@azure/msal-browser 2.21.0 → 2.22.0

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.21.0 2022-01-04 */
+/*! @azure/msal-browser v2.22.0 2022-02-08 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -107,7 +107,7 @@
         return ar;
     }
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
     /*! *****************************************************************************
     Copyright (c) Microsoft Corporation.
 
@@ -194,7 +194,7 @@
         return r;
     }
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -208,6 +208,7 @@
         // default authority
         DEFAULT_AUTHORITY: "https://login.microsoftonline.com/common/",
         DEFAULT_AUTHORITY_HOST: "login.microsoftonline.com",
+        DEFAULT_COMMON_TENANT: "common",
         // ADFS String
         ADFS: "adfs",
         // Default AAD Instance Discovery Endpoint
@@ -332,6 +333,7 @@
         AADServerParamKeys["FOCI"] = "foci";
         AADServerParamKeys["CCS_HEADER"] = "X-AnchorMailbox";
         AADServerParamKeys["RETURN_SPA_CODE"] = "return_spa_code";
+        AADServerParamKeys["LOGOUT_HINT"] = "logout_hint";
     })(AADServerParamKeys || (AADServerParamKeys = {}));
     /**
      * Claims request keys
@@ -556,7 +558,7 @@
         CacheOutcome["REFRESH_CACHED_ACCESS_TOKEN"] = "4";
     })(CacheOutcome || (CacheOutcome = {}));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -600,7 +602,7 @@
         return AuthError;
     }(Error));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -675,7 +677,7 @@
         }
     };
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1137,7 +1139,7 @@
         return ClientAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1262,7 +1264,7 @@
         return StringUtils;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1442,12 +1444,31 @@
         return Logger;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
     /* eslint-disable header/header */
     var name$1 = "@azure/msal-common";
-    var version$1 = "6.0.0";
+    var version$1 = "6.1.0";
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    exports.AzureCloudInstance = void 0;
+    (function (AzureCloudInstance) {
+        // AzureCloudInstance is not specified.
+        AzureCloudInstance[AzureCloudInstance["None"] = 0] = "None";
+        // Microsoft Azure public cloud
+        AzureCloudInstance["AzurePublic"] = "https://login.microsoftonline.com";
+        // Microsoft Chinese national cloud
+        AzureCloudInstance["AzureChina"] = "https://login.chinacloudapi.cn";
+        // Microsoft German national cloud ("Black Forest")
+        AzureCloudInstance["AzureGermany"] = "https://login.microsoftonline.de";
+        // US Government cloud
+        AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
+    })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
+
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1606,7 +1627,7 @@
         return CredentialEntity;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1688,6 +1709,10 @@
             code: "untrusted_authority",
             desc: "The provided authority is not a trusted authority. Please include this authority in the knownAuthorities config parameter."
         },
+        invalidAzureCloudInstance: {
+            code: "invalid_azure_cloud_instance",
+            desc: "Invalid AzureCloudInstance provided. Please refer MSAL JS docs: aks.ms/msaljs/azure_cloud_instance for valid values"
+        },
         missingSshJwk: {
             code: "missing_ssh_jwk",
             desc: "Missing sshJwk in SSH certificate request. A stringified JSON Web Key is required when using the SSH authentication scheme."
@@ -1824,7 +1849,13 @@
         ClientConfigurationError.createUntrustedAuthorityError = function () {
             return new ClientConfigurationError(ClientConfigurationErrorMessage.untrustedAuthority.code, ClientConfigurationErrorMessage.untrustedAuthority.desc);
         };
-        /*
+        /**
+         * Throws error when the AzureCloudInstance is set to an invalid value
+         */
+        ClientConfigurationError.createInvalidAzureCloudInstanceError = function () {
+            return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidAzureCloudInstance.code, ClientConfigurationErrorMessage.invalidAzureCloudInstance.desc);
+        };
+        /**
          * Throws an error when the authentication scheme is set to SSH but the SSH public key is omitted from the request
          */
         ClientConfigurationError.createMissingSshJwkError = function () {
@@ -1851,7 +1882,7 @@
         return ClientConfigurationError;
     }(ClientAuthError));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2035,7 +2066,7 @@
         return ScopeSet;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2073,7 +2104,7 @@
         };
     }
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2087,7 +2118,7 @@
         AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
     })(AuthorityType || (AuthorityType = {}));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2321,7 +2352,7 @@
         return AccountEntity;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2359,7 +2390,7 @@
         return AuthToken;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3201,7 +3232,7 @@
         return DefaultStorageClass;
     }(CacheManager));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3211,7 +3242,8 @@
     var DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
     var DEFAULT_SYSTEM_OPTIONS = {
         tokenRenewalOffsetSeconds: DEFAULT_TOKEN_RENEWAL_OFFSET_SEC,
-        preventCorsPreflight: false
+        preventCorsPreflight: false,
+        proxyUrl: "",
     };
     var DEFAULT_LOGGER_IMPLEMENTATION = {
         loggerCallback: function () {
@@ -3251,6 +3283,10 @@
         clientSecret: "",
         clientAssertion: undefined
     };
+    var DEFAULT_AZURE_CLOUD_OPTIONS = {
+        azureCloudInstance: exports.AzureCloudInstance.None,
+        tenant: "" + Constants.DEFAULT_COMMON_TENANT
+    };
     /**
      * Function that sets the default options when not explicitly configured from app developer
      *
@@ -3280,10 +3316,10 @@
      * @param authOptions
      */
     function buildAuthOptions(authOptions) {
-        return __assign({ clientCapabilities: [] }, authOptions);
+        return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS }, authOptions);
     }
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3303,7 +3339,7 @@
         return ServerError;
     }(AuthError));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3399,7 +3435,7 @@
         return ThrottlingUtils;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3448,7 +3484,7 @@
         return NetworkManager;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3459,7 +3495,7 @@
         CcsCredentialType["UPN"] = "UPN";
     })(CcsCredentialType || (CcsCredentialType = {}));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3523,7 +3559,7 @@
                 var response;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.networkManager.sendPostRequest(thumbprint, tokenEndpoint, { body: queryString, headers: headers })];
+                        case 0: return [4 /*yield*/, this.networkManager.sendPostRequest(thumbprint, tokenEndpoint, { body: queryString, headers: headers, proxyUrl: this.config.systemOptions.proxyUrl })];
                         case 1:
                             response = _a.sent();
                             if (this.config.serverTelemetryManager && response.status < 500 && response.status !== 429) {
@@ -3548,7 +3584,7 @@
         return BaseClient;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3634,7 +3670,7 @@
         return RequestValidator;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3961,6 +3997,12 @@
         RequestParameterBuilder.prototype.addThrottling = function () {
             this.parameters.set(AADServerParamKeys.X_MS_LIB_CAPABILITY, ThrottlingConstants.X_MS_LIB_CAPABILITY_VALUE);
         };
+        /**
+         * Adds logout_hint parameter for "silent" logout which prevent server account picker
+         */
+        RequestParameterBuilder.prototype.addLogoutHint = function (logoutHint) {
+            this.parameters.set(AADServerParamKeys.LOGOUT_HINT, encodeURIComponent(logoutHint));
+        };
         /**
          * Utility to create a URL from the params map
          */
@@ -3974,7 +4016,7 @@
         return RequestParameterBuilder;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4039,7 +4081,7 @@
         return IdTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4089,7 +4131,7 @@
         return TimeUtils;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4203,7 +4245,7 @@
         return AccessTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4270,7 +4312,7 @@
         return RefreshTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4334,7 +4376,7 @@
         return InteractionRequiredAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4350,7 +4392,7 @@
         return CacheRecord;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4421,7 +4463,7 @@
         return ProtocolUtils;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4622,7 +4664,7 @@
         return UrlString;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4697,7 +4739,7 @@
         return PopTokenGenerator;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4767,7 +4809,7 @@
         return AppMetadataEntity;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4803,7 +4845,7 @@
         return TokenCacheContext;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5068,7 +5110,7 @@
         return ResponseHandler;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5457,6 +5499,9 @@
             if (request.state) {
                 parameterBuilder.addState(request.state);
             }
+            if (request.logoutHint) {
+                parameterBuilder.addLogoutHint(request.logoutHint);
+            }
             if (request.extraQueryParameters) {
                 parameterBuilder.addExtraQueryParameters(request.extraQueryParameters);
             }
@@ -5476,7 +5521,7 @@
         return AuthorizationCodeClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5687,7 +5732,7 @@
         return RefreshTokenClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5803,7 +5848,7 @@
         return SilentFlowClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5814,7 +5859,7 @@
             response.hasOwnProperty("issuer"));
     }
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5828,7 +5873,7 @@
         ProtocolMode["OIDC"] = "OIDC";
     })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5903,7 +5948,7 @@
         return AuthorityMetadataEntity;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5913,7 +5958,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5928,18 +5973,22 @@
          *
          * @returns Promise<string | null>
          */
-        RegionDiscovery.prototype.detectRegion = function (environmentRegion, regionDiscoveryMetadata) {
+        RegionDiscovery.prototype.detectRegion = function (environmentRegion, regionDiscoveryMetadata, proxyUrl) {
             return __awaiter(this, void 0, void 0, function () {
-                var autodetectedRegionName, localIMDSVersionResponse, currentIMDSVersion, currentIMDSVersionResponse;
+                var autodetectedRegionName, options, localIMDSVersionResponse, currentIMDSVersion, currentIMDSVersionResponse;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
                             autodetectedRegionName = environmentRegion;
                             if (!!autodetectedRegionName) return [3 /*break*/, 8];
+                            options = RegionDiscovery.IMDS_OPTIONS;
+                            if (proxyUrl) {
+                                options.proxyUrl = proxyUrl;
+                            }
                             _a.label = 1;
                         case 1:
                             _a.trys.push([1, 6, , 7]);
-                            return [4 /*yield*/, this.getRegionFromIMDS(Constants.IMDS_VERSION)];
+                            return [4 /*yield*/, this.getRegionFromIMDS(Constants.IMDS_VERSION, options)];
                         case 2:
                             localIMDSVersionResponse = _a.sent();
                             if (localIMDSVersionResponse.status === ResponseCodes.httpSuccess) {
@@ -5947,14 +5996,14 @@
                                 regionDiscoveryMetadata.region_source = RegionDiscoverySources.IMDS;
                             }
                             if (!(localIMDSVersionResponse.status === ResponseCodes.httpBadRequest)) return [3 /*break*/, 5];
-                            return [4 /*yield*/, this.getCurrentVersion()];
+                            return [4 /*yield*/, this.getCurrentVersion(options)];
                         case 3:
                             currentIMDSVersion = _a.sent();
                             if (!currentIMDSVersion) {
                                 regionDiscoveryMetadata.region_source = RegionDiscoverySources.FAILED_AUTO_DETECTION;
                                 return [2 /*return*/, null];
                             }
-                            return [4 /*yield*/, this.getRegionFromIMDS(currentIMDSVersion)];
+                            return [4 /*yield*/, this.getRegionFromIMDS(currentIMDSVersion, options)];
                         case 4:
                             currentIMDSVersionResponse = _a.sent();
                             if (currentIMDSVersionResponse.status === ResponseCodes.httpSuccess) {
@@ -5987,10 +6036,10 @@
          * @param imdsEndpointUrl
          * @returns Promise<NetworkResponse<string>>
          */
-        RegionDiscovery.prototype.getRegionFromIMDS = function (version) {
+        RegionDiscovery.prototype.getRegionFromIMDS = function (version, options) {
             return __awaiter(this, void 0, void 0, function () {
                 return __generator(this, function (_a) {
-                    return [2 /*return*/, this.networkInterface.sendGetRequestAsync(Constants.IMDS_ENDPOINT + "?api-version=" + version + "&format=text", RegionDiscovery.IMDS_OPTIONS, Constants.IMDS_TIMEOUT)];
+                    return [2 /*return*/, this.networkInterface.sendGetRequestAsync(Constants.IMDS_ENDPOINT + "?api-version=" + version + "&format=text", options, Constants.IMDS_TIMEOUT)];
                 });
             });
         };
@@ -5999,14 +6048,14 @@
          *
          * @returns Promise<string | null>
          */
-        RegionDiscovery.prototype.getCurrentVersion = function () {
+        RegionDiscovery.prototype.getCurrentVersion = function (options) {
             return __awaiter(this, void 0, void 0, function () {
                 var response;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
                             _a.trys.push([0, 2, , 3]);
-                            return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(Constants.IMDS_ENDPOINT + "?format=json", RegionDiscovery.IMDS_OPTIONS)];
+                            return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(Constants.IMDS_ENDPOINT + "?format=json", options)];
                         case 1:
                             response = _a.sent();
                             // When IMDS endpoint is called without the api version query param, bad request response comes back with latest version.
@@ -6023,11 +6072,15 @@
             });
         };
         // Options for the IMDS endpoint request
-        RegionDiscovery.IMDS_OPTIONS = { headers: { "Metadata": "true" } };
+        RegionDiscovery.IMDS_OPTIONS = {
+            headers: {
+                Metadata: "true",
+            },
+        };
         return RegionDiscovery;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6038,7 +6091,7 @@
      * endpoint. It will store the pertinent config data in this object for use during token calls.
      */
     var Authority = /** @class */ (function () {
-        function Authority(authority, networkInterface, cacheManager, authorityOptions) {
+        function Authority(authority, networkInterface, cacheManager, authorityOptions, proxyUrl) {
             this.canonicalAuthority = authority;
             this._canonicalAuthority.validateAsUri();
             this.networkInterface = networkInterface;
@@ -6046,6 +6099,7 @@
             this.authorityOptions = authorityOptions;
             this.regionDiscovery = new RegionDiscovery(networkInterface);
             this.regionDiscoveryMetadata = { region_used: undefined, region_source: undefined, region_outcome: undefined };
+            this.proxyUrl = proxyUrl || Constants.EMPTY_STRING;
         }
         Object.defineProperty(Authority.prototype, "authorityType", {
             // See above for AuthorityType
@@ -6314,7 +6368,7 @@
                             metadata = _b.sent();
                             if (!metadata) return [3 /*break*/, 4];
                             if (!((_a = this.authorityOptions.azureRegionConfiguration) === null || _a === void 0 ? void 0 : _a.azureRegion)) return [3 /*break*/, 3];
-                            return [4 /*yield*/, this.regionDiscovery.detectRegion(this.authorityOptions.azureRegionConfiguration.environmentRegion, this.regionDiscoveryMetadata)];
+                            return [4 /*yield*/, this.regionDiscovery.detectRegion(this.authorityOptions.azureRegionConfiguration.environmentRegion, this.regionDiscoveryMetadata, this.proxyUrl)];
                         case 2:
                             autodetectedRegionName = _b.sent();
                             azureRegion = this.authorityOptions.azureRegionConfiguration.azureRegion === Constants.AZURE_REGION_AUTO_DISCOVER_FLAG
@@ -6377,19 +6431,25 @@
          */
         Authority.prototype.getEndpointMetadataFromNetwork = function () {
             return __awaiter(this, void 0, void 0, function () {
-                var response;
+                var options, response;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
-                            _a.trys.push([0, 2, , 3]);
-                            return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(this.defaultOpenIdConfigurationEndpoint)];
+                            options = {};
+                            if (this.proxyUrl) {
+                                options.proxyUrl = this.proxyUrl;
+                            }
+                            _a.label = 1;
                         case 1:
+                            _a.trys.push([1, 3, , 4]);
+                            return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(this.defaultOpenIdConfigurationEndpoint, options)];
+                        case 2:
                             response = _a.sent();
                             return [2 /*return*/, isOpenIdConfigResponse(response.body) ? response.body : null];
-                        case 2:
+                        case 3:
                             _a.sent();
                             return [2 /*return*/, null];
-                        case 3: return [2 /*return*/];
+                        case 4: return [2 /*return*/];
                     }
                 });
             });
@@ -6459,16 +6519,20 @@
          */
         Authority.prototype.getCloudDiscoveryMetadataFromNetwork = function () {
             return __awaiter(this, void 0, void 0, function () {
-                var instanceDiscoveryEndpoint, match, response, metadata;
+                var instanceDiscoveryEndpoint, options, match, response, metadata;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
                             instanceDiscoveryEndpoint = "" + Constants.AAD_INSTANCE_DISCOVERY_ENDPT + this.canonicalAuthority + "oauth2/v2.0/authorize";
+                            options = {};
+                            if (this.proxyUrl) {
+                                options.proxyUrl = this.proxyUrl;
+                            }
                             match = null;
                             _a.label = 1;
                         case 1:
                             _a.trys.push([1, 3, , 4]);
-                            return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(instanceDiscoveryEndpoint)];
+                            return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(instanceDiscoveryEndpoint, options)];
                         case 2:
                             response = _a.sent();
                             metadata = isCloudInstanceDiscoveryResponse(response.body) ? response.body.metadata : [];
@@ -6483,7 +6547,7 @@
                             return [2 /*return*/, null];
                         case 4:
                             if (!match) {
-                                // Custom Domain scenario, host is trusted because Instance Discovery call succeeded 
+                                // Custom Domain scenario, host is trusted because Instance Discovery call succeeded
                                 match = Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
                             }
                             return [2 /*return*/, match];
@@ -6501,6 +6565,19 @@
             });
             return matches.length > 0;
         };
+        /**
+         * helper function to populate the authority based on azureCloudOptions
+         * @param authorityString
+         * @param azureCloudOptions
+         */
+        Authority.generateAuthority = function (authorityString, azureCloudOptions) {
+            var authorityAzureCloudInstance;
+            if (azureCloudOptions && azureCloudOptions.azureCloudInstance !== exports.AzureCloudInstance.None) {
+                var tenant = azureCloudOptions.tenant ? azureCloudOptions.tenant : Constants.DEFAULT_COMMON_TENANT;
+                authorityAzureCloudInstance = azureCloudOptions.azureCloudInstance + "/" + tenant + "/";
+            }
+            return authorityAzureCloudInstance ? authorityAzureCloudInstance : authorityString;
+        };
         /**
          * Creates cloud discovery metadata object from a given host
          * @param host
@@ -6593,7 +6670,7 @@
         return Authority;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6612,13 +6689,13 @@
          * @param networkClient
          * @param protocolMode
          */
-        AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions) {
+        AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, proxyUrl) {
             return __awaiter(this, void 0, void 0, function () {
                 var acquireTokenAuthority, e_1;
                 return __generator(this, function (_a) {
                     switch (_a.label) {
                         case 0:
-                            acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions);
+                            acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, proxyUrl);
                             _a.label = 1;
                         case 1:
                             _a.trys.push([1, 3, , 4]);
@@ -6644,17 +6721,17 @@
          * @param networkInterface
          * @param protocolMode
          */
-        AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions) {
+        AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions, proxyUrl) {
             // Throw error if authority url is empty
             if (StringUtils.isEmpty(authorityUrl)) {
                 throw ClientConfigurationError.createUrlEmptyError();
             }
-            return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions);
+            return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, proxyUrl);
         };
         return AuthorityFactory;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6685,7 +6762,7 @@
         return ServerTelemetryEntity;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6713,7 +6790,7 @@
         return ThrottlingEntity;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6730,7 +6807,7 @@
         }
     };
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6789,7 +6866,7 @@
         return AuthenticationHeaderParser;
     }());
 
-    /*! @azure/msal-common v6.0.0 2022-01-04 */
+    /*! @azure/msal-common v6.1.0 2022-02-08 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7005,7 +7082,7 @@
     /**
      * Temporary cache keys for MSAL, deleted after any request.
      */
-    var TemporaryCacheKeys;
+    exports.TemporaryCacheKeys = void 0;
     (function (TemporaryCacheKeys) {
         TemporaryCacheKeys["AUTHORITY"] = "authority";
         TemporaryCacheKeys["ACQUIRE_TOKEN_ACCOUNT"] = "acquireToken.account";
@@ -7020,7 +7097,7 @@
         TemporaryCacheKeys["INTERACTION_STATUS_KEY"] = "interaction.status";
         TemporaryCacheKeys["CCS_CREDENTIAL"] = "ccs.credential";
         TemporaryCacheKeys["CORRELATION_ID"] = "request.correlationId";
-    })(TemporaryCacheKeys || (TemporaryCacheKeys = {}));
+    })(exports.TemporaryCacheKeys || (exports.TemporaryCacheKeys = {}));
     /**
      * Cache keys stored in-memory
      */
@@ -7055,6 +7132,7 @@
         InteractionType["Redirect"] = "redirect";
         InteractionType["Popup"] = "popup";
         InteractionType["Silent"] = "silent";
+        InteractionType["None"] = "none";
     })(exports.InteractionType || (exports.InteractionType = {}));
     /**
      * Types of interaction currently in progress.
@@ -9662,7 +9740,7 @@
          */
         BrowserCacheManager.prototype.generateAuthorityKey = function (stateString) {
             var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-            return this.generateCacheKey(TemporaryCacheKeys.AUTHORITY + "." + stateId);
+            return this.generateCacheKey(exports.TemporaryCacheKeys.AUTHORITY + "." + stateId);
         };
         /**
          * Create Nonce key to cache nonce
@@ -9670,7 +9748,7 @@
          */
         BrowserCacheManager.prototype.generateNonceKey = function (stateString) {
             var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-            return this.generateCacheKey(TemporaryCacheKeys.NONCE_IDTOKEN + "." + stateId);
+            return this.generateCacheKey(exports.TemporaryCacheKeys.NONCE_IDTOKEN + "." + stateId);
         };
         /**
          * Creates full cache key for the request state
@@ -9679,7 +9757,7 @@
         BrowserCacheManager.prototype.generateStateKey = function (stateString) {
             // Use the library state id to key temp storage for uniqueness for multiple concurrent requests
             var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-            return this.generateCacheKey(TemporaryCacheKeys.REQUEST_STATE + "." + stateId);
+            return this.generateCacheKey(exports.TemporaryCacheKeys.REQUEST_STATE + "." + stateId);
         };
         /**
          * Gets the cached authority based on the cached state. Returns empty if no cached state found.
@@ -9714,14 +9792,14 @@
                     credential: account.homeAccountId,
                     type: CcsCredentialType.HOME_ACCOUNT_ID
                 };
-                this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
+                this.setTemporaryCache(exports.TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
             }
             else if (!StringUtils.isEmpty(loginHint)) {
                 var ccsCredential = {
                     credential: loginHint,
                     type: CcsCredentialType.UPN
                 };
-                this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
+                this.setTemporaryCache(exports.TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
             }
         };
         /**
@@ -9745,11 +9823,11 @@
                 this.removeItem(this.generateNonceKey(state));
                 this.removeItem(this.generateAuthorityKey(state));
             }
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.ORIGIN_URI));
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.URL_HASH));
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CORRELATION_ID));
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CCS_CREDENTIAL));
+            this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.REQUEST_PARAMS));
+            this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.ORIGIN_URI));
+            this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.URL_HASH));
+            this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.CORRELATION_ID));
+            this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.CCS_CREDENTIAL));
             this.setInteractionInProgress(false);
         };
         /**
@@ -9778,7 +9856,7 @@
             // Loop through all keys to find state key
             this.getKeys().forEach(function (key) {
                 // If this key is not the state key, move on
-                if (key.indexOf(TemporaryCacheKeys.REQUEST_STATE) === -1) {
+                if (key.indexOf(exports.TemporaryCacheKeys.REQUEST_STATE) === -1) {
                     return;
                 }
                 // Retrieve state value, return if not a valid value
@@ -9799,7 +9877,7 @@
         BrowserCacheManager.prototype.cacheCodeRequest = function (authCodeRequest, browserCrypto) {
             this.logger.trace("BrowserCacheManager.cacheCodeRequest called");
             var encodedValue = browserCrypto.base64Encode(JSON.stringify(authCodeRequest));
-            this.setTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, encodedValue, true);
+            this.setTemporaryCache(exports.TemporaryCacheKeys.REQUEST_PARAMS, encodedValue, true);
         };
         /**
          * Gets the token exchange parameters from the cache. Throws an error if nothing is found.
@@ -9807,7 +9885,7 @@
         BrowserCacheManager.prototype.getCachedRequest = function (state, browserCrypto) {
             this.logger.trace("BrowserCacheManager.getCachedRequest called");
             // Get token request from cache and parse as TokenExchangeParameters.
-            var encodedTokenRequest = this.getTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, true);
+            var encodedTokenRequest = this.getTemporaryCache(exports.TemporaryCacheKeys.REQUEST_PARAMS, true);
             if (!encodedTokenRequest) {
                 throw BrowserAuthError.createNoTokenRequestCacheError();
             }
@@ -9815,7 +9893,7 @@
             if (!parsedRequest) {
                 throw BrowserAuthError.createUnableToParseTokenRequestCacheError();
             }
-            this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
+            this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.REQUEST_PARAMS));
             // Get cached authority and use if no authority is cached with request.
             if (StringUtils.isEmpty(parsedRequest.authority)) {
                 var authorityCacheKey = this.generateAuthorityKey(state);
@@ -9837,18 +9915,22 @@
             }
         };
         BrowserCacheManager.prototype.getInteractionInProgress = function () {
-            var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
+            var key = Constants.CACHE_PREFIX + "." + exports.TemporaryCacheKeys.INTERACTION_STATUS_KEY;
             return this.getTemporaryCache(key, false);
         };
         BrowserCacheManager.prototype.setInteractionInProgress = function (inProgress) {
-            var clientId = this.getInteractionInProgress();
             // Ensure we don't overwrite interaction in progress for a different clientId
-            var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
-            if (inProgress && !clientId) {
-                // No interaction is in progress
-                this.setTemporaryCache(key, this.clientId, false);
+            var key = Constants.CACHE_PREFIX + "." + exports.TemporaryCacheKeys.INTERACTION_STATUS_KEY;
+            if (inProgress) {
+                if (this.getInteractionInProgress()) {
+                    throw BrowserAuthError.createInteractionInProgressError();
+                }
+                else {
+                    // No interaction is in progress
+                    this.setTemporaryCache(key, this.clientId, false);
+                }
             }
-            else if (!inProgress && clientId === this.clientId) {
+            else if (!inProgress && this.getInteractionInProgress() === this.clientId) {
                 this.removeItem(key);
             }
         };
@@ -10375,7 +10457,11 @@
             postLogoutRedirectUri: "",
             navigateToLoginRequestUrl: true,
             clientCapabilities: [],
-            protocolMode: exports.ProtocolMode.AAD
+            protocolMode: exports.ProtocolMode.AAD,
+            azureCloudOptions: {
+                azureCloudInstance: exports.AzureCloudInstance.None,
+                tenant: ""
+            },
         };
         // Default cache options for browser
         var DEFAULT_CACHE_OPTIONS = {
@@ -10404,7 +10490,7 @@
 
     /* eslint-disable header/header */
     var name = "@azure/msal-browser";
-    var version = "2.21.0";
+    var version = "2.22.0";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10734,11 +10820,32 @@
          */
         StandardInteractionClient.prototype.initializeLogoutRequest = function (logoutRequest) {
             this.logger.verbose("initializeLogoutRequest called", logoutRequest === null || logoutRequest === void 0 ? void 0 : logoutRequest.correlationId);
-            // Check if interaction is in progress. Throw error if true.
-            if (this.browserStorage.isInteractionInProgress()) {
-                throw BrowserAuthError.createInteractionInProgressError();
-            }
             var validLogoutRequest = __assign$1({ correlationId: this.browserCrypto.createNewGuid() }, logoutRequest);
+            /**
+             * Set logout_hint to be login_hint from ID Token Claims if present
+             * and logoutHint attribute wasn't manually set in logout request
+             */
+            if (logoutRequest) {
+                // If logoutHint isn't set and an account was passed in, try to extract logoutHint from ID Token Claims
+                if (!logoutRequest.logoutHint) {
+                    if (logoutRequest.account) {
+                        var logoutHint = this.getLogoutHintFromIdTokenClaims(logoutRequest.account);
+                        if (logoutHint) {
+                            this.logger.verbose("Setting logoutHint to login_hint ID Token Claim value for the account provided");
+                            validLogoutRequest.logoutHint = logoutHint;
+                        }
+                    }
+                    else {
+                        this.logger.verbose("logoutHint was not set and account was not passed into logout request, logoutHint will not be set");
+                    }
+                }
+                else {
+                    this.logger.verbose("logoutHint has already been set in logoutRequest");
+                }
+            }
+            else {
+                this.logger.verbose("logoutHint will not be set since no logout request was configured");
+            }
             /*
              * Only set redirect uri if logout request isn't provided or the set uri isn't null.
              * Otherwise, use passed uri, config, or current page.
@@ -10765,17 +10872,37 @@
             }
             return validLogoutRequest;
         };
+        /**
+         * Parses login_hint ID Token Claim out of AccountInfo object to be used as
+         * logout_hint in end session request.
+         * @param account
+         */
+        StandardInteractionClient.prototype.getLogoutHintFromIdTokenClaims = function (account) {
+            var idTokenClaims = account.idTokenClaims;
+            if (idTokenClaims) {
+                if (idTokenClaims.login_hint) {
+                    return idTokenClaims.login_hint;
+                }
+                else {
+                    this.logger.verbose("The ID Token Claims tied to the provided account do not contain a login_hint claim, logoutHint will not be added to logout request");
+                }
+            }
+            else {
+                this.logger.verbose("The provided account does not contain ID Token Claims, logoutHint will not be added to logout request");
+            }
+            return null;
+        };
         /**
          * Creates an Authorization Code Client with the given authority, or the default authority.
          * @param serverTelemetryManager
          * @param authorityUrl
          */
-        StandardInteractionClient.prototype.createAuthCodeClient = function (serverTelemetryManager, authorityUrl) {
+        StandardInteractionClient.prototype.createAuthCodeClient = function (serverTelemetryManager, authorityUrl, requestAzureCloudOptions) {
             return __awaiter$1(this, void 0, void 0, function () {
                 var clientConfig;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl)];
+                        case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, requestAzureCloudOptions)];
                         case 1:
                             clientConfig = _a.sent();
                             return [2 /*return*/, new AuthorizationCodeClient(clientConfig)];
@@ -10789,14 +10916,14 @@
          * @param requestAuthority
          * @param requestCorrelationId
          */
-        StandardInteractionClient.prototype.getClientConfiguration = function (serverTelemetryManager, requestAuthority) {
+        StandardInteractionClient.prototype.getClientConfiguration = function (serverTelemetryManager, requestAuthority, requestAzureCloudOptions) {
             return __awaiter$1(this, void 0, void 0, function () {
                 var discoveredAuthority;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
                         case 0:
                             this.logger.verbose("getClientConfiguration called");
-                            return [4 /*yield*/, this.getDiscoveredAuthority(requestAuthority)];
+                            return [4 /*yield*/, this.getDiscoveredAuthority(requestAuthority, requestAzureCloudOptions)];
                         case 1:
                             discoveredAuthority = _a.sent();
                             return [2 /*return*/, {
@@ -10856,9 +10983,9 @@
          * @param requestAuthority
          * @param requestCorrelationId
          */
-        StandardInteractionClient.prototype.getDiscoveredAuthority = function (requestAuthority) {
+        StandardInteractionClient.prototype.getDiscoveredAuthority = function (requestAuthority, requestAzureCloudOptions) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var authorityOptions;
+                var authorityOptions, userAuthority, builtAuthority;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
                         case 0:
@@ -10867,38 +10994,12 @@
                                 protocolMode: this.config.auth.protocolMode,
                                 knownAuthorities: this.config.auth.knownAuthorities,
                                 cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,
-                                authorityMetadata: this.config.auth.authorityMetadata
+                                authorityMetadata: this.config.auth.authorityMetadata,
                             };
-                            if (!requestAuthority) return [3 /*break*/, 2];
-                            this.logger.verbose("Creating discovered authority with request authority");
-                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(requestAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions)];
-                        case 1: return [2 /*return*/, _a.sent()];
-                        case 2:
+                            userAuthority = requestAuthority ? requestAuthority : this.config.auth.authority;
+                            builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);
                             this.logger.verbose("Creating discovered authority with configured authority");
-                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(this.config.auth.authority, this.config.system.networkClient, this.browserStorage, authorityOptions)];
-                        case 3: return [2 /*return*/, _a.sent()];
-                    }
-                });
-            });
-        };
-        /**
-         * Helper to validate app environment before making a request.
-         * @param request
-         * @param interactionType
-         */
-        StandardInteractionClient.prototype.preflightInteractiveRequest = function (request, interactionType) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            this.logger.verbose("preflightInteractiveRequest called, validating app environment", request === null || request === void 0 ? void 0 : request.correlationId);
-                            // block the reload if it occurred inside a hidden iframe
-                            BrowserUtils.blockReloadInHiddenIframes();
-                            // Check if interaction is in progress. Throw error if true.
-                            if (this.browserStorage.isInteractionInProgress(false)) {
-                                throw BrowserAuthError.createInteractionInProgressError();
-                            }
-                            return [4 /*yield*/, this.initializeAuthorizationRequest(request, interactionType)];
+                            return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions)];
                         case 1: return [2 /*return*/, _a.sent()];
                     }
                 });
@@ -10920,7 +11021,7 @@
                             browserState = {
                                 interactionType: interactionType
                             };
-                            state = ProtocolUtils.setRequestState(this.browserCrypto, (request && request.state) || "", browserState);
+                            state = ProtocolUtils.setRequestState(this.browserCrypto, (request && request.state) || Constants.EMPTY_STRING, browserState);
                             _a = [{}];
                             return [4 /*yield*/, this.initializeBaseRequest(request)];
                         case 1:
@@ -10938,7 +11039,6 @@
                                     validatedRequest.loginHint = legacyLoginHint;
                                 }
                             }
-                            this.browserStorage.updateCacheEntries(validatedRequest.state, validatedRequest.nonce, validatedRequest.authority, validatedRequest.loginHint || "", validatedRequest.account || null);
                             return [2 /*return*/, validatedRequest];
                     }
                 });
@@ -11109,8 +11209,8 @@
          * @param clientId
          * @param request
          */
-        PopupUtils.generatePopupName = function (clientId, request) {
-            return BrowserConstants.POPUP_NAME_PREFIX + "." + clientId + "." + request.scopes.join("-") + "." + request.authority + "." + request.correlationId;
+        PopupUtils.generatePopupName = function (clientId, scopes, authority, correlationId) {
+            return BrowserConstants.POPUP_NAME_PREFIX + "." + clientId + "." + scopes.join("-") + "." + authority + "." + correlationId;
         };
         /**
          * Generates the name for the popup based on the client id and request for logouts
@@ -11243,7 +11343,7 @@
          */
         InteractionHandler.prototype.checkCcsCredentials = function () {
             // Look up ccs credential in temp cache
-            var cachedCcsCred = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, true);
+            var cachedCcsCred = this.browserStorage.getTemporaryCache(exports.TemporaryCacheKeys.CCS_CREDENTIAL, true);
             if (cachedCcsCred) {
                 try {
                     return JSON.parse(cachedCcsCred);
@@ -11281,8 +11381,6 @@
         PopupHandler.prototype.initiateAuthRequest = function (requestUrl, params) {
             // Check that request url is not empty.
             if (!StringUtils.isEmpty(requestUrl)) {
-                // Set interaction status in the library.
-                this.browserStorage.setInteractionInProgress(true);
                 this.browserRequestLogger.infoPii("Navigate to: " + requestUrl);
                 // Open the popup window to requestUrl.
                 return this.popupUtils.openPopup(requestUrl, params);
@@ -11332,36 +11430,25 @@
          * @param request
          */
         PopupClient.prototype.acquireToken = function (request) {
-            return __awaiter$1(this, void 0, void 0, function () {
-                var validRequest, popupName, popupWindowAttributes, popup, e_1;
-                return __generator$1(this, function (_a) {
-                    switch (_a.label) {
-                        case 0:
-                            _a.trys.push([0, 2, , 3]);
-                            return [4 /*yield*/, this.preflightInteractiveRequest(request, exports.InteractionType.Popup)];
-                        case 1:
-                            validRequest = _a.sent();
-                            popupName = PopupUtils.generatePopupName(this.config.auth.clientId, validRequest);
-                            popupWindowAttributes = request.popupWindowAttributes || {};
-                            // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.
-                            if (this.config.system.asyncPopups) {
-                                this.logger.verbose("asyncPopups set to true, acquiring token");
-                                // Passes on popup position and dimensions if in request
-                                return [2 /*return*/, this.acquireTokenPopupAsync(validRequest, popupName, popupWindowAttributes)];
-                            }
-                            else {
-                                // asyncPopups flag is set to false. Opens popup before acquiring token.
-                                this.logger.verbose("asyncPopup set to false, opening popup before acquiring token");
-                                popup = PopupUtils.openSizedPopup("about:blank", popupName, popupWindowAttributes, this.logger);
-                                return [2 /*return*/, this.acquireTokenPopupAsync(validRequest, popupName, popupWindowAttributes, popup)];
-                            }
-                        case 2:
-                            e_1 = _a.sent();
-                            return [2 /*return*/, Promise.reject(e_1)];
-                        case 3: return [2 /*return*/];
-                    }
-                });
-            });
+            try {
+                var popupName = PopupUtils.generatePopupName(this.config.auth.clientId, request.scopes || OIDC_DEFAULT_SCOPES, request.authority || this.config.auth.authority, this.correlationId);
+                var popupWindowAttributes = request.popupWindowAttributes || {};
+                // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.
+                if (this.config.system.asyncPopups) {
+                    this.logger.verbose("asyncPopups set to true, acquiring token");
+                    // Passes on popup position and dimensions if in request
+                    return this.acquireTokenPopupAsync(request, popupName, popupWindowAttributes);
+                }
+                else {
+                    // asyncPopups flag is set to false. Opens popup before acquiring token.
+                    this.logger.verbose("asyncPopup set to false, opening popup before acquiring token");
+                    var popup = PopupUtils.openSizedPopup("about:blank", popupName, popupWindowAttributes, this.logger);
+                    return this.acquireTokenPopupAsync(request, popupName, popupWindowAttributes, popup);
+                }
+            }
+            catch (e) {
+                return Promise.reject(e);
+            }
         };
         /**
          * Clears local cache for the current user then opens a popup window prompting the user to sign-out of the server
@@ -11402,26 +11489,30 @@
          *
          * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.
          */
-        PopupClient.prototype.acquireTokenPopupAsync = function (validRequest, popupName, popupWindowAttributes, popup) {
+        PopupClient.prototype.acquireTokenPopupAsync = function (request, popupName, popupWindowAttributes, popup) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var serverTelemetryManager, authCodeRequest, authClient, navigateUrl, interactionHandler, popupParameters, popupWindow, hash, state, result, e_2;
+                var serverTelemetryManager, validRequest, authCodeRequest, authClient, navigateUrl, interactionHandler, popupParameters, popupWindow, hash, state, result, e_1;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
                         case 0:
                             this.logger.verbose("acquireTokenPopupAsync called");
                             serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenPopup);
-                            _a.label = 1;
+                            return [4 /*yield*/, this.initializeAuthorizationRequest(request, exports.InteractionType.Popup)];
                         case 1:
-                            _a.trys.push([1, 7, , 8]);
-                            return [4 /*yield*/, this.initializeAuthorizationCodeRequest(validRequest)];
+                            validRequest = _a.sent();
+                            this.browserStorage.updateCacheEntries(validRequest.state, validRequest.nonce, validRequest.authority, validRequest.loginHint || "", validRequest.account || null);
+                            _a.label = 2;
                         case 2:
-                            authCodeRequest = _a.sent();
-                            return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, validRequest.authority)];
+                            _a.trys.push([2, 8, , 9]);
+                            return [4 /*yield*/, this.initializeAuthorizationCodeRequest(validRequest)];
                         case 3:
+                            authCodeRequest = _a.sent();
+                            return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions)];
+                        case 4:
                             authClient = _a.sent();
                             this.logger.verbose("Auth code client created");
                             return [4 /*yield*/, authClient.getAuthCodeUrl(validRequest)];
-                        case 4:
+                        case 5:
                             navigateUrl = _a.sent();
                             interactionHandler = new PopupHandler(authClient, this.browserStorage, authCodeRequest, this.logger);
                             popupParameters = {
@@ -11432,28 +11523,28 @@
                             popupWindow = interactionHandler.initiateAuthRequest(navigateUrl, popupParameters);
                             this.eventHandler.emitEvent(exports.EventType.POPUP_OPENED, exports.InteractionType.Popup, { popupWindow: popupWindow }, null);
                             return [4 /*yield*/, interactionHandler.monitorPopupForHash(popupWindow)];
-                        case 5:
+                        case 6:
                             hash = _a.sent();
                             state = this.validateAndExtractStateFromHash(hash, exports.InteractionType.Popup, validRequest.correlationId);
                             // Remove throttle if it exists
                             ThrottlingUtils.removeThrottle(this.browserStorage, this.config.auth.clientId, authCodeRequest);
                             return [4 /*yield*/, interactionHandler.handleCodeResponseFromHash(hash, state, authClient.authority, this.networkClient)];
-                        case 6:
+                        case 7:
                             result = _a.sent();
                             return [2 /*return*/, result];
-                        case 7:
-                            e_2 = _a.sent();
+                        case 8:
+                            e_1 = _a.sent();
                             if (popup) {
                                 // Close the synchronous popup if an error is thrown before the window unload event is registered
                                 popup.close();
                             }
-                            if (e_2 instanceof AuthError) {
-                                e_2.setCorrelationId(this.correlationId);
+                            if (e_1 instanceof AuthError) {
+                                e_1.setCorrelationId(this.correlationId);
                             }
-                            serverTelemetryManager.cacheFailedRequest(e_2);
+                            serverTelemetryManager.cacheFailedRequest(e_1);
                             this.browserStorage.cleanRequestByState(validRequest.state);
-                            throw e_2;
-                        case 8: return [2 /*return*/];
+                            throw e_1;
+                        case 9: return [2 /*return*/];
                     }
                 });
             });
@@ -11469,7 +11560,7 @@
          */
         PopupClient.prototype.logoutPopupAsync = function (validRequest, popupName, popupWindowAttributes, requestAuthority, popup, mainWindowRedirectUri) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var serverTelemetryManager, authClient, logoutUri, popupUtils, popupWindow, e_3, navigationOptions, absoluteUrl, e_4;
+                var serverTelemetryManager, authClient, logoutUri, popupUtils, popupWindow, e_2, navigationOptions, absoluteUrl, e_3;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
                         case 0:
@@ -11484,7 +11575,6 @@
                         case 2:
                             // Clear cache on logout
                             _a.sent();
-                            this.browserStorage.setInteractionInProgress(true);
                             return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, requestAuthority)];
                         case 3:
                             authClient = _a.sent();
@@ -11505,8 +11595,8 @@
                             this.logger.verbose("Popup successfully redirected to postLogoutRedirectUri");
                             return [3 /*break*/, 7];
                         case 6:
-                            e_3 = _a.sent();
-                            this.logger.verbose("Error occurred while monitoring popup for same origin. Session on server may remain active. Error: " + e_3);
+                            e_2 = _a.sent();
+                            this.logger.verbose("Error occurred while monitoring popup for same origin. Session on server may remain active. Error: " + e_2);
                             return [3 /*break*/, 7];
                         case 7:
                             popupUtils.cleanPopup(popupWindow);
@@ -11518,7 +11608,7 @@
                                 };
                                 absoluteUrl = UrlString.getAbsoluteUrl(mainWindowRedirectUri, BrowserUtils.getCurrentUri());
                                 this.logger.verbose("Redirecting main window to url specified in the request");
-                                this.logger.verbosePii("Redirecing main window to: " + absoluteUrl);
+                                this.logger.verbosePii("Redirecting main window to: " + absoluteUrl);
                                 this.navigationClient.navigateInternal(absoluteUrl, navigationOptions);
                             }
                             else {
@@ -11526,19 +11616,19 @@
                             }
                             return [3 /*break*/, 9];
                         case 8:
-                            e_4 = _a.sent();
+                            e_3 = _a.sent();
                             if (popup) {
                                 // Close the synchronous popup if an error is thrown before the window unload event is registered
                                 popup.close();
                             }
-                            if (e_4 instanceof AuthError) {
-                                e_4.setCorrelationId(this.correlationId);
+                            if (e_3 instanceof AuthError) {
+                                e_3.setCorrelationId(this.correlationId);
                             }
                             this.browserStorage.setInteractionInProgress(false);
-                            this.eventHandler.emitEvent(exports.EventType.LOGOUT_FAILURE, exports.InteractionType.Popup, null, e_4);
+                            this.eventHandler.emitEvent(exports.EventType.LOGOUT_FAILURE, exports.InteractionType.Popup, null, e_3);
                             this.eventHandler.emitEvent(exports.EventType.LOGOUT_END, exports.InteractionType.Popup);
-                            serverTelemetryManager.cacheFailedRequest(e_4);
-                            throw e_4;
+                            serverTelemetryManager.cacheFailedRequest(e_3);
+                            throw e_3;
                         case 9:
                             this.eventHandler.emitEvent(exports.EventType.LOGOUT_END, exports.InteractionType.Popup);
                             return [2 /*return*/];
@@ -11575,11 +11665,10 @@
                             // Cache start page, returns to this page after redirectUri if navigateToLoginRequestUrl is true
                             if (params.redirectStartPage) {
                                 this.browserRequestLogger.verbose("RedirectHandler.initiateAuthRequest: redirectStartPage set, caching start page");
-                                this.browserStorage.setTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, params.redirectStartPage, true);
+                                this.browserStorage.setTemporaryCache(exports.TemporaryCacheKeys.ORIGIN_URI, params.redirectStartPage, true);
                             }
                             // Set interaction status in the library.
-                            this.browserStorage.setInteractionInProgress(true);
-                            this.browserStorage.setTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, this.authCodeRequest.correlationId, true);
+                            this.browserStorage.setTemporaryCache(exports.TemporaryCacheKeys.CORRELATION_ID, this.authCodeRequest.correlationId, true);
                             this.browserStorage.cacheCodeRequest(this.authCodeRequest, this.browserCrypto);
                             this.browserRequestLogger.infoPii("RedirectHandler.initiateAuthRequest: Navigate to: " + requestUrl);
                             navigationOptions = {
@@ -11696,9 +11785,10 @@
                 var validRequest, serverTelemetryManager, authCodeRequest, authClient, interactionHandler, navigateUrl, redirectStartPage, e_1;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.preflightInteractiveRequest(request, exports.InteractionType.Redirect)];
+                        case 0: return [4 /*yield*/, this.initializeAuthorizationRequest(request, exports.InteractionType.Redirect)];
                         case 1:
                             validRequest = _a.sent();
+                            this.browserStorage.updateCacheEntries(validRequest.state, validRequest.nonce, validRequest.authority, validRequest.loginHint || "", validRequest.account || null);
                             serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenRedirect);
                             _a.label = 2;
                         case 2:
@@ -11706,7 +11796,7 @@
                             return [4 /*yield*/, this.initializeAuthorizationCodeRequest(validRequest)];
                         case 3:
                             authCodeRequest = _a.sent();
-                            return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, validRequest.authority)];
+                            return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions)];
                         case 4:
                             authClient = _a.sent();
                             this.logger.verbose("Auth code client created");
@@ -11768,7 +11858,6 @@
                             state = void 0;
                             try {
                                 state = this.validateAndExtractStateFromHash(responseHash, exports.InteractionType.Redirect);
-                                BrowserUtils.clearHash(window);
                                 this.logger.verbose("State extracted from hash");
                             }
                             catch (e) {
@@ -11776,7 +11865,7 @@
                                 this.browserStorage.cleanRequestByInteractionType(exports.InteractionType.Redirect);
                                 return [2 /*return*/, null];
                             }
-                            loginRequestUrl = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, true) || "";
+                            loginRequestUrl = this.browserStorage.getTemporaryCache(exports.TemporaryCacheKeys.ORIGIN_URI, true) || "";
                             loginRequestUrlNormalized = UrlString.removeHashFromUrl(loginRequestUrl);
                             currentUrlNormalized = UrlString.removeHashFromUrl(window.location.href);
                             if (!(loginRequestUrlNormalized === currentUrlNormalized && this.config.auth.navigateToLoginRequestUrl)) return [3 /*break*/, 3];
@@ -11800,7 +11889,7 @@
                              * Returned from authority using redirect - need to perform navigation before processing response
                              * Cache the hash to be retrieved after the next redirect
                              */
-                            this.browserStorage.setTemporaryCache(TemporaryCacheKeys.URL_HASH, responseHash, true);
+                            this.browserStorage.setTemporaryCache(exports.TemporaryCacheKeys.URL_HASH, responseHash, true);
                             navigationOptions = {
                                 apiId: exports.ApiId.handleRedirectPromise,
                                 timeout: this.config.system.redirectNavigationTimeout,
@@ -11810,7 +11899,7 @@
                             if (!(!loginRequestUrl || loginRequestUrl === "null")) return [3 /*break*/, 6];
                             homepage = BrowserUtils.getHomepage();
                             // Cache the homepage under ORIGIN_URI to ensure cached hash is processed on homepage
-                            this.browserStorage.setTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, homepage, true);
+                            this.browserStorage.setTemporaryCache(exports.TemporaryCacheKeys.ORIGIN_URI, homepage, true);
                             this.logger.warning("Unable to get valid login request url from cache, redirecting to home page");
                             return [4 /*yield*/, this.navigationClient.navigateInternal(homepage, navigationOptions)];
                         case 5:
@@ -11852,12 +11941,13 @@
             this.logger.verbose("getRedirectResponseHash called");
             // Get current location hash from window or cache.
             var isResponseHash = UrlString.hashContainsKnownProperties(hash);
-            var cachedHash = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.URL_HASH, true);
-            this.browserStorage.removeItem(this.browserStorage.generateCacheKey(TemporaryCacheKeys.URL_HASH));
             if (isResponseHash) {
+                BrowserUtils.clearHash(window);
                 this.logger.verbose("Hash contains known properties, returning response hash");
                 return hash;
             }
+            var cachedHash = this.browserStorage.getTemporaryCache(exports.TemporaryCacheKeys.URL_HASH, true);
+            this.browserStorage.removeItem(this.browserStorage.generateCacheKey(exports.TemporaryCacheKeys.URL_HASH));
             this.logger.verbose("Hash does not contain known properties, returning cached hash");
             return cachedHash;
         };
@@ -12152,6 +12242,7 @@
                             return [4 /*yield*/, this.initializeAuthorizationRequest(__assign$1(__assign$1({}, request), { prompt: PromptValue.NONE }), exports.InteractionType.Silent)];
                         case 1:
                             silentRequest = _a.sent();
+                            this.browserStorage.updateCacheEntries(silentRequest.state, silentRequest.nonce, silentRequest.authority, silentRequest.loginHint || "", silentRequest.account || null);
                             serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
                             _a.label = 2;
                         case 2:
@@ -12159,7 +12250,7 @@
                             return [4 /*yield*/, this.initializeAuthorizationCodeRequest(silentRequest)];
                         case 3:
                             authCodeRequest = _a.sent();
-                            return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, silentRequest.authority)];
+                            return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions)];
                         case 4:
                             authClient = _a.sent();
                             this.logger.verbose("Auth code client created");
@@ -12242,7 +12333,7 @@
                         case 1:
                             silentRequest = __assign$1.apply(void 0, _a.concat([_b.sent()]));
                             serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenSilent_silentFlow);
-                            return [4 /*yield*/, this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority)];
+                            return [4 /*yield*/, this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions)];
                         case 2:
                             refreshTokenClient = _b.sent();
                             this.logger.verbose("Refresh token client created");
@@ -12270,12 +12361,12 @@
          * @param serverTelemetryManager
          * @param authorityUrl
          */
-        SilentRefreshClient.prototype.createRefreshTokenClient = function (serverTelemetryManager, authorityUrl) {
+        SilentRefreshClient.prototype.createRefreshTokenClient = function (serverTelemetryManager, authorityUrl, azureCloudOptions) {
             return __awaiter$1(this, void 0, void 0, function () {
                 var clientConfig;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl)];
+                        case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];
                         case 1:
                             clientConfig = _a.sent();
                             return [2 /*return*/, new RefreshTokenClient(clientConfig)];
@@ -12318,13 +12409,14 @@
                 this.loadAccessToken(request, response, request.account.homeAccountId, request.account.environment, request.account.tenantId, options);
             }
             else if (request.authority) {
+                var authorityUrl = Authority.generateAuthority(request.authority, request.azureCloudOptions);
                 var authorityOptions = {
                     protocolMode: this.config.auth.protocolMode,
                     knownAuthorities: this.config.auth.knownAuthorities,
                     cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,
-                    authorityMetadata: this.config.auth.authorityMetadata
+                    authorityMetadata: this.config.auth.authorityMetadata,
                 };
-                var authority = new Authority(request.authority, this.config.system.networkClient, this.storage, authorityOptions);
+                var authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions);
                 // "clientInfo" from options takes precedence over "clientInfo" in response
                 if (options.clientInfo) {
                     this.logger.trace("TokenCache - homeAccountId from options");
@@ -12446,6 +12538,7 @@
                             return [4 /*yield*/, this.initializeAuthorizationRequest(request, exports.InteractionType.Silent)];
                         case 1:
                             silentRequest = _a.sent();
+                            this.browserStorage.updateCacheEntries(silentRequest.state, silentRequest.nonce, silentRequest.authority, silentRequest.loginHint || "", silentRequest.account || null);
                             serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
                             _a.label = 2;
                         case 2:
@@ -12563,7 +12656,7 @@
                         if (typeof response === "undefined") {
                             this.eventHandler.emitEvent(exports.EventType.HANDLE_REDIRECT_START, exports.InteractionType.Redirect);
                             this.logger.verbose("handleRedirectPromise has been called for the first time, storing the promise");
-                            correlationId = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, true) || "";
+                            correlationId = this.browserStorage.getTemporaryCache(exports.TemporaryCacheKeys.CORRELATION_ID, true) || "";
                             redirectClient = new RedirectClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, correlationId);
                             response = redirectClient.handleRedirectPromise(hash)
                                 .then(function (result) {
@@ -12620,8 +12713,8 @@
                 var _this = this;
                 return __generator$1(this, function (_a) {
                     // Preflight request
-                    this.preflightBrowserEnvironmentCheck(exports.InteractionType.Redirect);
                     this.logger.verbose("acquireTokenRedirect called");
+                    this.preflightBrowserEnvironmentCheck(exports.InteractionType.Redirect);
                     isLoggedIn = this.getAllAccounts().length > 0;
                     if (isLoggedIn) {
                         this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Redirect, request);
@@ -12655,8 +12748,8 @@
         ClientApplication.prototype.acquireTokenPopup = function (request) {
             var _this = this;
             try {
-                this.preflightBrowserEnvironmentCheck(exports.InteractionType.Popup);
                 this.logger.verbose("acquireTokenPopup called", request.correlationId);
+                this.preflightBrowserEnvironmentCheck(exports.InteractionType.Popup);
             }
             catch (e) {
                 // Since this function is syncronous we need to reject
@@ -12991,6 +13084,21 @@
                 !this.config.cache.storeAuthStateInCookie) {
                 throw BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError();
             }
+            if (interactionType === exports.InteractionType.Redirect || interactionType === exports.InteractionType.Popup) {
+                this.preflightInteractiveRequest();
+            }
+        };
+        /**
+         * Helper to validate app environment before making a request.
+         * @param request
+         * @param interactionType
+         */
+        ClientApplication.prototype.preflightInteractiveRequest = function () {
+            this.logger.verbose("preflightInteractiveRequest called, validating app environment");
+            // block the reload if it occurred inside a hidden iframe
+            BrowserUtils.blockReloadInHiddenIframes();
+            // Set interaction in progress temporary cache or throw if alread set.
+            this.browserStorage.setInteractionInProgress(true);
         };
         /**
          * Adds event callbacks to array
@@ -13082,7 +13190,7 @@
                     switch (_a.label) {
                         case 0:
                             serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenSilent_silentFlow);
-                            return [4 /*yield*/, this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority)];
+                            return [4 /*yield*/, this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions)];
                         case 1:
                             silentAuthClient = _a.sent();
                             this.logger.verbose("Silent auth client created");
@@ -13117,12 +13225,12 @@
          * @param serverTelemetryManager
          * @param authorityUrl
          */
-        SilentCacheClient.prototype.createSilentFlowClient = function (serverTelemetryManager, authorityUrl) {
+        SilentCacheClient.prototype.createSilentFlowClient = function (serverTelemetryManager, authorityUrl, azureCloudOptions) {
             return __awaiter$1(this, void 0, void 0, function () {
                 var clientConfig;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
-                        case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl)];
+                        case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];
                         case 1:
                             clientConfig = _a.sent();
                             return [2 /*return*/, new SilentFlowClient(clientConfig)];
@@ -13525,21 +13633,34 @@
     exports.AuthenticationHeaderParser = AuthenticationHeaderParser;
     exports.BrowserAuthError = BrowserAuthError;
     exports.BrowserAuthErrorMessage = BrowserAuthErrorMessage;
+    exports.BrowserCacheManager = BrowserCacheManager;
     exports.BrowserConfigurationAuthError = BrowserConfigurationAuthError;
     exports.BrowserConfigurationAuthErrorMessage = BrowserConfigurationAuthErrorMessage;
+    exports.BrowserConstants = BrowserConstants;
     exports.BrowserUtils = BrowserUtils;
     exports.ClientAuthError = ClientAuthError;
     exports.ClientAuthErrorMessage = ClientAuthErrorMessage;
     exports.ClientConfigurationError = ClientConfigurationError;
     exports.ClientConfigurationErrorMessage = ClientConfigurationErrorMessage;
+    exports.DEFAULT_IFRAME_TIMEOUT_MS = DEFAULT_IFRAME_TIMEOUT_MS;
+    exports.EventHandler = EventHandler;
     exports.EventMessageUtils = EventMessageUtils;
     exports.InteractionRequiredAuthError = InteractionRequiredAuthError;
     exports.InteractionRequiredAuthErrorMessage = InteractionRequiredAuthErrorMessage;
     exports.Logger = Logger;
     exports.NavigationClient = NavigationClient;
+    exports.OIDC_DEFAULT_SCOPES = OIDC_DEFAULT_SCOPES;
+    exports.PopupClient = PopupClient;
+    exports.PopupUtils = PopupUtils;
     exports.PublicClientApplication = PublicClientApplication;
+    exports.RedirectClient = RedirectClient;
+    exports.RedirectHandler = RedirectHandler;
     exports.ServerError = ServerError;
     exports.SignedHttpRequest = SignedHttpRequest;
+    exports.SilentCacheClient = SilentCacheClient;
+    exports.SilentIframeClient = SilentIframeClient;
+    exports.SilentRefreshClient = SilentRefreshClient;
+    exports.StandardInteractionClient = StandardInteractionClient;
     exports.StringUtils = StringUtils;
     exports.UrlString = UrlString;
     exports.stubbedPublicClientApplication = stubbedPublicClientApplication;