@azure/msal-browser 2.21.0 → 2.22.0

package/dist/index.cjs.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.21.0 2022-01-04 */
+/*! @azure/msal-browser v2.22.0 2022-02-08 */
 'use strict';
 'use strict';
 
@@ -105,7 +105,7 @@ function __spread() {
     return ar;
 }
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 /*! *****************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -192,7 +192,7 @@ function __spreadArrays() {
     return r;
 }
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -206,6 +206,7 @@ var Constants = {
     // default authority
     DEFAULT_AUTHORITY: "https://login.microsoftonline.com/common/",
     DEFAULT_AUTHORITY_HOST: "login.microsoftonline.com",
+    DEFAULT_COMMON_TENANT: "common",
     // ADFS String
     ADFS: "adfs",
     // Default AAD Instance Discovery Endpoint
@@ -330,6 +331,7 @@ var AADServerParamKeys;
     AADServerParamKeys["FOCI"] = "foci";
     AADServerParamKeys["CCS_HEADER"] = "X-AnchorMailbox";
     AADServerParamKeys["RETURN_SPA_CODE"] = "return_spa_code";
+    AADServerParamKeys["LOGOUT_HINT"] = "logout_hint";
 })(AADServerParamKeys || (AADServerParamKeys = {}));
 /**
  * Claims request keys
@@ -554,7 +556,7 @@ var CacheOutcome;
     CacheOutcome["REFRESH_CACHED_ACCESS_TOKEN"] = "4";
 })(CacheOutcome || (CacheOutcome = {}));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -598,7 +600,7 @@ var AuthError = /** @class */ (function (_super) {
     return AuthError;
 }(Error));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -673,7 +675,7 @@ var DEFAULT_CRYPTO_IMPLEMENTATION = {
     }
 };
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1135,7 +1137,7 @@ var ClientAuthError = /** @class */ (function (_super) {
     return ClientAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1260,7 +1262,7 @@ var StringUtils = /** @class */ (function () {
     return StringUtils;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1440,12 +1442,31 @@ var Logger = /** @class */ (function () {
     return Logger;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 /* eslint-disable header/header */
 var name$1 = "@azure/msal-common";
-var version$1 = "6.0.0";
+var version$1 = "6.1.0";
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+exports.AzureCloudInstance = void 0;
+(function (AzureCloudInstance) {
+    // AzureCloudInstance is not specified.
+    AzureCloudInstance[AzureCloudInstance["None"] = 0] = "None";
+    // Microsoft Azure public cloud
+    AzureCloudInstance["AzurePublic"] = "https://login.microsoftonline.com";
+    // Microsoft Chinese national cloud
+    AzureCloudInstance["AzureChina"] = "https://login.chinacloudapi.cn";
+    // Microsoft German national cloud ("Black Forest")
+    AzureCloudInstance["AzureGermany"] = "https://login.microsoftonline.de";
+    // US Government cloud
+    AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
+})(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
+
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1604,7 +1625,7 @@ var CredentialEntity = /** @class */ (function () {
     return CredentialEntity;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1686,6 +1707,10 @@ var ClientConfigurationErrorMessage = {
         code: "untrusted_authority",
         desc: "The provided authority is not a trusted authority. Please include this authority in the knownAuthorities config parameter."
     },
+    invalidAzureCloudInstance: {
+        code: "invalid_azure_cloud_instance",
+        desc: "Invalid AzureCloudInstance provided. Please refer MSAL JS docs: aks.ms/msaljs/azure_cloud_instance for valid values"
+    },
     missingSshJwk: {
         code: "missing_ssh_jwk",
         desc: "Missing sshJwk in SSH certificate request. A stringified JSON Web Key is required when using the SSH authentication scheme."
@@ -1822,7 +1847,13 @@ var ClientConfigurationError = /** @class */ (function (_super) {
     ClientConfigurationError.createUntrustedAuthorityError = function () {
         return new ClientConfigurationError(ClientConfigurationErrorMessage.untrustedAuthority.code, ClientConfigurationErrorMessage.untrustedAuthority.desc);
     };
-    /*
+    /**
+     * Throws error when the AzureCloudInstance is set to an invalid value
+     */
+    ClientConfigurationError.createInvalidAzureCloudInstanceError = function () {
+        return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidAzureCloudInstance.code, ClientConfigurationErrorMessage.invalidAzureCloudInstance.desc);
+    };
+    /**
      * Throws an error when the authentication scheme is set to SSH but the SSH public key is omitted from the request
      */
     ClientConfigurationError.createMissingSshJwkError = function () {
@@ -1849,7 +1880,7 @@ var ClientConfigurationError = /** @class */ (function (_super) {
     return ClientConfigurationError;
 }(ClientAuthError));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2033,7 +2064,7 @@ var ScopeSet = /** @class */ (function () {
     return ScopeSet;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2071,7 +2102,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2085,7 +2116,7 @@ var AuthorityType;
     AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
 })(AuthorityType || (AuthorityType = {}));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2319,7 +2350,7 @@ var AccountEntity = /** @class */ (function () {
     return AccountEntity;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2357,7 +2388,7 @@ var AuthToken = /** @class */ (function () {
     return AuthToken;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3199,7 +3230,7 @@ var DefaultStorageClass = /** @class */ (function (_super) {
     return DefaultStorageClass;
 }(CacheManager));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3209,7 +3240,8 @@ var DefaultStorageClass = /** @class */ (function (_super) {
 var DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 var DEFAULT_SYSTEM_OPTIONS = {
     tokenRenewalOffsetSeconds: DEFAULT_TOKEN_RENEWAL_OFFSET_SEC,
-    preventCorsPreflight: false
+    preventCorsPreflight: false,
+    proxyUrl: "",
 };
 var DEFAULT_LOGGER_IMPLEMENTATION = {
     loggerCallback: function () {
@@ -3249,6 +3281,10 @@ var DEFAULT_CLIENT_CREDENTIALS = {
     clientSecret: "",
     clientAssertion: undefined
 };
+var DEFAULT_AZURE_CLOUD_OPTIONS = {
+    azureCloudInstance: exports.AzureCloudInstance.None,
+    tenant: "" + Constants.DEFAULT_COMMON_TENANT
+};
 /**
  * Function that sets the default options when not explicitly configured from app developer
  *
@@ -3278,10 +3314,10 @@ function buildClientConfiguration(_a) {
  * @param authOptions
  */
 function buildAuthOptions(authOptions) {
-    return __assign({ clientCapabilities: [] }, authOptions);
+    return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS }, authOptions);
 }
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3301,7 +3337,7 @@ var ServerError = /** @class */ (function (_super) {
     return ServerError;
 }(AuthError));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3397,7 +3433,7 @@ var ThrottlingUtils = /** @class */ (function () {
     return ThrottlingUtils;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3446,7 +3482,7 @@ var NetworkManager = /** @class */ (function () {
     return NetworkManager;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3457,7 +3493,7 @@ var CcsCredentialType;
     CcsCredentialType["UPN"] = "UPN";
 })(CcsCredentialType || (CcsCredentialType = {}));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3521,7 +3557,7 @@ var BaseClient = /** @class */ (function () {
             var response;
             return __generator(this, function (_a) {
                 switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.networkManager.sendPostRequest(thumbprint, tokenEndpoint, { body: queryString, headers: headers })];
+                    case 0: return [4 /*yield*/, this.networkManager.sendPostRequest(thumbprint, tokenEndpoint, { body: queryString, headers: headers, proxyUrl: this.config.systemOptions.proxyUrl })];
                     case 1:
                         response = _a.sent();
                         if (this.config.serverTelemetryManager && response.status < 500 && response.status !== 429) {
@@ -3546,7 +3582,7 @@ var BaseClient = /** @class */ (function () {
     return BaseClient;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3632,7 +3668,7 @@ var RequestValidator = /** @class */ (function () {
     return RequestValidator;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3959,6 +3995,12 @@ var RequestParameterBuilder = /** @class */ (function () {
     RequestParameterBuilder.prototype.addThrottling = function () {
         this.parameters.set(AADServerParamKeys.X_MS_LIB_CAPABILITY, ThrottlingConstants.X_MS_LIB_CAPABILITY_VALUE);
     };
+    /**
+     * Adds logout_hint parameter for "silent" logout which prevent server account picker
+     */
+    RequestParameterBuilder.prototype.addLogoutHint = function (logoutHint) {
+        this.parameters.set(AADServerParamKeys.LOGOUT_HINT, encodeURIComponent(logoutHint));
+    };
     /**
      * Utility to create a URL from the params map
      */
@@ -3972,7 +4014,7 @@ var RequestParameterBuilder = /** @class */ (function () {
     return RequestParameterBuilder;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4037,7 +4079,7 @@ var IdTokenEntity = /** @class */ (function (_super) {
     return IdTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4087,7 +4129,7 @@ var TimeUtils = /** @class */ (function () {
     return TimeUtils;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4201,7 +4243,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
     return AccessTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4268,7 +4310,7 @@ var RefreshTokenEntity = /** @class */ (function (_super) {
     return RefreshTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4332,7 +4374,7 @@ var InteractionRequiredAuthError = /** @class */ (function (_super) {
     return InteractionRequiredAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4348,7 +4390,7 @@ var CacheRecord = /** @class */ (function () {
     return CacheRecord;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4419,7 +4461,7 @@ var ProtocolUtils = /** @class */ (function () {
     return ProtocolUtils;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4620,7 +4662,7 @@ var UrlString = /** @class */ (function () {
     return UrlString;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4695,7 +4737,7 @@ var PopTokenGenerator = /** @class */ (function () {
     return PopTokenGenerator;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4765,7 +4807,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return AppMetadataEntity;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4801,7 +4843,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return TokenCacheContext;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5066,7 +5108,7 @@ var ResponseHandler = /** @class */ (function () {
     return ResponseHandler;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5455,6 +5497,9 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
         if (request.state) {
             parameterBuilder.addState(request.state);
         }
+        if (request.logoutHint) {
+            parameterBuilder.addLogoutHint(request.logoutHint);
+        }
         if (request.extraQueryParameters) {
             parameterBuilder.addExtraQueryParameters(request.extraQueryParameters);
         }
@@ -5474,7 +5519,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
     return AuthorizationCodeClient;
 }(BaseClient));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5685,7 +5730,7 @@ var RefreshTokenClient = /** @class */ (function (_super) {
     return RefreshTokenClient;
 }(BaseClient));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5801,7 +5846,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
     return SilentFlowClient;
 }(BaseClient));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5812,7 +5857,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("issuer"));
 }
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5826,7 +5871,7 @@ exports.ProtocolMode = void 0;
     ProtocolMode["OIDC"] = "OIDC";
 })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5901,7 +5946,7 @@ var AuthorityMetadataEntity = /** @class */ (function () {
     return AuthorityMetadataEntity;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5911,7 +5956,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5926,18 +5971,22 @@ var RegionDiscovery = /** @class */ (function () {
      *
      * @returns Promise<string | null>
      */
-    RegionDiscovery.prototype.detectRegion = function (environmentRegion, regionDiscoveryMetadata) {
+    RegionDiscovery.prototype.detectRegion = function (environmentRegion, regionDiscoveryMetadata, proxyUrl) {
         return __awaiter(this, void 0, void 0, function () {
-            var autodetectedRegionName, localIMDSVersionResponse, currentIMDSVersion, currentIMDSVersionResponse;
+            var autodetectedRegionName, options, localIMDSVersionResponse, currentIMDSVersion, currentIMDSVersionResponse;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         autodetectedRegionName = environmentRegion;
                         if (!!autodetectedRegionName) return [3 /*break*/, 8];
+                        options = RegionDiscovery.IMDS_OPTIONS;
+                        if (proxyUrl) {
+                            options.proxyUrl = proxyUrl;
+                        }
                         _a.label = 1;
                     case 1:
                         _a.trys.push([1, 6, , 7]);
-                        return [4 /*yield*/, this.getRegionFromIMDS(Constants.IMDS_VERSION)];
+                        return [4 /*yield*/, this.getRegionFromIMDS(Constants.IMDS_VERSION, options)];
                     case 2:
                         localIMDSVersionResponse = _a.sent();
                         if (localIMDSVersionResponse.status === ResponseCodes.httpSuccess) {
@@ -5945,14 +5994,14 @@ var RegionDiscovery = /** @class */ (function () {
                             regionDiscoveryMetadata.region_source = RegionDiscoverySources.IMDS;
                         }
                         if (!(localIMDSVersionResponse.status === ResponseCodes.httpBadRequest)) return [3 /*break*/, 5];
-                        return [4 /*yield*/, this.getCurrentVersion()];
+                        return [4 /*yield*/, this.getCurrentVersion(options)];
                     case 3:
                         currentIMDSVersion = _a.sent();
                         if (!currentIMDSVersion) {
                             regionDiscoveryMetadata.region_source = RegionDiscoverySources.FAILED_AUTO_DETECTION;
                             return [2 /*return*/, null];
                         }
-                        return [4 /*yield*/, this.getRegionFromIMDS(currentIMDSVersion)];
+                        return [4 /*yield*/, this.getRegionFromIMDS(currentIMDSVersion, options)];
                     case 4:
                         currentIMDSVersionResponse = _a.sent();
                         if (currentIMDSVersionResponse.status === ResponseCodes.httpSuccess) {
@@ -5985,10 +6034,10 @@ var RegionDiscovery = /** @class */ (function () {
      * @param imdsEndpointUrl
      * @returns Promise<NetworkResponse<string>>
      */
-    RegionDiscovery.prototype.getRegionFromIMDS = function (version) {
+    RegionDiscovery.prototype.getRegionFromIMDS = function (version, options) {
         return __awaiter(this, void 0, void 0, function () {
             return __generator(this, function (_a) {
-                return [2 /*return*/, this.networkInterface.sendGetRequestAsync(Constants.IMDS_ENDPOINT + "?api-version=" + version + "&format=text", RegionDiscovery.IMDS_OPTIONS, Constants.IMDS_TIMEOUT)];
+                return [2 /*return*/, this.networkInterface.sendGetRequestAsync(Constants.IMDS_ENDPOINT + "?api-version=" + version + "&format=text", options, Constants.IMDS_TIMEOUT)];
             });
         });
     };
@@ -5997,14 +6046,14 @@ var RegionDiscovery = /** @class */ (function () {
      *
      * @returns Promise<string | null>
      */
-    RegionDiscovery.prototype.getCurrentVersion = function () {
+    RegionDiscovery.prototype.getCurrentVersion = function (options) {
         return __awaiter(this, void 0, void 0, function () {
             var response;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         _a.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(Constants.IMDS_ENDPOINT + "?format=json", RegionDiscovery.IMDS_OPTIONS)];
+                        return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(Constants.IMDS_ENDPOINT + "?format=json", options)];
                     case 1:
                         response = _a.sent();
                         // When IMDS endpoint is called without the api version query param, bad request response comes back with latest version.
@@ -6021,11 +6070,15 @@ var RegionDiscovery = /** @class */ (function () {
         });
     };
     // Options for the IMDS endpoint request
-    RegionDiscovery.IMDS_OPTIONS = { headers: { "Metadata": "true" } };
+    RegionDiscovery.IMDS_OPTIONS = {
+        headers: {
+            Metadata: "true",
+        },
+    };
     return RegionDiscovery;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6036,7 +6089,7 @@ var RegionDiscovery = /** @class */ (function () {
  * endpoint. It will store the pertinent config data in this object for use during token calls.
  */
 var Authority = /** @class */ (function () {
-    function Authority(authority, networkInterface, cacheManager, authorityOptions) {
+    function Authority(authority, networkInterface, cacheManager, authorityOptions, proxyUrl) {
         this.canonicalAuthority = authority;
         this._canonicalAuthority.validateAsUri();
         this.networkInterface = networkInterface;
@@ -6044,6 +6097,7 @@ var Authority = /** @class */ (function () {
         this.authorityOptions = authorityOptions;
         this.regionDiscovery = new RegionDiscovery(networkInterface);
         this.regionDiscoveryMetadata = { region_used: undefined, region_source: undefined, region_outcome: undefined };
+        this.proxyUrl = proxyUrl || Constants.EMPTY_STRING;
     }
     Object.defineProperty(Authority.prototype, "authorityType", {
         // See above for AuthorityType
@@ -6312,7 +6366,7 @@ var Authority = /** @class */ (function () {
                         metadata = _b.sent();
                         if (!metadata) return [3 /*break*/, 4];
                         if (!((_a = this.authorityOptions.azureRegionConfiguration) === null || _a === void 0 ? void 0 : _a.azureRegion)) return [3 /*break*/, 3];
-                        return [4 /*yield*/, this.regionDiscovery.detectRegion(this.authorityOptions.azureRegionConfiguration.environmentRegion, this.regionDiscoveryMetadata)];
+                        return [4 /*yield*/, this.regionDiscovery.detectRegion(this.authorityOptions.azureRegionConfiguration.environmentRegion, this.regionDiscoveryMetadata, this.proxyUrl)];
                     case 2:
                         autodetectedRegionName = _b.sent();
                         azureRegion = this.authorityOptions.azureRegionConfiguration.azureRegion === Constants.AZURE_REGION_AUTO_DISCOVER_FLAG
@@ -6375,19 +6429,25 @@ var Authority = /** @class */ (function () {
      */
     Authority.prototype.getEndpointMetadataFromNetwork = function () {
         return __awaiter(this, void 0, void 0, function () {
-            var response;
+            var options, response;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        _a.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(this.defaultOpenIdConfigurationEndpoint)];
+                        options = {};
+                        if (this.proxyUrl) {
+                            options.proxyUrl = this.proxyUrl;
+                        }
+                        _a.label = 1;
                     case 1:
+                        _a.trys.push([1, 3, , 4]);
+                        return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(this.defaultOpenIdConfigurationEndpoint, options)];
+                    case 2:
                         response = _a.sent();
                         return [2 /*return*/, isOpenIdConfigResponse(response.body) ? response.body : null];
-                    case 2:
+                    case 3:
                         _a.sent();
                         return [2 /*return*/, null];
-                    case 3: return [2 /*return*/];
+                    case 4: return [2 /*return*/];
                 }
             });
         });
@@ -6457,16 +6517,20 @@ var Authority = /** @class */ (function () {
      */
     Authority.prototype.getCloudDiscoveryMetadataFromNetwork = function () {
         return __awaiter(this, void 0, void 0, function () {
-            var instanceDiscoveryEndpoint, match, response, metadata;
+            var instanceDiscoveryEndpoint, options, match, response, metadata;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         instanceDiscoveryEndpoint = "" + Constants.AAD_INSTANCE_DISCOVERY_ENDPT + this.canonicalAuthority + "oauth2/v2.0/authorize";
+                        options = {};
+                        if (this.proxyUrl) {
+                            options.proxyUrl = this.proxyUrl;
+                        }
                         match = null;
                         _a.label = 1;
                     case 1:
                         _a.trys.push([1, 3, , 4]);
-                        return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(instanceDiscoveryEndpoint)];
+                        return [4 /*yield*/, this.networkInterface.sendGetRequestAsync(instanceDiscoveryEndpoint, options)];
                     case 2:
                         response = _a.sent();
                         metadata = isCloudInstanceDiscoveryResponse(response.body) ? response.body.metadata : [];
@@ -6481,7 +6545,7 @@ var Authority = /** @class */ (function () {
                         return [2 /*return*/, null];
                     case 4:
                         if (!match) {
-                            // Custom Domain scenario, host is trusted because Instance Discovery call succeeded 
+                            // Custom Domain scenario, host is trusted because Instance Discovery call succeeded
                             match = Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
                         }
                         return [2 /*return*/, match];
@@ -6499,6 +6563,19 @@ var Authority = /** @class */ (function () {
         });
         return matches.length > 0;
     };
+    /**
+     * helper function to populate the authority based on azureCloudOptions
+     * @param authorityString
+     * @param azureCloudOptions
+     */
+    Authority.generateAuthority = function (authorityString, azureCloudOptions) {
+        var authorityAzureCloudInstance;
+        if (azureCloudOptions && azureCloudOptions.azureCloudInstance !== exports.AzureCloudInstance.None) {
+            var tenant = azureCloudOptions.tenant ? azureCloudOptions.tenant : Constants.DEFAULT_COMMON_TENANT;
+            authorityAzureCloudInstance = azureCloudOptions.azureCloudInstance + "/" + tenant + "/";
+        }
+        return authorityAzureCloudInstance ? authorityAzureCloudInstance : authorityString;
+    };
     /**
      * Creates cloud discovery metadata object from a given host
      * @param host
@@ -6591,7 +6668,7 @@ var Authority = /** @class */ (function () {
     return Authority;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6610,13 +6687,13 @@ var AuthorityFactory = /** @class */ (function () {
      * @param networkClient
      * @param protocolMode
      */
-    AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions) {
+    AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, proxyUrl) {
         return __awaiter(this, void 0, void 0, function () {
             var acquireTokenAuthority, e_1;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions);
+                        acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, proxyUrl);
                         _a.label = 1;
                     case 1:
                         _a.trys.push([1, 3, , 4]);
@@ -6642,17 +6719,17 @@ var AuthorityFactory = /** @class */ (function () {
      * @param networkInterface
      * @param protocolMode
      */
-    AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions) {
+    AuthorityFactory.createInstance = function (authorityUrl, networkInterface, cacheManager, authorityOptions, proxyUrl) {
         // Throw error if authority url is empty
         if (StringUtils.isEmpty(authorityUrl)) {
             throw ClientConfigurationError.createUrlEmptyError();
         }
-        return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions);
+        return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, proxyUrl);
     };
     return AuthorityFactory;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6683,7 +6760,7 @@ var ServerTelemetryEntity = /** @class */ (function () {
     return ServerTelemetryEntity;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6711,7 +6788,7 @@ var ThrottlingEntity = /** @class */ (function () {
     return ThrottlingEntity;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6728,7 +6805,7 @@ var StubbedNetworkModule = {
     }
 };
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6787,7 +6864,7 @@ var AuthenticationHeaderParser = /** @class */ (function () {
     return AuthenticationHeaderParser;
 }());
 
-/*! @azure/msal-common v6.0.0 2022-01-04 */
+/*! @azure/msal-common v6.1.0 2022-02-08 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7003,7 +7080,7 @@ var HTTP_REQUEST_TYPE;
 /**
  * Temporary cache keys for MSAL, deleted after any request.
  */
-var TemporaryCacheKeys;
+exports.TemporaryCacheKeys = void 0;
 (function (TemporaryCacheKeys) {
     TemporaryCacheKeys["AUTHORITY"] = "authority";
     TemporaryCacheKeys["ACQUIRE_TOKEN_ACCOUNT"] = "acquireToken.account";
@@ -7018,7 +7095,7 @@ var TemporaryCacheKeys;
     TemporaryCacheKeys["INTERACTION_STATUS_KEY"] = "interaction.status";
     TemporaryCacheKeys["CCS_CREDENTIAL"] = "ccs.credential";
     TemporaryCacheKeys["CORRELATION_ID"] = "request.correlationId";
-})(TemporaryCacheKeys || (TemporaryCacheKeys = {}));
+})(exports.TemporaryCacheKeys || (exports.TemporaryCacheKeys = {}));
 /**
  * Cache keys stored in-memory
  */
@@ -7053,6 +7130,7 @@ exports.InteractionType = void 0;
     InteractionType["Redirect"] = "redirect";
     InteractionType["Popup"] = "popup";
     InteractionType["Silent"] = "silent";
+    InteractionType["None"] = "none";
 })(exports.InteractionType || (exports.InteractionType = {}));
 /**
  * Types of interaction currently in progress.
@@ -9660,7 +9738,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
      */
     BrowserCacheManager.prototype.generateAuthorityKey = function (stateString) {
         var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-        return this.generateCacheKey(TemporaryCacheKeys.AUTHORITY + "." + stateId);
+        return this.generateCacheKey(exports.TemporaryCacheKeys.AUTHORITY + "." + stateId);
     };
     /**
      * Create Nonce key to cache nonce
@@ -9668,7 +9746,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
      */
     BrowserCacheManager.prototype.generateNonceKey = function (stateString) {
         var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-        return this.generateCacheKey(TemporaryCacheKeys.NONCE_IDTOKEN + "." + stateId);
+        return this.generateCacheKey(exports.TemporaryCacheKeys.NONCE_IDTOKEN + "." + stateId);
     };
     /**
      * Creates full cache key for the request state
@@ -9677,7 +9755,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
     BrowserCacheManager.prototype.generateStateKey = function (stateString) {
         // Use the library state id to key temp storage for uniqueness for multiple concurrent requests
         var stateId = ProtocolUtils.parseRequestState(this.cryptoImpl, stateString).libraryState.id;
-        return this.generateCacheKey(TemporaryCacheKeys.REQUEST_STATE + "." + stateId);
+        return this.generateCacheKey(exports.TemporaryCacheKeys.REQUEST_STATE + "." + stateId);
     };
     /**
      * Gets the cached authority based on the cached state. Returns empty if no cached state found.
@@ -9712,14 +9790,14 @@ var BrowserCacheManager = /** @class */ (function (_super) {
                 credential: account.homeAccountId,
                 type: CcsCredentialType.HOME_ACCOUNT_ID
             };
-            this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
+            this.setTemporaryCache(exports.TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
         }
         else if (!StringUtils.isEmpty(loginHint)) {
             var ccsCredential = {
                 credential: loginHint,
                 type: CcsCredentialType.UPN
             };
-            this.setTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
+            this.setTemporaryCache(exports.TemporaryCacheKeys.CCS_CREDENTIAL, JSON.stringify(ccsCredential), true);
         }
     };
     /**
@@ -9743,11 +9821,11 @@ var BrowserCacheManager = /** @class */ (function (_super) {
             this.removeItem(this.generateNonceKey(state));
             this.removeItem(this.generateAuthorityKey(state));
         }
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.ORIGIN_URI));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.URL_HASH));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CORRELATION_ID));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CCS_CREDENTIAL));
+        this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.REQUEST_PARAMS));
+        this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.ORIGIN_URI));
+        this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.URL_HASH));
+        this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.CORRELATION_ID));
+        this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.CCS_CREDENTIAL));
         this.setInteractionInProgress(false);
     };
     /**
@@ -9776,7 +9854,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
         // Loop through all keys to find state key
         this.getKeys().forEach(function (key) {
             // If this key is not the state key, move on
-            if (key.indexOf(TemporaryCacheKeys.REQUEST_STATE) === -1) {
+            if (key.indexOf(exports.TemporaryCacheKeys.REQUEST_STATE) === -1) {
                 return;
             }
             // Retrieve state value, return if not a valid value
@@ -9797,7 +9875,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
     BrowserCacheManager.prototype.cacheCodeRequest = function (authCodeRequest, browserCrypto) {
         this.logger.trace("BrowserCacheManager.cacheCodeRequest called");
         var encodedValue = browserCrypto.base64Encode(JSON.stringify(authCodeRequest));
-        this.setTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, encodedValue, true);
+        this.setTemporaryCache(exports.TemporaryCacheKeys.REQUEST_PARAMS, encodedValue, true);
     };
     /**
      * Gets the token exchange parameters from the cache. Throws an error if nothing is found.
@@ -9805,7 +9883,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
     BrowserCacheManager.prototype.getCachedRequest = function (state, browserCrypto) {
         this.logger.trace("BrowserCacheManager.getCachedRequest called");
         // Get token request from cache and parse as TokenExchangeParameters.
-        var encodedTokenRequest = this.getTemporaryCache(TemporaryCacheKeys.REQUEST_PARAMS, true);
+        var encodedTokenRequest = this.getTemporaryCache(exports.TemporaryCacheKeys.REQUEST_PARAMS, true);
         if (!encodedTokenRequest) {
             throw BrowserAuthError.createNoTokenRequestCacheError();
         }
@@ -9813,7 +9891,7 @@ var BrowserCacheManager = /** @class */ (function (_super) {
         if (!parsedRequest) {
             throw BrowserAuthError.createUnableToParseTokenRequestCacheError();
         }
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
+        this.removeItem(this.generateCacheKey(exports.TemporaryCacheKeys.REQUEST_PARAMS));
         // Get cached authority and use if no authority is cached with request.
         if (StringUtils.isEmpty(parsedRequest.authority)) {
             var authorityCacheKey = this.generateAuthorityKey(state);
@@ -9835,18 +9913,22 @@ var BrowserCacheManager = /** @class */ (function (_super) {
         }
     };
     BrowserCacheManager.prototype.getInteractionInProgress = function () {
-        var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
+        var key = Constants.CACHE_PREFIX + "." + exports.TemporaryCacheKeys.INTERACTION_STATUS_KEY;
         return this.getTemporaryCache(key, false);
     };
     BrowserCacheManager.prototype.setInteractionInProgress = function (inProgress) {
-        var clientId = this.getInteractionInProgress();
         // Ensure we don't overwrite interaction in progress for a different clientId
-        var key = Constants.CACHE_PREFIX + "." + TemporaryCacheKeys.INTERACTION_STATUS_KEY;
-        if (inProgress && !clientId) {
-            // No interaction is in progress
-            this.setTemporaryCache(key, this.clientId, false);
+        var key = Constants.CACHE_PREFIX + "." + exports.TemporaryCacheKeys.INTERACTION_STATUS_KEY;
+        if (inProgress) {
+            if (this.getInteractionInProgress()) {
+                throw BrowserAuthError.createInteractionInProgressError();
+            }
+            else {
+                // No interaction is in progress
+                this.setTemporaryCache(key, this.clientId, false);
+            }
         }
-        else if (!inProgress && clientId === this.clientId) {
+        else if (!inProgress && this.getInteractionInProgress() === this.clientId) {
             this.removeItem(key);
         }
     };
@@ -10373,7 +10455,11 @@ function buildConfiguration(_a, isBrowserEnvironment) {
         postLogoutRedirectUri: "",
         navigateToLoginRequestUrl: true,
         clientCapabilities: [],
-        protocolMode: exports.ProtocolMode.AAD
+        protocolMode: exports.ProtocolMode.AAD,
+        azureCloudOptions: {
+            azureCloudInstance: exports.AzureCloudInstance.None,
+            tenant: ""
+        },
     };
     // Default cache options for browser
     var DEFAULT_CACHE_OPTIONS = {
@@ -10402,7 +10488,7 @@ function buildConfiguration(_a, isBrowserEnvironment) {
 
 /* eslint-disable header/header */
 var name = "@azure/msal-browser";
-var version = "2.21.0";
+var version = "2.22.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10732,11 +10818,32 @@ var StandardInteractionClient = /** @class */ (function (_super) {
      */
     StandardInteractionClient.prototype.initializeLogoutRequest = function (logoutRequest) {
         this.logger.verbose("initializeLogoutRequest called", logoutRequest === null || logoutRequest === void 0 ? void 0 : logoutRequest.correlationId);
-        // Check if interaction is in progress. Throw error if true.
-        if (this.browserStorage.isInteractionInProgress()) {
-            throw BrowserAuthError.createInteractionInProgressError();
-        }
         var validLogoutRequest = __assign$1({ correlationId: this.browserCrypto.createNewGuid() }, logoutRequest);
+        /**
+         * Set logout_hint to be login_hint from ID Token Claims if present
+         * and logoutHint attribute wasn't manually set in logout request
+         */
+        if (logoutRequest) {
+            // If logoutHint isn't set and an account was passed in, try to extract logoutHint from ID Token Claims
+            if (!logoutRequest.logoutHint) {
+                if (logoutRequest.account) {
+                    var logoutHint = this.getLogoutHintFromIdTokenClaims(logoutRequest.account);
+                    if (logoutHint) {
+                        this.logger.verbose("Setting logoutHint to login_hint ID Token Claim value for the account provided");
+                        validLogoutRequest.logoutHint = logoutHint;
+                    }
+                }
+                else {
+                    this.logger.verbose("logoutHint was not set and account was not passed into logout request, logoutHint will not be set");
+                }
+            }
+            else {
+                this.logger.verbose("logoutHint has already been set in logoutRequest");
+            }
+        }
+        else {
+            this.logger.verbose("logoutHint will not be set since no logout request was configured");
+        }
         /*
          * Only set redirect uri if logout request isn't provided or the set uri isn't null.
          * Otherwise, use passed uri, config, or current page.
@@ -10763,17 +10870,37 @@ var StandardInteractionClient = /** @class */ (function (_super) {
         }
         return validLogoutRequest;
     };
+    /**
+     * Parses login_hint ID Token Claim out of AccountInfo object to be used as
+     * logout_hint in end session request.
+     * @param account
+     */
+    StandardInteractionClient.prototype.getLogoutHintFromIdTokenClaims = function (account) {
+        var idTokenClaims = account.idTokenClaims;
+        if (idTokenClaims) {
+            if (idTokenClaims.login_hint) {
+                return idTokenClaims.login_hint;
+            }
+            else {
+                this.logger.verbose("The ID Token Claims tied to the provided account do not contain a login_hint claim, logoutHint will not be added to logout request");
+            }
+        }
+        else {
+            this.logger.verbose("The provided account does not contain ID Token Claims, logoutHint will not be added to logout request");
+        }
+        return null;
+    };
     /**
      * Creates an Authorization Code Client with the given authority, or the default authority.
      * @param serverTelemetryManager
      * @param authorityUrl
      */
-    StandardInteractionClient.prototype.createAuthCodeClient = function (serverTelemetryManager, authorityUrl) {
+    StandardInteractionClient.prototype.createAuthCodeClient = function (serverTelemetryManager, authorityUrl, requestAzureCloudOptions) {
         return __awaiter$1(this, void 0, void 0, function () {
             var clientConfig;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl)];
+                    case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, requestAzureCloudOptions)];
                     case 1:
                         clientConfig = _a.sent();
                         return [2 /*return*/, new AuthorizationCodeClient(clientConfig)];
@@ -10787,14 +10914,14 @@ var StandardInteractionClient = /** @class */ (function (_super) {
      * @param requestAuthority
      * @param requestCorrelationId
      */
-    StandardInteractionClient.prototype.getClientConfiguration = function (serverTelemetryManager, requestAuthority) {
+    StandardInteractionClient.prototype.getClientConfiguration = function (serverTelemetryManager, requestAuthority, requestAzureCloudOptions) {
         return __awaiter$1(this, void 0, void 0, function () {
             var discoveredAuthority;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         this.logger.verbose("getClientConfiguration called");
-                        return [4 /*yield*/, this.getDiscoveredAuthority(requestAuthority)];
+                        return [4 /*yield*/, this.getDiscoveredAuthority(requestAuthority, requestAzureCloudOptions)];
                     case 1:
                         discoveredAuthority = _a.sent();
                         return [2 /*return*/, {
@@ -10854,9 +10981,9 @@ var StandardInteractionClient = /** @class */ (function (_super) {
      * @param requestAuthority
      * @param requestCorrelationId
      */
-    StandardInteractionClient.prototype.getDiscoveredAuthority = function (requestAuthority) {
+    StandardInteractionClient.prototype.getDiscoveredAuthority = function (requestAuthority, requestAzureCloudOptions) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var authorityOptions;
+            var authorityOptions, userAuthority, builtAuthority;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
                     case 0:
@@ -10865,38 +10992,12 @@ var StandardInteractionClient = /** @class */ (function (_super) {
                             protocolMode: this.config.auth.protocolMode,
                             knownAuthorities: this.config.auth.knownAuthorities,
                             cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,
-                            authorityMetadata: this.config.auth.authorityMetadata
+                            authorityMetadata: this.config.auth.authorityMetadata,
                         };
-                        if (!requestAuthority) return [3 /*break*/, 2];
-                        this.logger.verbose("Creating discovered authority with request authority");
-                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(requestAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions)];
-                    case 1: return [2 /*return*/, _a.sent()];
-                    case 2:
+                        userAuthority = requestAuthority ? requestAuthority : this.config.auth.authority;
+                        builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);
                         this.logger.verbose("Creating discovered authority with configured authority");
-                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(this.config.auth.authority, this.config.system.networkClient, this.browserStorage, authorityOptions)];
-                    case 3: return [2 /*return*/, _a.sent()];
-                }
-            });
-        });
-    };
-    /**
-     * Helper to validate app environment before making a request.
-     * @param request
-     * @param interactionType
-     */
-    StandardInteractionClient.prototype.preflightInteractiveRequest = function (request, interactionType) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        this.logger.verbose("preflightInteractiveRequest called, validating app environment", request === null || request === void 0 ? void 0 : request.correlationId);
-                        // block the reload if it occurred inside a hidden iframe
-                        BrowserUtils.blockReloadInHiddenIframes();
-                        // Check if interaction is in progress. Throw error if true.
-                        if (this.browserStorage.isInteractionInProgress(false)) {
-                            throw BrowserAuthError.createInteractionInProgressError();
-                        }
-                        return [4 /*yield*/, this.initializeAuthorizationRequest(request, interactionType)];
+                        return [4 /*yield*/, AuthorityFactory.createDiscoveredInstance(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions)];
                     case 1: return [2 /*return*/, _a.sent()];
                 }
             });
@@ -10918,7 +11019,7 @@ var StandardInteractionClient = /** @class */ (function (_super) {
                         browserState = {
                             interactionType: interactionType
                         };
-                        state = ProtocolUtils.setRequestState(this.browserCrypto, (request && request.state) || "", browserState);
+                        state = ProtocolUtils.setRequestState(this.browserCrypto, (request && request.state) || Constants.EMPTY_STRING, browserState);
                         _a = [{}];
                         return [4 /*yield*/, this.initializeBaseRequest(request)];
                     case 1:
@@ -10936,7 +11037,6 @@ var StandardInteractionClient = /** @class */ (function (_super) {
                                 validatedRequest.loginHint = legacyLoginHint;
                             }
                         }
-                        this.browserStorage.updateCacheEntries(validatedRequest.state, validatedRequest.nonce, validatedRequest.authority, validatedRequest.loginHint || "", validatedRequest.account || null);
                         return [2 /*return*/, validatedRequest];
                 }
             });
@@ -11107,8 +11207,8 @@ var PopupUtils = /** @class */ (function () {
      * @param clientId
      * @param request
      */
-    PopupUtils.generatePopupName = function (clientId, request) {
-        return BrowserConstants.POPUP_NAME_PREFIX + "." + clientId + "." + request.scopes.join("-") + "." + request.authority + "." + request.correlationId;
+    PopupUtils.generatePopupName = function (clientId, scopes, authority, correlationId) {
+        return BrowserConstants.POPUP_NAME_PREFIX + "." + clientId + "." + scopes.join("-") + "." + authority + "." + correlationId;
     };
     /**
      * Generates the name for the popup based on the client id and request for logouts
@@ -11241,7 +11341,7 @@ var InteractionHandler = /** @class */ (function () {
      */
     InteractionHandler.prototype.checkCcsCredentials = function () {
         // Look up ccs credential in temp cache
-        var cachedCcsCred = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CCS_CREDENTIAL, true);
+        var cachedCcsCred = this.browserStorage.getTemporaryCache(exports.TemporaryCacheKeys.CCS_CREDENTIAL, true);
         if (cachedCcsCred) {
             try {
                 return JSON.parse(cachedCcsCred);
@@ -11279,8 +11379,6 @@ var PopupHandler = /** @class */ (function (_super) {
     PopupHandler.prototype.initiateAuthRequest = function (requestUrl, params) {
         // Check that request url is not empty.
         if (!StringUtils.isEmpty(requestUrl)) {
-            // Set interaction status in the library.
-            this.browserStorage.setInteractionInProgress(true);
             this.browserRequestLogger.infoPii("Navigate to: " + requestUrl);
             // Open the popup window to requestUrl.
             return this.popupUtils.openPopup(requestUrl, params);
@@ -11330,36 +11428,25 @@ var PopupClient = /** @class */ (function (_super) {
      * @param request
      */
     PopupClient.prototype.acquireToken = function (request) {
-        return __awaiter$1(this, void 0, void 0, function () {
-            var validRequest, popupName, popupWindowAttributes, popup, e_1;
-            return __generator$1(this, function (_a) {
-                switch (_a.label) {
-                    case 0:
-                        _a.trys.push([0, 2, , 3]);
-                        return [4 /*yield*/, this.preflightInteractiveRequest(request, exports.InteractionType.Popup)];
-                    case 1:
-                        validRequest = _a.sent();
-                        popupName = PopupUtils.generatePopupName(this.config.auth.clientId, validRequest);
-                        popupWindowAttributes = request.popupWindowAttributes || {};
-                        // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.
-                        if (this.config.system.asyncPopups) {
-                            this.logger.verbose("asyncPopups set to true, acquiring token");
-                            // Passes on popup position and dimensions if in request
-                            return [2 /*return*/, this.acquireTokenPopupAsync(validRequest, popupName, popupWindowAttributes)];
-                        }
-                        else {
-                            // asyncPopups flag is set to false. Opens popup before acquiring token.
-                            this.logger.verbose("asyncPopup set to false, opening popup before acquiring token");
-                            popup = PopupUtils.openSizedPopup("about:blank", popupName, popupWindowAttributes, this.logger);
-                            return [2 /*return*/, this.acquireTokenPopupAsync(validRequest, popupName, popupWindowAttributes, popup)];
-                        }
-                    case 2:
-                        e_1 = _a.sent();
-                        return [2 /*return*/, Promise.reject(e_1)];
-                    case 3: return [2 /*return*/];
-                }
-            });
-        });
+        try {
+            var popupName = PopupUtils.generatePopupName(this.config.auth.clientId, request.scopes || OIDC_DEFAULT_SCOPES, request.authority || this.config.auth.authority, this.correlationId);
+            var popupWindowAttributes = request.popupWindowAttributes || {};
+            // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.
+            if (this.config.system.asyncPopups) {
+                this.logger.verbose("asyncPopups set to true, acquiring token");
+                // Passes on popup position and dimensions if in request
+                return this.acquireTokenPopupAsync(request, popupName, popupWindowAttributes);
+            }
+            else {
+                // asyncPopups flag is set to false. Opens popup before acquiring token.
+                this.logger.verbose("asyncPopup set to false, opening popup before acquiring token");
+                var popup = PopupUtils.openSizedPopup("about:blank", popupName, popupWindowAttributes, this.logger);
+                return this.acquireTokenPopupAsync(request, popupName, popupWindowAttributes, popup);
+            }
+        }
+        catch (e) {
+            return Promise.reject(e);
+        }
     };
     /**
      * Clears local cache for the current user then opens a popup window prompting the user to sign-out of the server
@@ -11400,26 +11487,30 @@ var PopupClient = /** @class */ (function (_super) {
      *
      * @returns A promise that is fulfilled when this function has completed, or rejected if an error was raised.
      */
-    PopupClient.prototype.acquireTokenPopupAsync = function (validRequest, popupName, popupWindowAttributes, popup) {
+    PopupClient.prototype.acquireTokenPopupAsync = function (request, popupName, popupWindowAttributes, popup) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var serverTelemetryManager, authCodeRequest, authClient, navigateUrl, interactionHandler, popupParameters, popupWindow, hash, state, result, e_2;
+            var serverTelemetryManager, validRequest, authCodeRequest, authClient, navigateUrl, interactionHandler, popupParameters, popupWindow, hash, state, result, e_1;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         this.logger.verbose("acquireTokenPopupAsync called");
                         serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenPopup);
-                        _a.label = 1;
+                        return [4 /*yield*/, this.initializeAuthorizationRequest(request, exports.InteractionType.Popup)];
                     case 1:
-                        _a.trys.push([1, 7, , 8]);
-                        return [4 /*yield*/, this.initializeAuthorizationCodeRequest(validRequest)];
+                        validRequest = _a.sent();
+                        this.browserStorage.updateCacheEntries(validRequest.state, validRequest.nonce, validRequest.authority, validRequest.loginHint || "", validRequest.account || null);
+                        _a.label = 2;
                     case 2:
-                        authCodeRequest = _a.sent();
-                        return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, validRequest.authority)];
+                        _a.trys.push([2, 8, , 9]);
+                        return [4 /*yield*/, this.initializeAuthorizationCodeRequest(validRequest)];
                     case 3:
+                        authCodeRequest = _a.sent();
+                        return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions)];
+                    case 4:
                         authClient = _a.sent();
                         this.logger.verbose("Auth code client created");
                         return [4 /*yield*/, authClient.getAuthCodeUrl(validRequest)];
-                    case 4:
+                    case 5:
                         navigateUrl = _a.sent();
                         interactionHandler = new PopupHandler(authClient, this.browserStorage, authCodeRequest, this.logger);
                         popupParameters = {
@@ -11430,28 +11521,28 @@ var PopupClient = /** @class */ (function (_super) {
                         popupWindow = interactionHandler.initiateAuthRequest(navigateUrl, popupParameters);
                         this.eventHandler.emitEvent(exports.EventType.POPUP_OPENED, exports.InteractionType.Popup, { popupWindow: popupWindow }, null);
                         return [4 /*yield*/, interactionHandler.monitorPopupForHash(popupWindow)];
-                    case 5:
+                    case 6:
                         hash = _a.sent();
                         state = this.validateAndExtractStateFromHash(hash, exports.InteractionType.Popup, validRequest.correlationId);
                         // Remove throttle if it exists
                         ThrottlingUtils.removeThrottle(this.browserStorage, this.config.auth.clientId, authCodeRequest);
                         return [4 /*yield*/, interactionHandler.handleCodeResponseFromHash(hash, state, authClient.authority, this.networkClient)];
-                    case 6:
+                    case 7:
                         result = _a.sent();
                         return [2 /*return*/, result];
-                    case 7:
-                        e_2 = _a.sent();
+                    case 8:
+                        e_1 = _a.sent();
                         if (popup) {
                             // Close the synchronous popup if an error is thrown before the window unload event is registered
                             popup.close();
                         }
-                        if (e_2 instanceof AuthError) {
-                            e_2.setCorrelationId(this.correlationId);
+                        if (e_1 instanceof AuthError) {
+                            e_1.setCorrelationId(this.correlationId);
                         }
-                        serverTelemetryManager.cacheFailedRequest(e_2);
+                        serverTelemetryManager.cacheFailedRequest(e_1);
                         this.browserStorage.cleanRequestByState(validRequest.state);
-                        throw e_2;
-                    case 8: return [2 /*return*/];
+                        throw e_1;
+                    case 9: return [2 /*return*/];
                 }
             });
         });
@@ -11467,7 +11558,7 @@ var PopupClient = /** @class */ (function (_super) {
      */
     PopupClient.prototype.logoutPopupAsync = function (validRequest, popupName, popupWindowAttributes, requestAuthority, popup, mainWindowRedirectUri) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var serverTelemetryManager, authClient, logoutUri, popupUtils, popupWindow, e_3, navigationOptions, absoluteUrl, e_4;
+            var serverTelemetryManager, authClient, logoutUri, popupUtils, popupWindow, e_2, navigationOptions, absoluteUrl, e_3;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
                     case 0:
@@ -11482,7 +11573,6 @@ var PopupClient = /** @class */ (function (_super) {
                     case 2:
                         // Clear cache on logout
                         _a.sent();
-                        this.browserStorage.setInteractionInProgress(true);
                         return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, requestAuthority)];
                     case 3:
                         authClient = _a.sent();
@@ -11503,8 +11593,8 @@ var PopupClient = /** @class */ (function (_super) {
                         this.logger.verbose("Popup successfully redirected to postLogoutRedirectUri");
                         return [3 /*break*/, 7];
                     case 6:
-                        e_3 = _a.sent();
-                        this.logger.verbose("Error occurred while monitoring popup for same origin. Session on server may remain active. Error: " + e_3);
+                        e_2 = _a.sent();
+                        this.logger.verbose("Error occurred while monitoring popup for same origin. Session on server may remain active. Error: " + e_2);
                         return [3 /*break*/, 7];
                     case 7:
                         popupUtils.cleanPopup(popupWindow);
@@ -11516,7 +11606,7 @@ var PopupClient = /** @class */ (function (_super) {
                             };
                             absoluteUrl = UrlString.getAbsoluteUrl(mainWindowRedirectUri, BrowserUtils.getCurrentUri());
                             this.logger.verbose("Redirecting main window to url specified in the request");
-                            this.logger.verbosePii("Redirecing main window to: " + absoluteUrl);
+                            this.logger.verbosePii("Redirecting main window to: " + absoluteUrl);
                             this.navigationClient.navigateInternal(absoluteUrl, navigationOptions);
                         }
                         else {
@@ -11524,19 +11614,19 @@ var PopupClient = /** @class */ (function (_super) {
                         }
                         return [3 /*break*/, 9];
                     case 8:
-                        e_4 = _a.sent();
+                        e_3 = _a.sent();
                         if (popup) {
                             // Close the synchronous popup if an error is thrown before the window unload event is registered
                             popup.close();
                         }
-                        if (e_4 instanceof AuthError) {
-                            e_4.setCorrelationId(this.correlationId);
+                        if (e_3 instanceof AuthError) {
+                            e_3.setCorrelationId(this.correlationId);
                         }
                         this.browserStorage.setInteractionInProgress(false);
-                        this.eventHandler.emitEvent(exports.EventType.LOGOUT_FAILURE, exports.InteractionType.Popup, null, e_4);
+                        this.eventHandler.emitEvent(exports.EventType.LOGOUT_FAILURE, exports.InteractionType.Popup, null, e_3);
                         this.eventHandler.emitEvent(exports.EventType.LOGOUT_END, exports.InteractionType.Popup);
-                        serverTelemetryManager.cacheFailedRequest(e_4);
-                        throw e_4;
+                        serverTelemetryManager.cacheFailedRequest(e_3);
+                        throw e_3;
                     case 9:
                         this.eventHandler.emitEvent(exports.EventType.LOGOUT_END, exports.InteractionType.Popup);
                         return [2 /*return*/];
@@ -11573,11 +11663,10 @@ var RedirectHandler = /** @class */ (function (_super) {
                         // Cache start page, returns to this page after redirectUri if navigateToLoginRequestUrl is true
                         if (params.redirectStartPage) {
                             this.browserRequestLogger.verbose("RedirectHandler.initiateAuthRequest: redirectStartPage set, caching start page");
-                            this.browserStorage.setTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, params.redirectStartPage, true);
+                            this.browserStorage.setTemporaryCache(exports.TemporaryCacheKeys.ORIGIN_URI, params.redirectStartPage, true);
                         }
                         // Set interaction status in the library.
-                        this.browserStorage.setInteractionInProgress(true);
-                        this.browserStorage.setTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, this.authCodeRequest.correlationId, true);
+                        this.browserStorage.setTemporaryCache(exports.TemporaryCacheKeys.CORRELATION_ID, this.authCodeRequest.correlationId, true);
                         this.browserStorage.cacheCodeRequest(this.authCodeRequest, this.browserCrypto);
                         this.browserRequestLogger.infoPii("RedirectHandler.initiateAuthRequest: Navigate to: " + requestUrl);
                         navigationOptions = {
@@ -11694,9 +11783,10 @@ var RedirectClient = /** @class */ (function (_super) {
             var validRequest, serverTelemetryManager, authCodeRequest, authClient, interactionHandler, navigateUrl, redirectStartPage, e_1;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.preflightInteractiveRequest(request, exports.InteractionType.Redirect)];
+                    case 0: return [4 /*yield*/, this.initializeAuthorizationRequest(request, exports.InteractionType.Redirect)];
                     case 1:
                         validRequest = _a.sent();
+                        this.browserStorage.updateCacheEntries(validRequest.state, validRequest.nonce, validRequest.authority, validRequest.loginHint || "", validRequest.account || null);
                         serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenRedirect);
                         _a.label = 2;
                     case 2:
@@ -11704,7 +11794,7 @@ var RedirectClient = /** @class */ (function (_super) {
                         return [4 /*yield*/, this.initializeAuthorizationCodeRequest(validRequest)];
                     case 3:
                         authCodeRequest = _a.sent();
-                        return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, validRequest.authority)];
+                        return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions)];
                     case 4:
                         authClient = _a.sent();
                         this.logger.verbose("Auth code client created");
@@ -11766,7 +11856,6 @@ var RedirectClient = /** @class */ (function (_super) {
                         state = void 0;
                         try {
                             state = this.validateAndExtractStateFromHash(responseHash, exports.InteractionType.Redirect);
-                            BrowserUtils.clearHash(window);
                             this.logger.verbose("State extracted from hash");
                         }
                         catch (e) {
@@ -11774,7 +11863,7 @@ var RedirectClient = /** @class */ (function (_super) {
                             this.browserStorage.cleanRequestByInteractionType(exports.InteractionType.Redirect);
                             return [2 /*return*/, null];
                         }
-                        loginRequestUrl = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, true) || "";
+                        loginRequestUrl = this.browserStorage.getTemporaryCache(exports.TemporaryCacheKeys.ORIGIN_URI, true) || "";
                         loginRequestUrlNormalized = UrlString.removeHashFromUrl(loginRequestUrl);
                         currentUrlNormalized = UrlString.removeHashFromUrl(window.location.href);
                         if (!(loginRequestUrlNormalized === currentUrlNormalized && this.config.auth.navigateToLoginRequestUrl)) return [3 /*break*/, 3];
@@ -11798,7 +11887,7 @@ var RedirectClient = /** @class */ (function (_super) {
                          * Returned from authority using redirect - need to perform navigation before processing response
                          * Cache the hash to be retrieved after the next redirect
                          */
-                        this.browserStorage.setTemporaryCache(TemporaryCacheKeys.URL_HASH, responseHash, true);
+                        this.browserStorage.setTemporaryCache(exports.TemporaryCacheKeys.URL_HASH, responseHash, true);
                         navigationOptions = {
                             apiId: exports.ApiId.handleRedirectPromise,
                             timeout: this.config.system.redirectNavigationTimeout,
@@ -11808,7 +11897,7 @@ var RedirectClient = /** @class */ (function (_super) {
                         if (!(!loginRequestUrl || loginRequestUrl === "null")) return [3 /*break*/, 6];
                         homepage = BrowserUtils.getHomepage();
                         // Cache the homepage under ORIGIN_URI to ensure cached hash is processed on homepage
-                        this.browserStorage.setTemporaryCache(TemporaryCacheKeys.ORIGIN_URI, homepage, true);
+                        this.browserStorage.setTemporaryCache(exports.TemporaryCacheKeys.ORIGIN_URI, homepage, true);
                         this.logger.warning("Unable to get valid login request url from cache, redirecting to home page");
                         return [4 /*yield*/, this.navigationClient.navigateInternal(homepage, navigationOptions)];
                     case 5:
@@ -11850,12 +11939,13 @@ var RedirectClient = /** @class */ (function (_super) {
         this.logger.verbose("getRedirectResponseHash called");
         // Get current location hash from window or cache.
         var isResponseHash = UrlString.hashContainsKnownProperties(hash);
-        var cachedHash = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.URL_HASH, true);
-        this.browserStorage.removeItem(this.browserStorage.generateCacheKey(TemporaryCacheKeys.URL_HASH));
         if (isResponseHash) {
+            BrowserUtils.clearHash(window);
             this.logger.verbose("Hash contains known properties, returning response hash");
             return hash;
         }
+        var cachedHash = this.browserStorage.getTemporaryCache(exports.TemporaryCacheKeys.URL_HASH, true);
+        this.browserStorage.removeItem(this.browserStorage.generateCacheKey(exports.TemporaryCacheKeys.URL_HASH));
         this.logger.verbose("Hash does not contain known properties, returning cached hash");
         return cachedHash;
     };
@@ -12150,6 +12240,7 @@ var SilentIframeClient = /** @class */ (function (_super) {
                         return [4 /*yield*/, this.initializeAuthorizationRequest(__assign$1(__assign$1({}, request), { prompt: PromptValue.NONE }), exports.InteractionType.Silent)];
                     case 1:
                         silentRequest = _a.sent();
+                        this.browserStorage.updateCacheEntries(silentRequest.state, silentRequest.nonce, silentRequest.authority, silentRequest.loginHint || "", silentRequest.account || null);
                         serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
                         _a.label = 2;
                     case 2:
@@ -12157,7 +12248,7 @@ var SilentIframeClient = /** @class */ (function (_super) {
                         return [4 /*yield*/, this.initializeAuthorizationCodeRequest(silentRequest)];
                     case 3:
                         authCodeRequest = _a.sent();
-                        return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, silentRequest.authority)];
+                        return [4 /*yield*/, this.createAuthCodeClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions)];
                     case 4:
                         authClient = _a.sent();
                         this.logger.verbose("Auth code client created");
@@ -12240,7 +12331,7 @@ var SilentRefreshClient = /** @class */ (function (_super) {
                     case 1:
                         silentRequest = __assign$1.apply(void 0, _a.concat([_b.sent()]));
                         serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenSilent_silentFlow);
-                        return [4 /*yield*/, this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority)];
+                        return [4 /*yield*/, this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions)];
                     case 2:
                         refreshTokenClient = _b.sent();
                         this.logger.verbose("Refresh token client created");
@@ -12268,12 +12359,12 @@ var SilentRefreshClient = /** @class */ (function (_super) {
      * @param serverTelemetryManager
      * @param authorityUrl
      */
-    SilentRefreshClient.prototype.createRefreshTokenClient = function (serverTelemetryManager, authorityUrl) {
+    SilentRefreshClient.prototype.createRefreshTokenClient = function (serverTelemetryManager, authorityUrl, azureCloudOptions) {
         return __awaiter$1(this, void 0, void 0, function () {
             var clientConfig;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl)];
+                    case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];
                     case 1:
                         clientConfig = _a.sent();
                         return [2 /*return*/, new RefreshTokenClient(clientConfig)];
@@ -12316,13 +12407,14 @@ var TokenCache = /** @class */ (function () {
             this.loadAccessToken(request, response, request.account.homeAccountId, request.account.environment, request.account.tenantId, options);
         }
         else if (request.authority) {
+            var authorityUrl = Authority.generateAuthority(request.authority, request.azureCloudOptions);
             var authorityOptions = {
                 protocolMode: this.config.auth.protocolMode,
                 knownAuthorities: this.config.auth.knownAuthorities,
                 cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,
-                authorityMetadata: this.config.auth.authorityMetadata
+                authorityMetadata: this.config.auth.authorityMetadata,
             };
-            var authority = new Authority(request.authority, this.config.system.networkClient, this.storage, authorityOptions);
+            var authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions);
             // "clientInfo" from options takes precedence over "clientInfo" in response
             if (options.clientInfo) {
                 this.logger.trace("TokenCache - homeAccountId from options");
@@ -12444,6 +12536,7 @@ var SilentAuthCodeClient = /** @class */ (function (_super) {
                         return [4 /*yield*/, this.initializeAuthorizationRequest(request, exports.InteractionType.Silent)];
                     case 1:
                         silentRequest = _a.sent();
+                        this.browserStorage.updateCacheEntries(silentRequest.state, silentRequest.nonce, silentRequest.authority, silentRequest.loginHint || "", silentRequest.account || null);
                         serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
                         _a.label = 2;
                     case 2:
@@ -12561,7 +12654,7 @@ var ClientApplication = /** @class */ (function () {
                     if (typeof response === "undefined") {
                         this.eventHandler.emitEvent(exports.EventType.HANDLE_REDIRECT_START, exports.InteractionType.Redirect);
                         this.logger.verbose("handleRedirectPromise has been called for the first time, storing the promise");
-                        correlationId = this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, true) || "";
+                        correlationId = this.browserStorage.getTemporaryCache(exports.TemporaryCacheKeys.CORRELATION_ID, true) || "";
                         redirectClient = new RedirectClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, correlationId);
                         response = redirectClient.handleRedirectPromise(hash)
                             .then(function (result) {
@@ -12618,8 +12711,8 @@ var ClientApplication = /** @class */ (function () {
             var _this = this;
             return __generator$1(this, function (_a) {
                 // Preflight request
-                this.preflightBrowserEnvironmentCheck(exports.InteractionType.Redirect);
                 this.logger.verbose("acquireTokenRedirect called");
+                this.preflightBrowserEnvironmentCheck(exports.InteractionType.Redirect);
                 isLoggedIn = this.getAllAccounts().length > 0;
                 if (isLoggedIn) {
                     this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Redirect, request);
@@ -12653,8 +12746,8 @@ var ClientApplication = /** @class */ (function () {
     ClientApplication.prototype.acquireTokenPopup = function (request) {
         var _this = this;
         try {
-            this.preflightBrowserEnvironmentCheck(exports.InteractionType.Popup);
             this.logger.verbose("acquireTokenPopup called", request.correlationId);
+            this.preflightBrowserEnvironmentCheck(exports.InteractionType.Popup);
         }
         catch (e) {
             // Since this function is syncronous we need to reject
@@ -12989,6 +13082,21 @@ var ClientApplication = /** @class */ (function () {
             !this.config.cache.storeAuthStateInCookie) {
             throw BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError();
         }
+        if (interactionType === exports.InteractionType.Redirect || interactionType === exports.InteractionType.Popup) {
+            this.preflightInteractiveRequest();
+        }
+    };
+    /**
+     * Helper to validate app environment before making a request.
+     * @param request
+     * @param interactionType
+     */
+    ClientApplication.prototype.preflightInteractiveRequest = function () {
+        this.logger.verbose("preflightInteractiveRequest called, validating app environment");
+        // block the reload if it occurred inside a hidden iframe
+        BrowserUtils.blockReloadInHiddenIframes();
+        // Set interaction in progress temporary cache or throw if alread set.
+        this.browserStorage.setInteractionInProgress(true);
     };
     /**
      * Adds event callbacks to array
@@ -13080,7 +13188,7 @@ var SilentCacheClient = /** @class */ (function (_super) {
                 switch (_a.label) {
                     case 0:
                         serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenSilent_silentFlow);
-                        return [4 /*yield*/, this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority)];
+                        return [4 /*yield*/, this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions)];
                     case 1:
                         silentAuthClient = _a.sent();
                         this.logger.verbose("Silent auth client created");
@@ -13115,12 +13223,12 @@ var SilentCacheClient = /** @class */ (function (_super) {
      * @param serverTelemetryManager
      * @param authorityUrl
      */
-    SilentCacheClient.prototype.createSilentFlowClient = function (serverTelemetryManager, authorityUrl) {
+    SilentCacheClient.prototype.createSilentFlowClient = function (serverTelemetryManager, authorityUrl, azureCloudOptions) {
         return __awaiter$1(this, void 0, void 0, function () {
             var clientConfig;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
-                    case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl)];
+                    case 0: return [4 /*yield*/, this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions)];
                     case 1:
                         clientConfig = _a.sent();
                         return [2 /*return*/, new SilentFlowClient(clientConfig)];
@@ -13523,21 +13631,34 @@ exports.AuthErrorMessage = AuthErrorMessage;
 exports.AuthenticationHeaderParser = AuthenticationHeaderParser;
 exports.BrowserAuthError = BrowserAuthError;
 exports.BrowserAuthErrorMessage = BrowserAuthErrorMessage;
+exports.BrowserCacheManager = BrowserCacheManager;
 exports.BrowserConfigurationAuthError = BrowserConfigurationAuthError;
 exports.BrowserConfigurationAuthErrorMessage = BrowserConfigurationAuthErrorMessage;
+exports.BrowserConstants = BrowserConstants;
 exports.BrowserUtils = BrowserUtils;
 exports.ClientAuthError = ClientAuthError;
 exports.ClientAuthErrorMessage = ClientAuthErrorMessage;
 exports.ClientConfigurationError = ClientConfigurationError;
 exports.ClientConfigurationErrorMessage = ClientConfigurationErrorMessage;
+exports.DEFAULT_IFRAME_TIMEOUT_MS = DEFAULT_IFRAME_TIMEOUT_MS;
+exports.EventHandler = EventHandler;
 exports.EventMessageUtils = EventMessageUtils;
 exports.InteractionRequiredAuthError = InteractionRequiredAuthError;
 exports.InteractionRequiredAuthErrorMessage = InteractionRequiredAuthErrorMessage;
 exports.Logger = Logger;
 exports.NavigationClient = NavigationClient;
+exports.OIDC_DEFAULT_SCOPES = OIDC_DEFAULT_SCOPES;
+exports.PopupClient = PopupClient;
+exports.PopupUtils = PopupUtils;
 exports.PublicClientApplication = PublicClientApplication;
+exports.RedirectClient = RedirectClient;
+exports.RedirectHandler = RedirectHandler;
 exports.ServerError = ServerError;
 exports.SignedHttpRequest = SignedHttpRequest;
+exports.SilentCacheClient = SilentCacheClient;
+exports.SilentIframeClient = SilentIframeClient;
+exports.SilentRefreshClient = SilentRefreshClient;
+exports.StandardInteractionClient = StandardInteractionClient;
 exports.StringUtils = StringUtils;
 exports.UrlString = UrlString;
 exports.stubbedPublicClientApplication = stubbedPublicClientApplication;