@azure/msal-browser 2.38.4 → 2.39.0

package/lib/msal-browser.js

@@ -1,10 +1,10 @@
-/*! @azure/msal-browser v2.38.4 2024-03-26 */
+/*! @azure/msal-browser v2.39.0 2024-06-06 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
     typeof define === 'function' && define.amd ? define(['exports'], factory) :
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msal = {}));
-}(this, (function (exports) { 'use strict';
+})(this, (function (exports) { 'use strict';
 
     /*! *****************************************************************************
     Copyright (c) Microsoft Corporation.
@@ -119,7 +119,7 @@
         return ar;
     }
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*! *****************************************************************************
     Copyright (c) Microsoft Corporation.
 
@@ -206,7 +206,7 @@
         return r;
     }
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -579,7 +579,7 @@
         JsonTypes["Pop"] = "pop";
     })(JsonTypes || (JsonTypes = {}));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -635,7 +635,7 @@
         return AuthError;
     }(Error));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -710,7 +710,7 @@
         }
     };
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1225,7 +1225,7 @@
         return ClientAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1350,7 +1350,7 @@
         return StringUtils;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1540,12 +1540,12 @@
         return Logger;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /* eslint-disable header/header */
     var name$1 = "@azure/msal-common";
-    var version$1 = "13.3.1";
+    var version$1 = "13.3.3";
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1566,7 +1566,7 @@
         AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
     })(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1831,7 +1831,7 @@
         return ClientConfigurationError;
     }(ClientAuthError));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2030,7 +2030,7 @@
         return ScopeSet;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2068,7 +2068,7 @@
         };
     }
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2084,7 +2084,21 @@
         AuthorityType[AuthorityType["Ciam"] = 3] = "Ciam";
     })(AuthorityType || (AuthorityType = {}));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    /**
+     * Protocol modes supported by MSAL.
+     */
+    exports.ProtocolMode = void 0;
+    (function (ProtocolMode) {
+        ProtocolMode["AAD"] = "AAD";
+        ProtocolMode["OIDC"] = "OIDC";
+    })(exports.ProtocolMode || (exports.ProtocolMode = {}));
+
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2105,8 +2119,8 @@
      *      localAccountId: Original tenant-specific accountID, usually used for legacy cases
      *      username: primary username that represents the user, usually corresponds to preferred_username in the v2 endpt
      *      authorityType: Accounts authority type as a string
-     *      name: Full name for the account, including given name and family name,
      *      clientInfo: Full base64 encoded client info received from ESTS
+     *      name: Full name for the account, including given name and family name
      *      lastModificationTime: last time this entity was modified in the cache
      *      lastModificationApp:
      *      idTokenClaims: Object containing claims parsed from ID token
@@ -2135,24 +2149,6 @@
                 localAccountId: this.localAccountId
             });
         };
-        /**
-         * returns the type of the cache (in this case account)
-         */
-        AccountEntity.prototype.generateType = function () {
-            switch (this.authorityType) {
-                case CacheAccountType.ADFS_ACCOUNT_TYPE:
-                    return CacheType.ADFS;
-                case CacheAccountType.MSAV1_ACCOUNT_TYPE:
-                    return CacheType.MSA;
-                case CacheAccountType.MSSTS_ACCOUNT_TYPE:
-                    return CacheType.MSSTS;
-                case CacheAccountType.GENERIC_ACCOUNT_TYPE:
-                    return CacheType.GENERIC;
-                default: {
-                    throw ClientAuthError.createUnexpectedAccountTypeError();
-                }
-            }
-        };
         /**
          * Returns the AccountInfo interface for this account.
          */
@@ -2165,7 +2161,8 @@
                 localAccountId: this.localAccountId,
                 name: this.name,
                 idTokenClaims: this.idTokenClaims,
-                nativeAccountId: this.nativeAccountId
+                nativeAccountId: this.nativeAccountId,
+                authorityType: this.authorityType
             };
         };
         /**
@@ -2181,76 +2178,73 @@
             return accountKey.join(Separators.CACHE_KEY_SEPARATOR).toLowerCase();
         };
         /**
-         * Build Account cache from IdToken, clientInfo and authority/policy. Associated with AAD.
-         * @param clientInfo
+         * Build Account cache from account properties.
+         * @param accountDetails
          * @param authority
-         * @param idToken
-         * @param policy
          */
-        AccountEntity.createAccount = function (clientInfo, homeAccountId, idToken, authority, cloudGraphHostName, msGraphHost, environment, nativeAccountId) {
-            var _a, _b, _c, _d, _e, _f;
+        AccountEntity.createAccount = function (accountDetails, authority) {
             var account = new AccountEntity();
-            account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
-            account.clientInfo = clientInfo;
-            account.homeAccountId = homeAccountId;
-            account.nativeAccountId = nativeAccountId;
-            var env = environment || (authority && authority.getPreferredCache());
+            if (authority.authorityType === AuthorityType.Adfs) {
+                account.authorityType = CacheAccountType.ADFS_ACCOUNT_TYPE;
+            }
+            else if (authority.protocolMode === exports.ProtocolMode.AAD) {
+                account.authorityType = CacheAccountType.MSSTS_ACCOUNT_TYPE;
+            }
+            else {
+                account.authorityType = CacheAccountType.GENERIC_ACCOUNT_TYPE;
+            }
+            account.clientInfo = accountDetails.clientInfo;
+            account.homeAccountId = accountDetails.homeAccountId;
+            account.nativeAccountId = accountDetails.nativeAccountId;
+            var env = accountDetails.environment || (authority && authority.getPreferredCache());
             if (!env) {
                 throw ClientAuthError.createInvalidCacheEnvironmentError();
             }
             account.environment = env;
             // non AAD scenarios can have empty realm
-            account.realm = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.tid) || Constants.EMPTY_STRING;
-            if (idToken) {
-                account.idTokenClaims = idToken.claims;
-                // How do you account for MSA CID here?
-                account.localAccountId = ((_b = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _b === void 0 ? void 0 : _b.oid) || ((_c = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _c === void 0 ? void 0 : _c.sub) || Constants.EMPTY_STRING;
-                /*
-                 * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
-                 * In most cases it will contain a single email. This field should not be relied upon if a custom
-                 * policy is configured to return more than 1 email.
-                 */
-                var preferredUsername = (_d = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _d === void 0 ? void 0 : _d.preferred_username;
-                var email = ((_e = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _e === void 0 ? void 0 : _e.emails) ? idToken.claims.emails[0] : null;
-                account.username = preferredUsername || email || Constants.EMPTY_STRING;
-                account.name = (_f = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _f === void 0 ? void 0 : _f.name;
+            account.realm = accountDetails.idTokenClaims.tid || Constants.EMPTY_STRING;
+            account.idTokenClaims = accountDetails.idTokenClaims;
+            // How do you account for MSA CID here?
+            account.localAccountId = accountDetails.idTokenClaims.oid || accountDetails.idTokenClaims.sub || Constants.EMPTY_STRING;
+            /*
+             * In B2C scenarios the emails claim is used instead of preferred_username and it is an array.
+             * In most cases it will contain a single email. This field should not be relied upon if a custom
+             * policy is configured to return more than 1 email.
+             */
+            if (account.authorityType === CacheAccountType.MSSTS_ACCOUNT_TYPE) {
+                var preferredUsername = accountDetails.idTokenClaims.preferred_username;
+                var email = (accountDetails.idTokenClaims.emails) ? accountDetails.idTokenClaims.emails[0] : null;
+                account.username = preferredUsername || email || "";
             }
-            account.cloudGraphHostName = cloudGraphHostName;
-            account.msGraphHost = msGraphHost;
+            else {
+                account.username = accountDetails.idTokenClaims.upn || "";
+            }
+            account.name = accountDetails.idTokenClaims.name;
+            account.cloudGraphHostName = accountDetails.cloudGraphHostName;
+            account.msGraphHost = accountDetails.msGraphHost;
             return account;
         };
         /**
-         * Builds non-AAD/ADFS account.
-         * @param authority
-         * @param idToken
+         * Creates an account object from AccountInfo
+         * @param accountInfo
+         * @param cloudGraphHostName
+         * @param msGraphHost
+         * @returns AccountEntity
          */
-        AccountEntity.createGenericAccount = function (homeAccountId, idToken, authority, cloudGraphHostName, msGraphHost, environment) {
-            var _a, _b, _c, _d;
+        AccountEntity.createFromAccountInfo = function (accountInfo, cloudGraphHostName, msGraphHost) {
             var account = new AccountEntity();
-            account.authorityType = (authority &&
-                authority.authorityType === AuthorityType.Adfs) ? CacheAccountType.ADFS_ACCOUNT_TYPE : CacheAccountType.GENERIC_ACCOUNT_TYPE;
-            account.homeAccountId = homeAccountId;
-            // non AAD scenarios can have empty realm
-            account.realm = Constants.EMPTY_STRING;
-            var env = environment || authority && authority.getPreferredCache();
-            if (!env) {
-                throw ClientAuthError.createInvalidCacheEnvironmentError();
-            }
-            if (idToken) {
-                // How do you account for MSA CID here?
-                account.localAccountId = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.oid) || ((_b = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _b === void 0 ? void 0 : _b.sub) || Constants.EMPTY_STRING;
-                // upn claim for most ADFS scenarios
-                account.username = ((_c = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _c === void 0 ? void 0 : _c.upn) || Constants.EMPTY_STRING;
-                account.name = ((_d = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _d === void 0 ? void 0 : _d.name) || Constants.EMPTY_STRING;
-                account.idTokenClaims = idToken === null || idToken === void 0 ? void 0 : idToken.claims;
-            }
-            account.environment = env;
+            account.authorityType =
+                accountInfo.authorityType || CacheAccountType.GENERIC_ACCOUNT_TYPE;
+            account.homeAccountId = accountInfo.homeAccountId;
+            account.localAccountId = accountInfo.localAccountId;
+            account.nativeAccountId = accountInfo.nativeAccountId;
+            account.realm = accountInfo.tenantId;
+            account.environment = accountInfo.environment;
+            account.username = accountInfo.username;
+            account.name = accountInfo.name;
+            account.idTokenClaims = accountInfo.idTokenClaims;
             account.cloudGraphHostName = cloudGraphHostName;
             account.msGraphHost = msGraphHost;
-            /*
-             * add uniqueName to claims
-             * account.name = idToken.claims.uniqueName;
-             */
             return account;
         };
         /**
@@ -2258,9 +2252,8 @@
          * @param serverClientInfo
          * @param authType
          */
-        AccountEntity.generateHomeAccountId = function (serverClientInfo, authType, logger, cryptoObj, idToken) {
-            var _a;
-            var accountId = ((_a = idToken === null || idToken === void 0 ? void 0 : idToken.claims) === null || _a === void 0 ? void 0 : _a.sub) ? idToken.claims.sub : Constants.EMPTY_STRING;
+        AccountEntity.generateHomeAccountId = function (serverClientInfo, authType, logger, cryptoObj, idTokenClaims) {
+            var accountId = (idTokenClaims === null || idTokenClaims === void 0 ? void 0 : idTokenClaims.sub) ? idTokenClaims.sub : Constants.EMPTY_STRING;
             // since ADFS does not have tid and does not set client_info
             if (authType === AuthorityType.Adfs || authType === AuthorityType.Dsts) {
                 return accountId;
@@ -2323,7 +2316,7 @@
         return AccountEntity;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2375,7 +2368,7 @@
         return AuthToken;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3432,7 +3425,7 @@
         return DefaultStorageClass;
     }(CacheManager));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3529,7 +3522,7 @@
         return __assign({ clientCapabilities: [], azureCloudOptions: DEFAULT_AZURE_CLOUD_OPTIONS, skipAuthorityMetadataCache: false }, authOptions);
     }
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3549,7 +3542,7 @@
         return ServerError;
     }(AuthError));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3645,7 +3638,7 @@
         return ThrottlingUtils;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3694,7 +3687,7 @@
         return NetworkManager;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3705,7 +3698,7 @@
         CcsCredentialType["UPN"] = "UPN";
     })(CcsCredentialType || (CcsCredentialType = {}));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3796,7 +3789,7 @@
         return RequestValidator;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4174,7 +4167,7 @@
         return RequestParameterBuilder;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4276,7 +4269,7 @@
         return BaseClient;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4414,7 +4407,7 @@
         return CredentialEntity;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4478,7 +4471,7 @@
         return IdTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4528,7 +4521,7 @@
         return TimeUtils;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4642,7 +4635,7 @@
         return AccessTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4709,7 +4702,7 @@
         return RefreshTokenEntity;
     }(CredentialEntity));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4788,7 +4781,7 @@
         return InteractionRequiredAuthError;
     }(AuthError));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4804,7 +4797,7 @@
         return CacheRecord;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4875,7 +4868,7 @@
         return ProtocolUtils;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5109,7 +5102,7 @@
         return UrlString;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5342,7 +5335,7 @@
         "status",
     ]);
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5451,7 +5444,7 @@
         return PopTokenGenerator;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5521,7 +5514,7 @@
         return AppMetadataEntity;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5557,7 +5550,7 @@
         return TokenCacheContext;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5645,7 +5638,7 @@
                                 }
                             }
                             // generate homeAccountId
-                            this.homeAccountIdentifier = AccountEntity.generateHomeAccountId(serverTokenResponse.client_info || Constants.EMPTY_STRING, authority.authorityType, this.logger, this.cryptoObj, idTokenObj);
+                            this.homeAccountIdentifier = AccountEntity.generateHomeAccountId(serverTokenResponse.client_info || Constants.EMPTY_STRING, authority.authorityType, this.logger, this.cryptoObj, idTokenObj === null || idTokenObj === void 0 ? void 0 : idTokenObj.claims);
                             if (!!authCodePayload && !!authCodePayload.state) {
                                 requestStateObj = ProtocolUtils.parseRequestState(this.cryptoObj, authCodePayload.state);
                             }
@@ -5710,7 +5703,13 @@
             var cachedAccount;
             if (!StringUtils.isEmpty(serverTokenResponse.id_token) && !!idTokenObj) {
                 cachedIdToken = IdTokenEntity.createIdTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.id_token || Constants.EMPTY_STRING, this.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);
-                cachedAccount = this.generateAccountEntity(serverTokenResponse, idTokenObj, authority, authCodePayload);
+                cachedAccount = AccountEntity.createAccount({
+                    homeAccountId: this.homeAccountIdentifier,
+                    idTokenClaims: idTokenObj.claims,
+                    clientInfo: serverTokenResponse.client_info || Constants.EMPTY_STRING,
+                    cloudGraphHostName: authCodePayload === null || authCodePayload === void 0 ? void 0 : authCodePayload.cloud_graph_host_name,
+                    msGraphHost: authCodePayload === null || authCodePayload === void 0 ? void 0 : authCodePayload.msgraph_host,
+                }, authority);
             }
             // AccessToken
             var cachedAccessToken = null;
@@ -5742,29 +5741,6 @@
             }
             return new CacheRecord(cachedAccount, cachedIdToken, cachedAccessToken, cachedRefreshToken, cachedAppMetadata);
         };
-        /**
-         * Generate Account
-         * @param serverTokenResponse
-         * @param idToken
-         * @param authority
-         */
-        ResponseHandler.prototype.generateAccountEntity = function (serverTokenResponse, idToken, authority, authCodePayload) {
-            var authorityType = authority.authorityType;
-            var cloudGraphHostName = authCodePayload ? authCodePayload.cloud_graph_host_name : Constants.EMPTY_STRING;
-            var msGraphhost = authCodePayload ? authCodePayload.msgraph_host : Constants.EMPTY_STRING;
-            // ADFS does not require client_info in the response
-            if (authorityType === AuthorityType.Adfs) {
-                this.logger.verbose("Authority type is ADFS, creating ADFS account");
-                return AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost);
-            }
-            // This fallback applies to B2C as well as they fall under an AAD account type.
-            if (StringUtils.isEmpty(serverTokenResponse.client_info) && authority.protocolMode === "AAD") {
-                throw ClientAuthError.createClientInfoEmptyError();
-            }
-            return serverTokenResponse.client_info ?
-                AccountEntity.createAccount(serverTokenResponse.client_info, this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost) :
-                AccountEntity.createGenericAccount(this.homeAccountIdentifier, idToken, authority, cloudGraphHostName, msGraphhost);
-        };
         /**
          * Creates an @AuthenticationResult from @CacheRecord , @IdToken , and a boolean that states whether or not the result is from cache.
          *
@@ -5844,7 +5820,7 @@
         return ResponseHandler;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6322,7 +6298,7 @@
         return AuthorizationCodeClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6596,7 +6572,7 @@
         return RefreshTokenClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6726,7 +6702,7 @@
         return SilentFlowClient;
     }(BaseClient));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6738,7 +6714,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6747,21 +6723,7 @@
     var EndpointMetadata = rawMetdataJSON.endpointMetadata;
     var InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    /**
-     * Protocol modes supported by MSAL.
-     */
-    exports.ProtocolMode = void 0;
-    (function (ProtocolMode) {
-        ProtocolMode["AAD"] = "AAD";
-        ProtocolMode["OIDC"] = "OIDC";
-    })(exports.ProtocolMode || (exports.ProtocolMode = {}));
-
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6838,7 +6800,7 @@
         return AuthorityMetadataEntity;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6848,7 +6810,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6858,7 +6820,7 @@
             response.hasOwnProperty("error_description"));
     }
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6990,7 +6952,7 @@
         return RegionDiscovery;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7783,7 +7745,7 @@
         return Authority;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7847,7 +7809,7 @@
         return AuthorityFactory;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7878,7 +7840,7 @@
         return ServerTelemetryEntity;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7906,7 +7868,7 @@
         return ThrottlingEntity;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7923,7 +7885,7 @@
         }
     };
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7968,7 +7930,7 @@
         return JoseHeaderError;
     }(AuthError));
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8008,7 +7970,7 @@
         return JoseHeader;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8067,7 +8029,7 @@
         return AuthenticationHeaderParser;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8229,7 +8191,7 @@
         return ServerTelemetryManager;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8632,7 +8594,7 @@
         return PerformanceClient;
     }());
 
-    /*! @azure/msal-common v13.3.1 2023-10-27 */
+    /*! @azure/msal-common v13.3.3 2024-06-06 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10876,6 +10838,34 @@
         BrowserCacheManager.prototype.setRedirectRequestContext = function (value) {
             this.setTemporaryCache(TemporaryCacheKeys.REDIRECT_CONTEXT, value, true);
         };
+        /**
+         * Builds credential entities from AuthenticationResult object and saves the resulting credentials to the cache
+         * @param result
+         * @param request
+         */
+        BrowserCacheManager.prototype.hydrateCache = function (result, request) {
+            var _a, _b, _c, _d, _e, _f;
+            return __awaiter$1(this, void 0, void 0, function () {
+                var idTokenEntity, claimsHash, accessTokenEntity, cacheRecord;
+                return __generator$1(this, function (_g) {
+                    switch (_g.label) {
+                        case 0:
+                            idTokenEntity = IdTokenEntity.createIdTokenEntity(((_a = result.account) === null || _a === void 0 ? void 0 : _a.homeAccountId) || "", ((_b = result.account) === null || _b === void 0 ? void 0 : _b.environment) || "", result.idToken, this.clientId, result.tenantId);
+                            if (!request.claims) return [3 /*break*/, 2];
+                            return [4 /*yield*/, this.cryptoImpl.hashString(request.claims)];
+                        case 1:
+                            claimsHash = _g.sent();
+                            _g.label = 2;
+                        case 2:
+                            accessTokenEntity = AccessTokenEntity.createAccessTokenEntity(((_c = result.account) === null || _c === void 0 ? void 0 : _c.homeAccountId) || "", ((_d = result.account) === null || _d === void 0 ? void 0 : _d.environment) || "", result.accessToken, this.clientId, result.tenantId, result.scopes.join(" "), ((_e = result.expiresOn) === null || _e === void 0 ? void 0 : _e.getTime()) || 0, ((_f = result.extExpiresOn) === null || _f === void 0 ? void 0 : _f.getTime()) || 0, this.cryptoImpl, undefined, // refreshOn
+                            result.tokenType, undefined, // userAssertionHash
+                            request.sshKid, request.claims, claimsHash);
+                            cacheRecord = new CacheRecord(undefined, idTokenEntity, accessTokenEntity);
+                            return [2 /*return*/, this.saveCacheRecord(cacheRecord)];
+                    }
+                });
+            });
+        };
         return BrowserCacheManager;
     }(CacheManager));
     var DEFAULT_BROWSER_CACHE_MANAGER = function (clientId, logger) {
@@ -10892,7 +10882,7 @@
 
     /* eslint-disable header/header */
     var name = "@azure/msal-browser";
-    var version = "2.38.4";
+    var version = "2.39.0";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -12393,7 +12383,7 @@
          */
         NativeInteractionClient.prototype.acquireTokensFromCache = function (nativeAccountId, request) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var account, silentRequest, result, e_2;
+                var account, silentRequest, result, fullAccount, e_2;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
                         case 0:
@@ -12412,7 +12402,8 @@
                             return [4 /*yield*/, this.silentCacheClient.acquireToken(silentRequest)];
                         case 2:
                             result = _a.sent();
-                            return [2 /*return*/, result];
+                            fullAccount = __assign$1(__assign$1({}, account), { idTokenClaims: result.idTokenClaims });
+                            return [2 /*return*/, __assign$1(__assign$1({}, result), { account: fullAccount })];
                         case 3:
                             e_2 = _a.sent();
                             throw e_2;
@@ -12535,7 +12526,7 @@
          */
         NativeInteractionClient.prototype.handleNativeResponse = function (response, request, reqTimestamp) {
             return __awaiter$1(this, void 0, void 0, function () {
-                var authority, authorityPreferredCache, idTokenObj, homeAccountIdentifier, accountEntity, result;
+                var authority, idTokenObj, homeAccountIdentifier, accountEntity, result;
                 return __generator$1(this, function (_a) {
                     switch (_a.label) {
                         case 0:
@@ -12547,16 +12538,20 @@
                             return [4 /*yield*/, this.getDiscoveredAuthority(request.authority)];
                         case 1:
                             authority = _a.sent();
-                            authorityPreferredCache = authority.getPreferredCache();
                             idTokenObj = this.createIdTokenObj(response);
                             homeAccountIdentifier = this.createHomeAccountIdentifier(response, idTokenObj);
-                            accountEntity = this.createAccountEntity(response, homeAccountIdentifier, idTokenObj, authorityPreferredCache);
+                            accountEntity = AccountEntity.createAccount({
+                                homeAccountId: homeAccountIdentifier,
+                                idTokenClaims: idTokenObj.claims,
+                                clientInfo: response.client_info,
+                                nativeAccountId: response.account.id,
+                            }, authority);
                             return [4 /*yield*/, this.generateAuthenticationResult(response, request, idTokenObj, accountEntity, authority.canonicalAuthority, reqTimestamp)];
                         case 2:
                             result = _a.sent();
                             // cache accounts and tokens in the appropriate storage
                             this.cacheAccount(accountEntity);
-                            this.cacheNativeTokens(response, request, homeAccountIdentifier, accountEntity, idTokenObj, result.accessToken, result.tenantId, reqTimestamp);
+                            this.cacheNativeTokens(response, request, homeAccountIdentifier, idTokenObj, result.accessToken, result.tenantId, reqTimestamp);
                             return [2 /*return*/, result];
                     }
                 });
@@ -12578,20 +12573,9 @@
          */
         NativeInteractionClient.prototype.createHomeAccountIdentifier = function (response, idTokenObj) {
             // Save account in browser storage
-            var homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenObj);
+            var homeAccountIdentifier = AccountEntity.generateHomeAccountId(response.client_info || Constants.EMPTY_STRING, AuthorityType.Default, this.logger, this.browserCrypto, idTokenObj.claims);
             return homeAccountIdentifier;
         };
-        /**
-         * Creates account entity
-         * @param response
-         * @param homeAccountIdentifier
-         * @param idTokenObj
-         * @param authority
-         * @returns
-         */
-        NativeInteractionClient.prototype.createAccountEntity = function (response, homeAccountIdentifier, idTokenObj, authority) {
-            return AccountEntity.createAccount(response.client_info, homeAccountIdentifier, idTokenObj, undefined, undefined, undefined, authority, response.account.id);
-        };
         /**
          * Helper to generate scopes
          * @param response
@@ -12712,7 +12696,7 @@
          * @param tenantId
          * @param reqTimestamp
          */
-        NativeInteractionClient.prototype.cacheNativeTokens = function (response, request, homeAccountIdentifier, accountEntity, idTokenObj, responseAccessToken, tenantId, reqTimestamp) {
+        NativeInteractionClient.prototype.cacheNativeTokens = function (response, request, homeAccountIdentifier, idTokenObj, responseAccessToken, tenantId, reqTimestamp) {
             var cachedIdToken = IdTokenEntity.createIdTokenEntity(homeAccountIdentifier, request.authority, response.id_token || Constants.EMPTY_STRING, request.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);
             // cache accessToken in inmemory storage
             var expiresIn = (request.tokenType === exports.AuthenticationScheme.POP)
@@ -12725,7 +12709,7 @@
             var cachedAccessToken = AccessTokenEntity.createAccessTokenEntity(homeAccountIdentifier, request.authority, responseAccessToken, request.clientId, idTokenObj
                 ? idTokenObj.claims.tid || Constants.EMPTY_STRING
                 : tenantId, responseScopes.printScopes(), tokenExpirationSeconds, 0, this.browserCrypto);
-            var nativeCacheRecord = new CacheRecord(accountEntity, cachedIdToken, cachedAccessToken);
+            var nativeCacheRecord = new CacheRecord(undefined, cachedIdToken, cachedAccessToken);
             this.nativeStorageManager.saveCacheRecord(nativeCacheRecord);
         };
         NativeInteractionClient.prototype.addTelemetryFromNativeResponse = function (response) {
@@ -16404,8 +16388,9 @@
             var idToken = new AuthToken(response.id_token, this.cryptoObj);
             var cacheRecord;
             var authority;
+            var cacheRecordAccount;
             if (request.account) {
-                var cacheRecordAccount = this.loadAccount(idToken, request.account.environment, undefined, undefined, request.account.homeAccountId);
+                cacheRecordAccount = AccountEntity.createFromAccountInfo(request.account);
                 cacheRecord = new CacheRecord(cacheRecordAccount, this.loadIdToken(idToken, cacheRecordAccount.homeAccountId, request.account.environment, request.account.tenantId), this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, request.account.environment, request.account.tenantId, options), this.loadRefreshToken(request, response, cacheRecordAccount.homeAccountId, request.account.environment));
             }
             else if (request.authority) {
@@ -16421,12 +16406,12 @@
                 // "clientInfo" from options takes precedence over "clientInfo" in response
                 if (options.clientInfo) {
                     this.logger.trace("TokenCache - homeAccountId from options");
-                    var cacheRecordAccount = this.loadAccount(idToken, authority.hostnameAndPort, options.clientInfo, authority.authorityType);
+                    cacheRecordAccount = this.loadAccount(idToken, authority, options.clientInfo);
                     cacheRecord = new CacheRecord(cacheRecordAccount, this.loadIdToken(idToken, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant), this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant, options), this.loadRefreshToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort));
                 }
                 else if (response.client_info) {
                     this.logger.trace("TokenCache - homeAccountId from response");
-                    var cacheRecordAccount = this.loadAccount(idToken, authority.hostnameAndPort, response.client_info, authority.authorityType);
+                    cacheRecordAccount = this.loadAccount(idToken, authority, response.client_info);
                     cacheRecord = new CacheRecord(cacheRecordAccount, this.loadIdToken(idToken, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant), this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort, authority.tenant, options), this.loadRefreshToken(request, response, cacheRecordAccount.homeAccountId, authority.hostnameAndPort));
                 }
                 else {
@@ -16436,7 +16421,7 @@
             else {
                 throw BrowserAuthError.createUnableToLoadTokenError("Please provide a request with an account or a request with authority.");
             }
-            return this.generateAuthenticationResult(request, idToken, cacheRecord, authority);
+            return this.generateAuthenticationResult(request, idToken, cacheRecord, cacheRecordAccount, authority);
         };
         /**
          * Helper function to load account to msal-browser cache
@@ -16447,20 +16432,18 @@
          * @param requestHomeAccountId
          * @returns `AccountEntity`
          */
-        TokenCache.prototype.loadAccount = function (idToken, environment, clientInfo, authorityType, requestHomeAccountId) {
+        TokenCache.prototype.loadAccount = function (idToken, authority, clientInfo, requestHomeAccountId) {
             var homeAccountId;
             if (requestHomeAccountId) {
                 homeAccountId = requestHomeAccountId;
             }
-            else if (authorityType !== undefined && clientInfo) {
-                homeAccountId = AccountEntity.generateHomeAccountId(clientInfo, authorityType, this.logger, this.cryptoObj, idToken);
+            else if (authority.authorityType !== undefined && clientInfo) {
+                homeAccountId = AccountEntity.generateHomeAccountId(clientInfo, authority.authorityType, this.logger, this.cryptoObj, idToken.claims);
             }
             if (!homeAccountId) {
                 throw BrowserAuthError.createUnableToLoadTokenError("Unexpected missing homeAccountId");
             }
-            var accountEntity = clientInfo ?
-                AccountEntity.createAccount(clientInfo, homeAccountId, idToken, undefined, undefined, undefined, environment) :
-                AccountEntity.createGenericAccount(homeAccountId, idToken, undefined, undefined, undefined, environment);
+            var accountEntity = AccountEntity.createAccount({ homeAccountId: homeAccountId, idTokenClaims: idToken.claims, clientInfo: clientInfo, environment: authority.hostnameAndPort }, authority);
             if (this.isBrowserEnvironment) {
                 this.logger.verbose("TokenCache - loading account");
                 this.storage.setAccount(accountEntity);
@@ -16550,16 +16533,17 @@
          * @param request
          * @param idTokenObj
          * @param cacheRecord
+         * @param accountEntity
          * @param authority
          * @returns `AuthenticationResult`
          */
-        TokenCache.prototype.generateAuthenticationResult = function (request, idTokenObj, cacheRecord, authority) {
-            var _a, _b, _c;
+        TokenCache.prototype.generateAuthenticationResult = function (request, idTokenObj, cacheRecord, accountEntity, authority) {
+            var _a;
             var accessToken = Constants.EMPTY_STRING;
             var responseScopes = [];
             var expiresOn = null;
             var extExpiresOn;
-            if (cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.accessToken) {
+            if (cacheRecord.accessToken) {
                 accessToken = cacheRecord.accessToken.secret;
                 responseScopes = ScopeSet.fromString(cacheRecord.accessToken.target).asArray();
                 expiresOn = new Date(Number(cacheRecord.accessToken.expiresOn) * 1000);
@@ -16572,7 +16556,7 @@
                 uniqueId: uid,
                 tenantId: tid,
                 scopes: responseScopes,
-                account: (cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.account) ? cacheRecord.account.getAccountInfo() : null,
+                account: accountEntity ? accountEntity.getAccountInfo() : null,
                 idToken: idTokenObj ? idTokenObj.rawToken : Constants.EMPTY_STRING,
                 idTokenClaims: idTokenObj ? idTokenObj.claims : {},
                 accessToken: accessToken,
@@ -16584,8 +16568,8 @@
                 familyId: Constants.EMPTY_STRING,
                 tokenType: ((_a = cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.accessToken) === null || _a === void 0 ? void 0 : _a.tokenType) || Constants.EMPTY_STRING,
                 state: Constants.EMPTY_STRING,
-                cloudGraphHostName: ((_b = cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.account) === null || _b === void 0 ? void 0 : _b.cloudGraphHostName) || Constants.EMPTY_STRING,
-                msGraphHost: ((_c = cacheRecord === null || cacheRecord === void 0 ? void 0 : cacheRecord.account) === null || _c === void 0 ? void 0 : _c.msGraphHost) || Constants.EMPTY_STRING,
+                cloudGraphHostName: accountEntity.cloudGraphHostName || Constants.EMPTY_STRING,
+                msGraphHost: accountEntity.msGraphHost || Constants.EMPTY_STRING,
                 code: undefined,
                 fromNativeBroker: false
             };
@@ -17975,6 +17959,33 @@
                 });
             });
         };
+        /**
+         * Hydrates cache with the tokens and account in the AuthenticationResult object
+         * @param result
+         * @param request - The request object that was used to obtain the AuthenticationResult
+         * @returns
+         */
+        PublicClientApplication.prototype.hydrateCache = function (result, request) {
+            return __awaiter$1(this, void 0, void 0, function () {
+                var accountEntity;
+                return __generator$1(this, function (_a) {
+                    this.logger.verbose("hydrateCache called");
+                    if (result.account) {
+                        accountEntity = AccountEntity.createFromAccountInfo(result.account, result.cloudGraphHostName, result.msGraphHost);
+                        this.browserStorage.setAccount(accountEntity);
+                        if (result.fromNativeBroker) {
+                            this.logger.verbose("Response was from native broker, storing in-memory");
+                            // Tokens from native broker are stored in-memory
+                            return [2 /*return*/, this.nativeInternalStorage.hydrateCache(result, request)];
+                        }
+                        else {
+                            return [2 /*return*/, this.browserStorage.hydrateCache(result, request)];
+                        }
+                    }
+                    return [2 /*return*/];
+                });
+            });
+        };
         return PublicClientApplication;
     }(ClientApplication));
 
@@ -18072,7 +18083,10 @@
         },
         getConfiguration: function () {
             throw BrowserConfigurationAuthError.createStubPcaInstanceCalledError();
-        }
+        },
+        hydrateCache: function () {
+            return Promise.reject(BrowserConfigurationAuthError.createStubPcaInstanceCalledError());
+        },
     };
 
     /*
@@ -18232,5 +18246,5 @@
 
     Object.defineProperty(exports, '__esModule', { value: true });
 
-})));
+}));
 //# sourceMappingURL=msal-browser.js.map