@azure/msal-browser 2.19.0 → 2.19.1

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.19.0 2021-11-02 */
+/*! @azure/msal-browser v2.19.1 2022-08-03 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -107,7 +107,7 @@
         return ar;
     }
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
     /*! *****************************************************************************
     Copyright (c) Microsoft Corporation.
 
@@ -194,7 +194,7 @@
         return r;
     }
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -555,7 +555,7 @@
         CacheOutcome["REFRESH_CACHED_ACCESS_TOKEN"] = "4";
     })(CacheOutcome || (CacheOutcome = {}));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -599,7 +599,7 @@
         return AuthError;
     }(Error));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -665,7 +665,7 @@
         }
     };
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1127,7 +1127,7 @@
         return ClientAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1252,7 +1252,7 @@
         return StringUtils;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1432,12 +1432,12 @@
         return Logger;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
     /* eslint-disable header/header */
     var name$1 = "@azure/msal-common";
     var version$1 = "5.1.0";
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1581,7 +1581,7 @@
         return CredentialEntity;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1826,7 +1826,7 @@
         return ClientConfigurationError;
     }(ClientAuthError));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2010,7 +2010,7 @@
         return ScopeSet;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2048,7 +2048,7 @@
         };
     }
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2062,7 +2062,7 @@
         AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
     })(AuthorityType || (AuthorityType = {}));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2296,7 +2296,7 @@
         return AccountEntity;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2334,7 +2334,7 @@
         return AuthToken;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2578,16 +2578,21 @@
                             break;
                     }
                 }
+                /*
+                 * At this point, the entity matches the request, update cache key if key schema has changed
+                 * Migration code for forwards compatibility with new versions of the library in case of rollback.
+                 */
+                var updatedCacheKey = _this.updateCredentialCacheKey(cacheKey, entity);
                 switch (credType) {
                     case CredentialType.ID_TOKEN:
-                        matchingCredentials.idTokens[cacheKey] = entity;
+                        matchingCredentials.idTokens[updatedCacheKey] = entity;
                         break;
                     case CredentialType.ACCESS_TOKEN:
                     case CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME:
-                        matchingCredentials.accessTokens[cacheKey] = entity;
+                        matchingCredentials.accessTokens[updatedCacheKey] = entity;
                         break;
                     case CredentialType.REFRESH_TOKEN:
-                        matchingCredentials.refreshTokens[cacheKey] = entity;
+                        matchingCredentials.refreshTokens[updatedCacheKey] = entity;
                         break;
                 }
             });
@@ -3163,10 +3168,14 @@
                 });
             });
         };
+        DefaultStorageClass.prototype.updateCredentialCacheKey = function () {
+            var notImplErr = "Storage interface - updateCredentialCacheKey() has not been implemented for the cacheStorage interface.";
+            throw AuthError.createUnexpectedError(notImplErr);
+        };
         return DefaultStorageClass;
     }(CacheManager));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3248,7 +3257,7 @@
         return __assign({ clientCapabilities: [] }, authOptions);
     }
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3268,7 +3277,7 @@
         return ServerError;
     }(AuthError));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3364,7 +3373,7 @@
         return ThrottlingUtils;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3413,7 +3422,7 @@
         return NetworkManager;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3424,7 +3433,7 @@
         CcsCredentialType["UPN"] = "UPN";
     })(CcsCredentialType || (CcsCredentialType = {}));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3513,7 +3522,7 @@
         return BaseClient;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3599,7 +3608,7 @@
         return RequestValidator;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3939,7 +3948,7 @@
         return RequestParameterBuilder;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4004,7 +4013,7 @@
         return IdTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4054,7 +4063,7 @@
         return TimeUtils;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4161,7 +4170,7 @@
         return AccessTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4228,7 +4237,7 @@
         return RefreshTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4292,7 +4301,7 @@
         return InteractionRequiredAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4308,7 +4317,7 @@
         return CacheRecord;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4379,7 +4388,7 @@
         return ProtocolUtils;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4580,7 +4589,7 @@
         return UrlString;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4655,7 +4664,7 @@
         return PopTokenGenerator;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4725,7 +4734,7 @@
         return AppMetadataEntity;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4761,7 +4770,7 @@
         return TokenCacheContext;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5025,7 +5034,7 @@
         return ResponseHandler;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5309,7 +5318,7 @@
             if (request.domainHint) {
                 parameterBuilder.addDomainHint(request.domainHint);
             }
-            // Add sid or loginHint with preference for sid -> loginHint -> username of AccountInfo object
+            // Add sid or loginHint with preference for login_hint claim (in request) -> sid -> loginHint (upn/email) -> username of AccountInfo object
             if (request.prompt !== PromptValue.SELECT_ACCOUNT) {
                 // AAD will throw if prompt=select_account is passed with an account hint
                 if (request.sid && request.prompt === PromptValue.NONE) {
@@ -5319,9 +5328,24 @@
                 }
                 else if (request.account) {
                     var accountSid = this.extractAccountSid(request.account);
-                    // If account and loginHint are provided, we will check account first for sid before adding loginHint
-                    if (accountSid && request.prompt === PromptValue.NONE) {
-                        // SessionId is only used in silent calls
+                    var accountLoginHintClaim = this.extractLoginHint(request.account);
+                    // If login_hint claim is present, use it over sid/username
+                    if (accountLoginHintClaim) {
+                        this.logger.verbose("createAuthCodeUrlQueryString: login_hint claim present on account");
+                        parameterBuilder.addLoginHint(accountLoginHintClaim);
+                        try {
+                            var clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
+                            parameterBuilder.addCcsOid(clientInfo);
+                        }
+                        catch (e) {
+                            this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
+                        }
+                    }
+                    else if (accountSid && request.prompt === PromptValue.NONE) {
+                        /*
+                         * If account and loginHint are provided, we will check account first for sid before adding loginHint
+                         * SessionId is only used in silent calls
+                         */
                         this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from account");
                         parameterBuilder.addSid(accountSid);
                         try {
@@ -5329,7 +5353,7 @@
                             parameterBuilder.addCcsOid(clientInfo);
                         }
                         catch (e) {
-                            this.logger.verbose("Could not parse home account ID for CCS Header: " + e);
+                            this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
                         }
                     }
                     else if (request.loginHint) {
@@ -5346,7 +5370,7 @@
                             parameterBuilder.addCcsOid(clientInfo);
                         }
                         catch (e) {
-                            this.logger.verbose("Could not parse home account ID for CCS Header: " + e);
+                            this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
                         }
                     }
                 }
@@ -5401,16 +5425,17 @@
          * @param account
          */
         AuthorizationCodeClient.prototype.extractAccountSid = function (account) {
-            if (account.idTokenClaims) {
-                var tokenClaims = account.idTokenClaims;
-                return tokenClaims.sid || null;
-            }
-            return null;
+            var _a;
+            return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a["sid"]) || null;
+        };
+        AuthorizationCodeClient.prototype.extractLoginHint = function (account) {
+            var _a;
+            return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a["login_hint"]) || null;
         };
         return AuthorizationCodeClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5621,7 +5646,7 @@
         return RefreshTokenClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5744,7 +5769,7 @@
         return SilentFlowClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5755,7 +5780,7 @@
             response.hasOwnProperty("issuer"));
     }
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5769,7 +5794,7 @@
         ProtocolMode["OIDC"] = "OIDC";
     })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5844,7 +5869,7 @@
         return AuthorityMetadataEntity;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5854,7 +5879,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5968,7 +5993,7 @@
         return RegionDiscovery;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6534,7 +6559,7 @@
         return Authority;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6595,7 +6620,7 @@
         return AuthorityFactory;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6626,7 +6651,7 @@
         return ServerTelemetryEntity;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6654,7 +6679,7 @@
         return ThrottlingEntity;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6671,7 +6696,7 @@
         }
     };
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6730,7 +6755,7 @@
         return AuthenticationHeaderParser;
     }());
 
-    /*! @azure/msal-common v5.1.0 2021-11-02 */
+    /*! @azure/msal-common v5.1.1 2022-08-03 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8174,246 +8199,258 @@
      * Licensed under the MIT License.
      */
     /**
-     * Storage wrapper for IndexedDB storage in browsers: https://developer.mozilla.org/en-US/docs/Web/API/IndexedDB_API
+     * This class implements the Fetch API for GET and POST requests. See more here: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API
      */
-    var DatabaseStorage = /** @class */ (function () {
-        function DatabaseStorage() {
-            this.dbName = DB_NAME;
-            this.version = DB_VERSION;
-            this.tableName = DB_TABLE_NAME;
-            this.dbOpen = false;
+    var FetchClient = /** @class */ (function () {
+        function FetchClient() {
         }
         /**
-         * Opens IndexedDB instance.
+         * Fetch Client for REST endpoints - Get request
+         * @param url
+         * @param headers
+         * @param body
          */
-        DatabaseStorage.prototype.open = function () {
+        FetchClient.prototype.sendGetRequestAsync = function (url, options) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var _this = this;
-                return __generator$1(this, function (_a) {
-                    return [2 /*return*/, new Promise(function (resolve, reject) {
-                            var openDB = window.indexedDB.open(_this.dbName, _this.version);
-                            openDB.addEventListener("upgradeneeded", function (e) {
-                                var event = e;
-                                event.target.result.createObjectStore(_this.tableName);
-                            });
-                            openDB.addEventListener("success", function (e) {
-                                var event = e;
-                                _this.db = event.target.result;
-                                _this.dbOpen = true;
-                                resolve();
-                            });
-                            openDB.addEventListener("error", function () { return reject(BrowserAuthError.createDatabaseUnavailableError()); });
-                        })];
+                var response, e_1, _a;
+                return __generator$1(this, function (_b) {
+                    switch (_b.label) {
+                        case 0:
+                            _b.trys.push([0, 2, , 3]);
+                            return [4 /*yield*/, fetch(url, {
+                                    method: HTTP_REQUEST_TYPE.GET,
+                                    headers: this.getFetchHeaders(options)
+                                })];
+                        case 1:
+                            response = _b.sent();
+                            return [3 /*break*/, 3];
+                        case 2:
+                            e_1 = _b.sent();
+                            if (window.navigator.onLine) {
+                                throw BrowserAuthError.createGetRequestFailedError(e_1, url);
+                            }
+                            else {
+                                throw BrowserAuthError.createNoNetworkConnectivityError();
+                            }
+                        case 3:
+                            _b.trys.push([3, 5, , 6]);
+                            _a = {
+                                headers: this.getHeaderDict(response.headers)
+                            };
+                            return [4 /*yield*/, response.json()];
+                        case 4: return [2 /*return*/, (_a.body = (_b.sent()),
+                                _a.status = response.status,
+                                _a)];
+                        case 5:
+                            _b.sent();
+                            throw BrowserAuthError.createFailedToParseNetworkResponseError(url);
+                        case 6: return [2 /*return*/];
+                    }
                 });
             });
         };
         /**
-         * Opens database if it's not already open
+         * Fetch Client for REST endpoints - Post request
+         * @param url
+         * @param headers
+         * @param body
          */
-        DatabaseStorage.prototype.validateDbIsOpen = function () {
+        FetchClient.prototype.sendPostRequestAsync = function (url, options) {
             return __awaiter$1(this, void 0, void 0, function () {
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
+                var reqBody, response, e_3, _a;
+                return __generator$1(this, function (_b) {
+                    switch (_b.label) {
                         case 0:
-                            if (!!this.dbOpen) return [3 /*break*/, 2];
-                            return [4 /*yield*/, this.open()];
-                        case 1: return [2 /*return*/, _a.sent()];
-                        case 2: return [2 /*return*/];
+                            reqBody = (options && options.body) || "";
+                            _b.label = 1;
+                        case 1:
+                            _b.trys.push([1, 3, , 4]);
+                            return [4 /*yield*/, fetch(url, {
+                                    method: HTTP_REQUEST_TYPE.POST,
+                                    headers: this.getFetchHeaders(options),
+                                    body: reqBody
+                                })];
+                        case 2:
+                            response = _b.sent();
+                            return [3 /*break*/, 4];
+                        case 3:
+                            e_3 = _b.sent();
+                            if (window.navigator.onLine) {
+                                throw BrowserAuthError.createPostRequestFailedError(e_3, url);
+                            }
+                            else {
+                                throw BrowserAuthError.createNoNetworkConnectivityError();
+                            }
+                        case 4:
+                            _b.trys.push([4, 6, , 7]);
+                            _a = {
+                                headers: this.getHeaderDict(response.headers)
+                            };
+                            return [4 /*yield*/, response.json()];
+                        case 5: return [2 /*return*/, (_a.body = (_b.sent()),
+                                _a.status = response.status,
+                                _a)];
+                        case 6:
+                            _b.sent();
+                            throw BrowserAuthError.createFailedToParseNetworkResponseError(url);
+                        case 7: return [2 /*return*/];
                     }
                 });
             });
         };
         /**
-         * Retrieves item from IndexedDB instance.
-         * @param key
+         * Get Fetch API Headers object from string map
+         * @param inputHeaders
          */
-        DatabaseStorage.prototype.getItem = function (key) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var _this = this;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.validateDbIsOpen()];
-                        case 1:
-                            _a.sent();
-                            return [2 /*return*/, new Promise(function (resolve, reject) {
-                                    // TODO: Add timeouts?
-                                    if (!_this.db) {
-                                        return reject(BrowserAuthError.createDatabaseNotOpenError());
-                                    }
-                                    var transaction = _this.db.transaction([_this.tableName], "readonly");
-                                    var objectStore = transaction.objectStore(_this.tableName);
-                                    var dbGet = objectStore.get(key);
-                                    dbGet.addEventListener("success", function (e) {
-                                        var event = e;
-                                        resolve(event.target.result);
-                                    });
-                                    dbGet.addEventListener("error", function (e) { return reject(e); });
-                                })];
-                    }
-                });
+        FetchClient.prototype.getFetchHeaders = function (options) {
+            var headers = new Headers();
+            if (!(options && options.headers)) {
+                return headers;
+            }
+            var optionsHeaders = options.headers;
+            Object.keys(optionsHeaders).forEach(function (key) {
+                headers.append(key, optionsHeaders[key]);
+            });
+            return headers;
+        };
+        FetchClient.prototype.getHeaderDict = function (headers) {
+            var headerDict = {};
+            headers.forEach(function (value, key) {
+                headerDict[key] = value;
             });
+            return headerDict;
         };
+        return FetchClient;
+    }());
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    /**
+     * This client implements the XMLHttpRequest class to send GET and POST requests.
+     */
+    var XhrClient = /** @class */ (function () {
+        function XhrClient() {
+        }
         /**
-         * Adds item to IndexedDB under given key
-         * @param key
-         * @param payload
+         * XhrClient for REST endpoints - Get request
+         * @param url
+         * @param headers
+         * @param body
          */
-        DatabaseStorage.prototype.setItem = function (key, payload) {
+        XhrClient.prototype.sendGetRequestAsync = function (url, options) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var _this = this;
                 return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.validateDbIsOpen()];
-                        case 1:
-                            _a.sent();
-                            return [2 /*return*/, new Promise(function (resolve, reject) {
-                                    // TODO: Add timeouts?
-                                    if (!_this.db) {
-                                        return reject(BrowserAuthError.createDatabaseNotOpenError());
-                                    }
-                                    var transaction = _this.db.transaction([_this.tableName], "readwrite");
-                                    var objectStore = transaction.objectStore(_this.tableName);
-                                    var dbPut = objectStore.put(payload, key);
-                                    dbPut.addEventListener("success", function () { return resolve(); });
-                                    dbPut.addEventListener("error", function (e) { return reject(e); });
-                                })];
-                    }
+                    return [2 /*return*/, this.sendRequestAsync(url, HTTP_REQUEST_TYPE.GET, options)];
                 });
             });
         };
         /**
-         * Removes item from IndexedDB under given key
-         * @param key
+         * XhrClient for REST endpoints - Post request
+         * @param url
+         * @param headers
+         * @param body
          */
-        DatabaseStorage.prototype.removeItem = function (key) {
+        XhrClient.prototype.sendPostRequestAsync = function (url, options) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var _this = this;
                 return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.validateDbIsOpen()];
-                        case 1:
-                            _a.sent();
-                            return [2 /*return*/, new Promise(function (resolve, reject) {
-                                    if (!_this.db) {
-                                        return reject(BrowserAuthError.createDatabaseNotOpenError());
-                                    }
-                                    var transaction = _this.db.transaction([_this.tableName], "readwrite");
-                                    var objectStore = transaction.objectStore(_this.tableName);
-                                    var dbDelete = objectStore.delete(key);
-                                    dbDelete.addEventListener("success", function () { return resolve(); });
-                                    dbDelete.addEventListener("error", function (e) { return reject(e); });
-                                })];
-                    }
+                    return [2 /*return*/, this.sendRequestAsync(url, HTTP_REQUEST_TYPE.POST, options)];
                 });
             });
         };
         /**
-         * Get all the keys from the storage object as an iterable array of strings.
+         * Helper for XhrClient requests.
+         * @param url
+         * @param method
+         * @param options
          */
-        DatabaseStorage.prototype.getKeys = function () {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var _this = this;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.validateDbIsOpen()];
-                        case 1:
-                            _a.sent();
-                            return [2 /*return*/, new Promise(function (resolve, reject) {
-                                    if (!_this.db) {
-                                        return reject(BrowserAuthError.createDatabaseNotOpenError());
-                                    }
-                                    var transaction = _this.db.transaction([_this.tableName], "readonly");
-                                    var objectStore = transaction.objectStore(_this.tableName);
-                                    var dbGetKeys = objectStore.getAllKeys();
-                                    dbGetKeys.addEventListener("success", function (e) {
-                                        var event = e;
-                                        resolve(event.target.result);
-                                    });
-                                    dbGetKeys.addEventListener("error", function (e) { return reject(e); });
-                                })];
+        XhrClient.prototype.sendRequestAsync = function (url, method, options) {
+            var _this = this;
+            return new Promise(function (resolve, reject) {
+                var xhr = new XMLHttpRequest();
+                xhr.open(method, url, /* async: */ true);
+                _this.setXhrHeaders(xhr, options);
+                xhr.onload = function () {
+                    if (xhr.status < 200 || xhr.status >= 300) {
+                        if (method === HTTP_REQUEST_TYPE.POST) {
+                            reject(BrowserAuthError.createPostRequestFailedError("Failed with status " + xhr.status, url));
+                        }
+                        else {
+                            reject(BrowserAuthError.createGetRequestFailedError("Failed with status " + xhr.status, url));
+                        }
                     }
-                });
+                    try {
+                        var jsonResponse = JSON.parse(xhr.responseText);
+                        var networkResponse = {
+                            headers: _this.getHeaderDict(xhr),
+                            body: jsonResponse,
+                            status: xhr.status
+                        };
+                        resolve(networkResponse);
+                    }
+                    catch (e) {
+                        reject(BrowserAuthError.createFailedToParseNetworkResponseError(url));
+                    }
+                };
+                xhr.onerror = function () {
+                    if (window.navigator.onLine) {
+                        if (method === HTTP_REQUEST_TYPE.POST) {
+                            reject(BrowserAuthError.createPostRequestFailedError("Failed with status " + xhr.status, url));
+                        }
+                        else {
+                            reject(BrowserAuthError.createGetRequestFailedError("Failed with status " + xhr.status, url));
+                        }
+                    }
+                    else {
+                        reject(BrowserAuthError.createNoNetworkConnectivityError());
+                    }
+                };
+                if (method === HTTP_REQUEST_TYPE.POST && options && options.body) {
+                    xhr.send(options.body);
+                }
+                else if (method === HTTP_REQUEST_TYPE.GET) {
+                    xhr.send();
+                }
+                else {
+                    throw BrowserAuthError.createHttpMethodNotImplementedError(method);
+                }
             });
         };
         /**
-         *
-         * Checks whether there is an object under the search key in the object store
+         * Helper to set XHR headers for request.
+         * @param xhr
+         * @param options
          */
-        DatabaseStorage.prototype.containsKey = function (key) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var _this = this;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.validateDbIsOpen()];
-                        case 1:
-                            _a.sent();
-                            return [2 /*return*/, new Promise(function (resolve, reject) {
-                                    if (!_this.db) {
-                                        return reject(BrowserAuthError.createDatabaseNotOpenError());
-                                    }
-                                    var transaction = _this.db.transaction([_this.tableName], "readonly");
-                                    var objectStore = transaction.objectStore(_this.tableName);
-                                    var dbContainsKey = objectStore.count(key);
-                                    dbContainsKey.addEventListener("success", function (e) {
-                                        var event = e;
-                                        resolve(event.target.result === 1);
-                                    });
-                                    dbContainsKey.addEventListener("error", function (e) { return reject(e); });
-                                })];
-                    }
+        XhrClient.prototype.setXhrHeaders = function (xhr, options) {
+            if (options && options.headers) {
+                var headers_1 = options.headers;
+                Object.keys(headers_1).forEach(function (key) {
+                    xhr.setRequestHeader(key, headers_1[key]);
                 });
-            });
+            }
         };
         /**
-         * Deletes the MSAL database. The database is deleted rather than cleared to make it possible
-         * for client applications to downgrade to a previous MSAL version without worrying about forward compatibility issues
-         * with IndexedDB database versions.
+         * Gets a string map of the headers received in the response.
+         *
+         * Algorithm comes from https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/getAllResponseHeaders
+         * @param xhr
          */
-        DatabaseStorage.prototype.deleteDatabase = function () {
-            return __awaiter$1(this, void 0, void 0, function () {
-                return __generator$1(this, function (_a) {
-                    return [2 /*return*/, new Promise(function (resolve, reject) {
-                            var deleteDbRequest = window.indexedDB.deleteDatabase(DB_NAME);
-                            deleteDbRequest.addEventListener("success", function () { return resolve(true); });
-                            deleteDbRequest.addEventListener("error", function () { return reject(false); });
-                        })];
-                });
-            });
-        };
-        return DatabaseStorage;
-    }());
-
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    var MemoryStorage = /** @class */ (function () {
-        function MemoryStorage() {
-            this.cache = new Map();
-        }
-        MemoryStorage.prototype.getItem = function (key) {
-            return this.cache.get(key) || null;
-        };
-        MemoryStorage.prototype.setItem = function (key, value) {
-            this.cache.set(key, value);
-        };
-        MemoryStorage.prototype.removeItem = function (key) {
-            this.cache.delete(key);
-        };
-        MemoryStorage.prototype.getKeys = function () {
-            var cacheKeys = [];
-            this.cache.forEach(function (value, key) {
-                cacheKeys.push(key);
+        XhrClient.prototype.getHeaderDict = function (xhr) {
+            var headerString = xhr.getAllResponseHeaders();
+            var headerArr = headerString.trim().split(/[\r\n]+/);
+            var headerDict = {};
+            headerArr.forEach(function (value) {
+                var parts = value.split(": ");
+                var headerName = parts.shift();
+                var headerVal = parts.join(": ");
+                if (headerName && headerVal) {
+                    headerDict[headerName] = headerVal;
+                }
             });
-            return cacheKeys;
-        };
-        MemoryStorage.prototype.containsKey = function (key) {
-            return this.cache.has(key);
-        };
-        MemoryStorage.prototype.clear = function () {
-            this.cache.clear();
+            return headerDict;
         };
-        return MemoryStorage;
+        return XhrClient;
     }());
 
     /*
@@ -8421,185 +8458,126 @@
      * Licensed under the MIT License.
      */
     /**
-     * This class allows MSAL to store artifacts asynchronously using the DatabaseStorage IndexedDB wrapper,
-     * backed up with the more volatile MemoryStorage object for cases in which IndexedDB may be unavailable.
+     * Utility class for browser specific functions
      */
-    var AsyncMemoryStorage = /** @class */ (function () {
-        function AsyncMemoryStorage(logger) {
-            this.inMemoryCache = new MemoryStorage();
-            this.indexedDBCache = new DatabaseStorage();
-            this.logger = logger;
+    var BrowserUtils = /** @class */ (function () {
+        function BrowserUtils() {
         }
-        AsyncMemoryStorage.prototype.handleDatabaseAccessError = function (error) {
-            if (error instanceof BrowserAuthError && error.errorCode === BrowserAuthErrorMessage.databaseUnavailable.code) {
-                this.logger.error("Could not access persistent storage. This may be caused by browser privacy features which block persistent storage in third-party contexts.");
+        // #region Window Navigation and URL management
+        /**
+         * Clears hash from window url.
+         */
+        BrowserUtils.clearHash = function (contentWindow) {
+            // Office.js sets history.replaceState to null
+            contentWindow.location.hash = Constants.EMPTY_STRING;
+            if (typeof contentWindow.history.replaceState === "function") {
+                // Full removes "#" from url
+                contentWindow.history.replaceState(null, Constants.EMPTY_STRING, "" + contentWindow.location.origin + contentWindow.location.pathname + contentWindow.location.search);
             }
         };
         /**
-         * Get the item matching the given key. Tries in-memory cache first, then in the asynchronous
-         * storage object if item isn't found in-memory.
-         * @param key
+         * Replaces current hash with hash from provided url
          */
-        AsyncMemoryStorage.prototype.getItem = function (key) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var item, e_1;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            item = this.inMemoryCache.getItem(key);
-                            if (!!item) return [3 /*break*/, 4];
-                            _a.label = 1;
-                        case 1:
-                            _a.trys.push([1, 3, , 4]);
-                            this.logger.verbose("Queried item not found in in-memory cache, now querying persistent storage.");
-                            return [4 /*yield*/, this.indexedDBCache.getItem(key)];
-                        case 2: return [2 /*return*/, _a.sent()];
-                        case 3:
-                            e_1 = _a.sent();
-                            this.handleDatabaseAccessError(e_1);
-                            return [3 /*break*/, 4];
-                        case 4: return [2 /*return*/, item];
-                    }
-                });
-            });
+        BrowserUtils.replaceHash = function (url) {
+            var urlParts = url.split("#");
+            urlParts.shift(); // Remove part before the hash
+            window.location.hash = urlParts.length > 0 ? urlParts.join("#") : "";
         };
         /**
-         * Sets the item in the in-memory cache and then tries to set it in the asynchronous
-         * storage object with the given key.
-         * @param key
-         * @param value
+         * Returns boolean of whether the current window is in an iframe or not.
          */
-        AsyncMemoryStorage.prototype.setItem = function (key, value) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var e_2;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            this.inMemoryCache.setItem(key, value);
-                            _a.label = 1;
-                        case 1:
-                            _a.trys.push([1, 3, , 4]);
-                            return [4 /*yield*/, this.indexedDBCache.setItem(key, value)];
-                        case 2:
-                            _a.sent();
-                            return [3 /*break*/, 4];
-                        case 3:
-                            e_2 = _a.sent();
-                            this.handleDatabaseAccessError(e_2);
-                            return [3 /*break*/, 4];
-                        case 4: return [2 /*return*/];
-                    }
-                });
-            });
+        BrowserUtils.isInIframe = function () {
+            return window.parent !== window;
         };
         /**
-         * Removes the item matching the key from the in-memory cache, then tries to remove it from the asynchronous storage object.
-         * @param key
+         * Returns boolean of whether or not the current window is a popup opened by msal
          */
-        AsyncMemoryStorage.prototype.removeItem = function (key) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var e_3;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            this.inMemoryCache.removeItem(key);
-                            _a.label = 1;
-                        case 1:
-                            _a.trys.push([1, 3, , 4]);
-                            return [4 /*yield*/, this.indexedDBCache.removeItem(key)];
-                        case 2:
-                            _a.sent();
-                            return [3 /*break*/, 4];
-                        case 3:
-                            e_3 = _a.sent();
-                            this.handleDatabaseAccessError(e_3);
-                            return [3 /*break*/, 4];
-                        case 4: return [2 /*return*/];
-                    }
-                });
-            });
+        BrowserUtils.isInPopup = function () {
+            return typeof window !== "undefined" && !!window.opener &&
+                window.opener !== window &&
+                typeof window.name === "string" &&
+                window.name.indexOf(BrowserConstants.POPUP_NAME_PREFIX + ".") === 0;
         };
+        // #endregion
         /**
-         * Get all the keys from the in-memory cache as an iterable array of strings. If no keys are found, query the keys in the
-         * asynchronous storage object.
+         * Returns current window URL as redirect uri
          */
-        AsyncMemoryStorage.prototype.getKeys = function () {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var cacheKeys, e_4;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            cacheKeys = this.inMemoryCache.getKeys();
-                            if (!(cacheKeys.length === 0)) return [3 /*break*/, 4];
-                            _a.label = 1;
-                        case 1:
-                            _a.trys.push([1, 3, , 4]);
-                            this.logger.verbose("In-memory cache is empty, now querying persistent storage.");
-                            return [4 /*yield*/, this.indexedDBCache.getKeys()];
-                        case 2: return [2 /*return*/, _a.sent()];
-                        case 3:
-                            e_4 = _a.sent();
-                            this.handleDatabaseAccessError(e_4);
-                            return [3 /*break*/, 4];
-                        case 4: return [2 /*return*/, cacheKeys];
-                    }
-                });
-            });
+        BrowserUtils.getCurrentUri = function () {
+            return window.location.href.split("?")[0].split("#")[0];
         };
         /**
-         * Returns true or false if the given key is present in the cache.
-         * @param key
+         * Gets the homepage url for the current window location.
          */
-        AsyncMemoryStorage.prototype.containsKey = function (key) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var containsKey, e_5;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            containsKey = this.inMemoryCache.containsKey(key);
-                            if (!!containsKey) return [3 /*break*/, 4];
-                            _a.label = 1;
-                        case 1:
-                            _a.trys.push([1, 3, , 4]);
-                            this.logger.verbose("Key not found in in-memory cache, now querying persistent storage.");
-                            return [4 /*yield*/, this.indexedDBCache.containsKey(key)];
-                        case 2: return [2 /*return*/, _a.sent()];
-                        case 3:
-                            e_5 = _a.sent();
-                            this.handleDatabaseAccessError(e_5);
-                            return [3 /*break*/, 4];
-                        case 4: return [2 /*return*/, containsKey];
-                    }
-                });
-            });
+        BrowserUtils.getHomepage = function () {
+            var currentUrl = new UrlString(window.location.href);
+            var urlComponents = currentUrl.getUrlComponents();
+            return urlComponents.Protocol + "//" + urlComponents.HostNameAndPort + "/";
         };
         /**
-         * Clears in-memory Map and tries to delete the IndexedDB database.
+         * Returns best compatible network client object.
          */
-        AsyncMemoryStorage.prototype.clear = function () {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var e_6;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            this.inMemoryCache.clear();
-                            _a.label = 1;
-                        case 1:
-                            _a.trys.push([1, 3, , 4]);
-                            return [4 /*yield*/, this.indexedDBCache.deleteDatabase()];
-                        case 2:
-                            _a.sent();
-                            return [3 /*break*/, 4];
-                        case 3:
-                            e_6 = _a.sent();
-                            this.handleDatabaseAccessError(e_6);
-                            return [3 /*break*/, 4];
-                        case 4: return [2 /*return*/];
-                    }
-                });
-            });
+        BrowserUtils.getBrowserNetworkClient = function () {
+            if (window.fetch && window.Headers) {
+                return new FetchClient();
+            }
+            else {
+                return new XhrClient();
+            }
         };
-        return AsyncMemoryStorage;
+        /**
+         * Throws error if we have completed an auth and are
+         * attempting another auth request inside an iframe.
+         */
+        BrowserUtils.blockReloadInHiddenIframes = function () {
+            var isResponseHash = UrlString.hashContainsKnownProperties(window.location.hash);
+            // return an error if called from the hidden iframe created by the msal js silent calls
+            if (isResponseHash && BrowserUtils.isInIframe()) {
+                throw BrowserAuthError.createBlockReloadInHiddenIframeError();
+            }
+        };
+        /**
+         * Block redirect operations in iframes unless explicitly allowed
+         * @param interactionType Interaction type for the request
+         * @param allowRedirectInIframe Config value to allow redirects when app is inside an iframe
+         */
+        BrowserUtils.blockRedirectInIframe = function (interactionType, allowRedirectInIframe) {
+            var isIframedApp = BrowserUtils.isInIframe();
+            if (interactionType === exports.InteractionType.Redirect && isIframedApp && !allowRedirectInIframe) {
+                // If we are not in top frame, we shouldn't redirect. This is also handled by the service.
+                throw BrowserAuthError.createRedirectInIframeError(isIframedApp);
+            }
+        };
+        /**
+         * Block redirectUri loaded in popup from calling AcquireToken APIs
+         */
+        BrowserUtils.blockAcquireTokenInPopups = function () {
+            // Popups opened by msal popup APIs are given a name that starts with "msal."
+            if (BrowserUtils.isInPopup()) {
+                throw BrowserAuthError.createBlockAcquireTokenInPopupsError();
+            }
+        };
+        /**
+         * Throws error if token requests are made in non-browser environment
+         * @param isBrowserEnvironment Flag indicating if environment is a browser.
+         */
+        BrowserUtils.blockNonBrowserEnvironment = function (isBrowserEnvironment) {
+            if (!isBrowserEnvironment) {
+                throw BrowserAuthError.createNonBrowserEnvironmentError();
+            }
+        };
+        /**
+         * Returns boolean of whether current browser is an Internet Explorer or Edge browser.
+         */
+        BrowserUtils.detectIEOrEdge = function () {
+            var ua = window.navigator.userAgent;
+            var msie = ua.indexOf("MSIE ");
+            var msie11 = ua.indexOf("Trident/");
+            var msedge = ua.indexOf("Edge/");
+            var isIE = msie > 0 || msie11 > 0;
+            var isEdge = msedge > 0;
+            return isIE || isEdge;
+        };
+        return BrowserUtils;
     }());
 
     /*
@@ -8607,352 +8585,374 @@
      * Licensed under the MIT License.
      */
     /**
-     * This class implements MSAL's crypto interface, which allows it to perform base64 encoding and decoding, generating cryptographically random GUIDs and
-     * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).
+     * BrowserAuthErrorMessage class containing string constants used by error codes and messages.
      */
-    var CryptoOps = /** @class */ (function () {
-        function CryptoOps(logger) {
-            this.logger = logger;
-            // Browser crypto needs to be validated first before any other classes can be set.
-            this.browserCrypto = new BrowserCrypto(this.logger);
-            this.b64Encode = new Base64Encode();
-            this.b64Decode = new Base64Decode();
-            this.guidGenerator = new GuidGenerator(this.browserCrypto);
-            this.pkceGenerator = new PkceGenerator(this.browserCrypto);
-            this.cache = {
-                asymmetricKeys: new AsyncMemoryStorage(this.logger),
-                symmetricKeys: new AsyncMemoryStorage(this.logger)
-            };
+    var BrowserConfigurationAuthErrorMessage = {
+        redirectUriNotSet: {
+            code: "redirect_uri_empty",
+            desc: "A redirect URI is required for all calls, and none has been set."
+        },
+        postLogoutUriNotSet: {
+            code: "post_logout_uri_empty",
+            desc: "A post logout redirect has not been set."
+        },
+        storageNotSupportedError: {
+            code: "storage_not_supported",
+            desc: "Given storage configuration option was not supported."
+        },
+        noRedirectCallbacksSet: {
+            code: "no_redirect_callbacks",
+            desc: "No redirect callbacks have been set. Please call setRedirectCallbacks() with the appropriate function arguments before continuing. " +
+                "More information is available here: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/MSAL-basics."
+        },
+        invalidCallbackObject: {
+            code: "invalid_callback_object",
+            desc: "The object passed for the callback was invalid. " +
+                "More information is available here: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/MSAL-basics."
+        },
+        stubPcaInstanceCalled: {
+            code: "stubbed_public_client_application_called",
+            desc: "Stub instance of Public Client Application was called. If using msal-react, please ensure context is not used without a provider. For more visit: aka.ms/msaljs/browser-errors"
+        },
+        inMemRedirectUnavailable: {
+            code: "in_mem_redirect_unavailable",
+            desc: "Redirect cannot be supported. In-memory storage was selected and storeAuthStateInCookie=false, which would cause the library to be unable to handle the incoming hash. If you would like to use the redirect API, please use session/localStorage or set storeAuthStateInCookie=true."
+        }
+    };
+    /**
+     * Browser library error class thrown by the MSAL.js library for SPAs
+     */
+    var BrowserConfigurationAuthError = /** @class */ (function (_super) {
+        __extends$1(BrowserConfigurationAuthError, _super);
+        function BrowserConfigurationAuthError(errorCode, errorMessage) {
+            var _this = _super.call(this, errorCode, errorMessage) || this;
+            _this.name = "BrowserConfigurationAuthError";
+            Object.setPrototypeOf(_this, BrowserConfigurationAuthError.prototype);
+            return _this;
         }
         /**
-         * Creates a new random GUID - used to populate state and nonce.
-         * @returns string (GUID)
+         * Creates an error thrown when the redirect uri is empty (not set by caller)
          */
-        CryptoOps.prototype.createNewGuid = function () {
-            return this.guidGenerator.generateGuid();
+        BrowserConfigurationAuthError.createRedirectUriEmptyError = function () {
+            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.redirectUriNotSet.code, BrowserConfigurationAuthErrorMessage.redirectUriNotSet.desc);
         };
         /**
-         * Encodes input string to base64.
-         * @param input
+         * Creates an error thrown when the post-logout redirect uri is empty (not set by caller)
          */
-        CryptoOps.prototype.base64Encode = function (input) {
-            return this.b64Encode.encode(input);
+        BrowserConfigurationAuthError.createPostLogoutRedirectUriEmptyError = function () {
+            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.postLogoutUriNotSet.code, BrowserConfigurationAuthErrorMessage.postLogoutUriNotSet.desc);
         };
         /**
-         * Decodes input string from base64.
-         * @param input
+         * Creates error thrown when given storage location is not supported.
+         * @param givenStorageLocation
          */
-        CryptoOps.prototype.base64Decode = function (input) {
-            return this.b64Decode.decode(input);
+        BrowserConfigurationAuthError.createStorageNotSupportedError = function (givenStorageLocation) {
+            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.storageNotSupportedError.code, BrowserConfigurationAuthErrorMessage.storageNotSupportedError.desc + " Given Location: " + givenStorageLocation);
         };
         /**
-         * Generates PKCE codes used in Authorization Code Flow.
+         * Creates error thrown when redirect callbacks are not set before calling loginRedirect() or acquireTokenRedirect().
          */
-        CryptoOps.prototype.generatePkceCodes = function () {
-            return __awaiter$1(this, void 0, void 0, function () {
-                return __generator$1(this, function (_a) {
-                    return [2 /*return*/, this.pkceGenerator.generateCodes()];
-                });
-            });
+        BrowserConfigurationAuthError.createRedirectCallbacksNotSetError = function () {
+            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.noRedirectCallbacksSet.code, BrowserConfigurationAuthErrorMessage.noRedirectCallbacksSet.desc);
         };
         /**
-         * Generates a keypair, stores it and returns a thumbprint
-         * @param request
+         * Creates error thrown when the stub instance of PublicClientApplication is called.
          */
-        CryptoOps.prototype.getPublicKeyThumbprint = function (request) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var keyPair, publicKeyJwk, pubKeyThumprintObj, publicJwkString, publicJwkBuffer, publicJwkHash, privateKeyJwk, unextractablePrivateKey;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.browserCrypto.generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES)];
-                        case 1:
-                            keyPair = _a.sent();
-                            return [4 /*yield*/, this.browserCrypto.exportJwk(keyPair.publicKey)];
-                        case 2:
-                            publicKeyJwk = _a.sent();
-                            pubKeyThumprintObj = {
-                                e: publicKeyJwk.e,
-                                kty: publicKeyJwk.kty,
-                                n: publicKeyJwk.n
-                            };
-                            publicJwkString = BrowserCrypto.getJwkString(pubKeyThumprintObj);
-                            return [4 /*yield*/, this.browserCrypto.sha256Digest(publicJwkString)];
-                        case 3:
-                            publicJwkBuffer = _a.sent();
-                            publicJwkHash = this.b64Encode.urlEncodeArr(new Uint8Array(publicJwkBuffer));
-                            return [4 /*yield*/, this.browserCrypto.exportJwk(keyPair.privateKey)];
-                        case 4:
-                            privateKeyJwk = _a.sent();
-                            return [4 /*yield*/, this.browserCrypto.importJwk(privateKeyJwk, false, ["sign"])];
-                        case 5:
-                            unextractablePrivateKey = _a.sent();
-                            // Store Keypair data in keystore
-                            return [4 /*yield*/, this.cache.asymmetricKeys.setItem(publicJwkHash, {
-                                    privateKey: unextractablePrivateKey,
-                                    publicKey: keyPair.publicKey,
-                                    requestMethod: request.resourceRequestMethod,
-                                    requestUri: request.resourceRequestUri
-                                })];
-                        case 6:
-                            // Store Keypair data in keystore
-                            _a.sent();
-                            return [2 /*return*/, publicJwkHash];
-                    }
-                });
-            });
-        };
-        /**
-         * Removes cryptographic keypair from key store matching the keyId passed in
-         * @param kid
-         */
-        CryptoOps.prototype.removeTokenBindingKey = function (kid) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var keyFound;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.cache.asymmetricKeys.removeItem(kid)];
-                        case 1:
-                            _a.sent();
-                            return [4 /*yield*/, this.cache.asymmetricKeys.containsKey(kid)];
-                        case 2:
-                            keyFound = _a.sent();
-                            return [2 /*return*/, !keyFound];
-                    }
-                });
-            });
-        };
-        /**
-         * Removes all cryptographic keys from IndexedDB storage
-         */
-        CryptoOps.prototype.clearKeystore = function () {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var dataStoreNames, databaseStorage, _a;
-                return __generator$1(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            dataStoreNames = Object.keys(this.cache);
-                            databaseStorage = this.cache[dataStoreNames[0]];
-                            if (!databaseStorage) return [3 /*break*/, 2];
-                            return [4 /*yield*/, databaseStorage.deleteDatabase()];
-                        case 1:
-                            _a = _b.sent();
-                            return [3 /*break*/, 3];
-                        case 2:
-                            _a = false;
-                            _b.label = 3;
-                        case 3: return [2 /*return*/, _a];
-                    }
-                });
-            });
+        BrowserConfigurationAuthError.createStubPcaInstanceCalledError = function () {
+            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.stubPcaInstanceCalled.code, BrowserConfigurationAuthErrorMessage.stubPcaInstanceCalled.desc);
         };
-        /**
-         * Signs the given object as a jwt payload with private key retrieved by given kid.
-         * @param payload
-         * @param kid
+        /*
+         * Create an error thrown when in-memory storage is used and storeAuthStateInCookie=false.
          */
-        CryptoOps.prototype.signJwt = function (payload, kid) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var cachedKeyPair, publicKeyJwk, publicKeyJwkString, header, encodedHeader, encodedPayload, tokenString, tokenBuffer, signatureBuffer, encodedSignature;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.cache.asymmetricKeys.getItem(kid)];
-                        case 1:
-                            cachedKeyPair = _a.sent();
-                            if (!cachedKeyPair) {
-                                throw BrowserAuthError.createSigningKeyNotFoundInStorageError(kid);
-                            }
-                            return [4 /*yield*/, this.browserCrypto.exportJwk(cachedKeyPair.publicKey)];
-                        case 2:
-                            publicKeyJwk = _a.sent();
-                            publicKeyJwkString = BrowserCrypto.getJwkString(publicKeyJwk);
-                            header = {
-                                alg: publicKeyJwk.alg,
-                                type: KEY_FORMAT_JWK
-                            };
-                            encodedHeader = this.b64Encode.urlEncode(JSON.stringify(header));
-                            // Generate payload
-                            payload.cnf = {
-                                jwk: JSON.parse(publicKeyJwkString)
-                            };
-                            encodedPayload = this.b64Encode.urlEncode(JSON.stringify(payload));
-                            tokenString = encodedHeader + "." + encodedPayload;
-                            tokenBuffer = BrowserStringUtils.stringToArrayBuffer(tokenString);
-                            return [4 /*yield*/, this.browserCrypto.sign(cachedKeyPair.privateKey, tokenBuffer)];
-                        case 3:
-                            signatureBuffer = _a.sent();
-                            encodedSignature = this.b64Encode.urlEncodeArr(new Uint8Array(signatureBuffer));
-                            return [2 /*return*/, tokenString + "." + encodedSignature];
-                    }
-                });
-            });
+        BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError = function () {
+            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.inMemRedirectUnavailable.code, BrowserConfigurationAuthErrorMessage.inMemRedirectUnavailable.desc);
         };
-        CryptoOps.POP_KEY_USAGES = ["sign", "verify"];
-        CryptoOps.EXTRACTABLE = true;
-        return CryptoOps;
-    }());
+        return BrowserConfigurationAuthError;
+    }(AuthError));
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
-    /**
-     * BrowserAuthErrorMessage class containing string constants used by error codes and messages.
-     */
-    var BrowserConfigurationAuthErrorMessage = {
-        redirectUriNotSet: {
-            code: "redirect_uri_empty",
-            desc: "A redirect URI is required for all calls, and none has been set."
+    var stubbedPublicClientApplication = {
+        acquireTokenPopup: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
         },
-        postLogoutUriNotSet: {
-            code: "post_logout_uri_empty",
-            desc: "A post logout redirect has not been set."
+        acquireTokenRedirect: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
         },
-        storageNotSupportedError: {
-            code: "storage_not_supported",
-            desc: "Given storage configuration option was not supported."
+        acquireTokenSilent: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
         },
-        noRedirectCallbacksSet: {
-            code: "no_redirect_callbacks",
-            desc: "No redirect callbacks have been set. Please call setRedirectCallbacks() with the appropriate function arguments before continuing. " +
-                "More information is available here: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/MSAL-basics."
+        getAllAccounts: function () {
+            return [];
         },
-        invalidCallbackObject: {
-            code: "invalid_callback_object",
-            desc: "The object passed for the callback was invalid. " +
-                "More information is available here: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/MSAL-basics."
+        getAccountByHomeId: function () {
+            return null;
         },
-        stubPcaInstanceCalled: {
-            code: "stubbed_public_client_application_called",
-            desc: "Stub instance of Public Client Application was called. If using msal-react, please ensure context is not used without a provider. For more visit: aka.ms/msaljs/browser-errors"
+        getAccountByUsername: function () {
+            return null;
         },
-        inMemRedirectUnavailable: {
-            code: "in_mem_redirect_unavailable",
-            desc: "Redirect cannot be supported. In-memory storage was selected and storeAuthStateInCookie=false, which would cause the library to be unable to handle the incoming hash. If you would like to use the redirect API, please use session/localStorage or set storeAuthStateInCookie=true."
+        getAccountByLocalId: function () {
+            return null;
+        },
+        handleRedirectPromise: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+        },
+        loginPopup: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+        },
+        loginRedirect: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+        },
+        logout: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+        },
+        logoutRedirect: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+        },
+        logoutPopup: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+        },
+        ssoSilent: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+        },
+        addEventCallback: function () {
+            return null;
+        },
+        removeEventCallback: function () {
+            return;
+        },
+        enableAccountStorageEvents: function () {
+            return;
+        },
+        disableAccountStorageEvents: function () {
+            return;
+        },
+        getTokenCache: function () {
+            throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
+        },
+        getLogger: function () {
+            throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
+        },
+        setLogger: function () {
+            return;
+        },
+        setActiveAccount: function () {
+            return;
+        },
+        getActiveAccount: function () {
+            return null;
+        },
+        initializeWrapperLibrary: function () {
+            return;
+        },
+        setNavigationClient: function () {
+            return;
+        },
+        getConfiguration: function () {
+            throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
         }
-    };
-    /**
-     * Browser library error class thrown by the MSAL.js library for SPAs
+    };
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
      */
-    var BrowserConfigurationAuthError = /** @class */ (function (_super) {
-        __extends$1(BrowserConfigurationAuthError, _super);
-        function BrowserConfigurationAuthError(errorCode, errorMessage) {
-            var _this = _super.call(this, errorCode, errorMessage) || this;
-            _this.name = "BrowserConfigurationAuthError";
-            Object.setPrototypeOf(_this, BrowserConfigurationAuthError.prototype);
-            return _this;
+    var NavigationClient = /** @class */ (function () {
+        function NavigationClient() {
         }
         /**
-         * Creates an error thrown when the redirect uri is empty (not set by caller)
-         */
-        BrowserConfigurationAuthError.createRedirectUriEmptyError = function () {
-            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.redirectUriNotSet.code, BrowserConfigurationAuthErrorMessage.redirectUriNotSet.desc);
-        };
-        /**
-         * Creates an error thrown when the post-logout redirect uri is empty (not set by caller)
-         */
-        BrowserConfigurationAuthError.createPostLogoutRedirectUriEmptyError = function () {
-            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.postLogoutUriNotSet.code, BrowserConfigurationAuthErrorMessage.postLogoutUriNotSet.desc);
-        };
-        /**
-         * Creates error thrown when given storage location is not supported.
-         * @param givenStorageLocation
+         * Navigates to other pages within the same web application
+         * @param url
+         * @param options
          */
-        BrowserConfigurationAuthError.createStorageNotSupportedError = function (givenStorageLocation) {
-            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.storageNotSupportedError.code, BrowserConfigurationAuthErrorMessage.storageNotSupportedError.desc + " Given Location: " + givenStorageLocation);
+        NavigationClient.prototype.navigateInternal = function (url, options) {
+            return NavigationClient.defaultNavigateWindow(url, options);
         };
         /**
-         * Creates error thrown when redirect callbacks are not set before calling loginRedirect() or acquireTokenRedirect().
+         * Navigates to other pages outside the web application i.e. the Identity Provider
+         * @param url
+         * @param options
          */
-        BrowserConfigurationAuthError.createRedirectCallbacksNotSetError = function () {
-            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.noRedirectCallbacksSet.code, BrowserConfigurationAuthErrorMessage.noRedirectCallbacksSet.desc);
+        NavigationClient.prototype.navigateExternal = function (url, options) {
+            return NavigationClient.defaultNavigateWindow(url, options);
         };
         /**
-         * Creates error thrown when the stub instance of PublicClientApplication is called.
-         */
-        BrowserConfigurationAuthError.createStubPcaInstanceCalledError = function () {
-            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.stubPcaInstanceCalled.code, BrowserConfigurationAuthErrorMessage.stubPcaInstanceCalled.desc);
-        };
-        /*
-         * Create an error thrown when in-memory storage is used and storeAuthStateInCookie=false.
+         * Default navigation implementation invoked by the internal and external functions
+         * @param url
+         * @param options
          */
-        BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError = function () {
-            return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.inMemRedirectUnavailable.code, BrowserConfigurationAuthErrorMessage.inMemRedirectUnavailable.desc);
+        NavigationClient.defaultNavigateWindow = function (url, options) {
+            if (options.noHistory) {
+                window.location.replace(url);
+            }
+            else {
+                window.location.assign(url);
+            }
+            return new Promise(function (resolve) {
+                setTimeout(function () {
+                    resolve(true);
+                }, options.timeout);
+            });
         };
-        return BrowserConfigurationAuthError;
-    }(AuthError));
+        return NavigationClient;
+    }());
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
-    var BrowserStorage = /** @class */ (function () {
-        function BrowserStorage(cacheLocation) {
-            this.validateWindowStorage(cacheLocation);
-            this.windowStorage = window[cacheLocation];
+    exports.EventType = void 0;
+    (function (EventType) {
+        EventType["ACCOUNT_ADDED"] = "msal:accountAdded";
+        EventType["ACCOUNT_REMOVED"] = "msal:accountRemoved";
+        EventType["LOGIN_START"] = "msal:loginStart";
+        EventType["LOGIN_SUCCESS"] = "msal:loginSuccess";
+        EventType["LOGIN_FAILURE"] = "msal:loginFailure";
+        EventType["ACQUIRE_TOKEN_START"] = "msal:acquireTokenStart";
+        EventType["ACQUIRE_TOKEN_SUCCESS"] = "msal:acquireTokenSuccess";
+        EventType["ACQUIRE_TOKEN_FAILURE"] = "msal:acquireTokenFailure";
+        EventType["ACQUIRE_TOKEN_NETWORK_START"] = "msal:acquireTokenFromNetworkStart";
+        EventType["SSO_SILENT_START"] = "msal:ssoSilentStart";
+        EventType["SSO_SILENT_SUCCESS"] = "msal:ssoSilentSuccess";
+        EventType["SSO_SILENT_FAILURE"] = "msal:ssoSilentFailure";
+        EventType["HANDLE_REDIRECT_START"] = "msal:handleRedirectStart";
+        EventType["HANDLE_REDIRECT_END"] = "msal:handleRedirectEnd";
+        EventType["POPUP_OPENED"] = "msal:popupOpened";
+        EventType["LOGOUT_START"] = "msal:logoutStart";
+        EventType["LOGOUT_SUCCESS"] = "msal:logoutSuccess";
+        EventType["LOGOUT_FAILURE"] = "msal:logoutFailure";
+        EventType["LOGOUT_END"] = "msal:logoutEnd";
+    })(exports.EventType || (exports.EventType = {}));
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    var EventMessageUtils = /** @class */ (function () {
+        function EventMessageUtils() {
         }
-        BrowserStorage.prototype.validateWindowStorage = function (cacheLocation) {
-            if (cacheLocation !== exports.BrowserCacheLocation.LocalStorage && cacheLocation !== exports.BrowserCacheLocation.SessionStorage) {
-                throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);
-            }
-            var storageSupported = !!window[cacheLocation];
-            if (!storageSupported) {
-                throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);
+        /**
+         * Gets interaction status from event message
+         * @param message
+         * @param currentStatus
+         */
+        EventMessageUtils.getInteractionStatusFromEvent = function (message, currentStatus) {
+            switch (message.eventType) {
+                case exports.EventType.LOGIN_START:
+                    return exports.InteractionStatus.Login;
+                case exports.EventType.SSO_SILENT_START:
+                    return exports.InteractionStatus.SsoSilent;
+                case exports.EventType.ACQUIRE_TOKEN_START:
+                    if (message.interactionType === exports.InteractionType.Redirect || message.interactionType === exports.InteractionType.Popup) {
+                        return exports.InteractionStatus.AcquireToken;
+                    }
+                    break;
+                case exports.EventType.HANDLE_REDIRECT_START:
+                    return exports.InteractionStatus.HandleRedirect;
+                case exports.EventType.LOGOUT_START:
+                    return exports.InteractionStatus.Logout;
+                case exports.EventType.SSO_SILENT_SUCCESS:
+                case exports.EventType.SSO_SILENT_FAILURE:
+                    if (currentStatus && currentStatus !== exports.InteractionStatus.SsoSilent) {
+                        // Prevent this event from clearing any status other than ssoSilent
+                        break;
+                    }
+                    return exports.InteractionStatus.None;
+                case exports.EventType.LOGOUT_END:
+                    if (currentStatus && currentStatus !== exports.InteractionStatus.Logout) {
+                        // Prevent this event from clearing any status other than logout
+                        break;
+                    }
+                    return exports.InteractionStatus.None;
+                case exports.EventType.HANDLE_REDIRECT_END:
+                    if (currentStatus && currentStatus !== exports.InteractionStatus.HandleRedirect) {
+                        // Prevent this event from clearing any status other than handleRedirect
+                        break;
+                    }
+                    return exports.InteractionStatus.None;
+                case exports.EventType.LOGIN_SUCCESS:
+                case exports.EventType.LOGIN_FAILURE:
+                case exports.EventType.ACQUIRE_TOKEN_SUCCESS:
+                case exports.EventType.ACQUIRE_TOKEN_FAILURE:
+                    if (message.interactionType === exports.InteractionType.Redirect || message.interactionType === exports.InteractionType.Popup) {
+                        if (currentStatus && currentStatus !== exports.InteractionStatus.Login && currentStatus !== exports.InteractionStatus.AcquireToken) {
+                            // Prevent this event from clearing any status other than login or acquireToken
+                            break;
+                        }
+                        return exports.InteractionStatus.None;
+                    }
+                    break;
             }
+            return null;
         };
-        BrowserStorage.prototype.getItem = function (key) {
-            return this.windowStorage.getItem(key);
-        };
-        BrowserStorage.prototype.setItem = function (key, value) {
-            this.windowStorage.setItem(key, value);
-        };
-        BrowserStorage.prototype.removeItem = function (key) {
-            this.windowStorage.removeItem(key);
-        };
-        BrowserStorage.prototype.getKeys = function () {
-            return Object.keys(this.windowStorage);
-        };
-        BrowserStorage.prototype.containsKey = function (key) {
-            return this.windowStorage.hasOwnProperty(key);
-        };
-        return BrowserStorage;
+        return EventMessageUtils;
     }());
 
+    /* eslint-disable header/header */
+    var name = "@azure/msal-browser";
+    var version = "2.19.0";
+
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
-    var BrowserProtocolUtils = /** @class */ (function () {
-        function BrowserProtocolUtils() {
+    var SignedHttpRequest = /** @class */ (function () {
+        function SignedHttpRequest(shrParameters, shrOptions) {
+            var loggerOptions = (shrOptions && shrOptions.loggerOptions) || {};
+            this.logger = new Logger(loggerOptions, name, version);
+            this.cryptoOps = new CryptoOps(this.logger);
+            this.popTokenGenerator = new PopTokenGenerator(this.cryptoOps);
+            this.shrParameters = shrParameters;
         }
         /**
-         * Extracts the BrowserStateObject from the state string.
-         * @param browserCrypto
-         * @param state
+         * Generates and caches a keypair for the given request options.
+         * @returns Public key digest, which should be sent to the token issuer.
          */
-        BrowserProtocolUtils.extractBrowserRequestState = function (browserCrypto, state) {
-            if (StringUtils.isEmpty(state)) {
-                return null;
-            }
-            try {
-                var requestStateObj = ProtocolUtils.parseRequestState(browserCrypto, state);
-                return requestStateObj.libraryState.meta;
-            }
-            catch (e) {
-                throw ClientAuthError.createInvalidStateError(state, e);
-            }
+        SignedHttpRequest.prototype.generatePublicKeyThumbprint = function () {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var kid;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, this.popTokenGenerator.generateKid(this.shrParameters)];
+                        case 1:
+                            kid = (_a.sent()).kid;
+                            return [2 /*return*/, kid];
+                    }
+                });
+            });
         };
         /**
-         * Parses properties of server response from url hash
-         * @param locationHash Hash from url
+         * Generates a signed http request for the given payload with the given key.
+         * @param payload Payload to sign (e.g. access token)
+         * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
+         * @param claims Additional claims to include/override in the signed JWT
+         * @returns Pop token signed with the corresponding private key
          */
-        BrowserProtocolUtils.parseServerResponseFromHash = function (locationHash) {
-            if (!locationHash) {
-                return {};
-            }
-            var hashUrlString = new UrlString(locationHash);
-            return UrlString.getDeserializedHash(hashUrlString.getHash());
+        SignedHttpRequest.prototype.signRequest = function (payload, publicKeyThumbprint, claims) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                return __generator$1(this, function (_a) {
+                    return [2 /*return*/, this.popTokenGenerator.signPayload(payload, publicKeyThumbprint, this.shrParameters, claims)];
+                });
+            });
+        };
+        /**
+         * Removes cached keys from browser for given public key thumbprint
+         * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
+         * @returns If keys are properly deleted
+         */
+        SignedHttpRequest.prototype.removeKeys = function (publicKeyThumbprint) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, this.cryptoOps.removeTokenBindingKey(publicKeyThumbprint)];
+                        case 1: return [2 /*return*/, _a.sent()];
+                    }
+                });
+            });
         };
-        return BrowserProtocolUtils;
+        return SignedHttpRequest;
     }());
 
     /*
@@ -8960,1283 +8960,1568 @@
      * Licensed under the MIT License.
      */
     /**
-     * This class implements the cache storage interface for MSAL through browser local or session storage.
-     * Cookies are only used if storeAuthStateInCookie is true, and are only used for
-     * parameters such as state and nonce, generally.
+     * Storage wrapper for IndexedDB storage in browsers: https://developer.mozilla.org/en-US/docs/Web/API/IndexedDB_API
      */
-    var BrowserCacheManager = /** @class */ (function (_super) {
-        __extends$1(BrowserCacheManager, _super);
-        function BrowserCacheManager(clientId, cacheConfig, cryptoImpl, logger) {
-            var _this = _super.call(this, clientId, cryptoImpl) || this;
-            // Cookie life calculation (hours * minutes * seconds * ms)
-            _this.COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
-            _this.cacheConfig = cacheConfig;
-            _this.logger = logger;
-            _this.internalStorage = new MemoryStorage();
-            _this.browserStorage = _this.setupBrowserStorage(_this.cacheConfig.cacheLocation);
-            _this.temporaryCacheStorage = _this.setupTemporaryCacheStorage(_this.cacheConfig.cacheLocation);
-            // Migrate any cache entries from older versions of MSAL.
-            _this.migrateCacheEntries();
-            return _this;
+    var DatabaseStorage = /** @class */ (function () {
+        function DatabaseStorage() {
+            this.dbName = DB_NAME;
+            this.version = DB_VERSION;
+            this.tableName = DB_TABLE_NAME;
+            this.dbOpen = false;
         }
         /**
-         * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
-         * @param cacheLocation
+         * Opens IndexedDB instance.
          */
-        BrowserCacheManager.prototype.setupBrowserStorage = function (cacheLocation) {
-            switch (cacheLocation) {
-                case exports.BrowserCacheLocation.LocalStorage:
-                case exports.BrowserCacheLocation.SessionStorage:
-                    try {
-                        // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
-                        return new BrowserStorage(cacheLocation);
-                    }
-                    catch (e) {
-                        this.logger.verbose(e);
-                        break;
+        DatabaseStorage.prototype.open = function () {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var _this = this;
+                return __generator$1(this, function (_a) {
+                    return [2 /*return*/, new Promise(function (resolve, reject) {
+                            var openDB = window.indexedDB.open(_this.dbName, _this.version);
+                            openDB.addEventListener("upgradeneeded", function (e) {
+                                var event = e;
+                                event.target.result.createObjectStore(_this.tableName);
+                            });
+                            openDB.addEventListener("success", function (e) {
+                                var event = e;
+                                _this.db = event.target.result;
+                                _this.dbOpen = true;
+                                resolve();
+                            });
+                            openDB.addEventListener("error", function () { return reject(BrowserAuthError.createDatabaseUnavailableError()); });
+                        })];
+                });
+            });
+        };
+        /**
+         * Opens database if it's not already open
+         */
+        DatabaseStorage.prototype.validateDbIsOpen = function () {
+            return __awaiter$1(this, void 0, void 0, function () {
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            if (!!this.dbOpen) return [3 /*break*/, 2];
+                            return [4 /*yield*/, this.open()];
+                        case 1: return [2 /*return*/, _a.sent()];
+                        case 2: return [2 /*return*/];
                     }
-                case exports.BrowserCacheLocation.MemoryStorage:
-            }
-            this.cacheConfig.cacheLocation = exports.BrowserCacheLocation.MemoryStorage;
-            return new MemoryStorage();
+                });
+            });
         };
         /**
-         *
-         * @param cacheLocation
+         * Retrieves item from IndexedDB instance.
+         * @param key
          */
-        BrowserCacheManager.prototype.setupTemporaryCacheStorage = function (cacheLocation) {
-            switch (cacheLocation) {
-                case exports.BrowserCacheLocation.LocalStorage:
-                case exports.BrowserCacheLocation.SessionStorage:
-                    try {
-                        // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
-                        return new BrowserStorage(exports.BrowserCacheLocation.SessionStorage);
+        DatabaseStorage.prototype.getItem = function (key) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var _this = this;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, this.validateDbIsOpen()];
+                        case 1:
+                            _a.sent();
+                            return [2 /*return*/, new Promise(function (resolve, reject) {
+                                    // TODO: Add timeouts?
+                                    if (!_this.db) {
+                                        return reject(BrowserAuthError.createDatabaseNotOpenError());
+                                    }
+                                    var transaction = _this.db.transaction([_this.tableName], "readonly");
+                                    var objectStore = transaction.objectStore(_this.tableName);
+                                    var dbGet = objectStore.get(key);
+                                    dbGet.addEventListener("success", function (e) {
+                                        var event = e;
+                                        resolve(event.target.result);
+                                    });
+                                    dbGet.addEventListener("error", function (e) { return reject(e); });
+                                })];
                     }
-                    catch (e) {
-                        this.logger.verbose(e);
-                        return this.internalStorage;
+                });
+            });
+        };
+        /**
+         * Adds item to IndexedDB under given key
+         * @param key
+         * @param payload
+         */
+        DatabaseStorage.prototype.setItem = function (key, payload) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var _this = this;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, this.validateDbIsOpen()];
+                        case 1:
+                            _a.sent();
+                            return [2 /*return*/, new Promise(function (resolve, reject) {
+                                    // TODO: Add timeouts?
+                                    if (!_this.db) {
+                                        return reject(BrowserAuthError.createDatabaseNotOpenError());
+                                    }
+                                    var transaction = _this.db.transaction([_this.tableName], "readwrite");
+                                    var objectStore = transaction.objectStore(_this.tableName);
+                                    var dbPut = objectStore.put(payload, key);
+                                    dbPut.addEventListener("success", function () { return resolve(); });
+                                    dbPut.addEventListener("error", function (e) { return reject(e); });
+                                })];
                     }
-                case exports.BrowserCacheLocation.MemoryStorage:
-                default:
-                    return this.internalStorage;
-            }
+                });
+            });
         };
         /**
-         * Migrate all old cache entries to new schema. No rollback supported.
-         * @param storeAuthStateInCookie
+         * Removes item from IndexedDB under given key
+         * @param key
          */
-        BrowserCacheManager.prototype.migrateCacheEntries = function () {
-            var _this = this;
-            var idTokenKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ID_TOKEN;
-            var clientInfoKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.CLIENT_INFO;
-            var errorKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ERROR;
-            var errorDescKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ERROR_DESC;
-            var idTokenValue = this.browserStorage.getItem(idTokenKey);
-            var clientInfoValue = this.browserStorage.getItem(clientInfoKey);
-            var errorValue = this.browserStorage.getItem(errorKey);
-            var errorDescValue = this.browserStorage.getItem(errorDescKey);
-            var values = [idTokenValue, clientInfoValue, errorValue, errorDescValue];
-            var keysToMigrate = [PersistentCacheKeys.ID_TOKEN, PersistentCacheKeys.CLIENT_INFO, PersistentCacheKeys.ERROR, PersistentCacheKeys.ERROR_DESC];
-            keysToMigrate.forEach(function (cacheKey, index) { return _this.migrateCacheEntry(cacheKey, values[index]); });
+        DatabaseStorage.prototype.removeItem = function (key) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var _this = this;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, this.validateDbIsOpen()];
+                        case 1:
+                            _a.sent();
+                            return [2 /*return*/, new Promise(function (resolve, reject) {
+                                    if (!_this.db) {
+                                        return reject(BrowserAuthError.createDatabaseNotOpenError());
+                                    }
+                                    var transaction = _this.db.transaction([_this.tableName], "readwrite");
+                                    var objectStore = transaction.objectStore(_this.tableName);
+                                    var dbDelete = objectStore.delete(key);
+                                    dbDelete.addEventListener("success", function () { return resolve(); });
+                                    dbDelete.addEventListener("error", function (e) { return reject(e); });
+                                })];
+                    }
+                });
+            });
         };
         /**
-         * Utility function to help with migration.
-         * @param newKey
-         * @param value
-         * @param storeAuthStateInCookie
+         * Get all the keys from the storage object as an iterable array of strings.
          */
-        BrowserCacheManager.prototype.migrateCacheEntry = function (newKey, value) {
-            if (value) {
-                this.setTemporaryCache(newKey, value, true);
-            }
+        DatabaseStorage.prototype.getKeys = function () {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var _this = this;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, this.validateDbIsOpen()];
+                        case 1:
+                            _a.sent();
+                            return [2 /*return*/, new Promise(function (resolve, reject) {
+                                    if (!_this.db) {
+                                        return reject(BrowserAuthError.createDatabaseNotOpenError());
+                                    }
+                                    var transaction = _this.db.transaction([_this.tableName], "readonly");
+                                    var objectStore = transaction.objectStore(_this.tableName);
+                                    var dbGetKeys = objectStore.getAllKeys();
+                                    dbGetKeys.addEventListener("success", function (e) {
+                                        var event = e;
+                                        resolve(event.target.result);
+                                    });
+                                    dbGetKeys.addEventListener("error", function (e) { return reject(e); });
+                                })];
+                    }
+                });
+            });
         };
         /**
-         * Parses passed value as JSON object, JSON.parse() will throw an error.
-         * @param input
+         *
+         * Checks whether there is an object under the search key in the object store
          */
-        BrowserCacheManager.prototype.validateAndParseJson = function (jsonValue) {
-            try {
-                var parsedJson = JSON.parse(jsonValue);
-                /**
-                 * There are edge cases in which JSON.parse will successfully parse a non-valid JSON object
-                 * (e.g. JSON.parse will parse an escaped string into an unescaped string), so adding a type check
-                 * of the parsed value is necessary in order to be certain that the string represents a valid JSON object.
-                 *
-                 */
-                return (parsedJson && typeof parsedJson === "object") ? parsedJson : null;
-            }
-            catch (error) {
-                return null;
-            }
+        DatabaseStorage.prototype.containsKey = function (key) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var _this = this;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, this.validateDbIsOpen()];
+                        case 1:
+                            _a.sent();
+                            return [2 /*return*/, new Promise(function (resolve, reject) {
+                                    if (!_this.db) {
+                                        return reject(BrowserAuthError.createDatabaseNotOpenError());
+                                    }
+                                    var transaction = _this.db.transaction([_this.tableName], "readonly");
+                                    var objectStore = transaction.objectStore(_this.tableName);
+                                    var dbContainsKey = objectStore.count(key);
+                                    dbContainsKey.addEventListener("success", function (e) {
+                                        var event = e;
+                                        resolve(event.target.result === 1);
+                                    });
+                                    dbContainsKey.addEventListener("error", function (e) { return reject(e); });
+                                })];
+                    }
+                });
+            });
         };
         /**
-         * fetches the entry from the browser storage based off the key
-         * @param key
+         * Deletes the MSAL database. The database is deleted rather than cleared to make it possible
+         * for client applications to downgrade to a previous MSAL version without worrying about forward compatibility issues
+         * with IndexedDB database versions.
          */
-        BrowserCacheManager.prototype.getItem = function (key) {
-            return this.browserStorage.getItem(key);
+        DatabaseStorage.prototype.deleteDatabase = function () {
+            return __awaiter$1(this, void 0, void 0, function () {
+                return __generator$1(this, function (_a) {
+                    return [2 /*return*/, new Promise(function (resolve, reject) {
+                            var deleteDbRequest = window.indexedDB.deleteDatabase(DB_NAME);
+                            deleteDbRequest.addEventListener("success", function () { return resolve(true); });
+                            deleteDbRequest.addEventListener("error", function () { return reject(false); });
+                        })];
+                });
+            });
         };
-        /**
-         * sets the entry in the browser storage
-         * @param key
-         * @param value
-         */
-        BrowserCacheManager.prototype.setItem = function (key, value) {
-            this.browserStorage.setItem(key, value);
+        return DatabaseStorage;
+    }());
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    var MemoryStorage = /** @class */ (function () {
+        function MemoryStorage() {
+            this.cache = new Map();
+        }
+        MemoryStorage.prototype.getItem = function (key) {
+            return this.cache.get(key) || null;
         };
-        /**
-         * fetch the account entity from the platform cache
-         * @param accountKey
-         */
-        BrowserCacheManager.prototype.getAccount = function (accountKey) {
-            var account = this.getItem(accountKey);
-            if (!account) {
-                return null;
-            }
-            var parsedAccount = this.validateAndParseJson(account);
-            if (!parsedAccount || !AccountEntity.isAccountEntity(parsedAccount)) {
-                return null;
-            }
-            return CacheManager.toObject(new AccountEntity(), parsedAccount);
+        MemoryStorage.prototype.setItem = function (key, value) {
+            this.cache.set(key, value);
         };
-        /**
-         * set account entity in the platform cache
-         * @param key
-         * @param value
-         */
-        BrowserCacheManager.prototype.setAccount = function (account) {
-            this.logger.trace("BrowserCacheManager.setAccount called");
-            var key = account.generateAccountKey();
-            this.setItem(key, JSON.stringify(account));
+        MemoryStorage.prototype.removeItem = function (key) {
+            this.cache.delete(key);
         };
-        /**
-         * generates idToken entity from a string
-         * @param idTokenKey
-         */
-        BrowserCacheManager.prototype.getIdTokenCredential = function (idTokenKey) {
-            var value = this.getItem(idTokenKey);
-            if (!value) {
-                this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit");
-                return null;
-            }
-            var parsedIdToken = this.validateAndParseJson(value);
-            if (!parsedIdToken || !IdTokenEntity.isIdTokenEntity(parsedIdToken)) {
-                this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit");
-                return null;
-            }
-            this.logger.trace("BrowserCacheManager.getIdTokenCredential: cache hit");
-            return CacheManager.toObject(new IdTokenEntity(), parsedIdToken);
+        MemoryStorage.prototype.getKeys = function () {
+            var cacheKeys = [];
+            this.cache.forEach(function (value, key) {
+                cacheKeys.push(key);
+            });
+            return cacheKeys;
         };
-        /**
-         * set IdToken credential to the platform cache
-         * @param idToken
-         */
-        BrowserCacheManager.prototype.setIdTokenCredential = function (idToken) {
-            this.logger.trace("BrowserCacheManager.setIdTokenCredential called");
-            var idTokenKey = idToken.generateCredentialKey();
-            this.setItem(idTokenKey, JSON.stringify(idToken));
+        MemoryStorage.prototype.containsKey = function (key) {
+            return this.cache.has(key);
         };
-        /**
-         * generates accessToken entity from a string
-         * @param key
-         */
-        BrowserCacheManager.prototype.getAccessTokenCredential = function (accessTokenKey) {
-            var value = this.getItem(accessTokenKey);
-            if (!value) {
-                this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit");
-                return null;
-            }
-            var parsedAccessToken = this.validateAndParseJson(value);
-            if (!parsedAccessToken || !AccessTokenEntity.isAccessTokenEntity(parsedAccessToken)) {
-                this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit");
-                return null;
-            }
-            this.logger.trace("BrowserCacheManager.getAccessTokenCredential: cache hit");
-            return CacheManager.toObject(new AccessTokenEntity(), parsedAccessToken);
+        MemoryStorage.prototype.clear = function () {
+            this.cache.clear();
         };
-        /**
-         * set accessToken credential to the platform cache
-         * @param accessToken
-         */
-        BrowserCacheManager.prototype.setAccessTokenCredential = function (accessToken) {
-            this.logger.trace("BrowserCacheManager.setAccessTokenCredential called");
-            var accessTokenKey = accessToken.generateCredentialKey();
-            this.setItem(accessTokenKey, JSON.stringify(accessToken));
+        return MemoryStorage;
+    }());
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    /**
+     * This class allows MSAL to store artifacts asynchronously using the DatabaseStorage IndexedDB wrapper,
+     * backed up with the more volatile MemoryStorage object for cases in which IndexedDB may be unavailable.
+     */
+    var AsyncMemoryStorage = /** @class */ (function () {
+        function AsyncMemoryStorage(logger) {
+            this.inMemoryCache = new MemoryStorage();
+            this.indexedDBCache = new DatabaseStorage();
+            this.logger = logger;
+        }
+        AsyncMemoryStorage.prototype.handleDatabaseAccessError = function (error) {
+            if (error instanceof BrowserAuthError && error.errorCode === BrowserAuthErrorMessage.databaseUnavailable.code) {
+                this.logger.error("Could not access persistent storage. This may be caused by browser privacy features which block persistent storage in third-party contexts.");
+            }
         };
         /**
-         * generates refreshToken entity from a string
-         * @param refreshTokenKey
+         * Get the item matching the given key. Tries in-memory cache first, then in the asynchronous
+         * storage object if item isn't found in-memory.
+         * @param key
          */
-        BrowserCacheManager.prototype.getRefreshTokenCredential = function (refreshTokenKey) {
-            var value = this.getItem(refreshTokenKey);
-            if (!value) {
-                this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit");
-                return null;
-            }
-            var parsedRefreshToken = this.validateAndParseJson(value);
-            if (!parsedRefreshToken || !RefreshTokenEntity.isRefreshTokenEntity(parsedRefreshToken)) {
-                this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit");
-                return null;
-            }
-            this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: cache hit");
-            return CacheManager.toObject(new RefreshTokenEntity(), parsedRefreshToken);
+        AsyncMemoryStorage.prototype.getItem = function (key) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var item, e_1;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            item = this.inMemoryCache.getItem(key);
+                            if (!!item) return [3 /*break*/, 4];
+                            _a.label = 1;
+                        case 1:
+                            _a.trys.push([1, 3, , 4]);
+                            this.logger.verbose("Queried item not found in in-memory cache, now querying persistent storage.");
+                            return [4 /*yield*/, this.indexedDBCache.getItem(key)];
+                        case 2: return [2 /*return*/, _a.sent()];
+                        case 3:
+                            e_1 = _a.sent();
+                            this.handleDatabaseAccessError(e_1);
+                            return [3 /*break*/, 4];
+                        case 4: return [2 /*return*/, item];
+                    }
+                });
+            });
         };
         /**
-         * set refreshToken credential to the platform cache
-         * @param refreshToken
+         * Sets the item in the in-memory cache and then tries to set it in the asynchronous
+         * storage object with the given key.
+         * @param key
+         * @param value
          */
-        BrowserCacheManager.prototype.setRefreshTokenCredential = function (refreshToken) {
-            this.logger.trace("BrowserCacheManager.setRefreshTokenCredential called");
-            var refreshTokenKey = refreshToken.generateCredentialKey();
-            this.setItem(refreshTokenKey, JSON.stringify(refreshToken));
+        AsyncMemoryStorage.prototype.setItem = function (key, value) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var e_2;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            this.inMemoryCache.setItem(key, value);
+                            _a.label = 1;
+                        case 1:
+                            _a.trys.push([1, 3, , 4]);
+                            return [4 /*yield*/, this.indexedDBCache.setItem(key, value)];
+                        case 2:
+                            _a.sent();
+                            return [3 /*break*/, 4];
+                        case 3:
+                            e_2 = _a.sent();
+                            this.handleDatabaseAccessError(e_2);
+                            return [3 /*break*/, 4];
+                        case 4: return [2 /*return*/];
+                    }
+                });
+            });
         };
         /**
-         * fetch appMetadata entity from the platform cache
-         * @param appMetadataKey
+         * Removes the item matching the key from the in-memory cache, then tries to remove it from the asynchronous storage object.
+         * @param key
          */
-        BrowserCacheManager.prototype.getAppMetadata = function (appMetadataKey) {
-            var value = this.getItem(appMetadataKey);
-            if (!value) {
-                this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit");
-                return null;
-            }
-            var parsedMetadata = this.validateAndParseJson(value);
-            if (!parsedMetadata || !AppMetadataEntity.isAppMetadataEntity(appMetadataKey, parsedMetadata)) {
-                this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit");
-                return null;
-            }
-            this.logger.trace("BrowserCacheManager.getAppMetadata: cache hit");
-            return CacheManager.toObject(new AppMetadataEntity(), parsedMetadata);
+        AsyncMemoryStorage.prototype.removeItem = function (key) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var e_3;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            this.inMemoryCache.removeItem(key);
+                            _a.label = 1;
+                        case 1:
+                            _a.trys.push([1, 3, , 4]);
+                            return [4 /*yield*/, this.indexedDBCache.removeItem(key)];
+                        case 2:
+                            _a.sent();
+                            return [3 /*break*/, 4];
+                        case 3:
+                            e_3 = _a.sent();
+                            this.handleDatabaseAccessError(e_3);
+                            return [3 /*break*/, 4];
+                        case 4: return [2 /*return*/];
+                    }
+                });
+            });
         };
         /**
-         * set appMetadata entity to the platform cache
-         * @param appMetadata
+         * Get all the keys from the in-memory cache as an iterable array of strings. If no keys are found, query the keys in the
+         * asynchronous storage object.
          */
-        BrowserCacheManager.prototype.setAppMetadata = function (appMetadata) {
-            this.logger.trace("BrowserCacheManager.setAppMetadata called");
-            var appMetadataKey = appMetadata.generateAppMetadataKey();
-            this.setItem(appMetadataKey, JSON.stringify(appMetadata));
+        AsyncMemoryStorage.prototype.getKeys = function () {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var cacheKeys, e_4;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            cacheKeys = this.inMemoryCache.getKeys();
+                            if (!(cacheKeys.length === 0)) return [3 /*break*/, 4];
+                            _a.label = 1;
+                        case 1:
+                            _a.trys.push([1, 3, , 4]);
+                            this.logger.verbose("In-memory cache is empty, now querying persistent storage.");
+                            return [4 /*yield*/, this.indexedDBCache.getKeys()];
+                        case 2: return [2 /*return*/, _a.sent()];
+                        case 3:
+                            e_4 = _a.sent();
+                            this.handleDatabaseAccessError(e_4);
+                            return [3 /*break*/, 4];
+                        case 4: return [2 /*return*/, cacheKeys];
+                    }
+                });
+            });
         };
         /**
-         * fetch server telemetry entity from the platform cache
-         * @param serverTelemetryKey
+         * Returns true or false if the given key is present in the cache.
+         * @param key
          */
-        BrowserCacheManager.prototype.getServerTelemetry = function (serverTelemetryKey) {
-            var value = this.getItem(serverTelemetryKey);
-            if (!value) {
-                this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit");
-                return null;
-            }
-            var parsedMetadata = this.validateAndParseJson(value);
-            if (!parsedMetadata || !ServerTelemetryEntity.isServerTelemetryEntity(serverTelemetryKey, parsedMetadata)) {
-                this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit");
-                return null;
-            }
-            this.logger.trace("BrowserCacheManager.getServerTelemetry: cache hit");
-            return CacheManager.toObject(new ServerTelemetryEntity(), parsedMetadata);
+        AsyncMemoryStorage.prototype.containsKey = function (key) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var containsKey, e_5;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            containsKey = this.inMemoryCache.containsKey(key);
+                            if (!!containsKey) return [3 /*break*/, 4];
+                            _a.label = 1;
+                        case 1:
+                            _a.trys.push([1, 3, , 4]);
+                            this.logger.verbose("Key not found in in-memory cache, now querying persistent storage.");
+                            return [4 /*yield*/, this.indexedDBCache.containsKey(key)];
+                        case 2: return [2 /*return*/, _a.sent()];
+                        case 3:
+                            e_5 = _a.sent();
+                            this.handleDatabaseAccessError(e_5);
+                            return [3 /*break*/, 4];
+                        case 4: return [2 /*return*/, containsKey];
+                    }
+                });
+            });
         };
         /**
-         * set server telemetry entity to the platform cache
-         * @param serverTelemetryKey
-         * @param serverTelemetry
+         * Clears in-memory Map and tries to delete the IndexedDB database.
          */
-        BrowserCacheManager.prototype.setServerTelemetry = function (serverTelemetryKey, serverTelemetry) {
-            this.logger.trace("BrowserCacheManager.setServerTelemetry called");
-            this.setItem(serverTelemetryKey, JSON.stringify(serverTelemetry));
+        AsyncMemoryStorage.prototype.clear = function () {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var e_6;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0:
+                            this.inMemoryCache.clear();
+                            _a.label = 1;
+                        case 1:
+                            _a.trys.push([1, 3, , 4]);
+                            return [4 /*yield*/, this.indexedDBCache.deleteDatabase()];
+                        case 2:
+                            _a.sent();
+                            return [3 /*break*/, 4];
+                        case 3:
+                            e_6 = _a.sent();
+                            this.handleDatabaseAccessError(e_6);
+                            return [3 /*break*/, 4];
+                        case 4: return [2 /*return*/];
+                    }
+                });
+            });
         };
+        return AsyncMemoryStorage;
+    }());
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    /**
+     * This class implements MSAL's crypto interface, which allows it to perform base64 encoding and decoding, generating cryptographically random GUIDs and
+     * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).
+     */
+    var CryptoOps = /** @class */ (function () {
+        function CryptoOps(logger) {
+            this.logger = logger;
+            // Browser crypto needs to be validated first before any other classes can be set.
+            this.browserCrypto = new BrowserCrypto(this.logger);
+            this.b64Encode = new Base64Encode();
+            this.b64Decode = new Base64Decode();
+            this.guidGenerator = new GuidGenerator(this.browserCrypto);
+            this.pkceGenerator = new PkceGenerator(this.browserCrypto);
+            this.cache = {
+                asymmetricKeys: new AsyncMemoryStorage(this.logger),
+                symmetricKeys: new AsyncMemoryStorage(this.logger)
+            };
+        }
         /**
-         *
+         * Creates a new random GUID - used to populate state and nonce.
+         * @returns string (GUID)
          */
-        BrowserCacheManager.prototype.getAuthorityMetadata = function (key) {
-            var value = this.internalStorage.getItem(key);
-            if (!value) {
-                this.logger.trace("BrowserCacheManager.getAuthorityMetadata: called, no cache hit");
-                return null;
-            }
-            var parsedMetadata = this.validateAndParseJson(value);
-            if (parsedMetadata && AuthorityMetadataEntity.isAuthorityMetadataEntity(key, parsedMetadata)) {
-                this.logger.trace("BrowserCacheManager.getAuthorityMetadata: cache hit");
-                return CacheManager.toObject(new AuthorityMetadataEntity(), parsedMetadata);
-            }
-            return null;
+        CryptoOps.prototype.createNewGuid = function () {
+            return this.guidGenerator.generateGuid();
         };
         /**
-         *
+         * Encodes input string to base64.
+         * @param input
          */
-        BrowserCacheManager.prototype.getAuthorityMetadataKeys = function () {
-            var _this = this;
-            var allKeys = this.internalStorage.getKeys();
-            return allKeys.filter(function (key) {
-                return _this.isAuthorityMetadata(key);
-            });
+        CryptoOps.prototype.base64Encode = function (input) {
+            return this.b64Encode.encode(input);
         };
         /**
-         * Sets wrapper metadata in memory
-         * @param wrapperSKU
-         * @param wrapperVersion
+         * Decodes input string from base64.
+         * @param input
          */
-        BrowserCacheManager.prototype.setWrapperMetadata = function (wrapperSKU, wrapperVersion) {
-            this.internalStorage.setItem(InMemoryCacheKeys.WRAPPER_SKU, wrapperSKU);
-            this.internalStorage.setItem(InMemoryCacheKeys.WRAPPER_VER, wrapperVersion);
+        CryptoOps.prototype.base64Decode = function (input) {
+            return this.b64Decode.decode(input);
         };
         /**
-         * Returns wrapper metadata from in-memory storage
+         * Generates PKCE codes used in Authorization Code Flow.
          */
-        BrowserCacheManager.prototype.getWrapperMetadata = function () {
-            var sku = this.internalStorage.getItem(InMemoryCacheKeys.WRAPPER_SKU) || "";
-            var version = this.internalStorage.getItem(InMemoryCacheKeys.WRAPPER_VER) || "";
-            return [sku, version];
+        CryptoOps.prototype.generatePkceCodes = function () {
+            return __awaiter$1(this, void 0, void 0, function () {
+                return __generator$1(this, function (_a) {
+                    return [2 /*return*/, this.pkceGenerator.generateCodes()];
+                });
+            });
         };
         /**
-         *
-         * @param entity
+         * Generates a keypair, stores it and returns a thumbprint
+         * @param request
          */
-        BrowserCacheManager.prototype.setAuthorityMetadata = function (key, entity) {
-            this.logger.trace("BrowserCacheManager.setAuthorityMetadata called");
-            this.internalStorage.setItem(key, JSON.stringify(entity));
+        CryptoOps.prototype.getPublicKeyThumbprint = function (request) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var keyPair, publicKeyJwk, pubKeyThumprintObj, publicJwkString, publicJwkBuffer, publicJwkHash, privateKeyJwk, unextractablePrivateKey;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, this.browserCrypto.generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES)];
+                        case 1:
+                            keyPair = _a.sent();
+                            return [4 /*yield*/, this.browserCrypto.exportJwk(keyPair.publicKey)];
+                        case 2:
+                            publicKeyJwk = _a.sent();
+                            pubKeyThumprintObj = {
+                                e: publicKeyJwk.e,
+                                kty: publicKeyJwk.kty,
+                                n: publicKeyJwk.n
+                            };
+                            publicJwkString = BrowserCrypto.getJwkString(pubKeyThumprintObj);
+                            return [4 /*yield*/, this.browserCrypto.sha256Digest(publicJwkString)];
+                        case 3:
+                            publicJwkBuffer = _a.sent();
+                            publicJwkHash = this.b64Encode.urlEncodeArr(new Uint8Array(publicJwkBuffer));
+                            return [4 /*yield*/, this.browserCrypto.exportJwk(keyPair.privateKey)];
+                        case 4:
+                            privateKeyJwk = _a.sent();
+                            return [4 /*yield*/, this.browserCrypto.importJwk(privateKeyJwk, false, ["sign"])];
+                        case 5:
+                            unextractablePrivateKey = _a.sent();
+                            // Store Keypair data in keystore
+                            return [4 /*yield*/, this.cache.asymmetricKeys.setItem(publicJwkHash, {
+                                    privateKey: unextractablePrivateKey,
+                                    publicKey: keyPair.publicKey,
+                                    requestMethod: request.resourceRequestMethod,
+                                    requestUri: request.resourceRequestUri
+                                })];
+                        case 6:
+                            // Store Keypair data in keystore
+                            _a.sent();
+                            return [2 /*return*/, publicJwkHash];
+                    }
+                });
+            });
         };
         /**
-         * Gets the active account
+         * Removes cryptographic keypair from key store matching the keyId passed in
+         * @param kid
          */
-        BrowserCacheManager.prototype.getActiveAccount = function () {
-            var activeAccountIdKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
-            var activeAccountId = this.browserStorage.getItem(activeAccountIdKey);
-            if (!activeAccountId) {
-                return null;
-            }
-            return this.getAccountInfoByFilter({ localAccountId: activeAccountId })[0] || null;
+        CryptoOps.prototype.removeTokenBindingKey = function (kid) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var keyFound;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, this.cache.asymmetricKeys.removeItem(kid)];
+                        case 1:
+                            _a.sent();
+                            return [4 /*yield*/, this.cache.asymmetricKeys.containsKey(kid)];
+                        case 2:
+                            keyFound = _a.sent();
+                            return [2 /*return*/, !keyFound];
+                    }
+                });
+            });
         };
         /**
-         * Sets the active account's localAccountId in cache
-         * @param account
+         * Removes all cryptographic keys from IndexedDB storage
          */
-        BrowserCacheManager.prototype.setActiveAccount = function (account) {
-            var activeAccountIdKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
-            if (account) {
-                this.logger.verbose("setActiveAccount: Active account set");
-                this.browserStorage.setItem(activeAccountIdKey, account.localAccountId);
-            }
-            else {
-                this.logger.verbose("setActiveAccount: No account passed, active account not set");
-                this.browserStorage.removeItem(activeAccountIdKey);
-            }
+        CryptoOps.prototype.clearKeystore = function () {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var dataStoreNames, databaseStorage, _a;
+                return __generator$1(this, function (_b) {
+                    switch (_b.label) {
+                        case 0:
+                            dataStoreNames = Object.keys(this.cache);
+                            databaseStorage = this.cache[dataStoreNames[0]];
+                            if (!databaseStorage) return [3 /*break*/, 2];
+                            return [4 /*yield*/, databaseStorage.deleteDatabase()];
+                        case 1:
+                            _a = _b.sent();
+                            return [3 /*break*/, 3];
+                        case 2:
+                            _a = false;
+                            _b.label = 3;
+                        case 3: return [2 /*return*/, _a];
+                    }
+                });
+            });
         };
         /**
-         * Gets a list of accounts that match all of the filters provided
-         * @param account
+         * Signs the given object as a jwt payload with private key retrieved by given kid.
+         * @param payload
+         * @param kid
          */
-        BrowserCacheManager.prototype.getAccountInfoByFilter = function (accountFilter) {
-            var allAccounts = this.getAllAccounts();
-            return allAccounts.filter(function (accountObj) {
-                if (accountFilter.username && accountFilter.username.toLowerCase() !== accountObj.username.toLowerCase()) {
-                    return false;
-                }
-                if (accountFilter.homeAccountId && accountFilter.homeAccountId !== accountObj.homeAccountId) {
-                    return false;
-                }
-                if (accountFilter.localAccountId && accountFilter.localAccountId !== accountObj.localAccountId) {
-                    return false;
-                }
-                if (accountFilter.tenantId && accountFilter.tenantId !== accountObj.tenantId) {
-                    return false;
-                }
-                if (accountFilter.environment && accountFilter.environment !== accountObj.environment) {
-                    return false;
-                }
-                return true;
+        CryptoOps.prototype.signJwt = function (payload, kid) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var cachedKeyPair, publicKeyJwk, publicKeyJwkString, header, encodedHeader, encodedPayload, tokenString, tokenBuffer, signatureBuffer, encodedSignature;
+                return __generator$1(this, function (_a) {
+                    switch (_a.label) {
+                        case 0: return [4 /*yield*/, this.cache.asymmetricKeys.getItem(kid)];
+                        case 1:
+                            cachedKeyPair = _a.sent();
+                            if (!cachedKeyPair) {
+                                throw BrowserAuthError.createSigningKeyNotFoundInStorageError(kid);
+                            }
+                            return [4 /*yield*/, this.browserCrypto.exportJwk(cachedKeyPair.publicKey)];
+                        case 2:
+                            publicKeyJwk = _a.sent();
+                            publicKeyJwkString = BrowserCrypto.getJwkString(publicKeyJwk);
+                            header = {
+                                alg: publicKeyJwk.alg,
+                                type: KEY_FORMAT_JWK
+                            };
+                            encodedHeader = this.b64Encode.urlEncode(JSON.stringify(header));
+                            // Generate payload
+                            payload.cnf = {
+                                jwk: JSON.parse(publicKeyJwkString)
+                            };
+                            encodedPayload = this.b64Encode.urlEncode(JSON.stringify(payload));
+                            tokenString = encodedHeader + "." + encodedPayload;
+                            tokenBuffer = BrowserStringUtils.stringToArrayBuffer(tokenString);
+                            return [4 /*yield*/, this.browserCrypto.sign(cachedKeyPair.privateKey, tokenBuffer)];
+                        case 3:
+                            signatureBuffer = _a.sent();
+                            encodedSignature = this.b64Encode.urlEncodeArr(new Uint8Array(signatureBuffer));
+                            return [2 /*return*/, tokenString + "." + encodedSignature];
+                    }
+                });
             });
         };
-        /**
-         * fetch throttling entity from the platform cache
-         * @param throttlingCacheKey
-         */
-        BrowserCacheManager.prototype.getThrottlingCache = function (throttlingCacheKey) {
-            var value = this.getItem(throttlingCacheKey);
-            if (!value) {
-                this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit");
-                return null;
+        CryptoOps.POP_KEY_USAGES = ["sign", "verify"];
+        CryptoOps.EXTRACTABLE = true;
+        return CryptoOps;
+    }());
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    var BrowserStorage = /** @class */ (function () {
+        function BrowserStorage(cacheLocation) {
+            this.validateWindowStorage(cacheLocation);
+            this.windowStorage = window[cacheLocation];
+        }
+        BrowserStorage.prototype.validateWindowStorage = function (cacheLocation) {
+            if (cacheLocation !== exports.BrowserCacheLocation.LocalStorage && cacheLocation !== exports.BrowserCacheLocation.SessionStorage) {
+                throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);
             }
-            var parsedThrottlingCache = this.validateAndParseJson(value);
-            if (!parsedThrottlingCache || !ThrottlingEntity.isThrottlingEntity(throttlingCacheKey, parsedThrottlingCache)) {
-                this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit");
-                return null;
+            var storageSupported = !!window[cacheLocation];
+            if (!storageSupported) {
+                throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);
             }
-            this.logger.trace("BrowserCacheManager.getThrottlingCache: cache hit");
-            return CacheManager.toObject(new ThrottlingEntity(), parsedThrottlingCache);
         };
-        /**
-         * set throttling entity to the platform cache
-         * @param throttlingCacheKey
-         * @param throttlingCache
-         */
-        BrowserCacheManager.prototype.setThrottlingCache = function (throttlingCacheKey, throttlingCache) {
-            this.logger.trace("BrowserCacheManager.setThrottlingCache called");
-            this.setItem(throttlingCacheKey, JSON.stringify(throttlingCache));
+        BrowserStorage.prototype.getItem = function (key) {
+            return this.windowStorage.getItem(key);
+        };
+        BrowserStorage.prototype.setItem = function (key, value) {
+            this.windowStorage.setItem(key, value);
+        };
+        BrowserStorage.prototype.removeItem = function (key) {
+            this.windowStorage.removeItem(key);
+        };
+        BrowserStorage.prototype.getKeys = function () {
+            return Object.keys(this.windowStorage);
+        };
+        BrowserStorage.prototype.containsKey = function (key) {
+            return this.windowStorage.hasOwnProperty(key);
         };
+        return BrowserStorage;
+    }());
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    var BrowserProtocolUtils = /** @class */ (function () {
+        function BrowserProtocolUtils() {
+        }
         /**
-         * Gets cache item with given key.
-         * Will retrieve from cookies if storeAuthStateInCookie is set to true.
-         * @param key
+         * Extracts the BrowserStateObject from the state string.
+         * @param browserCrypto
+         * @param state
          */
-        BrowserCacheManager.prototype.getTemporaryCache = function (cacheKey, generateKey) {
-            var key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
-            if (this.cacheConfig.storeAuthStateInCookie) {
-                var itemCookie = this.getItemCookie(key);
-                if (itemCookie) {
-                    this.logger.trace("BrowserCacheManager.getTemporaryCache: storeAuthStateInCookies set to true, retrieving from cookies");
-                    return itemCookie;
-                }
-            }
-            var value = this.temporaryCacheStorage.getItem(key);
-            if (!value) {
-                // If temp cache item not found in session/memory, check local storage for items set by old versions
-                if (this.cacheConfig.cacheLocation === exports.BrowserCacheLocation.LocalStorage) {
-                    var item = this.browserStorage.getItem(key);
-                    if (item) {
-                        this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item found in local storage");
-                        return item;
-                    }
-                }
-                this.logger.trace("BrowserCacheManager.getTemporaryCache: No cache item found in local storage");
+        BrowserProtocolUtils.extractBrowserRequestState = function (browserCrypto, state) {
+            if (StringUtils.isEmpty(state)) {
                 return null;
             }
-            this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item returned");
-            return value;
+            try {
+                var requestStateObj = ProtocolUtils.parseRequestState(browserCrypto, state);
+                return requestStateObj.libraryState.meta;
+            }
+            catch (e) {
+                throw ClientAuthError.createInvalidStateError(state, e);
+            }
         };
         /**
-         * Sets the cache item with the key and value given.
-         * Stores in cookie if storeAuthStateInCookie is set to true.
-         * This can cause cookie overflow if used incorrectly.
-         * @param key
-         * @param value
+         * Parses properties of server response from url hash
+         * @param locationHash Hash from url
          */
-        BrowserCacheManager.prototype.setTemporaryCache = function (cacheKey, value, generateKey) {
-            var key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
-            this.temporaryCacheStorage.setItem(key, value);
-            if (this.cacheConfig.storeAuthStateInCookie) {
-                this.logger.trace("BrowserCacheManager.setTemporaryCache: storeAuthStateInCookie set to true, setting item cookie");
-                this.setItemCookie(key, value);
+        BrowserProtocolUtils.parseServerResponseFromHash = function (locationHash) {
+            if (!locationHash) {
+                return {};
             }
+            var hashUrlString = new UrlString(locationHash);
+            return UrlString.getDeserializedHash(hashUrlString.getHash());
         };
+        return BrowserProtocolUtils;
+    }());
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    /**
+     * This class implements the cache storage interface for MSAL through browser local or session storage.
+     * Cookies are only used if storeAuthStateInCookie is true, and are only used for
+     * parameters such as state and nonce, generally.
+     */
+    var BrowserCacheManager = /** @class */ (function (_super) {
+        __extends$1(BrowserCacheManager, _super);
+        function BrowserCacheManager(clientId, cacheConfig, cryptoImpl, logger) {
+            var _this = _super.call(this, clientId, cryptoImpl) || this;
+            // Cookie life calculation (hours * minutes * seconds * ms)
+            _this.COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
+            _this.cacheConfig = cacheConfig;
+            _this.logger = logger;
+            _this.internalStorage = new MemoryStorage();
+            _this.browserStorage = _this.setupBrowserStorage(_this.cacheConfig.cacheLocation);
+            _this.temporaryCacheStorage = _this.setupTemporaryCacheStorage(_this.cacheConfig.cacheLocation);
+            // Migrate any cache entries from older versions of MSAL.
+            _this.migrateCacheEntries();
+            return _this;
+        }
         /**
-         * Removes the cache item with the given key.
-         * Will also clear the cookie item if storeAuthStateInCookie is set to true.
-         * @param key
+         * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
+         * @param cacheLocation
          */
-        BrowserCacheManager.prototype.removeItem = function (key) {
-            this.browserStorage.removeItem(key);
-            this.temporaryCacheStorage.removeItem(key);
-            if (this.cacheConfig.storeAuthStateInCookie) {
-                this.logger.trace("BrowserCacheManager.removeItem: storeAuthStateInCookie is true, clearing item cookie");
-                this.clearItemCookie(key);
+        BrowserCacheManager.prototype.setupBrowserStorage = function (cacheLocation) {
+            switch (cacheLocation) {
+                case exports.BrowserCacheLocation.LocalStorage:
+                case exports.BrowserCacheLocation.SessionStorage:
+                    try {
+                        // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
+                        return new BrowserStorage(cacheLocation);
+                    }
+                    catch (e) {
+                        this.logger.verbose(e);
+                        break;
+                    }
+                case exports.BrowserCacheLocation.MemoryStorage:
             }
-            return true;
+            this.cacheConfig.cacheLocation = exports.BrowserCacheLocation.MemoryStorage;
+            return new MemoryStorage();
         };
         /**
-         * Checks whether key is in cache.
-         * @param key
+         *
+         * @param cacheLocation
          */
-        BrowserCacheManager.prototype.containsKey = function (key) {
-            return this.browserStorage.containsKey(key) || this.temporaryCacheStorage.containsKey(key);
+        BrowserCacheManager.prototype.setupTemporaryCacheStorage = function (cacheLocation) {
+            switch (cacheLocation) {
+                case exports.BrowserCacheLocation.LocalStorage:
+                case exports.BrowserCacheLocation.SessionStorage:
+                    try {
+                        // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
+                        return new BrowserStorage(exports.BrowserCacheLocation.SessionStorage);
+                    }
+                    catch (e) {
+                        this.logger.verbose(e);
+                        return this.internalStorage;
+                    }
+                case exports.BrowserCacheLocation.MemoryStorage:
+                default:
+                    return this.internalStorage;
+            }
         };
         /**
-         * Gets all keys in window.
+         * Migrate all old cache entries to new schema. No rollback supported.
+         * @param storeAuthStateInCookie
          */
-        BrowserCacheManager.prototype.getKeys = function () {
-            return __spread(this.browserStorage.getKeys(), this.temporaryCacheStorage.getKeys());
+        BrowserCacheManager.prototype.migrateCacheEntries = function () {
+            var _this = this;
+            var idTokenKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ID_TOKEN;
+            var clientInfoKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.CLIENT_INFO;
+            var errorKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ERROR;
+            var errorDescKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ERROR_DESC;
+            var idTokenValue = this.browserStorage.getItem(idTokenKey);
+            var clientInfoValue = this.browserStorage.getItem(clientInfoKey);
+            var errorValue = this.browserStorage.getItem(errorKey);
+            var errorDescValue = this.browserStorage.getItem(errorDescKey);
+            var values = [idTokenValue, clientInfoValue, errorValue, errorDescValue];
+            var keysToMigrate = [PersistentCacheKeys.ID_TOKEN, PersistentCacheKeys.CLIENT_INFO, PersistentCacheKeys.ERROR, PersistentCacheKeys.ERROR_DESC];
+            keysToMigrate.forEach(function (cacheKey, index) { return _this.migrateCacheEntry(cacheKey, values[index]); });
         };
         /**
-         * Clears all cache entries created by MSAL.
+         * Utility function to help with migration.
+         * @param newKey
+         * @param value
+         * @param storeAuthStateInCookie
          */
-        BrowserCacheManager.prototype.clear = function () {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var _this = this;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: 
-                        // Removes all accounts and their credentials
-                        return [4 /*yield*/, this.removeAllAccounts()];
-                        case 1:
-                            // Removes all accounts and their credentials
-                            _a.sent();
-                            this.removeAppMetadata();
-                            // Removes all remaining MSAL cache items
-                            this.getKeys().forEach(function (cacheKey) {
-                                // Check if key contains msal prefix; For now, we are clearing all the cache items created by MSAL.js
-                                if ((_this.browserStorage.containsKey(cacheKey) || _this.temporaryCacheStorage.containsKey(cacheKey)) && ((cacheKey.indexOf(Constants.CACHE_PREFIX) !== -1) || (cacheKey.indexOf(_this.clientId) !== -1))) {
-                                    _this.removeItem(cacheKey);
-                                }
-                            });
-                            this.internalStorage.clear();
-                            return [2 /*return*/];
-                    }
-                });
-            });
+        BrowserCacheManager.prototype.migrateCacheEntry = function (newKey, value) {
+            if (value) {
+                this.setTemporaryCache(newKey, value, true);
+            }
         };
         /**
-         * Add value to cookies
-         * @param cookieName
-         * @param cookieValue
-         * @param expires
+         * Parses passed value as JSON object, JSON.parse() will throw an error.
+         * @param input
          */
-        BrowserCacheManager.prototype.setItemCookie = function (cookieName, cookieValue, expires) {
-            var cookieStr = encodeURIComponent(cookieName) + "=" + encodeURIComponent(cookieValue) + ";path=/;";
-            if (expires) {
-                var expireTime = this.getCookieExpirationTime(expires);
-                cookieStr += "expires=" + expireTime + ";";
+        BrowserCacheManager.prototype.validateAndParseJson = function (jsonValue) {
+            try {
+                var parsedJson = JSON.parse(jsonValue);
+                /**
+                 * There are edge cases in which JSON.parse will successfully parse a non-valid JSON object
+                 * (e.g. JSON.parse will parse an escaped string into an unescaped string), so adding a type check
+                 * of the parsed value is necessary in order to be certain that the string represents a valid JSON object.
+                 *
+                 */
+                return (parsedJson && typeof parsedJson === "object") ? parsedJson : null;
             }
-            if (this.cacheConfig.secureCookies) {
-                cookieStr += "Secure;";
+            catch (error) {
+                return null;
             }
-            document.cookie = cookieStr;
         };
         /**
-         * Get one item by key from cookies
-         * @param cookieName
+         * fetches the entry from the browser storage based off the key
+         * @param key
          */
-        BrowserCacheManager.prototype.getItemCookie = function (cookieName) {
-            var name = encodeURIComponent(cookieName) + "=";
-            var cookieList = document.cookie.split(";");
-            for (var i = 0; i < cookieList.length; i++) {
-                var cookie = cookieList[i];
-                while (cookie.charAt(0) === " ") {
-                    cookie = cookie.substring(1);
-                }
-                if (cookie.indexOf(name) === 0) {
-                    return decodeURIComponent(cookie.substring(name.length, cookie.length));
-                }
-            }
-            return "";
+        BrowserCacheManager.prototype.getItem = function (key) {
+            return this.browserStorage.getItem(key);
         };
         /**
-         * Clear all msal-related cookies currently set in the browser. Should only be used to clear temporary cache items.
+         * sets the entry in the browser storage
+         * @param key
+         * @param value
          */
-        BrowserCacheManager.prototype.clearMsalCookies = function () {
-            var _this = this;
-            var cookiePrefix = Constants.CACHE_PREFIX + "." + this.clientId;
-            var cookieList = document.cookie.split(";");
-            cookieList.forEach(function (cookie) {
-                while (cookie.charAt(0) === " ") {
-                    // eslint-disable-next-line no-param-reassign
-                    cookie = cookie.substring(1);
-                }
-                if (cookie.indexOf(cookiePrefix) === 0) {
-                    var cookieKey = cookie.split("=")[0];
-                    _this.clearItemCookie(cookieKey);
-                }
-            });
+        BrowserCacheManager.prototype.setItem = function (key, value) {
+            this.browserStorage.setItem(key, value);
         };
         /**
-         * Clear an item in the cookies by key
-         * @param cookieName
+         * fetch the account entity from the platform cache
+         * @param accountKey
          */
-        BrowserCacheManager.prototype.clearItemCookie = function (cookieName) {
-            this.setItemCookie(cookieName, "", -1);
+        BrowserCacheManager.prototype.getAccount = function (accountKey) {
+            var account = this.getItem(accountKey);
+            if (!account) {
+                return null;
+            }
+            var parsedAccount = this.validateAndParseJson(account);
+            if (!parsedAccount || !AccountEntity.isAccountEntity(parsedAccount)) {
+                return null;
+            }
+            return CacheManager.toObject(new AccountEntity(), parsedAccount);
         };
         /**
-         * Get cookie expiration time
-         * @param cookieLifeDays
+         * set account entity in the platform cache
+         * @param key
+         * @param value
          */
-        BrowserCacheManager.prototype.getCookieExpirationTime = function (cookieLifeDays) {
-            var today = new Date();
-            var expr = new Date(today.getTime() + cookieLifeDays * this.COOKIE_LIFE_MULTIPLIER);
-            return expr.toUTCString();
+        BrowserCacheManager.prototype.setAccount = function (account) {
+            this.logger.trace("BrowserCacheManager.setAccount called");
+            var key = account.generateAccountKey();
+            this.setItem(key, JSON.stringify(account));
         };
         /**
-         * Gets the cache object referenced by the browser
+         * generates idToken entity from a string
+         * @param idTokenKey
          */
-        BrowserCacheManager.prototype.getCache = function () {
-            return this.browserStorage;
+        BrowserCacheManager.prototype.getIdTokenCredential = function (idTokenKey) {
+            var value = this.getItem(idTokenKey);
+            if (!value) {
+                this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit");
+                return null;
+            }
+            var parsedIdToken = this.validateAndParseJson(value);
+            if (!parsedIdToken || !IdTokenEntity.isIdTokenEntity(parsedIdToken)) {
+                this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit");
+                return null;
+            }
+            this.logger.trace("BrowserCacheManager.getIdTokenCredential: cache hit");
+            return CacheManager.toObject(new IdTokenEntity(), parsedIdToken);
         };
         /**
-         * interface compat, we cannot overwrite browser cache; Functionality is supported by individual entities in browser
+         * set IdToken credential to the platform cache
+         * @param idToken
          */
-        BrowserCacheManager.prototype.setCache = function () {
-            // sets nothing
+        BrowserCacheManager.prototype.setIdTokenCredential = function (idToken) {
+            this.logger.trace("BrowserCacheManager.setIdTokenCredential called");
+            var idTokenKey = idToken.generateCredentialKey();
+            this.setItem(idTokenKey, JSON.stringify(idToken));
         };
         /**
-         * Prepend msal.<client-id> to each key; Skip for any JSON object as Key (defined schemas do not need the key appended: AccessToken Keys or the upcoming schema)
+         * generates accessToken entity from a string
          * @param key
-         * @param addInstanceId
          */
-        BrowserCacheManager.prototype.generateCacheKey = function (key) {
-            var generatedKey = this.validateAndParseJson(key);
-            if (!generatedKey) {
-                if (StringUtils.startsWith(key, Constants.CACHE_PREFIX) || StringUtils.startsWith(key, PersistentCacheKeys.ADAL_ID_TOKEN)) {
-                    return key;
-                }
-                return Constants.CACHE_PREFIX + "." + this.clientId + "." + key;
+        BrowserCacheManager.prototype.getAccessTokenCredential = function (accessTokenKey) {
+            var value = this.getItem(accessTokenKey);
+            if (!value) {
+                this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit");
+                return null;
             }
-            return JSON.stringify(key);
+            var parsedAccessToken = this.validateAndParseJson(value);
+            if (!parsedAccessToken || !AccessTokenEntity.isAccessTokenEntity(parsedAccessToken)) {
+                this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit");
+                return null;
+            }
+            this.logger.trace("BrowserCacheManager.getAccessTokenCredential: cache hit");
+            return CacheManager.toObject(new AccessTokenEntity(), parsedAccessToken);
         };
         /**
-         * Create authorityKey to cache authority
-         * @param state
+         * set accessToken credential to the platform cache
+         * @param accessToken
          */
-        BrowserCacheManager.prototype.generateAuthorityKey = function (stateString) {
-            var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-            return this.generateCacheKey(TemporaryCacheKeys.AUTHORITY + "." + stateId);
+        BrowserCacheManager.prototype.setAccessTokenCredential = function (accessToken) {
+            this.logger.trace("BrowserCacheManager.setAccessTokenCredential called");
+            var accessTokenKey = accessToken.generateCredentialKey();
+            this.setItem(accessTokenKey, JSON.stringify(accessToken));
         };
         /**
-         * Create Nonce key to cache nonce
-         * @param state
+         * generates refreshToken entity from a string
+         * @param refreshTokenKey
          */
-        BrowserCacheManager.prototype.generateNonceKey = function (stateString) {
-            var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-            return this.generateCacheKey(TemporaryCacheKeys.NONCE_IDTOKEN + "." + stateId);
+        BrowserCacheManager.prototype.getRefreshTokenCredential = function (refreshTokenKey) {
+            var value = this.getItem(refreshTokenKey);
+            if (!value) {
+                this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit");
+                return null;
+            }
+            var parsedRefreshToken = this.validateAndParseJson(value);
+            if (!parsedRefreshToken || !RefreshTokenEntity.isRefreshTokenEntity(parsedRefreshToken)) {
+                this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit");
+                return null;
+            }
+            this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: cache hit");
+            return CacheManager.toObject(new RefreshTokenEntity(), parsedRefreshToken);
         };
         /**
-         * Creates full cache key for the request state
-         * @param stateString State string for the request
+         * set refreshToken credential to the platform cache
+         * @param refreshToken
          */
-        BrowserCacheManager.prototype.generateStateKey = function (stateString) {
-            // Use the library state id to key temp storage for uniqueness for multiple concurrent requests
-            var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-            return this.generateCacheKey(TemporaryCacheKeys.REQUEST_STATE + "." + stateId);
+        BrowserCacheManager.prototype.setRefreshTokenCredential = function (refreshToken) {
+            this.logger.trace("BrowserCacheManager.setRefreshTokenCredential called");
+            var refreshTokenKey = refreshToken.generateCredentialKey();
+            this.setItem(refreshTokenKey, JSON.stringify(refreshToken));
         };
         /**
-         * Gets the cached authority based on the cached state. Returns empty if no cached state found.
+         * fetch appMetadata entity from the platform cache
+         * @param appMetadataKey
          */
-        BrowserCacheManager.prototype.getCachedAuthority = function (cachedState) {
-            var stateCacheKey = this.generateStateKey(cachedState);
-            var state = this.getTemporaryCache(stateCacheKey);
-            if (!state) {
+        BrowserCacheManager.prototype.getAppMetadata = function (appMetadataKey) {
+            var value = this.getItem(appMetadataKey);
+            if (!value) {
+                this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit");
                 return null;
             }
-            var authorityCacheKey = this.generateAuthorityKey(state);
-            return this.getTemporaryCache(authorityCacheKey);
+            var parsedMetadata = this.validateAndParseJson(value);
+            if (!parsedMetadata || !AppMetadataEntity.isAppMetadataEntity(appMetadataKey, parsedMetadata)) {
+                this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit");
+                return null;
+            }
+            this.logger.trace("BrowserCacheManager.getAppMetadata: cache hit");
+            return CacheManager.toObject(new AppMetadataEntity(), parsedMetadata);
         };
         /**
-         * Updates account, authority, and state in cache
-         * @param serverAuthenticationRequest
-         * @param account
+         * set appMetadata entity to the platform cache
+         * @param appMetadata
          */
-        BrowserCacheManager.prototype.updateCacheEntries = function (state, nonce, authorityInstance, loginHint, account) {
-            this.logger.trace("BrowserCacheManager.updateCacheEntries called");
-            // Cache the request state
-            var stateCacheKey = this.generateStateKey(state);
-            this.setTemporaryCache(stateCacheKey, state, false);
-            // Cache the nonce
-            var nonceCacheKey = this.generateNonceKey(state);
-            this.setTemporaryCache(nonceCacheKey, nonce, false);
-            // Cache authorityKey
-            var authorityCacheKey = this.generateAuthorityKey(state);
-            this.setTemporaryCache(authorityCacheKey, authorityInstance, false);
-            if (account) {
-                var ccsCredential = {
-                    credential: account.homeAccountId,
-                    type: CcsCredentialType.HOME_ACCOUNT_ID
-                };
-                this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
-            }
-            else if (!StringUtils.isEmpty(loginHint)) {
-                var ccsCredential = {
-                    credential: loginHint,
-                    type: CcsCredentialType.UPN
-                };
-                this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
-            }
+        BrowserCacheManager.prototype.setAppMetadata = function (appMetadata) {
+            this.logger.trace("BrowserCacheManager.setAppMetadata called");
+            var appMetadataKey = appMetadata.generateAppMetadataKey();
+            this.setItem(appMetadataKey, JSON.stringify(appMetadata));
         };
         /**
-         * Reset all temporary cache items
-         * @param state
+         * fetch server telemetry entity from the platform cache
+         * @param serverTelemetryKey
          */
-        BrowserCacheManager.prototype.resetRequestCache = function (state) {
-            var _this = this;
-            this.logger.trace("BrowserCacheManager.resetRequestCache called");
-            // check state and remove associated cache items
-            if (!StringUtils.isEmpty(state)) {
-                this.getKeys().forEach(function (key) {
-                    if (key.indexOf(state) !== -1) {
-                        _this.removeItem(key);
-                    }
-                });
+        BrowserCacheManager.prototype.getServerTelemetry = function (serverTelemetryKey) {
+            var value = this.getItem(serverTelemetryKey);
+            if (!value) {
+                this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit");
+                return null;
             }
-            // delete generic interactive request parameters
-            if (state) {
-                this.removeItem(this.generateStateKey(state));
-                this.removeItem(this.generateNonceKey(state));
-                this.removeItem(this.generateAuthorityKey(state));
+            var parsedMetadata = this.validateAndParseJson(value);
+            if (!parsedMetadata || !ServerTelemetryEntity.isServerTelemetryEntity(serverTelemetryKey, parsedMetadata)) {
+                this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit");
+                return null;
             }
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.ORIGIN_URI));
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.URL_HASH));
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CORRELATION_ID));
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CCS_CREDENTIAL));
-            this.setInteractionInProgress(false);
+            this.logger.trace("BrowserCacheManager.getServerTelemetry: cache hit");
+            return CacheManager.toObject(new ServerTelemetryEntity(), parsedMetadata);
         };
         /**
-         * Removes temporary cache for the provided state
-         * @param stateString
+         * set server telemetry entity to the platform cache
+         * @param serverTelemetryKey
+         * @param serverTelemetry
          */
-        BrowserCacheManager.prototype.cleanRequestByState = function (stateString) {
-            this.logger.trace("BrowserCacheManager.cleanRequestByState called");
-            // Interaction is completed - remove interaction status.
-            if (stateString) {
-                var stateKey = this.generateStateKey(stateString);
-                var cachedState = this.temporaryCacheStorage.getItem(stateKey);
-                this.logger.infoPii("BrowserCacheManager.cleanRequestByState: Removing temporary cache items for state: " + cachedState);
-                this.resetRequestCache(cachedState || "");
+        BrowserCacheManager.prototype.setServerTelemetry = function (serverTelemetryKey, serverTelemetry) {
+            this.logger.trace("BrowserCacheManager.setServerTelemetry called");
+            this.setItem(serverTelemetryKey, JSON.stringify(serverTelemetry));
+        };
+        /**
+         *
+         */
+        BrowserCacheManager.prototype.getAuthorityMetadata = function (key) {
+            var value = this.internalStorage.getItem(key);
+            if (!value) {
+                this.logger.trace("BrowserCacheManager.getAuthorityMetadata: called, no cache hit");
+                return null;
             }
-            this.clearMsalCookies();
+            var parsedMetadata = this.validateAndParseJson(value);
+            if (parsedMetadata && AuthorityMetadataEntity.isAuthorityMetadataEntity(key, parsedMetadata)) {
+                this.logger.trace("BrowserCacheManager.getAuthorityMetadata: cache hit");
+                return CacheManager.toObject(new AuthorityMetadataEntity(), parsedMetadata);
+            }
+            return null;
         };
         /**
-         * Looks in temporary cache for any state values with the provided interactionType and removes all temporary cache items for that state
-         * Used in scenarios where temp cache needs to be cleaned but state is not known, such as clicking browser back button.
-         * @param interactionType
+         *
          */
-        BrowserCacheManager.prototype.cleanRequestByInteractionType = function (interactionType) {
+        BrowserCacheManager.prototype.getAuthorityMetadataKeys = function () {
             var _this = this;
-            this.logger.trace("BrowserCacheManager.cleanRequestByInteractionType called");
-            // Loop through all keys to find state key
-            this.getKeys().forEach(function (key) {
-                // If this key is not the state key, move on
-                if (key.indexOf(TemporaryCacheKeys.REQUEST_STATE) === -1) {
-                    return;
-                }
-                // Retrieve state value, return if not a valid value
-                var stateValue = _this.temporaryCacheStorage.getItem(key);
-                if (!stateValue) {
-                    return;
-                }
-                // Extract state and ensure it matches given InteractionType, then clean request cache
-                var parsedState = BrowserProtocolUtils.extractBrowserRequestState(_this.cryptoImpl, stateValue);
-                if (parsedState && parsedState.interactionType === interactionType) {
-                    _this.logger.infoPii("BrowserCacheManager.cleanRequestByInteractionType: Removing temporary cache items for state: " + stateValue);
-                    _this.resetRequestCache(stateValue);
-                }
+            var allKeys = this.internalStorage.getKeys();
+            return allKeys.filter(function (key) {
+                return _this.isAuthorityMetadata(key);
             });
-            this.clearMsalCookies();
-        };
-        BrowserCacheManager.prototype.cacheCodeRequest = function (authCodeRequest, browserCrypto) {
-            this.logger.trace("BrowserCacheManager.cacheCodeRequest called");
-            var encodedValue = browserCrypto.base64Encode(JSON.stringify(authCodeRequest));
-            this.setTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, encodedValue, true);
         };
         /**
-         * Gets the token exchange parameters from the cache. Throws an error if nothing is found.
+         * Sets wrapper metadata in memory
+         * @param wrapperSKU
+         * @param wrapperVersion
          */
-        BrowserCacheManager.prototype.getCachedRequest = function (state, browserCrypto) {
-            this.logger.trace("BrowserCacheManager.getCachedRequest called");
-            // Get token request from cache and parse as TokenExchangeParameters.
-            var encodedTokenRequest = this.getTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, true);
-            if (!encodedTokenRequest) {
-                throw BrowserAuthError.createNoTokenRequestCacheError();
-            }
-            var parsedRequest = this.validateAndParseJson(browserCrypto.base64Decode(encodedTokenRequest));
-            if (!parsedRequest) {
-                throw BrowserAuthError.createUnableToParseTokenRequestCacheError();
-            }
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
-            // Get cached authority and use if no authority is cached with request.
-            if (StringUtils.isEmpty(parsedRequest.authority)) {
-                var authorityCacheKey = this.generateAuthorityKey(state);
-                var cachedAuthority = this.getTemporaryCache(authorityCacheKey);
-                if (!cachedAuthority) {
-                    throw BrowserAuthError.createNoCachedAuthorityError();
-                }
-                parsedRequest.authority = cachedAuthority;
-            }
-            return parsedRequest;
+        BrowserCacheManager.prototype.setWrapperMetadata = function (wrapperSKU, wrapperVersion) {
+            this.internalStorage.setItem(InMemoryCacheKeys.WRAPPER_SKU, wrapperSKU);
+            this.internalStorage.setItem(InMemoryCacheKeys.WRAPPER_VER, wrapperVersion);
         };
-        BrowserCacheManager.prototype.isInteractionInProgress = function (matchClientId) {
-            var clientId = this.getInteractionInProgress();
-            if (matchClientId) {
-                return clientId === this.clientId;
-            }
-            else {
-                return !!clientId;
-            }
+        /**
+         * Returns wrapper metadata from in-memory storage
+         */
+        BrowserCacheManager.prototype.getWrapperMetadata = function () {
+            var sku = this.internalStorage.getItem(InMemoryCacheKeys.WRAPPER_SKU) || "";
+            var version = this.internalStorage.getItem(InMemoryCacheKeys.WRAPPER_VER) || "";
+            return [sku, version];
         };
-        BrowserCacheManager.prototype.getInteractionInProgress = function () {
-            var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
-            return this.getTemporaryCache(key, false);
+        /**
+         *
+         * @param entity
+         */
+        BrowserCacheManager.prototype.setAuthorityMetadata = function (key, entity) {
+            this.logger.trace("BrowserCacheManager.setAuthorityMetadata called");
+            this.internalStorage.setItem(key, JSON.stringify(entity));
         };
-        BrowserCacheManager.prototype.setInteractionInProgress = function (inProgress) {
-            var clientId = this.getInteractionInProgress();
-            // Ensure we don't overwrite interaction in progress for a different clientId
-            var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
-            if (inProgress && !clientId) {
-                // No interaction is in progress
-                this.setTemporaryCache(key, this.clientId, false);
-            }
-            else if (!inProgress && clientId === this.clientId) {
-                this.removeItem(key);
+        /**
+         * Gets the active account
+         */
+        BrowserCacheManager.prototype.getActiveAccount = function () {
+            var activeAccountIdKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
+            var activeAccountId = this.browserStorage.getItem(activeAccountIdKey);
+            if (!activeAccountId) {
+                return null;
             }
+            return this.getAccountInfoByFilter({ localAccountId: activeAccountId })[0] || null;
         };
         /**
-         * Returns username retrieved from ADAL or MSAL v1 idToken
+         * Sets the active account's localAccountId in cache
+         * @param account
          */
-        BrowserCacheManager.prototype.getLegacyLoginHint = function () {
-            // Only check for adal/msal token if no SSO params are being used
-            var adalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ADAL_ID_TOKEN);
-            if (adalIdTokenString) {
-                this.browserStorage.removeItem(PersistentCacheKeys.ADAL_ID_TOKEN);
-                this.logger.verbose("Cached ADAL id token retrieved.");
+        BrowserCacheManager.prototype.setActiveAccount = function (account) {
+            var activeAccountIdKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
+            if (account) {
+                this.logger.verbose("setActiveAccount: Active account set");
+                this.browserStorage.setItem(activeAccountIdKey, account.localAccountId);
             }
-            // Check for cached MSAL v1 id token
-            var msalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ID_TOKEN, true);
-            if (msalIdTokenString) {
-                this.removeItem(this.generateCacheKey(PersistentCacheKeys.ID_TOKEN));
-                this.logger.verbose("Cached MSAL.js v1 id token retrieved");
+            else {
+                this.logger.verbose("setActiveAccount: No account passed, active account not set");
+                this.browserStorage.removeItem(activeAccountIdKey);
             }
-            var cachedIdTokenString = msalIdTokenString || adalIdTokenString;
-            if (cachedIdTokenString) {
-                var cachedIdToken = new AuthToken(cachedIdTokenString, this.cryptoImpl);
-                if (cachedIdToken.claims && cachedIdToken.claims.preferred_username) {
-                    this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 preferred_username as loginHint");
-                    return cachedIdToken.claims.preferred_username;
+        };
+        /**
+         * Gets a list of accounts that match all of the filters provided
+         * @param account
+         */
+        BrowserCacheManager.prototype.getAccountInfoByFilter = function (accountFilter) {
+            var allAccounts = this.getAllAccounts();
+            return allAccounts.filter(function (accountObj) {
+                if (accountFilter.username && accountFilter.username.toLowerCase() !== accountObj.username.toLowerCase()) {
+                    return false;
                 }
-                else if (cachedIdToken.claims && cachedIdToken.claims.upn) {
-                    this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 upn as loginHint");
-                    return cachedIdToken.claims.upn;
+                if (accountFilter.homeAccountId && accountFilter.homeAccountId !== accountObj.homeAccountId) {
+                    return false;
                 }
-                else {
-                    this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, however, no account hint claim found. Enable preferred_username or upn id token claim to get SSO.");
+                if (accountFilter.localAccountId && accountFilter.localAccountId !== accountObj.localAccountId) {
+                    return false;
                 }
-            }
-            return null;
+                if (accountFilter.tenantId && accountFilter.tenantId !== accountObj.tenantId) {
+                    return false;
+                }
+                if (accountFilter.environment && accountFilter.environment !== accountObj.environment) {
+                    return false;
+                }
+                return true;
+            });
         };
-        return BrowserCacheManager;
-    }(CacheManager));
-    var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
-        var cacheOptions = {
-            cacheLocation: exports.BrowserCacheLocation.MemoryStorage,
-            storeAuthStateInCookie: false,
-            secureCookies: false
+        /**
+         * fetch throttling entity from the platform cache
+         * @param throttlingCacheKey
+         */
+        BrowserCacheManager.prototype.getThrottlingCache = function (throttlingCacheKey) {
+            var value = this.getItem(throttlingCacheKey);
+            if (!value) {
+                this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit");
+                return null;
+            }
+            var parsedThrottlingCache = this.validateAndParseJson(value);
+            if (!parsedThrottlingCache || !ThrottlingEntity.isThrottlingEntity(throttlingCacheKey, parsedThrottlingCache)) {
+                this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit");
+                return null;
+            }
+            this.logger.trace("BrowserCacheManager.getThrottlingCache: cache hit");
+            return CacheManager.toObject(new ThrottlingEntity(), parsedThrottlingCache);
         };
-        return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger);
-    };
-
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    /**
-     * This class implements the Fetch API for GET and POST requests. See more here: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API
-     */
-    var FetchClient = /** @class */ (function () {
-        function FetchClient() {
-        }
         /**
-         * Fetch Client for REST endpoints - Get request
-         * @param url
-         * @param headers
-         * @param body
+         * set throttling entity to the platform cache
+         * @param throttlingCacheKey
+         * @param throttlingCache
          */
-        FetchClient.prototype.sendGetRequestAsync = function (url, options) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var response, e_1, _a;
-                return __generator$1(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            _b.trys.push([0, 2, , 3]);
-                            return [4 /*yield*/, fetch(url, {
-                                    method: HTTP_REQUEST_TYPE.GET,
-                                    headers: this.getFetchHeaders(options)
-                                })];
-                        case 1:
-                            response = _b.sent();
-                            return [3 /*break*/, 3];
-                        case 2:
-                            e_1 = _b.sent();
-                            if (window.navigator.onLine) {
-                                throw BrowserAuthError.createGetRequestFailedError(e_1, url);
-                            }
-                            else {
-                                throw BrowserAuthError.createNoNetworkConnectivityError();
-                            }
-                        case 3:
-                            _b.trys.push([3, 5, , 6]);
-                            _a = {
-                                headers: this.getHeaderDict(response.headers)
-                            };
-                            return [4 /*yield*/, response.json()];
-                        case 4: return [2 /*return*/, (_a.body = (_b.sent()),
-                                _a.status = response.status,
-                                _a)];
-                        case 5:
-                            _b.sent();
-                            throw BrowserAuthError.createFailedToParseNetworkResponseError(url);
-                        case 6: return [2 /*return*/];
-                    }
-                });
-            });
+        BrowserCacheManager.prototype.setThrottlingCache = function (throttlingCacheKey, throttlingCache) {
+            this.logger.trace("BrowserCacheManager.setThrottlingCache called");
+            this.setItem(throttlingCacheKey, JSON.stringify(throttlingCache));
         };
         /**
-         * Fetch Client for REST endpoints - Post request
-         * @param url
-         * @param headers
-         * @param body
+         * Gets cache item with given key.
+         * Will retrieve from cookies if storeAuthStateInCookie is set to true.
+         * @param key
          */
-        FetchClient.prototype.sendPostRequestAsync = function (url, options) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var reqBody, response, e_3, _a;
-                return __generator$1(this, function (_b) {
-                    switch (_b.label) {
-                        case 0:
-                            reqBody = (options && options.body) || "";
-                            _b.label = 1;
-                        case 1:
-                            _b.trys.push([1, 3, , 4]);
-                            return [4 /*yield*/, fetch(url, {
-                                    method: HTTP_REQUEST_TYPE.POST,
-                                    headers: this.getFetchHeaders(options),
-                                    body: reqBody
-                                })];
-                        case 2:
-                            response = _b.sent();
-                            return [3 /*break*/, 4];
-                        case 3:
-                            e_3 = _b.sent();
-                            if (window.navigator.onLine) {
-                                throw BrowserAuthError.createPostRequestFailedError(e_3, url);
-                            }
-                            else {
-                                throw BrowserAuthError.createNoNetworkConnectivityError();
-                            }
-                        case 4:
-                            _b.trys.push([4, 6, , 7]);
-                            _a = {
-                                headers: this.getHeaderDict(response.headers)
-                            };
-                            return [4 /*yield*/, response.json()];
-                        case 5: return [2 /*return*/, (_a.body = (_b.sent()),
-                                _a.status = response.status,
-                                _a)];
-                        case 6:
-                            _b.sent();
-                            throw BrowserAuthError.createFailedToParseNetworkResponseError(url);
-                        case 7: return [2 /*return*/];
+        BrowserCacheManager.prototype.getTemporaryCache = function (cacheKey, generateKey) {
+            var key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
+            if (this.cacheConfig.storeAuthStateInCookie) {
+                var itemCookie = this.getItemCookie(key);
+                if (itemCookie) {
+                    this.logger.trace("BrowserCacheManager.getTemporaryCache: storeAuthStateInCookies set to true, retrieving from cookies");
+                    return itemCookie;
+                }
+            }
+            var value = this.temporaryCacheStorage.getItem(key);
+            if (!value) {
+                // If temp cache item not found in session/memory, check local storage for items set by old versions
+                if (this.cacheConfig.cacheLocation === exports.BrowserCacheLocation.LocalStorage) {
+                    var item = this.browserStorage.getItem(key);
+                    if (item) {
+                        this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item found in local storage");
+                        return item;
                     }
-                });
-            });
+                }
+                this.logger.trace("BrowserCacheManager.getTemporaryCache: No cache item found in local storage");
+                return null;
+            }
+            this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item returned");
+            return value;
         };
         /**
-         * Get Fetch API Headers object from string map
-         * @param inputHeaders
+         * Sets the cache item with the key and value given.
+         * Stores in cookie if storeAuthStateInCookie is set to true.
+         * This can cause cookie overflow if used incorrectly.
+         * @param key
+         * @param value
          */
-        FetchClient.prototype.getFetchHeaders = function (options) {
-            var headers = new Headers();
-            if (!(options && options.headers)) {
-                return headers;
+        BrowserCacheManager.prototype.setTemporaryCache = function (cacheKey, value, generateKey) {
+            var key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
+            this.temporaryCacheStorage.setItem(key, value);
+            if (this.cacheConfig.storeAuthStateInCookie) {
+                this.logger.trace("BrowserCacheManager.setTemporaryCache: storeAuthStateInCookie set to true, setting item cookie");
+                this.setItemCookie(key, value);
             }
-            var optionsHeaders = options.headers;
-            Object.keys(optionsHeaders).forEach(function (key) {
-                headers.append(key, optionsHeaders[key]);
-            });
-            return headers;
         };
-        FetchClient.prototype.getHeaderDict = function (headers) {
-            var headerDict = {};
-            headers.forEach(function (value, key) {
-                headerDict[key] = value;
-            });
-            return headerDict;
+        /**
+         * Removes the cache item with the given key.
+         * Will also clear the cookie item if storeAuthStateInCookie is set to true.
+         * @param key
+         */
+        BrowserCacheManager.prototype.removeItem = function (key) {
+            this.browserStorage.removeItem(key);
+            this.temporaryCacheStorage.removeItem(key);
+            if (this.cacheConfig.storeAuthStateInCookie) {
+                this.logger.trace("BrowserCacheManager.removeItem: storeAuthStateInCookie is true, clearing item cookie");
+                this.clearItemCookie(key);
+            }
+            return true;
+        };
+        /**
+         * Checks whether key is in cache.
+         * @param key
+         */
+        BrowserCacheManager.prototype.containsKey = function (key) {
+            return this.browserStorage.containsKey(key) || this.temporaryCacheStorage.containsKey(key);
         };
-        return FetchClient;
-    }());
-
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    /**
-     * This client implements the XMLHttpRequest class to send GET and POST requests.
-     */
-    var XhrClient = /** @class */ (function () {
-        function XhrClient() {
-        }
         /**
-         * XhrClient for REST endpoints - Get request
-         * @param url
-         * @param headers
-         * @param body
+         * Gets all keys in window.
          */
-        XhrClient.prototype.sendGetRequestAsync = function (url, options) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                return __generator$1(this, function (_a) {
-                    return [2 /*return*/, this.sendRequestAsync(url, HTTP_REQUEST_TYPE.GET, options)];
-                });
-            });
+        BrowserCacheManager.prototype.getKeys = function () {
+            return __spread(this.browserStorage.getKeys(), this.temporaryCacheStorage.getKeys());
         };
         /**
-         * XhrClient for REST endpoints - Post request
-         * @param url
-         * @param headers
-         * @param body
+         * Clears all cache entries created by MSAL.
          */
-        XhrClient.prototype.sendPostRequestAsync = function (url, options) {
+        BrowserCacheManager.prototype.clear = function () {
             return __awaiter$1(this, void 0, void 0, function () {
+                var _this = this;
                 return __generator$1(this, function (_a) {
-                    return [2 /*return*/, this.sendRequestAsync(url, HTTP_REQUEST_TYPE.POST, options)];
+                    switch (_a.label) {
+                        case 0: 
+                        // Removes all accounts and their credentials
+                        return [4 /*yield*/, this.removeAllAccounts()];
+                        case 1:
+                            // Removes all accounts and their credentials
+                            _a.sent();
+                            this.removeAppMetadata();
+                            // Removes all remaining MSAL cache items
+                            this.getKeys().forEach(function (cacheKey) {
+                                // Check if key contains msal prefix; For now, we are clearing all the cache items created by MSAL.js
+                                if ((_this.browserStorage.containsKey(cacheKey) || _this.temporaryCacheStorage.containsKey(cacheKey)) && ((cacheKey.indexOf(Constants.CACHE_PREFIX) !== -1) || (cacheKey.indexOf(_this.clientId) !== -1))) {
+                                    _this.removeItem(cacheKey);
+                                }
+                            });
+                            this.internalStorage.clear();
+                            return [2 /*return*/];
+                    }
                 });
             });
         };
         /**
-         * Helper for XhrClient requests.
-         * @param url
-         * @param method
-         * @param options
+         * Add value to cookies
+         * @param cookieName
+         * @param cookieValue
+         * @param expires
          */
-        XhrClient.prototype.sendRequestAsync = function (url, method, options) {
-            var _this = this;
-            return new Promise(function (resolve, reject) {
-                var xhr = new XMLHttpRequest();
-                xhr.open(method, url, /* async: */ true);
-                _this.setXhrHeaders(xhr, options);
-                xhr.onload = function () {
-                    if (xhr.status < 200 || xhr.status >= 300) {
-                        if (method === HTTP_REQUEST_TYPE.POST) {
-                            reject(BrowserAuthError.createPostRequestFailedError("Failed with status " + xhr.status, url));
-                        }
-                        else {
-                            reject(BrowserAuthError.createGetRequestFailedError("Failed with status " + xhr.status, url));
-                        }
-                    }
-                    try {
-                        var jsonResponse = JSON.parse(xhr.responseText);
-                        var networkResponse = {
-                            headers: _this.getHeaderDict(xhr),
-                            body: jsonResponse,
-                            status: xhr.status
-                        };
-                        resolve(networkResponse);
-                    }
-                    catch (e) {
-                        reject(BrowserAuthError.createFailedToParseNetworkResponseError(url));
-                    }
-                };
-                xhr.onerror = function () {
-                    if (window.navigator.onLine) {
-                        if (method === HTTP_REQUEST_TYPE.POST) {
-                            reject(BrowserAuthError.createPostRequestFailedError("Failed with status " + xhr.status, url));
-                        }
-                        else {
-                            reject(BrowserAuthError.createGetRequestFailedError("Failed with status " + xhr.status, url));
-                        }
-                    }
-                    else {
-                        reject(BrowserAuthError.createNoNetworkConnectivityError());
-                    }
-                };
-                if (method === HTTP_REQUEST_TYPE.POST && options && options.body) {
-                    xhr.send(options.body);
-                }
-                else if (method === HTTP_REQUEST_TYPE.GET) {
-                    xhr.send();
-                }
-                else {
-                    throw BrowserAuthError.createHttpMethodNotImplementedError(method);
-                }
-            });
+        BrowserCacheManager.prototype.setItemCookie = function (cookieName, cookieValue, expires) {
+            var cookieStr = encodeURIComponent(cookieName) + "=" + encodeURIComponent(cookieValue) + ";path=/;";
+            if (expires) {
+                var expireTime = this.getCookieExpirationTime(expires);
+                cookieStr += "expires=" + expireTime + ";";
+            }
+            if (this.cacheConfig.secureCookies) {
+                cookieStr += "Secure;";
+            }
+            document.cookie = cookieStr;
         };
         /**
-         * Helper to set XHR headers for request.
-         * @param xhr
-         * @param options
+         * Get one item by key from cookies
+         * @param cookieName
          */
-        XhrClient.prototype.setXhrHeaders = function (xhr, options) {
-            if (options && options.headers) {
-                var headers_1 = options.headers;
-                Object.keys(headers_1).forEach(function (key) {
-                    xhr.setRequestHeader(key, headers_1[key]);
-                });
+        BrowserCacheManager.prototype.getItemCookie = function (cookieName) {
+            var name = encodeURIComponent(cookieName) + "=";
+            var cookieList = document.cookie.split(";");
+            for (var i = 0; i < cookieList.length; i++) {
+                var cookie = cookieList[i];
+                while (cookie.charAt(0) === " ") {
+                    cookie = cookie.substring(1);
+                }
+                if (cookie.indexOf(name) === 0) {
+                    return decodeURIComponent(cookie.substring(name.length, cookie.length));
+                }
             }
+            return "";
         };
         /**
-         * Gets a string map of the headers received in the response.
-         *
-         * Algorithm comes from https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/getAllResponseHeaders
-         * @param xhr
+         * Clear all msal-related cookies currently set in the browser. Should only be used to clear temporary cache items.
          */
-        XhrClient.prototype.getHeaderDict = function (xhr) {
-            var headerString = xhr.getAllResponseHeaders();
-            var headerArr = headerString.trim().split(/[\r\n]+/);
-            var headerDict = {};
-            headerArr.forEach(function (value) {
-                var parts = value.split(": ");
-                var headerName = parts.shift();
-                var headerVal = parts.join(": ");
-                if (headerName && headerVal) {
-                    headerDict[headerName] = headerVal;
+        BrowserCacheManager.prototype.clearMsalCookies = function () {
+            var _this = this;
+            var cookiePrefix = Constants.CACHE_PREFIX + "." + this.clientId;
+            var cookieList = document.cookie.split(";");
+            cookieList.forEach(function (cookie) {
+                while (cookie.charAt(0) === " ") {
+                    // eslint-disable-next-line no-param-reassign
+                    cookie = cookie.substring(1);
+                }
+                if (cookie.indexOf(cookiePrefix) === 0) {
+                    var cookieKey = cookie.split("=")[0];
+                    _this.clearItemCookie(cookieKey);
                 }
             });
-            return headerDict;
         };
-        return XhrClient;
-    }());
-
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    /**
-     * Utility class for browser specific functions
-     */
-    var BrowserUtils = /** @class */ (function () {
-        function BrowserUtils() {
-        }
-        // #region Window Navigation and URL management
         /**
-         * Clears hash from window url.
+         * Clear an item in the cookies by key
+         * @param cookieName
          */
-        BrowserUtils.clearHash = function (contentWindow) {
-            // Office.js sets history.replaceState to null
-            contentWindow.location.hash = Constants.EMPTY_STRING;
-            if (typeof contentWindow.history.replaceState === "function") {
-                // Full removes "#" from url
-                contentWindow.history.replaceState(null, Constants.EMPTY_STRING, "" + contentWindow.location.origin + contentWindow.location.pathname + contentWindow.location.search);
-            }
+        BrowserCacheManager.prototype.clearItemCookie = function (cookieName) {
+            this.setItemCookie(cookieName, "", -1);
         };
         /**
-         * Replaces current hash with hash from provided url
+         * Get cookie expiration time
+         * @param cookieLifeDays
          */
-        BrowserUtils.replaceHash = function (url) {
-            var urlParts = url.split("#");
-            urlParts.shift(); // Remove part before the hash
-            window.location.hash = urlParts.length > 0 ? urlParts.join("#") : "";
+        BrowserCacheManager.prototype.getCookieExpirationTime = function (cookieLifeDays) {
+            var today = new Date();
+            var expr = new Date(today.getTime() + cookieLifeDays * this.COOKIE_LIFE_MULTIPLIER);
+            return expr.toUTCString();
         };
         /**
-         * Returns boolean of whether the current window is in an iframe or not.
+         * Gets the cache object referenced by the browser
          */
-        BrowserUtils.isInIframe = function () {
-            return window.parent !== window;
+        BrowserCacheManager.prototype.getCache = function () {
+            return this.browserStorage;
         };
         /**
-         * Returns boolean of whether or not the current window is a popup opened by msal
+         * interface compat, we cannot overwrite browser cache; Functionality is supported by individual entities in browser
          */
-        BrowserUtils.isInPopup = function () {
-            return typeof window !== "undefined" && !!window.opener &&
-                window.opener !== window &&
-                typeof window.name === "string" &&
-                window.name.indexOf(BrowserConstants.POPUP_NAME_PREFIX + ".") === 0;
+        BrowserCacheManager.prototype.setCache = function () {
+            // sets nothing
         };
-        // #endregion
         /**
-         * Returns current window URL as redirect uri
+         * Prepend msal.<client-id> to each key; Skip for any JSON object as Key (defined schemas do not need the key appended: AccessToken Keys or the upcoming schema)
+         * @param key
+         * @param addInstanceId
          */
-        BrowserUtils.getCurrentUri = function () {
-            return window.location.href.split("?")[0].split("#")[0];
+        BrowserCacheManager.prototype.generateCacheKey = function (key) {
+            var generatedKey = this.validateAndParseJson(key);
+            if (!generatedKey) {
+                if (StringUtils.startsWith(key, Constants.CACHE_PREFIX) || StringUtils.startsWith(key, PersistentCacheKeys.ADAL_ID_TOKEN)) {
+                    return key;
+                }
+                return Constants.CACHE_PREFIX + "." + this.clientId + "." + key;
+            }
+            return JSON.stringify(key);
         };
         /**
-         * Gets the homepage url for the current window location.
+         * Create authorityKey to cache authority
+         * @param state
          */
-        BrowserUtils.getHomepage = function () {
-            var currentUrl = new UrlString(window.location.href);
-            var urlComponents = currentUrl.getUrlComponents();
-            return urlComponents.Protocol + "//" + urlComponents.HostNameAndPort + "/";
+        BrowserCacheManager.prototype.generateAuthorityKey = function (stateString) {
+            var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
+            return this.generateCacheKey(TemporaryCacheKeys.AUTHORITY + "." + stateId);
         };
         /**
-         * Returns best compatible network client object.
+         * Create Nonce key to cache nonce
+         * @param state
          */
-        BrowserUtils.getBrowserNetworkClient = function () {
-            if (window.fetch && window.Headers) {
-                return new FetchClient();
-            }
-            else {
-                return new XhrClient();
-            }
+        BrowserCacheManager.prototype.generateNonceKey = function (stateString) {
+            var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
+            return this.generateCacheKey(TemporaryCacheKeys.NONCE_IDTOKEN + "." + stateId);
         };
         /**
-         * Throws error if we have completed an auth and are
-         * attempting another auth request inside an iframe.
+         * Creates full cache key for the request state
+         * @param stateString State string for the request
          */
-        BrowserUtils.blockReloadInHiddenIframes = function () {
-            var isResponseHash = UrlString.hashContainsKnownProperties(window.location.hash);
-            // return an error if called from the hidden iframe created by the msal js silent calls
-            if (isResponseHash && BrowserUtils.isInIframe()) {
-                throw BrowserAuthError.createBlockReloadInHiddenIframeError();
-            }
+        BrowserCacheManager.prototype.generateStateKey = function (stateString) {
+            // Use the library state id to key temp storage for uniqueness for multiple concurrent requests
+            var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
+            return this.generateCacheKey(TemporaryCacheKeys.REQUEST_STATE + "." + stateId);
         };
         /**
-         * Block redirect operations in iframes unless explicitly allowed
-         * @param interactionType Interaction type for the request
-         * @param allowRedirectInIframe Config value to allow redirects when app is inside an iframe
+         * Gets the cached authority based on the cached state. Returns empty if no cached state found.
          */
-        BrowserUtils.blockRedirectInIframe = function (interactionType, allowRedirectInIframe) {
-            var isIframedApp = BrowserUtils.isInIframe();
-            if (interactionType === exports.InteractionType.Redirect && isIframedApp && !allowRedirectInIframe) {
-                // If we are not in top frame, we shouldn't redirect. This is also handled by the service.
-                throw BrowserAuthError.createRedirectInIframeError(isIframedApp);
+        BrowserCacheManager.prototype.getCachedAuthority = function (cachedState) {
+            var stateCacheKey = this.generateStateKey(cachedState);
+            var state = this.getTemporaryCache(stateCacheKey);
+            if (!state) {
+                return null;
             }
+            var authorityCacheKey = this.generateAuthorityKey(state);
+            return this.getTemporaryCache(authorityCacheKey);
         };
         /**
-         * Block redirectUri loaded in popup from calling AcquireToken APIs
+         * Updates account, authority, and state in cache
+         * @param serverAuthenticationRequest
+         * @param account
          */
-        BrowserUtils.blockAcquireTokenInPopups = function () {
-            // Popups opened by msal popup APIs are given a name that starts with "msal."
-            if (BrowserUtils.isInPopup()) {
-                throw BrowserAuthError.createBlockAcquireTokenInPopupsError();
+        BrowserCacheManager.prototype.updateCacheEntries = function (state, nonce, authorityInstance, loginHint, account) {
+            this.logger.trace("BrowserCacheManager.updateCacheEntries called");
+            // Cache the request state
+            var stateCacheKey = this.generateStateKey(state);
+            this.setTemporaryCache(stateCacheKey, state, false);
+            // Cache the nonce
+            var nonceCacheKey = this.generateNonceKey(state);
+            this.setTemporaryCache(nonceCacheKey, nonce, false);
+            // Cache authorityKey
+            var authorityCacheKey = this.generateAuthorityKey(state);
+            this.setTemporaryCache(authorityCacheKey, authorityInstance, false);
+            if (account) {
+                var ccsCredential = {
+                    credential: account.homeAccountId,
+                    type: CcsCredentialType.HOME_ACCOUNT_ID
+                };
+                this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
+            }
+            else if (!StringUtils.isEmpty(loginHint)) {
+                var ccsCredential = {
+                    credential: loginHint,
+                    type: CcsCredentialType.UPN
+                };
+                this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
             }
         };
         /**
-         * Throws error if token requests are made in non-browser environment
-         * @param isBrowserEnvironment Flag indicating if environment is a browser.
+         * Reset all temporary cache items
+         * @param state
          */
-        BrowserUtils.blockNonBrowserEnvironment = function (isBrowserEnvironment) {
-            if (!isBrowserEnvironment) {
-                throw BrowserAuthError.createNonBrowserEnvironmentError();
+        BrowserCacheManager.prototype.resetRequestCache = function (state) {
+            var _this = this;
+            this.logger.trace("BrowserCacheManager.resetRequestCache called");
+            // check state and remove associated cache items
+            if (!StringUtils.isEmpty(state)) {
+                this.getKeys().forEach(function (key) {
+                    if (key.indexOf(state) !== -1) {
+                        _this.removeItem(key);
+                    }
+                });
             }
+            // delete generic interactive request parameters
+            if (state) {
+                this.removeItem(this.generateStateKey(state));
+                this.removeItem(this.generateNonceKey(state));
+                this.removeItem(this.generateAuthorityKey(state));
+            }
+            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
+            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.ORIGIN_URI));
+            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.URL_HASH));
+            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CORRELATION_ID));
+            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CCS_CREDENTIAL));
+            this.setInteractionInProgress(false);
         };
         /**
-         * Returns boolean of whether current browser is an Internet Explorer or Edge browser.
+         * Removes temporary cache for the provided state
+         * @param stateString
          */
-        BrowserUtils.detectIEOrEdge = function () {
-            var ua = window.navigator.userAgent;
-            var msie = ua.indexOf("MSIE ");
-            var msie11 = ua.indexOf("Trident/");
-            var msedge = ua.indexOf("Edge/");
-            var isIE = msie > 0 || msie11 > 0;
-            var isEdge = msedge > 0;
-            return isIE || isEdge;
+        BrowserCacheManager.prototype.cleanRequestByState = function (stateString) {
+            this.logger.trace("BrowserCacheManager.cleanRequestByState called");
+            // Interaction is completed - remove interaction status.
+            if (stateString) {
+                var stateKey = this.generateStateKey(stateString);
+                var cachedState = this.temporaryCacheStorage.getItem(stateKey);
+                this.logger.infoPii("BrowserCacheManager.cleanRequestByState: Removing temporary cache items for state: " + cachedState);
+                this.resetRequestCache(cachedState || "");
+            }
+            this.clearMsalCookies();
         };
-        return BrowserUtils;
-    }());
-
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    var NavigationClient = /** @class */ (function () {
-        function NavigationClient() {
-        }
         /**
-         * Navigates to other pages within the same web application
-         * @param url
-         * @param options
+         * Looks in temporary cache for any state values with the provided interactionType and removes all temporary cache items for that state
+         * Used in scenarios where temp cache needs to be cleaned but state is not known, such as clicking browser back button.
+         * @param interactionType
          */
-        NavigationClient.prototype.navigateInternal = function (url, options) {
-            return NavigationClient.defaultNavigateWindow(url, options);
+        BrowserCacheManager.prototype.cleanRequestByInteractionType = function (interactionType) {
+            var _this = this;
+            this.logger.trace("BrowserCacheManager.cleanRequestByInteractionType called");
+            // Loop through all keys to find state key
+            this.getKeys().forEach(function (key) {
+                // If this key is not the state key, move on
+                if (key.indexOf(TemporaryCacheKeys.REQUEST_STATE) === -1) {
+                    return;
+                }
+                // Retrieve state value, return if not a valid value
+                var stateValue = _this.temporaryCacheStorage.getItem(key);
+                if (!stateValue) {
+                    return;
+                }
+                // Extract state and ensure it matches given InteractionType, then clean request cache
+                var parsedState = BrowserProtocolUtils.extractBrowserRequestState(_this.cryptoImpl, stateValue);
+                if (parsedState && parsedState.interactionType === interactionType) {
+                    _this.logger.infoPii("BrowserCacheManager.cleanRequestByInteractionType: Removing temporary cache items for state: " + stateValue);
+                    _this.resetRequestCache(stateValue);
+                }
+            });
+            this.clearMsalCookies();
+        };
+        BrowserCacheManager.prototype.cacheCodeRequest = function (authCodeRequest, browserCrypto) {
+            this.logger.trace("BrowserCacheManager.cacheCodeRequest called");
+            var encodedValue = browserCrypto.base64Encode(JSON.stringify(authCodeRequest));
+            this.setTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, encodedValue, true);
         };
         /**
-         * Navigates to other pages outside the web application i.e. the Identity Provider
-         * @param url
-         * @param options
+         * Gets the token exchange parameters from the cache. Throws an error if nothing is found.
          */
-        NavigationClient.prototype.navigateExternal = function (url, options) {
-            return NavigationClient.defaultNavigateWindow(url, options);
+        BrowserCacheManager.prototype.getCachedRequest = function (state, browserCrypto) {
+            this.logger.trace("BrowserCacheManager.getCachedRequest called");
+            // Get token request from cache and parse as TokenExchangeParameters.
+            var encodedTokenRequest = this.getTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, true);
+            if (!encodedTokenRequest) {
+                throw BrowserAuthError.createNoTokenRequestCacheError();
+            }
+            var parsedRequest = this.validateAndParseJson(browserCrypto.base64Decode(encodedTokenRequest));
+            if (!parsedRequest) {
+                throw BrowserAuthError.createUnableToParseTokenRequestCacheError();
+            }
+            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
+            // Get cached authority and use if no authority is cached with request.
+            if (StringUtils.isEmpty(parsedRequest.authority)) {
+                var authorityCacheKey = this.generateAuthorityKey(state);
+                var cachedAuthority = this.getTemporaryCache(authorityCacheKey);
+                if (!cachedAuthority) {
+                    throw BrowserAuthError.createNoCachedAuthorityError();
+                }
+                parsedRequest.authority = cachedAuthority;
+            }
+            return parsedRequest;
+        };
+        BrowserCacheManager.prototype.isInteractionInProgress = function (matchClientId) {
+            var clientId = this.getInteractionInProgress();
+            if (matchClientId) {
+                return clientId === this.clientId;
+            }
+            else {
+                return !!clientId;
+            }
+        };
+        BrowserCacheManager.prototype.getInteractionInProgress = function () {
+            var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
+            return this.getTemporaryCache(key, false);
+        };
+        BrowserCacheManager.prototype.setInteractionInProgress = function (inProgress) {
+            var clientId = this.getInteractionInProgress();
+            // Ensure we don't overwrite interaction in progress for a different clientId
+            var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
+            if (inProgress && !clientId) {
+                // No interaction is in progress
+                this.setTemporaryCache(key, this.clientId, false);
+            }
+            else if (!inProgress && clientId === this.clientId) {
+                this.removeItem(key);
+            }
         };
         /**
-         * Default navigation implementation invoked by the internal and external functions
-         * @param url
-         * @param options
+         * Returns username retrieved from ADAL or MSAL v1 idToken
          */
-        NavigationClient.defaultNavigateWindow = function (url, options) {
-            if (options.noHistory) {
-                window.location.replace(url);
+        BrowserCacheManager.prototype.getLegacyLoginHint = function () {
+            // Only check for adal/msal token if no SSO params are being used
+            var adalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ADAL_ID_TOKEN);
+            if (adalIdTokenString) {
+                this.browserStorage.removeItem(PersistentCacheKeys.ADAL_ID_TOKEN);
+                this.logger.verbose("Cached ADAL id token retrieved.");
             }
-            else {
-                window.location.assign(url);
+            // Check for cached MSAL v1 id token
+            var msalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ID_TOKEN, true);
+            if (msalIdTokenString) {
+                this.removeItem(this.generateCacheKey(PersistentCacheKeys.ID_TOKEN));
+                this.logger.verbose("Cached MSAL.js v1 id token retrieved");
             }
-            return new Promise(function (resolve) {
-                setTimeout(function () {
-                    resolve(true);
-                }, options.timeout);
-            });
+            var cachedIdTokenString = msalIdTokenString || adalIdTokenString;
+            if (cachedIdTokenString) {
+                var cachedIdToken = new AuthToken(cachedIdTokenString, this.cryptoImpl);
+                if (cachedIdToken.claims && cachedIdToken.claims.preferred_username) {
+                    this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 preferred_username as loginHint");
+                    return cachedIdToken.claims.preferred_username;
+                }
+                else if (cachedIdToken.claims && cachedIdToken.claims.upn) {
+                    this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 upn as loginHint");
+                    return cachedIdToken.claims.upn;
+                }
+                else {
+                    this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, however, no account hint claim found. Enable preferred_username or upn id token claim to get SSO.");
+                }
+            }
+            return null;
+        };
+        /**
+         * Updates a credential's cache key if the current cache key is outdated
+         */
+        BrowserCacheManager.prototype.updateCredentialCacheKey = function (currentCacheKey, credential) {
+            var updatedCacheKey = credential.generateCredentialKey();
+            if (currentCacheKey !== updatedCacheKey) {
+                var cacheItem = this.getItem(currentCacheKey);
+                if (cacheItem) {
+                    this.removeItem(currentCacheKey);
+                    this.setItem(updatedCacheKey, cacheItem);
+                    this.logger.verbose("Updated an outdated " + credential.credentialType + " cache key");
+                    return updatedCacheKey;
+                }
+                else {
+                    this.logger.error("Attempted to update an outdated " + credential.credentialType + " cache key but no item matching the outdated key was found in storage");
+                }
+            }
+            return currentCacheKey;
         };
-        return NavigationClient;
-    }());
+        return BrowserCacheManager;
+    }(CacheManager));
+    var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
+        var cacheOptions = {
+            cacheLocation: exports.BrowserCacheLocation.MemoryStorage,
+            storeAuthStateInCookie: false,
+            secureCookies: false
+        };
+        return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger);
+    };
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10295,37 +10580,6 @@
         return overlayedConfig;
     }
 
-    /* eslint-disable header/header */
-    var name = "@azure/msal-browser";
-    var version = "2.19.0";
-
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    exports.EventType = void 0;
-    (function (EventType) {
-        EventType["ACCOUNT_ADDED"] = "msal:accountAdded";
-        EventType["ACCOUNT_REMOVED"] = "msal:accountRemoved";
-        EventType["LOGIN_START"] = "msal:loginStart";
-        EventType["LOGIN_SUCCESS"] = "msal:loginSuccess";
-        EventType["LOGIN_FAILURE"] = "msal:loginFailure";
-        EventType["ACQUIRE_TOKEN_START"] = "msal:acquireTokenStart";
-        EventType["ACQUIRE_TOKEN_SUCCESS"] = "msal:acquireTokenSuccess";
-        EventType["ACQUIRE_TOKEN_FAILURE"] = "msal:acquireTokenFailure";
-        EventType["ACQUIRE_TOKEN_NETWORK_START"] = "msal:acquireTokenFromNetworkStart";
-        EventType["SSO_SILENT_START"] = "msal:ssoSilentStart";
-        EventType["SSO_SILENT_SUCCESS"] = "msal:ssoSilentSuccess";
-        EventType["SSO_SILENT_FAILURE"] = "msal:ssoSilentFailure";
-        EventType["HANDLE_REDIRECT_START"] = "msal:handleRedirectStart";
-        EventType["HANDLE_REDIRECT_END"] = "msal:handleRedirectEnd";
-        EventType["POPUP_OPENED"] = "msal:popupOpened";
-        EventType["LOGOUT_START"] = "msal:logoutStart";
-        EventType["LOGOUT_SUCCESS"] = "msal:logoutSuccess";
-        EventType["LOGOUT_FAILURE"] = "msal:logoutFailure";
-        EventType["LOGOUT_END"] = "msal:logoutEnd";
-    })(exports.EventType || (exports.EventType = {}));
-
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -12948,216 +13202,6 @@
         return PublicClientApplication;
     }(ClientApplication));
 
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    var stubbedPublicClientApplication = {
-        acquireTokenPopup: function () {
-            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-        },
-        acquireTokenRedirect: function () {
-            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-        },
-        acquireTokenSilent: function () {
-            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-        },
-        getAllAccounts: function () {
-            return [];
-        },
-        getAccountByHomeId: function () {
-            return null;
-        },
-        getAccountByUsername: function () {
-            return null;
-        },
-        getAccountByLocalId: function () {
-            return null;
-        },
-        handleRedirectPromise: function () {
-            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-        },
-        loginPopup: function () {
-            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-        },
-        loginRedirect: function () {
-            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-        },
-        logout: function () {
-            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-        },
-        logoutRedirect: function () {
-            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-        },
-        logoutPopup: function () {
-            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-        },
-        ssoSilent: function () {
-            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-        },
-        addEventCallback: function () {
-            return null;
-        },
-        removeEventCallback: function () {
-            return;
-        },
-        enableAccountStorageEvents: function () {
-            return;
-        },
-        disableAccountStorageEvents: function () {
-            return;
-        },
-        getTokenCache: function () {
-            throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
-        },
-        getLogger: function () {
-            throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
-        },
-        setLogger: function () {
-            return;
-        },
-        setActiveAccount: function () {
-            return;
-        },
-        getActiveAccount: function () {
-            return null;
-        },
-        initializeWrapperLibrary: function () {
-            return;
-        },
-        setNavigationClient: function () {
-            return;
-        },
-        getConfiguration: function () {
-            throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
-        }
-    };
-
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    var EventMessageUtils = /** @class */ (function () {
-        function EventMessageUtils() {
-        }
-        /**
-         * Gets interaction status from event message
-         * @param message
-         * @param currentStatus
-         */
-        EventMessageUtils.getInteractionStatusFromEvent = function (message, currentStatus) {
-            switch (message.eventType) {
-                case exports.EventType.LOGIN_START:
-                    return exports.InteractionStatus.Login;
-                case exports.EventType.SSO_SILENT_START:
-                    return exports.InteractionStatus.SsoSilent;
-                case exports.EventType.ACQUIRE_TOKEN_START:
-                    if (message.interactionType === exports.InteractionType.Redirect || message.interactionType === exports.InteractionType.Popup) {
-                        return exports.InteractionStatus.AcquireToken;
-                    }
-                    break;
-                case exports.EventType.HANDLE_REDIRECT_START:
-                    return exports.InteractionStatus.HandleRedirect;
-                case exports.EventType.LOGOUT_START:
-                    return exports.InteractionStatus.Logout;
-                case exports.EventType.SSO_SILENT_SUCCESS:
-                case exports.EventType.SSO_SILENT_FAILURE:
-                    if (currentStatus && currentStatus !== exports.InteractionStatus.SsoSilent) {
-                        // Prevent this event from clearing any status other than ssoSilent
-                        break;
-                    }
-                    return exports.InteractionStatus.None;
-                case exports.EventType.LOGOUT_END:
-                    if (currentStatus && currentStatus !== exports.InteractionStatus.Logout) {
-                        // Prevent this event from clearing any status other than logout
-                        break;
-                    }
-                    return exports.InteractionStatus.None;
-                case exports.EventType.HANDLE_REDIRECT_END:
-                    if (currentStatus && currentStatus !== exports.InteractionStatus.HandleRedirect) {
-                        // Prevent this event from clearing any status other than handleRedirect
-                        break;
-                    }
-                    return exports.InteractionStatus.None;
-                case exports.EventType.LOGIN_SUCCESS:
-                case exports.EventType.LOGIN_FAILURE:
-                case exports.EventType.ACQUIRE_TOKEN_SUCCESS:
-                case exports.EventType.ACQUIRE_TOKEN_FAILURE:
-                    if (message.interactionType === exports.InteractionType.Redirect || message.interactionType === exports.InteractionType.Popup) {
-                        if (currentStatus && currentStatus !== exports.InteractionStatus.Login && currentStatus !== exports.InteractionStatus.AcquireToken) {
-                            // Prevent this event from clearing any status other than login or acquireToken
-                            break;
-                        }
-                        return exports.InteractionStatus.None;
-                    }
-                    break;
-            }
-            return null;
-        };
-        return EventMessageUtils;
-    }());
-
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    var SignedHttpRequest = /** @class */ (function () {
-        function SignedHttpRequest(shrParameters, shrOptions) {
-            var loggerOptions = (shrOptions && shrOptions.loggerOptions) || {};
-            this.logger = new Logger(loggerOptions, name, version);
-            this.cryptoOps = new CryptoOps(this.logger);
-            this.popTokenGenerator = new PopTokenGenerator(this.cryptoOps);
-            this.shrParameters = shrParameters;
-        }
-        /**
-         * Generates and caches a keypair for the given request options.
-         * @returns Public key digest, which should be sent to the token issuer.
-         */
-        SignedHttpRequest.prototype.generatePublicKeyThumbprint = function () {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var kid;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.popTokenGenerator.generateKid(this.shrParameters)];
-                        case 1:
-                            kid = (_a.sent()).kid;
-                            return [2 /*return*/, kid];
-                    }
-                });
-            });
-        };
-        /**
-         * Generates a signed http request for the given payload with the given key.
-         * @param payload Payload to sign (e.g. access token)
-         * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
-         * @param claims Additional claims to include/override in the signed JWT
-         * @returns Pop token signed with the corresponding private key
-         */
-        SignedHttpRequest.prototype.signRequest = function (payload, publicKeyThumbprint, claims) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                return __generator$1(this, function (_a) {
-                    return [2 /*return*/, this.popTokenGenerator.signPayload(payload, publicKeyThumbprint, this.shrParameters, claims)];
-                });
-            });
-        };
-        /**
-         * Removes cached keys from browser for given public key thumbprint
-         * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
-         * @returns If keys are properly deleted
-         */
-        SignedHttpRequest.prototype.removeKeys = function (publicKeyThumbprint) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.cryptoOps.removeTokenBindingKey(publicKeyThumbprint)];
-                        case 1: return [2 /*return*/, _a.sent()];
-                    }
-                });
-            });
-        };
-        return SignedHttpRequest;
-    }());
-
     exports.AccountEntity = AccountEntity;
     exports.AuthError = AuthError;
     exports.AuthErrorMessage = AuthErrorMessage;