NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
npm · #2032 most downloaded on npm
Microsoft Authentication Library for js
Last release 5 days ago
02 Oct 2026
Ships on a steady schedule
a new release about every 2 weeks
Most releases are documented
notes for 53 of the last 60 stable releases
3 versions withdrawn
withdrawn after publishing
7 years old
187 releases · first in 2020
One column per quarter.
Include the resource parameter in refresh token requests #8861 ( shylasummers@microsoft.com )
Fri, 02 Oct 2026 19:03:42 GMT
Enforce bidirectional nonce validation for authorization code token responses #8801 ( joarroyo@microsoft.com )
Tue, 15 Sep 2026 19:42:08 GMT
Remove legacy environment metadata and legacy authority support #8794 ( sameera.gajjarapu@microsoft.com )
Fri, 28 Aug 2026 21:29:53 GMT
Add internal keyId-bound contracts for DPoP proof generation #8708 ( hectormmg@microsoft.com )
Tue, 18 Aug 2026 20:10:56 GMT
Add attribute-tokens support #8700 ( spingale@microsoft.com )
Tue, 04 Aug 2026 20:17:38 GMT
addClaims/buildMergedClaims #8686 (rginsburg@microsoft.com)Add optional correlationId and performanceClient to NetworkRequestOptions; add fetchRetryCount to PerformanceEvent #8732 (thomas.norling@microsoft.com
Wed, 29 Jul 2026 00:26:31 GMT
Add internal DPoP proof payload builder (DpopProofGenerator) with RFC 9449 token-endpoint and resource-endpoint claim helpers #8683 (hectormmg@microso
Wed, 15 Jul 2026 22:35:35 GMT
Add invalid_response_mode ClientConfigurationError code #8694 (joarroyo@microsoft.com)
Tue, 07 Jul 2026 22:16:01 GMT
Add addGlobalFields method to PerformanceClient #8688 (thomas.norling@microsoft.com)
Deprecate the max_age request parameter and stop validating the auth_time of returned tokens. maxAge is now a no-op; the unused checkMaxAge helper and…
Tue, 23 Jun 2026 22:19:29 GMT
Add package metadata to loggers and fix SKU name #8647 (kshabelko@microsoft.com)
Tue, 16 Jun 2026 19:46:34 GMT
Add per-type migration telemetry counter fields to PerformanceEvent #8628 (thomas.norling@microsoft.com)
Rename uxNotAllowed error code to uiNotAllowed #8608 (198982749+Copilot@users.noreply.github.com)
Add issuer validation Rule 5: accept issuer hosts explicitly listed in knownAuthorities. Fixes Entra External ID (CIAM) regression where a GUID-based
Thu, 28 May 2026 20:48:56 GMT
Add invalidPlatformBrokerConfiguration error code for DOM-based platform brokering #8589 (lalimasharda@microsoft.com)
Tue, 19 May 2026 19:29:14 GMT
Add issuer validation check on OIDC discovery from network #8570 (lalimasharda@microsoft.com)
Mon, 11 May 2026 21:48:15 GMT
Remove duplicate typings in the build output #8557 (thomas.norling@microsoft.com)
Thu, 07 May 2026 19:01:04 GMT
Fix unstable sort that can result in returning guest account instead of home account #8477 (ruijungao@microsoft.com)
Tue, 28 Apr 2026 21:30:32 GMT
Improved account filtering when login hint is provided #8478 (lalimasharda@microsoft.com)
Tue, 21 Apr 2026 22:41:19 GMT
Add support for client data telemetry with CLI_DATA parameter #8378 (kshabelko@microsoft.com)
Thu, 16 Apr 2026 22:44:53 GMT
Experimental iframe timeout debugging telemetry #8470 (thomas.norling@microsoft.com)
Wed, 01 Apr 2026 20:09:00 GMT
Add support for client data telemetry with CLI_DATA parameter #8378 (kshabelko@microsoft.com)
Wed, 18 Mar 2026 20:47:24 GMT
Add MCP Support #8363 (shylasummers@microsoft.com)
Nothing published for this version
Nest dynamic telemetry events #8357 (kshabelko@microsoft.com)
Mon, 02 Mar 2026 19:25:47 GMT
Remove matchPattern from StringUtils #8355 (joarroyo@microsoft.com)
Tue, 24 Feb 2026 21:51:51 GMT
Fix INetworkModule Typedocs #8277 (thomas.norling@microsoft.com)
loadExternalTokens fixes #8259 (thomas.norling@microsoft.com)
Remove deprecated functions and parameters (shylasummers@microsoft.com)
Sat, 17 Jan 2026 03:11:36 GMT
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
loadExternalTokens fixes #8242 (thomas.norling@microsoft.com)
Sat, 17 Jan 2026 01:12:52 GMT
Add telemetry support for loading external tokens and related events #8231 (kshabelko@microsoft.com)
Tue, 13 Jan 2026 14:23:32 GMT
Add DOM API configuration, #8171 (sameera.gajjarapu@microsoft.com)
Thu, 04 Dec 2025 05:46:36 GMT
error surfacing changes (akaliugonna@microsoft.com)
Wed, 19 Nov 2025 23:13:10 GMT
Respect KMSI (thomas.norling@microsoft.com)
Wed, 29 Oct 2025 00:04:33 GMT
Instrument data boundary claim #8054 (kshabelko@microsoft.com)
Wed, 24 Sep 2025 21:54:45 GMT
Add Platform Telemetry (PR #7991) (sameera.gajjarapu@microsoft.com)
Tue, 19 Aug 2025 21:26:21 GMT
Instrument timed out or cancelled pre-redirect requests #7984 (kshabelko@microsoft.com)
Tue, 12 Aug 2025 22:53:32 GMT
Update AccountInfo construction to include tenant-specific claims #7949 (hemoral@microsoft.com)
Tue, 05 Aug 2025 20:00:24 GMT
Add support for authorize call using method POST #7920 (hemoral@microsoft.com)
Wed, 23 Jul 2025 14:54:36 GMT
Remove RequestValidator class (thomas.norling@microsoft.com)
Tue, 08 Jul 2025 14:21:12 GMT
Add correlationIds to cache APIs #7819 (thomas.norling@microsoft.com)
Tue, 01 Jul 2025 14:23:25 GMT
remove access tokens synchronously (thomas.norling@microsoft.com)
Wed, 18 Jun 2025 15:21:55 GMT
Added token revocation functionality to Managed Identity's App Service and Service Fabric Sources #7679 (rginsburg@microsoft.com)
Fri, 30 May 2025 17:59:15 GMT
Multi-instance detection (shylasummers@microsoft.com)
Tue, 06 May 2025 22:47:43 GMT
Deprecate cache options #7707 (joarroyo@microsoft.com)
Tue, 29 Apr 2025 20:25:47 GMT
Add config option to not encode extra params (shylasummers@microsoft.com)
Tue, 15 Apr 2025 23:34:14 GMT
Implemented a Retry Policy for the IMDS Managed Identity Source #7614 (rginsburg@microsoft.com)
Tue, 08 Apr 2025 16:56:06 GMT
EAR protocol request support (thomas.norling@microsoft.com)
Tue, 25 Mar 2025 22:29:34 GMT
Refactor /authorize request generation (thomas.norling@microsoft.com)
Thu, 20 Mar 2025 22:09:04 GMT
Add embeddedClientId to RequestThumbprint (thomas.norling@microsoft.com)
Tue, 11 Mar 2025 18:51:25 GMT
Pre-generate PKCE for async popup flow to blocked async popups in Safari #7568 (kshabelko@microsoft.com)
Tue, 18 Feb 2025 18:51:40 GMT
Additional telemetry event #7550 (thomas.norling@microsoft.com)
Wed, 05 Feb 2025 00:15:19 GMT
Your coding agent can read these notes before it upgrades. Set up the MCP server →