@azure/msal-browser 2.38.3 → 2.39.0

package/dist/index.cjs.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v2.38.3 2023-10-27 */
+/*! @azure/msal-browser v2.39.0 2024-06-06 */
 'use strict';
 'use strict';
 
@@ -117,7 +117,7 @@ function __spread() {
     return ar;
 }
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*! *****************************************************************************
 Copyright (c) Microsoft Corporation.
 
@@ -204,7 +204,7 @@ function __spreadArrays() {
     return r;
 }
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -577,7 +577,7 @@ var JsonTypes;
     JsonTypes["Pop"] = "pop";
 })(JsonTypes || (JsonTypes = {}));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -633,7 +633,7 @@ var AuthError = /** @class */ (function (_super) {
     return AuthError;
 }(Error));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -708,7 +708,7 @@ var DEFAULT_CRYPTO_IMPLEMENTATION = {
     }
 };
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1223,7 +1223,7 @@ var ClientAuthError = /** @class */ (function (_super) {
     return ClientAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1348,7 +1348,7 @@ var StringUtils = /** @class */ (function () {
     return StringUtils;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1538,12 +1538,12 @@ var Logger = /** @class */ (function () {
     return Logger;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /* eslint-disable header/header */
 var name$1 = "@azure/msal-common";
-var version$1 = "13.3.1";
+var version$1 = "13.3.3";
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1564,7 +1564,7 @@ exports.AzureCloudInstance = void 0;
     AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
 })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1829,7 +1829,7 @@ var ClientConfigurationError = /** @class */ (function (_super) {
     return ClientConfigurationError;
 }(ClientAuthError));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2028,7 +2028,7 @@ var ScopeSet = /** @class */ (function () {
     return ScopeSet;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2066,7 +2066,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2082,7 +2082,21 @@ var AuthorityType;
     AuthorityType[AuthorityType["Ciam"] = 3] = "Ciam";
 })(AuthorityType || (AuthorityType = {}));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Protocol modes supported by MSAL.
+ */
+exports.ProtocolMode = void 0;
+(function (ProtocolMode) {
+    ProtocolMode["AAD"] = "AAD";
+    ProtocolMode["OIDC"] = "OIDC";
+})(exports.ProtocolMode || (exports.ProtocolMode = {}));
+
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2103,8 +2117,8 @@ var AuthorityType;
  *      localAccountId: Original tenant-specific accountID, usually used for legacy cases
  *      username: primary username that represents the user, usually corresponds to preferred_username in the v2 endpt
  *      authorityType: Accounts authority type as a string
- *      name: Full name for the account, including given name and family name,
  *      clientInfo: Full base64 encoded client info received from ESTS
+ *      name: Full name for the account, including given name and family name
  *      lastModificationTime: last time this entity was modified in the cache
  *      lastModificationApp:
  *      idTokenClaims: Object containing claims parsed from ID token
@@ -2133,24 +2147,6 @@ var AccountEntity = /** @class */ (function () {
             localAccountId: this.localAccountId
         });
     };
-    /**
-     * returns the type of the cache (in this case account)
-     */
-    AccountEntity.prototype.generateType = function () {
-        switch (this.authorityType) {
-            case CacheAccountType.ADFS_ACCOUNT_TYPE:
-                return CacheType.ADFS;
-            case CacheAccountType.MSAV1_ACCOUNT_TYPE:
-                return CacheType.MSA;
-            case CacheAccountType.MSSTS_ACCOUNT_TYPE:
-                return CacheType.MSSTS;
-            case CacheAccountType.GENERIC_ACCOUNT_TYPE:
-                return CacheType.GENERIC;
-            default: {
-                throw ClientAuthError.createUnexpectedAccountTypeError();
-            }
-        }
-    };
     /**
      * Returns the AccountInfo interface for this account.
      */
@@ -2163,7 +2159,8 @@ var AccountEntity = /** @class */ (function () {
             localAccountId: this.localAccountId,
             name: this.name,
             idTokenClaims: this.idTokenClaims,
-            nativeAccountId: this.nativeAccountId
+            nativeAccountId: this.nativeAccountId,
+            authorityType: this.authorityType
         };
     };
     /**
@@ -2179,76 +2176,73 @@ var AccountEntity = /** @class */ (function () {
         return accountKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
     };
     /**
-     * Build Account cache from IdToken, clientInfo and authority/policy. Associated with AAD.
-     * @param clientInfo
+     * Build Account cache from account properties.
+     * @param accountDetails
      * @param authority
-     * @param idToken
-     * @param policy
      */
-    AccountEntity.createAccount = function (clientInfo, homeAccountId, idToken, authority, cloudGraphHostName, msGraphHost, environment, nativeAccountId) {
-        var _a, _b, _c, _d, _e, _f;
+    AccountEntity.createAccount = function (accountDetails, authority) {
         var account = new AccountEntity();
-        account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
-        account.clientInfo = clientInfo;
-        account.homeAccountId = homeAccountId;
-        account.nativeAccountId = nativeAccountId;
-        var env = environment || (authority && authority.getPreferredCache());
+        if (authority.authorityType === AuthorityType.Adfs) {
+            account.authorityType = CacheAccountType.ADFS_ACCOUNT_TYPE;
+        }
+        else if (authority.protocolMode === exports.ProtocolMode.AAD) {
+            account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
+        }
+        else {
+            account.authorityType = CacheAccountType.GENERIC_ACCOUNT_TYPE;
+        }
+        account.clientInfo = accountDetails.clientInfo;
+        account.homeAccountId = accountDetails.homeAccountId;
+        account.nativeAccountId = accountDetails.nativeAccountId;
+        var env = accountDetails.environment || (authority && authority.getPreferredCache());
         if (!env) {
             throw ClientAuthError.createInvalidCacheEnvironmentError();
         }
         account.environment = env;
         // non AAD scenarios can have empty realm
-        account.realm = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.tid) || Constants.EMPTY_STRING;
-        if (idToken) {
-            account.idTokenClaims = idToken.claims;
-            // How do you account for MSA CID here?
-            account.localAccountId = ((_b = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _b === void 0 ? void 0 : _b.oid) || ((_c = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _c === void 0 ? void 0 : _c.sub) || Constants.EMPTY_STRING;
-            /*
-             * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
-             * In most cases it will contain a single email. This field should not be relied upon if a custom
-             * policy is configured to return more than 1 email.
-             */
-            var preferredUsername = (_d = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _d === void 0 ? void 0 : _d.preferred_username;
-            var email = ((_e = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _e === void 0 ? void 0 : _e.emails) ? idToken.claims.emails[0] : null;
-            account.username = preferredUsername || email || Constants.EMPTY_STRING;
-            account.name = (_f = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _f === void 0 ? void 0 : _f.name;
+        account.realm = accountDetails.idTokenClaims.tid || Constants.EMPTY_STRING;
+        account.idTokenClaims = accountDetails.idTokenClaims;
+        // How do you account for MSA CID here?
+        account.localAccountId = accountDetails.idTokenClaims.oid || accountDetails.idTokenClaims.sub || Constants.EMPTY_STRING;
+        /*
+         * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
+         * In most cases it will contain a single email. This field should not be relied upon if a custom
+         * policy is configured to return more than 1 email.
+         */
+        if (account.authorityType === CacheAccountType.MSSTS_ACCOUNT_TYPE) {
+            var preferredUsername = accountDetails.idTokenClaims.preferred_username;
+            var email = (accountDetails.idTokenClaims.emails) ? accountDetails.idTokenClaims.emails[0] : null;
+            account.username = preferredUsername || email || "";
         }
-        account.cloudGraphHostName = cloudGraphHostName;
-        account.msGraphHost = msGraphHost;
+        else {
+            account.username = accountDetails.idTokenClaims.upn || "";
+        }
+        account.name = accountDetails.idTokenClaims.name;
+        account.cloudGraphHostName = accountDetails.cloudGraphHostName;
+        account.msGraphHost = accountDetails.msGraphHost;
         return account;
     };
     /**
-     * Builds non-AAD/ADFS account.
-     * @param authority
-     * @param idToken
+     * Creates an account object from AccountInfo
+     * @param accountInfo
+     * @param cloudGraphHostName
+     * @param msGraphHost
+     * @returns AccountEntity
      */
-    AccountEntity.createGenericAccount = function (homeAccountId, idToken, authority, cloudGraphHostName, msGraphHost, environment) {
-        var _a, _b, _c, _d;
+    AccountEntity.createFromAccountInfo = function (accountInfo, cloudGraphHostName, msGraphHost) {
         var account = new AccountEntity();
-        account.authorityType = (authority &&
-            authority.authorityType === AuthorityType.Adfs) ? CacheAccountType.ADFS_ACCOUNT_TYPE : CacheAccountType.GENERIC_ACCOUNT_TYPE;
-        account.homeAccountId = homeAccountId;
-        // non AAD scenarios can have empty realm
-        account.realm = Constants.EMPTY_STRING;
-        var env = environment || authority && authority.getPreferredCache();
-        if (!env) {
-            throw ClientAuthError.createInvalidCacheEnvironmentError();
-        }
-        if (idToken) {
-            // How do you account for MSA CID here?
-            account.localAccountId = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.oid) || ((_b = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _b === void 0 ? void 0 : _b.sub) || Constants.EMPTY_STRING;
-            // upn claim for most ADFS scenarios
-            account.username = ((_c = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _c === void 0 ? void 0 : _c.upn) || Constants.EMPTY_STRING;
-            account.name = ((_d = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _d === void 0 ? void 0 : _d.name) || Constants.EMPTY_STRING;
-            account.idTokenClaims = idToken === null || idToken === void 0 ? void 0 : idToken.claims;
-        }
-        account.environment = env;
+        account.authorityType =
+            accountInfo.authorityType || CacheAccountType.GENERIC_ACCOUNT_TYPE;
+        account.homeAccountId = accountInfo.homeAccountId;
+        account.localAccountId = accountInfo.localAccountId;
+        account.nativeAccountId = accountInfo.nativeAccountId;
+        account.realm = accountInfo.tenantId;
+        account.environment = accountInfo.environment;
+        account.username = accountInfo.username;
+        account.name = accountInfo.name;
+        account.idTokenClaims = accountInfo.idTokenClaims;
         account.cloudGraphHostName = cloudGraphHostName;
         account.msGraphHost = msGraphHost;
-        /*
-         * add uniqueName to claims
-         * account.name = idToken.claims.uniqueName;
-         */
         return account;
     };
     /**
@@ -2256,9 +2250,8 @@ var AccountEntity = /** @class */ (function () {
      * @param serverClientInfo
      * @param authType
      */
-    AccountEntity.generateHomeAccountId = function (serverClientInfo, authType, logger, cryptoObj, idToken) {
-        var _a;
-        var accountId = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.sub) ? idToken.claims.sub : Constants.EMPTY_STRING;
+    AccountEntity.generateHomeAccountId = function (serverClientInfo, authType, logger, cryptoObj, idTokenClaims) {
+        var accountId = (idTokenClaims === null || idTokenClaims === void 0 ? void 0 : idTokenClaims.sub) ? idTokenClaims.sub : Constants.EMPTY_STRING;
         // since ADFS does not have tid and does not set client_info
         if (authType === AuthorityType.Adfs || authType === AuthorityType.Dsts) {
             return accountId;
@@ -2321,7 +2314,7 @@ var AccountEntity = /** @class */ (function () {
     return AccountEntity;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2373,7 +2366,7 @@ var AuthToken = /** @class */ (function () {
     return AuthToken;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3430,7 +3423,7 @@ var DefaultStorageClass = /** @class */ (function (_super) {
     return DefaultStorageClass;
 }(CacheManager));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3527,7 +3520,7 @@ function buildAuthOptions(authOptions) {
     return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
 }
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3547,7 +3540,7 @@ var ServerError = /** @class */ (function (_super) {
     return ServerError;
 }(AuthError));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3643,7 +3636,7 @@ var ThrottlingUtils = /** @class */ (function () {
     return ThrottlingUtils;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3692,7 +3685,7 @@ var NetworkManager = /** @class */ (function () {
     return NetworkManager;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3703,7 +3696,7 @@ var CcsCredentialType;
     CcsCredentialType["UPN"] = "UPN";
 })(CcsCredentialType || (CcsCredentialType = {}));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3794,7 +3787,7 @@ var RequestValidator = /** @class */ (function () {
     return RequestValidator;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4172,7 +4165,7 @@ var RequestParameterBuilder = /** @class */ (function () {
     return RequestParameterBuilder;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4274,7 +4267,7 @@ var BaseClient = /** @class */ (function () {
     return BaseClient;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4412,7 +4405,7 @@ var CredentialEntity = /** @class */ (function () {
     return CredentialEntity;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4476,7 +4469,7 @@ var IdTokenEntity = /** @class */ (function (_super) {
     return IdTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4526,7 +4519,7 @@ var TimeUtils = /** @class */ (function () {
     return TimeUtils;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4640,7 +4633,7 @@ var AccessTokenEntity = /** @class */ (function (_super) {
     return AccessTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4707,7 +4700,7 @@ var RefreshTokenEntity = /** @class */ (function (_super) {
     return RefreshTokenEntity;
 }(CredentialEntity));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4786,7 +4779,7 @@ var InteractionRequiredAuthError = /** @class */ (function (_super) {
     return InteractionRequiredAuthError;
 }(AuthError));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4802,7 +4795,7 @@ var CacheRecord = /** @class */ (function () {
     return CacheRecord;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4873,7 +4866,7 @@ var ProtocolUtils = /** @class */ (function () {
     return ProtocolUtils;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5107,7 +5100,7 @@ var UrlString = /** @class */ (function () {
     return UrlString;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5340,7 +5333,7 @@ var IntFields = new Set([
     "status",
 ]);
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5449,7 +5442,7 @@ var PopTokenGenerator = /** @class */ (function () {
     return PopTokenGenerator;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5519,7 +5512,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return AppMetadataEntity;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5555,7 +5548,7 @@ var AppMetadataEntity = /** @class */ (function () {
     return TokenCacheContext;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5643,7 +5636,7 @@ var ResponseHandler = /** @class */ (function () {
                             }
                         }
                         // generate homeAccountId
-                        this.homeAccountIdentifier = AccountEntity.generateHomeAccountId(serverTokenResponse.client_info || Constants.EMPTY_STRING, authority.authorityType, this.logger, this.cryptoObj, idTokenObj);
+                        this.homeAccountIdentifier = AccountEntity.generateHomeAccountId(serverTokenResponse.client_info || Constants.EMPTY_STRING, authority.authorityType, this.logger, this.cryptoObj, idTokenObj === null || idTokenObj === void 0 ? void 0 : idTokenObj.claims);
                         if (!!authCodePayload && !!authCodePayload.state) {
                             requestStateObj = ProtocolUtils.parseRequestState(this.cryptoObj, authCodePayload.state);
                         }
@@ -5708,7 +5701,13 @@ var ResponseHandler = /** @class */ (function () {
         var cachedAccount;
         if (!StringUtils.isEmpty(serverTokenResponse.id_token) && !!idTokenObj) {
             cachedIdToken = IdTokenEntity.createIdTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.id_token || Constants.EMPTY_STRING, this.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);
-            cachedAccount = this.generateAccountEntity(serverTokenResponse, idTokenObj, authority, authCodePayload);
+            cachedAccount = AccountEntity.createAccount({
+                homeAccountId: this.homeAccountIdentifier,
+                idTokenClaims: idTokenObj.claims,
+                clientInfo: serverTokenResponse.client_info || Constants.EMPTY_STRING,
+                cloudGraphHostName: authCodePayload === null || authCodePayload === void 0 ? void 0 : authCodePayload.cloud_graph_host_name,
+                msGraphHost: authCodePayload === null || authCodePayload === void 0 ? void 0 : authCodePayload.msgraph_host,
+            }, authority);
         }
         // AccessToken
         var cachedAccessToken = null;
@@ -5740,29 +5739,6 @@ var ResponseHandler = /** @class */ (function () {
         }
         return new CacheRecord(cachedAccount, cachedIdToken, cachedAccessToken, cachedRefreshToken, cachedAppMetadata);
     };
-    /**
-     * Generate Account
-     * @param serverTokenResponse
-     * @param idToken
-     * @param authority
-     */
-    ResponseHandler.prototype.generateAccountEntity = function (serverTokenResponse, idToken, authority, authCodePayload) {
-        var authorityType = authority.authorityType;
-        var cloudGraphHostName = authCodePayload ? authCodePayload.cloud_graph_host_name : Constants.EMPTY_STRING;
-        var msGraphhost = authCodePayload ? authCodePayload.msgraph_host : Constants.EMPTY_STRING;
-        // ADFS does not require client_info in the response
-        if (authorityType === AuthorityType.Adfs) {
-            this.logger.verbose("Authority type is ADFS, creating ADFS account");
-            return AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost);
-        }
-        // This fallback applies to B2C as well as they fall under an AAD account type.
-        if (StringUtils.isEmpty(serverTokenResponse.client_info) && authority.protocolMode === "AAD") {
-            throw ClientAuthError.createClientInfoEmptyError();
-        }
-        return serverTokenResponse.client_info ?
-            AccountEntity.createAccount(serverTokenResponse.client_info, this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost) :
-            AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost);
-    };
     /**
      * Creates an @AuthenticationResult from @CacheRecord , @IdToken , and a boolean that states whether or not the result is from cache.
      *
@@ -5842,7 +5818,7 @@ var ResponseHandler = /** @class */ (function () {
     return ResponseHandler;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6320,7 +6296,7 @@ var AuthorizationCodeClient = /** @class */ (function (_super) {
     return AuthorizationCodeClient;
 }(BaseClient));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6594,7 +6570,7 @@ var RefreshTokenClient = /** @class */ (function (_super) {
     return RefreshTokenClient;
 }(BaseClient));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6724,7 +6700,7 @@ var SilentFlowClient = /** @class */ (function (_super) {
     return SilentFlowClient;
 }(BaseClient));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6736,7 +6712,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6745,21 +6721,7 @@ var rawMetdataJSON = { "endpointMetadata": { "https://login.microsoftonline.com/
 var EndpointMetadata = rawMetdataJSON.endpointMetadata;
 var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * Protocol modes supported by MSAL.
- */
-exports.ProtocolMode = void 0;
-(function (ProtocolMode) {
-    ProtocolMode["AAD"] = "AAD";
-    ProtocolMode["OIDC"] = "OIDC";
-})(exports.ProtocolMode || (exports.ProtocolMode = {}));
-
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6836,7 +6798,7 @@ var AuthorityMetadataEntity = /** @class */ (function () {
     return AuthorityMetadataEntity;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6846,7 +6808,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6856,7 +6818,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6988,7 +6950,7 @@ var RegionDiscovery = /** @class */ (function () {
     return RegionDiscovery;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7781,7 +7743,7 @@ var Authority = /** @class */ (function () {
     return Authority;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7845,7 +7807,7 @@ var AuthorityFactory = /** @class */ (function () {
     return AuthorityFactory;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7876,7 +7838,7 @@ var ServerTelemetryEntity = /** @class */ (function () {
     return ServerTelemetryEntity;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7904,7 +7866,7 @@ var ThrottlingEntity = /** @class */ (function () {
     return ThrottlingEntity;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7921,7 +7883,7 @@ var StubbedNetworkModule = {
     }
 };
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7966,7 +7928,7 @@ var JoseHeaderError = /** @class */ (function (_super) {
     return JoseHeaderError;
 }(AuthError));
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8006,7 +7968,7 @@ var JoseHeader = /** @class */ (function () {
     return JoseHeader;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8065,7 +8027,7 @@ var AuthenticationHeaderParser = /** @class */ (function () {
     return AuthenticationHeaderParser;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8227,7 +8189,7 @@ var ServerTelemetryManager = /** @class */ (function () {
     return ServerTelemetryManager;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8630,7 +8592,7 @@ var PerformanceClient = /** @class */ (function () {
     return PerformanceClient;
 }());
 
-/*! @azure/msal-common v13.3.1 2023-10-27 */
+/*! @azure/msal-common v13.3.3 2024-06-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10874,6 +10836,34 @@ var BrowserCacheManager = /** @class */ (function (_super) {
     BrowserCacheManager.prototype.setRedirectRequestContext = function (value) {
         this.setTemporaryCache(TemporaryCacheKeys.REDIRECT_CONTEXT, value, true);
     };
+    /**
+     * Builds credential entities from AuthenticationResult object and saves the resulting credentials to the cache
+     * @param result
+     * @param request
+     */
+    BrowserCacheManager.prototype.hydrateCache = function (result, request) {
+        var _a, _b, _c, _d, _e, _f;
+        return __awaiter$1(this, void 0, void 0, function () {
+            var idTokenEntity, claimsHash, accessTokenEntity, cacheRecord;
+            return __generator$1(this, function (_g) {
+                switch (_g.label) {
+                    case 0:
+                        idTokenEntity = IdTokenEntity.createIdTokenEntity(((_a = result.account) === null || _a === void 0 ? void 0 : _a.homeAccountId) || "", ((_b = result.account) === null || _b === void 0 ? void 0 : _b.environment) || "", result.idToken, this.clientId, result.tenantId);
+                        if (!request.claims) return [3 /*break*/, 2];
+                        return [4 /*yield*/, this.cryptoImpl.hashString(request.claims)];
+                    case 1:
+                        claimsHash = _g.sent();
+                        _g.label = 2;
+                    case 2:
+                        accessTokenEntity = AccessTokenEntity.createAccessTokenEntity(((_c = result.account) === null || _c === void 0 ? void 0 : _c.homeAccountId) || "", ((_d = result.account) === null || _d === void 0 ? void 0 : _d.environment) || "", result.accessToken, this.clientId, result.tenantId, result.scopes.join(" "), ((_e = result.expiresOn) === null || _e === void 0 ? void 0 : _e.getTime()) || 0, ((_f = result.extExpiresOn) === null || _f === void 0 ? void 0 : _f.getTime()) || 0, this.cryptoImpl, undefined, // refreshOn
+                        result.tokenType, undefined, // userAssertionHash
+                        request.sshKid, request.claims, claimsHash);
+                        cacheRecord = new CacheRecord(undefined, idTokenEntity, accessTokenEntity);
+                        return [2 /*return*/, this.saveCacheRecord(cacheRecord)];
+                }
+            });
+        });
+    };
     return BrowserCacheManager;
 }(CacheManager));
 var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
@@ -10890,7 +10880,7 @@ var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
 
 /* eslint-disable header/header */
 var name = "@azure/msal-browser";
-var version = "2.38.3";
+var version = "2.39.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -12391,7 +12381,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
      */
     NativeInteractionClient.prototype.acquireTokensFromCache = function (nativeAccountId, request) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var account, silentRequest, result, e_2;
+            var account, silentRequest, result, fullAccount, e_2;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
                     case 0:
@@ -12410,7 +12400,8 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                         return [4 /*yield*/, this.silentCacheClient.acquireToken(silentRequest)];
                     case 2:
                         result = _a.sent();
-                        return [2 /*return*/, result];
+                        fullAccount = __assign$1(__assign$1({}, account), { idTokenClaims: result.idTokenClaims });
+                        return [2 /*return*/, __assign$1(__assign$1({}, result), { account: fullAccount })];
                     case 3:
                         e_2 = _a.sent();
                         throw e_2;
@@ -12533,7 +12524,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
      */
     NativeInteractionClient.prototype.handleNativeResponse = function (response, request, reqTimestamp) {
         return __awaiter$1(this, void 0, void 0, function () {
-            var authority, authorityPreferredCache, idTokenObj, homeAccountIdentifier, accountEntity, result;
+            var authority, idTokenObj, homeAccountIdentifier, accountEntity, result;
             return __generator$1(this, function (_a) {
                 switch (_a.label) {
                     case 0:
@@ -12545,16 +12536,20 @@ var NativeInteractionClient = /** @class */ (function (_super) {
                         return [4 /*yield*/, this.getDiscoveredAuthority(request.authority)];
                     case 1:
                         authority = _a.sent();
-                        authorityPreferredCache = authority.getPreferredCache();
                         idTokenObj = this.createIdTokenObj(response);
                         homeAccountIdentifier = this.createHomeAccountIdentifier(response, idTokenObj);
-                        accountEntity = this.createAccountEntity(response, homeAccountIdentifier, idTokenObj, authorityPreferredCache);
+                        accountEntity = AccountEntity.createAccount({
+                            homeAccountId: homeAccountIdentifier,
+                            idTokenClaims: idTokenObj.claims,
+                            clientInfo: response.client_info,
+                            nativeAccountId: response.account.id,
+                        }, authority);
                         return [4 /*yield*/, this.generateAuthenticationResult(response, request, idTokenObj, accountEntity, authority.canonicalAuthority, reqTimestamp)];
                     case 2:
                         result = _a.sent();
                         // cache accounts and tokens in the appropriate storage
                         this.cacheAccount(accountEntity);
-                        this.cacheNativeTokens(response, request, homeAccountIdentifier, accountEntity, idTokenObj, result.accessToken, result.tenantId, reqTimestamp);
+                        this.cacheNativeTokens(response, request, homeAccountIdentifier, idTokenObj, result.accessToken, result.tenantId, reqTimestamp);
                         return [2 /*return*/, result];
                 }
             });
@@ -12576,20 +12571,9 @@ var NativeInteractionClient = /** @class */ (function (_super) {
      */
     NativeInteractionClient.prototype.createHomeAccountIdentifier = function (response, idTokenObj) {
         // Save account in browser storage
-        var homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenObj);
+        var homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenObj.claims);
         return homeAccountIdentifier;
     };
-    /**
-     * Creates account entity
-     * @param response
-     * @param homeAccountIdentifier
-     * @param idTokenObj
-     * @param authority
-     * @returns
-     */
-    NativeInteractionClient.prototype.createAccountEntity = function (response, homeAccountIdentifier, idTokenObj, authority) {
-        return AccountEntity.createAccount(response.client_info, homeAccountIdentifier, idTokenObj, undefined, undefined, undefined, authority, response.account.id);
-    };
     /**
      * Helper to generate scopes
      * @param response
@@ -12710,7 +12694,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
      * @param tenantId
      * @param reqTimestamp
      */
-    NativeInteractionClient.prototype.cacheNativeTokens = function (response, request, homeAccountIdentifier, accountEntity, idTokenObj, responseAccessToken, tenantId, reqTimestamp) {
+    NativeInteractionClient.prototype.cacheNativeTokens = function (response, request, homeAccountIdentifier, idTokenObj, responseAccessToken, tenantId, reqTimestamp) {
         var cachedIdToken = IdTokenEntity.createIdTokenEntity(homeAccountIdentifier, request.authority, response.id_token || Constants.EMPTY_STRING, request.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);
         // cache accessToken in inmemory storage
         var expiresIn = (request.tokenType === exports.AuthenticationScheme.POP)
@@ -12723,7 +12707,7 @@ var NativeInteractionClient = /** @class */ (function (_super) {
         var cachedAccessToken = AccessTokenEntity.createAccessTokenEntity(homeAccountIdentifier, request.authority, responseAccessToken, request.clientId, idTokenObj
             ? idTokenObj.claims.tid || Constants.EMPTY_STRING
             : tenantId, responseScopes.printScopes(), tokenExpirationSeconds, 0, this.browserCrypto);
-        var nativeCacheRecord = new CacheRecord(accountEntity, cachedIdToken, cachedAccessToken);
+        var nativeCacheRecord = new CacheRecord(undefined, cachedIdToken, cachedAccessToken);
         this.nativeStorageManager.saveCacheRecord(nativeCacheRecord);
     };
     NativeInteractionClient.prototype.addTelemetryFromNativeResponse = function (response) {
@@ -14221,6 +14205,7 @@ var SilentHandler = /** @class */ (function (_super) {
      */
     SilentHandler.prototype.createHiddenIframe = function () {
         var authFrame = document.createElement("iframe");
+        authFrame.className = "msalSilentIframe";
         authFrame.style.visibility = "hidden";
         authFrame.style.position = "absolute";
         authFrame.style.width = authFrame.style.height = "0";
@@ -16401,8 +16386,9 @@ var TokenCache = /** @class */ (function () {
         var idToken = new AuthToken(response.id_token, this.cryptoObj);
         var cacheRecord;
         var authority;
+        var cacheRecordAccount;
         if (request.account) {
-            var cacheRecordAccount = this.loadAccount(idToken, request.account.environment, undefined, undefined, request.account.homeAccountId);
+            cacheRecordAccount = AccountEntity.createFromAccountInfo(request.account);
             cacheRecord = new CacheRecord(cacheRecordAccount, this.loadIdToken(idToken, cacheRecordAccount.homeAccountId, request.account.environment, request.account.tenantId), this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, request.account.environment, request.account.tenantId, options), this.loadRefreshToken(request, response, cacheRecordAccount.homeAccountId, request.account.environment));
         }
         else if (request.authority) {
@@ -16418,12 +16404,12 @@ var TokenCache = /** @class */ (function () {
             // "clientInfo" from options takes precedence over "clientInfo" in response
             if (options.clientInfo) {
                 this.logger.trace("TokenCache - homeAccountId from options");
-                var cacheRecordAccount = this.loadAccount(idToken, authority.hostnameAndPort, options.clientInfo, authority.authorityType);
+                cacheRecordAccount = this.loadAccount(idToken, authority, options.clientInfo);
                 cacheRecord = new CacheRecord(cacheRecordAccount, this.loadIdToken(idToken, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant), this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant, options), this.loadRefreshToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort));
             }
             else if (response.client_info) {
                 this.logger.trace("TokenCache - homeAccountId from response");
-                var cacheRecordAccount = this.loadAccount(idToken, authority.hostnameAndPort, response.client_info, authority.authorityType);
+                cacheRecordAccount = this.loadAccount(idToken, authority, response.client_info);
                 cacheRecord = new CacheRecord(cacheRecordAccount, this.loadIdToken(idToken, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant), this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant, options), this.loadRefreshToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort));
             }
             else {
@@ -16433,7 +16419,7 @@ var TokenCache = /** @class */ (function () {
         else {
             throw BrowserAuthError.createUnableToLoadTokenError("Please provide a request with an account or a request with authority.");
         }
-        return this.generateAuthenticationResult(request, idToken, cacheRecord, authority);
+        return this.generateAuthenticationResult(request, idToken, cacheRecord, cacheRecordAccount, authority);
     };
     /**
      * Helper function to load account to msal-browser cache
@@ -16444,20 +16430,18 @@ var TokenCache = /** @class */ (function () {
      * @param requestHomeAccountId
      * @returns `AccountEntity`
      */
-    TokenCache.prototype.loadAccount = function (idToken, environment, clientInfo, authorityType, requestHomeAccountId) {
+    TokenCache.prototype.loadAccount = function (idToken, authority, clientInfo, requestHomeAccountId) {
         var homeAccountId;
         if (requestHomeAccountId) {
             homeAccountId = requestHomeAccountId;
         }
-        else if (authorityType !== undefined && clientInfo) {
-            homeAccountId = AccountEntity.generateHomeAccountId(clientInfo, authorityType, this.logger, this.cryptoObj, idToken);
+        else if (authority.authorityType !== undefined && clientInfo) {
+            homeAccountId = AccountEntity.generateHomeAccountId(clientInfo, authority.authorityType, this.logger, this.cryptoObj, idToken.claims);
         }
         if (!homeAccountId) {
             throw BrowserAuthError.createUnableToLoadTokenError("Unexpected missing homeAccountId");
         }
-        var accountEntity = clientInfo ?
-            AccountEntity.createAccount(clientInfo, homeAccountId, idToken, undefined, undefined, undefined, environment) :
-            AccountEntity.createGenericAccount(homeAccountId, idToken, undefined, undefined, undefined, environment);
+        var accountEntity = AccountEntity.createAccount({ homeAccountId: homeAccountId, idTokenClaims: idToken.claims, clientInfo: clientInfo, environment: authority.hostnameAndPort }, authority);
         if (this.isBrowserEnvironment) {
             this.logger.verbose("TokenCache - loading account");
             this.storage.setAccount(accountEntity);
@@ -16547,16 +16531,17 @@ var TokenCache = /** @class */ (function () {
      * @param request
      * @param idTokenObj
      * @param cacheRecord
+     * @param accountEntity
      * @param authority
      * @returns `AuthenticationResult`
      */
-    TokenCache.prototype.generateAuthenticationResult = function (request, idTokenObj, cacheRecord, authority) {
-        var _a, _b, _c;
+    TokenCache.prototype.generateAuthenticationResult = function (request, idTokenObj, cacheRecord, accountEntity, authority) {
+        var _a;
         var accessToken = Constants.EMPTY_STRING;
         var responseScopes = [];
         var expiresOn = null;
         var extExpiresOn;
-        if (cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.accessToken) {
+        if (cacheRecord.accessToken) {
             accessToken = cacheRecord.accessToken.secret;
             responseScopes = ScopeSet.fromString(cacheRecord.accessToken.target).asArray();
             expiresOn = new Date(Number(cacheRecord.accessToken.expiresOn) * 1000);
@@ -16569,7 +16554,7 @@ var TokenCache = /** @class */ (function () {
             uniqueId: uid,
             tenantId: tid,
             scopes: responseScopes,
-            account: (cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.account) ? cacheRecord.account.getAccountInfo() : null,
+            account: accountEntity ? accountEntity.getAccountInfo() : null,
             idToken: idTokenObj ? idTokenObj.rawToken : Constants.EMPTY_STRING,
             idTokenClaims: idTokenObj ? idTokenObj.claims : {},
             accessToken: accessToken,
@@ -16581,8 +16566,8 @@ var TokenCache = /** @class */ (function () {
             familyId: Constants.EMPTY_STRING,
             tokenType: ((_a = cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.accessToken) === null || _a === void 0 ? void 0 : _a.tokenType) || Constants.EMPTY_STRING,
             state: Constants.EMPTY_STRING,
-            cloudGraphHostName: ((_b = cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.account) === null || _b === void 0 ? void 0 : _b.cloudGraphHostName) || Constants.EMPTY_STRING,
-            msGraphHost: ((_c = cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.account) === null || _c === void 0 ? void 0 : _c.msGraphHost) || Constants.EMPTY_STRING,
+            cloudGraphHostName: accountEntity.cloudGraphHostName || Constants.EMPTY_STRING,
+            msGraphHost: accountEntity.msGraphHost || Constants.EMPTY_STRING,
             code: undefined,
             fromNativeBroker: false
         };
@@ -17972,6 +17957,33 @@ var PublicClientApplication = /** @class */ (function (_super) {
             });
         });
     };
+    /**
+     * Hydrates cache with the tokens and account in the AuthenticationResult object
+     * @param result
+     * @param request - The request object that was used to obtain the AuthenticationResult
+     * @returns
+     */
+    PublicClientApplication.prototype.hydrateCache = function (result, request) {
+        return __awaiter$1(this, void 0, void 0, function () {
+            var accountEntity;
+            return __generator$1(this, function (_a) {
+                this.logger.verbose("hydrateCache called");
+                if (result.account) {
+                    accountEntity = AccountEntity.createFromAccountInfo(result.account, result.cloudGraphHostName, result.msGraphHost);
+                    this.browserStorage.setAccount(accountEntity);
+                    if (result.fromNativeBroker) {
+                        this.logger.verbose("Response was from native broker, storing in-memory");
+                        // Tokens from native broker are stored in-memory
+                        return [2 /*return*/, this.nativeInternalStorage.hydrateCache(result, request)];
+                    }
+                    else {
+                        return [2 /*return*/, this.browserStorage.hydrateCache(result, request)];
+                    }
+                }
+                return [2 /*return*/];
+            });
+        });
+    };
     return PublicClientApplication;
 }(ClientApplication));
 
@@ -18069,7 +18081,10 @@ var stubbedPublicClientApplication = {
     },
     getConfiguration: function () {
         throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
-    }
+    },
+    hydrateCache: function () {
+        return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+    },
 };
 
 /*