NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
npm · #2388 most downloaded on npm
Microsoft Authentication Library for js
Last release today
06 Oct 2026
Ships on a steady schedule
a new release about every 2 weeks
Nearly every release is documented
notes for 54 of the last 60 stable releases
79 versions withdrawn
withdrawn after publishing
7 years old
208 releases · first in 2020
One column per quarter.
Coalesce concurrent platform-broker acquireTokenSilent requests #8886 ( kshabelko@microsoft.com )
Tue, 06 Oct 2026 20:48:41 GMT
Bump @azure/msal-browser to match @azure/msal-browser-1p ( msaljsbuilds@microsoft.com )
Fri, 02 Oct 2026 19:03:42 GMT
Add Native Auth V2 password reset, sign-in, sign-up, and SMS MFA flows. #8830 ( yongdiwang@microsoft.com )
Wed, 23 Sep 2026 15:49:43 GMT
Export shared web broker bridge runtime utilities from the package root. #8792 ( shylasummers@microsoft.com )
Tue, 15 Sep 2026 19:42:08 GMT
Validate the relayed request in runPopupRelay before navigating and add an optional allowedAuthorityOrigins pin #8800 ( kshabelko@microsoft.com )
Wed, 02 Sep 2026 21:15:30 GMT
Enable browser-native PublicClientApplication DPoP acquisition flows #8735 ( hectormmg@microsoft.com )
Fri, 28 Aug 2026 21:29:53 GMT
Add browser token-binding key lifecycle support for keyId-bound ES256 DPoP keys #8708 ( hectormmg@microsoft.com )
Tue, 18 Aug 2026 20:10:56 GMT
Add attribute-tokens support #8700 (spingale@microsoft.com)
Tue, 04 Aug 2026 20:17:38 GMT
Add single retry with 100ms backoff for token POST transport failures #8732 (thomas.norling@microsoft.com)
Wed, 29 Jul 2026 00:26:30 GMT
Add internal ES256/P-256 DPoP crypto support to BrowserCrypto #8683 (hectormmg@microsoft.com)
Wed, 15 Jul 2026 22:35:35 GMT
Add auth.popupRelayUri: a double-popup option for apps that customize COOP/storage-partitioning, relaying acquireTokenPopup/logoutPopup through a top-
Tue, 07 Jul 2026 22:16:01 GMT
Bump @azure/msal-browser to match @azure/msal-browser-1p (msaljsbuilds@microsoft.com)
Tue, 30 Jun 2026 21:04:19 GMT
Add NativeAccountId property to TenantProfile and deprecate top-level AccountEntity property #8649 (lalimasharda@microsoft.com)
Tue, 23 Jun 2026 22:19:29 GMT
Enhance logging functionality by injecting runtime variables into decoded messages #8644 (kshabelko@microsoft.com)
Add per-type migration telemetry counters for cache migration #8628 (thomas.norling@microsoft.com)
Wed, 10 Jun 2026 22:41:33 GMT
Rename uxNotAllowed error code to uiNotAllowed #8608 (198982749+Copilot@users.noreply.github.com)
Fri, 05 Jun 2026 22:24:22 GMT
Add allowPlatformBrokerWithDOM experimental config flag for DOM-based platform brokering #8589 (lalimasharda@microsoft.com)
Tue, 19 May 2026 19:29:14 GMT
requestInterceptor configuration option that lets apps attach additional x-* headers to custom-auth backend requests (e.g., for fraud/bot-detection vendors). Headers without the x- prefix and headers starting with reserved prefixes (x-client-, x-ms-, x-broker-, x-app-) are filtered out. #8587 (shen.jian@live.com)Bump @azure/msal-common to v16.6.1
Mon, 11 May 2026 21:48:15 GMT
Add native auth e2e sample app (yongdiwang@microsoft.com)
Discard local storage events from another client ids #8795 ( kshabelko@microsoft.com )
Wed, 23 Sep 2026 22:11:04 GMT
Bump @azure/msal-browser to match @azure/msal-browser-1p (msaljsbuilds@microsoft.com)
Tue, 28 Apr 2026 21:30:31 GMT
Add CJS build for redirect-bridge subpath export #8541 (kshabelko@microsoft.com)
Tue, 21 Apr 2026 22:41:19 GMT
Bump @azure/msal-browser to v5.20.0 (beachball)
Fri, 28 Aug 2026 21:29:54 GMT
Thu, 16 Apr 2026 22:44:53 GMT
Track online/offline status change #8411 (thomas.norling@microsoft.com)
Wed, 01 Apr 2026 20:08:59 GMT
Remove hidden iframe after receiving response from the redirect bridge #8459 (kshabelko@microsoft.com)
Set correlation ID after initialization for NAA #8447 (shylasummers@microsoft.com)
Thu, 19 Mar 2026 23:46:44 GMT
Add Azure Arc user-assigned managed identity support: forward the client_id/object_id/msi_res_id selector and fail closed when the token response does
Tue, 18 Aug 2026 20:10:56 GMT
Tue, 18 Aug 2026 20:10:56 GMT
Wed, 18 Mar 2026 20:47:24 GMT
Bump @azure/msal-common to v16.14.0 (beachball)
Fri, 28 Aug 2026 21:29:54 GMT
Tue, 04 Aug 2026 20:17:38 GMT
claimsFromClient request parameter to forward client-originated claims to IDP #8686 (rginsburg@microsoft.com)Fri, 13 Mar 2026 22:36:58 GMT
Nothing published for this version
Bump @azure/msal-common to v16.13.0 (beachball)
Tue, 18 Aug 2026 20:10:56 GMT
Mon, 02 Mar 2026 19:25:47 GMT
Add silentRefreshReason telemetry field to PerformanceEvent #8336 (kshabelko@microsoft.com)
Tue, 24 Feb 2026 21:51:51 GMT
Add correlationId to events #8288 (thomas.norling@microsoft.com)
Tue, 10 Feb 2026 23:04:27 GMT
Bump @azure/msal-browser to match @azure/msal-browser-1p (msaljsbuilds@microsoft.com)
Wed, 28 Jan 2026 18:43:41 GMT
Remove deprecated functions and parameters (shylasummers@microsoft.com)
Sat, 17 Jan 2026 03:11:36 GMT
asyncPopups to navigatePopups in Configuration #7812 (joarroyo@microsoft.com)Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
loadExternalTokens fixes #8242 (thomas.norling@microsoft.com)
Sat, 17 Jan 2026 01:12:51 GMT
Add native auth e2e sample app (yongdiwang@microsoft.com)
Tue, 13 Jan 2026 14:23:32 GMT
Add DOM API configuration, #8171 (sameera.gajjarapu@microsoft.com)
Thu, 04 Dec 2025 05:46:36 GMT
EAR flow falls back to auth code when /authorize returns code #8111 (thomas.norling@microsoft.com)
Wed, 19 Nov 2025 23:13:10 GMT
Add allow="local-network-access *" attribute to iframe for Chrome 142 compatibility (198982749+Copilot@users.noreply.github.com)
Thu, 06 Nov 2025 00:32:05 GMT
Don't encrypt localStorage when KMSI returned in idToken (thomas.norling@microsoft.com)
Wed, 29 Oct 2025 00:04:33 GMT
Introduce the stateType property in state classes for the type detection #8090 (shen.jian@live.com)
Fri, 17 Oct 2025 17:09:06 GMT
[Native Auth] Enable the MFA and JIT (SMS) in the public interfaces #8069 (shen.jian@live.com)
Thu, 09 Oct 2025 00:57:39 GMT
Add prompt=select_account for native flows (#8062) (sameera.gajjarapu@microsoft.com)
Tue, 30 Sep 2025 22:02:06 GMT
[Native Auth] Add MFA related state and results (shen.jian@live.com)
Wed, 24 Sep 2025 21:54:45 GMT
Support authentication method registration during Sign-In, #8007 (shen.jian@live.com)
Wed, 17 Sep 2025 09:50:42 GMT
Export client capabilities helper (thomas.norling@microsoft.com)
Tue, 09 Sep 2025 20:27:59 GMT
Add extraQueryParams for api calls #7974 (yongdiwang@microsoft.com)
Wed, 03 Sep 2025 21:47:34 GMT
Backward compatibility support #7962 (yongdiwang@microsoft.com)
Wed, 27 Aug 2025 00:59:59 GMT
Add Platform Telemetry (PR #7991) (sameera.gajjarapu@microsoft.com)
Tue, 19 Aug 2025 21:26:21 GMT
Instrument timed out or cancelled pre-redirect requests #7984 (kshabelko@microsoft.com)
Tue, 12 Aug 2025 22:53:32 GMT
Cache upgrade & rollback support (thomas.norling@microsoft.com)
Tue, 05 Aug 2025 20:00:24 GMT
Add support for custom claims and password change required error, #7948 (ydi.w127@gmail.com)
Wed, 30 Jul 2025 18:23:45 GMT
Add support for authorize call using method POST #7920 (hemoral@microsoft.com)
Wed, 23 Jul 2025 14:54:36 GMT
Your coding agent can read these notes before it upgrades. Set up the MCP server →