
  }
3751
3763
 
3752
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3764
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3753
3765
  /*
3754
3766
  * Copyright (c) Microsoft Corporation. All rights reserved.
3755
3767
  * Licensed under the MIT License.
@@ -3814,7 +3826,7 @@ function wasClockTurnedBack(cachedAt) {
3814
3826
  return cachedAtSec > nowSeconds();
3815
3827
  }
3816
3828
 
3817
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3829
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3818
3830
  /*
3819
3831
  * Copyright (c) Microsoft Corporation. All rights reserved.
3820
3832
  * Licensed under the MIT License.
@@ -3885,7 +3897,7 @@ const RegionDiscoveryGetCurrentVersion = "regionDiscoveryGetCurrentVersion";
3885
3897
  const CacheManagerGetRefreshToken = "cacheManagerGetRefreshToken";
3886
3898
  const SetUserData = "setUserData";
3887
3899
 
3888
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3900
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3889
3901
  /*
3890
3902
  * Copyright (c) Microsoft Corporation. All rights reserved.
3891
3903
  * Licensed under the MIT License.
@@ -3978,7 +3990,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
3978
3990
  };
3979
3991
  };
3980
3992
 
3981
- /*! @azure/msal-common v16.3.0 2026-03-13 */
3993
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
3982
3994
 
3983
3995
  /*
3984
3996
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4058,7 +4070,7 @@ class PopTokenGenerator {
4058
4070
  }
4059
4071
  }
4060
4072
 
4061
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4073
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4062
4074
  /*
4063
4075
  * Copyright (c) Microsoft Corporation. All rights reserved.
4064
4076
  * Licensed under the MIT License.
@@ -4085,7 +4097,7 @@ class PopTokenGenerator {
4085
4097
  }
4086
4098
  }
4087
4099
 
4088
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4100
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4089
4101
 
4090
4102
  /*
4091
4103
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4344,7 +4356,7 @@ function isAuthorityMetadataExpired(metadata) {
4344
4356
  return metadata.expiresAt <= nowSeconds();
4345
4357
  }
4346
4358
 
4347
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4359
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4348
4360
 
4349
4361
  /*
4350
4362
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4685,7 +4697,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
4685
4697
  return baseAccount;
4686
4698
  }
4687
4699
 
4688
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4700
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4689
4701
  /*
4690
4702
  * Copyright (c) Microsoft Corporation. All rights reserved.
4691
4703
  * Licensed under the MIT License.
@@ -4695,7 +4707,7 @@ const CcsCredentialType = {
4695
4707
  UPN: "UPN",
4696
4708
  };
4697
4709
 
4698
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4710
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4699
4711
  /*
4700
4712
  * Copyright (c) Microsoft Corporation. All rights reserved.
4701
4713
  * Licensed under the MIT License.
@@ -4713,7 +4725,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
4713
4725
  }
4714
4726
  }
4715
4727
 
4716
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4728
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4717
4729
  /*
4718
4730
  * Copyright (c) Microsoft Corporation. All rights reserved.
4719
4731
  * Licensed under the MIT License.
@@ -4734,7 +4746,7 @@ function getRequestThumbprint(clientId, request, homeAccountId) {
4734
4746
  };
4735
4747
  }
4736
4748
 
4737
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4749
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4738
4750
 
4739
4751
  /*
4740
4752
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4820,7 +4832,7 @@ class ThrottlingUtils {
4820
4832
  }
4821
4833
  }
4822
4834
 
4823
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4835
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4824
4836
 
4825
4837
  /*
4826
4838
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4851,7 +4863,7 @@ function createNetworkError(error, httpStatus, responseHeaders, additionalError)
4851
4863
  return new NetworkError(error, httpStatus, responseHeaders);
4852
4864
  }
4853
4865
 
4854
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4866
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4855
4867
 
4856
4868
  /*
4857
4869
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4965,7 +4977,7 @@ async function sendPostRequest(thumbprint, tokenEndpoint, options, correlationId
4965
4977
  return response;
4966
4978
  }
4967
4979
 
4968
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4980
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4969
4981
  /*
4970
4982
  * Copyright (c) Microsoft Corporation. All rights reserved.
4971
4983
  * Licensed under the MIT License.
@@ -4977,7 +4989,7 @@ function isOpenIdConfigResponse(response) {
4977
4989
  response.hasOwnProperty("jwks_uri"));
4978
4990
  }
4979
4991
 
4980
- /*! @azure/msal-common v16.3.0 2026-03-13 */
4992
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4981
4993
  /*
4982
4994
  * Copyright (c) Microsoft Corporation. All rights reserved.
4983
4995
  * Licensed under the MIT License.
@@ -4987,7 +4999,7 @@ function isCloudInstanceDiscoveryResponse(response) {
4987
4999
  response.hasOwnProperty("metadata"));
4988
5000
  }
4989
5001
 
4990
- /*! @azure/msal-common v16.3.0 2026-03-13 */
5002
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
4991
5003
  /*
4992
5004
  * Copyright (c) Microsoft Corporation. All rights reserved.
4993
5005
  * Licensed under the MIT License.
@@ -4997,7 +5009,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
4997
5009
  response.hasOwnProperty("error_description"));
4998
5010
  }
4999
5011
 
5000
- /*! @azure/msal-common v16.3.0 2026-03-13 */
5012
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
5001
5013
 
5002
5014
  /*
5003
5015
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5102,7 +5114,7 @@ RegionDiscovery.IMDS_OPTIONS = {
5102
5114
  },
5103
5115
  };
5104
5116
 
5105
- /*! @azure/msal-common v16.3.0 2026-03-13 */
5117
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
5106
5118
 
5107
5119
  /*
5108
5120
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5922,7 +5934,7 @@ function buildStaticAuthorityOptions(authOptions) {
5922
5934
  };
5923
5935
  }
5924
5936
 
5925
- /*! @azure/msal-common v16.3.0 2026-03-13 */
5937
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
5926
5938
 
5927
5939
  /*
5928
5940
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5956,7 +5968,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
5956
5968
  }
5957
5969
  }
5958
5970
 
5959
- /*! @azure/msal-common v16.3.0 2026-03-13 */
5971
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
5960
5972
 
5961
5973
  /*
5962
5974
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6217,7 +6229,7 @@ class AuthorizationCodeClient {
6217
6229
  }
6218
6230
  }
6219
6231
 
6220
- /*! @azure/msal-common v16.3.0 2026-03-13 */
6232
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
6221
6233
 
6222
6234
  /*
6223
6235
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6442,7 +6454,7 @@ class RefreshTokenClient {
6442
6454
  }
6443
6455
  }
6444
6456
 
6445
- /*! @azure/msal-common v16.3.0 2026-03-13 */
6457
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
6446
6458
 
6447
6459
  /*
6448
6460
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6558,7 +6570,7 @@ class SilentFlowClient {
6558
6570
  }
6559
6571
  }
6560
6572
 
6561
- /*! @azure/msal-common v16.3.0 2026-03-13 */
6573
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
6562
6574
 
6563
6575
  /*
6564
6576
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6573,7 +6585,7 @@ const StubbedNetworkModule = {
6573
6585
  },
6574
6586
  };
6575
6587
 
6576
- /*! @azure/msal-common v16.3.0 2026-03-13 */
6588
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
6577
6589
 
6578
6590
  /*
6579
6591
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6606,6 +6618,8 @@ function getStandardAuthorizeRequestParameters(authOptions, request, logger, per
6606
6618
  addResponseMode(parameters, request.responseMode);
6607
6619
  // add client_info=1
6608
6620
  addClientInfo(parameters);
6621
+ // add clidata=1
6622
+ addCliData(parameters);
6609
6623
  if (request.prompt) {
6610
6624
  addPrompt(parameters, request.prompt);
6611
6625
  performanceClient?.addFields({ prompt: request.prompt }, correlationId);
@@ -6798,7 +6812,7 @@ function extractLoginHint(account) {
6798
6812
  return account.loginHint || account.idTokenClaims?.login_hint || null;
6799
6813
  }
6800
6814
 
6801
- /*! @azure/msal-common v16.3.0 2026-03-13 */
6815
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
6802
6816
 
6803
6817
  /*
6804
6818
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6831,7 +6845,7 @@ function containsResourceParam(params) {
6831
6845
  return Object.prototype.hasOwnProperty.call(params, "resource");
6832
6846
  }
6833
6847
 
6834
- /*! @azure/msal-common v16.3.0 2026-03-13 */
6848
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
6835
6849
  /*
6836
6850
  * Copyright (c) Microsoft Corporation. All rights reserved.
6837
6851
  * Licensed under the MIT License.
@@ -6841,7 +6855,7 @@ function containsResourceParam(params) {
6841
6855
  */
6842
6856
  const unexpectedError = "unexpected_error";
6843
6857
 
6844
- /*! @azure/msal-common v16.3.0 2026-03-13 */
6858
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
6845
6859
 
6846
6860
  /*
6847
6861
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7102,7 +7116,7 @@ class ServerTelemetryManager {
7102
7116
  }
7103
7117
  }
7104
7118
 
7105
- /*! @azure/msal-common v16.3.0 2026-03-13 */
7119
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
7106
7120
 
7107
7121
  /*
7108
7122
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7123,7 +7137,7 @@ function createJoseHeaderError(code) {
7123
7137
  return new JoseHeaderError(code);
7124
7138
  }
7125
7139
 
7126
- /*! @azure/msal-common v16.3.0 2026-03-13 */
7140
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
7127
7141
  /*
7128
7142
  * Copyright (c) Microsoft Corporation. All rights reserved.
7129
7143
  * Licensed under the MIT License.
@@ -7131,7 +7145,7 @@ function createJoseHeaderError(code) {
7131
7145
  const missingKidError = "missing_kid_error";
7132
7146
  const missingAlgError = "missing_alg_error";
7133
7147
 
7134
- /*! @azure/msal-common v16.3.0 2026-03-13 */
7148
+ /*! @azure/msal-common v16.4.0 2026-03-19 */
7135
7149
 
7136
7150
  /*
7137
7151
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7566,7 +7580,7 @@ function ensureArgumentIsJSONString(argName, argValue, correlationId) {
7566
7580
 
7567
7581
  /* eslint-disable header/header */
7568
7582
  const name = "@azure/msal-browser";
7569
- const version = "5.5.0";
7583
+ const version = "5.6.1";
7570
7584
 
7571
7585
  /*
7572
7586
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -16053,10 +16067,6 @@ function getAllAccounts(logger, browserStorage, isInBrowser, correlationId, acco
16053
16067
  */
16054
16068
  function getAccount(accountFilter, logger, browserStorage, correlationId) {
16055
16069
  logger.trace("0u7b90", correlationId);
16056
- if (Object.keys(accountFilter).length === 0) {
16057
- logger.warning("1kz0cu", correlationId);
16058
- return null;
16059
- }
16060
16070
  const account = browserStorage.getAccountInfoFilteredBy(accountFilter, correlationId);
16061
16071
  if (account) {
16062
16072
  logger.verbose("0btgll", correlationId);
@@ -17072,6 +17082,62 @@ class PlatformAuthInteractionClient extends BaseInteractionClient {
17072
17082
  * Copyright (c) Microsoft Corporation. All rights reserved.
17073
17083
  * Licensed under the MIT License.
17074
17084
  */
17085
+ const clientDataAccountTypeMapping = new Map([
17086
+ ["e", "AAD"],
17087
+ ["m", "MSA"],
17088
+ ]);
17089
+ /**
17090
+ * Parses the clientdata response parameter from the /authorize endpoint.
17091
+ *
17092
+ * Logically, the clientdata value is URL-encoded and pipe-delimited:
17093
+ * urlencoded(account_type | error | sub_error | cloud_instance | caller_data_boundary)
17094
+ *
17095
+ * In normal browser flows, this value may already have been URL-decoded
17096
+ * (e.g. by URLSearchParams). This function will only apply decodeURIComponent
17097
+ * when the string appears to contain percent-encoded sequences to avoid
17098
+ * double-decoding.
17099
+ *
17100
+ * @param clientdata - The raw clientdata string from the authorize response
17101
+ * @returns Parsed ClientData object, or null if the input is empty/invalid
17102
+ */
17103
+ function parseClientData(clientdata) {
17104
+ if (!clientdata) {
17105
+ return null;
17106
+ }
17107
+ try {
17108
+ // Only decode when the string appears to contain percent-encoded sequences
17109
+ const shouldDecode = /%(?:[0-9A-Fa-f]{2})/.test(clientdata);
17110
+ const decoded = shouldDecode
17111
+ ? decodeURIComponent(clientdata)
17112
+ : clientdata;
17113
+ const parts = decoded.split("|");
17114
+ if (parts.length < 5) {
17115
+ return null;
17116
+ }
17117
+ return {
17118
+ accountType: clientDataAccountTypeMapping.get(parts[0]?.trim() || "") || "",
17119
+ error: parts[1]?.trim() || "",
17120
+ subError: parts[2]?.trim() || "",
17121
+ cloudInstance: parts[3]?.trim() || "",
17122
+ callerDataBoundary: parts[4]?.trim() || "",
17123
+ };
17124
+ }
17125
+ catch {
17126
+ return null;
17127
+ }
17128
+ }
17129
+ /**
17130
+ * Instruments account type, error, and suberror from clientdata
17131
+ */
17132
+ function instrumentClientData(response, correlationId, performanceClient) {
17133
+ const parsed = parseClientData(response.clientdata);
17134
+ parsed?.accountType &&
17135
+ performanceClient.addFields({ accountType: parsed.accountType }, correlationId);
17136
+ parsed?.error &&
17137
+ performanceClient.addFields({ serverErrorNo: parsed.error }, correlationId);
17138
+ parsed?.subError &&
17139
+ performanceClient.addFields({ serverSubErrorNo: parsed.subError }, correlationId);
17140
+ }
17075
17141
  /**
17076
17142
  * Returns map of parameters that are applicable to all calls to /authorize whether using PKCE or EAR
17077
17143
  * @param config
@@ -17241,6 +17307,8 @@ async function handleResponsePlatformBroker(request, accountId, apiId, config, b
17241
17307
  async function handleResponseCode(request, response, codeVerifier, apiId, config, authClient, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider) {
17242
17308
  // Remove throttle if it exists
17243
17309
  ThrottlingUtils.removeThrottle(browserStorage, config.auth.clientId, request);
17310
+ // Instrument clientdata telemetry fields from the authorize response
17311
+ instrumentClientData(response, request.correlationId, performanceClient);
17244
17312
  if (response.accountId) {
17245
17313
  return invokeAsync(handleResponsePlatformBroker, HandleResponsePlatformBroker, logger, performanceClient, request.correlationId)(request, response.accountId, apiId, config, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider);
17246
17314
  }
@@ -17273,6 +17341,8 @@ async function handleResponseCode(request, response, codeVerifier, apiId, config
17273
17341
  async function handleResponseEAR(request, response, apiId, config, authority, browserStorage, nativeStorage, eventHandler, logger, performanceClient, platformAuthProvider) {
17274
17342
  // Remove throttle if it exists
17275
17343
  ThrottlingUtils.removeThrottle(browserStorage, config.auth.clientId, request);
17344
+ // Instrument clientdata telemetry fields from the authorize response
17345
+ instrumentClientData(response, request.correlationId, performanceClient);
17276
17346
  // Validate state & check response for errors
17277
17347
  validateAuthorizationResponse(response, request.state);
17278
17348
  if (!response.ear_jwe) {
@@ -21316,6 +21386,7 @@ class NestedAppOperatingContext extends BaseOperatingContext {
21316
21386
  * @returns Promise<boolean> indicating whether this operating context is currently available.
21317
21387
  */
21318
21388
  async initialize(correlationId) {
21389
+ const cid = correlationId || "";
21319
21390
  try {
21320
21391
  if (typeof window !== "undefined") {
21321
21392
  if (typeof window.__initializeNestedAppAuth === "function") {
@@ -21333,9 +21404,9 @@ class NestedAppOperatingContext extends BaseOperatingContext {
21333
21404
  }
21334
21405
  }
21335
21406
  catch (ex) {
21336
- this.logger.infoPii("1mdxyj", correlationId);
21407
+ this.logger.infoPii("1mdxyj", cid);
21337
21408
  }
21338
- this.logger.info("12jy9a", correlationId);
21409
+ this.logger.info("12jy9a", cid);
21339
21410
  return this.available;
21340
21411
  }
21341
21412
  }