@azure/msal-node-extensions 1.5.24 → 5.0.0-alpha.0

package/lib/msal-node-extensions.cjs

@@ -1,4 +1,4 @@
-/*! @azure/msal-node-extensions v1.5.24 2025-10-29 */
+/*! @azure/msal-node-extensions v5.0.0-alpha.0 2025-10-07 */
 'use strict';
 'use strict';
 
@@ -14,7 +14,7 @@ var _documentCurrentScript = typeof document !== 'undefined' ? document.currentS
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-const Constants$1 = {
+const Constants = {
     /**
      * An existing file was the target of an operation that required that the target not exist
      */
@@ -188,21 +188,21 @@ class CrossPlatformLock {
     async lock() {
         for (let tryCount = 0; tryCount < this.retryNumber; tryCount++) {
             try {
-                this.logger.info(`Pid ${process$1.pid} trying to acquire lock`);
+                this.logger.info(`Pid ${process$1.pid} trying to acquire lock`, "");
                 this.lockFileHandle = await fs.promises.open(this.lockFilePath, "wx+");
-                this.logger.info(`Pid ${process$1.pid} acquired lock`);
+                this.logger.info(`Pid ${process$1.pid} acquired lock`, "");
                 await this.lockFileHandle.write(process$1.pid.toString());
                 return;
             }
             catch (err) {
                 if (isNodeError(err)) {
-                    if (err.code === Constants$1.EEXIST_ERROR ||
-                        err.code === Constants$1.EPERM_ERROR) {
-                        this.logger.info(err.message);
+                    if (err.code === Constants.EEXIST_ERROR ||
+                        err.code === Constants.EPERM_ERROR) {
+                        this.logger.info(err.message, "");
                         await this.sleep(this.retryDelay);
                     }
                     else {
-                        this.logger.error(`${process$1.pid} was not able to acquire lock. Ran into error: ${err.message}`);
+                        this.logger.error(`${process$1.pid} was not able to acquire lock. Ran into error: ${err.message}`, "");
                         throw PersistenceError.createCrossPlatformLockError(err.message);
                     }
                 }
@@ -211,7 +211,7 @@ class CrossPlatformLock {
                 }
             }
         }
-        this.logger.error(`${process$1.pid} was not able to acquire lock. Exceeded amount of retries set in the options`);
+        this.logger.error(`${process$1.pid} was not able to acquire lock. Exceeded amount of retries set in the options`, "");
         throw PersistenceError.createCrossPlatformLockError("Not able to acquire lock. Exceeded amount of retries set in options");
     }
     /**
@@ -223,19 +223,19 @@ class CrossPlatformLock {
                 // if we have a file handle to the .lockfile, delete lock file
                 await fs.promises.unlink(this.lockFilePath);
                 await this.lockFileHandle.close();
-                this.logger.info("lockfile deleted");
+                this.logger.info("lockfile deleted", "");
             }
             else {
-                this.logger.warning("lockfile handle does not exist, so lockfile could not be deleted");
+                this.logger.warning("lockfile handle does not exist, so lockfile could not be deleted", "");
             }
         }
         catch (err) {
             if (isNodeError(err)) {
-                if (err.code === Constants$1.ENOENT_ERROR) {
-                    this.logger.info("Tried to unlock but lockfile does not exist");
+                if (err.code === Constants.ENOENT_ERROR) {
+                    this.logger.info("Tried to unlock but lockfile does not exist", "");
                 }
                 else {
-                    this.logger.error(`${process$1.pid} was not able to release lock. Ran into error: ${err.message}`);
+                    this.logger.error(`${process$1.pid} was not able to release lock. Ran into error: ${err.message}`, "");
                     throw PersistenceError.createCrossPlatformLockError(err.message);
                 }
             }
@@ -289,17 +289,17 @@ class PersistenceCachePlugin {
      * beforeCacheAccess() and afterCacheAccess().
      */
     async beforeCacheAccess(cacheContext) {
-        this.logger.info("Executing before cache access");
+        this.logger.info("Executing before cache access", "");
         const reloadNecessary = await this.persistence.reloadNecessary(this.lastSync);
         if (!reloadNecessary && this.currentCache !== null) {
             if (cacheContext.cacheHasChanged) {
-                this.logger.verbose("Cache context has changed");
+                this.logger.verbose("Cache context has changed", "");
                 await this.crossPlatformLock.lock();
             }
             return;
         }
         try {
-            this.logger.info(`Reload necessary. Last sync time: ${this.lastSync}`);
+            this.logger.info(`Reload necessary. Last sync time: ${this.lastSync}`, "");
             await this.crossPlatformLock.lock();
             this.currentCache = await this.persistence.load();
             this.lastSync = new Date().getTime();
@@ -307,17 +307,17 @@ class PersistenceCachePlugin {
                 cacheContext.tokenCache.deserialize(this.currentCache);
             }
             else {
-                this.logger.info("Cache empty.");
+                this.logger.info("Cache empty.", "");
             }
-            this.logger.info(`Last sync time updated to: ${this.lastSync}`);
+            this.logger.info(`Last sync time updated to: ${this.lastSync}`, "");
         }
         finally {
             if (!cacheContext.cacheHasChanged) {
                 await this.crossPlatformLock.unlock();
-                this.logger.info(`Pid ${process$1.pid} released lock`);
+                this.logger.info(`Pid ${process$1.pid} released lock`, "");
             }
             else {
-                this.logger.info(`Pid ${process$1.pid} beforeCacheAccess did not release lock`);
+                this.logger.info(`Pid ${process$1.pid} beforeCacheAccess did not release lock`, "");
             }
         }
     }
@@ -325,139 +325,45 @@ class PersistenceCachePlugin {
      * Writes to storage if MSAL in memory copy of cache has been changed.
      */
     async afterCacheAccess(cacheContext) {
-        this.logger.info("Executing after cache access");
+        this.logger.info("Executing after cache access", "");
         try {
             if (cacheContext.cacheHasChanged) {
-                this.logger.info("Msal in-memory cache has changed. Writing changes to persistence");
+                this.logger.info("Msal in-memory cache has changed. Writing changes to persistence", "");
                 this.currentCache = cacheContext.tokenCache.serialize();
                 await this.persistence.save(this.currentCache);
             }
             else {
-                this.logger.info("Msal in-memory cache has not changed. Did not write to persistence");
+                this.logger.info("Msal in-memory cache has not changed. Did not write to persistence", "");
             }
         }
         finally {
             await this.crossPlatformLock.unlock();
-            this.logger.info(`Pid ${process$1.pid} afterCacheAccess released lock`);
+            this.logger.info(`Pid ${process$1.pid} afterCacheAccess released lock`, "");
         }
     }
 }
 
-/*! @azure/msal-common v15.13.1 2025-10-29 */
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-const Constants = {
-    LIBRARY_NAME: "MSAL.JS",
-    SKU: "msal.js.common",
-    // default authority
-    DEFAULT_AUTHORITY: "https://login.microsoftonline.com/common/",
-    DEFAULT_AUTHORITY_HOST: "login.microsoftonline.com",
-    DEFAULT_COMMON_TENANT: "common",
-    // ADFS String
-    ADFS: "adfs",
-    DSTS: "dstsv2",
-    // Default AAD Instance Discovery Endpoint
-    AAD_INSTANCE_DISCOVERY_ENDPT: "https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=",
-    // CIAM URL
-    CIAM_AUTH_URL: ".ciamlogin.com",
-    AAD_TENANT_DOMAIN_SUFFIX: ".onmicrosoft.com",
-    // Resource delimiter - used for certain cache entries
-    RESOURCE_DELIM: "|",
-    // Placeholder for non-existent account ids/objects
-    NO_ACCOUNT: "NO_ACCOUNT",
-    // Claims
-    CLAIMS: "claims",
-    // Consumer UTID
-    CONSUMER_UTID: "9188040d-6c67-4c5b-b112-36a304b66dad",
-    // Default scopes
-    OPENID_SCOPE: "openid",
-    PROFILE_SCOPE: "profile",
-    OFFLINE_ACCESS_SCOPE: "offline_access",
-    EMAIL_SCOPE: "email",
-    CODE_GRANT_TYPE: "authorization_code",
-    RT_GRANT_TYPE: "refresh_token",
-    S256_CODE_CHALLENGE_METHOD: "S256",
-    URL_FORM_CONTENT_TYPE: "application/x-www-form-urlencoded;charset=utf-8",
-    AUTHORIZATION_PENDING: "authorization_pending",
-    NOT_DEFINED: "not_defined",
-    EMPTY_STRING: "",
-    NOT_APPLICABLE: "N/A",
-    NOT_AVAILABLE: "Not Available",
-    FORWARD_SLASH: "/",
-    IMDS_ENDPOINT: "http://169.254.169.254/metadata/instance/compute/location",
-    IMDS_VERSION: "2020-06-01",
-    IMDS_TIMEOUT: 2000,
-    AZURE_REGION_AUTO_DISCOVER_FLAG: "TryAutoDetect",
-    REGIONAL_AUTH_PUBLIC_CLOUD_SUFFIX: "login.microsoft.com",
-    KNOWN_PUBLIC_CLOUDS: [
-        "login.microsoftonline.com",
-        "login.windows.net",
-        "login.microsoft.com",
-        "sts.windows.net",
-    ],
-    SHR_NONCE_VALIDITY: 240,
-    INVALID_INSTANCE: "invalid_instance",
-};
-/**
- * we considered making this "enum" in the request instead of string, however it looks like the allowed list of
- * prompt values kept changing over past couple of years. There are some undocumented prompt values for some
- * internal partners too, hence the choice of generic "string" type instead of the "enum"
- */
-const PromptValue = {
-    LOGIN: "login",
-    SELECT_ACCOUNT: "select_account",
-    CONSENT: "consent",
-    NONE: "none",
-    CREATE: "create",
-    NO_SESSION: "no_session",
-};
-/**
- * Separators used in cache
- */
-const Separators = {
-    CACHE_KEY_SEPARATOR: "-"};
-const SERVER_TELEM_CONSTANTS = {
-    SCHEMA_VERSION: 5,
-    MAX_LAST_HEADER_BYTES: 330,
-    MAX_CACHED_ERRORS: 50,
-    CACHE_KEY: "server-telemetry",
-    CATEGORY_SEPARATOR: "|",
-    VALUE_SEPARATOR: ",",
-    OVERFLOW_TRUE: "1",
-    OVERFLOW_FALSE: "0",
-    UNKNOWN_ERROR: "unknown_error",
-};
-/**
- * Type of the authentication request
- */
-const AuthenticationScheme = {
-    BEARER: "Bearer",
-    POP: "pop",
-    SSH: "ssh-cert",
-};
-/**
- * Specifies the reason for fetching the access token from the identity provider
- */
-const CacheOutcome = {
-    // When a token is found in the cache or the cache is not supposed to be hit when making the request
-    NOT_APPLICABLE: "0"};
-
-/*! @azure/msal-common v15.13.1 2025-10-29 */
+function getDefaultErrorMessage(code) {
+    return `See https://aka.ms/msal.js.errors#${code} for details`;
+}
 /**
  * General error class thrown by the MSAL.js library.
  */
 class AuthError extends Error {
     constructor(errorCode, errorMessage, suberror) {
-        const errorString = errorMessage
-            ? `${errorCode}: ${errorMessage}`
-            : errorCode;
+        const message = errorMessage ||
+            (errorCode ? getDefaultErrorMessage(errorCode) : "");
+        const errorString = message ? `${errorCode}: ${message}` : errorCode;
         super(errorString);
         Object.setPrototypeOf(this, AuthError.prototype);
-        this.errorCode = errorCode || Constants.EMPTY_STRING;
-        this.errorMessage = errorMessage || Constants.EMPTY_STRING;
-        this.subError = suberror || Constants.EMPTY_STRING;
+        this.errorCode = errorCode || "";
+        this.errorMessage = message || "";
+        this.subError = suberror || "";
         this.name = "AuthError";
     }
     setCorrelationId(correlationId) {
@@ -465,57 +371,7 @@ class AuthError extends Error {
     }
 }
 
-/*! @azure/msal-common v15.13.1 2025-10-29 */
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-const clientInfoDecodingError = "client_info_decoding_error";
-const clientInfoEmptyError = "client_info_empty_error";
-const tokenParsingError = "token_parsing_error";
-const nullOrEmptyToken = "null_or_empty_token";
-const endpointResolutionError = "endpoints_resolution_error";
-const networkError = "network_error";
-const openIdConfigError = "openid_config_error";
-const hashNotDeserialized = "hash_not_deserialized";
-const invalidState = "invalid_state";
-const stateMismatch = "state_mismatch";
-const stateNotFound = "state_not_found";
-const nonceMismatch = "nonce_mismatch";
-const authTimeNotFound = "auth_time_not_found";
-const maxAgeTranspired = "max_age_transpired";
-const multipleMatchingTokens = "multiple_matching_tokens";
-const multipleMatchingAccounts = "multiple_matching_accounts";
-const multipleMatchingAppMetadata = "multiple_matching_appMetadata";
-const requestCannotBeMade = "request_cannot_be_made";
-const cannotRemoveEmptyScope = "cannot_remove_empty_scope";
-const cannotAppendScopeSet = "cannot_append_scopeset";
-const emptyInputScopeSet = "empty_input_scopeset";
-const deviceCodePollingCancelled = "device_code_polling_cancelled";
-const deviceCodeExpired = "device_code_expired";
-const deviceCodeUnknownError = "device_code_unknown_error";
-const noAccountInSilentRequest = "no_account_in_silent_request";
-const invalidCacheRecord = "invalid_cache_record";
-const invalidCacheEnvironment = "invalid_cache_environment";
-const noAccountFound = "no_account_found";
-const noCryptoObject = "no_crypto_object";
-const unexpectedCredentialType = "unexpected_credential_type";
-const invalidAssertion = "invalid_assertion";
-const invalidClientCredential = "invalid_client_credential";
-const tokenRefreshRequired = "token_refresh_required";
-const userTimeoutReached = "user_timeout_reached";
-const tokenClaimsCnfRequiredForSignedJwt = "token_claims_cnf_required_for_signedjwt";
-const authorizationCodeMissingFromServerResponse = "authorization_code_missing_from_server_response";
-const bindingKeyNotRemoved = "binding_key_not_removed";
-const endSessionEndpointNotSupported = "end_session_endpoint_not_supported";
-const keyIdMissing = "key_id_missing";
-const noNetworkConnectivity = "no_network_connectivity";
-const userCanceled = "user_canceled";
-const missingTenantIdError = "missing_tenant_id_error";
-const methodNotImplemented = "method_not_implemented";
-const nestedAppAuthBridgeDisabled = "nested_app_auth_bridge_disabled";
-
-/*! @azure/msal-common v15.13.1 2025-10-29 */
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -524,63 +380,12 @@ const nestedAppAuthBridgeDisabled = "nested_app_auth_bridge_disabled";
 /**
  * ClientAuthErrorMessage class containing string constants used by error codes and messages.
  */
-const ClientAuthErrorMessages = {
-    [clientInfoDecodingError]: "The client info could not be parsed/decoded correctly",
-    [clientInfoEmptyError]: "The client info was empty",
-    [tokenParsingError]: "Token cannot be parsed",
-    [nullOrEmptyToken]: "The token is null or empty",
-    [endpointResolutionError]: "Endpoints cannot be resolved",
-    [networkError]: "Network request failed",
-    [openIdConfigError]: "Could not retrieve endpoints. Check your authority and verify the .well-known/openid-configuration endpoint returns the required endpoints.",
-    [hashNotDeserialized]: "The hash parameters could not be deserialized",
-    [invalidState]: "State was not the expected format",
-    [stateMismatch]: "State mismatch error",
-    [stateNotFound]: "State not found",
-    [nonceMismatch]: "Nonce mismatch error",
-    [authTimeNotFound]: "Max Age was requested and the ID token is missing the auth_time variable." +
-        " auth_time is an optional claim and is not enabled by default - it must be enabled." +
-        " See https://aka.ms/msaljs/optional-claims for more information.",
-    [maxAgeTranspired]: "Max Age is set to 0, or too much time has elapsed since the last end-user authentication.",
-    [multipleMatchingTokens]: "The cache contains multiple tokens satisfying the requirements. " +
-        "Call AcquireToken again providing more requirements such as authority or account.",
-    [multipleMatchingAccounts]: "The cache contains multiple accounts satisfying the given parameters. Please pass more info to obtain the correct account",
-    [multipleMatchingAppMetadata]: "The cache contains multiple appMetadata satisfying the given parameters. Please pass more info to obtain the correct appMetadata",
-    [requestCannotBeMade]: "Token request cannot be made without authorization code or refresh token.",
-    [cannotRemoveEmptyScope]: "Cannot remove null or empty scope from ScopeSet",
-    [cannotAppendScopeSet]: "Cannot append ScopeSet",
-    [emptyInputScopeSet]: "Empty input ScopeSet cannot be processed",
-    [deviceCodePollingCancelled]: "Caller has cancelled token endpoint polling during device code flow by setting DeviceCodeRequest.cancel = true.",
-    [deviceCodeExpired]: "Device code is expired.",
-    [deviceCodeUnknownError]: "Device code stopped polling for unknown reasons.",
-    [noAccountInSilentRequest]: "Please pass an account object, silent flow is not supported without account information",
-    [invalidCacheRecord]: "Cache record object was null or undefined.",
-    [invalidCacheEnvironment]: "Invalid environment when attempting to create cache entry",
-    [noAccountFound]: "No account found in cache for given key.",
-    [noCryptoObject]: "No crypto object detected.",
-    [unexpectedCredentialType]: "Unexpected credential type.",
-    [invalidAssertion]: "Client assertion must meet requirements described in https://tools.ietf.org/html/rfc7515",
-    [invalidClientCredential]: "Client credential (secret, certificate, or assertion) must not be empty when creating a confidential client. An application should at most have one credential",
-    [tokenRefreshRequired]: "Cannot return token from cache because it must be refreshed. This may be due to one of the following reasons: forceRefresh parameter is set to true, claims have been requested, there is no cached access token or it is expired.",
-    [userTimeoutReached]: "User defined timeout for device code polling reached",
-    [tokenClaimsCnfRequiredForSignedJwt]: "Cannot generate a POP jwt if the token_claims are not populated",
-    [authorizationCodeMissingFromServerResponse]: "Server response does not contain an authorization code to proceed",
-    [bindingKeyNotRemoved]: "Could not remove the credential's binding key from storage.",
-    [endSessionEndpointNotSupported]: "The provided authority does not support logout",
-    [keyIdMissing]: "A keyId value is missing from the requested bound token's cache record and is required to match the token to it's stored binding key.",
-    [noNetworkConnectivity]: "No network connectivity. Check your internet connection.",
-    [userCanceled]: "User cancelled the flow.",
-    [missingTenantIdError]: "A tenant id - not common, organizations, or consumers - must be specified when using the client_credentials flow.",
-    [methodNotImplemented]: "This method has not been implemented",
-    [nestedAppAuthBridgeDisabled]: "The nested app auth bridge is disabled",
-};
 /**
  * Error thrown when there is an error in the client code running on the browser.
  */
 class ClientAuthError extends AuthError {
     constructor(errorCode, additionalMessage) {
-        super(errorCode, additionalMessage
-            ? `${ClientAuthErrorMessages[errorCode]}: ${additionalMessage}`
-            : ClientAuthErrorMessages[errorCode]);
+        super(errorCode, additionalMessage);
         this.name = "ClientAuthError";
         Object.setPrototypeOf(this, ClientAuthError.prototype);
     }
@@ -589,8 +394,12 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v15.13.1 2025-10-29 */
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
+const noAccountFound = "no_account_found";
+const noNetworkConnectivity = "no_network_connectivity";
+const userCanceled = "user_canceled";
 
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -624,10 +433,8 @@ class Logger {
             typeof setLoggerOptions.logLevel === "number"
                 ? setLoggerOptions.logLevel
                 : LogLevel.Info;
-        this.correlationId =
-            setLoggerOptions.correlationId || Constants.EMPTY_STRING;
-        this.packageName = packageName || Constants.EMPTY_STRING;
-        this.packageVersion = packageVersion || Constants.EMPTY_STRING;
+        this.packageName = packageName || "";
+        this.packageVersion = packageVersion || "";
     }
     static createDefaultLoggerOptions() {
         return {
@@ -641,12 +448,11 @@ class Logger {
     /**
      * Create new Logger with existing configurations.
      */
-    clone(packageName, packageVersion, correlationId) {
+    clone(packageName, packageVersion) {
         return new Logger({
             loggerCallback: this.localCallback,
             piiLoggingEnabled: this.piiLoggingEnabled,
             logLevel: this.level,
-            correlationId: correlationId || this.correlationId,
         }, packageName, packageVersion);
     }
     /**
@@ -659,9 +465,9 @@ class Logger {
         }
         const timestamp = new Date().toUTCString();
         // Add correlationId to logs if set, correlationId provided on log messages take precedence
-        const logHeader = `[${timestamp}] : [${options.correlationId || this.correlationId || ""}]`;
+        const logHeader = `[${timestamp}] : [${options.correlationId}]`;
         const log = `${logHeader} : ${this.packageName}@${this.packageVersion} : ${LogLevel[options.logLevel]} - ${logMessage}`;
-        // debug(`msal:${LogLevel[options.logLevel]}${options.containsPii ? "-Pii": Constants.EMPTY_STRING}${options.context ? `:${options.context}` : Constants.EMPTY_STRING}`)(logMessage);
+        // debug(`msal:${LogLevel[options.logLevel]}${options.containsPii ? "-Pii": Constants.""}${options.context ? `:${options.context}` : Constants.""}`)(logMessage);
         this.executeCallback(options.logLevel, log, options.containsPii || false);
     }
     /**
@@ -679,7 +485,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Error,
             containsPii: false,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -689,7 +495,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Error,
             containsPii: true,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -699,7 +505,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Warning,
             containsPii: false,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -709,7 +515,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Warning,
             containsPii: true,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -719,7 +525,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Info,
             containsPii: false,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -729,7 +535,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Info,
             containsPii: true,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -739,7 +545,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Verbose,
             containsPii: false,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -749,7 +555,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Verbose,
             containsPii: true,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -759,7 +565,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Trace,
             containsPii: false,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -769,7 +575,7 @@ class Logger {
         this.logMessage(message, {
             logLevel: LogLevel.Trace,
             containsPii: true,
-            correlationId: correlationId || Constants.EMPTY_STRING,
+            correlationId: correlationId,
         });
     }
     /**
@@ -780,72 +586,55 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v15.13.1 2025-10-29 */
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
+/**
+ * we considered making this "enum" in the request instead of string, however it looks like the allowed list of
+ * prompt values kept changing over past couple of years. There are some undocumented prompt values for some
+ * internal partners too, hence the choice of generic "string" type instead of the "enum"
  */
-const redirectUriEmpty = "redirect_uri_empty";
-const claimsRequestParsingError = "claims_request_parsing_error";
-const authorityUriInsecure = "authority_uri_insecure";
-const urlParseError = "url_parse_error";
-const urlEmptyError = "empty_url_error";
-const emptyInputScopesError = "empty_input_scopes_error";
-const invalidClaims = "invalid_claims";
-const tokenRequestEmpty = "token_request_empty";
-const logoutRequestEmpty = "logout_request_empty";
-const invalidCodeChallengeMethod = "invalid_code_challenge_method";
-const pkceParamsMissing = "pkce_params_missing";
-const invalidCloudDiscoveryMetadata = "invalid_cloud_discovery_metadata";
-const invalidAuthorityMetadata = "invalid_authority_metadata";
-const untrustedAuthority = "untrusted_authority";
-const missingSshJwk = "missing_ssh_jwk";
-const missingSshKid = "missing_ssh_kid";
-const missingNonceAuthenticationHeader = "missing_nonce_authentication_header";
-const invalidAuthenticationHeader = "invalid_authentication_header";
-const cannotSetOIDCOptions = "cannot_set_OIDCOptions";
-const cannotAllowPlatformBroker = "cannot_allow_platform_broker";
-const authorityMismatch = "authority_mismatch";
-const invalidRequestMethodForEAR = "invalid_request_method_for_EAR";
-const invalidAuthorizePostBodyParameters = "invalid_authorize_post_body_parameters";
+const PromptValue = {
+    LOGIN: "login",
+    SELECT_ACCOUNT: "select_account",
+    NONE: "none",
+    CREATE: "create"};
+/**
+ * Separators used in cache
+ */
+const CACHE_KEY_SEPARATOR = "-";
+const SERVER_TELEM_SCHEMA_VERSION = 5;
+const SERVER_TELEM_MAX_LAST_HEADER_BYTES = 330; // ESTS limit is 350B, set to 330 to provide a 20B buffer,
+const SERVER_TELEM_MAX_CACHED_ERRORS = 50; // Limit the number of errors that can be stored to prevent uncontrolled size gains
+const SERVER_TELEM_CACHE_KEY = "server-telemetry";
+const SERVER_TELEM_CATEGORY_SEPARATOR = "|";
+const SERVER_TELEM_VALUE_SEPARATOR = ",";
+const SERVER_TELEM_OVERFLOW_TRUE = "1";
+const SERVER_TELEM_OVERFLOW_FALSE = "0";
+const SERVER_TELEM_UNKNOWN_ERROR = "unknown_error";
+/**
+ * Type of the authentication request
+ */
+const AuthenticationScheme = {
+    BEARER: "Bearer",
+    POP: "pop"};
+/**
+ * Specifies the reason for fetching the access token from the identity provider
+ */
+const CacheOutcome = {
+    // When a token is found in the cache or the cache is not supposed to be hit when making the request
+    NOT_APPLICABLE: "0"};
 
-/*! @azure/msal-common v15.13.1 2025-10-29 */
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-const ClientConfigurationErrorMessages = {
-    [redirectUriEmpty]: "A redirect URI is required for all calls, and none has been set.",
-    [claimsRequestParsingError]: "Could not parse the given claims request object.",
-    [authorityUriInsecure]: "Authority URIs must use https.  Please see here for valid authority configuration options: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-js-initializing-client-applications#configuration-options",
-    [urlParseError]: "URL could not be parsed into appropriate segments.",
-    [urlEmptyError]: "URL was empty or null.",
-    [emptyInputScopesError]: "Scopes cannot be passed as null, undefined or empty array because they are required to obtain an access token.",
-    [invalidClaims]: "Given claims parameter must be a stringified JSON object.",
-    [tokenRequestEmpty]: "Token request was empty and not found in cache.",
-    [logoutRequestEmpty]: "The logout request was null or undefined.",
-    [invalidCodeChallengeMethod]: 'code_challenge_method passed is invalid. Valid values are "plain" and "S256".',
-    [pkceParamsMissing]: "Both params: code_challenge and code_challenge_method are to be passed if to be sent in the request",
-    [invalidCloudDiscoveryMetadata]: "Invalid cloudDiscoveryMetadata provided. Must be a stringified JSON object containing tenant_discovery_endpoint and metadata fields",
-    [invalidAuthorityMetadata]: "Invalid authorityMetadata provided. Must by a stringified JSON object containing authorization_endpoint, token_endpoint, issuer fields.",
-    [untrustedAuthority]: "The provided authority is not a trusted authority. Please include this authority in the knownAuthorities config parameter.",
-    [missingSshJwk]: "Missing sshJwk in SSH certificate request. A stringified JSON Web Key is required when using the SSH authentication scheme.",
-    [missingSshKid]: "Missing sshKid in SSH certificate request. A string that uniquely identifies the public SSH key is required when using the SSH authentication scheme.",
-    [missingNonceAuthenticationHeader]: "Unable to find an authentication header containing server nonce. Either the Authentication-Info or WWW-Authenticate headers must be present in order to obtain a server nonce.",
-    [invalidAuthenticationHeader]: "Invalid authentication header provided",
-    [cannotSetOIDCOptions]: "Cannot set OIDCOptions parameter. Please change the protocol mode to OIDC or use a non-Microsoft authority.",
-    [cannotAllowPlatformBroker]: "Cannot set allowPlatformBroker parameter to true when not in AAD protocol mode.",
-    [authorityMismatch]: "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority.",
-    [invalidAuthorizePostBodyParameters]: "Invalid authorize post body parameters provided. If you are using authorizePostBodyParameters, the request method must be POST. Please check the request method and parameters.",
-    [invalidRequestMethodForEAR]: "Invalid request method for EAR protocol mode. The request method cannot be GET when using EAR protocol mode. Please change the request method to POST.",
-};
 /**
  * Error thrown when there is an error in configuration of the MSAL.js library.
  */
 class ClientConfigurationError extends AuthError {
     constructor(errorCode) {
-        super(errorCode, ClientConfigurationErrorMessages[errorCode]);
+        super(errorCode);
         this.name = "ClientConfigurationError";
         Object.setPrototypeOf(this, ClientConfigurationError.prototype);
     }
@@ -854,10 +643,13 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v15.13.1 2025-10-29 */
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
+const untrustedAuthority = "untrusted_authority";
+
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
 const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 
-/*! @azure/msal-common v15.13.1 2025-10-29 */
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
 /**
  * Convert seconds to JS Date object. Seconds can be in a number or string format or undefined (will still return a date).
  * @param seconds
@@ -869,7 +661,7 @@ function toDateFromSeconds(seconds) {
     return new Date();
 }
 
-/*! @azure/msal-common v15.13.1 2025-10-29 */
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -888,7 +680,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v15.13.1 2025-10-29 */
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
 /**
  * Error thrown when user interaction is required.
  */
@@ -896,16 +688,16 @@ class InteractionRequiredAuthError extends AuthError {
     constructor(errorCode, errorMessage, subError, timestamp, traceId, correlationId, claims, errorNo) {
         super(errorCode, errorMessage, subError);
         Object.setPrototypeOf(this, InteractionRequiredAuthError.prototype);
-        this.timestamp = timestamp || Constants.EMPTY_STRING;
-        this.traceId = traceId || Constants.EMPTY_STRING;
-        this.correlationId = correlationId || Constants.EMPTY_STRING;
-        this.claims = claims || Constants.EMPTY_STRING;
+        this.timestamp = timestamp || "";
+        this.traceId = traceId || "";
+        this.correlationId = correlationId || "";
+        this.claims = claims || "";
         this.name = "InteractionRequiredAuthError";
         this.errorNo = errorNo;
     }
 }
 
-/*! @azure/msal-common v15.13.1 2025-10-29 */
+/*! @azure/msal-common v16.0.0-alpha.0 2025-10-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -956,34 +748,34 @@ class ServerTelemetryManager {
         this.cacheManager = cacheManager;
         this.apiId = telemetryRequest.apiId;
         this.correlationId = telemetryRequest.correlationId;
-        this.wrapperSKU = telemetryRequest.wrapperSKU || Constants.EMPTY_STRING;
-        this.wrapperVer = telemetryRequest.wrapperVer || Constants.EMPTY_STRING;
+        this.wrapperSKU = telemetryRequest.wrapperSKU || "";
+        this.wrapperVer = telemetryRequest.wrapperVer || "";
         this.telemetryCacheKey =
-            SERVER_TELEM_CONSTANTS.CACHE_KEY +
-                Separators.CACHE_KEY_SEPARATOR +
+            SERVER_TELEM_CACHE_KEY +
+                CACHE_KEY_SEPARATOR +
                 telemetryRequest.clientId;
     }
     /**
      * API to add MSER Telemetry to request
      */
     generateCurrentRequestHeaderValue() {
-        const request = `${this.apiId}${SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR}${this.cacheOutcome}`;
+        const request = `${this.apiId}${SERVER_TELEM_VALUE_SEPARATOR}${this.cacheOutcome}`;
         const platformFieldsArr = [this.wrapperSKU, this.wrapperVer];
         const nativeBrokerErrorCode = this.getNativeBrokerErrorCode();
         if (nativeBrokerErrorCode?.length) {
             platformFieldsArr.push(`broker_error=${nativeBrokerErrorCode}`);
         }
-        const platformFields = platformFieldsArr.join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+        const platformFields = platformFieldsArr.join(SERVER_TELEM_VALUE_SEPARATOR);
         const regionDiscoveryFields = this.getRegionDiscoveryFields();
         const requestWithRegionDiscoveryFields = [
             request,
             regionDiscoveryFields,
-        ].join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+        ].join(SERVER_TELEM_VALUE_SEPARATOR);
         return [
-            SERVER_TELEM_CONSTANTS.SCHEMA_VERSION,
+            SERVER_TELEM_SCHEMA_VERSION,
             requestWithRegionDiscoveryFields,
             platformFields,
-        ].join(SERVER_TELEM_CONSTANTS.CATEGORY_SEPARATOR);
+        ].join(SERVER_TELEM_CATEGORY_SEPARATOR);
     }
     /**
      * API to add MSER Telemetry for the last failed request
@@ -993,23 +785,23 @@ class ServerTelemetryManager {
         const maxErrors = ServerTelemetryManager.maxErrorsToSend(lastRequests);
         const failedRequests = lastRequests.failedRequests
             .slice(0, 2 * maxErrors)
-            .join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+            .join(SERVER_TELEM_VALUE_SEPARATOR);
         const errors = lastRequests.errors
             .slice(0, maxErrors)
-            .join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+            .join(SERVER_TELEM_VALUE_SEPARATOR);
         const errorCount = lastRequests.errors.length;
         // Indicate whether this header contains all data or partial data
         const overflow = maxErrors < errorCount
-            ? SERVER_TELEM_CONSTANTS.OVERFLOW_TRUE
-            : SERVER_TELEM_CONSTANTS.OVERFLOW_FALSE;
-        const platformFields = [errorCount, overflow].join(SERVER_TELEM_CONSTANTS.VALUE_SEPARATOR);
+            ? SERVER_TELEM_OVERFLOW_TRUE
+            : SERVER_TELEM_OVERFLOW_FALSE;
+        const platformFields = [errorCount, overflow].join(SERVER_TELEM_VALUE_SEPARATOR);
         return [
-            SERVER_TELEM_CONSTANTS.SCHEMA_VERSION,
+            SERVER_TELEM_SCHEMA_VERSION,
             lastRequests.cacheHits,
             failedRequests,
             errors,
             platformFields,
-        ].join(SERVER_TELEM_CONSTANTS.CATEGORY_SEPARATOR);
+        ].join(SERVER_TELEM_CATEGORY_SEPARATOR);
     }
     /**
      * API to cache token failures for MSER data capture
@@ -1018,7 +810,7 @@ class ServerTelemetryManager {
     cacheFailedRequest(error) {
         const lastRequests = this.getLastRequests();
         if (lastRequests.errors.length >=
-            SERVER_TELEM_CONSTANTS.MAX_CACHED_ERRORS) {
+            SERVER_TELEM_MAX_CACHED_ERRORS) {
             // Remove a cached error to make room, first in first out
             lastRequests.failedRequests.shift(); // apiId
             lastRequests.failedRequests.shift(); // correlationId
@@ -1042,7 +834,7 @@ class ServerTelemetryManager {
             }
         }
         else {
-            lastRequests.errors.push(SERVER_TELEM_CONSTANTS.UNKNOWN_ERROR);
+            lastRequests.errors.push(SERVER_TELEM_UNKNOWN_ERROR);
         }
         this.cacheManager.setServerTelemetry(this.telemetryCacheKey, lastRequests, this.correlationId);
         return;
@@ -1065,7 +857,7 @@ class ServerTelemetryManager {
             errors: [],
             cacheHits: 0,
         };
-        const lastRequests = this.cacheManager.getServerTelemetry(this.telemetryCacheKey);
+        const lastRequests = this.cacheManager.getServerTelemetry(this.telemetryCacheKey, this.correlationId);
         return lastRequests || initialValue;
     }
     /**
@@ -1100,18 +892,16 @@ class ServerTelemetryManager {
         const errorCount = serverTelemetryEntity.errors.length;
         for (i = 0; i < errorCount; i++) {
             // failedRequests parameter contains pairs of apiId and correlationId, multiply index by 2 to preserve pairs
-            const apiId = serverTelemetryEntity.failedRequests[2 * i] ||
-                Constants.EMPTY_STRING;
-            const correlationId = serverTelemetryEntity.failedRequests[2 * i + 1] ||
-                Constants.EMPTY_STRING;
-            const errorCode = serverTelemetryEntity.errors[i] || Constants.EMPTY_STRING;
+            const apiId = serverTelemetryEntity.failedRequests[2 * i] || "";
+            const correlationId = serverTelemetryEntity.failedRequests[2 * i + 1] || "";
+            const errorCode = serverTelemetryEntity.errors[i] || "";
             // Count number of characters that would be added to header, each character is 1 byte. Add 3 at the end to account for separators
             dataSize +=
                 apiId.toString().length +
                     correlationId.toString().length +
                     errorCode.length +
                     3;
-            if (dataSize < SERVER_TELEM_CONSTANTS.MAX_LAST_HEADER_BYTES) {
+            if (dataSize < SERVER_TELEM_MAX_LAST_HEADER_BYTES) {
                 // Adding this entry to the header would still keep header size below the limit
                 maxErrors += 1;
             }
@@ -1128,9 +918,9 @@ class ServerTelemetryManager {
      */
     getRegionDiscoveryFields() {
         const regionDiscoveryFields = [];
-        regionDiscoveryFields.push(this.regionUsed || Constants.EMPTY_STRING);
-        regionDiscoveryFields.push(this.regionSource || Constants.EMPTY_STRING);
-        regionDiscoveryFields.push(this.regionOutcome || Constants.EMPTY_STRING);
+        regionDiscoveryFields.push(this.regionUsed || "");
+        regionDiscoveryFields.push(this.regionSource || "");
+        regionDiscoveryFields.push(this.regionOutcome || "");
         return regionDiscoveryFields.join(",");
     }
     /**
@@ -1177,15 +967,15 @@ class BasePersistence {
         // We are using a different location for the test to avoid overriding the functional cache
         const persistenceValidator = await this.createForPersistenceValidation();
         try {
-            await persistenceValidator.save(Constants$1.PERSISTENCE_TEST_DATA);
+            await persistenceValidator.save(Constants.PERSISTENCE_TEST_DATA);
             const retrievedDummyData = await persistenceValidator.load();
             if (!retrievedDummyData) {
                 throw PersistenceError.createCachePersistenceError("Persistence check failed. Data was written but it could not be read. " +
                     "Possible cause: on Linux, LibSecret is installed but D-Bus isn't running \
                     because it cannot be started over SSH.");
             }
-            if (retrievedDummyData !== Constants$1.PERSISTENCE_TEST_DATA) {
-                throw PersistenceError.createCachePersistenceError(`Persistence check failed. Data written ${Constants$1.PERSISTENCE_TEST_DATA} is different \
+            if (retrievedDummyData !== Constants.PERSISTENCE_TEST_DATA) {
+                throw PersistenceError.createCachePersistenceError(`Persistence check failed. Data written ${Constants.PERSISTENCE_TEST_DATA} is different \
                     from data read ${retrievedDummyData}`);
             }
             await persistenceValidator.delete();
@@ -1278,9 +1068,9 @@ class FilePersistence extends BasePersistence {
         }
         catch (err) {
             if (isNodeError(err)) {
-                if (err.code === Constants$1.ENOENT_ERROR) {
+                if (err.code === Constants.ENOENT_ERROR) {
                     // file does not exist, so it was not deleted
-                    this.logger.warning("Cache file does not exist, so it could not be deleted");
+                    this.logger.warning("Cache file does not exist, so it could not be deleted", "");
                     return false;
                 }
                 throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
@@ -1319,9 +1109,9 @@ class FilePersistence extends BasePersistence {
         }
         catch (err) {
             if (isNodeError(err)) {
-                if (err.code === Constants$1.ENOENT_ERROR) {
+                if (err.code === Constants.ENOENT_ERROR) {
                     // file does not exist, so it's never been modified
-                    this.logger.verbose("Cache file does not exist");
+                    this.logger.verbose("Cache file does not exist", "");
                     return 0;
                 }
                 throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
@@ -1336,7 +1126,7 @@ class FilePersistence extends BasePersistence {
         // File is created only if it does not exist
         const fileHandle = await fs.promises.open(this.filePath, "a");
         await fileHandle.close();
-        this.logger.info(`File created at ${this.filePath}`);
+        this.logger.info(`File created at ${this.filePath}`, "");
     }
     async createFileDirectory() {
         try {
@@ -1344,8 +1134,8 @@ class FilePersistence extends BasePersistence {
         }
         catch (err) {
             if (isNodeError(err)) {
-                if (err.code === Constants$1.EEXIST_ERROR) {
-                    this.logger.info(`Directory ${path.dirname(this.filePath)}  already exists`);
+                if (err.code === Constants.EEXIST_ERROR) {
+                    this.logger.info(`Directory ${path.dirname(this.filePath)}  already exists`, "");
                 }
                 else {
                     throw PersistenceError.createFileSystemError(err.code || ErrorCodes.UNKNOWN, err.message);
@@ -1456,7 +1246,7 @@ class FilePersistenceWithDataProtection extends BasePersistence {
                 0 === encryptedContents.length) {
                 this.filePersistence
                     .getLogger()
-                    .info("Encrypted contents loaded from file were null or empty");
+                    .info("Encrypted contents loaded from file were null or empty", "");
                 return null;
             }
             return Dpapi.unprotectData(encryptedContents, this.optionalEntropy, this.scope.toString()).toString();
@@ -1653,19 +1443,19 @@ class LibSecretPersistence extends BasePersistence {
  */
 class Environment {
     static get homeEnvVar() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.HOME);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.HOME);
     }
     static get lognameEnvVar() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.LOGNAME);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LOGNAME);
     }
     static get userEnvVar() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.USER);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.USER);
     }
     static get lnameEnvVar() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.LNAME);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LNAME);
     }
     static get usernameEnvVar() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.USERNAME);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.USERNAME);
     }
     static getEnvironmentVariable(name) {
         return process.env[name] || "";
@@ -1686,7 +1476,7 @@ class Environment {
         if (typeof process.getuid !== "function") {
             return false;
         }
-        return process.getuid() === Constants$1.LINUX_ROOT_USER_GUID;
+        return process.getuid() === Constants.LINUX_ROOT_USER_GUID;
     }
     static getUserRootDirectory() {
         return !this.isWindowsPlatform()
@@ -1694,7 +1484,7 @@ class Environment {
             : this.getUserHomeDirOnWindows();
     }
     static getUserHomeDirOnWindows() {
-        return this.getEnvironmentVariable(Constants$1.ENVIRONMENT.LOCAL_APPLICATION_DATA);
+        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LOCAL_APPLICATION_DATA);
     }
     static getUserHomeDirOnUnix() {
         if (this.isWindowsPlatform()) {
@@ -1789,34 +1579,6 @@ class PersistenceCreator {
     }
 }
 
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-class StringUtils {
-    /**
-     * Converts a numeric tag to a string representation
-     * @param tag - The numeric tag to convert
-     * @returns The string representation of the tag
-     */
-    static tagToString(tag) {
-        if (tag === 0) {
-            return "UNTAG";
-        }
-        const tagSymbolSpace = "abcdefghijklmnopqrstuvwxyz0123456789****************************";
-        let tagBuffer = "*****";
-        const chars = [
-            tagSymbolSpace[(tag >> 24) & 0x3f],
-            tagSymbolSpace[(tag >> 18) & 0x3f],
-            tagSymbolSpace[(tag >> 12) & 0x3f],
-            tagSymbolSpace[(tag >> 6) & 0x3f],
-            tagSymbolSpace[(tag >> 0) & 0x3f],
-        ];
-        tagBuffer = chars.join("");
-        return tagBuffer;
-    }
-}
-
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1826,14 +1588,14 @@ class NativeAuthError extends AuthError {
         super(errorStatus, errorContext);
         this.name = "NativeAuthError";
         this.statusCode = errorCode;
-        this.tag = StringUtils.tagToString(errorTag);
+        this.tag = errorTag;
         Object.setPrototypeOf(this, NativeAuthError.prototype);
     }
 }
 
 /* eslint-disable header/header */
 const name = "@azure/msal-node-extensions";
-const version = "1.5.24";
+const version = "5.0.0-alpha.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1852,62 +1614,62 @@ class NativeBrokerPlugin {
     }
     setLogger(loggerOptions) {
         this.logger = new Logger(loggerOptions, name, version);
-        const logCallback = (message, logLevel, containsPii) => {
+        const logCallback = (message, logLevel, containsPii, correlationId = "") => {
             switch (logLevel) {
                 case msalNodeRuntime.LogLevel.Trace:
                     if (containsPii) {
-                        this.logger.tracePii(message);
+                        this.logger.tracePii(message, correlationId);
                     }
                     else {
-                        this.logger.trace(message);
+                        this.logger.trace(message, correlationId);
                     }
                     break;
                 case msalNodeRuntime.LogLevel.Debug:
                     if (containsPii) {
-                        this.logger.tracePii(message);
+                        this.logger.tracePii(message, correlationId);
                     }
                     else {
-                        this.logger.trace(message);
+                        this.logger.trace(message, correlationId);
                     }
                     break;
                 case msalNodeRuntime.LogLevel.Info:
                     if (containsPii) {
-                        this.logger.infoPii(message);
+                        this.logger.infoPii(message, correlationId);
                     }
                     else {
-                        this.logger.info(message);
+                        this.logger.info(message, correlationId);
                     }
                     break;
                 case msalNodeRuntime.LogLevel.Warning:
                     if (containsPii) {
-                        this.logger.warningPii(message);
+                        this.logger.warningPii(message, correlationId);
                     }
                     else {
-                        this.logger.warning(message);
+                        this.logger.warning(message, correlationId);
                     }
                     break;
                 case msalNodeRuntime.LogLevel.Error:
                     if (containsPii) {
-                        this.logger.errorPii(message);
+                        this.logger.errorPii(message, correlationId);
                     }
                     else {
-                        this.logger.error(message);
+                        this.logger.error(message, correlationId);
                     }
                     break;
                 case msalNodeRuntime.LogLevel.Fatal:
                     if (containsPii) {
-                        this.logger.errorPii(message);
+                        this.logger.errorPii(message, correlationId);
                     }
                     else {
-                        this.logger.error(message);
+                        this.logger.error(message, correlationId);
                     }
                     break;
                 default:
                     if (containsPii) {
-                        this.logger.infoPii(message);
+                        this.logger.infoPii(message, correlationId);
                     }
                     else {
-                        this.logger.info(message);
+                        this.logger.info(message, correlationId);
                     }
                     break;
             }
@@ -1961,13 +1723,10 @@ class NativeBrokerPlugin {
     async acquireTokenSilent(request) {
         this.logger.trace("NativeBrokerPlugin - acquireTokenSilent called", request.correlationId);
         const platformRequest = request;
-        if (!platformRequest.redirectUri) {
-            platformRequest.redirectUri =
-                this.chooseRedirectUriByPlatform(platformRequest);
-            this.logger.info("NativeBrokerPlugin - No Redirect URI provided, using default", platformRequest.correlationId);
-        }
         const authParams = this.generateRequestParameters(platformRequest);
         const account = await this.getAccount(platformRequest);
+        platformRequest.redirectUri =
+            this.chooseRedirectUriByPlatform(platformRequest);
         return new Promise((resolve, reject) => {
             const resultCallback = (result) => {
                 try {
@@ -2002,12 +1761,9 @@ class NativeBrokerPlugin {
     async acquireTokenInteractive(request, providedWindowHandle) {
         this.logger.trace("NativeBrokerPlugin - acquireTokenInteractive called", request.correlationId);
         const platformRequest = request;
-        if (!platformRequest.redirectUri) {
-            platformRequest.redirectUri =
-                this.chooseRedirectUriByPlatform(platformRequest);
-            this.logger.info("NativeBrokerPlugin - No Redirect URI provided, using default", platformRequest.correlationId);
-        }
         const authParams = this.generateRequestParameters(platformRequest);
+        platformRequest.redirectUri =
+            this.chooseRedirectUriByPlatform(platformRequest);
         const account = await this.getAccount(platformRequest);
         const windowHandle = providedWindowHandle || Buffer.from([0]);
         return new Promise((resolve, reject) => {
@@ -2031,8 +1787,7 @@ class NativeBrokerPlugin {
                     case PromptValue.SELECT_ACCOUNT:
                     case PromptValue.CREATE:
                         this.logger.info("Calling native interop SignInInteractively API", platformRequest.correlationId);
-                        const loginHint = platformRequest.loginHint ||
-                            Constants.EMPTY_STRING;
+                        const loginHint = platformRequest.loginHint || "";
                         msalNodeRuntime.msalNodeRuntime.SignInInteractivelyAsync(windowHandle, authParams, platformRequest.correlationId, loginHint, resultCallback);
                         break;
                     case PromptValue.NONE:
@@ -2052,8 +1807,7 @@ class NativeBrokerPlugin {
                         }
                         else {
                             this.logger.info("Calling native interop SignIn API", platformRequest.correlationId);
-                            const loginHint = platformRequest.loginHint ||
-                                Constants.EMPTY_STRING;
+                            const loginHint = platformRequest.loginHint || "";
                             msalNodeRuntime.msalNodeRuntime.SignInAsync(windowHandle, authParams, platformRequest.correlationId, loginHint, resultCallback);
                         }
                         break;
@@ -2137,12 +1891,13 @@ class NativeBrokerPlugin {
         const authParams = new msalNodeRuntime.msalNodeRuntime.AuthParameters();
         try {
             authParams.CreateAuthParameters(request.clientId, request.authority);
-            authParams.SetRedirectUri(request.redirectUri);
+            authParams.SetRedirectUri(this.chooseRedirectUriByPlatform(request));
             authParams.SetRequestedScopes(request.scopes.join(" "));
             if (request.claims) {
                 authParams.SetDecodedClaims(request.claims);
             }
-            if (request.authenticationScheme === AuthenticationScheme.POP) {
+            if (request.authenticationScheme ===
+                AuthenticationScheme.POP) {
                 if (!request.resourceRequestMethod ||
                     !request.resourceRequestUri) {
                     throw new Error("Authentication Scheme set to POP but one or more of the following parameters are missing: resourceRequestMethod, resourceRequestUri");
@@ -2233,12 +1988,12 @@ class NativeBrokerPlugin {
             expiresOn: toDateFromSeconds(authResult.expiresOn),
             tokenType: tokenType,
             correlationId: request.correlationId,
-            fromNativeBroker: true,
+            fromPlatformBroker: true,
         };
         return result;
     }
     generateAccountInfo(account, idTokenClaims) {
-        this.logger.trace("NativeBrokerPlugin - generateAccountInfo called");
+        this.logger.trace("NativeBrokerPlugin - generateAccountInfo called", "");
         const accountInfo = {
             homeAccountId: account.homeAccountId,
             environment: account.environment,
@@ -2262,14 +2017,10 @@ class NativeBrokerPlugin {
             typeof error === "object" &&
             this.isMsalRuntimeError(error)) {
             const { errorCode, errorStatus, errorContext, errorTag } = error;
-            const tagString = StringUtils.tagToString(errorTag);
-            const enhancedErrorContext = errorContext
-                ? `${errorContext} (Error Code: ${errorCode}, Tag: ${tagString})`
-                : `(Error Code: ${errorCode}, Tag: ${tagString})`;
             switch (errorStatus) {
                 case msalNodeRuntime.ErrorStatus.InteractionRequired:
                 case msalNodeRuntime.ErrorStatus.AccountUnusable:
-                    return new InteractionRequiredAuthError(ErrorCodes.INTERATION_REQUIRED_ERROR_CODE, enhancedErrorContext);
+                    return new InteractionRequiredAuthError(ErrorCodes.INTERATION_REQUIRED_ERROR_CODE, errorContext);
                 case msalNodeRuntime.ErrorStatus.NoNetwork:
                 case msalNodeRuntime.ErrorStatus.NetworkTemporarilyUnavailable:
                     return createClientAuthError(noNetworkConnectivity);
@@ -2285,7 +2036,7 @@ class NativeBrokerPlugin {
                 case msalNodeRuntime.ErrorStatus.AccountNotFound:
                     return createClientAuthError(noAccountFound);
                 default:
-                    return new NativeAuthError(msalNodeRuntime.ErrorStatus[errorStatus], enhancedErrorContext, errorCode, errorTag);
+                    return new NativeAuthError(msalNodeRuntime.ErrorStatus[errorStatus], errorContext, errorCode, errorTag);
             }
         }
         throw error;
@@ -2301,5 +2052,4 @@ exports.LibSecretPersistence = LibSecretPersistence;
 exports.NativeBrokerPlugin = NativeBrokerPlugin;
 exports.PersistenceCachePlugin = PersistenceCachePlugin;
 exports.PersistenceCreator = PersistenceCreator;
-exports.StringUtils = StringUtils;
 //# sourceMappingURL=msal-node-extensions.cjs.map