@azure/msal-browser 2.19.0 → 2.19.1

package/dist/index.cjs.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.19.0 2021-11-02 */
+/*! @azure/msal-browser v2.19.1 2022-08-03 */
 'use strict';
 'use strict';
 
@@ -105,7 +105,7 @@ function __spread() {
     return ar;
 }
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 /*! *****************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -192,7 +192,7 @@ function __spreadArrays() {
     return r;
 }
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -553,7 +553,7 @@ var CacheOutcome;
     CacheOutcome["REFRESH_CACHED_ACCESS_TOKEN"] = "4";
 })(CacheOutcome || (CacheOutcome = {}));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -597,7 +597,7 @@ var AuthError = /** @class */ (function (_super) {
     return AuthError;
 }(Error));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -663,7 +663,7 @@ var DEFAULT_CRYPTO_IMPLEMENTATION = {
     }
 };
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1125,7 +1125,7 @@ var ClientAuthError = /** @class */ (function (_super) {
     return ClientAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1250,7 +1250,7 @@ var StringUtils = /** @class */ (function () {
     return StringUtils;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1430,12 +1430,12 @@ var Logger = /** @class */ (function () {
     return Logger;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 /* eslint-disable header/header */
 var name$1 = "@azure/msal-common";
 var version$1 = "5.1.0";
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1579,7 +1579,7 @@ var CredentialEntity = /** @class */ (function () {
     return CredentialEntity;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1824,7 +1824,7 @@ var ClientConfigurationError = /** @class */ (function (_super) {
     return ClientConfigurationError;
 }(ClientAuthError));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2008,7 +2008,7 @@ var ScopeSet = /** @class */ (function () {
     return ScopeSet;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2046,7 +2046,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2060,7 +2060,7 @@ var AuthorityType;
     AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
 })(AuthorityType || (AuthorityType = {}));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2294,7 +2294,7 @@ var AccountEntity = /** @class */ (function () {
     return AccountEntity;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2332,7 +2332,7 @@ var AuthToken = /** @class */ (function () {
     return AuthToken;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2576,16 +2576,21 @@ var CacheManager = /** @class */ (function () {
                         break;
                 }
             }
+            /*
+             * At this point, the entity matches the request, update cache key if key schema has changed
+             * Migration code for forwards compatibility with new versions of the library in case of rollback.
+             */
+            var updatedCacheKey = _this.updateCredentialCacheKey(cacheKey, entity);
             switch (credType) {
                 case CredentialType.ID_TOKEN:
-                    matchingCredentials.idTokens[cacheKey] = entity;
+                    matchingCredentials.idTokens[updatedCacheKey] = entity;
                     break;
                 case CredentialType.ACCESS_TOKEN:
                 case CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME:
-                    matchingCredentials.accessTokens[cacheKey] = entity;
+                    matchingCredentials.accessTokens[updatedCacheKey] = entity;
                     break;
                 case CredentialType.REFRESH_TOKEN:
-                    matchingCredentials.refreshTokens[cacheKey] = entity;
+                    matchingCredentials.refreshTokens[updatedCacheKey] = entity;
                     break;
             }
         });
@@ -3161,10 +3166,14 @@ var DefaultStorageClass = /** @class */ (function (_super) {
             });
         });
     };
+    DefaultStorageClass.prototype.updateCredentialCacheKey = function () {
+        var notImplErr = "Storage interface - updateCredentialCacheKey() has not been implemented for the cacheStorage interface.";
+        throw AuthError.createUnexpectedError(notImplErr);
+    };
     return DefaultStorageClass;
 }(CacheManager));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3246,7 +3255,7 @@ function buildAuthOptions(authOptions) {
     return __assign({ clientCapabilities: [] }, authOptions);
 }
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3266,7 +3275,7 @@ var ServerError = /** @class */ (function (_super) {
     return ServerError;
 }(AuthError));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3362,7 +3371,7 @@ var ThrottlingUtils = /** @class */ (function () {
     return ThrottlingUtils;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3411,7 +3420,7 @@ var NetworkManager = /** @class */ (function () {
     return NetworkManager;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3422,7 +3431,7 @@ var CcsCredentialType;
     CcsCredentialType["UPN"] = "UPN";
 })(CcsCredentialType || (CcsCredentialType = {}));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3511,7 +3520,7 @@ var BaseClient = /** @class */ (function () {
     return BaseClient;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3597,7 +3606,7 @@ var RequestValidator = /** @class */ (function () {
     return RequestValidator;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3937,7 +3946,7 @@ var RequestParameterBuilder = /** @class */ (function () {
     return RequestParameterBuilder;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4002,7 +4011,7 @@ var IdTokenEntity = /** @class */ (function (_super) {
     return IdTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4052,7 +4061,7 @@ var TimeUtils = /** @class */ (function () {
     return TimeUtils;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4159,7 +4168,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
     return AccessTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4226,7 +4235,7 @@ var RefreshTokenEntity = /** @class */ (function (_super) {
     return RefreshTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4290,7 +4299,7 @@ var InteractionRequiredAuthError = /** @class */ (function (_super) {
     return InteractionRequiredAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4306,7 +4315,7 @@ var CacheRecord = /** @class */ (function () {
     return CacheRecord;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4377,7 +4386,7 @@ var ProtocolUtils = /** @class */ (function () {
     return ProtocolUtils;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4578,7 +4587,7 @@ var UrlString = /** @class */ (function () {
     return UrlString;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4653,7 +4662,7 @@ var PopTokenGenerator = /** @class */ (function () {
     return PopTokenGenerator;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4723,7 +4732,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return AppMetadataEntity;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4759,7 +4768,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return TokenCacheContext;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5023,7 +5032,7 @@ var ResponseHandler = /** @class */ (function () {
     return ResponseHandler;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5307,7 +5316,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
         if (request.domainHint) {
             parameterBuilder.addDomainHint(request.domainHint);
         }
-        // Add sid or loginHint with preference for sid -> loginHint -> username of AccountInfo object
+        // Add sid or loginHint with preference for login_hint claim (in request) -> sid -> loginHint (upn/email) -> username of AccountInfo object
         if (request.prompt !== PromptValue.SELECT_ACCOUNT) {
             // AAD will throw if prompt=select_account is passed with an account hint
             if (request.sid && request.prompt === PromptValue.NONE) {
@@ -5317,9 +5326,24 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
             }
             else if (request.account) {
                 var accountSid = this.extractAccountSid(request.account);
-                // If account and loginHint are provided, we will check account first for sid before adding loginHint
-                if (accountSid && request.prompt === PromptValue.NONE) {
-                    // SessionId is only used in silent calls
+                var accountLoginHintClaim = this.extractLoginHint(request.account);
+                // If login_hint claim is present, use it over sid/username
+                if (accountLoginHintClaim) {
+                    this.logger.verbose("createAuthCodeUrlQueryString: login_hint claim present on account");
+                    parameterBuilder.addLoginHint(accountLoginHintClaim);
+                    try {
+                        var clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
+                        parameterBuilder.addCcsOid(clientInfo);
+                    }
+                    catch (e) {
+                        this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
+                    }
+                }
+                else if (accountSid && request.prompt === PromptValue.NONE) {
+                    /*
+                     * If account and loginHint are provided, we will check account first for sid before adding loginHint
+                     * SessionId is only used in silent calls
+                     */
                     this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from account");
                     parameterBuilder.addSid(accountSid);
                     try {
@@ -5327,7 +5351,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
                         parameterBuilder.addCcsOid(clientInfo);
                     }
                     catch (e) {
-                        this.logger.verbose("Could not parse home account ID for CCS Header: " + e);
+                        this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
                     }
                 }
                 else if (request.loginHint) {
@@ -5344,7 +5368,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
                         parameterBuilder.addCcsOid(clientInfo);
                     }
                     catch (e) {
-                        this.logger.verbose("Could not parse home account ID for CCS Header: " + e);
+                        this.logger.verbose("createAuthCodeUrlQueryString: Could not parse home account ID for CCS Header");
                     }
                 }
             }
@@ -5399,16 +5423,17 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
      * @param account
      */
     AuthorizationCodeClient.prototype.extractAccountSid = function (account) {
-        if (account.idTokenClaims) {
-            var tokenClaims = account.idTokenClaims;
-            return tokenClaims.sid || null;
-        }
-        return null;
+        var _a;
+        return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a["sid"]) || null;
+    };
+    AuthorizationCodeClient.prototype.extractLoginHint = function (account) {
+        var _a;
+        return ((_a = account.idTokenClaims) === null || _a === void 0 ? void 0 : _a["login_hint"]) || null;
     };
     return AuthorizationCodeClient;
 }(BaseClient));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5619,7 +5644,7 @@ var RefreshTokenClient = /** @class */ (function (_super) {
     return RefreshTokenClient;
 }(BaseClient));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5742,7 +5767,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
     return SilentFlowClient;
 }(BaseClient));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5753,7 +5778,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("issuer"));
 }
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5767,7 +5792,7 @@ exports.ProtocolMode = void 0;
     ProtocolMode["OIDC"] = "OIDC";
 })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5842,7 +5867,7 @@ var AuthorityMetadataEntity = /** @class */ (function () {
     return AuthorityMetadataEntity;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5852,7 +5877,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5966,7 +5991,7 @@ var RegionDiscovery = /** @class */ (function () {
     return RegionDiscovery;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6532,7 +6557,7 @@ var Authority = /** @class */ (function () {
     return Authority;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6593,7 +6618,7 @@ var AuthorityFactory = /** @class */ (function () {
     return AuthorityFactory;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6624,7 +6649,7 @@ var ServerTelemetryEntity = /** @class */ (function () {
     return ServerTelemetryEntity;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6652,7 +6677,7 @@ var ThrottlingEntity = /** @class */ (function () {
     return ThrottlingEntity;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6669,7 +6694,7 @@ var StubbedNetworkModule = {
     }
 };
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6728,7 +6753,7 @@ var AuthenticationHeaderParser = /** @class */ (function () {
     return AuthenticationHeaderParser;
 }());
 
-/*! @azure/msal-common v5.1.0 2021-11-02 */
+/*! @azure/msal-common v5.1.1 2022-08-03 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8172,246 +8197,258 @@ var BrowserCrypto = /** @class */ (function () {
  * Licensed under the MIT License.
  */
 /**
- * Storage wrapper for IndexedDB storage in browsers: https://developer.mozilla.org/en-US/docs/Web/API/IndexedDB_API
+ * This class implements the Fetch API for GET and POST requests. See more here: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API
  */
-var DatabaseStorage = /** @class */ (function () {
-    function DatabaseStorage() {
-        this.dbName = DB_NAME;
-        this.version = DB_VERSION;
-        this.tableName = DB_TABLE_NAME;
-        this.dbOpen = false;
+var FetchClient = /** @class */ (function () {
+    function FetchClient() {
     }
     /**
-     * Opens IndexedDB instance.
+     * Fetch Client for REST endpoints - Get request
+     * @param url
+     * @param headers
+     * @param body
      */
-    DatabaseStorage.prototype.open = function () {
+    FetchClient.prototype.sendGetRequestAsync = function (url, options) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var _this = this;
-            return __generator$1(this, function (_a) {
-                return [2 /*return*/, new Promise(function (resolve, reject) {
-                        var openDB = window.indexedDB.open(_this.dbName, _this.version);
-                        openDB.addEventListener("upgradeneeded", function (e) {
-                            var event = e;
-                            event.target.result.createObjectStore(_this.tableName);
-                        });
-                        openDB.addEventListener("success", function (e) {
-                            var event = e;
-                            _this.db = event.target.result;
-                            _this.dbOpen = true;
-                            resolve();
-                        });
-                        openDB.addEventListener("error", function () { return reject(BrowserAuthError.createDatabaseUnavailableError()); });
-                    })];
+            var response, e_1, _a;
+            return __generator$1(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        _b.trys.push([0, 2, , 3]);
+                        return [4 /*yield*/, fetch(url, {
+                                method: HTTP_REQUEST_TYPE.GET,
+                                headers: this.getFetchHeaders(options)
+                            })];
+                    case 1:
+                        response = _b.sent();
+                        return [3 /*break*/, 3];
+                    case 2:
+                        e_1 = _b.sent();
+                        if (window.navigator.onLine) {
+                            throw BrowserAuthError.createGetRequestFailedError(e_1, url);
+                        }
+                        else {
+                            throw BrowserAuthError.createNoNetworkConnectivityError();
+                        }
+                    case 3:
+                        _b.trys.push([3, 5, , 6]);
+                        _a = {
+                            headers: this.getHeaderDict(response.headers)
+                        };
+                        return [4 /*yield*/, response.json()];
+                    case 4: return [2 /*return*/, (_a.body = (_b.sent()),
+                            _a.status = response.status,
+                            _a)];
+                    case 5:
+                        _b.sent();
+                        throw BrowserAuthError.createFailedToParseNetworkResponseError(url);
+                    case 6: return [2 /*return*/];
+                }
             });
         });
     };
     /**
-     * Opens database if it's not already open
+     * Fetch Client for REST endpoints - Post request
+     * @param url
+     * @param headers
+     * @param body
      */
-    DatabaseStorage.prototype.validateDbIsOpen = function () {
+    FetchClient.prototype.sendPostRequestAsync = function (url, options) {
         return __awaiter$1(this, void 0, void 0, function () {
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
+            var reqBody, response, e_3, _a;
+            return __generator$1(this, function (_b) {
+                switch (_b.label) {
                     case 0:
-                        if (!!this.dbOpen) return [3 /*break*/, 2];
-                        return [4 /*yield*/, this.open()];
-                    case 1: return [2 /*return*/, _a.sent()];
-                    case 2: return [2 /*return*/];
+                        reqBody = (options && options.body) || "";
+                        _b.label = 1;
+                    case 1:
+                        _b.trys.push([1, 3, , 4]);
+                        return [4 /*yield*/, fetch(url, {
+                                method: HTTP_REQUEST_TYPE.POST,
+                                headers: this.getFetchHeaders(options),
+                                body: reqBody
+                            })];
+                    case 2:
+                        response = _b.sent();
+                        return [3 /*break*/, 4];
+                    case 3:
+                        e_3 = _b.sent();
+                        if (window.navigator.onLine) {
+                            throw BrowserAuthError.createPostRequestFailedError(e_3, url);
+                        }
+                        else {
+                            throw BrowserAuthError.createNoNetworkConnectivityError();
+                        }
+                    case 4:
+                        _b.trys.push([4, 6, , 7]);
+                        _a = {
+                            headers: this.getHeaderDict(response.headers)
+                        };
+                        return [4 /*yield*/, response.json()];
+                    case 5: return [2 /*return*/, (_a.body = (_b.sent()),
+                            _a.status = response.status,
+                            _a)];
+                    case 6:
+                        _b.sent();
+                        throw BrowserAuthError.createFailedToParseNetworkResponseError(url);
+                    case 7: return [2 /*return*/];
                 }
             });
         });
     };
     /**
-     * Retrieves item from IndexedDB instance.
-     * @param key
+     * Get Fetch API Headers object from string map
+     * @param inputHeaders
      */
-    DatabaseStorage.prototype.getItem = function (key) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var _this = this;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.validateDbIsOpen()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/, new Promise(function (resolve, reject) {
-                                // TODO: Add timeouts?
-                                if (!_this.db) {
-                                    return reject(BrowserAuthError.createDatabaseNotOpenError());
-                                }
-                                var transaction = _this.db.transaction([_this.tableName], "readonly");
-                                var objectStore = transaction.objectStore(_this.tableName);
-                                var dbGet = objectStore.get(key);
-                                dbGet.addEventListener("success", function (e) {
-                                    var event = e;
-                                    resolve(event.target.result);
-                                });
-                                dbGet.addEventListener("error", function (e) { return reject(e); });
-                            })];
-                }
-            });
+    FetchClient.prototype.getFetchHeaders = function (options) {
+        var headers = new Headers();
+        if (!(options && options.headers)) {
+            return headers;
+        }
+        var optionsHeaders = options.headers;
+        Object.keys(optionsHeaders).forEach(function (key) {
+            headers.append(key, optionsHeaders[key]);
+        });
+        return headers;
+    };
+    FetchClient.prototype.getHeaderDict = function (headers) {
+        var headerDict = {};
+        headers.forEach(function (value, key) {
+            headerDict[key] = value;
         });
+        return headerDict;
     };
+    return FetchClient;
+}());
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * This client implements the XMLHttpRequest class to send GET and POST requests.
+ */
+var XhrClient = /** @class */ (function () {
+    function XhrClient() {
+    }
     /**
-     * Adds item to IndexedDB under given key
-     * @param key
-     * @param payload
+     * XhrClient for REST endpoints - Get request
+     * @param url
+     * @param headers
+     * @param body
      */
-    DatabaseStorage.prototype.setItem = function (key, payload) {
+    XhrClient.prototype.sendGetRequestAsync = function (url, options) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var _this = this;
             return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.validateDbIsOpen()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/, new Promise(function (resolve, reject) {
-                                // TODO: Add timeouts?
-                                if (!_this.db) {
-                                    return reject(BrowserAuthError.createDatabaseNotOpenError());
-                                }
-                                var transaction = _this.db.transaction([_this.tableName], "readwrite");
-                                var objectStore = transaction.objectStore(_this.tableName);
-                                var dbPut = objectStore.put(payload, key);
-                                dbPut.addEventListener("success", function () { return resolve(); });
-                                dbPut.addEventListener("error", function (e) { return reject(e); });
-                            })];
-                }
+                return [2 /*return*/, this.sendRequestAsync(url, HTTP_REQUEST_TYPE.GET, options)];
             });
         });
     };
     /**
-     * Removes item from IndexedDB under given key
-     * @param key
+     * XhrClient for REST endpoints - Post request
+     * @param url
+     * @param headers
+     * @param body
      */
-    DatabaseStorage.prototype.removeItem = function (key) {
+    XhrClient.prototype.sendPostRequestAsync = function (url, options) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var _this = this;
             return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.validateDbIsOpen()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/, new Promise(function (resolve, reject) {
-                                if (!_this.db) {
-                                    return reject(BrowserAuthError.createDatabaseNotOpenError());
-                                }
-                                var transaction = _this.db.transaction([_this.tableName], "readwrite");
-                                var objectStore = transaction.objectStore(_this.tableName);
-                                var dbDelete = objectStore.delete(key);
-                                dbDelete.addEventListener("success", function () { return resolve(); });
-                                dbDelete.addEventListener("error", function (e) { return reject(e); });
-                            })];
-                }
+                return [2 /*return*/, this.sendRequestAsync(url, HTTP_REQUEST_TYPE.POST, options)];
             });
         });
     };
     /**
-     * Get all the keys from the storage object as an iterable array of strings.
+     * Helper for XhrClient requests.
+     * @param url
+     * @param method
+     * @param options
      */
-    DatabaseStorage.prototype.getKeys = function () {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var _this = this;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.validateDbIsOpen()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/, new Promise(function (resolve, reject) {
-                                if (!_this.db) {
-                                    return reject(BrowserAuthError.createDatabaseNotOpenError());
-                                }
-                                var transaction = _this.db.transaction([_this.tableName], "readonly");
-                                var objectStore = transaction.objectStore(_this.tableName);
-                                var dbGetKeys = objectStore.getAllKeys();
-                                dbGetKeys.addEventListener("success", function (e) {
-                                    var event = e;
-                                    resolve(event.target.result);
-                                });
-                                dbGetKeys.addEventListener("error", function (e) { return reject(e); });
-                            })];
+    XhrClient.prototype.sendRequestAsync = function (url, method, options) {
+        var _this = this;
+        return new Promise(function (resolve, reject) {
+            var xhr = new XMLHttpRequest();
+            xhr.open(method, url, /* async: */ true);
+            _this.setXhrHeaders(xhr, options);
+            xhr.onload = function () {
+                if (xhr.status < 200 || xhr.status >= 300) {
+                    if (method === HTTP_REQUEST_TYPE.POST) {
+                        reject(BrowserAuthError.createPostRequestFailedError("Failed with status " + xhr.status, url));
+                    }
+                    else {
+                        reject(BrowserAuthError.createGetRequestFailedError("Failed with status " + xhr.status, url));
+                    }
                 }
-            });
+                try {
+                    var jsonResponse = JSON.parse(xhr.responseText);
+                    var networkResponse = {
+                        headers: _this.getHeaderDict(xhr),
+                        body: jsonResponse,
+                        status: xhr.status
+                    };
+                    resolve(networkResponse);
+                }
+                catch (e) {
+                    reject(BrowserAuthError.createFailedToParseNetworkResponseError(url));
+                }
+            };
+            xhr.onerror = function () {
+                if (window.navigator.onLine) {
+                    if (method === HTTP_REQUEST_TYPE.POST) {
+                        reject(BrowserAuthError.createPostRequestFailedError("Failed with status " + xhr.status, url));
+                    }
+                    else {
+                        reject(BrowserAuthError.createGetRequestFailedError("Failed with status " + xhr.status, url));
+                    }
+                }
+                else {
+                    reject(BrowserAuthError.createNoNetworkConnectivityError());
+                }
+            };
+            if (method === HTTP_REQUEST_TYPE.POST && options && options.body) {
+                xhr.send(options.body);
+            }
+            else if (method === HTTP_REQUEST_TYPE.GET) {
+                xhr.send();
+            }
+            else {
+                throw BrowserAuthError.createHttpMethodNotImplementedError(method);
+            }
         });
     };
     /**
-     *
-     * Checks whether there is an object under the search key in the object store
+     * Helper to set XHR headers for request.
+     * @param xhr
+     * @param options
      */
-    DatabaseStorage.prototype.containsKey = function (key) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var _this = this;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.validateDbIsOpen()];
-                    case 1:
-                        _a.sent();
-                        return [2 /*return*/, new Promise(function (resolve, reject) {
-                                if (!_this.db) {
-                                    return reject(BrowserAuthError.createDatabaseNotOpenError());
-                                }
-                                var transaction = _this.db.transaction([_this.tableName], "readonly");
-                                var objectStore = transaction.objectStore(_this.tableName);
-                                var dbContainsKey = objectStore.count(key);
-                                dbContainsKey.addEventListener("success", function (e) {
-                                    var event = e;
-                                    resolve(event.target.result === 1);
-                                });
-                                dbContainsKey.addEventListener("error", function (e) { return reject(e); });
-                            })];
-                }
+    XhrClient.prototype.setXhrHeaders = function (xhr, options) {
+        if (options && options.headers) {
+            var headers_1 = options.headers;
+            Object.keys(headers_1).forEach(function (key) {
+                xhr.setRequestHeader(key, headers_1[key]);
             });
-        });
+        }
     };
     /**
-     * Deletes the MSAL database. The database is deleted rather than cleared to make it possible
-     * for client applications to downgrade to a previous MSAL version without worrying about forward compatibility issues
-     * with IndexedDB database versions.
+     * Gets a string map of the headers received in the response.
+     *
+     * Algorithm comes from https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/getAllResponseHeaders
+     * @param xhr
      */
-    DatabaseStorage.prototype.deleteDatabase = function () {
-        return __awaiter$1(this, void 0, void 0, function () {
-            return __generator$1(this, function (_a) {
-                return [2 /*return*/, new Promise(function (resolve, reject) {
-                        var deleteDbRequest = window.indexedDB.deleteDatabase(DB_NAME);
-                        deleteDbRequest.addEventListener("success", function () { return resolve(true); });
-                        deleteDbRequest.addEventListener("error", function () { return reject(false); });
-                    })];
-            });
-        });
-    };
-    return DatabaseStorage;
-}());
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-var MemoryStorage = /** @class */ (function () {
-    function MemoryStorage() {
-        this.cache = new Map();
-    }
-    MemoryStorage.prototype.getItem = function (key) {
-        return this.cache.get(key) || null;
-    };
-    MemoryStorage.prototype.setItem = function (key, value) {
-        this.cache.set(key, value);
-    };
-    MemoryStorage.prototype.removeItem = function (key) {
-        this.cache.delete(key);
-    };
-    MemoryStorage.prototype.getKeys = function () {
-        var cacheKeys = [];
-        this.cache.forEach(function (value, key) {
-            cacheKeys.push(key);
+    XhrClient.prototype.getHeaderDict = function (xhr) {
+        var headerString = xhr.getAllResponseHeaders();
+        var headerArr = headerString.trim().split(/[\r\n]+/);
+        var headerDict = {};
+        headerArr.forEach(function (value) {
+            var parts = value.split(": ");
+            var headerName = parts.shift();
+            var headerVal = parts.join(": ");
+            if (headerName && headerVal) {
+                headerDict[headerName] = headerVal;
+            }
         });
-        return cacheKeys;
-    };
-    MemoryStorage.prototype.containsKey = function (key) {
-        return this.cache.has(key);
-    };
-    MemoryStorage.prototype.clear = function () {
-        this.cache.clear();
+        return headerDict;
     };
-    return MemoryStorage;
+    return XhrClient;
 }());
 
 /*
@@ -8419,185 +8456,126 @@ var MemoryStorage = /** @class */ (function () {
  * Licensed under the MIT License.
  */
 /**
- * This class allows MSAL to store artifacts asynchronously using the DatabaseStorage IndexedDB wrapper,
- * backed up with the more volatile MemoryStorage object for cases in which IndexedDB may be unavailable.
+ * Utility class for browser specific functions
  */
-var AsyncMemoryStorage = /** @class */ (function () {
-    function AsyncMemoryStorage(logger) {
-        this.inMemoryCache = new MemoryStorage();
-        this.indexedDBCache = new DatabaseStorage();
-        this.logger = logger;
+var BrowserUtils = /** @class */ (function () {
+    function BrowserUtils() {
     }
-    AsyncMemoryStorage.prototype.handleDatabaseAccessError = function (error) {
-        if (error instanceof BrowserAuthError && error.errorCode === BrowserAuthErrorMessage.databaseUnavailable.code) {
-            this.logger.error("Could not access persistent storage. This may be caused by browser privacy features which block persistent storage in third-party contexts.");
+    // #region Window Navigation and URL management
+    /**
+     * Clears hash from window url.
+     */
+    BrowserUtils.clearHash = function (contentWindow) {
+        // Office.js sets history.replaceState to null
+        contentWindow.location.hash = Constants.EMPTY_STRING;
+        if (typeof contentWindow.history.replaceState === "function") {
+            // Full removes "#" from url
+            contentWindow.history.replaceState(null, Constants.EMPTY_STRING, "" + contentWindow.location.origin + contentWindow.location.pathname + contentWindow.location.search);
         }
     };
     /**
-     * Get the item matching the given key. Tries in-memory cache first, then in the asynchronous
-     * storage object if item isn't found in-memory.
-     * @param key
+     * Replaces current hash with hash from provided url
      */
-    AsyncMemoryStorage.prototype.getItem = function (key) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var item, e_1;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        item = this.inMemoryCache.getItem(key);
-                        if (!!item) return [3 /*break*/, 4];
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        this.logger.verbose("Queried item not found in in-memory cache, now querying persistent storage.");
-                        return [4 /*yield*/, this.indexedDBCache.getItem(key)];
-                    case 2: return [2 /*return*/, _a.sent()];
-                    case 3:
-                        e_1 = _a.sent();
-                        this.handleDatabaseAccessError(e_1);
-                        return [3 /*break*/, 4];
-                    case 4: return [2 /*return*/, item];
-                }
-            });
-        });
+    BrowserUtils.replaceHash = function (url) {
+        var urlParts = url.split("#");
+        urlParts.shift(); // Remove part before the hash
+        window.location.hash = urlParts.length > 0 ? urlParts.join("#") : "";
     };
     /**
-     * Sets the item in the in-memory cache and then tries to set it in the asynchronous
-     * storage object with the given key.
-     * @param key
-     * @param value
+     * Returns boolean of whether the current window is in an iframe or not.
      */
-    AsyncMemoryStorage.prototype.setItem = function (key, value) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var e_2;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.inMemoryCache.setItem(key, value);
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.indexedDBCache.setItem(key, value)];
-                    case 2:
-                        _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        e_2 = _a.sent();
-                        this.handleDatabaseAccessError(e_2);
-                        return [3 /*break*/, 4];
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
+    BrowserUtils.isInIframe = function () {
+        return window.parent !== window;
     };
     /**
-     * Removes the item matching the key from the in-memory cache, then tries to remove it from the asynchronous storage object.
-     * @param key
+     * Returns boolean of whether or not the current window is a popup opened by msal
      */
-    AsyncMemoryStorage.prototype.removeItem = function (key) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var e_3;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.inMemoryCache.removeItem(key);
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.indexedDBCache.removeItem(key)];
-                    case 2:
-                        _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        e_3 = _a.sent();
-                        this.handleDatabaseAccessError(e_3);
-                        return [3 /*break*/, 4];
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
+    BrowserUtils.isInPopup = function () {
+        return typeof window !== "undefined" && !!window.opener &&
+            window.opener !== window &&
+            typeof window.name === "string" &&
+            window.name.indexOf(BrowserConstants.POPUP_NAME_PREFIX + ".") === 0;
     };
+    // #endregion
     /**
-     * Get all the keys from the in-memory cache as an iterable array of strings. If no keys are found, query the keys in the
-     * asynchronous storage object.
+     * Returns current window URL as redirect uri
      */
-    AsyncMemoryStorage.prototype.getKeys = function () {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var cacheKeys, e_4;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        cacheKeys = this.inMemoryCache.getKeys();
-                        if (!(cacheKeys.length === 0)) return [3 /*break*/, 4];
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        this.logger.verbose("In-memory cache is empty, now querying persistent storage.");
-                        return [4 /*yield*/, this.indexedDBCache.getKeys()];
-                    case 2: return [2 /*return*/, _a.sent()];
-                    case 3:
-                        e_4 = _a.sent();
-                        this.handleDatabaseAccessError(e_4);
-                        return [3 /*break*/, 4];
-                    case 4: return [2 /*return*/, cacheKeys];
-                }
-            });
-        });
+    BrowserUtils.getCurrentUri = function () {
+        return window.location.href.split("?")[0].split("#")[0];
     };
     /**
-     * Returns true or false if the given key is present in the cache.
-     * @param key
+     * Gets the homepage url for the current window location.
      */
-    AsyncMemoryStorage.prototype.containsKey = function (key) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var containsKey, e_5;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        containsKey = this.inMemoryCache.containsKey(key);
-                        if (!!containsKey) return [3 /*break*/, 4];
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        this.logger.verbose("Key not found in in-memory cache, now querying persistent storage.");
-                        return [4 /*yield*/, this.indexedDBCache.containsKey(key)];
-                    case 2: return [2 /*return*/, _a.sent()];
-                    case 3:
-                        e_5 = _a.sent();
-                        this.handleDatabaseAccessError(e_5);
-                        return [3 /*break*/, 4];
-                    case 4: return [2 /*return*/, containsKey];
-                }
-            });
-        });
+    BrowserUtils.getHomepage = function () {
+        var currentUrl = new UrlString(window.location.href);
+        var urlComponents = currentUrl.getUrlComponents();
+        return urlComponents.Protocol + "//" + urlComponents.HostNameAndPort + "/";
     };
     /**
-     * Clears in-memory Map and tries to delete the IndexedDB database.
+     * Returns best compatible network client object.
      */
-    AsyncMemoryStorage.prototype.clear = function () {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var e_6;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.inMemoryCache.clear();
-                        _a.label = 1;
-                    case 1:
-                        _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.indexedDBCache.deleteDatabase()];
-                    case 2:
-                        _a.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        e_6 = _a.sent();
-                        this.handleDatabaseAccessError(e_6);
-                        return [3 /*break*/, 4];
-                    case 4: return [2 /*return*/];
-                }
-            });
-        });
+    BrowserUtils.getBrowserNetworkClient = function () {
+        if (window.fetch && window.Headers) {
+            return new FetchClient();
+        }
+        else {
+            return new XhrClient();
+        }
     };
-    return AsyncMemoryStorage;
+    /**
+     * Throws error if we have completed an auth and are
+     * attempting another auth request inside an iframe.
+     */
+    BrowserUtils.blockReloadInHiddenIframes = function () {
+        var isResponseHash = UrlString.hashContainsKnownProperties(window.location.hash);
+        // return an error if called from the hidden iframe created by the msal js silent calls
+        if (isResponseHash && BrowserUtils.isInIframe()) {
+            throw BrowserAuthError.createBlockReloadInHiddenIframeError();
+        }
+    };
+    /**
+     * Block redirect operations in iframes unless explicitly allowed
+     * @param interactionType Interaction type for the request
+     * @param allowRedirectInIframe Config value to allow redirects when app is inside an iframe
+     */
+    BrowserUtils.blockRedirectInIframe = function (interactionType, allowRedirectInIframe) {
+        var isIframedApp = BrowserUtils.isInIframe();
+        if (interactionType === exports.InteractionType.Redirect && isIframedApp && !allowRedirectInIframe) {
+            // If we are not in top frame, we shouldn't redirect. This is also handled by the service.
+            throw BrowserAuthError.createRedirectInIframeError(isIframedApp);
+        }
+    };
+    /**
+     * Block redirectUri loaded in popup from calling AcquireToken APIs
+     */
+    BrowserUtils.blockAcquireTokenInPopups = function () {
+        // Popups opened by msal popup APIs are given a name that starts with "msal."
+        if (BrowserUtils.isInPopup()) {
+            throw BrowserAuthError.createBlockAcquireTokenInPopupsError();
+        }
+    };
+    /**
+     * Throws error if token requests are made in non-browser environment
+     * @param isBrowserEnvironment Flag indicating if environment is a browser.
+     */
+    BrowserUtils.blockNonBrowserEnvironment = function (isBrowserEnvironment) {
+        if (!isBrowserEnvironment) {
+            throw BrowserAuthError.createNonBrowserEnvironmentError();
+        }
+    };
+    /**
+     * Returns boolean of whether current browser is an Internet Explorer or Edge browser.
+     */
+    BrowserUtils.detectIEOrEdge = function () {
+        var ua = window.navigator.userAgent;
+        var msie = ua.indexOf("MSIE ");
+        var msie11 = ua.indexOf("Trident/");
+        var msedge = ua.indexOf("Edge/");
+        var isIE = msie > 0 || msie11 > 0;
+        var isEdge = msedge > 0;
+        return isIE || isEdge;
+    };
+    return BrowserUtils;
 }());
 
 /*
@@ -8605,352 +8583,374 @@ var AsyncMemoryStorage = /** @class */ (function () {
  * Licensed under the MIT License.
  */
 /**
- * This class implements MSAL's crypto interface, which allows it to perform base64 encoding and decoding, generating cryptographically random GUIDs and
- * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).
+ * BrowserAuthErrorMessage class containing string constants used by error codes and messages.
  */
-var CryptoOps = /** @class */ (function () {
-    function CryptoOps(logger) {
-        this.logger = logger;
-        // Browser crypto needs to be validated first before any other classes can be set.
-        this.browserCrypto = new BrowserCrypto(this.logger);
-        this.b64Encode = new Base64Encode();
-        this.b64Decode = new Base64Decode();
-        this.guidGenerator = new GuidGenerator(this.browserCrypto);
-        this.pkceGenerator = new PkceGenerator(this.browserCrypto);
-        this.cache = {
-            asymmetricKeys: new AsyncMemoryStorage(this.logger),
-            symmetricKeys: new AsyncMemoryStorage(this.logger)
-        };
+var BrowserConfigurationAuthErrorMessage = {
+    redirectUriNotSet: {
+        code: "redirect_uri_empty",
+        desc: "A redirect URI is required for all calls, and none has been set."
+    },
+    postLogoutUriNotSet: {
+        code: "post_logout_uri_empty",
+        desc: "A post logout redirect has not been set."
+    },
+    storageNotSupportedError: {
+        code: "storage_not_supported",
+        desc: "Given storage configuration option was not supported."
+    },
+    noRedirectCallbacksSet: {
+        code: "no_redirect_callbacks",
+        desc: "No redirect callbacks have been set. Please call setRedirectCallbacks() with the appropriate function arguments before continuing. " +
+            "More information is available here: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/MSAL-basics."
+    },
+    invalidCallbackObject: {
+        code: "invalid_callback_object",
+        desc: "The object passed for the callback was invalid. " +
+            "More information is available here: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/MSAL-basics."
+    },
+    stubPcaInstanceCalled: {
+        code: "stubbed_public_client_application_called",
+        desc: "Stub instance of Public Client Application was called. If using msal-react, please ensure context is not used without a provider. For more visit: aka.ms/msaljs/browser-errors"
+    },
+    inMemRedirectUnavailable: {
+        code: "in_mem_redirect_unavailable",
+        desc: "Redirect cannot be supported. In-memory storage was selected and storeAuthStateInCookie=false, which would cause the library to be unable to handle the incoming hash. If you would like to use the redirect API, please use session/localStorage or set storeAuthStateInCookie=true."
+    }
+};
+/**
+ * Browser library error class thrown by the MSAL.js library for SPAs
+ */
+var BrowserConfigurationAuthError = /** @class */ (function (_super) {
+    __extends$1(BrowserConfigurationAuthError, _super);
+    function BrowserConfigurationAuthError(errorCode, errorMessage) {
+        var _this = _super.call(this, errorCode, errorMessage) || this;
+        _this.name = "BrowserConfigurationAuthError";
+        Object.setPrototypeOf(_this, BrowserConfigurationAuthError.prototype);
+        return _this;
     }
     /**
-     * Creates a new random GUID - used to populate state and nonce.
-     * @returns string (GUID)
+     * Creates an error thrown when the redirect uri is empty (not set by caller)
      */
-    CryptoOps.prototype.createNewGuid = function () {
-        return this.guidGenerator.generateGuid();
+    BrowserConfigurationAuthError.createRedirectUriEmptyError = function () {
+        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.redirectUriNotSet.code, BrowserConfigurationAuthErrorMessage.redirectUriNotSet.desc);
     };
     /**
-     * Encodes input string to base64.
-     * @param input
+     * Creates an error thrown when the post-logout redirect uri is empty (not set by caller)
      */
-    CryptoOps.prototype.base64Encode = function (input) {
-        return this.b64Encode.encode(input);
+    BrowserConfigurationAuthError.createPostLogoutRedirectUriEmptyError = function () {
+        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.postLogoutUriNotSet.code, BrowserConfigurationAuthErrorMessage.postLogoutUriNotSet.desc);
     };
     /**
-     * Decodes input string from base64.
-     * @param input
+     * Creates error thrown when given storage location is not supported.
+     * @param givenStorageLocation
      */
-    CryptoOps.prototype.base64Decode = function (input) {
-        return this.b64Decode.decode(input);
+    BrowserConfigurationAuthError.createStorageNotSupportedError = function (givenStorageLocation) {
+        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.storageNotSupportedError.code, BrowserConfigurationAuthErrorMessage.storageNotSupportedError.desc + " Given Location: " + givenStorageLocation);
     };
     /**
-     * Generates PKCE codes used in Authorization Code Flow.
+     * Creates error thrown when redirect callbacks are not set before calling loginRedirect() or acquireTokenRedirect().
      */
-    CryptoOps.prototype.generatePkceCodes = function () {
-        return __awaiter$1(this, void 0, void 0, function () {
-            return __generator$1(this, function (_a) {
-                return [2 /*return*/, this.pkceGenerator.generateCodes()];
-            });
-        });
+    BrowserConfigurationAuthError.createRedirectCallbacksNotSetError = function () {
+        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.noRedirectCallbacksSet.code, BrowserConfigurationAuthErrorMessage.noRedirectCallbacksSet.desc);
     };
     /**
-     * Generates a keypair, stores it and returns a thumbprint
-     * @param request
+     * Creates error thrown when the stub instance of PublicClientApplication is called.
      */
-    CryptoOps.prototype.getPublicKeyThumbprint = function (request) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var keyPair, publicKeyJwk, pubKeyThumprintObj, publicJwkString, publicJwkBuffer, publicJwkHash, privateKeyJwk, unextractablePrivateKey;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.browserCrypto.generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES)];
-                    case 1:
-                        keyPair = _a.sent();
-                        return [4 /*yield*/, this.browserCrypto.exportJwk(keyPair.publicKey)];
-                    case 2:
-                        publicKeyJwk = _a.sent();
-                        pubKeyThumprintObj = {
-                            e: publicKeyJwk.e,
-                            kty: publicKeyJwk.kty,
-                            n: publicKeyJwk.n
-                        };
-                        publicJwkString = BrowserCrypto.getJwkString(pubKeyThumprintObj);
-                        return [4 /*yield*/, this.browserCrypto.sha256Digest(publicJwkString)];
-                    case 3:
-                        publicJwkBuffer = _a.sent();
-                        publicJwkHash = this.b64Encode.urlEncodeArr(new Uint8Array(publicJwkBuffer));
-                        return [4 /*yield*/, this.browserCrypto.exportJwk(keyPair.privateKey)];
-                    case 4:
-                        privateKeyJwk = _a.sent();
-                        return [4 /*yield*/, this.browserCrypto.importJwk(privateKeyJwk, false, ["sign"])];
-                    case 5:
-                        unextractablePrivateKey = _a.sent();
-                        // Store Keypair data in keystore
-                        return [4 /*yield*/, this.cache.asymmetricKeys.setItem(publicJwkHash, {
-                                privateKey: unextractablePrivateKey,
-                                publicKey: keyPair.publicKey,
-                                requestMethod: request.resourceRequestMethod,
-                                requestUri: request.resourceRequestUri
-                            })];
-                    case 6:
-                        // Store Keypair data in keystore
-                        _a.sent();
-                        return [2 /*return*/, publicJwkHash];
-                }
-            });
-        });
-    };
-    /**
-     * Removes cryptographic keypair from key store matching the keyId passed in
-     * @param kid
-     */
-    CryptoOps.prototype.removeTokenBindingKey = function (kid) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var keyFound;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.cache.asymmetricKeys.removeItem(kid)];
-                    case 1:
-                        _a.sent();
-                        return [4 /*yield*/, this.cache.asymmetricKeys.containsKey(kid)];
-                    case 2:
-                        keyFound = _a.sent();
-                        return [2 /*return*/, !keyFound];
-                }
-            });
-        });
-    };
-    /**
-     * Removes all cryptographic keys from IndexedDB storage
-     */
-    CryptoOps.prototype.clearKeystore = function () {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var dataStoreNames, databaseStorage, _a;
-            return __generator$1(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        dataStoreNames = Object.keys(this.cache);
-                        databaseStorage = this.cache[dataStoreNames[0]];
-                        if (!databaseStorage) return [3 /*break*/, 2];
-                        return [4 /*yield*/, databaseStorage.deleteDatabase()];
-                    case 1:
-                        _a = _b.sent();
-                        return [3 /*break*/, 3];
-                    case 2:
-                        _a = false;
-                        _b.label = 3;
-                    case 3: return [2 /*return*/, _a];
-                }
-            });
-        });
+    BrowserConfigurationAuthError.createStubPcaInstanceCalledError = function () {
+        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.stubPcaInstanceCalled.code, BrowserConfigurationAuthErrorMessage.stubPcaInstanceCalled.desc);
     };
-    /**
-     * Signs the given object as a jwt payload with private key retrieved by given kid.
-     * @param payload
-     * @param kid
+    /*
+     * Create an error thrown when in-memory storage is used and storeAuthStateInCookie=false.
      */
-    CryptoOps.prototype.signJwt = function (payload, kid) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var cachedKeyPair, publicKeyJwk, publicKeyJwkString, header, encodedHeader, encodedPayload, tokenString, tokenBuffer, signatureBuffer, encodedSignature;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.cache.asymmetricKeys.getItem(kid)];
-                    case 1:
-                        cachedKeyPair = _a.sent();
-                        if (!cachedKeyPair) {
-                            throw BrowserAuthError.createSigningKeyNotFoundInStorageError(kid);
-                        }
-                        return [4 /*yield*/, this.browserCrypto.exportJwk(cachedKeyPair.publicKey)];
-                    case 2:
-                        publicKeyJwk = _a.sent();
-                        publicKeyJwkString = BrowserCrypto.getJwkString(publicKeyJwk);
-                        header = {
-                            alg: publicKeyJwk.alg,
-                            type: KEY_FORMAT_JWK
-                        };
-                        encodedHeader = this.b64Encode.urlEncode(JSON.stringify(header));
-                        // Generate payload
-                        payload.cnf = {
-                            jwk: JSON.parse(publicKeyJwkString)
-                        };
-                        encodedPayload = this.b64Encode.urlEncode(JSON.stringify(payload));
-                        tokenString = encodedHeader + "." + encodedPayload;
-                        tokenBuffer = BrowserStringUtils.stringToArrayBuffer(tokenString);
-                        return [4 /*yield*/, this.browserCrypto.sign(cachedKeyPair.privateKey, tokenBuffer)];
-                    case 3:
-                        signatureBuffer = _a.sent();
-                        encodedSignature = this.b64Encode.urlEncodeArr(new Uint8Array(signatureBuffer));
-                        return [2 /*return*/, tokenString + "." + encodedSignature];
-                }
-            });
-        });
+    BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError = function () {
+        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.inMemRedirectUnavailable.code, BrowserConfigurationAuthErrorMessage.inMemRedirectUnavailable.desc);
     };
-    CryptoOps.POP_KEY_USAGES = ["sign", "verify"];
-    CryptoOps.EXTRACTABLE = true;
-    return CryptoOps;
-}());
+    return BrowserConfigurationAuthError;
+}(AuthError));
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-/**
- * BrowserAuthErrorMessage class containing string constants used by error codes and messages.
- */
-var BrowserConfigurationAuthErrorMessage = {
-    redirectUriNotSet: {
-        code: "redirect_uri_empty",
-        desc: "A redirect URI is required for all calls, and none has been set."
+var stubbedPublicClientApplication = {
+    acquireTokenPopup: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
     },
-    postLogoutUriNotSet: {
-        code: "post_logout_uri_empty",
-        desc: "A post logout redirect has not been set."
+    acquireTokenRedirect: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
     },
-    storageNotSupportedError: {
-        code: "storage_not_supported",
-        desc: "Given storage configuration option was not supported."
+    acquireTokenSilent: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
     },
-    noRedirectCallbacksSet: {
-        code: "no_redirect_callbacks",
-        desc: "No redirect callbacks have been set. Please call setRedirectCallbacks() with the appropriate function arguments before continuing. " +
-            "More information is available here: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/MSAL-basics."
+    getAllAccounts: function () {
+        return [];
     },
-    invalidCallbackObject: {
-        code: "invalid_callback_object",
-        desc: "The object passed for the callback was invalid. " +
-            "More information is available here: https://github.com/AzureAD/microsoft-authentication-library-for-js/wiki/MSAL-basics."
+    getAccountByHomeId: function () {
+        return null;
     },
-    stubPcaInstanceCalled: {
-        code: "stubbed_public_client_application_called",
-        desc: "Stub instance of Public Client Application was called. If using msal-react, please ensure context is not used without a provider. For more visit: aka.ms/msaljs/browser-errors"
+    getAccountByUsername: function () {
+        return null;
     },
-    inMemRedirectUnavailable: {
-        code: "in_mem_redirect_unavailable",
-        desc: "Redirect cannot be supported. In-memory storage was selected and storeAuthStateInCookie=false, which would cause the library to be unable to handle the incoming hash. If you would like to use the redirect API, please use session/localStorage or set storeAuthStateInCookie=true."
+    getAccountByLocalId: function () {
+        return null;
+    },
+    handleRedirectPromise: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+    },
+    loginPopup: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+    },
+    loginRedirect: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+    },
+    logout: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+    },
+    logoutRedirect: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+    },
+    logoutPopup: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+    },
+    ssoSilent: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+    },
+    addEventCallback: function () {
+        return null;
+    },
+    removeEventCallback: function () {
+        return;
+    },
+    enableAccountStorageEvents: function () {
+        return;
+    },
+    disableAccountStorageEvents: function () {
+        return;
+    },
+    getTokenCache: function () {
+        throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
+    },
+    getLogger: function () {
+        throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
+    },
+    setLogger: function () {
+        return;
+    },
+    setActiveAccount: function () {
+        return;
+    },
+    getActiveAccount: function () {
+        return null;
+    },
+    initializeWrapperLibrary: function () {
+        return;
+    },
+    setNavigationClient: function () {
+        return;
+    },
+    getConfiguration: function () {
+        throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
     }
-};
-/**
- * Browser library error class thrown by the MSAL.js library for SPAs
+};
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
  */
-var BrowserConfigurationAuthError = /** @class */ (function (_super) {
-    __extends$1(BrowserConfigurationAuthError, _super);
-    function BrowserConfigurationAuthError(errorCode, errorMessage) {
-        var _this = _super.call(this, errorCode, errorMessage) || this;
-        _this.name = "BrowserConfigurationAuthError";
-        Object.setPrototypeOf(_this, BrowserConfigurationAuthError.prototype);
-        return _this;
+var NavigationClient = /** @class */ (function () {
+    function NavigationClient() {
     }
     /**
-     * Creates an error thrown when the redirect uri is empty (not set by caller)
-     */
-    BrowserConfigurationAuthError.createRedirectUriEmptyError = function () {
-        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.redirectUriNotSet.code, BrowserConfigurationAuthErrorMessage.redirectUriNotSet.desc);
-    };
-    /**
-     * Creates an error thrown when the post-logout redirect uri is empty (not set by caller)
-     */
-    BrowserConfigurationAuthError.createPostLogoutRedirectUriEmptyError = function () {
-        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.postLogoutUriNotSet.code, BrowserConfigurationAuthErrorMessage.postLogoutUriNotSet.desc);
-    };
-    /**
-     * Creates error thrown when given storage location is not supported.
-     * @param givenStorageLocation
+     * Navigates to other pages within the same web application
+     * @param url
+     * @param options
      */
-    BrowserConfigurationAuthError.createStorageNotSupportedError = function (givenStorageLocation) {
-        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.storageNotSupportedError.code, BrowserConfigurationAuthErrorMessage.storageNotSupportedError.desc + " Given Location: " + givenStorageLocation);
+    NavigationClient.prototype.navigateInternal = function (url, options) {
+        return NavigationClient.defaultNavigateWindow(url, options);
     };
     /**
-     * Creates error thrown when redirect callbacks are not set before calling loginRedirect() or acquireTokenRedirect().
+     * Navigates to other pages outside the web application i.e. the Identity Provider
+     * @param url
+     * @param options
      */
-    BrowserConfigurationAuthError.createRedirectCallbacksNotSetError = function () {
-        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.noRedirectCallbacksSet.code, BrowserConfigurationAuthErrorMessage.noRedirectCallbacksSet.desc);
+    NavigationClient.prototype.navigateExternal = function (url, options) {
+        return NavigationClient.defaultNavigateWindow(url, options);
     };
     /**
-     * Creates error thrown when the stub instance of PublicClientApplication is called.
-     */
-    BrowserConfigurationAuthError.createStubPcaInstanceCalledError = function () {
-        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.stubPcaInstanceCalled.code, BrowserConfigurationAuthErrorMessage.stubPcaInstanceCalled.desc);
-    };
-    /*
-     * Create an error thrown when in-memory storage is used and storeAuthStateInCookie=false.
+     * Default navigation implementation invoked by the internal and external functions
+     * @param url
+     * @param options
      */
-    BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError = function () {
-        return new BrowserConfigurationAuthError(BrowserConfigurationAuthErrorMessage.inMemRedirectUnavailable.code, BrowserConfigurationAuthErrorMessage.inMemRedirectUnavailable.desc);
+    NavigationClient.defaultNavigateWindow = function (url, options) {
+        if (options.noHistory) {
+            window.location.replace(url);
+        }
+        else {
+            window.location.assign(url);
+        }
+        return new Promise(function (resolve) {
+            setTimeout(function () {
+                resolve(true);
+            }, options.timeout);
+        });
     };
-    return BrowserConfigurationAuthError;
-}(AuthError));
+    return NavigationClient;
+}());
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-var BrowserStorage = /** @class */ (function () {
-    function BrowserStorage(cacheLocation) {
-        this.validateWindowStorage(cacheLocation);
-        this.windowStorage = window[cacheLocation];
+exports.EventType = void 0;
+(function (EventType) {
+    EventType["ACCOUNT_ADDED"] = "msal:accountAdded";
+    EventType["ACCOUNT_REMOVED"] = "msal:accountRemoved";
+    EventType["LOGIN_START"] = "msal:loginStart";
+    EventType["LOGIN_SUCCESS"] = "msal:loginSuccess";
+    EventType["LOGIN_FAILURE"] = "msal:loginFailure";
+    EventType["ACQUIRE_TOKEN_START"] = "msal:acquireTokenStart";
+    EventType["ACQUIRE_TOKEN_SUCCESS"] = "msal:acquireTokenSuccess";
+    EventType["ACQUIRE_TOKEN_FAILURE"] = "msal:acquireTokenFailure";
+    EventType["ACQUIRE_TOKEN_NETWORK_START"] = "msal:acquireTokenFromNetworkStart";
+    EventType["SSO_SILENT_START"] = "msal:ssoSilentStart";
+    EventType["SSO_SILENT_SUCCESS"] = "msal:ssoSilentSuccess";
+    EventType["SSO_SILENT_FAILURE"] = "msal:ssoSilentFailure";
+    EventType["HANDLE_REDIRECT_START"] = "msal:handleRedirectStart";
+    EventType["HANDLE_REDIRECT_END"] = "msal:handleRedirectEnd";
+    EventType["POPUP_OPENED"] = "msal:popupOpened";
+    EventType["LOGOUT_START"] = "msal:logoutStart";
+    EventType["LOGOUT_SUCCESS"] = "msal:logoutSuccess";
+    EventType["LOGOUT_FAILURE"] = "msal:logoutFailure";
+    EventType["LOGOUT_END"] = "msal:logoutEnd";
+})(exports.EventType || (exports.EventType = {}));
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+var EventMessageUtils = /** @class */ (function () {
+    function EventMessageUtils() {
     }
-    BrowserStorage.prototype.validateWindowStorage = function (cacheLocation) {
-        if (cacheLocation !== exports.BrowserCacheLocation.LocalStorage && cacheLocation !== exports.BrowserCacheLocation.SessionStorage) {
-            throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);
-        }
-        var storageSupported = !!window[cacheLocation];
-        if (!storageSupported) {
-            throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);
+    /**
+     * Gets interaction status from event message
+     * @param message
+     * @param currentStatus
+     */
+    EventMessageUtils.getInteractionStatusFromEvent = function (message, currentStatus) {
+        switch (message.eventType) {
+            case exports.EventType.LOGIN_START:
+                return exports.InteractionStatus.Login;
+            case exports.EventType.SSO_SILENT_START:
+                return exports.InteractionStatus.SsoSilent;
+            case exports.EventType.ACQUIRE_TOKEN_START:
+                if (message.interactionType === exports.InteractionType.Redirect || message.interactionType === exports.InteractionType.Popup) {
+                    return exports.InteractionStatus.AcquireToken;
+                }
+                break;
+            case exports.EventType.HANDLE_REDIRECT_START:
+                return exports.InteractionStatus.HandleRedirect;
+            case exports.EventType.LOGOUT_START:
+                return exports.InteractionStatus.Logout;
+            case exports.EventType.SSO_SILENT_SUCCESS:
+            case exports.EventType.SSO_SILENT_FAILURE:
+                if (currentStatus && currentStatus !== exports.InteractionStatus.SsoSilent) {
+                    // Prevent this event from clearing any status other than ssoSilent
+                    break;
+                }
+                return exports.InteractionStatus.None;
+            case exports.EventType.LOGOUT_END:
+                if (currentStatus && currentStatus !== exports.InteractionStatus.Logout) {
+                    // Prevent this event from clearing any status other than logout
+                    break;
+                }
+                return exports.InteractionStatus.None;
+            case exports.EventType.HANDLE_REDIRECT_END:
+                if (currentStatus && currentStatus !== exports.InteractionStatus.HandleRedirect) {
+                    // Prevent this event from clearing any status other than handleRedirect
+                    break;
+                }
+                return exports.InteractionStatus.None;
+            case exports.EventType.LOGIN_SUCCESS:
+            case exports.EventType.LOGIN_FAILURE:
+            case exports.EventType.ACQUIRE_TOKEN_SUCCESS:
+            case exports.EventType.ACQUIRE_TOKEN_FAILURE:
+                if (message.interactionType === exports.InteractionType.Redirect || message.interactionType === exports.InteractionType.Popup) {
+                    if (currentStatus && currentStatus !== exports.InteractionStatus.Login && currentStatus !== exports.InteractionStatus.AcquireToken) {
+                        // Prevent this event from clearing any status other than login or acquireToken
+                        break;
+                    }
+                    return exports.InteractionStatus.None;
+                }
+                break;
         }
+        return null;
     };
-    BrowserStorage.prototype.getItem = function (key) {
-        return this.windowStorage.getItem(key);
-    };
-    BrowserStorage.prototype.setItem = function (key, value) {
-        this.windowStorage.setItem(key, value);
-    };
-    BrowserStorage.prototype.removeItem = function (key) {
-        this.windowStorage.removeItem(key);
-    };
-    BrowserStorage.prototype.getKeys = function () {
-        return Object.keys(this.windowStorage);
-    };
-    BrowserStorage.prototype.containsKey = function (key) {
-        return this.windowStorage.hasOwnProperty(key);
-    };
-    return BrowserStorage;
+    return EventMessageUtils;
 }());
 
+/* eslint-disable header/header */
+var name = "@azure/msal-browser";
+var version = "2.19.0";
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-var BrowserProtocolUtils = /** @class */ (function () {
-    function BrowserProtocolUtils() {
+var SignedHttpRequest = /** @class */ (function () {
+    function SignedHttpRequest(shrParameters, shrOptions) {
+        var loggerOptions = (shrOptions && shrOptions.loggerOptions) || {};
+        this.logger = new Logger(loggerOptions, name, version);
+        this.cryptoOps = new CryptoOps(this.logger);
+        this.popTokenGenerator = new PopTokenGenerator(this.cryptoOps);
+        this.shrParameters = shrParameters;
     }
     /**
-     * Extracts the BrowserStateObject from the state string.
-     * @param browserCrypto
-     * @param state
+     * Generates and caches a keypair for the given request options.
+     * @returns Public key digest, which should be sent to the token issuer.
      */
-    BrowserProtocolUtils.extractBrowserRequestState = function (browserCrypto, state) {
-        if (StringUtils.isEmpty(state)) {
-            return null;
-        }
-        try {
-            var requestStateObj = ProtocolUtils.parseRequestState(browserCrypto, state);
-            return requestStateObj.libraryState.meta;
-        }
-        catch (e) {
-            throw ClientAuthError.createInvalidStateError(state, e);
-        }
+    SignedHttpRequest.prototype.generatePublicKeyThumbprint = function () {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var kid;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.popTokenGenerator.generateKid(this.shrParameters)];
+                    case 1:
+                        kid = (_a.sent()).kid;
+                        return [2 /*return*/, kid];
+                }
+            });
+        });
     };
     /**
-     * Parses properties of server response from url hash
-     * @param locationHash Hash from url
+     * Generates a signed http request for the given payload with the given key.
+     * @param payload Payload to sign (e.g. access token)
+     * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
+     * @param claims Additional claims to include/override in the signed JWT
+     * @returns Pop token signed with the corresponding private key
      */
-    BrowserProtocolUtils.parseServerResponseFromHash = function (locationHash) {
-        if (!locationHash) {
-            return {};
-        }
-        var hashUrlString = new UrlString(locationHash);
-        return UrlString.getDeserializedHash(hashUrlString.getHash());
+    SignedHttpRequest.prototype.signRequest = function (payload, publicKeyThumbprint, claims) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            return __generator$1(this, function (_a) {
+                return [2 /*return*/, this.popTokenGenerator.signPayload(payload, publicKeyThumbprint, this.shrParameters, claims)];
+            });
+        });
+    };
+    /**
+     * Removes cached keys from browser for given public key thumbprint
+     * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
+     * @returns If keys are properly deleted
+     */
+    SignedHttpRequest.prototype.removeKeys = function (publicKeyThumbprint) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.cryptoOps.removeTokenBindingKey(publicKeyThumbprint)];
+                    case 1: return [2 /*return*/, _a.sent()];
+                }
+            });
+        });
     };
-    return BrowserProtocolUtils;
+    return SignedHttpRequest;
 }());
 
 /*
@@ -8958,1283 +8958,1568 @@ var BrowserProtocolUtils = /** @class */ (function () {
  * Licensed under the MIT License.
  */
 /**
- * This class implements the cache storage interface for MSAL through browser local or session storage.
- * Cookies are only used if storeAuthStateInCookie is true, and are only used for
- * parameters such as state and nonce, generally.
+ * Storage wrapper for IndexedDB storage in browsers: https://developer.mozilla.org/en-US/docs/Web/API/IndexedDB_API
  */
-var BrowserCacheManager = /** @class */ (function (_super) {
-    __extends$1(BrowserCacheManager, _super);
-    function BrowserCacheManager(clientId, cacheConfig, cryptoImpl, logger) {
-        var _this = _super.call(this, clientId, cryptoImpl) || this;
-        // Cookie life calculation (hours * minutes * seconds * ms)
-        _this.COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
-        _this.cacheConfig = cacheConfig;
-        _this.logger = logger;
-        _this.internalStorage = new MemoryStorage();
-        _this.browserStorage = _this.setupBrowserStorage(_this.cacheConfig.cacheLocation);
-        _this.temporaryCacheStorage = _this.setupTemporaryCacheStorage(_this.cacheConfig.cacheLocation);
-        // Migrate any cache entries from older versions of MSAL.
-        _this.migrateCacheEntries();
-        return _this;
+var DatabaseStorage = /** @class */ (function () {
+    function DatabaseStorage() {
+        this.dbName = DB_NAME;
+        this.version = DB_VERSION;
+        this.tableName = DB_TABLE_NAME;
+        this.dbOpen = false;
     }
     /**
-     * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
-     * @param cacheLocation
+     * Opens IndexedDB instance.
      */
-    BrowserCacheManager.prototype.setupBrowserStorage = function (cacheLocation) {
-        switch (cacheLocation) {
-            case exports.BrowserCacheLocation.LocalStorage:
-            case exports.BrowserCacheLocation.SessionStorage:
-                try {
-                    // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
-                    return new BrowserStorage(cacheLocation);
-                }
-                catch (e) {
-                    this.logger.verbose(e);
-                    break;
+    DatabaseStorage.prototype.open = function () {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var _this = this;
+            return __generator$1(this, function (_a) {
+                return [2 /*return*/, new Promise(function (resolve, reject) {
+                        var openDB = window.indexedDB.open(_this.dbName, _this.version);
+                        openDB.addEventListener("upgradeneeded", function (e) {
+                            var event = e;
+                            event.target.result.createObjectStore(_this.tableName);
+                        });
+                        openDB.addEventListener("success", function (e) {
+                            var event = e;
+                            _this.db = event.target.result;
+                            _this.dbOpen = true;
+                            resolve();
+                        });
+                        openDB.addEventListener("error", function () { return reject(BrowserAuthError.createDatabaseUnavailableError()); });
+                    })];
+            });
+        });
+    };
+    /**
+     * Opens database if it's not already open
+     */
+    DatabaseStorage.prototype.validateDbIsOpen = function () {
+        return __awaiter$1(this, void 0, void 0, function () {
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (!!this.dbOpen) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.open()];
+                    case 1: return [2 /*return*/, _a.sent()];
+                    case 2: return [2 /*return*/];
                 }
-            case exports.BrowserCacheLocation.MemoryStorage:
-        }
-        this.cacheConfig.cacheLocation = exports.BrowserCacheLocation.MemoryStorage;
-        return new MemoryStorage();
+            });
+        });
     };
     /**
-     *
-     * @param cacheLocation
+     * Retrieves item from IndexedDB instance.
+     * @param key
      */
-    BrowserCacheManager.prototype.setupTemporaryCacheStorage = function (cacheLocation) {
-        switch (cacheLocation) {
-            case exports.BrowserCacheLocation.LocalStorage:
-            case exports.BrowserCacheLocation.SessionStorage:
-                try {
-                    // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
-                    return new BrowserStorage(exports.BrowserCacheLocation.SessionStorage);
+    DatabaseStorage.prototype.getItem = function (key) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var _this = this;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.validateDbIsOpen()];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/, new Promise(function (resolve, reject) {
+                                // TODO: Add timeouts?
+                                if (!_this.db) {
+                                    return reject(BrowserAuthError.createDatabaseNotOpenError());
+                                }
+                                var transaction = _this.db.transaction([_this.tableName], "readonly");
+                                var objectStore = transaction.objectStore(_this.tableName);
+                                var dbGet = objectStore.get(key);
+                                dbGet.addEventListener("success", function (e) {
+                                    var event = e;
+                                    resolve(event.target.result);
+                                });
+                                dbGet.addEventListener("error", function (e) { return reject(e); });
+                            })];
                 }
-                catch (e) {
-                    this.logger.verbose(e);
-                    return this.internalStorage;
+            });
+        });
+    };
+    /**
+     * Adds item to IndexedDB under given key
+     * @param key
+     * @param payload
+     */
+    DatabaseStorage.prototype.setItem = function (key, payload) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var _this = this;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.validateDbIsOpen()];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/, new Promise(function (resolve, reject) {
+                                // TODO: Add timeouts?
+                                if (!_this.db) {
+                                    return reject(BrowserAuthError.createDatabaseNotOpenError());
+                                }
+                                var transaction = _this.db.transaction([_this.tableName], "readwrite");
+                                var objectStore = transaction.objectStore(_this.tableName);
+                                var dbPut = objectStore.put(payload, key);
+                                dbPut.addEventListener("success", function () { return resolve(); });
+                                dbPut.addEventListener("error", function (e) { return reject(e); });
+                            })];
                 }
-            case exports.BrowserCacheLocation.MemoryStorage:
-            default:
-                return this.internalStorage;
-        }
+            });
+        });
     };
     /**
-     * Migrate all old cache entries to new schema. No rollback supported.
-     * @param storeAuthStateInCookie
+     * Removes item from IndexedDB under given key
+     * @param key
      */
-    BrowserCacheManager.prototype.migrateCacheEntries = function () {
-        var _this = this;
-        var idTokenKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ID_TOKEN;
-        var clientInfoKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.CLIENT_INFO;
-        var errorKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ERROR;
-        var errorDescKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ERROR_DESC;
-        var idTokenValue = this.browserStorage.getItem(idTokenKey);
-        var clientInfoValue = this.browserStorage.getItem(clientInfoKey);
-        var errorValue = this.browserStorage.getItem(errorKey);
-        var errorDescValue = this.browserStorage.getItem(errorDescKey);
-        var values = [idTokenValue, clientInfoValue, errorValue, errorDescValue];
-        var keysToMigrate = [PersistentCacheKeys.ID_TOKEN, PersistentCacheKeys.CLIENT_INFO, PersistentCacheKeys.ERROR, PersistentCacheKeys.ERROR_DESC];
-        keysToMigrate.forEach(function (cacheKey, index) { return _this.migrateCacheEntry(cacheKey, values[index]); });
+    DatabaseStorage.prototype.removeItem = function (key) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var _this = this;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.validateDbIsOpen()];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/, new Promise(function (resolve, reject) {
+                                if (!_this.db) {
+                                    return reject(BrowserAuthError.createDatabaseNotOpenError());
+                                }
+                                var transaction = _this.db.transaction([_this.tableName], "readwrite");
+                                var objectStore = transaction.objectStore(_this.tableName);
+                                var dbDelete = objectStore.delete(key);
+                                dbDelete.addEventListener("success", function () { return resolve(); });
+                                dbDelete.addEventListener("error", function (e) { return reject(e); });
+                            })];
+                }
+            });
+        });
     };
     /**
-     * Utility function to help with migration.
-     * @param newKey
-     * @param value
-     * @param storeAuthStateInCookie
+     * Get all the keys from the storage object as an iterable array of strings.
      */
-    BrowserCacheManager.prototype.migrateCacheEntry = function (newKey, value) {
-        if (value) {
-            this.setTemporaryCache(newKey, value, true);
-        }
+    DatabaseStorage.prototype.getKeys = function () {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var _this = this;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.validateDbIsOpen()];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/, new Promise(function (resolve, reject) {
+                                if (!_this.db) {
+                                    return reject(BrowserAuthError.createDatabaseNotOpenError());
+                                }
+                                var transaction = _this.db.transaction([_this.tableName], "readonly");
+                                var objectStore = transaction.objectStore(_this.tableName);
+                                var dbGetKeys = objectStore.getAllKeys();
+                                dbGetKeys.addEventListener("success", function (e) {
+                                    var event = e;
+                                    resolve(event.target.result);
+                                });
+                                dbGetKeys.addEventListener("error", function (e) { return reject(e); });
+                            })];
+                }
+            });
+        });
     };
     /**
-     * Parses passed value as JSON object, JSON.parse() will throw an error.
-     * @param input
+     *
+     * Checks whether there is an object under the search key in the object store
      */
-    BrowserCacheManager.prototype.validateAndParseJson = function (jsonValue) {
-        try {
-            var parsedJson = JSON.parse(jsonValue);
-            /**
-             * There are edge cases in which JSON.parse will successfully parse a non-valid JSON object
-             * (e.g. JSON.parse will parse an escaped string into an unescaped string), so adding a type check
-             * of the parsed value is necessary in order to be certain that the string represents a valid JSON object.
-             *
-             */
-            return (parsedJson && typeof parsedJson === "object") ? parsedJson : null;
-        }
-        catch (error) {
-            return null;
-        }
+    DatabaseStorage.prototype.containsKey = function (key) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var _this = this;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.validateDbIsOpen()];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/, new Promise(function (resolve, reject) {
+                                if (!_this.db) {
+                                    return reject(BrowserAuthError.createDatabaseNotOpenError());
+                                }
+                                var transaction = _this.db.transaction([_this.tableName], "readonly");
+                                var objectStore = transaction.objectStore(_this.tableName);
+                                var dbContainsKey = objectStore.count(key);
+                                dbContainsKey.addEventListener("success", function (e) {
+                                    var event = e;
+                                    resolve(event.target.result === 1);
+                                });
+                                dbContainsKey.addEventListener("error", function (e) { return reject(e); });
+                            })];
+                }
+            });
+        });
     };
     /**
-     * fetches the entry from the browser storage based off the key
-     * @param key
+     * Deletes the MSAL database. The database is deleted rather than cleared to make it possible
+     * for client applications to downgrade to a previous MSAL version without worrying about forward compatibility issues
+     * with IndexedDB database versions.
      */
-    BrowserCacheManager.prototype.getItem = function (key) {
-        return this.browserStorage.getItem(key);
+    DatabaseStorage.prototype.deleteDatabase = function () {
+        return __awaiter$1(this, void 0, void 0, function () {
+            return __generator$1(this, function (_a) {
+                return [2 /*return*/, new Promise(function (resolve, reject) {
+                        var deleteDbRequest = window.indexedDB.deleteDatabase(DB_NAME);
+                        deleteDbRequest.addEventListener("success", function () { return resolve(true); });
+                        deleteDbRequest.addEventListener("error", function () { return reject(false); });
+                    })];
+            });
+        });
     };
-    /**
-     * sets the entry in the browser storage
-     * @param key
-     * @param value
-     */
-    BrowserCacheManager.prototype.setItem = function (key, value) {
-        this.browserStorage.setItem(key, value);
+    return DatabaseStorage;
+}());
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+var MemoryStorage = /** @class */ (function () {
+    function MemoryStorage() {
+        this.cache = new Map();
+    }
+    MemoryStorage.prototype.getItem = function (key) {
+        return this.cache.get(key) || null;
     };
-    /**
-     * fetch the account entity from the platform cache
-     * @param accountKey
-     */
-    BrowserCacheManager.prototype.getAccount = function (accountKey) {
-        var account = this.getItem(accountKey);
-        if (!account) {
-            return null;
-        }
-        var parsedAccount = this.validateAndParseJson(account);
-        if (!parsedAccount || !AccountEntity.isAccountEntity(parsedAccount)) {
-            return null;
-        }
-        return CacheManager.toObject(new AccountEntity(), parsedAccount);
+    MemoryStorage.prototype.setItem = function (key, value) {
+        this.cache.set(key, value);
     };
-    /**
-     * set account entity in the platform cache
-     * @param key
-     * @param value
-     */
-    BrowserCacheManager.prototype.setAccount = function (account) {
-        this.logger.trace("BrowserCacheManager.setAccount called");
-        var key = account.generateAccountKey();
-        this.setItem(key, JSON.stringify(account));
+    MemoryStorage.prototype.removeItem = function (key) {
+        this.cache.delete(key);
     };
-    /**
-     * generates idToken entity from a string
-     * @param idTokenKey
-     */
-    BrowserCacheManager.prototype.getIdTokenCredential = function (idTokenKey) {
-        var value = this.getItem(idTokenKey);
-        if (!value) {
-            this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit");
-            return null;
-        }
-        var parsedIdToken = this.validateAndParseJson(value);
-        if (!parsedIdToken || !IdTokenEntity.isIdTokenEntity(parsedIdToken)) {
-            this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit");
-            return null;
-        }
-        this.logger.trace("BrowserCacheManager.getIdTokenCredential: cache hit");
-        return CacheManager.toObject(new IdTokenEntity(), parsedIdToken);
+    MemoryStorage.prototype.getKeys = function () {
+        var cacheKeys = [];
+        this.cache.forEach(function (value, key) {
+            cacheKeys.push(key);
+        });
+        return cacheKeys;
     };
-    /**
-     * set IdToken credential to the platform cache
-     * @param idToken
-     */
-    BrowserCacheManager.prototype.setIdTokenCredential = function (idToken) {
-        this.logger.trace("BrowserCacheManager.setIdTokenCredential called");
-        var idTokenKey = idToken.generateCredentialKey();
-        this.setItem(idTokenKey, JSON.stringify(idToken));
+    MemoryStorage.prototype.containsKey = function (key) {
+        return this.cache.has(key);
     };
-    /**
-     * generates accessToken entity from a string
-     * @param key
-     */
-    BrowserCacheManager.prototype.getAccessTokenCredential = function (accessTokenKey) {
-        var value = this.getItem(accessTokenKey);
-        if (!value) {
-            this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit");
-            return null;
-        }
-        var parsedAccessToken = this.validateAndParseJson(value);
-        if (!parsedAccessToken || !AccessTokenEntity.isAccessTokenEntity(parsedAccessToken)) {
-            this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit");
-            return null;
-        }
-        this.logger.trace("BrowserCacheManager.getAccessTokenCredential: cache hit");
-        return CacheManager.toObject(new AccessTokenEntity(), parsedAccessToken);
+    MemoryStorage.prototype.clear = function () {
+        this.cache.clear();
     };
-    /**
-     * set accessToken credential to the platform cache
-     * @param accessToken
-     */
-    BrowserCacheManager.prototype.setAccessTokenCredential = function (accessToken) {
-        this.logger.trace("BrowserCacheManager.setAccessTokenCredential called");
-        var accessTokenKey = accessToken.generateCredentialKey();
-        this.setItem(accessTokenKey, JSON.stringify(accessToken));
+    return MemoryStorage;
+}());
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * This class allows MSAL to store artifacts asynchronously using the DatabaseStorage IndexedDB wrapper,
+ * backed up with the more volatile MemoryStorage object for cases in which IndexedDB may be unavailable.
+ */
+var AsyncMemoryStorage = /** @class */ (function () {
+    function AsyncMemoryStorage(logger) {
+        this.inMemoryCache = new MemoryStorage();
+        this.indexedDBCache = new DatabaseStorage();
+        this.logger = logger;
+    }
+    AsyncMemoryStorage.prototype.handleDatabaseAccessError = function (error) {
+        if (error instanceof BrowserAuthError && error.errorCode === BrowserAuthErrorMessage.databaseUnavailable.code) {
+            this.logger.error("Could not access persistent storage. This may be caused by browser privacy features which block persistent storage in third-party contexts.");
+        }
     };
     /**
-     * generates refreshToken entity from a string
-     * @param refreshTokenKey
+     * Get the item matching the given key. Tries in-memory cache first, then in the asynchronous
+     * storage object if item isn't found in-memory.
+     * @param key
      */
-    BrowserCacheManager.prototype.getRefreshTokenCredential = function (refreshTokenKey) {
-        var value = this.getItem(refreshTokenKey);
-        if (!value) {
-            this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit");
-            return null;
-        }
-        var parsedRefreshToken = this.validateAndParseJson(value);
-        if (!parsedRefreshToken || !RefreshTokenEntity.isRefreshTokenEntity(parsedRefreshToken)) {
-            this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit");
-            return null;
-        }
-        this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: cache hit");
-        return CacheManager.toObject(new RefreshTokenEntity(), parsedRefreshToken);
+    AsyncMemoryStorage.prototype.getItem = function (key) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var item, e_1;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        item = this.inMemoryCache.getItem(key);
+                        if (!!item) return [3 /*break*/, 4];
+                        _a.label = 1;
+                    case 1:
+                        _a.trys.push([1, 3, , 4]);
+                        this.logger.verbose("Queried item not found in in-memory cache, now querying persistent storage.");
+                        return [4 /*yield*/, this.indexedDBCache.getItem(key)];
+                    case 2: return [2 /*return*/, _a.sent()];
+                    case 3:
+                        e_1 = _a.sent();
+                        this.handleDatabaseAccessError(e_1);
+                        return [3 /*break*/, 4];
+                    case 4: return [2 /*return*/, item];
+                }
+            });
+        });
     };
     /**
-     * set refreshToken credential to the platform cache
-     * @param refreshToken
+     * Sets the item in the in-memory cache and then tries to set it in the asynchronous
+     * storage object with the given key.
+     * @param key
+     * @param value
      */
-    BrowserCacheManager.prototype.setRefreshTokenCredential = function (refreshToken) {
-        this.logger.trace("BrowserCacheManager.setRefreshTokenCredential called");
-        var refreshTokenKey = refreshToken.generateCredentialKey();
-        this.setItem(refreshTokenKey, JSON.stringify(refreshToken));
+    AsyncMemoryStorage.prototype.setItem = function (key, value) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var e_2;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        this.inMemoryCache.setItem(key, value);
+                        _a.label = 1;
+                    case 1:
+                        _a.trys.push([1, 3, , 4]);
+                        return [4 /*yield*/, this.indexedDBCache.setItem(key, value)];
+                    case 2:
+                        _a.sent();
+                        return [3 /*break*/, 4];
+                    case 3:
+                        e_2 = _a.sent();
+                        this.handleDatabaseAccessError(e_2);
+                        return [3 /*break*/, 4];
+                    case 4: return [2 /*return*/];
+                }
+            });
+        });
     };
     /**
-     * fetch appMetadata entity from the platform cache
-     * @param appMetadataKey
+     * Removes the item matching the key from the in-memory cache, then tries to remove it from the asynchronous storage object.
+     * @param key
      */
-    BrowserCacheManager.prototype.getAppMetadata = function (appMetadataKey) {
-        var value = this.getItem(appMetadataKey);
-        if (!value) {
-            this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit");
-            return null;
-        }
-        var parsedMetadata = this.validateAndParseJson(value);
-        if (!parsedMetadata || !AppMetadataEntity.isAppMetadataEntity(appMetadataKey, parsedMetadata)) {
-            this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit");
-            return null;
-        }
-        this.logger.trace("BrowserCacheManager.getAppMetadata: cache hit");
-        return CacheManager.toObject(new AppMetadataEntity(), parsedMetadata);
+    AsyncMemoryStorage.prototype.removeItem = function (key) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var e_3;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        this.inMemoryCache.removeItem(key);
+                        _a.label = 1;
+                    case 1:
+                        _a.trys.push([1, 3, , 4]);
+                        return [4 /*yield*/, this.indexedDBCache.removeItem(key)];
+                    case 2:
+                        _a.sent();
+                        return [3 /*break*/, 4];
+                    case 3:
+                        e_3 = _a.sent();
+                        this.handleDatabaseAccessError(e_3);
+                        return [3 /*break*/, 4];
+                    case 4: return [2 /*return*/];
+                }
+            });
+        });
     };
     /**
-     * set appMetadata entity to the platform cache
-     * @param appMetadata
+     * Get all the keys from the in-memory cache as an iterable array of strings. If no keys are found, query the keys in the
+     * asynchronous storage object.
      */
-    BrowserCacheManager.prototype.setAppMetadata = function (appMetadata) {
-        this.logger.trace("BrowserCacheManager.setAppMetadata called");
-        var appMetadataKey = appMetadata.generateAppMetadataKey();
-        this.setItem(appMetadataKey, JSON.stringify(appMetadata));
+    AsyncMemoryStorage.prototype.getKeys = function () {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var cacheKeys, e_4;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        cacheKeys = this.inMemoryCache.getKeys();
+                        if (!(cacheKeys.length === 0)) return [3 /*break*/, 4];
+                        _a.label = 1;
+                    case 1:
+                        _a.trys.push([1, 3, , 4]);
+                        this.logger.verbose("In-memory cache is empty, now querying persistent storage.");
+                        return [4 /*yield*/, this.indexedDBCache.getKeys()];
+                    case 2: return [2 /*return*/, _a.sent()];
+                    case 3:
+                        e_4 = _a.sent();
+                        this.handleDatabaseAccessError(e_4);
+                        return [3 /*break*/, 4];
+                    case 4: return [2 /*return*/, cacheKeys];
+                }
+            });
+        });
     };
     /**
-     * fetch server telemetry entity from the platform cache
-     * @param serverTelemetryKey
+     * Returns true or false if the given key is present in the cache.
+     * @param key
      */
-    BrowserCacheManager.prototype.getServerTelemetry = function (serverTelemetryKey) {
-        var value = this.getItem(serverTelemetryKey);
-        if (!value) {
-            this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit");
-            return null;
-        }
-        var parsedMetadata = this.validateAndParseJson(value);
-        if (!parsedMetadata || !ServerTelemetryEntity.isServerTelemetryEntity(serverTelemetryKey, parsedMetadata)) {
-            this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit");
-            return null;
-        }
-        this.logger.trace("BrowserCacheManager.getServerTelemetry: cache hit");
-        return CacheManager.toObject(new ServerTelemetryEntity(), parsedMetadata);
+    AsyncMemoryStorage.prototype.containsKey = function (key) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var containsKey, e_5;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        containsKey = this.inMemoryCache.containsKey(key);
+                        if (!!containsKey) return [3 /*break*/, 4];
+                        _a.label = 1;
+                    case 1:
+                        _a.trys.push([1, 3, , 4]);
+                        this.logger.verbose("Key not found in in-memory cache, now querying persistent storage.");
+                        return [4 /*yield*/, this.indexedDBCache.containsKey(key)];
+                    case 2: return [2 /*return*/, _a.sent()];
+                    case 3:
+                        e_5 = _a.sent();
+                        this.handleDatabaseAccessError(e_5);
+                        return [3 /*break*/, 4];
+                    case 4: return [2 /*return*/, containsKey];
+                }
+            });
+        });
     };
     /**
-     * set server telemetry entity to the platform cache
-     * @param serverTelemetryKey
-     * @param serverTelemetry
+     * Clears in-memory Map and tries to delete the IndexedDB database.
      */
-    BrowserCacheManager.prototype.setServerTelemetry = function (serverTelemetryKey, serverTelemetry) {
-        this.logger.trace("BrowserCacheManager.setServerTelemetry called");
-        this.setItem(serverTelemetryKey, JSON.stringify(serverTelemetry));
+    AsyncMemoryStorage.prototype.clear = function () {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var e_6;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        this.inMemoryCache.clear();
+                        _a.label = 1;
+                    case 1:
+                        _a.trys.push([1, 3, , 4]);
+                        return [4 /*yield*/, this.indexedDBCache.deleteDatabase()];
+                    case 2:
+                        _a.sent();
+                        return [3 /*break*/, 4];
+                    case 3:
+                        e_6 = _a.sent();
+                        this.handleDatabaseAccessError(e_6);
+                        return [3 /*break*/, 4];
+                    case 4: return [2 /*return*/];
+                }
+            });
+        });
     };
+    return AsyncMemoryStorage;
+}());
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * This class implements MSAL's crypto interface, which allows it to perform base64 encoding and decoding, generating cryptographically random GUIDs and
+ * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).
+ */
+var CryptoOps = /** @class */ (function () {
+    function CryptoOps(logger) {
+        this.logger = logger;
+        // Browser crypto needs to be validated first before any other classes can be set.
+        this.browserCrypto = new BrowserCrypto(this.logger);
+        this.b64Encode = new Base64Encode();
+        this.b64Decode = new Base64Decode();
+        this.guidGenerator = new GuidGenerator(this.browserCrypto);
+        this.pkceGenerator = new PkceGenerator(this.browserCrypto);
+        this.cache = {
+            asymmetricKeys: new AsyncMemoryStorage(this.logger),
+            symmetricKeys: new AsyncMemoryStorage(this.logger)
+        };
+    }
     /**
-     *
+     * Creates a new random GUID - used to populate state and nonce.
+     * @returns string (GUID)
      */
-    BrowserCacheManager.prototype.getAuthorityMetadata = function (key) {
-        var value = this.internalStorage.getItem(key);
-        if (!value) {
-            this.logger.trace("BrowserCacheManager.getAuthorityMetadata: called, no cache hit");
-            return null;
-        }
-        var parsedMetadata = this.validateAndParseJson(value);
-        if (parsedMetadata && AuthorityMetadataEntity.isAuthorityMetadataEntity(key, parsedMetadata)) {
-            this.logger.trace("BrowserCacheManager.getAuthorityMetadata: cache hit");
-            return CacheManager.toObject(new AuthorityMetadataEntity(), parsedMetadata);
-        }
-        return null;
+    CryptoOps.prototype.createNewGuid = function () {
+        return this.guidGenerator.generateGuid();
     };
     /**
-     *
+     * Encodes input string to base64.
+     * @param input
      */
-    BrowserCacheManager.prototype.getAuthorityMetadataKeys = function () {
-        var _this = this;
-        var allKeys = this.internalStorage.getKeys();
-        return allKeys.filter(function (key) {
-            return _this.isAuthorityMetadata(key);
-        });
+    CryptoOps.prototype.base64Encode = function (input) {
+        return this.b64Encode.encode(input);
     };
     /**
-     * Sets wrapper metadata in memory
-     * @param wrapperSKU
-     * @param wrapperVersion
+     * Decodes input string from base64.
+     * @param input
      */
-    BrowserCacheManager.prototype.setWrapperMetadata = function (wrapperSKU, wrapperVersion) {
-        this.internalStorage.setItem(InMemoryCacheKeys.WRAPPER_SKU, wrapperSKU);
-        this.internalStorage.setItem(InMemoryCacheKeys.WRAPPER_VER, wrapperVersion);
+    CryptoOps.prototype.base64Decode = function (input) {
+        return this.b64Decode.decode(input);
     };
     /**
-     * Returns wrapper metadata from in-memory storage
+     * Generates PKCE codes used in Authorization Code Flow.
      */
-    BrowserCacheManager.prototype.getWrapperMetadata = function () {
-        var sku = this.internalStorage.getItem(InMemoryCacheKeys.WRAPPER_SKU) || "";
-        var version = this.internalStorage.getItem(InMemoryCacheKeys.WRAPPER_VER) || "";
-        return [sku, version];
+    CryptoOps.prototype.generatePkceCodes = function () {
+        return __awaiter$1(this, void 0, void 0, function () {
+            return __generator$1(this, function (_a) {
+                return [2 /*return*/, this.pkceGenerator.generateCodes()];
+            });
+        });
     };
     /**
-     *
-     * @param entity
+     * Generates a keypair, stores it and returns a thumbprint
+     * @param request
      */
-    BrowserCacheManager.prototype.setAuthorityMetadata = function (key, entity) {
-        this.logger.trace("BrowserCacheManager.setAuthorityMetadata called");
-        this.internalStorage.setItem(key, JSON.stringify(entity));
+    CryptoOps.prototype.getPublicKeyThumbprint = function (request) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var keyPair, publicKeyJwk, pubKeyThumprintObj, publicJwkString, publicJwkBuffer, publicJwkHash, privateKeyJwk, unextractablePrivateKey;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.browserCrypto.generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES)];
+                    case 1:
+                        keyPair = _a.sent();
+                        return [4 /*yield*/, this.browserCrypto.exportJwk(keyPair.publicKey)];
+                    case 2:
+                        publicKeyJwk = _a.sent();
+                        pubKeyThumprintObj = {
+                            e: publicKeyJwk.e,
+                            kty: publicKeyJwk.kty,
+                            n: publicKeyJwk.n
+                        };
+                        publicJwkString = BrowserCrypto.getJwkString(pubKeyThumprintObj);
+                        return [4 /*yield*/, this.browserCrypto.sha256Digest(publicJwkString)];
+                    case 3:
+                        publicJwkBuffer = _a.sent();
+                        publicJwkHash = this.b64Encode.urlEncodeArr(new Uint8Array(publicJwkBuffer));
+                        return [4 /*yield*/, this.browserCrypto.exportJwk(keyPair.privateKey)];
+                    case 4:
+                        privateKeyJwk = _a.sent();
+                        return [4 /*yield*/, this.browserCrypto.importJwk(privateKeyJwk, false, ["sign"])];
+                    case 5:
+                        unextractablePrivateKey = _a.sent();
+                        // Store Keypair data in keystore
+                        return [4 /*yield*/, this.cache.asymmetricKeys.setItem(publicJwkHash, {
+                                privateKey: unextractablePrivateKey,
+                                publicKey: keyPair.publicKey,
+                                requestMethod: request.resourceRequestMethod,
+                                requestUri: request.resourceRequestUri
+                            })];
+                    case 6:
+                        // Store Keypair data in keystore
+                        _a.sent();
+                        return [2 /*return*/, publicJwkHash];
+                }
+            });
+        });
     };
     /**
-     * Gets the active account
+     * Removes cryptographic keypair from key store matching the keyId passed in
+     * @param kid
      */
-    BrowserCacheManager.prototype.getActiveAccount = function () {
-        var activeAccountIdKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
-        var activeAccountId = this.browserStorage.getItem(activeAccountIdKey);
-        if (!activeAccountId) {
-            return null;
-        }
-        return this.getAccountInfoByFilter({ localAccountId: activeAccountId })[0] || null;
+    CryptoOps.prototype.removeTokenBindingKey = function (kid) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var keyFound;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.cache.asymmetricKeys.removeItem(kid)];
+                    case 1:
+                        _a.sent();
+                        return [4 /*yield*/, this.cache.asymmetricKeys.containsKey(kid)];
+                    case 2:
+                        keyFound = _a.sent();
+                        return [2 /*return*/, !keyFound];
+                }
+            });
+        });
     };
     /**
-     * Sets the active account's localAccountId in cache
-     * @param account
+     * Removes all cryptographic keys from IndexedDB storage
      */
-    BrowserCacheManager.prototype.setActiveAccount = function (account) {
-        var activeAccountIdKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
-        if (account) {
-            this.logger.verbose("setActiveAccount: Active account set");
-            this.browserStorage.setItem(activeAccountIdKey, account.localAccountId);
-        }
-        else {
-            this.logger.verbose("setActiveAccount: No account passed, active account not set");
-            this.browserStorage.removeItem(activeAccountIdKey);
-        }
+    CryptoOps.prototype.clearKeystore = function () {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var dataStoreNames, databaseStorage, _a;
+            return __generator$1(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        dataStoreNames = Object.keys(this.cache);
+                        databaseStorage = this.cache[dataStoreNames[0]];
+                        if (!databaseStorage) return [3 /*break*/, 2];
+                        return [4 /*yield*/, databaseStorage.deleteDatabase()];
+                    case 1:
+                        _a = _b.sent();
+                        return [3 /*break*/, 3];
+                    case 2:
+                        _a = false;
+                        _b.label = 3;
+                    case 3: return [2 /*return*/, _a];
+                }
+            });
+        });
     };
     /**
-     * Gets a list of accounts that match all of the filters provided
-     * @param account
+     * Signs the given object as a jwt payload with private key retrieved by given kid.
+     * @param payload
+     * @param kid
      */
-    BrowserCacheManager.prototype.getAccountInfoByFilter = function (accountFilter) {
-        var allAccounts = this.getAllAccounts();
-        return allAccounts.filter(function (accountObj) {
-            if (accountFilter.username && accountFilter.username.toLowerCase() !== accountObj.username.toLowerCase()) {
-                return false;
-            }
-            if (accountFilter.homeAccountId && accountFilter.homeAccountId !== accountObj.homeAccountId) {
-                return false;
-            }
-            if (accountFilter.localAccountId && accountFilter.localAccountId !== accountObj.localAccountId) {
-                return false;
-            }
-            if (accountFilter.tenantId && accountFilter.tenantId !== accountObj.tenantId) {
-                return false;
-            }
-            if (accountFilter.environment && accountFilter.environment !== accountObj.environment) {
-                return false;
-            }
-            return true;
+    CryptoOps.prototype.signJwt = function (payload, kid) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var cachedKeyPair, publicKeyJwk, publicKeyJwkString, header, encodedHeader, encodedPayload, tokenString, tokenBuffer, signatureBuffer, encodedSignature;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.cache.asymmetricKeys.getItem(kid)];
+                    case 1:
+                        cachedKeyPair = _a.sent();
+                        if (!cachedKeyPair) {
+                            throw BrowserAuthError.createSigningKeyNotFoundInStorageError(kid);
+                        }
+                        return [4 /*yield*/, this.browserCrypto.exportJwk(cachedKeyPair.publicKey)];
+                    case 2:
+                        publicKeyJwk = _a.sent();
+                        publicKeyJwkString = BrowserCrypto.getJwkString(publicKeyJwk);
+                        header = {
+                            alg: publicKeyJwk.alg,
+                            type: KEY_FORMAT_JWK
+                        };
+                        encodedHeader = this.b64Encode.urlEncode(JSON.stringify(header));
+                        // Generate payload
+                        payload.cnf = {
+                            jwk: JSON.parse(publicKeyJwkString)
+                        };
+                        encodedPayload = this.b64Encode.urlEncode(JSON.stringify(payload));
+                        tokenString = encodedHeader + "." + encodedPayload;
+                        tokenBuffer = BrowserStringUtils.stringToArrayBuffer(tokenString);
+                        return [4 /*yield*/, this.browserCrypto.sign(cachedKeyPair.privateKey, tokenBuffer)];
+                    case 3:
+                        signatureBuffer = _a.sent();
+                        encodedSignature = this.b64Encode.urlEncodeArr(new Uint8Array(signatureBuffer));
+                        return [2 /*return*/, tokenString + "." + encodedSignature];
+                }
+            });
         });
     };
-    /**
-     * fetch throttling entity from the platform cache
-     * @param throttlingCacheKey
-     */
-    BrowserCacheManager.prototype.getThrottlingCache = function (throttlingCacheKey) {
-        var value = this.getItem(throttlingCacheKey);
-        if (!value) {
-            this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit");
-            return null;
+    CryptoOps.POP_KEY_USAGES = ["sign", "verify"];
+    CryptoOps.EXTRACTABLE = true;
+    return CryptoOps;
+}());
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+var BrowserStorage = /** @class */ (function () {
+    function BrowserStorage(cacheLocation) {
+        this.validateWindowStorage(cacheLocation);
+        this.windowStorage = window[cacheLocation];
+    }
+    BrowserStorage.prototype.validateWindowStorage = function (cacheLocation) {
+        if (cacheLocation !== exports.BrowserCacheLocation.LocalStorage && cacheLocation !== exports.BrowserCacheLocation.SessionStorage) {
+            throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);
         }
-        var parsedThrottlingCache = this.validateAndParseJson(value);
-        if (!parsedThrottlingCache || !ThrottlingEntity.isThrottlingEntity(throttlingCacheKey, parsedThrottlingCache)) {
-            this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit");
-            return null;
+        var storageSupported = !!window[cacheLocation];
+        if (!storageSupported) {
+            throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);
         }
-        this.logger.trace("BrowserCacheManager.getThrottlingCache: cache hit");
-        return CacheManager.toObject(new ThrottlingEntity(), parsedThrottlingCache);
     };
-    /**
-     * set throttling entity to the platform cache
-     * @param throttlingCacheKey
-     * @param throttlingCache
-     */
-    BrowserCacheManager.prototype.setThrottlingCache = function (throttlingCacheKey, throttlingCache) {
-        this.logger.trace("BrowserCacheManager.setThrottlingCache called");
-        this.setItem(throttlingCacheKey, JSON.stringify(throttlingCache));
+    BrowserStorage.prototype.getItem = function (key) {
+        return this.windowStorage.getItem(key);
+    };
+    BrowserStorage.prototype.setItem = function (key, value) {
+        this.windowStorage.setItem(key, value);
+    };
+    BrowserStorage.prototype.removeItem = function (key) {
+        this.windowStorage.removeItem(key);
+    };
+    BrowserStorage.prototype.getKeys = function () {
+        return Object.keys(this.windowStorage);
+    };
+    BrowserStorage.prototype.containsKey = function (key) {
+        return this.windowStorage.hasOwnProperty(key);
     };
+    return BrowserStorage;
+}());
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+var BrowserProtocolUtils = /** @class */ (function () {
+    function BrowserProtocolUtils() {
+    }
     /**
-     * Gets cache item with given key.
-     * Will retrieve from cookies if storeAuthStateInCookie is set to true.
-     * @param key
+     * Extracts the BrowserStateObject from the state string.
+     * @param browserCrypto
+     * @param state
      */
-    BrowserCacheManager.prototype.getTemporaryCache = function (cacheKey, generateKey) {
-        var key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
-        if (this.cacheConfig.storeAuthStateInCookie) {
-            var itemCookie = this.getItemCookie(key);
-            if (itemCookie) {
-                this.logger.trace("BrowserCacheManager.getTemporaryCache: storeAuthStateInCookies set to true, retrieving from cookies");
-                return itemCookie;
-            }
-        }
-        var value = this.temporaryCacheStorage.getItem(key);
-        if (!value) {
-            // If temp cache item not found in session/memory, check local storage for items set by old versions
-            if (this.cacheConfig.cacheLocation === exports.BrowserCacheLocation.LocalStorage) {
-                var item = this.browserStorage.getItem(key);
-                if (item) {
-                    this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item found in local storage");
-                    return item;
-                }
-            }
-            this.logger.trace("BrowserCacheManager.getTemporaryCache: No cache item found in local storage");
+    BrowserProtocolUtils.extractBrowserRequestState = function (browserCrypto, state) {
+        if (StringUtils.isEmpty(state)) {
             return null;
         }
-        this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item returned");
-        return value;
+        try {
+            var requestStateObj = ProtocolUtils.parseRequestState(browserCrypto, state);
+            return requestStateObj.libraryState.meta;
+        }
+        catch (e) {
+            throw ClientAuthError.createInvalidStateError(state, e);
+        }
     };
     /**
-     * Sets the cache item with the key and value given.
-     * Stores in cookie if storeAuthStateInCookie is set to true.
-     * This can cause cookie overflow if used incorrectly.
-     * @param key
-     * @param value
+     * Parses properties of server response from url hash
+     * @param locationHash Hash from url
      */
-    BrowserCacheManager.prototype.setTemporaryCache = function (cacheKey, value, generateKey) {
-        var key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
-        this.temporaryCacheStorage.setItem(key, value);
-        if (this.cacheConfig.storeAuthStateInCookie) {
-            this.logger.trace("BrowserCacheManager.setTemporaryCache: storeAuthStateInCookie set to true, setting item cookie");
-            this.setItemCookie(key, value);
+    BrowserProtocolUtils.parseServerResponseFromHash = function (locationHash) {
+        if (!locationHash) {
+            return {};
         }
+        var hashUrlString = new UrlString(locationHash);
+        return UrlString.getDeserializedHash(hashUrlString.getHash());
     };
+    return BrowserProtocolUtils;
+}());
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * This class implements the cache storage interface for MSAL through browser local or session storage.
+ * Cookies are only used if storeAuthStateInCookie is true, and are only used for
+ * parameters such as state and nonce, generally.
+ */
+var BrowserCacheManager = /** @class */ (function (_super) {
+    __extends$1(BrowserCacheManager, _super);
+    function BrowserCacheManager(clientId, cacheConfig, cryptoImpl, logger) {
+        var _this = _super.call(this, clientId, cryptoImpl) || this;
+        // Cookie life calculation (hours * minutes * seconds * ms)
+        _this.COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
+        _this.cacheConfig = cacheConfig;
+        _this.logger = logger;
+        _this.internalStorage = new MemoryStorage();
+        _this.browserStorage = _this.setupBrowserStorage(_this.cacheConfig.cacheLocation);
+        _this.temporaryCacheStorage = _this.setupTemporaryCacheStorage(_this.cacheConfig.cacheLocation);
+        // Migrate any cache entries from older versions of MSAL.
+        _this.migrateCacheEntries();
+        return _this;
+    }
     /**
-     * Removes the cache item with the given key.
-     * Will also clear the cookie item if storeAuthStateInCookie is set to true.
-     * @param key
+     * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
+     * @param cacheLocation
      */
-    BrowserCacheManager.prototype.removeItem = function (key) {
-        this.browserStorage.removeItem(key);
-        this.temporaryCacheStorage.removeItem(key);
-        if (this.cacheConfig.storeAuthStateInCookie) {
-            this.logger.trace("BrowserCacheManager.removeItem: storeAuthStateInCookie is true, clearing item cookie");
-            this.clearItemCookie(key);
+    BrowserCacheManager.prototype.setupBrowserStorage = function (cacheLocation) {
+        switch (cacheLocation) {
+            case exports.BrowserCacheLocation.LocalStorage:
+            case exports.BrowserCacheLocation.SessionStorage:
+                try {
+                    // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
+                    return new BrowserStorage(cacheLocation);
+                }
+                catch (e) {
+                    this.logger.verbose(e);
+                    break;
+                }
+            case exports.BrowserCacheLocation.MemoryStorage:
         }
-        return true;
+        this.cacheConfig.cacheLocation = exports.BrowserCacheLocation.MemoryStorage;
+        return new MemoryStorage();
     };
     /**
-     * Checks whether key is in cache.
-     * @param key
+     *
+     * @param cacheLocation
      */
-    BrowserCacheManager.prototype.containsKey = function (key) {
-        return this.browserStorage.containsKey(key) || this.temporaryCacheStorage.containsKey(key);
+    BrowserCacheManager.prototype.setupTemporaryCacheStorage = function (cacheLocation) {
+        switch (cacheLocation) {
+            case exports.BrowserCacheLocation.LocalStorage:
+            case exports.BrowserCacheLocation.SessionStorage:
+                try {
+                    // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
+                    return new BrowserStorage(exports.BrowserCacheLocation.SessionStorage);
+                }
+                catch (e) {
+                    this.logger.verbose(e);
+                    return this.internalStorage;
+                }
+            case exports.BrowserCacheLocation.MemoryStorage:
+            default:
+                return this.internalStorage;
+        }
     };
     /**
-     * Gets all keys in window.
+     * Migrate all old cache entries to new schema. No rollback supported.
+     * @param storeAuthStateInCookie
      */
-    BrowserCacheManager.prototype.getKeys = function () {
-        return __spread(this.browserStorage.getKeys(), this.temporaryCacheStorage.getKeys());
+    BrowserCacheManager.prototype.migrateCacheEntries = function () {
+        var _this = this;
+        var idTokenKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ID_TOKEN;
+        var clientInfoKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.CLIENT_INFO;
+        var errorKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ERROR;
+        var errorDescKey = Constants.CACHE_PREFIX + "." + PersistentCacheKeys.ERROR_DESC;
+        var idTokenValue = this.browserStorage.getItem(idTokenKey);
+        var clientInfoValue = this.browserStorage.getItem(clientInfoKey);
+        var errorValue = this.browserStorage.getItem(errorKey);
+        var errorDescValue = this.browserStorage.getItem(errorDescKey);
+        var values = [idTokenValue, clientInfoValue, errorValue, errorDescValue];
+        var keysToMigrate = [PersistentCacheKeys.ID_TOKEN, PersistentCacheKeys.CLIENT_INFO, PersistentCacheKeys.ERROR, PersistentCacheKeys.ERROR_DESC];
+        keysToMigrate.forEach(function (cacheKey, index) { return _this.migrateCacheEntry(cacheKey, values[index]); });
     };
     /**
-     * Clears all cache entries created by MSAL.
+     * Utility function to help with migration.
+     * @param newKey
+     * @param value
+     * @param storeAuthStateInCookie
      */
-    BrowserCacheManager.prototype.clear = function () {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var _this = this;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: 
-                    // Removes all accounts and their credentials
-                    return [4 /*yield*/, this.removeAllAccounts()];
-                    case 1:
-                        // Removes all accounts and their credentials
-                        _a.sent();
-                        this.removeAppMetadata();
-                        // Removes all remaining MSAL cache items
-                        this.getKeys().forEach(function (cacheKey) {
-                            // Check if key contains msal prefix; For now, we are clearing all the cache items created by MSAL.js
-                            if ((_this.browserStorage.containsKey(cacheKey) || _this.temporaryCacheStorage.containsKey(cacheKey)) && ((cacheKey.indexOf(Constants.CACHE_PREFIX) !== -1) || (cacheKey.indexOf(_this.clientId) !== -1))) {
-                                _this.removeItem(cacheKey);
-                            }
-                        });
-                        this.internalStorage.clear();
-                        return [2 /*return*/];
-                }
-            });
-        });
+    BrowserCacheManager.prototype.migrateCacheEntry = function (newKey, value) {
+        if (value) {
+            this.setTemporaryCache(newKey, value, true);
+        }
     };
     /**
-     * Add value to cookies
-     * @param cookieName
-     * @param cookieValue
-     * @param expires
+     * Parses passed value as JSON object, JSON.parse() will throw an error.
+     * @param input
      */
-    BrowserCacheManager.prototype.setItemCookie = function (cookieName, cookieValue, expires) {
-        var cookieStr = encodeURIComponent(cookieName) + "=" + encodeURIComponent(cookieValue) + ";path=/;";
-        if (expires) {
-            var expireTime = this.getCookieExpirationTime(expires);
-            cookieStr += "expires=" + expireTime + ";";
+    BrowserCacheManager.prototype.validateAndParseJson = function (jsonValue) {
+        try {
+            var parsedJson = JSON.parse(jsonValue);
+            /**
+             * There are edge cases in which JSON.parse will successfully parse a non-valid JSON object
+             * (e.g. JSON.parse will parse an escaped string into an unescaped string), so adding a type check
+             * of the parsed value is necessary in order to be certain that the string represents a valid JSON object.
+             *
+             */
+            return (parsedJson && typeof parsedJson === "object") ? parsedJson : null;
         }
-        if (this.cacheConfig.secureCookies) {
-            cookieStr += "Secure;";
+        catch (error) {
+            return null;
         }
-        document.cookie = cookieStr;
     };
     /**
-     * Get one item by key from cookies
-     * @param cookieName
+     * fetches the entry from the browser storage based off the key
+     * @param key
      */
-    BrowserCacheManager.prototype.getItemCookie = function (cookieName) {
-        var name = encodeURIComponent(cookieName) + "=";
-        var cookieList = document.cookie.split(";");
-        for (var i = 0; i < cookieList.length; i++) {
-            var cookie = cookieList[i];
-            while (cookie.charAt(0) === " ") {
-                cookie = cookie.substring(1);
-            }
-            if (cookie.indexOf(name) === 0) {
-                return decodeURIComponent(cookie.substring(name.length, cookie.length));
-            }
-        }
-        return "";
+    BrowserCacheManager.prototype.getItem = function (key) {
+        return this.browserStorage.getItem(key);
     };
     /**
-     * Clear all msal-related cookies currently set in the browser. Should only be used to clear temporary cache items.
+     * sets the entry in the browser storage
+     * @param key
+     * @param value
      */
-    BrowserCacheManager.prototype.clearMsalCookies = function () {
-        var _this = this;
-        var cookiePrefix = Constants.CACHE_PREFIX + "." + this.clientId;
-        var cookieList = document.cookie.split(";");
-        cookieList.forEach(function (cookie) {
-            while (cookie.charAt(0) === " ") {
-                // eslint-disable-next-line no-param-reassign
-                cookie = cookie.substring(1);
-            }
-            if (cookie.indexOf(cookiePrefix) === 0) {
-                var cookieKey = cookie.split("=")[0];
-                _this.clearItemCookie(cookieKey);
-            }
-        });
+    BrowserCacheManager.prototype.setItem = function (key, value) {
+        this.browserStorage.setItem(key, value);
     };
     /**
-     * Clear an item in the cookies by key
-     * @param cookieName
+     * fetch the account entity from the platform cache
+     * @param accountKey
      */
-    BrowserCacheManager.prototype.clearItemCookie = function (cookieName) {
-        this.setItemCookie(cookieName, "", -1);
+    BrowserCacheManager.prototype.getAccount = function (accountKey) {
+        var account = this.getItem(accountKey);
+        if (!account) {
+            return null;
+        }
+        var parsedAccount = this.validateAndParseJson(account);
+        if (!parsedAccount || !AccountEntity.isAccountEntity(parsedAccount)) {
+            return null;
+        }
+        return CacheManager.toObject(new AccountEntity(), parsedAccount);
     };
     /**
-     * Get cookie expiration time
-     * @param cookieLifeDays
+     * set account entity in the platform cache
+     * @param key
+     * @param value
      */
-    BrowserCacheManager.prototype.getCookieExpirationTime = function (cookieLifeDays) {
-        var today = new Date();
-        var expr = new Date(today.getTime() + cookieLifeDays * this.COOKIE_LIFE_MULTIPLIER);
-        return expr.toUTCString();
+    BrowserCacheManager.prototype.setAccount = function (account) {
+        this.logger.trace("BrowserCacheManager.setAccount called");
+        var key = account.generateAccountKey();
+        this.setItem(key, JSON.stringify(account));
     };
     /**
-     * Gets the cache object referenced by the browser
+     * generates idToken entity from a string
+     * @param idTokenKey
      */
-    BrowserCacheManager.prototype.getCache = function () {
-        return this.browserStorage;
+    BrowserCacheManager.prototype.getIdTokenCredential = function (idTokenKey) {
+        var value = this.getItem(idTokenKey);
+        if (!value) {
+            this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit");
+            return null;
+        }
+        var parsedIdToken = this.validateAndParseJson(value);
+        if (!parsedIdToken || !IdTokenEntity.isIdTokenEntity(parsedIdToken)) {
+            this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit");
+            return null;
+        }
+        this.logger.trace("BrowserCacheManager.getIdTokenCredential: cache hit");
+        return CacheManager.toObject(new IdTokenEntity(), parsedIdToken);
     };
     /**
-     * interface compat, we cannot overwrite browser cache; Functionality is supported by individual entities in browser
+     * set IdToken credential to the platform cache
+     * @param idToken
      */
-    BrowserCacheManager.prototype.setCache = function () {
-        // sets nothing
+    BrowserCacheManager.prototype.setIdTokenCredential = function (idToken) {
+        this.logger.trace("BrowserCacheManager.setIdTokenCredential called");
+        var idTokenKey = idToken.generateCredentialKey();
+        this.setItem(idTokenKey, JSON.stringify(idToken));
     };
     /**
-     * Prepend msal.<client-id> to each key; Skip for any JSON object as Key (defined schemas do not need the key appended: AccessToken Keys or the upcoming schema)
+     * generates accessToken entity from a string
      * @param key
-     * @param addInstanceId
      */
-    BrowserCacheManager.prototype.generateCacheKey = function (key) {
-        var generatedKey = this.validateAndParseJson(key);
-        if (!generatedKey) {
-            if (StringUtils.startsWith(key, Constants.CACHE_PREFIX) || StringUtils.startsWith(key, PersistentCacheKeys.ADAL_ID_TOKEN)) {
-                return key;
-            }
-            return Constants.CACHE_PREFIX + "." + this.clientId + "." + key;
+    BrowserCacheManager.prototype.getAccessTokenCredential = function (accessTokenKey) {
+        var value = this.getItem(accessTokenKey);
+        if (!value) {
+            this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit");
+            return null;
         }
-        return JSON.stringify(key);
+        var parsedAccessToken = this.validateAndParseJson(value);
+        if (!parsedAccessToken || !AccessTokenEntity.isAccessTokenEntity(parsedAccessToken)) {
+            this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit");
+            return null;
+        }
+        this.logger.trace("BrowserCacheManager.getAccessTokenCredential: cache hit");
+        return CacheManager.toObject(new AccessTokenEntity(), parsedAccessToken);
     };
     /**
-     * Create authorityKey to cache authority
-     * @param state
+     * set accessToken credential to the platform cache
+     * @param accessToken
      */
-    BrowserCacheManager.prototype.generateAuthorityKey = function (stateString) {
-        var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-        return this.generateCacheKey(TemporaryCacheKeys.AUTHORITY + "." + stateId);
+    BrowserCacheManager.prototype.setAccessTokenCredential = function (accessToken) {
+        this.logger.trace("BrowserCacheManager.setAccessTokenCredential called");
+        var accessTokenKey = accessToken.generateCredentialKey();
+        this.setItem(accessTokenKey, JSON.stringify(accessToken));
     };
     /**
-     * Create Nonce key to cache nonce
-     * @param state
+     * generates refreshToken entity from a string
+     * @param refreshTokenKey
      */
-    BrowserCacheManager.prototype.generateNonceKey = function (stateString) {
-        var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-        return this.generateCacheKey(TemporaryCacheKeys.NONCE_IDTOKEN + "." + stateId);
+    BrowserCacheManager.prototype.getRefreshTokenCredential = function (refreshTokenKey) {
+        var value = this.getItem(refreshTokenKey);
+        if (!value) {
+            this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit");
+            return null;
+        }
+        var parsedRefreshToken = this.validateAndParseJson(value);
+        if (!parsedRefreshToken || !RefreshTokenEntity.isRefreshTokenEntity(parsedRefreshToken)) {
+            this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit");
+            return null;
+        }
+        this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: cache hit");
+        return CacheManager.toObject(new RefreshTokenEntity(), parsedRefreshToken);
     };
     /**
-     * Creates full cache key for the request state
-     * @param stateString State string for the request
+     * set refreshToken credential to the platform cache
+     * @param refreshToken
      */
-    BrowserCacheManager.prototype.generateStateKey = function (stateString) {
-        // Use the library state id to key temp storage for uniqueness for multiple concurrent requests
-        var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-        return this.generateCacheKey(TemporaryCacheKeys.REQUEST_STATE + "." + stateId);
+    BrowserCacheManager.prototype.setRefreshTokenCredential = function (refreshToken) {
+        this.logger.trace("BrowserCacheManager.setRefreshTokenCredential called");
+        var refreshTokenKey = refreshToken.generateCredentialKey();
+        this.setItem(refreshTokenKey, JSON.stringify(refreshToken));
     };
     /**
-     * Gets the cached authority based on the cached state. Returns empty if no cached state found.
+     * fetch appMetadata entity from the platform cache
+     * @param appMetadataKey
      */
-    BrowserCacheManager.prototype.getCachedAuthority = function (cachedState) {
-        var stateCacheKey = this.generateStateKey(cachedState);
-        var state = this.getTemporaryCache(stateCacheKey);
-        if (!state) {
+    BrowserCacheManager.prototype.getAppMetadata = function (appMetadataKey) {
+        var value = this.getItem(appMetadataKey);
+        if (!value) {
+            this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit");
             return null;
         }
-        var authorityCacheKey = this.generateAuthorityKey(state);
-        return this.getTemporaryCache(authorityCacheKey);
+        var parsedMetadata = this.validateAndParseJson(value);
+        if (!parsedMetadata || !AppMetadataEntity.isAppMetadataEntity(appMetadataKey, parsedMetadata)) {
+            this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit");
+            return null;
+        }
+        this.logger.trace("BrowserCacheManager.getAppMetadata: cache hit");
+        return CacheManager.toObject(new AppMetadataEntity(), parsedMetadata);
     };
     /**
-     * Updates account, authority, and state in cache
-     * @param serverAuthenticationRequest
-     * @param account
+     * set appMetadata entity to the platform cache
+     * @param appMetadata
      */
-    BrowserCacheManager.prototype.updateCacheEntries = function (state, nonce, authorityInstance, loginHint, account) {
-        this.logger.trace("BrowserCacheManager.updateCacheEntries called");
-        // Cache the request state
-        var stateCacheKey = this.generateStateKey(state);
-        this.setTemporaryCache(stateCacheKey, state, false);
-        // Cache the nonce
-        var nonceCacheKey = this.generateNonceKey(state);
-        this.setTemporaryCache(nonceCacheKey, nonce, false);
-        // Cache authorityKey
-        var authorityCacheKey = this.generateAuthorityKey(state);
-        this.setTemporaryCache(authorityCacheKey, authorityInstance, false);
-        if (account) {
-            var ccsCredential = {
-                credential: account.homeAccountId,
-                type: CcsCredentialType.HOME_ACCOUNT_ID
-            };
-            this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
-        }
-        else if (!StringUtils.isEmpty(loginHint)) {
-            var ccsCredential = {
-                credential: loginHint,
-                type: CcsCredentialType.UPN
-            };
-            this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
-        }
+    BrowserCacheManager.prototype.setAppMetadata = function (appMetadata) {
+        this.logger.trace("BrowserCacheManager.setAppMetadata called");
+        var appMetadataKey = appMetadata.generateAppMetadataKey();
+        this.setItem(appMetadataKey, JSON.stringify(appMetadata));
     };
     /**
-     * Reset all temporary cache items
-     * @param state
+     * fetch server telemetry entity from the platform cache
+     * @param serverTelemetryKey
      */
-    BrowserCacheManager.prototype.resetRequestCache = function (state) {
-        var _this = this;
-        this.logger.trace("BrowserCacheManager.resetRequestCache called");
-        // check state and remove associated cache items
-        if (!StringUtils.isEmpty(state)) {
-            this.getKeys().forEach(function (key) {
-                if (key.indexOf(state) !== -1) {
-                    _this.removeItem(key);
-                }
-            });
+    BrowserCacheManager.prototype.getServerTelemetry = function (serverTelemetryKey) {
+        var value = this.getItem(serverTelemetryKey);
+        if (!value) {
+            this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit");
+            return null;
         }
-        // delete generic interactive request parameters
-        if (state) {
-            this.removeItem(this.generateStateKey(state));
-            this.removeItem(this.generateNonceKey(state));
-            this.removeItem(this.generateAuthorityKey(state));
+        var parsedMetadata = this.validateAndParseJson(value);
+        if (!parsedMetadata || !ServerTelemetryEntity.isServerTelemetryEntity(serverTelemetryKey, parsedMetadata)) {
+            this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit");
+            return null;
         }
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.ORIGIN_URI));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.URL_HASH));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CORRELATION_ID));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CCS_CREDENTIAL));
-        this.setInteractionInProgress(false);
+        this.logger.trace("BrowserCacheManager.getServerTelemetry: cache hit");
+        return CacheManager.toObject(new ServerTelemetryEntity(), parsedMetadata);
     };
     /**
-     * Removes temporary cache for the provided state
-     * @param stateString
+     * set server telemetry entity to the platform cache
+     * @param serverTelemetryKey
+     * @param serverTelemetry
      */
-    BrowserCacheManager.prototype.cleanRequestByState = function (stateString) {
-        this.logger.trace("BrowserCacheManager.cleanRequestByState called");
-        // Interaction is completed - remove interaction status.
-        if (stateString) {
-            var stateKey = this.generateStateKey(stateString);
-            var cachedState = this.temporaryCacheStorage.getItem(stateKey);
-            this.logger.infoPii("BrowserCacheManager.cleanRequestByState: Removing temporary cache items for state: " + cachedState);
-            this.resetRequestCache(cachedState || "");
+    BrowserCacheManager.prototype.setServerTelemetry = function (serverTelemetryKey, serverTelemetry) {
+        this.logger.trace("BrowserCacheManager.setServerTelemetry called");
+        this.setItem(serverTelemetryKey, JSON.stringify(serverTelemetry));
+    };
+    /**
+     *
+     */
+    BrowserCacheManager.prototype.getAuthorityMetadata = function (key) {
+        var value = this.internalStorage.getItem(key);
+        if (!value) {
+            this.logger.trace("BrowserCacheManager.getAuthorityMetadata: called, no cache hit");
+            return null;
         }
-        this.clearMsalCookies();
+        var parsedMetadata = this.validateAndParseJson(value);
+        if (parsedMetadata && AuthorityMetadataEntity.isAuthorityMetadataEntity(key, parsedMetadata)) {
+            this.logger.trace("BrowserCacheManager.getAuthorityMetadata: cache hit");
+            return CacheManager.toObject(new AuthorityMetadataEntity(), parsedMetadata);
+        }
+        return null;
     };
     /**
-     * Looks in temporary cache for any state values with the provided interactionType and removes all temporary cache items for that state
-     * Used in scenarios where temp cache needs to be cleaned but state is not known, such as clicking browser back button.
-     * @param interactionType
+     *
      */
-    BrowserCacheManager.prototype.cleanRequestByInteractionType = function (interactionType) {
+    BrowserCacheManager.prototype.getAuthorityMetadataKeys = function () {
         var _this = this;
-        this.logger.trace("BrowserCacheManager.cleanRequestByInteractionType called");
-        // Loop through all keys to find state key
-        this.getKeys().forEach(function (key) {
-            // If this key is not the state key, move on
-            if (key.indexOf(TemporaryCacheKeys.REQUEST_STATE) === -1) {
-                return;
-            }
-            // Retrieve state value, return if not a valid value
-            var stateValue = _this.temporaryCacheStorage.getItem(key);
-            if (!stateValue) {
-                return;
-            }
-            // Extract state and ensure it matches given InteractionType, then clean request cache
-            var parsedState = BrowserProtocolUtils.extractBrowserRequestState(_this.cryptoImpl, stateValue);
-            if (parsedState && parsedState.interactionType === interactionType) {
-                _this.logger.infoPii("BrowserCacheManager.cleanRequestByInteractionType: Removing temporary cache items for state: " + stateValue);
-                _this.resetRequestCache(stateValue);
-            }
+        var allKeys = this.internalStorage.getKeys();
+        return allKeys.filter(function (key) {
+            return _this.isAuthorityMetadata(key);
         });
-        this.clearMsalCookies();
-    };
-    BrowserCacheManager.prototype.cacheCodeRequest = function (authCodeRequest, browserCrypto) {
-        this.logger.trace("BrowserCacheManager.cacheCodeRequest called");
-        var encodedValue = browserCrypto.base64Encode(JSON.stringify(authCodeRequest));
-        this.setTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, encodedValue, true);
     };
     /**
-     * Gets the token exchange parameters from the cache. Throws an error if nothing is found.
+     * Sets wrapper metadata in memory
+     * @param wrapperSKU
+     * @param wrapperVersion
      */
-    BrowserCacheManager.prototype.getCachedRequest = function (state, browserCrypto) {
-        this.logger.trace("BrowserCacheManager.getCachedRequest called");
-        // Get token request from cache and parse as TokenExchangeParameters.
-        var encodedTokenRequest = this.getTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, true);
-        if (!encodedTokenRequest) {
-            throw BrowserAuthError.createNoTokenRequestCacheError();
-        }
-        var parsedRequest = this.validateAndParseJson(browserCrypto.base64Decode(encodedTokenRequest));
-        if (!parsedRequest) {
-            throw BrowserAuthError.createUnableToParseTokenRequestCacheError();
-        }
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
-        // Get cached authority and use if no authority is cached with request.
-        if (StringUtils.isEmpty(parsedRequest.authority)) {
-            var authorityCacheKey = this.generateAuthorityKey(state);
-            var cachedAuthority = this.getTemporaryCache(authorityCacheKey);
-            if (!cachedAuthority) {
-                throw BrowserAuthError.createNoCachedAuthorityError();
-            }
-            parsedRequest.authority = cachedAuthority;
-        }
-        return parsedRequest;
+    BrowserCacheManager.prototype.setWrapperMetadata = function (wrapperSKU, wrapperVersion) {
+        this.internalStorage.setItem(InMemoryCacheKeys.WRAPPER_SKU, wrapperSKU);
+        this.internalStorage.setItem(InMemoryCacheKeys.WRAPPER_VER, wrapperVersion);
     };
-    BrowserCacheManager.prototype.isInteractionInProgress = function (matchClientId) {
-        var clientId = this.getInteractionInProgress();
-        if (matchClientId) {
-            return clientId === this.clientId;
-        }
-        else {
-            return !!clientId;
-        }
+    /**
+     * Returns wrapper metadata from in-memory storage
+     */
+    BrowserCacheManager.prototype.getWrapperMetadata = function () {
+        var sku = this.internalStorage.getItem(InMemoryCacheKeys.WRAPPER_SKU) || "";
+        var version = this.internalStorage.getItem(InMemoryCacheKeys.WRAPPER_VER) || "";
+        return [sku, version];
     };
-    BrowserCacheManager.prototype.getInteractionInProgress = function () {
-        var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
-        return this.getTemporaryCache(key, false);
+    /**
+     *
+     * @param entity
+     */
+    BrowserCacheManager.prototype.setAuthorityMetadata = function (key, entity) {
+        this.logger.trace("BrowserCacheManager.setAuthorityMetadata called");
+        this.internalStorage.setItem(key, JSON.stringify(entity));
     };
-    BrowserCacheManager.prototype.setInteractionInProgress = function (inProgress) {
-        var clientId = this.getInteractionInProgress();
-        // Ensure we don't overwrite interaction in progress for a different clientId
-        var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
-        if (inProgress && !clientId) {
-            // No interaction is in progress
-            this.setTemporaryCache(key, this.clientId, false);
-        }
-        else if (!inProgress && clientId === this.clientId) {
-            this.removeItem(key);
+    /**
+     * Gets the active account
+     */
+    BrowserCacheManager.prototype.getActiveAccount = function () {
+        var activeAccountIdKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
+        var activeAccountId = this.browserStorage.getItem(activeAccountIdKey);
+        if (!activeAccountId) {
+            return null;
         }
+        return this.getAccountInfoByFilter({ localAccountId: activeAccountId })[0] || null;
     };
     /**
-     * Returns username retrieved from ADAL or MSAL v1 idToken
+     * Sets the active account's localAccountId in cache
+     * @param account
      */
-    BrowserCacheManager.prototype.getLegacyLoginHint = function () {
-        // Only check for adal/msal token if no SSO params are being used
-        var adalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ADAL_ID_TOKEN);
-        if (adalIdTokenString) {
-            this.browserStorage.removeItem(PersistentCacheKeys.ADAL_ID_TOKEN);
-            this.logger.verbose("Cached ADAL id token retrieved.");
+    BrowserCacheManager.prototype.setActiveAccount = function (account) {
+        var activeAccountIdKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
+        if (account) {
+            this.logger.verbose("setActiveAccount: Active account set");
+            this.browserStorage.setItem(activeAccountIdKey, account.localAccountId);
         }
-        // Check for cached MSAL v1 id token
-        var msalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ID_TOKEN, true);
-        if (msalIdTokenString) {
-            this.removeItem(this.generateCacheKey(PersistentCacheKeys.ID_TOKEN));
-            this.logger.verbose("Cached MSAL.js v1 id token retrieved");
+        else {
+            this.logger.verbose("setActiveAccount: No account passed, active account not set");
+            this.browserStorage.removeItem(activeAccountIdKey);
         }
-        var cachedIdTokenString = msalIdTokenString || adalIdTokenString;
-        if (cachedIdTokenString) {
-            var cachedIdToken = new AuthToken(cachedIdTokenString, this.cryptoImpl);
-            if (cachedIdToken.claims && cachedIdToken.claims.preferred_username) {
-                this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 preferred_username as loginHint");
-                return cachedIdToken.claims.preferred_username;
+    };
+    /**
+     * Gets a list of accounts that match all of the filters provided
+     * @param account
+     */
+    BrowserCacheManager.prototype.getAccountInfoByFilter = function (accountFilter) {
+        var allAccounts = this.getAllAccounts();
+        return allAccounts.filter(function (accountObj) {
+            if (accountFilter.username && accountFilter.username.toLowerCase() !== accountObj.username.toLowerCase()) {
+                return false;
             }
-            else if (cachedIdToken.claims && cachedIdToken.claims.upn) {
-                this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 upn as loginHint");
-                return cachedIdToken.claims.upn;
+            if (accountFilter.homeAccountId && accountFilter.homeAccountId !== accountObj.homeAccountId) {
+                return false;
             }
-            else {
-                this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, however, no account hint claim found. Enable preferred_username or upn id token claim to get SSO.");
+            if (accountFilter.localAccountId && accountFilter.localAccountId !== accountObj.localAccountId) {
+                return false;
             }
-        }
-        return null;
+            if (accountFilter.tenantId && accountFilter.tenantId !== accountObj.tenantId) {
+                return false;
+            }
+            if (accountFilter.environment && accountFilter.environment !== accountObj.environment) {
+                return false;
+            }
+            return true;
+        });
     };
-    return BrowserCacheManager;
-}(CacheManager));
-var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
-    var cacheOptions = {
-        cacheLocation: exports.BrowserCacheLocation.MemoryStorage,
-        storeAuthStateInCookie: false,
-        secureCookies: false
+    /**
+     * fetch throttling entity from the platform cache
+     * @param throttlingCacheKey
+     */
+    BrowserCacheManager.prototype.getThrottlingCache = function (throttlingCacheKey) {
+        var value = this.getItem(throttlingCacheKey);
+        if (!value) {
+            this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit");
+            return null;
+        }
+        var parsedThrottlingCache = this.validateAndParseJson(value);
+        if (!parsedThrottlingCache || !ThrottlingEntity.isThrottlingEntity(throttlingCacheKey, parsedThrottlingCache)) {
+            this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit");
+            return null;
+        }
+        this.logger.trace("BrowserCacheManager.getThrottlingCache: cache hit");
+        return CacheManager.toObject(new ThrottlingEntity(), parsedThrottlingCache);
     };
-    return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger);
-};
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * This class implements the Fetch API for GET and POST requests. See more here: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API
- */
-var FetchClient = /** @class */ (function () {
-    function FetchClient() {
-    }
     /**
-     * Fetch Client for REST endpoints - Get request
-     * @param url
-     * @param headers
-     * @param body
+     * set throttling entity to the platform cache
+     * @param throttlingCacheKey
+     * @param throttlingCache
      */
-    FetchClient.prototype.sendGetRequestAsync = function (url, options) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var response, e_1, _a;
-            return __generator$1(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        _b.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, fetch(url, {
-                                method: HTTP_REQUEST_TYPE.GET,
-                                headers: this.getFetchHeaders(options)
-                            })];
-                    case 1:
-                        response = _b.sent();
-                        return [3 /*break*/, 3];
-                    case 2:
-                        e_1 = _b.sent();
-                        if (window.navigator.onLine) {
-                            throw BrowserAuthError.createGetRequestFailedError(e_1, url);
-                        }
-                        else {
-                            throw BrowserAuthError.createNoNetworkConnectivityError();
-                        }
-                    case 3:
-                        _b.trys.push([3, 5, , 6]);
-                        _a = {
-                            headers: this.getHeaderDict(response.headers)
-                        };
-                        return [4 /*yield*/, response.json()];
-                    case 4: return [2 /*return*/, (_a.body = (_b.sent()),
-                            _a.status = response.status,
-                            _a)];
-                    case 5:
-                        _b.sent();
-                        throw BrowserAuthError.createFailedToParseNetworkResponseError(url);
-                    case 6: return [2 /*return*/];
-                }
-            });
-        });
+    BrowserCacheManager.prototype.setThrottlingCache = function (throttlingCacheKey, throttlingCache) {
+        this.logger.trace("BrowserCacheManager.setThrottlingCache called");
+        this.setItem(throttlingCacheKey, JSON.stringify(throttlingCache));
     };
     /**
-     * Fetch Client for REST endpoints - Post request
-     * @param url
-     * @param headers
-     * @param body
+     * Gets cache item with given key.
+     * Will retrieve from cookies if storeAuthStateInCookie is set to true.
+     * @param key
      */
-    FetchClient.prototype.sendPostRequestAsync = function (url, options) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var reqBody, response, e_3, _a;
-            return __generator$1(this, function (_b) {
-                switch (_b.label) {
-                    case 0:
-                        reqBody = (options && options.body) || "";
-                        _b.label = 1;
-                    case 1:
-                        _b.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, fetch(url, {
-                                method: HTTP_REQUEST_TYPE.POST,
-                                headers: this.getFetchHeaders(options),
-                                body: reqBody
-                            })];
-                    case 2:
-                        response = _b.sent();
-                        return [3 /*break*/, 4];
-                    case 3:
-                        e_3 = _b.sent();
-                        if (window.navigator.onLine) {
-                            throw BrowserAuthError.createPostRequestFailedError(e_3, url);
-                        }
-                        else {
-                            throw BrowserAuthError.createNoNetworkConnectivityError();
-                        }
-                    case 4:
-                        _b.trys.push([4, 6, , 7]);
-                        _a = {
-                            headers: this.getHeaderDict(response.headers)
-                        };
-                        return [4 /*yield*/, response.json()];
-                    case 5: return [2 /*return*/, (_a.body = (_b.sent()),
-                            _a.status = response.status,
-                            _a)];
-                    case 6:
-                        _b.sent();
-                        throw BrowserAuthError.createFailedToParseNetworkResponseError(url);
-                    case 7: return [2 /*return*/];
+    BrowserCacheManager.prototype.getTemporaryCache = function (cacheKey, generateKey) {
+        var key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
+        if (this.cacheConfig.storeAuthStateInCookie) {
+            var itemCookie = this.getItemCookie(key);
+            if (itemCookie) {
+                this.logger.trace("BrowserCacheManager.getTemporaryCache: storeAuthStateInCookies set to true, retrieving from cookies");
+                return itemCookie;
+            }
+        }
+        var value = this.temporaryCacheStorage.getItem(key);
+        if (!value) {
+            // If temp cache item not found in session/memory, check local storage for items set by old versions
+            if (this.cacheConfig.cacheLocation === exports.BrowserCacheLocation.LocalStorage) {
+                var item = this.browserStorage.getItem(key);
+                if (item) {
+                    this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item found in local storage");
+                    return item;
                 }
-            });
-        });
+            }
+            this.logger.trace("BrowserCacheManager.getTemporaryCache: No cache item found in local storage");
+            return null;
+        }
+        this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item returned");
+        return value;
     };
     /**
-     * Get Fetch API Headers object from string map
-     * @param inputHeaders
+     * Sets the cache item with the key and value given.
+     * Stores in cookie if storeAuthStateInCookie is set to true.
+     * This can cause cookie overflow if used incorrectly.
+     * @param key
+     * @param value
      */
-    FetchClient.prototype.getFetchHeaders = function (options) {
-        var headers = new Headers();
-        if (!(options && options.headers)) {
-            return headers;
+    BrowserCacheManager.prototype.setTemporaryCache = function (cacheKey, value, generateKey) {
+        var key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
+        this.temporaryCacheStorage.setItem(key, value);
+        if (this.cacheConfig.storeAuthStateInCookie) {
+            this.logger.trace("BrowserCacheManager.setTemporaryCache: storeAuthStateInCookie set to true, setting item cookie");
+            this.setItemCookie(key, value);
         }
-        var optionsHeaders = options.headers;
-        Object.keys(optionsHeaders).forEach(function (key) {
-            headers.append(key, optionsHeaders[key]);
-        });
-        return headers;
     };
-    FetchClient.prototype.getHeaderDict = function (headers) {
-        var headerDict = {};
-        headers.forEach(function (value, key) {
-            headerDict[key] = value;
-        });
-        return headerDict;
+    /**
+     * Removes the cache item with the given key.
+     * Will also clear the cookie item if storeAuthStateInCookie is set to true.
+     * @param key
+     */
+    BrowserCacheManager.prototype.removeItem = function (key) {
+        this.browserStorage.removeItem(key);
+        this.temporaryCacheStorage.removeItem(key);
+        if (this.cacheConfig.storeAuthStateInCookie) {
+            this.logger.trace("BrowserCacheManager.removeItem: storeAuthStateInCookie is true, clearing item cookie");
+            this.clearItemCookie(key);
+        }
+        return true;
+    };
+    /**
+     * Checks whether key is in cache.
+     * @param key
+     */
+    BrowserCacheManager.prototype.containsKey = function (key) {
+        return this.browserStorage.containsKey(key) || this.temporaryCacheStorage.containsKey(key);
     };
-    return FetchClient;
-}());
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * This client implements the XMLHttpRequest class to send GET and POST requests.
- */
-var XhrClient = /** @class */ (function () {
-    function XhrClient() {
-    }
     /**
-     * XhrClient for REST endpoints - Get request
-     * @param url
-     * @param headers
-     * @param body
+     * Gets all keys in window.
      */
-    XhrClient.prototype.sendGetRequestAsync = function (url, options) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            return __generator$1(this, function (_a) {
-                return [2 /*return*/, this.sendRequestAsync(url, HTTP_REQUEST_TYPE.GET, options)];
-            });
-        });
+    BrowserCacheManager.prototype.getKeys = function () {
+        return __spread(this.browserStorage.getKeys(), this.temporaryCacheStorage.getKeys());
     };
     /**
-     * XhrClient for REST endpoints - Post request
-     * @param url
-     * @param headers
-     * @param body
+     * Clears all cache entries created by MSAL.
      */
-    XhrClient.prototype.sendPostRequestAsync = function (url, options) {
+    BrowserCacheManager.prototype.clear = function () {
         return __awaiter$1(this, void 0, void 0, function () {
+            var _this = this;
             return __generator$1(this, function (_a) {
-                return [2 /*return*/, this.sendRequestAsync(url, HTTP_REQUEST_TYPE.POST, options)];
+                switch (_a.label) {
+                    case 0: 
+                    // Removes all accounts and their credentials
+                    return [4 /*yield*/, this.removeAllAccounts()];
+                    case 1:
+                        // Removes all accounts and their credentials
+                        _a.sent();
+                        this.removeAppMetadata();
+                        // Removes all remaining MSAL cache items
+                        this.getKeys().forEach(function (cacheKey) {
+                            // Check if key contains msal prefix; For now, we are clearing all the cache items created by MSAL.js
+                            if ((_this.browserStorage.containsKey(cacheKey) || _this.temporaryCacheStorage.containsKey(cacheKey)) && ((cacheKey.indexOf(Constants.CACHE_PREFIX) !== -1) || (cacheKey.indexOf(_this.clientId) !== -1))) {
+                                _this.removeItem(cacheKey);
+                            }
+                        });
+                        this.internalStorage.clear();
+                        return [2 /*return*/];
+                }
             });
         });
     };
     /**
-     * Helper for XhrClient requests.
-     * @param url
-     * @param method
-     * @param options
+     * Add value to cookies
+     * @param cookieName
+     * @param cookieValue
+     * @param expires
      */
-    XhrClient.prototype.sendRequestAsync = function (url, method, options) {
-        var _this = this;
-        return new Promise(function (resolve, reject) {
-            var xhr = new XMLHttpRequest();
-            xhr.open(method, url, /* async: */ true);
-            _this.setXhrHeaders(xhr, options);
-            xhr.onload = function () {
-                if (xhr.status < 200 || xhr.status >= 300) {
-                    if (method === HTTP_REQUEST_TYPE.POST) {
-                        reject(BrowserAuthError.createPostRequestFailedError("Failed with status " + xhr.status, url));
-                    }
-                    else {
-                        reject(BrowserAuthError.createGetRequestFailedError("Failed with status " + xhr.status, url));
-                    }
-                }
-                try {
-                    var jsonResponse = JSON.parse(xhr.responseText);
-                    var networkResponse = {
-                        headers: _this.getHeaderDict(xhr),
-                        body: jsonResponse,
-                        status: xhr.status
-                    };
-                    resolve(networkResponse);
-                }
-                catch (e) {
-                    reject(BrowserAuthError.createFailedToParseNetworkResponseError(url));
-                }
-            };
-            xhr.onerror = function () {
-                if (window.navigator.onLine) {
-                    if (method === HTTP_REQUEST_TYPE.POST) {
-                        reject(BrowserAuthError.createPostRequestFailedError("Failed with status " + xhr.status, url));
-                    }
-                    else {
-                        reject(BrowserAuthError.createGetRequestFailedError("Failed with status " + xhr.status, url));
-                    }
-                }
-                else {
-                    reject(BrowserAuthError.createNoNetworkConnectivityError());
-                }
-            };
-            if (method === HTTP_REQUEST_TYPE.POST && options && options.body) {
-                xhr.send(options.body);
-            }
-            else if (method === HTTP_REQUEST_TYPE.GET) {
-                xhr.send();
-            }
-            else {
-                throw BrowserAuthError.createHttpMethodNotImplementedError(method);
-            }
-        });
+    BrowserCacheManager.prototype.setItemCookie = function (cookieName, cookieValue, expires) {
+        var cookieStr = encodeURIComponent(cookieName) + "=" + encodeURIComponent(cookieValue) + ";path=/;";
+        if (expires) {
+            var expireTime = this.getCookieExpirationTime(expires);
+            cookieStr += "expires=" + expireTime + ";";
+        }
+        if (this.cacheConfig.secureCookies) {
+            cookieStr += "Secure;";
+        }
+        document.cookie = cookieStr;
     };
     /**
-     * Helper to set XHR headers for request.
-     * @param xhr
-     * @param options
+     * Get one item by key from cookies
+     * @param cookieName
      */
-    XhrClient.prototype.setXhrHeaders = function (xhr, options) {
-        if (options && options.headers) {
-            var headers_1 = options.headers;
-            Object.keys(headers_1).forEach(function (key) {
-                xhr.setRequestHeader(key, headers_1[key]);
-            });
+    BrowserCacheManager.prototype.getItemCookie = function (cookieName) {
+        var name = encodeURIComponent(cookieName) + "=";
+        var cookieList = document.cookie.split(";");
+        for (var i = 0; i < cookieList.length; i++) {
+            var cookie = cookieList[i];
+            while (cookie.charAt(0) === " ") {
+                cookie = cookie.substring(1);
+            }
+            if (cookie.indexOf(name) === 0) {
+                return decodeURIComponent(cookie.substring(name.length, cookie.length));
+            }
         }
+        return "";
     };
     /**
-     * Gets a string map of the headers received in the response.
-     *
-     * Algorithm comes from https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/getAllResponseHeaders
-     * @param xhr
+     * Clear all msal-related cookies currently set in the browser. Should only be used to clear temporary cache items.
      */
-    XhrClient.prototype.getHeaderDict = function (xhr) {
-        var headerString = xhr.getAllResponseHeaders();
-        var headerArr = headerString.trim().split(/[\r\n]+/);
-        var headerDict = {};
-        headerArr.forEach(function (value) {
-            var parts = value.split(": ");
-            var headerName = parts.shift();
-            var headerVal = parts.join(": ");
-            if (headerName && headerVal) {
-                headerDict[headerName] = headerVal;
+    BrowserCacheManager.prototype.clearMsalCookies = function () {
+        var _this = this;
+        var cookiePrefix = Constants.CACHE_PREFIX + "." + this.clientId;
+        var cookieList = document.cookie.split(";");
+        cookieList.forEach(function (cookie) {
+            while (cookie.charAt(0) === " ") {
+                // eslint-disable-next-line no-param-reassign
+                cookie = cookie.substring(1);
+            }
+            if (cookie.indexOf(cookiePrefix) === 0) {
+                var cookieKey = cookie.split("=")[0];
+                _this.clearItemCookie(cookieKey);
             }
         });
-        return headerDict;
     };
-    return XhrClient;
-}());
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * Utility class for browser specific functions
- */
-var BrowserUtils = /** @class */ (function () {
-    function BrowserUtils() {
-    }
-    // #region Window Navigation and URL management
     /**
-     * Clears hash from window url.
+     * Clear an item in the cookies by key
+     * @param cookieName
      */
-    BrowserUtils.clearHash = function (contentWindow) {
-        // Office.js sets history.replaceState to null
-        contentWindow.location.hash = Constants.EMPTY_STRING;
-        if (typeof contentWindow.history.replaceState === "function") {
-            // Full removes "#" from url
-            contentWindow.history.replaceState(null, Constants.EMPTY_STRING, "" + contentWindow.location.origin + contentWindow.location.pathname + contentWindow.location.search);
-        }
+    BrowserCacheManager.prototype.clearItemCookie = function (cookieName) {
+        this.setItemCookie(cookieName, "", -1);
     };
     /**
-     * Replaces current hash with hash from provided url
+     * Get cookie expiration time
+     * @param cookieLifeDays
      */
-    BrowserUtils.replaceHash = function (url) {
-        var urlParts = url.split("#");
-        urlParts.shift(); // Remove part before the hash
-        window.location.hash = urlParts.length > 0 ? urlParts.join("#") : "";
+    BrowserCacheManager.prototype.getCookieExpirationTime = function (cookieLifeDays) {
+        var today = new Date();
+        var expr = new Date(today.getTime() + cookieLifeDays * this.COOKIE_LIFE_MULTIPLIER);
+        return expr.toUTCString();
     };
     /**
-     * Returns boolean of whether the current window is in an iframe or not.
+     * Gets the cache object referenced by the browser
      */
-    BrowserUtils.isInIframe = function () {
-        return window.parent !== window;
+    BrowserCacheManager.prototype.getCache = function () {
+        return this.browserStorage;
     };
     /**
-     * Returns boolean of whether or not the current window is a popup opened by msal
+     * interface compat, we cannot overwrite browser cache; Functionality is supported by individual entities in browser
      */
-    BrowserUtils.isInPopup = function () {
-        return typeof window !== "undefined" && !!window.opener &&
-            window.opener !== window &&
-            typeof window.name === "string" &&
-            window.name.indexOf(BrowserConstants.POPUP_NAME_PREFIX + ".") === 0;
+    BrowserCacheManager.prototype.setCache = function () {
+        // sets nothing
     };
-    // #endregion
     /**
-     * Returns current window URL as redirect uri
+     * Prepend msal.<client-id> to each key; Skip for any JSON object as Key (defined schemas do not need the key appended: AccessToken Keys or the upcoming schema)
+     * @param key
+     * @param addInstanceId
      */
-    BrowserUtils.getCurrentUri = function () {
-        return window.location.href.split("?")[0].split("#")[0];
+    BrowserCacheManager.prototype.generateCacheKey = function (key) {
+        var generatedKey = this.validateAndParseJson(key);
+        if (!generatedKey) {
+            if (StringUtils.startsWith(key, Constants.CACHE_PREFIX) || StringUtils.startsWith(key, PersistentCacheKeys.ADAL_ID_TOKEN)) {
+                return key;
+            }
+            return Constants.CACHE_PREFIX + "." + this.clientId + "." + key;
+        }
+        return JSON.stringify(key);
     };
     /**
-     * Gets the homepage url for the current window location.
+     * Create authorityKey to cache authority
+     * @param state
      */
-    BrowserUtils.getHomepage = function () {
-        var currentUrl = new UrlString(window.location.href);
-        var urlComponents = currentUrl.getUrlComponents();
-        return urlComponents.Protocol + "//" + urlComponents.HostNameAndPort + "/";
+    BrowserCacheManager.prototype.generateAuthorityKey = function (stateString) {
+        var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
+        return this.generateCacheKey(TemporaryCacheKeys.AUTHORITY + "." + stateId);
     };
     /**
-     * Returns best compatible network client object.
+     * Create Nonce key to cache nonce
+     * @param state
      */
-    BrowserUtils.getBrowserNetworkClient = function () {
-        if (window.fetch && window.Headers) {
-            return new FetchClient();
-        }
-        else {
-            return new XhrClient();
-        }
+    BrowserCacheManager.prototype.generateNonceKey = function (stateString) {
+        var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
+        return this.generateCacheKey(TemporaryCacheKeys.NONCE_IDTOKEN + "." + stateId);
     };
     /**
-     * Throws error if we have completed an auth and are
-     * attempting another auth request inside an iframe.
+     * Creates full cache key for the request state
+     * @param stateString State string for the request
      */
-    BrowserUtils.blockReloadInHiddenIframes = function () {
-        var isResponseHash = UrlString.hashContainsKnownProperties(window.location.hash);
-        // return an error if called from the hidden iframe created by the msal js silent calls
-        if (isResponseHash && BrowserUtils.isInIframe()) {
-            throw BrowserAuthError.createBlockReloadInHiddenIframeError();
-        }
+    BrowserCacheManager.prototype.generateStateKey = function (stateString) {
+        // Use the library state id to key temp storage for uniqueness for multiple concurrent requests
+        var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
+        return this.generateCacheKey(TemporaryCacheKeys.REQUEST_STATE + "." + stateId);
     };
     /**
-     * Block redirect operations in iframes unless explicitly allowed
-     * @param interactionType Interaction type for the request
-     * @param allowRedirectInIframe Config value to allow redirects when app is inside an iframe
+     * Gets the cached authority based on the cached state. Returns empty if no cached state found.
      */
-    BrowserUtils.blockRedirectInIframe = function (interactionType, allowRedirectInIframe) {
-        var isIframedApp = BrowserUtils.isInIframe();
-        if (interactionType === exports.InteractionType.Redirect && isIframedApp && !allowRedirectInIframe) {
-            // If we are not in top frame, we shouldn't redirect. This is also handled by the service.
-            throw BrowserAuthError.createRedirectInIframeError(isIframedApp);
+    BrowserCacheManager.prototype.getCachedAuthority = function (cachedState) {
+        var stateCacheKey = this.generateStateKey(cachedState);
+        var state = this.getTemporaryCache(stateCacheKey);
+        if (!state) {
+            return null;
         }
+        var authorityCacheKey = this.generateAuthorityKey(state);
+        return this.getTemporaryCache(authorityCacheKey);
     };
     /**
-     * Block redirectUri loaded in popup from calling AcquireToken APIs
+     * Updates account, authority, and state in cache
+     * @param serverAuthenticationRequest
+     * @param account
      */
-    BrowserUtils.blockAcquireTokenInPopups = function () {
-        // Popups opened by msal popup APIs are given a name that starts with "msal."
-        if (BrowserUtils.isInPopup()) {
-            throw BrowserAuthError.createBlockAcquireTokenInPopupsError();
+    BrowserCacheManager.prototype.updateCacheEntries = function (state, nonce, authorityInstance, loginHint, account) {
+        this.logger.trace("BrowserCacheManager.updateCacheEntries called");
+        // Cache the request state
+        var stateCacheKey = this.generateStateKey(state);
+        this.setTemporaryCache(stateCacheKey, state, false);
+        // Cache the nonce
+        var nonceCacheKey = this.generateNonceKey(state);
+        this.setTemporaryCache(nonceCacheKey, nonce, false);
+        // Cache authorityKey
+        var authorityCacheKey = this.generateAuthorityKey(state);
+        this.setTemporaryCache(authorityCacheKey, authorityInstance, false);
+        if (account) {
+            var ccsCredential = {
+                credential: account.homeAccountId,
+                type: CcsCredentialType.HOME_ACCOUNT_ID
+            };
+            this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
+        }
+        else if (!StringUtils.isEmpty(loginHint)) {
+            var ccsCredential = {
+                credential: loginHint,
+                type: CcsCredentialType.UPN
+            };
+            this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
         }
     };
     /**
-     * Throws error if token requests are made in non-browser environment
-     * @param isBrowserEnvironment Flag indicating if environment is a browser.
+     * Reset all temporary cache items
+     * @param state
      */
-    BrowserUtils.blockNonBrowserEnvironment = function (isBrowserEnvironment) {
-        if (!isBrowserEnvironment) {
-            throw BrowserAuthError.createNonBrowserEnvironmentError();
+    BrowserCacheManager.prototype.resetRequestCache = function (state) {
+        var _this = this;
+        this.logger.trace("BrowserCacheManager.resetRequestCache called");
+        // check state and remove associated cache items
+        if (!StringUtils.isEmpty(state)) {
+            this.getKeys().forEach(function (key) {
+                if (key.indexOf(state) !== -1) {
+                    _this.removeItem(key);
+                }
+            });
         }
+        // delete generic interactive request parameters
+        if (state) {
+            this.removeItem(this.generateStateKey(state));
+            this.removeItem(this.generateNonceKey(state));
+            this.removeItem(this.generateAuthorityKey(state));
+        }
+        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
+        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.ORIGIN_URI));
+        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.URL_HASH));
+        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CORRELATION_ID));
+        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CCS_CREDENTIAL));
+        this.setInteractionInProgress(false);
     };
     /**
-     * Returns boolean of whether current browser is an Internet Explorer or Edge browser.
+     * Removes temporary cache for the provided state
+     * @param stateString
      */
-    BrowserUtils.detectIEOrEdge = function () {
-        var ua = window.navigator.userAgent;
-        var msie = ua.indexOf("MSIE ");
-        var msie11 = ua.indexOf("Trident/");
-        var msedge = ua.indexOf("Edge/");
-        var isIE = msie > 0 || msie11 > 0;
-        var isEdge = msedge > 0;
-        return isIE || isEdge;
+    BrowserCacheManager.prototype.cleanRequestByState = function (stateString) {
+        this.logger.trace("BrowserCacheManager.cleanRequestByState called");
+        // Interaction is completed - remove interaction status.
+        if (stateString) {
+            var stateKey = this.generateStateKey(stateString);
+            var cachedState = this.temporaryCacheStorage.getItem(stateKey);
+            this.logger.infoPii("BrowserCacheManager.cleanRequestByState: Removing temporary cache items for state: " + cachedState);
+            this.resetRequestCache(cachedState || "");
+        }
+        this.clearMsalCookies();
     };
-    return BrowserUtils;
-}());
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-var NavigationClient = /** @class */ (function () {
-    function NavigationClient() {
-    }
     /**
-     * Navigates to other pages within the same web application
-     * @param url
-     * @param options
+     * Looks in temporary cache for any state values with the provided interactionType and removes all temporary cache items for that state
+     * Used in scenarios where temp cache needs to be cleaned but state is not known, such as clicking browser back button.
+     * @param interactionType
      */
-    NavigationClient.prototype.navigateInternal = function (url, options) {
-        return NavigationClient.defaultNavigateWindow(url, options);
+    BrowserCacheManager.prototype.cleanRequestByInteractionType = function (interactionType) {
+        var _this = this;
+        this.logger.trace("BrowserCacheManager.cleanRequestByInteractionType called");
+        // Loop through all keys to find state key
+        this.getKeys().forEach(function (key) {
+            // If this key is not the state key, move on
+            if (key.indexOf(TemporaryCacheKeys.REQUEST_STATE) === -1) {
+                return;
+            }
+            // Retrieve state value, return if not a valid value
+            var stateValue = _this.temporaryCacheStorage.getItem(key);
+            if (!stateValue) {
+                return;
+            }
+            // Extract state and ensure it matches given InteractionType, then clean request cache
+            var parsedState = BrowserProtocolUtils.extractBrowserRequestState(_this.cryptoImpl, stateValue);
+            if (parsedState && parsedState.interactionType === interactionType) {
+                _this.logger.infoPii("BrowserCacheManager.cleanRequestByInteractionType: Removing temporary cache items for state: " + stateValue);
+                _this.resetRequestCache(stateValue);
+            }
+        });
+        this.clearMsalCookies();
+    };
+    BrowserCacheManager.prototype.cacheCodeRequest = function (authCodeRequest, browserCrypto) {
+        this.logger.trace("BrowserCacheManager.cacheCodeRequest called");
+        var encodedValue = browserCrypto.base64Encode(JSON.stringify(authCodeRequest));
+        this.setTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, encodedValue, true);
     };
     /**
-     * Navigates to other pages outside the web application i.e. the Identity Provider
-     * @param url
-     * @param options
+     * Gets the token exchange parameters from the cache. Throws an error if nothing is found.
      */
-    NavigationClient.prototype.navigateExternal = function (url, options) {
-        return NavigationClient.defaultNavigateWindow(url, options);
+    BrowserCacheManager.prototype.getCachedRequest = function (state, browserCrypto) {
+        this.logger.trace("BrowserCacheManager.getCachedRequest called");
+        // Get token request from cache and parse as TokenExchangeParameters.
+        var encodedTokenRequest = this.getTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, true);
+        if (!encodedTokenRequest) {
+            throw BrowserAuthError.createNoTokenRequestCacheError();
+        }
+        var parsedRequest = this.validateAndParseJson(browserCrypto.base64Decode(encodedTokenRequest));
+        if (!parsedRequest) {
+            throw BrowserAuthError.createUnableToParseTokenRequestCacheError();
+        }
+        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
+        // Get cached authority and use if no authority is cached with request.
+        if (StringUtils.isEmpty(parsedRequest.authority)) {
+            var authorityCacheKey = this.generateAuthorityKey(state);
+            var cachedAuthority = this.getTemporaryCache(authorityCacheKey);
+            if (!cachedAuthority) {
+                throw BrowserAuthError.createNoCachedAuthorityError();
+            }
+            parsedRequest.authority = cachedAuthority;
+        }
+        return parsedRequest;
+    };
+    BrowserCacheManager.prototype.isInteractionInProgress = function (matchClientId) {
+        var clientId = this.getInteractionInProgress();
+        if (matchClientId) {
+            return clientId === this.clientId;
+        }
+        else {
+            return !!clientId;
+        }
+    };
+    BrowserCacheManager.prototype.getInteractionInProgress = function () {
+        var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
+        return this.getTemporaryCache(key, false);
+    };
+    BrowserCacheManager.prototype.setInteractionInProgress = function (inProgress) {
+        var clientId = this.getInteractionInProgress();
+        // Ensure we don't overwrite interaction in progress for a different clientId
+        var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
+        if (inProgress && !clientId) {
+            // No interaction is in progress
+            this.setTemporaryCache(key, this.clientId, false);
+        }
+        else if (!inProgress && clientId === this.clientId) {
+            this.removeItem(key);
+        }
     };
     /**
-     * Default navigation implementation invoked by the internal and external functions
-     * @param url
-     * @param options
+     * Returns username retrieved from ADAL or MSAL v1 idToken
      */
-    NavigationClient.defaultNavigateWindow = function (url, options) {
-        if (options.noHistory) {
-            window.location.replace(url);
+    BrowserCacheManager.prototype.getLegacyLoginHint = function () {
+        // Only check for adal/msal token if no SSO params are being used
+        var adalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ADAL_ID_TOKEN);
+        if (adalIdTokenString) {
+            this.browserStorage.removeItem(PersistentCacheKeys.ADAL_ID_TOKEN);
+            this.logger.verbose("Cached ADAL id token retrieved.");
         }
-        else {
-            window.location.assign(url);
+        // Check for cached MSAL v1 id token
+        var msalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ID_TOKEN, true);
+        if (msalIdTokenString) {
+            this.removeItem(this.generateCacheKey(PersistentCacheKeys.ID_TOKEN));
+            this.logger.verbose("Cached MSAL.js v1 id token retrieved");
         }
-        return new Promise(function (resolve) {
-            setTimeout(function () {
-                resolve(true);
-            }, options.timeout);
-        });
+        var cachedIdTokenString = msalIdTokenString || adalIdTokenString;
+        if (cachedIdTokenString) {
+            var cachedIdToken = new AuthToken(cachedIdTokenString, this.cryptoImpl);
+            if (cachedIdToken.claims && cachedIdToken.claims.preferred_username) {
+                this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 preferred_username as loginHint");
+                return cachedIdToken.claims.preferred_username;
+            }
+            else if (cachedIdToken.claims && cachedIdToken.claims.upn) {
+                this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 upn as loginHint");
+                return cachedIdToken.claims.upn;
+            }
+            else {
+                this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, however, no account hint claim found. Enable preferred_username or upn id token claim to get SSO.");
+            }
+        }
+        return null;
+    };
+    /**
+     * Updates a credential's cache key if the current cache key is outdated
+     */
+    BrowserCacheManager.prototype.updateCredentialCacheKey = function (currentCacheKey, credential) {
+        var updatedCacheKey = credential.generateCredentialKey();
+        if (currentCacheKey !== updatedCacheKey) {
+            var cacheItem = this.getItem(currentCacheKey);
+            if (cacheItem) {
+                this.removeItem(currentCacheKey);
+                this.setItem(updatedCacheKey, cacheItem);
+                this.logger.verbose("Updated an outdated " + credential.credentialType + " cache key");
+                return updatedCacheKey;
+            }
+            else {
+                this.logger.error("Attempted to update an outdated " + credential.credentialType + " cache key but no item matching the outdated key was found in storage");
+            }
+        }
+        return currentCacheKey;
     };
-    return NavigationClient;
-}());
+    return BrowserCacheManager;
+}(CacheManager));
+var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
+    var cacheOptions = {
+        cacheLocation: exports.BrowserCacheLocation.MemoryStorage,
+        storeAuthStateInCookie: false,
+        secureCookies: false
+    };
+    return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger);
+};
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10293,37 +10578,6 @@ function buildConfiguration(_a, isBrowserEnvironment) {
     return overlayedConfig;
 }
 
-/* eslint-disable header/header */
-var name = "@azure/msal-browser";
-var version = "2.19.0";
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-exports.EventType = void 0;
-(function (EventType) {
-    EventType["ACCOUNT_ADDED"] = "msal:accountAdded";
-    EventType["ACCOUNT_REMOVED"] = "msal:accountRemoved";
-    EventType["LOGIN_START"] = "msal:loginStart";
-    EventType["LOGIN_SUCCESS"] = "msal:loginSuccess";
-    EventType["LOGIN_FAILURE"] = "msal:loginFailure";
-    EventType["ACQUIRE_TOKEN_START"] = "msal:acquireTokenStart";
-    EventType["ACQUIRE_TOKEN_SUCCESS"] = "msal:acquireTokenSuccess";
-    EventType["ACQUIRE_TOKEN_FAILURE"] = "msal:acquireTokenFailure";
-    EventType["ACQUIRE_TOKEN_NETWORK_START"] = "msal:acquireTokenFromNetworkStart";
-    EventType["SSO_SILENT_START"] = "msal:ssoSilentStart";
-    EventType["SSO_SILENT_SUCCESS"] = "msal:ssoSilentSuccess";
-    EventType["SSO_SILENT_FAILURE"] = "msal:ssoSilentFailure";
-    EventType["HANDLE_REDIRECT_START"] = "msal:handleRedirectStart";
-    EventType["HANDLE_REDIRECT_END"] = "msal:handleRedirectEnd";
-    EventType["POPUP_OPENED"] = "msal:popupOpened";
-    EventType["LOGOUT_START"] = "msal:logoutStart";
-    EventType["LOGOUT_SUCCESS"] = "msal:logoutSuccess";
-    EventType["LOGOUT_FAILURE"] = "msal:logoutFailure";
-    EventType["LOGOUT_END"] = "msal:logoutEnd";
-})(exports.EventType || (exports.EventType = {}));
-
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12946,216 +13200,6 @@ var PublicClientApplication = /** @class */ (function (_super) {
     return PublicClientApplication;
 }(ClientApplication));
 
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-var stubbedPublicClientApplication = {
-    acquireTokenPopup: function () {
-        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-    },
-    acquireTokenRedirect: function () {
-        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-    },
-    acquireTokenSilent: function () {
-        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-    },
-    getAllAccounts: function () {
-        return [];
-    },
-    getAccountByHomeId: function () {
-        return null;
-    },
-    getAccountByUsername: function () {
-        return null;
-    },
-    getAccountByLocalId: function () {
-        return null;
-    },
-    handleRedirectPromise: function () {
-        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-    },
-    loginPopup: function () {
-        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-    },
-    loginRedirect: function () {
-        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-    },
-    logout: function () {
-        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-    },
-    logoutRedirect: function () {
-        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-    },
-    logoutPopup: function () {
-        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-    },
-    ssoSilent: function () {
-        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
-    },
-    addEventCallback: function () {
-        return null;
-    },
-    removeEventCallback: function () {
-        return;
-    },
-    enableAccountStorageEvents: function () {
-        return;
-    },
-    disableAccountStorageEvents: function () {
-        return;
-    },
-    getTokenCache: function () {
-        throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
-    },
-    getLogger: function () {
-        throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
-    },
-    setLogger: function () {
-        return;
-    },
-    setActiveAccount: function () {
-        return;
-    },
-    getActiveAccount: function () {
-        return null;
-    },
-    initializeWrapperLibrary: function () {
-        return;
-    },
-    setNavigationClient: function () {
-        return;
-    },
-    getConfiguration: function () {
-        throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
-    }
-};
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-var EventMessageUtils = /** @class */ (function () {
-    function EventMessageUtils() {
-    }
-    /**
-     * Gets interaction status from event message
-     * @param message
-     * @param currentStatus
-     */
-    EventMessageUtils.getInteractionStatusFromEvent = function (message, currentStatus) {
-        switch (message.eventType) {
-            case exports.EventType.LOGIN_START:
-                return exports.InteractionStatus.Login;
-            case exports.EventType.SSO_SILENT_START:
-                return exports.InteractionStatus.SsoSilent;
-            case exports.EventType.ACQUIRE_TOKEN_START:
-                if (message.interactionType === exports.InteractionType.Redirect || message.interactionType === exports.InteractionType.Popup) {
-                    return exports.InteractionStatus.AcquireToken;
-                }
-                break;
-            case exports.EventType.HANDLE_REDIRECT_START:
-                return exports.InteractionStatus.HandleRedirect;
-            case exports.EventType.LOGOUT_START:
-                return exports.InteractionStatus.Logout;
-            case exports.EventType.SSO_SILENT_SUCCESS:
-            case exports.EventType.SSO_SILENT_FAILURE:
-                if (currentStatus && currentStatus !== exports.InteractionStatus.SsoSilent) {
-                    // Prevent this event from clearing any status other than ssoSilent
-                    break;
-                }
-                return exports.InteractionStatus.None;
-            case exports.EventType.LOGOUT_END:
-                if (currentStatus && currentStatus !== exports.InteractionStatus.Logout) {
-                    // Prevent this event from clearing any status other than logout
-                    break;
-                }
-                return exports.InteractionStatus.None;
-            case exports.EventType.HANDLE_REDIRECT_END:
-                if (currentStatus && currentStatus !== exports.InteractionStatus.HandleRedirect) {
-                    // Prevent this event from clearing any status other than handleRedirect
-                    break;
-                }
-                return exports.InteractionStatus.None;
-            case exports.EventType.LOGIN_SUCCESS:
-            case exports.EventType.LOGIN_FAILURE:
-            case exports.EventType.ACQUIRE_TOKEN_SUCCESS:
-            case exports.EventType.ACQUIRE_TOKEN_FAILURE:
-                if (message.interactionType === exports.InteractionType.Redirect || message.interactionType === exports.InteractionType.Popup) {
-                    if (currentStatus && currentStatus !== exports.InteractionStatus.Login && currentStatus !== exports.InteractionStatus.AcquireToken) {
-                        // Prevent this event from clearing any status other than login or acquireToken
-                        break;
-                    }
-                    return exports.InteractionStatus.None;
-                }
-                break;
-        }
-        return null;
-    };
-    return EventMessageUtils;
-}());
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-var SignedHttpRequest = /** @class */ (function () {
-    function SignedHttpRequest(shrParameters, shrOptions) {
-        var loggerOptions = (shrOptions && shrOptions.loggerOptions) || {};
-        this.logger = new Logger(loggerOptions, name, version);
-        this.cryptoOps = new CryptoOps(this.logger);
-        this.popTokenGenerator = new PopTokenGenerator(this.cryptoOps);
-        this.shrParameters = shrParameters;
-    }
-    /**
-     * Generates and caches a keypair for the given request options.
-     * @returns Public key digest, which should be sent to the token issuer.
-     */
-    SignedHttpRequest.prototype.generatePublicKeyThumbprint = function () {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var kid;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.popTokenGenerator.generateKid(this.shrParameters)];
-                    case 1:
-                        kid = (_a.sent()).kid;
-                        return [2 /*return*/, kid];
-                }
-            });
-        });
-    };
-    /**
-     * Generates a signed http request for the given payload with the given key.
-     * @param payload Payload to sign (e.g. access token)
-     * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
-     * @param claims Additional claims to include/override in the signed JWT
-     * @returns Pop token signed with the corresponding private key
-     */
-    SignedHttpRequest.prototype.signRequest = function (payload, publicKeyThumbprint, claims) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            return __generator$1(this, function (_a) {
-                return [2 /*return*/, this.popTokenGenerator.signPayload(payload, publicKeyThumbprint, this.shrParameters, claims)];
-            });
-        });
-    };
-    /**
-     * Removes cached keys from browser for given public key thumbprint
-     * @param publicKeyThumbprint Public key digest (from generatePublicKeyThumbprint API)
-     * @returns If keys are properly deleted
-     */
-    SignedHttpRequest.prototype.removeKeys = function (publicKeyThumbprint) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.cryptoOps.removeTokenBindingKey(publicKeyThumbprint)];
-                    case 1: return [2 /*return*/, _a.sent()];
-                }
-            });
-        });
-    };
-    return SignedHttpRequest;
-}());
-
 exports.AccountEntity = AccountEntity;
 exports.AuthError = AuthError;
 exports.AuthErrorMessage = AuthErrorMessage;