@azure/msal-browser 5.8.0 → 5.9.0

package/dist/app/IPublicClientApplication.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createBrowserConfigurationAuthError } from '../error/BrowserConfigurationAuthError.mjs';
 import { stubbedPublicClientApplicationCalled } from '../error/BrowserConfigurationAuthErrorCodes.mjs';

package/dist/app/PublicClientApplication.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { StandardController } from '../controllers/StandardController.mjs';
 import { StandardOperatingContext } from '../operatingcontext/StandardOperatingContext.mjs';

package/dist/broker/nativeBroker/NativeStatusCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/broker/nativeBroker/PlatformAuthDOMHandler.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createAuthError, AuthErrorCodes } from '@azure/msal-common/browser';
 import { PlatformAuthConstants } from '../../utils/BrowserConstants.mjs';

package/dist/broker/nativeBroker/PlatformAuthExtensionHandler.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { PlatformAuthConstants, NativeExtensionMethod } from '../../utils/BrowserConstants.mjs';
 import { createAuthError, AuthErrorCodes } from '@azure/msal-common/browser';

package/dist/broker/nativeBroker/PlatformAuthProvider.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { Logger, StubPerformanceClient, Constants } from '@azure/msal-common/browser';
 import { name, version } from '../../packageMetadata.mjs';

package/dist/cache/AccountManager.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/cache/AsyncMemoryStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { BrowserAuthError } from '../error/BrowserAuthError.mjs';
 import { DatabaseStorage } from './DatabaseStorage.mjs';

package/dist/cache/BrowserCacheManager.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { CacheManager, TimeUtils, CacheHelpers, Constants, AuthToken, getTenantIdFromIdTokenClaims, buildTenantProfile, AccountEntityUtils, createCacheError, CacheErrorCodes, invokeAsync, PerformanceEvents, StringUtils, CacheError, DEFAULT_CRYPTO_IMPLEMENTATION } from '@azure/msal-common/browser';
 import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';

package/dist/cache/CacheHelpers.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { getAccountKeysCacheKey, getTokenKeysCacheKey } from './CacheKeys.mjs';
 

package/dist/cache/CacheKeys.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/cache/CookieStorage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CookieStorage.d.ts","sourceRoot":"","sources":["../../src/cache/CookieStorage.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKrD,eAAO,MAAM,eAAe;;;CAGlB,CAAC;AACX,MAAM,MAAM,eAAe,GACvB,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAE3D,qBAAa,aAAc,YAAW,cAAc,CAAC,MAAM,CAAC;IACxD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAenC,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,OAAO,CACH,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,cAAc,CAAC,EAAE,MAAM,EACvB,MAAM,GAAE,OAAc,EACtB,QAAQ,GAAE,eAAqC,GAChD,IAAI;IAkBD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAMlC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAK7B,OAAO,IAAI,MAAM,EAAE;IAWnB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIjC,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAIxC;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAMtE"}
+{"version":3,"file":"CookieStorage.d.ts","sourceRoot":"","sources":["../../src/cache/CookieStorage.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKrD,eAAO,MAAM,eAAe;;;CAGlB,CAAC;AACX,MAAM,MAAM,eAAe,GACvB,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAE3D,qBAAa,aAAc,YAAW,cAAc,CAAC,MAAM,CAAC;IACxD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAqBnC,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,OAAO,CACH,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,cAAc,CAAC,EAAE,MAAM,EACvB,MAAM,GAAE,OAAc,EACtB,QAAQ,GAAE,eAAqC,GAChD,IAAI;IAkBD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAMlC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAK7B,OAAO,IAAI,MAAM,EAAE;IAkBnB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIjC,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAIxC;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAMtE"}

package/dist/cache/CookieStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createClientAuthError, ClientAuthErrorCodes } from '@azure/msal-common/browser';
 
@@ -17,14 +17,20 @@ class CookieStorage {
         return Promise.resolve();
     }
     getItem(key) {
-        const name = `${encodeURIComponent(key)}`;
+        const name = encodeURIComponent(key);
         const cookieList = document.cookie.split(";");
         for (let i = 0; i < cookieList.length; i++) {
-            const cookie = cookieList[i];
-            const [key, ...rest] = decodeURIComponent(cookie).trim().split("=");
-            const value = rest.join("=");
-            if (key === name) {
-                return value;
+            const cookie = cookieList[i].trim();
+            const eqIndex = cookie.indexOf("=");
+            const rawKey = eqIndex === -1 ? cookie : cookie.substring(0, eqIndex);
+            if (rawKey === name) {
+                const rawValue = eqIndex === -1 ? "" : cookie.substring(eqIndex + 1);
+                try {
+                    return decodeURIComponent(rawValue);
+                }
+                catch {
+                    return rawValue;
+                }
             }
         }
         return "";
@@ -55,8 +61,15 @@ class CookieStorage {
         const cookieList = document.cookie.split(";");
         const keys = [];
         cookieList.forEach((cookie) => {
-            const cookieParts = decodeURIComponent(cookie).trim().split("=");
-            keys.push(cookieParts[0]);
+            const trimmed = cookie.trim();
+            const eqIndex = trimmed.indexOf("=");
+            const rawKey = eqIndex === -1 ? trimmed : trimmed.substring(0, eqIndex);
+            try {
+                keys.push(decodeURIComponent(rawKey));
+            }
+            catch {
+                // Skip cookies with malformed percent-encoded sequences in the key
+            }
         });
         return keys;
     }

package/dist/cache/CookieStorage.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"CookieStorage.mjs","sources":["../../src/cache/CookieStorage.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAQH;AACA,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,MAAA,eAAe,GAAG;AAC3B,IAAA,GAAG,EAAE,KAAK;AACV,IAAA,IAAI,EAAE,MAAM;EACL;MAIE,aAAa,CAAA;IACtB,UAAU,GAAA;AACN,QAAA,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;KAC5B;AAED,IAAA,OAAO,CAAC,GAAW,EAAA;QACf,MAAM,IAAI,GAAG,CAAG,EAAA,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC9C,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACxC,YAAA,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;AAC7B,YAAA,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE7B,IAAI,GAAG,KAAK,IAAI,EAAE;AACd,gBAAA,OAAO,KAAK,CAAC;AAChB,aAAA;AACJ,SAAA;AACD,QAAA,OAAO,EAAE,CAAC;KACb;IAED,WAAW,GAAA;AACP,QAAA,MAAM,qBAAqB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;KAC1E;AAED,IAAA,OAAO,CACH,GAAW,EACX,KAAa,EACb,cAAuB,EACvB,MAAA,GAAkB,IAAI,EACtB,QAA4B,GAAA,eAAe,CAAC,GAAG,EAAA;AAE/C,QAAA,IAAI,SAAS,GAAG,CAAG,EAAA,kBAAkB,CAAC,GAAG,CAAC,CAAI,CAAA,EAAA,kBAAkB,CAC5D,KAAK,CACR,CAAoB,iBAAA,EAAA,QAAQ,GAAG,CAAC;AAEjC,QAAA,IAAI,cAAc,EAAE;AAChB,YAAA,MAAM,UAAU,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;AAC3D,YAAA,SAAS,IAAI,CAAA,QAAA,EAAW,UAAU,CAAA,CAAA,CAAG,CAAC;AACzC,SAAA;AAED,QAAA,IAAI,MAAM,IAAI,QAAQ,KAAK,eAAe,CAAC,IAAI,EAAE;;YAE7C,SAAS,IAAI,SAAS,CAAC;AAC1B,SAAA;AAED,QAAA,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;KAC/B;AAED,IAAA,MAAM,WAAW,GAAA;QACb,OAAO,OAAO,CAAC,MAAM,CACjB,qBAAqB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CACnE,CAAC;KACL;AAED,IAAA,UAAU,CAAC,GAAW,EAAA;;QAElB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;KAC7B;IAED,OAAO,GAAA;QACH,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAkB,EAAE,CAAC;AAC/B,QAAA,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,KAAI;AAC1B,YAAA,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,SAAC,CAAC,CAAC;AAEH,QAAA,OAAO,IAAI,CAAC;KACf;AAED,IAAA,WAAW,CAAC,GAAW,EAAA;QACnB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;KACvC;IAED,WAAW,GAAA;;AAEP,QAAA,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAChC;AACJ,CAAA;AAED;;;AAGG;AACG,SAAU,uBAAuB,CAAC,cAAsB,EAAA;AAC1D,IAAA,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;AACzB,IAAA,MAAM,IAAI,GAAG,IAAI,IAAI,CACjB,KAAK,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,sBAAsB,CAC5D,CAAC;AACF,IAAA,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC9B;;;;"}
+{"version":3,"file":"CookieStorage.mjs","sources":["../../src/cache/CookieStorage.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAQH;AACA,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,MAAA,eAAe,GAAG;AAC3B,IAAA,GAAG,EAAE,KAAK;AACV,IAAA,IAAI,EAAE,MAAM;EACL;MAIE,aAAa,CAAA;IACtB,UAAU,GAAA;AACN,QAAA,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;KAC5B;AAED,IAAA,OAAO,CAAC,GAAW,EAAA;AACf,QAAA,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC9C,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,MAAM,GACR,OAAO,KAAK,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3D,IAAI,MAAM,KAAK,IAAI,EAAE;gBACjB,MAAM,QAAQ,GACV,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;gBACxD,IAAI;AACA,oBAAA,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AACvC,iBAAA;gBAAC,MAAM;AACJ,oBAAA,OAAO,QAAQ,CAAC;AACnB,iBAAA;AACJ,aAAA;AACJ,SAAA;AACD,QAAA,OAAO,EAAE,CAAC;KACb;IAED,WAAW,GAAA;AACP,QAAA,MAAM,qBAAqB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;KAC1E;AAED,IAAA,OAAO,CACH,GAAW,EACX,KAAa,EACb,cAAuB,EACvB,MAAA,GAAkB,IAAI,EACtB,QAA4B,GAAA,eAAe,CAAC,GAAG,EAAA;AAE/C,QAAA,IAAI,SAAS,GAAG,CAAG,EAAA,kBAAkB,CAAC,GAAG,CAAC,CAAI,CAAA,EAAA,kBAAkB,CAC5D,KAAK,CACR,CAAoB,iBAAA,EAAA,QAAQ,GAAG,CAAC;AAEjC,QAAA,IAAI,cAAc,EAAE;AAChB,YAAA,MAAM,UAAU,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;AAC3D,YAAA,SAAS,IAAI,CAAA,QAAA,EAAW,UAAU,CAAA,CAAA,CAAG,CAAC;AACzC,SAAA;AAED,QAAA,IAAI,MAAM,IAAI,QAAQ,KAAK,eAAe,CAAC,IAAI,EAAE;;YAE7C,SAAS,IAAI,SAAS,CAAC;AAC1B,SAAA;AAED,QAAA,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;KAC/B;AAED,IAAA,MAAM,WAAW,GAAA;QACb,OAAO,OAAO,CAAC,MAAM,CACjB,qBAAqB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CACnE,CAAC;KACL;AAED,IAAA,UAAU,CAAC,GAAW,EAAA;;QAElB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;KAC7B;IAED,OAAO,GAAA;QACH,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAkB,EAAE,CAAC;AAC/B,QAAA,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,KAAI;AAC1B,YAAA,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,MAAM,GACR,OAAO,KAAK,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI;gBACA,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;AACzC,aAAA;YAAC,MAAM;;AAEP,aAAA;AACL,SAAC,CAAC,CAAC;AAEH,QAAA,OAAO,IAAI,CAAC;KACf;AAED,IAAA,WAAW,CAAC,GAAW,EAAA;QACnB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;KACvC;IAED,WAAW,GAAA;;AAEP,QAAA,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAChC;AACJ,CAAA;AAED;;;AAGG;AACG,SAAU,uBAAuB,CAAC,cAAsB,EAAA;AAC1D,IAAA,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;AACzB,IAAA,MAAM,IAAI,GAAG,IAAI,IAAI,CACjB,KAAK,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,sBAAsB,CAC5D,CAAC;AACF,IAAA,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC9B;;;;"}

package/dist/cache/DatabaseStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';
 import { DB_NAME, DB_VERSION, DB_TABLE_NAME } from '../utils/BrowserConstants.mjs';

package/dist/cache/EncryptedData.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/cache/LocalStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { invoke, invokeAsync } from '@azure/msal-common/browser';
 import { Base64Decode, GenerateHKDF, GenerateBaseKey, UrlEncodeArr, ImportExistingCache, Decrypt, Encrypt } from '../telemetry/BrowserPerformanceEvents.mjs';

package/dist/cache/MemoryStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/cache/SessionStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createBrowserConfigurationAuthError } from '../error/BrowserConfigurationAuthError.mjs';
 import { storageNotSupported } from '../error/BrowserConfigurationAuthErrorCodes.mjs';

package/dist/cache/TokenCache.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { StubPerformanceClient, AuthToken, Logger, buildStaticAuthorityOptions, AuthorityFactory, Authority, invokeAsync, AccountEntityUtils, buildAccountToCache, CacheHelpers, ScopeSet, TimeUtils } from '@azure/msal-common/browser';
 import { buildConfiguration } from '../config/Configuration.mjs';

package/dist/config/Configuration.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { StubPerformanceClient, ProtocolMode, Logger, LogLevel, createClientConfigurationError, ClientConfigurationErrorCodes, StubbedNetworkModule, DEFAULT_SYSTEM_OPTIONS, Constants, AzureCloudInstance } from '@azure/msal-common/browser';
 import { BrowserCacheLocation } from '../utils/BrowserConstants.mjs';

package/dist/controllers/NestedAppAuthController.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { DEFAULT_CRYPTO_IMPLEMENTATION, buildStaticAuthorityOptions, enforceResourceParameter, TimeUtils, AuthError, Constants, AccountEntityUtils, AuthToken } from '@azure/msal-common/browser';
 import { AcquireTokenPopup, SsoSilent, AcquireTokenSilent } from '../telemetry/BrowserRootPerformanceEvents.mjs';

package/dist/controllers/StandardController.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { CryptoOps } from '../crypto/CryptoOps.mjs';
 import { DEFAULT_CRYPTO_IMPLEMENTATION, buildStaticAuthorityOptions, invokeAsync, enforceResourceParameter, InteractionRequiredAuthError, createClientAuthError, ClientAuthErrorCodes, AccountEntityUtils, AuthToken, CacheHelpers, TimeUtils, Constants, AuthError, getRequestThumbprint, InteractionRequiredAuthErrorCodes } from '@azure/msal-common/browser';

package/dist/crypto/BrowserCrypto.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';
 import { KEY_FORMAT_JWK } from '../utils/BrowserConstants.mjs';

package/dist/crypto/CryptoOps.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createClientAuthError, ClientAuthErrorCodes, JoseHeader } from '@azure/msal-common/browser';
 import { CryptoOptsGetPublicKeyThumbprint, CryptoOptsSignJwt } from '../telemetry/BrowserPerformanceEvents.mjs';

package/dist/crypto/PkceGenerator.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { invoke, invokeAsync } from '@azure/msal-common/browser';
 import { GenerateCodeVerifier, GenerateCodeChallengeFromVerifier, GetRandomValues, Sha256Digest } from '../telemetry/BrowserPerformanceEvents.mjs';

package/dist/crypto/SignedHttpRequest.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { CryptoOps } from './CryptoOps.mjs';
 import { Logger, PopTokenGenerator, StubPerformanceClient } from '@azure/msal-common/browser';

package/dist/custom-auth-path/app/PublicClientApplication.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { StandardController } from '../controllers/StandardController.mjs';
 import { StandardOperatingContext } from '../operatingcontext/StandardOperatingContext.mjs';

package/dist/custom-auth-path/broker/nativeBroker/NativeStatusCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthDOMHandler.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createAuthError, AuthErrorCodes } from '@azure/msal-common/browser';
 import { PlatformAuthConstants } from '../../utils/BrowserConstants.mjs';

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthExtensionHandler.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { PlatformAuthConstants, NativeExtensionMethod } from '../../utils/BrowserConstants.mjs';
 import { createAuthError, AuthErrorCodes } from '@azure/msal-common/browser';

package/dist/custom-auth-path/broker/nativeBroker/PlatformAuthProvider.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { Constants } from '@azure/msal-common/browser';
 import { DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS } from '../../config/Configuration.mjs';

package/dist/custom-auth-path/cache/AccountManager.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/cache/AsyncMemoryStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { BrowserAuthError } from '../error/BrowserAuthError.mjs';
 import { DatabaseStorage } from './DatabaseStorage.mjs';

package/dist/custom-auth-path/cache/BrowserCacheManager.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { CacheManager, TimeUtils, CacheHelpers, Constants, AuthToken, getTenantIdFromIdTokenClaims, buildTenantProfile, AccountEntityUtils, createCacheError, CacheErrorCodes, invokeAsync, PerformanceEvents, StringUtils, CacheError, DEFAULT_CRYPTO_IMPLEMENTATION } from '@azure/msal-common/browser';
 import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';

package/dist/custom-auth-path/cache/CacheHelpers.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { getAccountKeysCacheKey, getTokenKeysCacheKey } from './CacheKeys.mjs';
 

package/dist/custom-auth-path/cache/CacheKeys.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/cache/CookieStorage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CookieStorage.d.ts","sourceRoot":"","sources":["../../../src/cache/CookieStorage.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKrD,eAAO,MAAM,eAAe;;;CAGlB,CAAC;AACX,MAAM,MAAM,eAAe,GACvB,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAE3D,qBAAa,aAAc,YAAW,cAAc,CAAC,MAAM,CAAC;IACxD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAenC,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,OAAO,CACH,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,cAAc,CAAC,EAAE,MAAM,EACvB,MAAM,GAAE,OAAc,EACtB,QAAQ,GAAE,eAAqC,GAChD,IAAI;IAkBD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAMlC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAK7B,OAAO,IAAI,MAAM,EAAE;IAWnB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIjC,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAIxC;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAMtE"}
+{"version":3,"file":"CookieStorage.d.ts","sourceRoot":"","sources":["../../../src/cache/CookieStorage.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKrD,eAAO,MAAM,eAAe;;;CAGlB,CAAC;AACX,MAAM,MAAM,eAAe,GACvB,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAE3D,qBAAa,aAAc,YAAW,cAAc,CAAC,MAAM,CAAC;IACxD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAqBnC,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,OAAO,CACH,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,cAAc,CAAC,EAAE,MAAM,EACvB,MAAM,GAAE,OAAc,EACtB,QAAQ,GAAE,eAAqC,GAChD,IAAI;IAkBD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAMlC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAK7B,OAAO,IAAI,MAAM,EAAE;IAkBnB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIjC,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAIxC;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAMtE"}

package/dist/custom-auth-path/cache/CookieStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createClientAuthError, ClientAuthErrorCodes } from '@azure/msal-common/browser';
 
@@ -17,14 +17,20 @@ class CookieStorage {
         return Promise.resolve();
     }
     getItem(key) {
-        const name = `${encodeURIComponent(key)}`;
+        const name = encodeURIComponent(key);
         const cookieList = document.cookie.split(";");
         for (let i = 0; i < cookieList.length; i++) {
-            const cookie = cookieList[i];
-            const [key, ...rest] = decodeURIComponent(cookie).trim().split("=");
-            const value = rest.join("=");
-            if (key === name) {
-                return value;
+            const cookie = cookieList[i].trim();
+            const eqIndex = cookie.indexOf("=");
+            const rawKey = eqIndex === -1 ? cookie : cookie.substring(0, eqIndex);
+            if (rawKey === name) {
+                const rawValue = eqIndex === -1 ? "" : cookie.substring(eqIndex + 1);
+                try {
+                    return decodeURIComponent(rawValue);
+                }
+                catch {
+                    return rawValue;
+                }
             }
         }
         return "";
@@ -55,8 +61,15 @@ class CookieStorage {
         const cookieList = document.cookie.split(";");
         const keys = [];
         cookieList.forEach((cookie) => {
-            const cookieParts = decodeURIComponent(cookie).trim().split("=");
-            keys.push(cookieParts[0]);
+            const trimmed = cookie.trim();
+            const eqIndex = trimmed.indexOf("=");
+            const rawKey = eqIndex === -1 ? trimmed : trimmed.substring(0, eqIndex);
+            try {
+                keys.push(decodeURIComponent(rawKey));
+            }
+            catch {
+                // Skip cookies with malformed percent-encoded sequences in the key
+            }
         });
         return keys;
     }

package/dist/custom-auth-path/cache/CookieStorage.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"CookieStorage.mjs","sources":["../../../../src/cache/CookieStorage.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAQH;AACA,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,MAAA,eAAe,GAAG;AAC3B,IAAA,GAAG,EAAE,KAAK;AACV,IAAA,IAAI,EAAE,MAAM;EACL;MAIE,aAAa,CAAA;IACtB,UAAU,GAAA;AACN,QAAA,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;KAC5B;AAED,IAAA,OAAO,CAAC,GAAW,EAAA;QACf,MAAM,IAAI,GAAG,CAAG,EAAA,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC9C,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;AACxC,YAAA,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;AAC7B,YAAA,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE7B,IAAI,GAAG,KAAK,IAAI,EAAE;AACd,gBAAA,OAAO,KAAK,CAAC;AAChB,aAAA;AACJ,SAAA;AACD,QAAA,OAAO,EAAE,CAAC;KACb;IAED,WAAW,GAAA;AACP,QAAA,MAAM,qBAAqB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;KAC1E;AAED,IAAA,OAAO,CACH,GAAW,EACX,KAAa,EACb,cAAuB,EACvB,MAAA,GAAkB,IAAI,EACtB,QAA4B,GAAA,eAAe,CAAC,GAAG,EAAA;AAE/C,QAAA,IAAI,SAAS,GAAG,CAAG,EAAA,kBAAkB,CAAC,GAAG,CAAC,CAAI,CAAA,EAAA,kBAAkB,CAC5D,KAAK,CACR,CAAoB,iBAAA,EAAA,QAAQ,GAAG,CAAC;AAEjC,QAAA,IAAI,cAAc,EAAE;AAChB,YAAA,MAAM,UAAU,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;AAC3D,YAAA,SAAS,IAAI,CAAA,QAAA,EAAW,UAAU,CAAA,CAAA,CAAG,CAAC;AACzC,SAAA;AAED,QAAA,IAAI,MAAM,IAAI,QAAQ,KAAK,eAAe,CAAC,IAAI,EAAE;;YAE7C,SAAS,IAAI,SAAS,CAAC;AAC1B,SAAA;AAED,QAAA,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;KAC/B;AAED,IAAA,MAAM,WAAW,GAAA;QACb,OAAO,OAAO,CAAC,MAAM,CACjB,qBAAqB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CACnE,CAAC;KACL;AAED,IAAA,UAAU,CAAC,GAAW,EAAA;;QAElB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;KAC7B;IAED,OAAO,GAAA;QACH,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAkB,EAAE,CAAC;AAC/B,QAAA,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,KAAI;AAC1B,YAAA,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,SAAC,CAAC,CAAC;AAEH,QAAA,OAAO,IAAI,CAAC;KACf;AAED,IAAA,WAAW,CAAC,GAAW,EAAA;QACnB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;KACvC;IAED,WAAW,GAAA;;AAEP,QAAA,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAChC;AACJ,CAAA;AAED;;;AAGG;AACG,SAAU,uBAAuB,CAAC,cAAsB,EAAA;AAC1D,IAAA,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;AACzB,IAAA,MAAM,IAAI,GAAG,IAAI,IAAI,CACjB,KAAK,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,sBAAsB,CAC5D,CAAC;AACF,IAAA,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC9B;;;;"}
+{"version":3,"file":"CookieStorage.mjs","sources":["../../../../src/cache/CookieStorage.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAAA;;;AAGG;AAQH;AACA,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,MAAA,eAAe,GAAG;AAC3B,IAAA,GAAG,EAAE,KAAK;AACV,IAAA,IAAI,EAAE,MAAM;EACL;MAIE,aAAa,CAAA;IACtB,UAAU,GAAA;AACN,QAAA,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;KAC5B;AAED,IAAA,OAAO,CAAC,GAAW,EAAA;AACf,QAAA,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC9C,QAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,MAAM,GACR,OAAO,KAAK,EAAE,GAAG,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3D,IAAI,MAAM,KAAK,IAAI,EAAE;gBACjB,MAAM,QAAQ,GACV,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;gBACxD,IAAI;AACA,oBAAA,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AACvC,iBAAA;gBAAC,MAAM;AACJ,oBAAA,OAAO,QAAQ,CAAC;AACnB,iBAAA;AACJ,aAAA;AACJ,SAAA;AACD,QAAA,OAAO,EAAE,CAAC;KACb;IAED,WAAW,GAAA;AACP,QAAA,MAAM,qBAAqB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;KAC1E;AAED,IAAA,OAAO,CACH,GAAW,EACX,KAAa,EACb,cAAuB,EACvB,MAAA,GAAkB,IAAI,EACtB,QAA4B,GAAA,eAAe,CAAC,GAAG,EAAA;AAE/C,QAAA,IAAI,SAAS,GAAG,CAAG,EAAA,kBAAkB,CAAC,GAAG,CAAC,CAAI,CAAA,EAAA,kBAAkB,CAC5D,KAAK,CACR,CAAoB,iBAAA,EAAA,QAAQ,GAAG,CAAC;AAEjC,QAAA,IAAI,cAAc,EAAE;AAChB,YAAA,MAAM,UAAU,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC;AAC3D,YAAA,SAAS,IAAI,CAAA,QAAA,EAAW,UAAU,CAAA,CAAA,CAAG,CAAC;AACzC,SAAA;AAED,QAAA,IAAI,MAAM,IAAI,QAAQ,KAAK,eAAe,CAAC,IAAI,EAAE;;YAE7C,SAAS,IAAI,SAAS,CAAC;AAC1B,SAAA;AAED,QAAA,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;KAC/B;AAED,IAAA,MAAM,WAAW,GAAA;QACb,OAAO,OAAO,CAAC,MAAM,CACjB,qBAAqB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CACnE,CAAC;KACL;AAED,IAAA,UAAU,CAAC,GAAW,EAAA;;QAElB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;KAC7B;IAED,OAAO,GAAA;QACH,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAkB,EAAE,CAAC;AAC/B,QAAA,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,KAAI;AAC1B,YAAA,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,MAAM,GACR,OAAO,KAAK,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI;gBACA,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;AACzC,aAAA;YAAC,MAAM;;AAEP,aAAA;AACL,SAAC,CAAC,CAAC;AAEH,QAAA,OAAO,IAAI,CAAC;KACf;AAED,IAAA,WAAW,CAAC,GAAW,EAAA;QACnB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;KACvC;IAED,WAAW,GAAA;;AAEP,QAAA,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KAChC;AACJ,CAAA;AAED;;;AAGG;AACG,SAAU,uBAAuB,CAAC,cAAsB,EAAA;AAC1D,IAAA,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;AACzB,IAAA,MAAM,IAAI,GAAG,IAAI,IAAI,CACjB,KAAK,CAAC,OAAO,EAAE,GAAG,cAAc,GAAG,sBAAsB,CAC5D,CAAC;AACF,IAAA,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC9B;;;;"}

package/dist/custom-auth-path/cache/DatabaseStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';
 import { DB_NAME, DB_VERSION, DB_TABLE_NAME } from '../utils/BrowserConstants.mjs';

package/dist/custom-auth-path/cache/EncryptedData.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/cache/LocalStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { invoke, invokeAsync } from '@azure/msal-common/browser';
 import { Base64Decode, GenerateHKDF, GenerateBaseKey, UrlEncodeArr, ImportExistingCache, Decrypt, Encrypt } from '../telemetry/BrowserPerformanceEvents.mjs';

package/dist/custom-auth-path/cache/MemoryStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/cache/SessionStorage.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createBrowserConfigurationAuthError } from '../error/BrowserConfigurationAuthError.mjs';
 import { storageNotSupported } from '../error/BrowserConfigurationAuthErrorCodes.mjs';

package/dist/custom-auth-path/config/Configuration.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { StubPerformanceClient, ProtocolMode, Logger, LogLevel, createClientConfigurationError, ClientConfigurationErrorCodes, StubbedNetworkModule, DEFAULT_SYSTEM_OPTIONS, Constants, AzureCloudInstance } from '@azure/msal-common/browser';
 import { BrowserCacheLocation } from '../utils/BrowserConstants.mjs';

package/dist/custom-auth-path/controllers/StandardController.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { CryptoOps } from '../crypto/CryptoOps.mjs';
 import { DEFAULT_CRYPTO_IMPLEMENTATION, buildStaticAuthorityOptions, invokeAsync, enforceResourceParameter, InteractionRequiredAuthError, createClientAuthError, ClientAuthErrorCodes, AccountEntityUtils, AuthToken, CacheHelpers, TimeUtils, Constants, AuthError, getRequestThumbprint, InteractionRequiredAuthErrorCodes } from '@azure/msal-common/browser';

package/dist/custom-auth-path/crypto/BrowserCrypto.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createBrowserAuthError } from '../error/BrowserAuthError.mjs';
 import { KEY_FORMAT_JWK } from '../utils/BrowserConstants.mjs';

package/dist/custom-auth-path/crypto/CryptoOps.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { createClientAuthError, ClientAuthErrorCodes, JoseHeader } from '@azure/msal-common/browser';
 import { CryptoOptsGetPublicKeyThumbprint, CryptoOptsSignJwt } from '../telemetry/BrowserPerformanceEvents.mjs';

package/dist/custom-auth-path/crypto/PkceGenerator.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { invoke, invokeAsync } from '@azure/msal-common/browser';
 import { GenerateCodeVerifier, GenerateCodeChallengeFromVerifier, GetRandomValues, Sha256Digest } from '../telemetry/BrowserPerformanceEvents.mjs';

package/dist/custom-auth-path/custom_auth/CustomAuthConstants.d.ts

@@ -19,7 +19,7 @@ export declare const HttpHeaderKeys: {
 };
 export declare const DefaultPackageInfo: {
     readonly SKU: "msal.browser";
-    readonly VERSION: "5.8.0";
+    readonly VERSION: "5.9.0";
     readonly OS: "";
     readonly CPU: "";
 };

package/dist/custom-auth-path/custom_auth/CustomAuthConstants.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { Constants } from '@azure/msal-common/browser';
 import { version } from '../packageMetadata.mjs';

package/dist/custom-auth-path/custom_auth/CustomAuthPublicClientApplication.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { CustomAuthStandardController } from './controller/CustomAuthStandardController.mjs';
 import { CustomAuthOperatingContext } from './operating_context/CustomAuthOperatingContext.mjs';

package/dist/custom-auth-path/custom_auth/controller/CustomAuthStandardController.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { GetAccountResult } from '../get_account/auth_flow/result/GetAccountResult.mjs';
 import { SignInResult } from '../sign_in/auth_flow/result/SignInResult.mjs';

package/dist/custom-auth-path/custom_auth/core/CustomAuthAuthority.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { Authority } from '@azure/msal-common/browser';
 import { SIGNIN_TOKEN } from './network_client/custom_auth_api/CustomAuthApiEndpoint.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/AuthFlowErrorBase.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { CustomAuthApiError, RedirectError } from '../error/CustomAuthApiError.mjs';
 import { NoCachedAccountFoundError } from '../error/NoCachedAccountFoundError.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/AuthFlowResultBase.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { AuthError } from '@azure/msal-common/browser';
 import { CustomAuthError } from '../error/CustomAuthError.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/AuthFlowState.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { InvalidArgumentError } from '../error/InvalidArgumentError.mjs';
 import { ensureArgumentIsNotEmptyString } from '../utils/ArgumentValidator.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/AuthFlowStateTypes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/error_type/AuthMethodRegistrationError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { AuthActionErrorBase } from '../../AuthFlowErrorBase.mjs';
 

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/result/AuthMethodRegistrationChallengeMethodResult.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { AuthFlowResultBase } from '../../AuthFlowResultBase.mjs';
 import { AuthMethodRegistrationChallengeMethodError } from '../error_type/AuthMethodRegistrationError.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/result/AuthMethodRegistrationSubmitChallengeResult.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { AuthFlowResultBase } from '../../AuthFlowResultBase.mjs';
 import { AuthMethodRegistrationSubmitChallengeError } from '../error_type/AuthMethodRegistrationError.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationCompletedState.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { AuthFlowStateBase } from '../../AuthFlowState.mjs';
 import { AUTH_METHOD_REGISTRATION_COMPLETED_STATE_TYPE } from '../../AuthFlowStateTypes.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationFailedState.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { AuthFlowStateBase } from '../../AuthFlowState.mjs';
 import { AUTH_METHOD_REGISTRATION_FAILED_STATE_TYPE } from '../../AuthFlowStateTypes.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/jit/state/AuthMethodRegistrationState.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { CustomAuthAccountData } from '../../../../get_account/auth_flow/CustomAuthAccountData.mjs';
 import { JIT_VERIFICATION_REQUIRED_RESULT_TYPE, JIT_COMPLETED_RESULT_TYPE } from '../../../interaction_client/jit/result/JitActionResult.mjs';

package/dist/custom-auth-path/custom_auth/core/auth_flow/mfa/error_type/MfaError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v5.8.0 2026-04-21 */
+/*! @azure/msal-browser v5.9.0 2026-04-28 */
 'use strict';
 import { AuthActionErrorBase } from '../../AuthFlowErrorBase.mjs';