@azure/msal-browser 2.36.0 → 2.37.1

package/dist/index.cjs.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.36.0 2023-04-18 */
+/*! @azure/msal-browser v2.37.1 2023-06-07 */
 'use strict';
 'use strict';
 
@@ -117,7 +117,7 @@ function __spread() {
     return ar;
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*! *****************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -204,7 +204,7 @@ function __spreadArrays() {
     return r;
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -224,6 +224,9 @@ var Constants = {
     DSTS: "dstsv2",
     // Default AAD Instance Discovery Endpoint
     AAD_INSTANCE_DISCOVERY_ENDPT: "https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=",
+    // CIAM URL
+    CIAM_AUTH_URL: ".ciamlogin.com",
+    AAD_TENANT_DOMAIN_SUFFIX: ".onmicrosoft.com",
     // Resource delimiter - used for certain cache entries
     RESOURCE_DELIM: "|",
     // Placeholder for non-existent account ids/objects
@@ -573,7 +576,7 @@ var JsonTypes;
     JsonTypes["Pop"] = "pop";
 })(JsonTypes || (JsonTypes = {}));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -629,7 +632,7 @@ var AuthError = /** @class */ (function (_super) {
     return AuthError;
 }(Error));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -704,7 +707,7 @@ var DEFAULT_CRYPTO_IMPLEMENTATION = {
     }
 };
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1219,7 +1222,7 @@ var ClientAuthError = /** @class */ (function (_super) {
     return ClientAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1344,7 +1347,7 @@ var StringUtils = /** @class */ (function () {
     return StringUtils;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1534,12 +1537,12 @@ var Logger = /** @class */ (function () {
     return Logger;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /* eslint-disable header/header */
 var name$1 = "@azure/msal-common";
-var version$1 = "12.0.0";
+var version$1 = "13.1.0";
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1560,7 +1563,7 @@ exports.AzureCloudInstance = void 0;
     AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
 })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1661,6 +1664,10 @@ var ClientConfigurationErrorMessage = {
     invalidAuthenticationHeader: {
         code: "invalid_authentication_header",
         desc: "Invalid authentication header provided"
+    },
+    authorityMismatch: {
+        code: "authority_mismatch",
+        desc: "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority."
     }
 };
 /**
@@ -1812,10 +1819,16 @@ var ClientConfigurationError = /** @class */ (function (_super) {
     ClientConfigurationError.createInvalidAuthenticationHeaderError = function (invalidHeaderName, details) {
         return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidAuthenticationHeader.code, ClientConfigurationErrorMessage.invalidAuthenticationHeader.desc + ". Invalid header: " + invalidHeaderName + ". Details: " + details);
     };
+    /**
+     * Create an error when the authority provided in request does not match authority provided in account or MSAL.js configuration.
+     */
+    ClientConfigurationError.createAuthorityMismatchError = function () {
+        return new ClientConfigurationError(ClientConfigurationErrorMessage.authorityMismatch.code, ClientConfigurationErrorMessage.authorityMismatch.desc);
+    };
     return ClientConfigurationError;
 }(ClientAuthError));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2014,7 +2027,7 @@ var ScopeSet = /** @class */ (function () {
     return ScopeSet;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2052,7 +2065,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2065,9 +2078,10 @@ var AuthorityType;
     AuthorityType[AuthorityType["Default"] = 0] = "Default";
     AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
     AuthorityType[AuthorityType["Dsts"] = 2] = "Dsts";
+    AuthorityType[AuthorityType["Ciam"] = 3] = "Ciam";
 })(AuthorityType || (AuthorityType = {}));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2306,7 +2320,7 @@ var AccountEntity = /** @class */ (function () {
     return AccountEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2358,7 +2372,7 @@ var AuthToken = /** @class */ (function () {
     return AuthToken;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3406,7 +3420,7 @@ var DefaultStorageClass = /** @class */ (function (_super) {
     return DefaultStorageClass;
 }(CacheManager));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3499,7 +3513,7 @@ function buildAuthOptions(authOptions) {
     return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3519,7 +3533,7 @@ var ServerError = /** @class */ (function (_super) {
     return ServerError;
 }(AuthError));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3615,7 +3629,7 @@ var ThrottlingUtils = /** @class */ (function () {
     return ThrottlingUtils;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3664,7 +3678,7 @@ var NetworkManager = /** @class */ (function () {
     return NetworkManager;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3675,7 +3689,7 @@ var CcsCredentialType;
     CcsCredentialType["UPN"] = "UPN";
 })(CcsCredentialType || (CcsCredentialType = {}));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3766,7 +3780,7 @@ var RequestValidator = /** @class */ (function () {
     return RequestValidator;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4144,7 +4158,7 @@ var RequestParameterBuilder = /** @class */ (function () {
     return RequestParameterBuilder;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4246,7 +4260,7 @@ var BaseClient = /** @class */ (function () {
     return BaseClient;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4384,7 +4398,7 @@ var CredentialEntity = /** @class */ (function () {
     return CredentialEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4448,7 +4462,7 @@ var IdTokenEntity = /** @class */ (function (_super) {
     return IdTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4498,7 +4512,7 @@ var TimeUtils = /** @class */ (function () {
     return TimeUtils;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4612,7 +4626,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
     return AccessTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4679,7 +4693,7 @@ var RefreshTokenEntity = /** @class */ (function (_super) {
     return RefreshTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4758,7 +4772,7 @@ var InteractionRequiredAuthError = /** @class */ (function (_super) {
     return InteractionRequiredAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4774,7 +4788,7 @@ var CacheRecord = /** @class */ (function () {
     return CacheRecord;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4845,7 +4859,7 @@ var ProtocolUtils = /** @class */ (function () {
     return ProtocolUtils;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5079,7 +5093,7 @@ var UrlString = /** @class */ (function () {
     return UrlString;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5308,7 +5322,7 @@ var IntFields = new Set([
     "status",
 ]);
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5417,7 +5431,7 @@ var PopTokenGenerator = /** @class */ (function () {
     return PopTokenGenerator;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5487,7 +5501,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return AppMetadataEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5523,7 +5537,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return TokenCacheContext;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5810,7 +5824,7 @@ var ResponseHandler = /** @class */ (function () {
     return ResponseHandler;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6240,7 +6254,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
                         return [4 /*yield*/, popTokenGenerator.generateCnf(request)];
                     case 1:
                         reqCnfData = _b.sent();
-                        parameterBuilder.addPopToken(reqCnfData.reqCnfHash);
+                        parameterBuilder.addPopToken(reqCnfData.reqCnfString);
                         _b.label = 2;
                     case 2: return [2 /*return*/, parameterBuilder.createQueryString()];
                 }
@@ -6288,7 +6302,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
     return AuthorizationCodeClient;
 }(BaseClient));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6562,7 +6576,7 @@ var RefreshTokenClient = /** @class */ (function (_super) {
     return RefreshTokenClient;
 }(BaseClient));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6686,7 +6700,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
     return SilentFlowClient;
 }(BaseClient));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6698,7 +6712,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6707,7 +6721,7 @@ var rawMetdataJSON = { "endpointMetadata": { "https://login.microsoftonline.com/
 var EndpointMetadata = rawMetdataJSON.endpointMetadata;
 var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6721,7 +6735,7 @@ exports.ProtocolMode = void 0;
     ProtocolMode["OIDC"] = "OIDC";
 })(exports.ProtocolMode || (exports.ProtocolMode = {}));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6798,7 +6812,7 @@ var AuthorityMetadataEntity = /** @class */ (function () {
     return AuthorityMetadataEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6808,7 +6822,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6818,7 +6832,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6950,7 +6964,7 @@ var RegionDiscovery = /** @class */ (function () {
     return RegionDiscovery;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6973,19 +6987,31 @@ var Authority = /** @class */ (function () {
         this.correlationId = correlationId;
         this.regionDiscovery = new RegionDiscovery(networkInterface, this.performanceClient, this.correlationId);
     }
+    /**
+     * Get {@link AuthorityType}
+     * @param authorityUri {@link IUri}
+     * @private
+     */
+    Authority.prototype.getAuthorityType = function (authorityUri) {
+        // CIAM auth url pattern is being standardized as: <tenant>.ciamlogin.com
+        if (authorityUri.HostNameAndPort.endsWith(Constants.CIAM_AUTH_URL)) {
+            return AuthorityType.Ciam;
+        }
+        var pathSegments = authorityUri.PathSegments;
+        if (pathSegments.length) {
+            switch (pathSegments[0].toLowerCase()) {
+                case Constants.ADFS:
+                    return AuthorityType.Adfs;
+                case Constants.DSTS:
+                    return AuthorityType.Dsts;
+            }
+        }
+        return AuthorityType.Default;
+    };
     Object.defineProperty(Authority.prototype, "authorityType", {
         // See above for AuthorityType
         get: function () {
-            var pathSegments = this.canonicalAuthorityUrlComponents.PathSegments;
-            if (pathSegments.length) {
-                switch (pathSegments[0].toLowerCase()) {
-                    case Constants.ADFS:
-                        return AuthorityType.Adfs;
-                    case Constants.DSTS:
-                        return AuthorityType.Dsts;
-                }
-            }
-            return AuthorityType.Default;
+            return this.getAuthorityType(this.canonicalAuthorityUrlComponents);
         },
         enumerable: false,
         configurable: true
@@ -7067,8 +7093,7 @@ var Authority = /** @class */ (function () {
          */
         get: function () {
             if (this.discoveryComplete()) {
-                var endpoint = this.replacePath(this.metadata.authorization_endpoint);
-                return this.replaceTenant(endpoint);
+                return this.replacePath(this.metadata.authorization_endpoint);
             }
             else {
                 throw ClientAuthError.createEndpointDiscoveryIncompleteError("Discovery incomplete.");
@@ -7083,8 +7108,7 @@ var Authority = /** @class */ (function () {
          */
         get: function () {
             if (this.discoveryComplete()) {
-                var endpoint = this.replacePath(this.metadata.token_endpoint);
-                return this.replaceTenant(endpoint);
+                return this.replacePath(this.metadata.token_endpoint);
             }
             else {
                 throw ClientAuthError.createEndpointDiscoveryIncompleteError("Discovery incomplete.");
@@ -7096,8 +7120,7 @@ var Authority = /** @class */ (function () {
     Object.defineProperty(Authority.prototype, "deviceCodeEndpoint", {
         get: function () {
             if (this.discoveryComplete()) {
-                var endpoint = this.replacePath(this.metadata.token_endpoint.replace("/token", "/devicecode"));
-                return this.replaceTenant(endpoint);
+                return this.replacePath(this.metadata.token_endpoint.replace("/token", "/devicecode"));
             }
             else {
                 throw ClientAuthError.createEndpointDiscoveryIncompleteError("Discovery incomplete.");
@@ -7116,8 +7139,7 @@ var Authority = /** @class */ (function () {
                 if (!this.metadata.end_session_endpoint) {
                     throw ClientAuthError.createLogoutNotSupportedError();
                 }
-                var endpoint = this.replacePath(this.metadata.end_session_endpoint);
-                return this.replaceTenant(endpoint);
+                return this.replacePath(this.metadata.end_session_endpoint);
             }
             else {
                 throw ClientAuthError.createEndpointDiscoveryIncompleteError("Discovery incomplete.");
@@ -7132,8 +7154,7 @@ var Authority = /** @class */ (function () {
          */
         get: function () {
             if (this.discoveryComplete()) {
-                var endpoint = this.replacePath(this.metadata.issuer);
-                return this.replaceTenant(endpoint);
+                return this.replacePath(this.metadata.issuer);
             }
             else {
                 throw ClientAuthError.createEndpointDiscoveryIncompleteError("Discovery incomplete.");
@@ -7148,8 +7169,7 @@ var Authority = /** @class */ (function () {
          */
         get: function () {
             if (this.discoveryComplete()) {
-                var endpoint = this.replacePath(this.metadata.jwks_uri);
-                return this.replaceTenant(endpoint);
+                return this.replacePath(this.metadata.jwks_uri);
             }
             else {
                 throw ClientAuthError.createEndpointDiscoveryIncompleteError("Discovery incomplete.");
@@ -7158,6 +7178,17 @@ var Authority = /** @class */ (function () {
         enumerable: false,
         configurable: true
     });
+    /**
+     * Returns a flag indicating that tenant name can be replaced in authority {@link IUri}
+     * @param authorityUri {@link IUri}
+     * @private
+     */
+    Authority.prototype.canReplaceTenant = function (authorityUri) {
+        return authorityUri.PathSegments.length === 1
+            && !Authority.reservedTenantDomains.has(authorityUri.PathSegments[0])
+            && this.getAuthorityType(authorityUri) === AuthorityType.Default
+            && this.protocolMode === exports.ProtocolMode.AAD;
+    };
     /**
      * Replaces tenant in url path with current tenant. Defaults to common.
      * @param urlString
@@ -7170,17 +7201,31 @@ var Authority = /** @class */ (function () {
      * @param urlString
      */
     Authority.prototype.replacePath = function (urlString) {
+        var _this = this;
         var endpoint = urlString;
         var cachedAuthorityUrl = new UrlString(this.metadata.canonical_authority);
-        var cachedAuthorityParts = cachedAuthorityUrl.getUrlComponents().PathSegments;
+        var cachedAuthorityUrlComponents = cachedAuthorityUrl.getUrlComponents();
+        var cachedAuthorityParts = cachedAuthorityUrlComponents.PathSegments;
         var currentAuthorityParts = this.canonicalAuthorityUrlComponents.PathSegments;
         currentAuthorityParts.forEach(function (currentPart, index) {
             var cachedPart = cachedAuthorityParts[index];
+            if (index === 0 && _this.canReplaceTenant(cachedAuthorityUrlComponents)) {
+                var tenantId = (new UrlString(_this.metadata.authorization_endpoint)).getUrlComponents().PathSegments[0];
+                /**
+                 * Check if AAD canonical authority contains tenant domain name, for example "testdomain.onmicrosoft.com",
+                 * by comparing its first path segment to the corresponding authorization endpoint path segment, which is
+                 * always resolved with tenant id by OIDC.
+                 */
+                if (cachedPart !== tenantId) {
+                    _this.logger.verbose("Replacing tenant domain name " + cachedPart + " with id " + tenantId);
+                    cachedPart = tenantId;
+                }
+            }
             if (currentPart !== cachedPart) {
                 endpoint = endpoint.replace("/" + cachedPart + "/", "/" + currentPart + "/");
             }
         });
-        return endpoint;
+        return this.replaceTenant(endpoint);
     };
     Object.defineProperty(Authority.prototype, "defaultOpenIdConfigurationEndpoint", {
         /**
@@ -7263,7 +7308,6 @@ var Authority = /** @class */ (function () {
                             // No need to update
                             return [2 /*return*/, AuthorityMetadataSource.CACHE];
                         }
-                        harcodedMetadata = this.getEndpointMetadataFromHardcodedValues();
                         (_b = this.performanceClient) === null || _b === void 0 ? void 0 : _b.setPreQueueTime(exports.PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
                         return [4 /*yield*/, this.getEndpointMetadataFromNetwork()];
                     case 1:
@@ -7279,6 +7323,7 @@ var Authority = /** @class */ (function () {
                         metadataEntity.updateEndpointMetadata(metadata, true);
                         return [2 /*return*/, AuthorityMetadataSource.NETWORK];
                     case 4:
+                        harcodedMetadata = this.getEndpointMetadataFromHardcodedValues();
                         if (!(harcodedMetadata && !this.authorityOptions.skipAuthorityMetadataCache)) return [3 /*break*/, 7];
                         if (!((_e = this.authorityOptions.azureRegionConfiguration) === null || _e === void 0 ? void 0 : _e.azureRegion)) return [3 /*break*/, 6];
                         (_f = this.performanceClient) === null || _f === void 0 ? void 0 : _f.setPreQueueTime(exports.PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
@@ -7403,8 +7448,8 @@ var Authority = /** @class */ (function () {
     /**
      * Updates the AuthorityMetadataEntity with new aliases, preferred_network and preferred_cache
      * and returns where the information was retrieved from
-     * @param cachedMetadata
-     * @param newMetadata
+     * @param metadataEntity
+     * @returns AuthorityMetadataSource
      */
     Authority.prototype.updateCloudDiscoveryMetadata = function (metadataEntity) {
         var _a, _b;
@@ -7414,6 +7459,7 @@ var Authority = /** @class */ (function () {
                 switch (_c.label) {
                     case 0:
                         (_a = this.performanceClient) === null || _a === void 0 ? void 0 : _a.addQueueMeasurement(exports.PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);
+                        // attempt to read metadata from the config
                         this.logger.verbose("Attempting to get cloud discovery metadata in the config");
                         this.logger.verbosePii("Known Authorities: " + (this.authorityOptions.knownAuthorities || Constants.NOT_APPLICABLE));
                         this.logger.verbosePii("Authority Metadata: " + (this.authorityOptions.authorityMetadata || Constants.NOT_APPLICABLE));
@@ -7463,6 +7509,11 @@ var Authority = /** @class */ (function () {
      * Parse cloudDiscoveryMetadata config or check knownAuthorities
      */
     Authority.prototype.getCloudDiscoveryMetadataFromConfig = function () {
+        // CIAM does not support cloud discovery metadata
+        if (this.authorityType === AuthorityType.Ciam) {
+            this.logger.verbose("CIAM authorities do not support cloud discovery metadata, generate the aliases from authority host.");
+            return Authority.createCloudDiscoveryMetadataFromHost(this.hostnameAndPort);
+        }
         // Check if network response was provided in config
         if (this.authorityOptions.cloudDiscoveryMetadata) {
             this.logger.verbose("The cloud discovery metadata has been provided as a network response, in the config.");
@@ -7682,10 +7733,38 @@ var Authority = /** @class */ (function () {
         }
         return metadata;
     };
+    /**
+     * Transform CIAM_AUTHORIY as per the below rules:
+     * If no path segments found and it is a CIAM authority (hostname ends with .ciamlogin.com), then transform it
+     *
+     * NOTE: The transformation path should go away once STS supports CIAM with the format: `tenantIdorDomain.ciamlogin.com`
+     * `ciamlogin.com` can also change in the future and we should accommodate the same
+     *
+     * @param authority
+     */
+    Authority.transformCIAMAuthority = function (authority) {
+        var ciamAuthority = authority.endsWith(Constants.FORWARD_SLASH) ? authority : "" + authority + Constants.FORWARD_SLASH;
+        var authorityUrl = new UrlString(authority);
+        var authorityUrlComponents = authorityUrl.getUrlComponents();
+        // check if transformation is needed
+        if (authorityUrlComponents.PathSegments.length === 0 && (authorityUrlComponents.HostNameAndPort.endsWith(Constants.CIAM_AUTH_URL))) {
+            var tenantIdOrDomain = authorityUrlComponents.HostNameAndPort.split(".")[0];
+            ciamAuthority = "" + ciamAuthority + tenantIdOrDomain + Constants.AAD_TENANT_DOMAIN_SUFFIX;
+        }
+        return ciamAuthority;
+    };
+    // Reserved tenant domain names that will not be replaced with tenant id
+    Authority.reservedTenantDomains = (new Set([
+        "{tenant}",
+        "{tenantid}",
+        AADAuthorityConstants.COMMON,
+        AADAuthorityConstants.CONSUMERS,
+        AADAuthorityConstants.ORGANIZATIONS
+    ]));
     return Authority;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7706,12 +7785,13 @@ var AuthorityFactory = /** @class */ (function () {
      */
     AuthorityFactory.createDiscoveredInstance = function (authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
         return __awaiter(this, void 0, void 0, function () {
-            var acquireTokenAuthority, e_1;
+            var authorityUriFinal, acquireTokenAuthority, e_1;
             return __generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
                         performanceClient === null || performanceClient === void 0 ? void 0 : performanceClient.addQueueMeasurement(exports.PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
-                        acquireTokenAuthority = AuthorityFactory.createInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
+                        authorityUriFinal = Authority.transformCIAMAuthority(authorityUri);
+                        acquireTokenAuthority = AuthorityFactory.createInstance(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
                         _a.label = 1;
                     case 1:
                         _a.trys.push([1, 3, , 4]);
@@ -7748,7 +7828,7 @@ var AuthorityFactory = /** @class */ (function () {
     return AuthorityFactory;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7779,7 +7859,7 @@ var ServerTelemetryEntity = /** @class */ (function () {
     return ServerTelemetryEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7807,7 +7887,7 @@ var ThrottlingEntity = /** @class */ (function () {
     return ThrottlingEntity;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7824,7 +7904,7 @@ var StubbedNetworkModule = {
     }
 };
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7869,7 +7949,7 @@ var JoseHeaderError = /** @class */ (function (_super) {
     return JoseHeaderError;
 }(AuthError));
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7909,7 +7989,7 @@ var JoseHeader = /** @class */ (function () {
     return JoseHeader;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7968,7 +8048,7 @@ var AuthenticationHeaderParser = /** @class */ (function () {
     return AuthenticationHeaderParser;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8130,7 +8210,7 @@ var ServerTelemetryManager = /** @class */ (function () {
     return ServerTelemetryManager;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8533,7 +8613,7 @@ var PerformanceClient = /** @class */ (function () {
     return PerformanceClient;
 }());
 
-/*! @azure/msal-common v12.0.0 2023-04-03 */
+/*! @azure/msal-common v13.1.0 2023-06-07 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10758,7 +10838,7 @@ var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
 
 /* eslint-disable header/header */
 var name = "@azure/msal-browser";
-var version = "2.36.0";
+var version = "2.37.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11223,7 +11303,7 @@ var BaseInteractionClient = /** @class */ (function () {
      * Initializer function for all request APIs
      * @param request
      */
-    BaseInteractionClient.prototype.initializeBaseRequest = function (request) {
+    BaseInteractionClient.prototype.initializeBaseRequest = function (request, account) {
         return __awaiter$1(this, void 0, void 0, function () {
             var authority, scopes, validatedRequest, _a;
             return __generator$1(this, function (_b) {
@@ -11232,6 +11312,12 @@ var BaseInteractionClient = /** @class */ (function () {
                         this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.InitializeBaseRequest, request.correlationId);
                         this.logger.verbose("Initializing BaseAuthRequest");
                         authority = request.authority || this.config.auth.authority;
+                        if (!account) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.validateRequestAuthority(authority, account)];
+                    case 1:
+                        _b.sent();
+                        _b.label = 2;
+                    case 2:
                         scopes = __spread(((request && request.scopes) || []));
                         validatedRequest = __assign$1(__assign$1({}, request), { correlationId: this.correlationId, authority: authority,
                             scopes: scopes });
@@ -11251,13 +11337,13 @@ var BaseInteractionClient = /** @class */ (function () {
                             }
                             this.logger.verbose("Authentication Scheme set to \"" + validatedRequest.authenticationScheme + "\" as configured in Auth request");
                         }
-                        if (!(request.claims && !StringUtils.isEmpty(request.claims))) return [3 /*break*/, 2];
+                        if (!(request.claims && !StringUtils.isEmpty(request.claims))) return [3 /*break*/, 4];
                         _a = validatedRequest;
                         return [4 /*yield*/, this.browserCrypto.hashString(request.claims)];
-                    case 1:
+                    case 3:
                         _a.requestedClaimsHash = _b.sent();
-                        _b.label = 2;
-                    case 2: return [2 /*return*/, validatedRequest];
+                        _b.label = 4;
+                    case 4: return [2 /*return*/, validatedRequest];
                 }
             });
         });
@@ -11274,6 +11360,26 @@ var BaseInteractionClient = /** @class */ (function () {
         var redirectUri = requestRedirectUri || this.config.auth.redirectUri || BrowserUtils.getCurrentUri();
         return UrlString.getAbsoluteUrl(redirectUri, BrowserUtils.getCurrentUri());
     };
+    /*
+     * If authority provided in the request does not match environment/authority specified
+     * in the account or MSAL config, we throw an error.
+     */
+    BaseInteractionClient.prototype.validateRequestAuthority = function (authority, account) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var discoveredAuthority;
+            return __generator$1(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.getDiscoveredAuthority(authority)];
+                    case 1:
+                        discoveredAuthority = _a.sent();
+                        if (!discoveredAuthority.isAlias(account.environment)) {
+                            throw ClientConfigurationError.createAuthorityMismatchError();
+                        }
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
     /**
      *
      * @param apiId
@@ -11938,6 +12044,7 @@ exports.EventType = void 0;
     EventType["LOGOUT_SUCCESS"] = "msal:logoutSuccess";
     EventType["LOGOUT_FAILURE"] = "msal:logoutFailure";
     EventType["LOGOUT_END"] = "msal:logoutEnd";
+    EventType["RESTORE_FROM_BFCACHE"] = "msal:restoreFromBFCache";
 })(exports.EventType || (exports.EventType = {}));
 
 /*
@@ -12118,7 +12225,7 @@ var SilentCacheClient = /** @class */ (function (_super) {
                         this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.InitializeSilentRequest, this.correlationId);
                         this.performanceClient.setPreQueueTime(exports.PerformanceEvents.InitializeBaseRequest, this.correlationId);
                         _a = [__assign$1({}, request)];
-                        return [4 /*yield*/, this.initializeBaseRequest(request)];
+                        return [4 /*yield*/, this.initializeBaseRequest(request, account)];
                     case 1: return [2 /*return*/, __assign$1.apply(void 0, [__assign$1.apply(void 0, _a.concat([_b.sent()])), { account: account, forceRefresh: request.forceRefresh || false }])];
                 }
             });
@@ -12392,7 +12499,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                         result = _a.sent();
                         // cache accounts and tokens in the appropriate storage
                         this.cacheAccount(accountEntity);
-                        this.cacheNativeTokens(response, request, homeAccountIdentifier, idTokenObj, result.accessToken, result.tenantId, reqTimestamp);
+                        this.cacheNativeTokens(response, request, homeAccountIdentifier, accountEntity, idTokenObj, result.accessToken, result.tenantId, reqTimestamp);
                         return [2 /*return*/, result];
                 }
             });
@@ -12548,10 +12655,8 @@ var NativeInteractionClient = /** @class */ (function (_super) {
      * @param tenantId
      * @param reqTimestamp
      */
-    NativeInteractionClient.prototype.cacheNativeTokens = function (response, request, homeAccountIdentifier, idTokenObj, responseAccessToken, tenantId, reqTimestamp) {
-        // cache idToken in inmemory storage
-        var idTokenEntity = IdTokenEntity.createIdTokenEntity(homeAccountIdentifier, request.authority, response.id_token || Constants.EMPTY_STRING, request.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);
-        this.nativeStorageManager.setIdTokenCredential(idTokenEntity);
+    NativeInteractionClient.prototype.cacheNativeTokens = function (response, request, homeAccountIdentifier, accountEntity, idTokenObj, responseAccessToken, tenantId, reqTimestamp) {
+        var cachedIdToken = IdTokenEntity.createIdTokenEntity(homeAccountIdentifier, request.authority, response.id_token || Constants.EMPTY_STRING, request.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);
         // cache accessToken in inmemory storage
         var expiresIn = (request.tokenType === exports.AuthenticationScheme.POP)
             ? Constants.SHR_NONCE_VALIDITY
@@ -12560,8 +12665,11 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                 : response.expires_in) || 0;
         var tokenExpirationSeconds = reqTimestamp + expiresIn;
         var responseScopes = this.generateScopes(response, request);
-        var accessTokenEntity = AccessTokenEntity.createAccessTokenEntity(homeAccountIdentifier, request.authority, responseAccessToken, request.clientId, tenantId, responseScopes.printScopes(), tokenExpirationSeconds, 0, this.browserCrypto);
-        this.nativeStorageManager.setAccessTokenCredential(accessTokenEntity);
+        var cachedAccessToken = AccessTokenEntity.createAccessTokenEntity(homeAccountIdentifier, request.authority, responseAccessToken, request.clientId, idTokenObj
+            ? idTokenObj.claims.tid || Constants.EMPTY_STRING
+            : tenantId, responseScopes.printScopes(), tokenExpirationSeconds, 0, this.browserCrypto);
+        var nativeCacheRecord = new CacheRecord(accountEntity, cachedIdToken, cachedAccessToken);
+        this.nativeStorageManager.saveCacheRecord(nativeCacheRecord);
     };
     NativeInteractionClient.prototype.addTelemetryFromNativeResponse = function (response) {
         var mats = this.getMATSFromResponse(response);
@@ -12645,6 +12753,12 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                     case 0:
                         this.logger.trace("NativeInteractionClient - initializeNativeRequest called");
                         authority = request.authority || this.config.auth.authority;
+                        if (!request.account) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.validateRequestAuthority(authority, request.account)];
+                    case 1:
+                        _a.sent();
+                        _a.label = 2;
+                    case 2:
                         canonicalAuthority = new UrlString(authority);
                         canonicalAuthority.validateAsUri();
                         scopes = request.scopes, remainingProperties = __rest(request, ["scopes"]);
@@ -12677,7 +12791,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                         };
                         validatedRequest = __assign$1(__assign$1({}, remainingProperties), { accountId: this.accountId, clientId: this.config.auth.clientId, authority: canonicalAuthority.urlString, scope: scopeSet.printScopes(), redirectUri: this.getRedirectUri(request.redirectUri), prompt: getPrompt(), correlationId: this.correlationId, tokenType: request.authenticationScheme, windowTitleSubstring: document.title, extraParameters: __assign$1(__assign$1(__assign$1({}, request.extraQueryParameters), request.tokenQueryParameters), { telemetry: NativeConstants.MATS_TELEMETRY }), extendedExpiryToken: false // Make this configurable?
                          });
-                        if (!(request.authenticationScheme === exports.AuthenticationScheme.POP)) return [3 /*break*/, 2];
+                        if (!(request.authenticationScheme === exports.AuthenticationScheme.POP)) return [3 /*break*/, 4];
                         shrParameters = {
                             resourceRequestUri: request.resourceRequestUri,
                             resourceRequestMethod: request.resourceRequestMethod,
@@ -12686,13 +12800,13 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                         };
                         popTokenGenerator = new PopTokenGenerator(this.browserCrypto);
                         return [4 /*yield*/, popTokenGenerator.generateCnf(shrParameters)];
-                    case 1:
+                    case 3:
                         reqCnfData = _a.sent();
-                        // to reduce the URL length, it is recommended to send the hash of the req_cnf instead of the whole string
-                        validatedRequest.reqCnf = reqCnfData.reqCnfHash;
+                        // to reduce the URL length, it is recommended to send the short form of the req_cnf 
+                        validatedRequest.reqCnf = reqCnfData.reqCnfString;
                         validatedRequest.keyId = reqCnfData.kid;
-                        _a.label = 2;
-                    case 2: return [2 /*return*/, validatedRequest];
+                        _a.label = 4;
+                    case 4: return [2 /*return*/, validatedRequest];
                 }
             });
         });
@@ -12994,6 +13108,7 @@ var RedirectClient = /** @class */ (function (_super) {
                             if (event.persisted) {
                                 _this.logger.verbose("Page was restored from back/forward cache. Clearing temporary cache.");
                                 _this.browserStorage.cleanRequestByState(validRequest.state);
+                                _this.eventHandler.emitEvent(exports.EventType.RESTORE_FROM_BFCACHE, exports.InteractionType.Redirect);
                             }
                         };
                         _a.label = 2;
@@ -13185,7 +13300,7 @@ var RedirectClient = /** @class */ (function (_super) {
                             if (!this.nativeMessageHandler) {
                                 throw BrowserAuthError.createNativeConnectionNotEstablishedError();
                             }
-                            nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, exports.ApiId.acquireTokenPopup, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.browserStorage, cachedRequest.correlationId);
+                            nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, exports.ApiId.acquireTokenPopup, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.nativeStorage, cachedRequest.correlationId);
                             userRequestState = ProtocolUtils.parseRequestState(this.browserCrypto, state).userRequestState;
                             return [2 /*return*/, nativeInteractionClient.acquireToken(__assign$1(__assign$1({}, cachedRequest), { state: userRequestState, prompt: undefined // Server should handle the prompt, ideally native broker can do this part silently
                                  })).finally(function () {
@@ -14239,7 +14354,7 @@ var SilentRefreshClient = /** @class */ (function (_super) {
                         this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.SilentRefreshClientAcquireToken, request.correlationId);
                         this.performanceClient.setPreQueueTime(exports.PerformanceEvents.InitializeBaseRequest, request.correlationId);
                         _a = [__assign$1({}, request)];
-                        return [4 /*yield*/, this.initializeBaseRequest(request)];
+                        return [4 /*yield*/, this.initializeBaseRequest(request, request.account)];
                     case 1:
                         silentRequest = __assign$1.apply(void 0, _a.concat([_b.sent()]));
                         acquireTokenMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.SilentRefreshClientAcquireToken, silentRequest.correlationId);
@@ -17939,6 +18054,7 @@ var EventMessageUtils = /** @class */ (function () {
             case exports.EventType.LOGIN_FAILURE:
             case exports.EventType.ACQUIRE_TOKEN_SUCCESS:
             case exports.EventType.ACQUIRE_TOKEN_FAILURE:
+            case exports.EventType.RESTORE_FROM_BFCACHE:
                 if (message.interactionType === exports.InteractionType.Redirect || message.interactionType === exports.InteractionType.Popup) {
                     if (currentStatus && currentStatus !== exports.InteractionStatus.Login && currentStatus !== exports.InteractionStatus.AcquireToken) {
                         // Prevent this event from clearing any status other than login or acquireToken