@azure/msal-common 16.5.1 → 16.5.2

package/dist-browser/constants/AADServerParamKeys.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/crypto/ICrypto.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { createClientAuthError } from '../error/ClientAuthError.mjs';
 import { methodNotImplemented } from '../error/ClientAuthErrorCodes.mjs';

package/dist-browser/crypto/JoseHeader.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { createJoseHeaderError } from '../error/JoseHeaderError.mjs';
 import { JsonWebTokenTypes } from '../utils/Constants.mjs';

package/dist-browser/crypto/PopTokenGenerator.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { nowSeconds } from '../utils/TimeUtils.mjs';
 import { UrlString } from '../url/UrlString.mjs';

package/dist-browser/error/AuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/error/AuthErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/error/CacheError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { cacheErrorUnknown, cacheQuotaExceeded } from './CacheErrorCodes.mjs';
 import * as CacheErrorCodes from './CacheErrorCodes.mjs';

package/dist-browser/error/CacheErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/error/ClientAuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 

package/dist-browser/error/ClientAuthErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/error/ClientConfigurationError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 

package/dist-browser/error/ClientConfigurationErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/error/InteractionRequiredAuthError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 import { interactionRequired, consentRequired, loginRequired, badToken, uxNotAllowed, interruptedUser } from './InteractionRequiredAuthErrorCodes.mjs';

package/dist-browser/error/InteractionRequiredAuthErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/error/JoseHeaderError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 

package/dist-browser/error/JoseHeaderErrorCodes.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/error/NetworkError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 

package/dist-browser/error/PlatformBrokerError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 

package/dist-browser/error/ServerError.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { AuthError } from './AuthError.mjs';
 

package/dist-browser/index-browser.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 export { AuthorizationCodeClient } from './client/AuthorizationCodeClient.mjs';
 export { RefreshTokenClient } from './client/RefreshTokenClient.mjs';

package/dist-browser/index.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 export { AuthorizationCodeClient } from './client/AuthorizationCodeClient.mjs';
 export { RefreshTokenClient } from './client/RefreshTokenClient.mjs';

package/dist-browser/log-strings-mapping.json

@@ -1,6 +1,6 @@
 {
-  "timestamp": "2026-04-21T22:42:27.135Z",
-  "packageVersion": "16.5.1",
+  "timestamp": "2026-04-28T21:31:31.634Z",
+  "packageVersion": "16.5.2",
   "totalStrings": 96,
   "mappings": {
     "1ub6wv": {

package/dist-browser/logger/Logger.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/network/INetworkModule.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { createClientAuthError } from '../error/ClientAuthError.mjs';
 import { methodNotImplemented } from '../error/ClientAuthErrorCodes.mjs';

package/dist-browser/network/RequestThumbprint.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/network/ThrottlingUtils.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { THROTTLING_PREFIX, HeaderNames, DEFAULT_THROTTLE_TIME_SECONDS, DEFAULT_MAX_THROTTLE_TIME_SECONDS } from '../utils/Constants.mjs';
 import { ServerError } from '../error/ServerError.mjs';

package/dist-browser/packageMetadata.d.ts

@@ -1,3 +1,3 @@
 export declare const name = "@azure/msal-common";
-export declare const version = "16.5.1";
+export declare const version = "16.5.2";
 //# sourceMappingURL=packageMetadata.d.ts.map

package/dist-browser/packageMetadata.mjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "16.5.1";
+const version = "16.5.2";
 
 export { name, version };
 //# sourceMappingURL=packageMetadata.mjs.map

package/dist-browser/protocol/Authorize.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { addClientId, addScopes, addResource, addRedirectUri, addCorrelationId, addResponseMode, addClientInfo, addCliData, addPrompt, addDomainHint, addSid, addLoginHint, addCcsOid, addCcsUpn, addNonce, addState, addBrokerParameters, addClaims, addInstanceAware } from '../request/RequestParameterBuilder.mjs';
 import { INSTANCE_AWARE, CLIENT_ID } from '../constants/AADServerParamKeys.mjs';

package/dist-browser/protocol/Token.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { CcsCredentialType } from '../account/CcsCredential.mjs';
 import { buildClientInfoFromHomeAccountId } from '../account/ClientInfo.mjs';

package/dist-browser/request/AuthenticationHeaderParser.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { createClientConfigurationError } from '../error/ClientConfigurationError.mjs';
 import { HeaderNames } from '../utils/Constants.mjs';

package/dist-browser/request/BaseAuthRequest.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { createClientAuthError } from '../error/ClientAuthError.mjs';
 import { misplacedResourceParam, resourceParameterRequired } from '../error/ClientAuthErrorCodes.mjs';

package/dist-browser/request/RequestParameterBuilder.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { OIDC_DEFAULT_SCOPES, ResponseMode, HeaderNames, CLIENT_INFO, ClaimsRequestKeys, PasswordGrantConstants, AuthenticationScheme, X_MS_LIB_CAPABILITY_VALUE } from '../utils/Constants.mjs';
 import { CLIENT_ID, BROKER_CLIENT_ID, REDIRECT_URI, RESPONSE_TYPE, RESPONSE_MODE, NATIVE_BROKER, SCOPE, POST_LOGOUT_URI, ID_TOKEN_HINT, DOMAIN_HINT, LOGIN_HINT, SID, CLAIMS, CLIENT_REQUEST_ID, X_CLIENT_SKU, X_CLIENT_VER, X_CLIENT_OS, X_CLIENT_CPU, X_APP_NAME, X_APP_VER, PROMPT, STATE, NONCE, CODE_CHALLENGE, CODE_CHALLENGE_METHOD, CODE, DEVICE_CODE, REFRESH_TOKEN, CODE_VERIFIER, CLIENT_SECRET, CLIENT_ASSERTION, CLIENT_ASSERTION_TYPE, OBO_ASSERTION, REQUESTED_TOKEN_USE, GRANT_TYPE, CLI_DATA, INSTANCE_AWARE, TOKEN_TYPE, REQ_CNF, X_CLIENT_CURR_TELEM, X_CLIENT_LAST_TELEM, X_MS_LIB_CAPABILITY, LOGOUT_HINT, BROKER_REDIRECT_URI, EAR_JWK, EAR_JWE_CRYPTO, RESOURCE } from '../constants/AADServerParamKeys.mjs';

package/dist-browser/request/ScopeSet.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { createClientConfigurationError } from '../error/ClientConfigurationError.mjs';
 import { StringUtils } from '../utils/StringUtils.mjs';

package/dist-browser/response/ResponseHandler.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { updateAccountTenantProfileData, buildTenantProfile } from '../account/AccountInfo.mjs';
 import { extractTokenClaims, checkMaxAge, isKmsi } from '../account/AuthToken.mjs';

package/dist-browser/telemetry/performance/PerformanceClient.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { getAndFlushLogsFromCache } from '../../logger/Logger.mjs';
 import { IntFields, PerformanceEventStatus, EXT_FIELD_PREFIX } from './PerformanceEvent.mjs';

package/dist-browser/telemetry/performance/PerformanceEvent.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/telemetry/performance/PerformanceEvents.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/telemetry/performance/StubPerformanceClient.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { PerformanceEventStatus } from './PerformanceEvent.mjs';
 

package/dist-browser/telemetry/server/ServerTelemetryManager.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { CacheOutcome, SERVER_TELEM_CACHE_KEY, CACHE_KEY_SEPARATOR, SERVER_TELEM_SCHEMA_VERSION, SERVER_TELEM_VALUE_SEPARATOR, SERVER_TELEM_CATEGORY_SEPARATOR, SERVER_TELEM_OVERFLOW_TRUE, SERVER_TELEM_OVERFLOW_FALSE, SERVER_TELEM_MAX_CACHED_ERRORS, SERVER_TELEM_UNKNOWN_ERROR, SERVER_TELEM_MAX_LAST_HEADER_BYTES } from '../../utils/Constants.mjs';
 import { AuthError } from '../../error/AuthError.mjs';

package/dist-browser/url/UrlString.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { createClientConfigurationError } from '../error/ClientConfigurationError.mjs';
 import { StringUtils } from '../utils/StringUtils.mjs';

package/dist-browser/utils/ClientAssertionUtils.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/utils/Constants.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/utils/FunctionWrappers.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/utils/ProtocolUtils.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { RESOURCE_DELIM } from './Constants.mjs';
 import { createClientAuthError } from '../error/ClientAuthError.mjs';

package/dist-browser/utils/StringUtils.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/utils/TimeUtils.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/dist-browser/utils/UrlUtils.mjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 import { createClientAuthError } from '../error/ClientAuthError.mjs';
 import { StringUtils } from './StringUtils.mjs';

package/lib/index-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 'use strict';
 
-var indexNode = require('./index-node-CJl1_QbT.js');
+var indexNode = require('./index-node-ByMjZ1FK.js');
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.

package/lib/{index-node-CJl1_QbT.js → index-node-ByMjZ1FK.js}

@@ -1,4 +1,4 @@
-/*! @azure/msal-common v16.5.1 2026-04-21 */
+/*! @azure/msal-common v16.5.2 2026-04-28 */
 'use strict';
 'use strict';
 
@@ -4265,7 +4265,7 @@ class Logger {
 
 /* eslint-disable header/header */
 const name = "@azure/msal-common";
-const version = "16.5.1";
+const version = "16.5.2";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4352,8 +4352,10 @@ class CacheManager {
         const allAccounts = this.getAllAccounts(accountFilter, correlationId);
         if (allAccounts.length > 1) {
             // If one or more accounts are found, prioritize accounts that have an ID token
-            const sortedAccounts = allAccounts.sort((account) => {
-                return account.idTokenClaims ? -1 : 1;
+            const sortedAccounts = allAccounts.sort((a, b) => {
+                const aHasClaims = a.idTokenClaims ? 1 : 0;
+                const bHasClaims = b.idTokenClaims ? 1 : 0;
+                return bHasClaims - aHasClaims;
             });
             return sortedAccounts[0];
         }
@@ -7891,4 +7893,4 @@ exports.invokeAsync = invokeAsync;
 exports.tenantIdMatchesHomeTenant = tenantIdMatchesHomeTenant;
 exports.updateAccountTenantProfileData = updateAccountTenantProfileData;
 exports.version = version;
-//# sourceMappingURL=index-node-CJl1_QbT.js.map
+//# sourceMappingURL=index-node-ByMjZ1FK.js.map