@azure/msal-browser 3.0.0-alpha.2 → 3.0.0-beta.1

package/lib/msal-browser.cjs.js

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v3.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-browser v3.0.0-beta.1 2023-07-06 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -75,100 +75,95 @@ const OIDC_SCOPES = [...OIDC_DEFAULT_SCOPES, Constants.EMAIL_SCOPE];
 /**
  * Request header names
  */
-var HeaderNames;
-(function (HeaderNames) {
-    HeaderNames["CONTENT_TYPE"] = "Content-Type";
-    HeaderNames["RETRY_AFTER"] = "Retry-After";
-    HeaderNames["CCS_HEADER"] = "X-AnchorMailbox";
-    HeaderNames["WWWAuthenticate"] = "WWW-Authenticate";
-    HeaderNames["AuthenticationInfo"] = "Authentication-Info";
-    HeaderNames["X_MS_REQUEST_ID"] = "x-ms-request-id";
-    HeaderNames["X_MS_HTTP_VERSION"] = "x-ms-httpver";
-})(HeaderNames || (HeaderNames = {}));
+const HeaderNames = {
+    CONTENT_TYPE: "Content-Type",
+    RETRY_AFTER: "Retry-After",
+    CCS_HEADER: "X-AnchorMailbox",
+    WWWAuthenticate: "WWW-Authenticate",
+    AuthenticationInfo: "Authentication-Info",
+    X_MS_REQUEST_ID: "x-ms-request-id",
+    X_MS_HTTP_VERSION: "x-ms-httpver",
+};
 /**
  * Persistent cache keys MSAL which stay while user is logged in.
  */
-var PersistentCacheKeys;
-(function (PersistentCacheKeys) {
-    PersistentCacheKeys["ID_TOKEN"] = "idtoken";
-    PersistentCacheKeys["CLIENT_INFO"] = "client.info";
-    PersistentCacheKeys["ADAL_ID_TOKEN"] = "adal.idtoken";
-    PersistentCacheKeys["ERROR"] = "error";
-    PersistentCacheKeys["ERROR_DESC"] = "error.description";
-    PersistentCacheKeys["ACTIVE_ACCOUNT"] = "active-account";
-    PersistentCacheKeys["ACTIVE_ACCOUNT_FILTERS"] = "active-account-filters";
-})(PersistentCacheKeys || (PersistentCacheKeys = {}));
+const PersistentCacheKeys = {
+    ID_TOKEN: "idtoken",
+    CLIENT_INFO: "client.info",
+    ADAL_ID_TOKEN: "adal.idtoken",
+    ERROR: "error",
+    ERROR_DESC: "error.description",
+    ACTIVE_ACCOUNT: "active-account",
+    ACTIVE_ACCOUNT_FILTERS: "active-account-filters", // new cache entry for active_account for a more robust version for browser
+};
 /**
  * String constants related to AAD Authority
  */
-var AADAuthorityConstants;
-(function (AADAuthorityConstants) {
-    AADAuthorityConstants["COMMON"] = "common";
-    AADAuthorityConstants["ORGANIZATIONS"] = "organizations";
-    AADAuthorityConstants["CONSUMERS"] = "consumers";
-})(AADAuthorityConstants || (AADAuthorityConstants = {}));
+const AADAuthorityConstants = {
+    COMMON: "common",
+    ORGANIZATIONS: "organizations",
+    CONSUMERS: "consumers",
+};
 /**
  * Keys in the hashParams sent by AAD Server
  */
-var AADServerParamKeys;
-(function (AADServerParamKeys) {
-    AADServerParamKeys["CLIENT_ID"] = "client_id";
-    AADServerParamKeys["REDIRECT_URI"] = "redirect_uri";
-    AADServerParamKeys["RESPONSE_TYPE"] = "response_type";
-    AADServerParamKeys["RESPONSE_MODE"] = "response_mode";
-    AADServerParamKeys["GRANT_TYPE"] = "grant_type";
-    AADServerParamKeys["CLAIMS"] = "claims";
-    AADServerParamKeys["SCOPE"] = "scope";
-    AADServerParamKeys["ERROR"] = "error";
-    AADServerParamKeys["ERROR_DESCRIPTION"] = "error_description";
-    AADServerParamKeys["ACCESS_TOKEN"] = "access_token";
-    AADServerParamKeys["ID_TOKEN"] = "id_token";
-    AADServerParamKeys["REFRESH_TOKEN"] = "refresh_token";
-    AADServerParamKeys["EXPIRES_IN"] = "expires_in";
-    AADServerParamKeys["STATE"] = "state";
-    AADServerParamKeys["NONCE"] = "nonce";
-    AADServerParamKeys["PROMPT"] = "prompt";
-    AADServerParamKeys["SESSION_STATE"] = "session_state";
-    AADServerParamKeys["CLIENT_INFO"] = "client_info";
-    AADServerParamKeys["CODE"] = "code";
-    AADServerParamKeys["CODE_CHALLENGE"] = "code_challenge";
-    AADServerParamKeys["CODE_CHALLENGE_METHOD"] = "code_challenge_method";
-    AADServerParamKeys["CODE_VERIFIER"] = "code_verifier";
-    AADServerParamKeys["CLIENT_REQUEST_ID"] = "client-request-id";
-    AADServerParamKeys["X_CLIENT_SKU"] = "x-client-SKU";
-    AADServerParamKeys["X_CLIENT_VER"] = "x-client-VER";
-    AADServerParamKeys["X_CLIENT_OS"] = "x-client-OS";
-    AADServerParamKeys["X_CLIENT_CPU"] = "x-client-CPU";
-    AADServerParamKeys["X_CLIENT_CURR_TELEM"] = "x-client-current-telemetry";
-    AADServerParamKeys["X_CLIENT_LAST_TELEM"] = "x-client-last-telemetry";
-    AADServerParamKeys["X_MS_LIB_CAPABILITY"] = "x-ms-lib-capability";
-    AADServerParamKeys["X_APP_NAME"] = "x-app-name";
-    AADServerParamKeys["X_APP_VER"] = "x-app-ver";
-    AADServerParamKeys["POST_LOGOUT_URI"] = "post_logout_redirect_uri";
-    AADServerParamKeys["ID_TOKEN_HINT"] = "id_token_hint";
-    AADServerParamKeys["DEVICE_CODE"] = "device_code";
-    AADServerParamKeys["CLIENT_SECRET"] = "client_secret";
-    AADServerParamKeys["CLIENT_ASSERTION"] = "client_assertion";
-    AADServerParamKeys["CLIENT_ASSERTION_TYPE"] = "client_assertion_type";
-    AADServerParamKeys["TOKEN_TYPE"] = "token_type";
-    AADServerParamKeys["REQ_CNF"] = "req_cnf";
-    AADServerParamKeys["OBO_ASSERTION"] = "assertion";
-    AADServerParamKeys["REQUESTED_TOKEN_USE"] = "requested_token_use";
-    AADServerParamKeys["ON_BEHALF_OF"] = "on_behalf_of";
-    AADServerParamKeys["FOCI"] = "foci";
-    AADServerParamKeys["CCS_HEADER"] = "X-AnchorMailbox";
-    AADServerParamKeys["RETURN_SPA_CODE"] = "return_spa_code";
-    AADServerParamKeys["NATIVE_BROKER"] = "nativebroker";
-    AADServerParamKeys["LOGOUT_HINT"] = "logout_hint";
-})(AADServerParamKeys || (AADServerParamKeys = {}));
+const AADServerParamKeys = {
+    CLIENT_ID: "client_id",
+    REDIRECT_URI: "redirect_uri",
+    RESPONSE_TYPE: "response_type",
+    RESPONSE_MODE: "response_mode",
+    GRANT_TYPE: "grant_type",
+    CLAIMS: "claims",
+    SCOPE: "scope",
+    ERROR: "error",
+    ERROR_DESCRIPTION: "error_description",
+    ACCESS_TOKEN: "access_token",
+    ID_TOKEN: "id_token",
+    REFRESH_TOKEN: "refresh_token",
+    EXPIRES_IN: "expires_in",
+    STATE: "state",
+    NONCE: "nonce",
+    PROMPT: "prompt",
+    SESSION_STATE: "session_state",
+    CLIENT_INFO: "client_info",
+    CODE: "code",
+    CODE_CHALLENGE: "code_challenge",
+    CODE_CHALLENGE_METHOD: "code_challenge_method",
+    CODE_VERIFIER: "code_verifier",
+    CLIENT_REQUEST_ID: "client-request-id",
+    X_CLIENT_SKU: "x-client-SKU",
+    X_CLIENT_VER: "x-client-VER",
+    X_CLIENT_OS: "x-client-OS",
+    X_CLIENT_CPU: "x-client-CPU",
+    X_CLIENT_CURR_TELEM: "x-client-current-telemetry",
+    X_CLIENT_LAST_TELEM: "x-client-last-telemetry",
+    X_MS_LIB_CAPABILITY: "x-ms-lib-capability",
+    X_APP_NAME: "x-app-name",
+    X_APP_VER: "x-app-ver",
+    POST_LOGOUT_URI: "post_logout_redirect_uri",
+    ID_TOKEN_HINT: "id_token_hint",
+    DEVICE_CODE: "device_code",
+    CLIENT_SECRET: "client_secret",
+    CLIENT_ASSERTION: "client_assertion",
+    CLIENT_ASSERTION_TYPE: "client_assertion_type",
+    TOKEN_TYPE: "token_type",
+    REQ_CNF: "req_cnf",
+    OBO_ASSERTION: "assertion",
+    REQUESTED_TOKEN_USE: "requested_token_use",
+    ON_BEHALF_OF: "on_behalf_of",
+    FOCI: "foci",
+    CCS_HEADER: "X-AnchorMailbox",
+    RETURN_SPA_CODE: "return_spa_code",
+    NATIVE_BROKER: "nativebroker",
+    LOGOUT_HINT: "logout_hint",
+};
 /**
  * Claims request keys
  */
-var ClaimsRequestKeys;
-(function (ClaimsRequestKeys) {
-    ClaimsRequestKeys["ACCESS_TOKEN"] = "access_token";
-    ClaimsRequestKeys["XMS_CC"] = "xms_cc";
-})(ClaimsRequestKeys || (ClaimsRequestKeys = {}));
+const ClaimsRequestKeys = {
+    ACCESS_TOKEN: "access_token",
+    XMS_CC: "xms_cc",
+};
 /**
  * we considered making this "enum" in the request instead of string, however it looks like the allowed list of
  * prompt values kept changing over past couple of years. There are some undocumented prompt values for some
@@ -185,18 +180,17 @@ const PromptValue = {
 /**
  * SSO Types - generated to populate hints
  */
-var SSOTypes;
-(function (SSOTypes) {
-    SSOTypes["ACCOUNT"] = "account";
-    SSOTypes["SID"] = "sid";
-    SSOTypes["LOGIN_HINT"] = "login_hint";
-    SSOTypes["ID_TOKEN"] = "id_token";
-    SSOTypes["DOMAIN_HINT"] = "domain_hint";
-    SSOTypes["ORGANIZATIONS"] = "organizations";
-    SSOTypes["CONSUMERS"] = "consumers";
-    SSOTypes["ACCOUNT_ID"] = "accountIdentifier";
-    SSOTypes["HOMEACCOUNT_ID"] = "homeAccountIdentifier";
-})(SSOTypes || (SSOTypes = {}));
+const SSOTypes = {
+    ACCOUNT: "account",
+    SID: "sid",
+    LOGIN_HINT: "login_hint",
+    ID_TOKEN: "id_token",
+    DOMAIN_HINT: "domain_hint",
+    ORGANIZATIONS: "organizations",
+    CONSUMERS: "consumers",
+    ACCOUNT_ID: "accountIdentifier",
+    HOMEACCOUNT_ID: "homeAccountIdentifier",
+};
 /**
  * allowed values for codeVerifier
  */
@@ -207,68 +201,62 @@ const CodeChallengeMethodValues = {
 /**
  * allowed values for response_mode
  */
-var ResponseMode;
-(function (ResponseMode) {
-    ResponseMode["QUERY"] = "query";
-    ResponseMode["FRAGMENT"] = "fragment";
-    ResponseMode["FORM_POST"] = "form_post";
-})(ResponseMode || (ResponseMode = {}));
+const ResponseMode = {
+    QUERY: "query",
+    FRAGMENT: "fragment",
+    FORM_POST: "form_post",
+};
 /**
  * allowed grant_type
  */
-var GrantType;
-(function (GrantType) {
-    GrantType["IMPLICIT_GRANT"] = "implicit";
-    GrantType["AUTHORIZATION_CODE_GRANT"] = "authorization_code";
-    GrantType["CLIENT_CREDENTIALS_GRANT"] = "client_credentials";
-    GrantType["RESOURCE_OWNER_PASSWORD_GRANT"] = "password";
-    GrantType["REFRESH_TOKEN_GRANT"] = "refresh_token";
-    GrantType["DEVICE_CODE_GRANT"] = "device_code";
-    GrantType["JWT_BEARER"] = "urn:ietf:params:oauth:grant-type:jwt-bearer";
-})(GrantType || (GrantType = {}));
+const GrantType = {
+    IMPLICIT_GRANT: "implicit",
+    AUTHORIZATION_CODE_GRANT: "authorization_code",
+    CLIENT_CREDENTIALS_GRANT: "client_credentials",
+    RESOURCE_OWNER_PASSWORD_GRANT: "password",
+    REFRESH_TOKEN_GRANT: "refresh_token",
+    DEVICE_CODE_GRANT: "device_code",
+    JWT_BEARER: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+};
 /**
  * Account types in Cache
  */
-var CacheAccountType;
-(function (CacheAccountType) {
-    CacheAccountType["MSSTS_ACCOUNT_TYPE"] = "MSSTS";
-    CacheAccountType["ADFS_ACCOUNT_TYPE"] = "ADFS";
-    CacheAccountType["MSAV1_ACCOUNT_TYPE"] = "MSA";
-    CacheAccountType["GENERIC_ACCOUNT_TYPE"] = "Generic";
-})(CacheAccountType || (CacheAccountType = {}));
+const CacheAccountType = {
+    MSSTS_ACCOUNT_TYPE: "MSSTS",
+    ADFS_ACCOUNT_TYPE: "ADFS",
+    MSAV1_ACCOUNT_TYPE: "MSA",
+    GENERIC_ACCOUNT_TYPE: "Generic", // NTLM, Kerberos, FBA, Basic etc
+};
 /**
  * Separators used in cache
  */
-var Separators;
-(function (Separators) {
-    Separators["CACHE_KEY_SEPARATOR"] = "-";
-    Separators["CLIENT_INFO_SEPARATOR"] = ".";
-})(Separators || (Separators = {}));
+const Separators = {
+    CACHE_KEY_SEPARATOR: "-",
+    CLIENT_INFO_SEPARATOR: ".",
+};
 /**
  * Credential Type stored in the cache
  */
-var CredentialType;
-(function (CredentialType) {
-    CredentialType["ID_TOKEN"] = "IdToken";
-    CredentialType["ACCESS_TOKEN"] = "AccessToken";
-    CredentialType["ACCESS_TOKEN_WITH_AUTH_SCHEME"] = "AccessToken_With_AuthScheme";
-    CredentialType["REFRESH_TOKEN"] = "RefreshToken";
-})(CredentialType || (CredentialType = {}));
+const CredentialType = {
+    ID_TOKEN: "IdToken",
+    ACCESS_TOKEN: "AccessToken",
+    ACCESS_TOKEN_WITH_AUTH_SCHEME: "AccessToken_With_AuthScheme",
+    REFRESH_TOKEN: "RefreshToken",
+};
 /**
  * Combine all cache types
  */
-var CacheType;
-(function (CacheType) {
-    CacheType[CacheType["ADFS"] = 1001] = "ADFS";
-    CacheType[CacheType["MSA"] = 1002] = "MSA";
-    CacheType[CacheType["MSSTS"] = 1003] = "MSSTS";
-    CacheType[CacheType["GENERIC"] = 1004] = "GENERIC";
-    CacheType[CacheType["ACCESS_TOKEN"] = 2001] = "ACCESS_TOKEN";
-    CacheType[CacheType["REFRESH_TOKEN"] = 2002] = "REFRESH_TOKEN";
-    CacheType[CacheType["ID_TOKEN"] = 2003] = "ID_TOKEN";
-    CacheType[CacheType["APP_METADATA"] = 3001] = "APP_METADATA";
-    CacheType[CacheType["UNDEFINED"] = 9999] = "UNDEFINED";
-})(CacheType || (CacheType = {}));
+const CacheType = {
+    ADFS: 1001,
+    MSA: 1002,
+    MSSTS: 1003,
+    GENERIC: 1004,
+    ACCESS_TOKEN: 2001,
+    REFRESH_TOKEN: 2002,
+    ID_TOKEN: 2003,
+    APP_METADATA: 3001,
+    UNDEFINED: 9999,
+};
 /**
  * More Cache related constants
  */
@@ -279,13 +267,12 @@ const AUTHORITY_METADATA_CONSTANTS = {
     CACHE_KEY: "authority-metadata",
     REFRESH_TIME_SECONDS: 3600 * 24, // 24 Hours
 };
-var AuthorityMetadataSource;
-(function (AuthorityMetadataSource) {
-    AuthorityMetadataSource["CONFIG"] = "config";
-    AuthorityMetadataSource["CACHE"] = "cache";
-    AuthorityMetadataSource["NETWORK"] = "network";
-    AuthorityMetadataSource["HARDCODED_VALUES"] = "hardcoded_values";
-})(AuthorityMetadataSource || (AuthorityMetadataSource = {}));
+const AuthorityMetadataSource = {
+    CONFIG: "config",
+    CACHE: "cache",
+    NETWORK: "network",
+    HARDCODED_VALUES: "hardcoded_values",
+};
 const SERVER_TELEM_CONSTANTS = {
     SCHEMA_VERSION: 5,
     MAX_CUR_HEADER_BYTES: 80,
@@ -301,12 +288,11 @@ const SERVER_TELEM_CONSTANTS = {
 /**
  * Type of the authentication request
  */
-exports.AuthenticationScheme = void 0;
-(function (AuthenticationScheme) {
-    AuthenticationScheme["BEARER"] = "Bearer";
-    AuthenticationScheme["POP"] = "pop";
-    AuthenticationScheme["SSH"] = "ssh-cert";
-})(exports.AuthenticationScheme || (exports.AuthenticationScheme = {}));
+const AuthenticationScheme = {
+    BEARER: "Bearer",
+    POP: "pop",
+    SSH: "ssh-cert",
+};
 /**
  * Constants related to throttling
  */
@@ -327,56 +313,50 @@ const Errors = {
 /**
  * Password grant parameters
  */
-var PasswordGrantConstants;
-(function (PasswordGrantConstants) {
-    PasswordGrantConstants["username"] = "username";
-    PasswordGrantConstants["password"] = "password";
-})(PasswordGrantConstants || (PasswordGrantConstants = {}));
+const PasswordGrantConstants = {
+    username: "username",
+    password: "password",
+};
 /**
  * Response codes
  */
-var ResponseCodes;
-(function (ResponseCodes) {
-    ResponseCodes[ResponseCodes["httpSuccess"] = 200] = "httpSuccess";
-    ResponseCodes[ResponseCodes["httpBadRequest"] = 400] = "httpBadRequest";
-})(ResponseCodes || (ResponseCodes = {}));
+const ResponseCodes = {
+    httpSuccess: 200,
+    httpBadRequest: 400,
+};
 /**
  * Region Discovery Sources
  */
-var RegionDiscoverySources;
-(function (RegionDiscoverySources) {
-    RegionDiscoverySources["FAILED_AUTO_DETECTION"] = "1";
-    RegionDiscoverySources["INTERNAL_CACHE"] = "2";
-    RegionDiscoverySources["ENVIRONMENT_VARIABLE"] = "3";
-    RegionDiscoverySources["IMDS"] = "4";
-})(RegionDiscoverySources || (RegionDiscoverySources = {}));
+const RegionDiscoverySources = {
+    FAILED_AUTO_DETECTION: "1",
+    INTERNAL_CACHE: "2",
+    ENVIRONMENT_VARIABLE: "3",
+    IMDS: "4",
+};
 /**
  * Region Discovery Outcomes
  */
-var RegionDiscoveryOutcomes;
-(function (RegionDiscoveryOutcomes) {
-    RegionDiscoveryOutcomes["CONFIGURED_MATCHES_DETECTED"] = "1";
-    RegionDiscoveryOutcomes["CONFIGURED_NO_AUTO_DETECTION"] = "2";
-    RegionDiscoveryOutcomes["CONFIGURED_NOT_DETECTED"] = "3";
-    RegionDiscoveryOutcomes["AUTO_DETECTION_REQUESTED_SUCCESSFUL"] = "4";
-    RegionDiscoveryOutcomes["AUTO_DETECTION_REQUESTED_FAILED"] = "5";
-})(RegionDiscoveryOutcomes || (RegionDiscoveryOutcomes = {}));
-var CacheOutcome;
-(function (CacheOutcome) {
-    CacheOutcome["NO_CACHE_HIT"] = "0";
-    CacheOutcome["FORCE_REFRESH"] = "1";
-    CacheOutcome["NO_CACHED_ACCESS_TOKEN"] = "2";
-    CacheOutcome["CACHED_ACCESS_TOKEN_EXPIRED"] = "3";
-    CacheOutcome["REFRESH_CACHED_ACCESS_TOKEN"] = "4";
-})(CacheOutcome || (CacheOutcome = {}));
-var JsonTypes;
-(function (JsonTypes) {
-    JsonTypes["Jwt"] = "JWT";
-    JsonTypes["Jwk"] = "JWK";
-    JsonTypes["Pop"] = "pop";
-})(JsonTypes || (JsonTypes = {}));
+const RegionDiscoveryOutcomes = {
+    CONFIGURED_MATCHES_DETECTED: "1",
+    CONFIGURED_NO_AUTO_DETECTION: "2",
+    CONFIGURED_NOT_DETECTED: "3",
+    AUTO_DETECTION_REQUESTED_SUCCESSFUL: "4",
+    AUTO_DETECTION_REQUESTED_FAILED: "5",
+};
+const CacheOutcome = {
+    NO_CACHE_HIT: "0",
+    FORCE_REFRESH: "1",
+    NO_CACHED_ACCESS_TOKEN: "2",
+    CACHED_ACCESS_TOKEN_EXPIRED: "3",
+    REFRESH_CACHED_ACCESS_TOKEN: "4",
+};
+const JsonTypes = {
+    Jwt: "JWT",
+    Jwk: "JWK",
+    Pop: "pop",
+};
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -430,7 +410,7 @@ class AuthError extends Error {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -475,7 +455,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -997,7 +977,7 @@ class ClientAuthError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1124,7 +1104,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1324,33 +1304,32 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "14.0.0-alpha.2";
+const version$1 = "14.0.0-beta.1";
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-exports.AzureCloudInstance = void 0;
-(function (AzureCloudInstance) {
+const AzureCloudInstance = {
     // AzureCloudInstance is not specified.
-    AzureCloudInstance[AzureCloudInstance["None"] = 0] = "None";
+    None: "none",
     // Microsoft Azure public cloud
-    AzureCloudInstance["AzurePublic"] = "https://login.microsoftonline.com";
+    AzurePublic: "https://login.microsoftonline.com",
     // Microsoft PPE
-    AzureCloudInstance["AzurePpe"] = "https://login.windows-ppe.net";
+    AzurePpe: "https://login.windows-ppe.net",
     // Microsoft Chinese national cloud
-    AzureCloudInstance["AzureChina"] = "https://login.chinacloudapi.cn";
+    AzureChina: "https://login.chinacloudapi.cn",
     // Microsoft German national cloud ("Black Forest")
-    AzureCloudInstance["AzureGermany"] = "https://login.microsoftonline.de";
+    AzureGermany: "https://login.microsoftonline.de",
     // US Government cloud
-    AzureCloudInstance["AzureUsGovernment"] = "https://login.microsoftonline.us";
-})(exports.AzureCloudInstance || (exports.AzureCloudInstance = {}));
+    AzureUsGovernment: "https://login.microsoftonline.us",
+};
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1450,8 +1429,12 @@ const ClientConfigurationErrorMessage = {
     },
     invalidAuthenticationHeader: {
         code: "invalid_authentication_header",
-        desc: "Invalid authentication header provided",
+        desc: "Invalid authentication header provided"
     },
+    authorityMismatch: {
+        code: "authority_mismatch",
+        desc: "Authority mismatch error. Authority provided in login request or PublicClientApplication config does not match the environment of the provided account. Please use a matching account or make an interactive request to login to this authority."
+    }
 };
 /**
  * Error thrown when there is an error in configuration of the MSAL.js library.
@@ -1600,9 +1583,15 @@ class ClientConfigurationError extends ClientAuthError {
     static createInvalidAuthenticationHeaderError(invalidHeaderName, details) {
         return new ClientConfigurationError(ClientConfigurationErrorMessage.invalidAuthenticationHeader.code, `${ClientConfigurationErrorMessage.invalidAuthenticationHeader.desc}. Invalid header: ${invalidHeaderName}. Details: ${details}`);
     }
+    /**
+     * Create an error when the authority provided in request does not match authority provided in account or MSAL.js configuration.
+     */
+    static createAuthorityMismatchError() {
+        return new ClientConfigurationError(ClientConfigurationErrorMessage.authorityMismatch.code, ClientConfigurationErrorMessage.authorityMismatch.desc);
+    }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1802,7 +1791,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1842,7 +1831,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1850,15 +1839,14 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
 /**
  * Authority types supported by MSAL.
  */
-var AuthorityType;
-(function (AuthorityType) {
-    AuthorityType[AuthorityType["Default"] = 0] = "Default";
-    AuthorityType[AuthorityType["Adfs"] = 1] = "Adfs";
-    AuthorityType[AuthorityType["Dsts"] = 2] = "Dsts";
-    AuthorityType[AuthorityType["Ciam"] = 3] = "Ciam";
-})(AuthorityType || (AuthorityType = {}));
+const AuthorityType = {
+    Default: 0,
+    Adfs: 1,
+    Dsts: 2,
+    Ciam: 3
+};
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2109,7 +2097,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2160,7 +2148,7 @@ class AuthToken {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2442,7 +2430,7 @@ class CacheManager {
                 return false;
             }
             // KeyId (sshKid) in request must match cached SSH certificate keyId because SSH cert is bound to a specific key
-            if (filter.tokenType === exports.AuthenticationScheme.SSH) {
+            if (filter.tokenType === AuthenticationScheme.SSH) {
                 if (filter.keyId && !this.matchKeyId(entity, filter.keyId)) {
                     return false;
                 }
@@ -2570,7 +2558,7 @@ class CacheManager {
         // Remove Token Binding Key from key store for PoP Tokens Credentials
         if (credential.credentialType.toLowerCase() ===
             CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME.toLowerCase()) {
-            if (credential.tokenType === exports.AuthenticationScheme.POP) {
+            if (credential.tokenType === AuthenticationScheme.POP) {
                 const accessTokenWithAuthSchemeEntity = credential;
                 const kid = accessTokenWithAuthSchemeEntity.keyId;
                 if (kid) {
@@ -2722,14 +2710,14 @@ class CacheManager {
     getAccessToken(account, request, tokenKeys) {
         this.commonLogger.trace("CacheManager - getAccessToken called");
         const scopes = ScopeSet.createSearchScopes(request.scopes);
-        const authScheme = request.authenticationScheme || exports.AuthenticationScheme.BEARER;
+        const authScheme = request.authenticationScheme || AuthenticationScheme.BEARER;
         /*
          * Distinguish between Bearer and PoP/SSH token cache types
          * Cast to lowercase to handle "bearer" from ADFS
          */
         const credentialType = authScheme &&
             authScheme.toLowerCase() !==
-                exports.AuthenticationScheme.BEARER.toLowerCase()
+                AuthenticationScheme.BEARER.toLowerCase()
             ? CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME
             : CredentialType.ACCESS_TOKEN;
         const accessTokenFilter = {
@@ -3174,7 +3162,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3194,6 +3182,9 @@ const DEFAULT_LOGGER_IMPLEMENTATION = {
     logLevel: exports.LogLevel.Info,
     correlationId: Constants.EMPTY_STRING,
 };
+const DEFAULT_CACHE_OPTIONS = {
+    claimsBasedCachingEnabled: false,
+};
 const DEFAULT_NETWORK_IMPLEMENTATION = {
     async sendGetRequestAsync() {
         const notImplErr = "Network interface - sendGetRequestAsync() has not been implemented";
@@ -3215,7 +3206,7 @@ const DEFAULT_CLIENT_CREDENTIALS = {
     clientAssertion: undefined,
 };
 const DEFAULT_AZURE_CLOUD_OPTIONS = {
-    azureCloudInstance: exports.AzureCloudInstance.None,
+    azureCloudInstance: AzureCloudInstance.None,
     tenant: `${Constants.DEFAULT_COMMON_TENANT}`,
 };
 const DEFAULT_TELEMETRY_OPTIONS = {
@@ -3231,7 +3222,7 @@ const DEFAULT_TELEMETRY_OPTIONS = {
  *
  * @returns Configuration
  */
-function buildClientConfiguration({ authOptions: userAuthOptions, systemOptions: userSystemOptions, loggerOptions: userLoggerOption, storageInterface: storageImplementation, networkInterface: networkImplementation, cryptoInterface: cryptoImplementation, clientCredentials: clientCredentials, libraryInfo: libraryInfo, telemetry: telemetry, serverTelemetryManager: serverTelemetryManager, persistencePlugin: persistencePlugin, serializableCache: serializableCache, }) {
+function buildClientConfiguration({ authOptions: userAuthOptions, systemOptions: userSystemOptions, loggerOptions: userLoggerOption, cacheOptions: userCacheOptions, storageInterface: storageImplementation, networkInterface: networkImplementation, cryptoInterface: cryptoImplementation, clientCredentials: clientCredentials, libraryInfo: libraryInfo, telemetry: telemetry, serverTelemetryManager: serverTelemetryManager, persistencePlugin: persistencePlugin, serializableCache: serializableCache, }) {
     const loggerOptions = {
         ...DEFAULT_LOGGER_IMPLEMENTATION,
         ...userLoggerOption,
@@ -3240,6 +3231,7 @@ function buildClientConfiguration({ authOptions: userAuthOptions, systemOptions:
         authOptions: buildAuthOptions(userAuthOptions),
         systemOptions: { ...DEFAULT_SYSTEM_OPTIONS, ...userSystemOptions },
         loggerOptions: loggerOptions,
+        cacheOptions: { ...DEFAULT_CACHE_OPTIONS, ...userCacheOptions },
         storageInterface: storageImplementation ||
             new DefaultStorageClass(userAuthOptions.clientId, DEFAULT_CRYPTO_IMPLEMENTATION, new Logger(loggerOptions)),
         networkInterface: networkImplementation || DEFAULT_NETWORK_IMPLEMENTATION,
@@ -3265,7 +3257,7 @@ function buildAuthOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3282,7 +3274,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3379,7 +3371,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3415,18 +3407,17 @@ class NetworkManager {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-var CcsCredentialType;
-(function (CcsCredentialType) {
-    CcsCredentialType["HOME_ACCOUNT_ID"] = "home_account_id";
-    CcsCredentialType["UPN"] = "UPN";
-})(CcsCredentialType || (CcsCredentialType = {}));
+const CcsCredentialType = {
+    HOME_ACCOUNT_ID: "home_account_id",
+    UPN: "UPN",
+};
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3507,12 +3498,11 @@ class RequestValidator {
             }
         });
         // remove empty string parameters
-        return Object.fromEntries(Object.entries(eQParams).filter(([key, value]) => value !== "") // eslint-disable-line @typescript-eslint/no-unused-vars
-        );
+        return Object.fromEntries(Object.entries(eQParams).filter(kv => kv[1] !== ""));
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3844,7 +3834,7 @@ class RequestParameterBuilder {
      */
     addPopToken(cnfString) {
         if (!StringUtils.isEmpty(cnfString)) {
-            this.parameters.set(AADServerParamKeys.TOKEN_TYPE, exports.AuthenticationScheme.POP);
+            this.parameters.set(AADServerParamKeys.TOKEN_TYPE, AuthenticationScheme.POP);
             this.parameters.set(AADServerParamKeys.REQ_CNF, encodeURIComponent(cnfString));
         }
     }
@@ -3853,7 +3843,7 @@ class RequestParameterBuilder {
      */
     addSshJwk(sshJwkString) {
         if (!StringUtils.isEmpty(sshJwkString)) {
-            this.parameters.set(AADServerParamKeys.TOKEN_TYPE, exports.AuthenticationScheme.SSH);
+            this.parameters.set(AADServerParamKeys.TOKEN_TYPE, AuthenticationScheme.SSH);
             this.parameters.set(AADServerParamKeys.REQ_CNF, encodeURIComponent(sshJwkString));
         }
     }
@@ -3889,7 +3879,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3984,7 +3974,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4117,13 +4107,13 @@ class CredentialEntity {
          */
         return tokenType &&
             tokenType.toLowerCase() !==
-                exports.AuthenticationScheme.BEARER.toLowerCase()
+                AuthenticationScheme.BEARER.toLowerCase()
             ? tokenType.toLowerCase()
             : Constants.EMPTY_STRING;
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4182,7 +4172,7 @@ class IdTokenEntity extends CredentialEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4229,7 +4219,7 @@ class TimeUtils {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4293,7 +4283,7 @@ class AccessTokenEntity extends CredentialEntity {
         atEntity.target = scopes;
         atEntity.userAssertionHash = userAssertionHash;
         atEntity.tokenType = StringUtils.isEmpty(tokenType)
-            ? exports.AuthenticationScheme.BEARER
+            ? AuthenticationScheme.BEARER
             : tokenType;
         if (requestedClaims) {
             atEntity.requestedClaims = requestedClaims;
@@ -4304,11 +4294,11 @@ class AccessTokenEntity extends CredentialEntity {
          * Cast to lower to handle "bearer" from ADFS
          */
         if (atEntity.tokenType?.toLowerCase() !==
-            exports.AuthenticationScheme.BEARER.toLowerCase()) {
+            AuthenticationScheme.BEARER.toLowerCase()) {
             atEntity.credentialType =
                 CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME;
             switch (atEntity.tokenType) {
-                case exports.AuthenticationScheme.POP:
+                case AuthenticationScheme.POP:
                     // Make sure keyId is present and add it to credential
                     const tokenClaims = AuthToken.extractTokenClaims(accessToken, cryptoUtils);
                     if (!tokenClaims?.cnf?.kid) {
@@ -4316,7 +4306,7 @@ class AccessTokenEntity extends CredentialEntity {
                     }
                     atEntity.keyId = tokenClaims.cnf.kid;
                     break;
-                case exports.AuthenticationScheme.SSH:
+                case AuthenticationScheme.SSH:
                     atEntity.keyId = keyId;
             }
         }
@@ -4343,7 +4333,7 @@ class AccessTokenEntity extends CredentialEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4405,7 +4395,7 @@ class RefreshTokenEntity extends CredentialEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4486,12 +4476,12 @@ class InteractionRequiredAuthError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-class CacheRecord {
+let CacheRecord$1 = class CacheRecord {
     constructor(accountEntity, idTokenEntity, accessTokenEntity, refreshTokenEntity, appMetadataEntity) {
         this.account = accountEntity || null;
         this.idToken = idTokenEntity || null;
@@ -4499,9 +4489,9 @@ class CacheRecord {
         this.refreshToken = refreshTokenEntity || null;
         this.appMetadata = appMetadataEntity || null;
     }
-}
+};
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4575,7 +4565,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4820,7 +4810,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4831,212 +4821,210 @@ class UrlString {
  * @export
  * @enum {number}
  */
-exports.PerformanceEvents = void 0;
-(function (PerformanceEvents) {
+const PerformanceEvents = {
     /**
      * acquireTokenByCode API (msal-browser and msal-node).
      * Used to acquire tokens by trading an authorization code against the token endpoint.
      */
-    PerformanceEvents["AcquireTokenByCode"] = "acquireTokenByCode";
+    AcquireTokenByCode: "acquireTokenByCode",
     /**
      * acquireTokenByRefreshToken API (msal-browser and msal-node).
      * Used to renew an access token using a refresh token against the token endpoint.
      */
-    PerformanceEvents["AcquireTokenByRefreshToken"] = "acquireTokenByRefreshToken";
+    AcquireTokenByRefreshToken: "acquireTokenByRefreshToken",
     /**
      * acquireTokenSilent API (msal-browser and msal-node).
      * Used to silently acquire a new access token (from the cache or the network).
      */
-    PerformanceEvents["AcquireTokenSilent"] = "acquireTokenSilent";
+    AcquireTokenSilent: "acquireTokenSilent",
     /**
      * acquireTokenSilentAsync (msal-browser).
      * Internal API for acquireTokenSilent.
      */
-    PerformanceEvents["AcquireTokenSilentAsync"] = "acquireTokenSilentAsync";
+    AcquireTokenSilentAsync: "acquireTokenSilentAsync",
     /**
      * acquireTokenPopup (msal-browser).
      * Used to acquire a new access token interactively through pop ups
      */
-    PerformanceEvents["AcquireTokenPopup"] = "acquireTokenPopup";
+    AcquireTokenPopup: "acquireTokenPopup",
     /**
      * getPublicKeyThumbprint API in CryptoOpts class (msal-browser).
      * Used to generate a public/private keypair and generate a public key thumbprint for pop requests.
      */
-    PerformanceEvents["CryptoOptsGetPublicKeyThumbprint"] = "cryptoOptsGetPublicKeyThumbprint";
+    CryptoOptsGetPublicKeyThumbprint: "cryptoOptsGetPublicKeyThumbprint",
     /**
      * signJwt API in CryptoOpts class (msal-browser).
      * Used to signed a pop token.
      */
-    PerformanceEvents["CryptoOptsSignJwt"] = "cryptoOptsSignJwt";
+    CryptoOptsSignJwt: "cryptoOptsSignJwt",
     /**
      * acquireToken API in the SilentCacheClient class (msal-browser).
      * Used to read access tokens from the cache.
      */
-    PerformanceEvents["SilentCacheClientAcquireToken"] = "silentCacheClientAcquireToken";
+    SilentCacheClientAcquireToken: "silentCacheClientAcquireToken",
     /**
      * acquireToken API in the SilentIframeClient class (msal-browser).
      * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.
      */
-    PerformanceEvents["SilentIframeClientAcquireToken"] = "silentIframeClientAcquireToken";
+    SilentIframeClientAcquireToken: "silentIframeClientAcquireToken",
     /**
      * acquireToken API in SilentRereshClient (msal-browser).
      * Used to acquire a new set of tokens from the token endpoint using a refresh token.
      */
-    PerformanceEvents["SilentRefreshClientAcquireToken"] = "silentRefreshClientAcquireToken";
+    SilentRefreshClientAcquireToken: "silentRefreshClientAcquireToken",
     /**
      * ssoSilent API (msal-browser).
      * Used to silently acquire an authorization code and set of tokens using a hidden iframe.
      */
-    PerformanceEvents["SsoSilent"] = "ssoSilent";
+    SsoSilent: "ssoSilent",
     /**
      * getDiscoveredAuthority API in StandardInteractionClient class (msal-browser).
      * Used to load authority metadata for a request.
      */
-    PerformanceEvents["StandardInteractionClientGetDiscoveredAuthority"] = "standardInteractionClientGetDiscoveredAuthority";
+    StandardInteractionClientGetDiscoveredAuthority: "standardInteractionClientGetDiscoveredAuthority",
     /**
      * acquireToken APIs in msal-browser.
      * Used to make an /authorize endpoint call with native brokering enabled.
      */
-    PerformanceEvents["FetchAccountIdWithNativeBroker"] = "fetchAccountIdWithNativeBroker";
+    FetchAccountIdWithNativeBroker: "fetchAccountIdWithNativeBroker",
     /**
      * acquireToken API in NativeInteractionClient class (msal-browser).
      * Used to acquire a token from Native component when native brokering is enabled.
      */
-    PerformanceEvents["NativeInteractionClientAcquireToken"] = "nativeInteractionClientAcquireToken";
+    NativeInteractionClientAcquireToken: "nativeInteractionClientAcquireToken",
     /**
      * Time spent creating default headers for requests to token endpoint
      */
-    PerformanceEvents["BaseClientCreateTokenRequestHeaders"] = "baseClientCreateTokenRequestHeaders";
+    BaseClientCreateTokenRequestHeaders: "baseClientCreateTokenRequestHeaders",
     /**
      * Used to measure the time taken for completing embedded-broker handshake (PW-Broker).
      */
-    PerformanceEvents["BrokerHandhshake"] = "brokerHandshake";
+    BrokerHandhshake: "brokerHandshake",
     /**
      * acquireTokenByRefreshToken API in BrokerClientApplication (PW-Broker) .
      */
-    PerformanceEvents["AcquireTokenByRefreshTokenInBroker"] = "acquireTokenByRefreshTokenInBroker";
+    AcquireTokenByRefreshTokenInBroker: "acquireTokenByRefreshTokenInBroker",
     /**
      * Time taken for token acquisition by broker
      */
-    PerformanceEvents["AcquireTokenByBroker"] = "acquireTokenByBroker";
+    AcquireTokenByBroker: "acquireTokenByBroker",
     /**
      * Time spent on the network for refresh token acquisition
      */
-    PerformanceEvents["RefreshTokenClientExecuteTokenRequest"] = "refreshTokenClientExecuteTokenRequest";
+    RefreshTokenClientExecuteTokenRequest: "refreshTokenClientExecuteTokenRequest",
     /**
      * Time taken for acquiring refresh token , records RT size
      */
-    PerformanceEvents["RefreshTokenClientAcquireToken"] = "refreshTokenClientAcquireToken";
+    RefreshTokenClientAcquireToken: "refreshTokenClientAcquireToken",
     /**
      * Time taken for acquiring cached refresh token
      */
-    PerformanceEvents["RefreshTokenClientAcquireTokenWithCachedRefreshToken"] = "refreshTokenClientAcquireTokenWithCachedRefreshToken";
+    RefreshTokenClientAcquireTokenWithCachedRefreshToken: "refreshTokenClientAcquireTokenWithCachedRefreshToken",
     /**
      * acquireTokenByRefreshToken API in RefreshTokenClient (msal-common).
      */
-    PerformanceEvents["RefreshTokenClientAcquireTokenByRefreshToken"] = "refreshTokenClientAcquireTokenByRefreshToken";
+    RefreshTokenClientAcquireTokenByRefreshToken: "refreshTokenClientAcquireTokenByRefreshToken",
     /**
      * Helper function to create token request body in RefreshTokenClient (msal-common).
      */
-    PerformanceEvents["RefreshTokenClientCreateTokenRequestBody"] = "refreshTokenClientCreateTokenRequestBody";
+    RefreshTokenClientCreateTokenRequestBody: "refreshTokenClientCreateTokenRequestBody",
     /**
      * acquireTokenFromCache (msal-browser).
      * Internal API for acquiring token from cache
      */
-    PerformanceEvents["AcquireTokenFromCache"] = "acquireTokenFromCache";
+    AcquireTokenFromCache: "acquireTokenFromCache",
     /**
      * acquireTokenBySilentIframe (msal-browser).
      * Internal API for acquiring token by silent Iframe
      */
-    PerformanceEvents["AcquireTokenBySilentIframe"] = "acquireTokenBySilentIframe";
+    AcquireTokenBySilentIframe: "acquireTokenBySilentIframe",
     /**
      * Internal API for initializing base request in BaseInteractionClient (msal-browser)
      */
-    PerformanceEvents["InitializeBaseRequest"] = "initializeBaseRequest";
+    InitializeBaseRequest: "initializeBaseRequest",
     /**
      * Internal API for initializing silent request in SilentCacheClient (msal-browser)
      */
-    PerformanceEvents["InitializeSilentRequest"] = "initializeSilentRequest";
-    PerformanceEvents["InitializeClientApplication"] = "initializeClientApplication";
+    InitializeSilentRequest: "initializeSilentRequest",
+    InitializeClientApplication: "initializeClientApplication",
     /**
      * Helper function in SilentIframeClient class (msal-browser).
      */
-    PerformanceEvents["SilentIframeClientTokenHelper"] = "silentIframeClientTokenHelper";
+    SilentIframeClientTokenHelper: "silentIframeClientTokenHelper",
     /**
      * SilentHandler
      */
-    PerformanceEvents["SilentHandlerInitiateAuthRequest"] = "silentHandlerInitiateAuthRequest";
-    PerformanceEvents["SilentHandlerMonitorIframeForHash"] = "silentHandlerMonitorIframeForHash";
-    PerformanceEvents["SilentHandlerLoadFrame"] = "silentHandlerLoadFrame";
+    SilentHandlerInitiateAuthRequest: "silentHandlerInitiateAuthRequest",
+    SilentHandlerMonitorIframeForHash: "silentHandlerMonitorIframeForHash",
+    SilentHandlerLoadFrame: "silentHandlerLoadFrame",
     /**
      * Helper functions in StandardInteractionClient class (msal-browser)
      */
-    PerformanceEvents["StandardInteractionClientCreateAuthCodeClient"] = "standardInteractionClientCreateAuthCodeClient";
-    PerformanceEvents["StandardInteractionClientGetClientConfiguration"] = "standardInteractionClientGetClientConfiguration";
-    PerformanceEvents["StandardInteractionClientInitializeAuthorizationRequest"] = "standardInteractionClientInitializeAuthorizationRequest";
-    PerformanceEvents["StandardInteractionClientInitializeAuthorizationCodeRequest"] = "standardInteractionClientInitializeAuthorizationCodeRequest";
+    StandardInteractionClientCreateAuthCodeClient: "standardInteractionClientCreateAuthCodeClient",
+    StandardInteractionClientGetClientConfiguration: "standardInteractionClientGetClientConfiguration",
+    StandardInteractionClientInitializeAuthorizationRequest: "standardInteractionClientInitializeAuthorizationRequest",
+    StandardInteractionClientInitializeAuthorizationCodeRequest: "standardInteractionClientInitializeAuthorizationCodeRequest",
     /**
      * getAuthCodeUrl API (msal-browser and msal-node).
      */
-    PerformanceEvents["GetAuthCodeUrl"] = "getAuthCodeUrl";
+    GetAuthCodeUrl: "getAuthCodeUrl",
     /**
      * Functions from InteractionHandler (msal-browser)
      */
-    PerformanceEvents["HandleCodeResponseFromServer"] = "handleCodeResponseFromServer";
-    PerformanceEvents["HandleCodeResponseFromHash"] = "handleCodeResponseFromHash";
-    PerformanceEvents["UpdateTokenEndpointAuthority"] = "updateTokenEndpointAuthority";
+    HandleCodeResponseFromServer: "handleCodeResponseFromServer",
+    HandleCodeResponseFromHash: "handleCodeResponseFromHash",
+    UpdateTokenEndpointAuthority: "updateTokenEndpointAuthority",
     /**
      * APIs in Authorization Code Client (msal-common)
      */
-    PerformanceEvents["AuthClientAcquireToken"] = "authClientAcquireToken";
-    PerformanceEvents["AuthClientExecuteTokenRequest"] = "authClientExecuteTokenRequest";
-    PerformanceEvents["AuthClientCreateTokenRequestBody"] = "authClientCreateTokenRequestBody";
-    PerformanceEvents["AuthClientCreateQueryString"] = "authClientCreateQueryString";
+    AuthClientAcquireToken: "authClientAcquireToken",
+    AuthClientExecuteTokenRequest: "authClientExecuteTokenRequest",
+    AuthClientCreateTokenRequestBody: "authClientCreateTokenRequestBody",
+    AuthClientCreateQueryString: "authClientCreateQueryString",
     /**
      * Generate functions in PopTokenGenerator (msal-common)
      */
-    PerformanceEvents["PopTokenGenerateCnf"] = "popTokenGenerateCnf";
-    PerformanceEvents["PopTokenGenerateKid"] = "popTokenGenerateKid";
+    PopTokenGenerateCnf: "popTokenGenerateCnf",
+    PopTokenGenerateKid: "popTokenGenerateKid",
     /**
      * handleServerTokenResponse API in ResponseHandler (msal-common)
      */
-    PerformanceEvents["HandleServerTokenResponse"] = "handleServerTokenResponse";
+    HandleServerTokenResponse: "handleServerTokenResponse",
     /**
      * Authority functions
      */
-    PerformanceEvents["AuthorityFactoryCreateDiscoveredInstance"] = "authorityFactoryCreateDiscoveredInstance";
-    PerformanceEvents["AuthorityResolveEndpointsAsync"] = "authorityResolveEndpointsAsync";
-    PerformanceEvents["AuthorityGetCloudDiscoveryMetadataFromNetwork"] = "authorityGetCloudDiscoveryMetadataFromNetwork";
-    PerformanceEvents["AuthorityUpdateCloudDiscoveryMetadata"] = "authorityUpdateCloudDiscoveryMetadata";
-    PerformanceEvents["AuthorityGetEndpointMetadataFromNetwork"] = "authorityGetEndpointMetadataFromNetwork";
-    PerformanceEvents["AuthorityUpdateEndpointMetadata"] = "authorityUpdateEndpointMetadata";
-    PerformanceEvents["AuthorityUpdateMetadataWithRegionalInformation"] = "authorityUpdateMetadataWithRegionalInformation";
+    AuthorityFactoryCreateDiscoveredInstance: "authorityFactoryCreateDiscoveredInstance",
+    AuthorityResolveEndpointsAsync: "authorityResolveEndpointsAsync",
+    AuthorityGetCloudDiscoveryMetadataFromNetwork: "authorityGetCloudDiscoveryMetadataFromNetwork",
+    AuthorityUpdateCloudDiscoveryMetadata: "authorityUpdateCloudDiscoveryMetadata",
+    AuthorityGetEndpointMetadataFromNetwork: "authorityGetEndpointMetadataFromNetwork",
+    AuthorityUpdateEndpointMetadata: "authorityUpdateEndpointMetadata",
+    AuthorityUpdateMetadataWithRegionalInformation: "authorityUpdateMetadataWithRegionalInformation",
     /**
      * Region Discovery functions
      */
-    PerformanceEvents["RegionDiscoveryDetectRegion"] = "regionDiscoveryDetectRegion";
-    PerformanceEvents["RegionDiscoveryGetRegionFromIMDS"] = "regionDiscoveryGetRegionFromIMDS";
-    PerformanceEvents["RegionDiscoveryGetCurrentVersion"] = "regionDiscoveryGetCurrentVersion";
-    PerformanceEvents["AcquireTokenByCodeAsync"] = "acquireTokenByCodeAsync";
-    PerformanceEvents["GetEndpointMetadataFromNetwork"] = "getEndpointMetadataFromNetwork";
-    PerformanceEvents["GetCloudDiscoveryMetadataFromNetworkMeasurement"] = "getCloudDiscoveryMetadataFromNetworkMeasurement";
-    PerformanceEvents["HandleRedirectPromiseMeasurement"] = "handleRedirectPromiseMeasurement";
-    PerformanceEvents["UpdateCloudDiscoveryMetadataMeasurement"] = "updateCloudDiscoveryMetadataMeasurement";
-    PerformanceEvents["UsernamePasswordClientAcquireToken"] = "usernamePasswordClientAcquireToken";
-    PerformanceEvents["NativeMessageHandlerHandshake"] = "nativeMessageHandlerHandshake";
-})(exports.PerformanceEvents || (exports.PerformanceEvents = {}));
+    RegionDiscoveryDetectRegion: "regionDiscoveryDetectRegion",
+    RegionDiscoveryGetRegionFromIMDS: "regionDiscoveryGetRegionFromIMDS",
+    RegionDiscoveryGetCurrentVersion: "regionDiscoveryGetCurrentVersion",
+    AcquireTokenByCodeAsync: "acquireTokenByCodeAsync",
+    GetEndpointMetadataFromNetwork: "getEndpointMetadataFromNetwork",
+    GetCloudDiscoveryMetadataFromNetworkMeasurement: "getCloudDiscoveryMetadataFromNetworkMeasurement",
+    HandleRedirectPromiseMeasurement: "handleRedirectPromiseMeasurement",
+    UpdateCloudDiscoveryMetadataMeasurement: "updateCloudDiscoveryMetadataMeasurement",
+    UsernamePasswordClientAcquireToken: "usernamePasswordClientAcquireToken",
+    NativeMessageHandlerHandshake: "nativeMessageHandlerHandshake",
+};
 /**
  * State of the performance event.
  *
  * @export
  * @enum {number}
  */
-var PerformanceEventStatus;
-(function (PerformanceEventStatus) {
-    PerformanceEventStatus[PerformanceEventStatus["NotStarted"] = 0] = "NotStarted";
-    PerformanceEventStatus[PerformanceEventStatus["InProgress"] = 1] = "InProgress";
-    PerformanceEventStatus[PerformanceEventStatus["Completed"] = 2] = "Completed";
-})(PerformanceEventStatus || (PerformanceEventStatus = {}));
+const PerformanceEventStatus = {
+    NotStarted: 0,
+    InProgress: 1,
+    Completed: 2,
+};
 const IntFields = new Set([
     "accessTokenSize",
     "durationMs",
@@ -5049,17 +5037,16 @@ const IntFields = new Set([
     "status",
 ]);
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-var KeyLocation;
-(function (KeyLocation) {
-    KeyLocation["SW"] = "sw";
-    KeyLocation["UHW"] = "uhw";
-})(KeyLocation || (KeyLocation = {}));
+const KeyLocation = {
+    SW: "sw",
+    UHW: "uhw",
+};
 class PopTokenGenerator {
     constructor(cryptoUtils, performanceClient) {
         this.cryptoUtils = cryptoUtils;
@@ -5072,8 +5059,8 @@ class PopTokenGenerator {
      * @returns
      */
     async generateCnf(request) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.PopTokenGenerateKid, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.PopTokenGenerateKid, request.correlationId);
         const reqCnf = await this.generateKid(request);
         const reqCnfString = this.cryptoUtils.base64Encode(JSON.stringify(reqCnf));
         return {
@@ -5088,7 +5075,7 @@ class PopTokenGenerator {
      * @returns
      */
     async generateKid(request) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.PopTokenGenerateKid, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.PopTokenGenerateKid, request.correlationId);
         const kidThumbprint = await this.cryptoUtils.getPublicKeyThumbprint(request);
         return {
             kid: kidThumbprint,
@@ -5135,7 +5122,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5204,7 +5191,7 @@ class AppMetadataEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5231,7 +5218,7 @@ class AppMetadataEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5301,7 +5288,7 @@ class ResponseHandler {
      * @param authority
      */
     async handleServerTokenResponse(serverTokenResponse, authority, reqTimestamp, request, authCodePayload, userAssertionHash, handlingRefreshTokenResponse, forceCacheRefreshTokenResponse, serverRequestId) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.HandleServerTokenResponse, serverTokenResponse.correlation_id);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.HandleServerTokenResponse, serverTokenResponse.correlation_id);
         // create an idToken object (not entity)
         let idTokenObj;
         if (serverTokenResponse.id_token) {
@@ -5427,7 +5414,7 @@ class ResponseHandler {
         if (!StringUtils.isEmpty(serverTokenResponse.foci)) {
             cachedAppMetadata = AppMetadataEntity.createAppMetadataEntity(this.clientId, env, serverTokenResponse.foci);
         }
-        return new CacheRecord(cachedAccount, cachedIdToken, cachedAccessToken, cachedRefreshToken, cachedAppMetadata);
+        return new CacheRecord$1(cachedAccount, cachedIdToken, cachedAccessToken, cachedRefreshToken, cachedAppMetadata);
     }
     /**
      * Generate Account
@@ -5474,7 +5461,7 @@ class ResponseHandler {
         let extExpiresOn;
         let familyId = Constants.EMPTY_STRING;
         if (cacheRecord.accessToken) {
-            if (cacheRecord.accessToken.tokenType === exports.AuthenticationScheme.POP) {
+            if (cacheRecord.accessToken.tokenType === AuthenticationScheme.POP) {
                 const popTokenGenerator = new PopTokenGenerator(cryptoObj);
                 const { secret, keyId } = cacheRecord.accessToken;
                 if (!keyId) {
@@ -5534,7 +5521,7 @@ class ResponseHandler {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5560,8 +5547,8 @@ class AuthorizationCodeClient extends BaseClient {
      * @param request
      */
     async getAuthCodeUrl(request) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.GetAuthCodeUrl, request.correlationId);
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.AuthClientCreateQueryString, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.GetAuthCodeUrl, request.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.AuthClientCreateQueryString, request.correlationId);
         const queryString = await this.createAuthCodeUrlQueryString(request);
         return UrlString.appendQueryString(this.authority.authorizationEndpoint, queryString);
     }
@@ -5574,13 +5561,13 @@ class AuthorizationCodeClient extends BaseClient {
         if (!request || !request.code) {
             throw ClientAuthError.createTokenRequestCannotBeMadeError();
         }
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthClientAcquireToken, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthClientAcquireToken, request.correlationId);
         const atsMeasurement = this.performanceClient?.startMeasurement(
         // @ts-ignore
         "AuthCodeClientAcquireToken", request.correlationId);
         this.logger.info("in acquireToken call in auth-code client");
         const reqTimestamp = TimeUtils.nowSeconds();
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.AuthClientExecuteTokenRequest, request.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.AuthClientExecuteTokenRequest, request.correlationId);
         const response = await this.executeTokenRequest(this.authority, request);
         // Retrieve requestId from response headers
         const requestId = response.headers?.[HeaderNames.X_MS_REQUEST_ID];
@@ -5593,7 +5580,7 @@ class AuthorizationCodeClient extends BaseClient {
         const responseHandler = new ResponseHandler(this.config.authOptions.clientId, this.cacheManager, this.cryptoUtils, this.logger, this.config.serializableCache, this.config.persistencePlugin, this.performanceClient);
         // Validate response. This function throws a server error if an error is returned by the server.
         responseHandler.validateTokenResponse(response.body);
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.HandleServerTokenResponse, request.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.HandleServerTokenResponse, request.correlationId);
         return responseHandler
             .handleServerTokenResponse(response.body, this.authority, reqTimestamp, request, authCodePayload, undefined, undefined, undefined, requestId)
             .then((result) => {
@@ -5656,8 +5643,8 @@ class AuthorizationCodeClient extends BaseClient {
      * @param request
      */
     async executeTokenRequest(authority, request) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthClientExecuteTokenRequest, request.correlationId);
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthClientExecuteTokenRequest, request.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);
         const queryParametersString = this.createTokenQueryParameters(request);
         const endpoint = UrlString.appendQueryString(authority.tokenEndpoint, queryParametersString);
         const requestBody = await this.createTokenRequestBody(request);
@@ -5693,7 +5680,7 @@ class AuthorizationCodeClient extends BaseClient {
      * @param request
      */
     async createTokenRequestBody(request) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);
         const parameterBuilder = new RequestParameterBuilder();
         parameterBuilder.addClientId(this.config.authOptions.clientId);
         /*
@@ -5733,14 +5720,14 @@ class AuthorizationCodeClient extends BaseClient {
         }
         parameterBuilder.addGrantType(GrantType.AUTHORIZATION_CODE_GRANT);
         parameterBuilder.addClientInfo();
-        if (request.authenticationScheme === exports.AuthenticationScheme.POP) {
+        if (request.authenticationScheme === AuthenticationScheme.POP) {
             const popTokenGenerator = new PopTokenGenerator(this.cryptoUtils, this.performanceClient);
-            this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
+            this.performanceClient?.setPreQueueTime(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
             const reqCnfData = await popTokenGenerator.generateCnf(request);
             // SPA PoP requires full Base64Url encoded req_cnf string (unhashed)
             parameterBuilder.addPopToken(reqCnfData.reqCnfString);
         }
-        else if (request.authenticationScheme === exports.AuthenticationScheme.SSH) {
+        else if (request.authenticationScheme === AuthenticationScheme.SSH) {
             if (request.sshJwk) {
                 parameterBuilder.addSshJwk(request.sshJwk);
             }
@@ -5808,7 +5795,7 @@ class AuthorizationCodeClient extends BaseClient {
      * @param request
      */
     async createAuthCodeUrlQueryString(request) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthClientCreateQueryString, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthClientCreateQueryString, request.correlationId);
         const parameterBuilder = new RequestParameterBuilder();
         parameterBuilder.addClientId(this.config.authOptions.clientId);
         const requestScopes = [
@@ -5923,7 +5910,7 @@ class AuthorizationCodeClient extends BaseClient {
             // signal ests that this is a WAM call
             parameterBuilder.addNativeBroker();
             // pass the req_cnf for POP
-            if (request.authenticationScheme === exports.AuthenticationScheme.POP) {
+            if (request.authenticationScheme === AuthenticationScheme.POP) {
                 const popTokenGenerator = new PopTokenGenerator(this.cryptoUtils);
                 // to reduce the URL length, it is recommended to send the hash of the req_cnf instead of the whole string
                 const reqCnfData = await popTokenGenerator.generateCnf(request);
@@ -5970,7 +5957,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5984,11 +5971,11 @@ class RefreshTokenClient extends BaseClient {
         super(configuration, performanceClient);
     }
     async acquireToken(request) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
-        const atsMeasurement = this.performanceClient?.startMeasurement(exports.PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
+        const atsMeasurement = this.performanceClient?.startMeasurement(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
         this.logger.verbose("RefreshTokenClientAcquireToken called", request.correlationId);
         const reqTimestamp = TimeUtils.nowSeconds();
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
         const response = await this.executeTokenRequest(request, this.authority);
         const httpVerToken = response.headers?.[HeaderNames.X_MS_HTTP_VERSION];
         atsMeasurement?.addStaticFields({
@@ -6003,7 +5990,7 @@ class RefreshTokenClient extends BaseClient {
         const requestId = response.headers?.[HeaderNames.X_MS_REQUEST_ID];
         const responseHandler = new ResponseHandler(this.config.authOptions.clientId, this.cacheManager, this.cryptoUtils, this.logger, this.config.serializableCache, this.config.persistencePlugin);
         responseHandler.validateTokenResponse(response.body);
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.HandleServerTokenResponse, request.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.HandleServerTokenResponse, request.correlationId);
         return responseHandler
             .handleServerTokenResponse(response.body, this.authority, reqTimestamp, request, undefined, undefined, true, request.forceCache, requestId)
             .then((result) => {
@@ -6031,7 +6018,7 @@ class RefreshTokenClient extends BaseClient {
         if (!request) {
             throw ClientConfigurationError.createEmptyTokenRequestError();
         }
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, request.correlationId);
         // We currently do not support silent flow for account === null use cases; This will be revisited for confidential flow usecases
         if (!request.account) {
             throw ClientAuthError.createNoAccountInSilentRequestError();
@@ -6041,7 +6028,7 @@ class RefreshTokenClient extends BaseClient {
         // if the app is part of the family, retrive a Family refresh token if present and make a refreshTokenRequest
         if (isFOCI) {
             try {
-                this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
+                this.performanceClient?.setPreQueueTime(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
                 return this.acquireTokenWithCachedRefreshToken(request, true);
             }
             catch (e) {
@@ -6054,7 +6041,7 @@ class RefreshTokenClient extends BaseClient {
                     e.subError === Errors.CLIENT_MISMATCH_ERROR;
                 // if family Refresh Token (FRT) cache acquisition fails or if client_mismatch error is seen with FRT, reattempt with application Refresh Token (ART)
                 if (noFamilyRTInCache || clientMismatchErrorWithFamilyRT) {
-                    this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
+                    this.performanceClient?.setPreQueueTime(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
                     return this.acquireTokenWithCachedRefreshToken(request, false);
                     // throw in all other cases
                 }
@@ -6064,7 +6051,7 @@ class RefreshTokenClient extends BaseClient {
             }
         }
         // fall back to application refresh token acquisition
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
         return this.acquireTokenWithCachedRefreshToken(request, false);
     }
     /**
@@ -6072,9 +6059,9 @@ class RefreshTokenClient extends BaseClient {
      * @param request
      */
     async acquireTokenWithCachedRefreshToken(request, foci) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
         // fetches family RT or application RT based on FOCI value
-        const atsMeasurement = this.performanceClient?.startMeasurement(exports.PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
+        const atsMeasurement = this.performanceClient?.startMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
         this.logger.verbose("RefreshTokenClientAcquireTokenWithCachedRefreshToken called", request.correlationId);
         const refreshToken = this.cacheManager.getRefreshToken(request.account, foci);
         if (!refreshToken) {
@@ -6088,13 +6075,13 @@ class RefreshTokenClient extends BaseClient {
         const refreshTokenRequest = {
             ...request,
             refreshToken: refreshToken.secret,
-            authenticationScheme: request.authenticationScheme || exports.AuthenticationScheme.BEARER,
+            authenticationScheme: request.authenticationScheme || AuthenticationScheme.BEARER,
             ccsCredential: {
                 credential: request.account.homeAccountId,
                 type: CcsCredentialType.HOME_ACCOUNT_ID,
             },
         };
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
         return this.acquireToken(refreshTokenRequest);
     }
     /**
@@ -6103,9 +6090,9 @@ class RefreshTokenClient extends BaseClient {
      * @param authority
      */
     async executeTokenRequest(request, authority) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
-        const acquireTokenMeasurement = this.performanceClient?.startMeasurement(exports.PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.RefreshTokenClientCreateTokenRequestBody, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
+        const acquireTokenMeasurement = this.performanceClient?.startMeasurement(PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.RefreshTokenClientCreateTokenRequestBody, request.correlationId);
         const queryParametersString = this.createTokenQueryParameters(request);
         const endpoint = UrlString.appendQueryString(authority.tokenEndpoint, queryParametersString);
         const requestBody = await this.createTokenRequestBody(request);
@@ -6140,9 +6127,9 @@ class RefreshTokenClient extends BaseClient {
      * @param request
      */
     async createTokenRequestBody(request) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.RefreshTokenClientCreateTokenRequestBody, request.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.RefreshTokenClientCreateTokenRequestBody, request.correlationId);
         const correlationId = request.correlationId;
-        const acquireTokenMeasurement = this.performanceClient?.startMeasurement(exports.PerformanceEvents.BaseClientCreateTokenRequestHeaders, correlationId);
+        const acquireTokenMeasurement = this.performanceClient?.startMeasurement(PerformanceEvents.BaseClientCreateTokenRequestHeaders, correlationId);
         const parameterBuilder = new RequestParameterBuilder();
         parameterBuilder.addClientId(this.config.authOptions.clientId);
         parameterBuilder.addScopes(request.scopes);
@@ -6164,14 +6151,14 @@ class RefreshTokenClient extends BaseClient {
             parameterBuilder.addClientAssertion(clientAssertion.assertion);
             parameterBuilder.addClientAssertionType(clientAssertion.assertionType);
         }
-        if (request.authenticationScheme === exports.AuthenticationScheme.POP) {
+        if (request.authenticationScheme === AuthenticationScheme.POP) {
             const popTokenGenerator = new PopTokenGenerator(this.cryptoUtils, this.performanceClient);
-            this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
+            this.performanceClient?.setPreQueueTime(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
             const reqCnfData = await popTokenGenerator.generateCnf(request);
             // SPA PoP requires full Base64Url encoded req_cnf string (unhashed)
             parameterBuilder.addPopToken(reqCnfData.reqCnfString);
         }
-        else if (request.authenticationScheme === exports.AuthenticationScheme.SSH) {
+        else if (request.authenticationScheme === AuthenticationScheme.SSH) {
             if (request.sshJwk) {
                 parameterBuilder.addSshJwk(request.sshJwk);
             }
@@ -6212,7 +6199,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6257,6 +6244,12 @@ class SilentFlowClient extends BaseClient {
             this.logger.info("SilentFlowClient:acquireCachedToken - Skipping cache because forceRefresh is true.");
             throw ClientAuthError.createRefreshRequiredError();
         }
+        else if (!this.config.cacheOptions.claimsBasedCachingEnabled &&
+            !StringUtils.isEmptyObj(request.claims)) {
+            // Must refresh due to request parameters.
+            this.logger.info("SilentFlowClient:acquireCachedToken - Skipping cache because claims-based caching is disabled and claims were requested.");
+            throw ClientAuthError.createRefreshRequiredError();
+        }
         // We currently do not support silent flow for account === null use cases; This will be revisited for confidential flow usecases
         if (!request.account) {
             throw ClientAuthError.createNoAccountInSilentRequestError();
@@ -6309,7 +6302,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6321,7 +6314,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7199,7 +7192,7 @@ const rawMetdataJSON = {
 const EndpointMetadata = rawMetdataJSON.endpointMetadata;
 const InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7207,13 +7200,12 @@ const InstanceDiscoveryMetadata = rawMetdataJSON.instanceDiscoveryMetadata;
 /**
  * Protocol modes supported by MSAL.
  */
-exports.ProtocolMode = void 0;
-(function (ProtocolMode) {
-    ProtocolMode["AAD"] = "AAD";
-    ProtocolMode["OIDC"] = "OIDC";
-})(exports.ProtocolMode || (exports.ProtocolMode = {}));
+const ProtocolMode = {
+    AAD: "AAD",
+    OIDC: "OIDC",
+};
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7293,7 +7285,7 @@ class AuthorityMetadataEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7303,7 +7295,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7313,7 +7305,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7331,14 +7323,14 @@ class RegionDiscovery {
      * @returns Promise<string | null>
      */
     async detectRegion(environmentRegion, regionDiscoveryMetadata) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.RegionDiscoveryDetectRegion, this.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.RegionDiscoveryDetectRegion, this.correlationId);
         // Initialize auto detected region with the region from the envrionment
         let autodetectedRegionName = environmentRegion;
         // Check if a region was detected from the environment, if not, attempt to get the region from IMDS
         if (!autodetectedRegionName) {
             const options = RegionDiscovery.IMDS_OPTIONS;
             try {
-                this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);
+                this.performanceClient?.setPreQueueTime(PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);
                 const localIMDSVersionResponse = await this.getRegionFromIMDS(Constants.IMDS_VERSION, options);
                 if (localIMDSVersionResponse.status ===
                     ResponseCodes.httpSuccess) {
@@ -7349,14 +7341,14 @@ class RegionDiscovery {
                 // If the response using the local IMDS version failed, try to fetch the current version of IMDS and retry.
                 if (localIMDSVersionResponse.status ===
                     ResponseCodes.httpBadRequest) {
-                    this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.RegionDiscoveryGetCurrentVersion, this.correlationId);
+                    this.performanceClient?.setPreQueueTime(PerformanceEvents.RegionDiscoveryGetCurrentVersion, this.correlationId);
                     const currentIMDSVersion = await this.getCurrentVersion(options);
                     if (!currentIMDSVersion) {
                         regionDiscoveryMetadata.region_source =
                             RegionDiscoverySources.FAILED_AUTO_DETECTION;
                         return null;
                     }
-                    this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);
+                    this.performanceClient?.setPreQueueTime(PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);
                     const currentIMDSVersionResponse = await this.getRegionFromIMDS(currentIMDSVersion, options);
                     if (currentIMDSVersionResponse.status ===
                         ResponseCodes.httpSuccess) {
@@ -7391,7 +7383,7 @@ class RegionDiscovery {
      * @returns Promise<NetworkResponse<string>>
      */
     async getRegionFromIMDS(version, options) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, this.correlationId);
         return this.networkInterface.sendGetRequestAsync(`${Constants.IMDS_ENDPOINT}?api-version=${version}&format=text`, options, Constants.IMDS_TIMEOUT);
     }
     /**
@@ -7400,7 +7392,7 @@ class RegionDiscovery {
      * @returns Promise<string | null>
      */
     async getCurrentVersion(options) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.RegionDiscoveryGetCurrentVersion, this.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.RegionDiscoveryGetCurrentVersion, this.correlationId);
         try {
             const response = await this.networkInterface.sendGetRequestAsync(`${Constants.IMDS_ENDPOINT}?format=json`, options);
             // When IMDS endpoint is called without the api version query param, bad request response comes back with latest version.
@@ -7424,7 +7416,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7600,7 +7592,7 @@ class Authority {
         return authorityUri.PathSegments.length === 1
             && !Authority.reservedTenantDomains.has(authorityUri.PathSegments[0])
             && this.getAuthorityType(authorityUri) === AuthorityType.Default
-            && this.protocolMode === exports.ProtocolMode.AAD;
+            && this.protocolMode === ProtocolMode.AAD;
     }
     /**
      * Replaces tenant in url path with current tenant. Defaults to common.
@@ -7644,7 +7636,7 @@ class Authority {
      */
     get defaultOpenIdConfigurationEndpoint() {
         if (this.authorityType === AuthorityType.Adfs ||
-            this.protocolMode === exports.ProtocolMode.OIDC) {
+            this.protocolMode === ProtocolMode.OIDC) {
             return `${this.canonicalAuthority}.well-known/openid-configuration`;
         }
         return `${this.canonicalAuthority}v2.0/.well-known/openid-configuration`;
@@ -7660,16 +7652,16 @@ class Authority {
      * and the /authorize, /token and logout endpoints.
      */
     async resolveEndpointsAsync() {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthorityResolveEndpointsAsync, this.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityResolveEndpointsAsync, this.correlationId);
         let metadataEntity = this.cacheManager.getAuthorityMetadataByAlias(this.hostnameAndPort);
         if (!metadataEntity) {
             metadataEntity = new AuthorityMetadataEntity();
             metadataEntity.updateCanonicalAuthority(this.canonicalAuthority);
         }
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);
         const cloudDiscoverySource = await this.updateCloudDiscoveryMetadata(metadataEntity);
         this.canonicalAuthority = this.canonicalAuthority.replace(this.hostnameAndPort, metadataEntity.preferred_network);
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.AuthorityUpdateEndpointMetadata, this.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.AuthorityUpdateEndpointMetadata, this.correlationId);
         const endpointSource = await this.updateEndpointMetadata(metadataEntity);
         if (cloudDiscoverySource !== AuthorityMetadataSource.CACHE &&
             endpointSource !== AuthorityMetadataSource.CACHE) {
@@ -7686,7 +7678,7 @@ class Authority {
      * @param metadataEntity
      */
     async updateEndpointMetadata(metadataEntity) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthorityUpdateEndpointMetadata, this.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityUpdateEndpointMetadata, this.correlationId);
         let metadata = this.getEndpointMetadataFromConfig();
         if (metadata) {
             metadataEntity.updateEndpointMetadata(metadata, false);
@@ -7698,12 +7690,12 @@ class Authority {
             // No need to update
             return AuthorityMetadataSource.CACHE;
         }
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
         metadata = await this.getEndpointMetadataFromNetwork();
         if (metadata) {
             // If the user prefers to use an azure region replace the global endpoints with regional information.
             if (this.authorityOptions.azureRegionConfiguration?.azureRegion) {
-                this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
+                this.performanceClient?.setPreQueueTime(PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
                 metadata = await this.updateMetadataWithRegionalInformation(metadata);
             }
             metadataEntity.updateEndpointMetadata(metadata, true);
@@ -7714,7 +7706,7 @@ class Authority {
             !this.authorityOptions.skipAuthorityMetadataCache) {
             // If the user prefers to use an azure region replace the global endpoints with regional information.
             if (this.authorityOptions.azureRegionConfiguration?.azureRegion) {
-                this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
+                this.performanceClient?.setPreQueueTime(PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
                 harcodedMetadata =
                     await this.updateMetadataWithRegionalInformation(harcodedMetadata);
             }
@@ -7757,8 +7749,8 @@ class Authority {
      * @param hasHardcodedMetadata boolean
      */
     async getEndpointMetadataFromNetwork() {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
-        const perfEvent = this.performanceClient?.startMeasurement(exports.PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
+        const perfEvent = this.performanceClient?.startMeasurement(PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, this.correlationId);
         const options = {};
         /*
          * TODO: Add a timeout if the authority exists in our library's
@@ -7796,37 +7788,25 @@ class Authority {
     }
     /**
      * Update the retrieved metadata with regional information.
+     * User selected Azure region will be used if configured.
      */
     async updateMetadataWithRegionalInformation(metadata) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.RegionDiscoveryDetectRegion, this.correlationId);
-        const autodetectedRegionName = await this.regionDiscovery.detectRegion(this.authorityOptions.azureRegionConfiguration?.environmentRegion, this.regionDiscoveryMetadata);
-        const azureRegion = this.authorityOptions.azureRegionConfiguration?.azureRegion ===
-            Constants.AZURE_REGION_AUTO_DISCOVER_FLAG
-            ? autodetectedRegionName
-            : this.authorityOptions.azureRegionConfiguration?.azureRegion;
-        if (this.authorityOptions.azureRegionConfiguration?.azureRegion ===
-            Constants.AZURE_REGION_AUTO_DISCOVER_FLAG) {
-            this.regionDiscoveryMetadata.region_outcome = autodetectedRegionName
-                ? RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_SUCCESSFUL
-                : RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_FAILED;
-        }
-        else {
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, this.correlationId);
+        const userConfiguredAzureRegion = this.authorityOptions.azureRegionConfiguration?.azureRegion;
+        if (userConfiguredAzureRegion) {
+            if (userConfiguredAzureRegion !== Constants.AZURE_REGION_AUTO_DISCOVER_FLAG) {
+                this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.CONFIGURED_NO_AUTO_DETECTION;
+                this.regionDiscoveryMetadata.region_used = userConfiguredAzureRegion;
+                return Authority.replaceWithRegionalInformation(metadata, userConfiguredAzureRegion);
+            }
+            this.performanceClient?.setPreQueueTime(PerformanceEvents.RegionDiscoveryDetectRegion, this.correlationId);
+            const autodetectedRegionName = await this.regionDiscovery.detectRegion(this.authorityOptions.azureRegionConfiguration?.environmentRegion, this.regionDiscoveryMetadata);
             if (autodetectedRegionName) {
-                this.regionDiscoveryMetadata.region_outcome =
-                    this.authorityOptions.azureRegionConfiguration
-                        ?.azureRegion === autodetectedRegionName
-                        ? RegionDiscoveryOutcomes.CONFIGURED_MATCHES_DETECTED
-                        : RegionDiscoveryOutcomes.CONFIGURED_NOT_DETECTED;
+                this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_SUCCESSFUL;
+                this.regionDiscoveryMetadata.region_used = autodetectedRegionName;
+                return Authority.replaceWithRegionalInformation(metadata, autodetectedRegionName);
             }
-            else {
-                this.regionDiscoveryMetadata.region_outcome =
-                    RegionDiscoveryOutcomes.CONFIGURED_NO_AUTO_DETECTION;
-            }
-        }
-        if (azureRegion) {
-            this.regionDiscoveryMetadata.region_used = azureRegion;
-            return Authority.replaceWithRegionalInformation(metadata, azureRegion);
+            this.regionDiscoveryMetadata.region_outcome = RegionDiscoveryOutcomes.AUTO_DETECTION_REQUESTED_FAILED;
         }
         return metadata;
     }
@@ -7837,7 +7817,7 @@ class Authority {
      * @returns AuthorityMetadataSource
      */
     async updateCloudDiscoveryMetadata(metadataEntity) {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, this.correlationId);
         this.logger.verbose("Attempting to get cloud discovery metadata in the config");
         this.logger.verbosePii(`Known Authorities: ${this.authorityOptions.knownAuthorities ||
             Constants.NOT_APPLICABLE}`);
@@ -7864,7 +7844,7 @@ class Authority {
             this.logger.verbose("The metadata entity is expired.");
         }
         this.logger.verbose("Did not find cloud discovery metadata in the cache... Attempting to get cloud discovery metadata from the network.");
-        this.performanceClient?.setPreQueueTime(exports.PerformanceEvents.AuthorityGetCloudDiscoveryMetadataFromNetwork, this.correlationId);
+        this.performanceClient?.setPreQueueTime(PerformanceEvents.AuthorityGetCloudDiscoveryMetadataFromNetwork, this.correlationId);
         metadata = await this.getCloudDiscoveryMetadataFromNetwork();
         if (metadata) {
             this.logger.verbose("cloud discovery metadata was successfully returned from getCloudDiscoveryMetadataFromNetwork()");
@@ -7925,7 +7905,7 @@ class Authority {
      * @param hasHardcodedMetadata boolean
      */
     async getCloudDiscoveryMetadataFromNetwork() {
-        this.performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthorityGetCloudDiscoveryMetadataFromNetwork, this.correlationId);
+        this.performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityGetCloudDiscoveryMetadataFromNetwork, this.correlationId);
         const instanceDiscoveryEndpoint = `${Constants.AAD_INSTANCE_DISCOVERY_ENDPT}${this.canonicalAuthority}oauth2/v2.0/authorize`;
         const options = {};
         /*
@@ -8008,7 +7988,7 @@ class Authority {
     static generateAuthority(authorityString, azureCloudOptions) {
         let authorityAzureCloudInstance;
         if (azureCloudOptions &&
-            azureCloudOptions.azureCloudInstance !== exports.AzureCloudInstance.None) {
+            azureCloudOptions.azureCloudInstance !== AzureCloudInstance.None) {
             const tenant = azureCloudOptions.tenant
                 ? azureCloudOptions.tenant
                 : Constants.DEFAULT_COMMON_TENANT;
@@ -8142,7 +8122,7 @@ Authority.reservedTenantDomains = (new Set([
     AADAuthorityConstants.ORGANIZATIONS
 ]));
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8160,12 +8140,12 @@ class AuthorityFactory {
      * @param protocolMode
      */
     static async createDiscoveredInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
-        performanceClient?.addQueueMeasurement(exports.PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
+        performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
         const authorityUriFinal = Authority.transformCIAMAuthority(authorityUri);
         // Initialize authority and perform discovery endpoint check.
         const acquireTokenAuthority = AuthorityFactory.createInstance(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
         try {
-            performanceClient?.setPreQueueTime(exports.PerformanceEvents.AuthorityResolveEndpointsAsync, correlationId);
+            performanceClient?.setPreQueueTime(PerformanceEvents.AuthorityResolveEndpointsAsync, correlationId);
             await acquireTokenAuthority.resolveEndpointsAsync();
             return acquireTokenAuthority;
         }
@@ -8192,7 +8172,7 @@ class AuthorityFactory {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8222,7 +8202,7 @@ class ServerTelemetryEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8248,7 +8228,7 @@ class ThrottlingEntity {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8265,7 +8245,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8307,7 +8287,7 @@ class JoseHeaderError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8346,7 +8326,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8404,7 +8384,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8603,7 +8583,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9012,20 +8992,16 @@ class PerformanceClient {
     }
 }
 
-/*! @azure/msal-common v14.0.0-alpha.2 2023-05-17 */
+/*! @azure/msal-common v14.0.0-beta.1 2023-07-06 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
 class StubPerformanceMeasurement {
-    /* eslint-disable-next-line @typescript-eslint/no-empty-function */
-    startMeasurement() { }
-    /* eslint-disable-next-line @typescript-eslint/no-empty-function */
-    endMeasurement() { }
-    flushMeasurement() {
-        return null;
-    }
+    startMeasurement() { return; }
+    endMeasurement() { return; }
+    flushMeasurement() { return null; }
 }
 class StubPerformanceClient extends PerformanceClient {
     generateId() {
@@ -9034,21 +9010,11 @@ class StubPerformanceClient extends PerformanceClient {
     startPerformanceMeasurement() {
         return new StubPerformanceMeasurement();
     }
-    /* eslint-disable-next-line @typescript-eslint/no-unused-vars */
-    calculateQueuedTime(preQueueTime, currentTime) {
+    calculateQueuedTime() {
         return 0;
     }
-    addQueueMeasurement(eventName, // eslint-disable-line @typescript-eslint/no-unused-vars
-    correlationId, // eslint-disable-line @typescript-eslint/no-unused-vars
-    queueTime // eslint-disable-line @typescript-eslint/no-unused-vars
-    ) {
-        return;
-    }
-    setPreQueueTime(eventName, // eslint-disable-line @typescript-eslint/no-unused-vars
-    correlationId // eslint-disable-line @typescript-eslint/no-unused-vars
-    ) {
-        return;
-    }
+    addQueueMeasurement() { return; }
+    setPreQueueTime() { return; }
 }
 
 /*
@@ -9577,79 +9543,72 @@ const NativeConstants = {
     PREFERRED_EXTENSION_ID: "ppnbnpeolgkicgegkbkbjmhlideopiji",
     MATS_TELEMETRY: "MATS",
 };
-var NativeExtensionMethod;
-(function (NativeExtensionMethod) {
-    NativeExtensionMethod["HandshakeRequest"] = "Handshake";
-    NativeExtensionMethod["HandshakeResponse"] = "HandshakeResponse";
-    NativeExtensionMethod["GetToken"] = "GetToken";
-    NativeExtensionMethod["Response"] = "Response";
-})(NativeExtensionMethod || (NativeExtensionMethod = {}));
-exports.BrowserCacheLocation = void 0;
-(function (BrowserCacheLocation) {
-    BrowserCacheLocation["LocalStorage"] = "localStorage";
-    BrowserCacheLocation["SessionStorage"] = "sessionStorage";
-    BrowserCacheLocation["MemoryStorage"] = "memoryStorage";
-})(exports.BrowserCacheLocation || (exports.BrowserCacheLocation = {}));
+const NativeExtensionMethod = {
+    HandshakeRequest: "Handshake",
+    HandshakeResponse: "HandshakeResponse",
+    GetToken: "GetToken",
+    Response: "Response",
+};
+const BrowserCacheLocation = {
+    LocalStorage: "localStorage",
+    SessionStorage: "sessionStorage",
+    MemoryStorage: "memoryStorage",
+};
 /**
  * HTTP Request types supported by MSAL.
  */
-var HTTP_REQUEST_TYPE;
-(function (HTTP_REQUEST_TYPE) {
-    HTTP_REQUEST_TYPE["GET"] = "GET";
-    HTTP_REQUEST_TYPE["POST"] = "POST";
-})(HTTP_REQUEST_TYPE || (HTTP_REQUEST_TYPE = {}));
+const HTTP_REQUEST_TYPE = {
+    GET: "GET",
+    POST: "POST",
+};
 /**
  * Temporary cache keys for MSAL, deleted after any request.
  */
-var TemporaryCacheKeys;
-(function (TemporaryCacheKeys) {
-    TemporaryCacheKeys["AUTHORITY"] = "authority";
-    TemporaryCacheKeys["ACQUIRE_TOKEN_ACCOUNT"] = "acquireToken.account";
-    TemporaryCacheKeys["SESSION_STATE"] = "session.state";
-    TemporaryCacheKeys["REQUEST_STATE"] = "request.state";
-    TemporaryCacheKeys["NONCE_IDTOKEN"] = "nonce.id_token";
-    TemporaryCacheKeys["ORIGIN_URI"] = "request.origin";
-    TemporaryCacheKeys["RENEW_STATUS"] = "token.renew.status";
-    TemporaryCacheKeys["URL_HASH"] = "urlHash";
-    TemporaryCacheKeys["REQUEST_PARAMS"] = "request.params";
-    TemporaryCacheKeys["SCOPES"] = "scopes";
-    TemporaryCacheKeys["INTERACTION_STATUS_KEY"] = "interaction.status";
-    TemporaryCacheKeys["CCS_CREDENTIAL"] = "ccs.credential";
-    TemporaryCacheKeys["CORRELATION_ID"] = "request.correlationId";
-    TemporaryCacheKeys["NATIVE_REQUEST"] = "request.native";
-    TemporaryCacheKeys["REDIRECT_CONTEXT"] = "request.redirect.context";
-})(TemporaryCacheKeys || (TemporaryCacheKeys = {}));
-var StaticCacheKeys;
-(function (StaticCacheKeys) {
-    StaticCacheKeys["ACCOUNT_KEYS"] = "msal.account.keys";
-    StaticCacheKeys["TOKEN_KEYS"] = "msal.token.keys";
-})(StaticCacheKeys || (StaticCacheKeys = {}));
+const TemporaryCacheKeys = {
+    AUTHORITY: "authority",
+    ACQUIRE_TOKEN_ACCOUNT: "acquireToken.account",
+    SESSION_STATE: "session.state",
+    REQUEST_STATE: "request.state",
+    NONCE_IDTOKEN: "nonce.id_token",
+    ORIGIN_URI: "request.origin",
+    RENEW_STATUS: "token.renew.status",
+    URL_HASH: "urlHash",
+    REQUEST_PARAMS: "request.params",
+    SCOPES: "scopes",
+    INTERACTION_STATUS_KEY: "interaction.status",
+    CCS_CREDENTIAL: "ccs.credential",
+    CORRELATION_ID: "request.correlationId",
+    NATIVE_REQUEST: "request.native",
+    REDIRECT_CONTEXT: "request.redirect.context",
+};
+const StaticCacheKeys = {
+    ACCOUNT_KEYS: "msal.account.keys",
+    TOKEN_KEYS: "msal.token.keys",
+};
 /**
  * Cache keys stored in-memory
  */
-var InMemoryCacheKeys;
-(function (InMemoryCacheKeys) {
-    InMemoryCacheKeys["WRAPPER_SKU"] = "wrapper.sku";
-    InMemoryCacheKeys["WRAPPER_VER"] = "wrapper.version";
-})(InMemoryCacheKeys || (InMemoryCacheKeys = {}));
+const InMemoryCacheKeys = {
+    WRAPPER_SKU: "wrapper.sku",
+    WRAPPER_VER: "wrapper.version",
+};
 /**
  * API Codes for Telemetry purposes.
  * Before adding a new code you must claim it in the MSAL Telemetry tracker as these number spaces are shared across all MSALs
  * 0-99 Silent Flow
  * 800-899 Auth Code Flow
  */
-exports.ApiId = void 0;
-(function (ApiId) {
-    ApiId[ApiId["acquireTokenRedirect"] = 861] = "acquireTokenRedirect";
-    ApiId[ApiId["acquireTokenPopup"] = 862] = "acquireTokenPopup";
-    ApiId[ApiId["ssoSilent"] = 863] = "ssoSilent";
-    ApiId[ApiId["acquireTokenSilent_authCode"] = 864] = "acquireTokenSilent_authCode";
-    ApiId[ApiId["handleRedirectPromise"] = 865] = "handleRedirectPromise";
-    ApiId[ApiId["acquireTokenByCode"] = 866] = "acquireTokenByCode";
-    ApiId[ApiId["acquireTokenSilent_silentFlow"] = 61] = "acquireTokenSilent_silentFlow";
-    ApiId[ApiId["logout"] = 961] = "logout";
-    ApiId[ApiId["logoutPopup"] = 962] = "logoutPopup";
-})(exports.ApiId || (exports.ApiId = {}));
+const ApiId = {
+    acquireTokenRedirect: 861,
+    acquireTokenPopup: 862,
+    ssoSilent: 863,
+    acquireTokenSilent_authCode: 864,
+    handleRedirectPromise: 865,
+    acquireTokenByCode: 866,
+    acquireTokenSilent_silentFlow: 61,
+    logout: 961,
+    logoutPopup: 962,
+};
 /*
  * Interaction type of the API - used for state and telemetry
  */
@@ -9664,37 +9623,36 @@ exports.InteractionType = void 0;
  * Types of interaction currently in progress.
  * Used in events in wrapper libraries to invoke functions when certain interaction is in progress or all interactions are complete.
  */
-exports.InteractionStatus = void 0;
-(function (InteractionStatus) {
+const InteractionStatus = {
     /**
      * Initial status before interaction occurs
      */
-    InteractionStatus["Startup"] = "startup";
+    Startup: "startup",
     /**
      * Status set when all login calls occuring
      */
-    InteractionStatus["Login"] = "login";
+    Login: "login",
     /**
      * Status set when logout call occuring
      */
-    InteractionStatus["Logout"] = "logout";
+    Logout: "logout",
     /**
      * Status set for acquireToken calls
      */
-    InteractionStatus["AcquireToken"] = "acquireToken";
+    AcquireToken: "acquireToken",
     /**
      * Status set for ssoSilent calls
      */
-    InteractionStatus["SsoSilent"] = "ssoSilent";
+    SsoSilent: "ssoSilent",
     /**
      * Status set when handleRedirect in progress
      */
-    InteractionStatus["HandleRedirect"] = "handleRedirect";
+    HandleRedirect: "handleRedirect",
     /**
      * Status set when interaction is complete
      */
-    InteractionStatus["None"] = "none";
-})(exports.InteractionStatus || (exports.InteractionStatus = {}));
+    None: "none",
+};
 const DEFAULT_REQUEST = {
     scopes: OIDC_DEFAULT_SCOPES,
 };
@@ -9703,52 +9661,50 @@ const DEFAULT_REQUEST = {
  */
 const KEY_FORMAT_JWK = "jwk";
 // Supported wrapper SKUs
-exports.WrapperSKU = void 0;
-(function (WrapperSKU) {
-    WrapperSKU["React"] = "@azure/msal-react";
-    WrapperSKU["Angular"] = "@azure/msal-angular";
-})(exports.WrapperSKU || (exports.WrapperSKU = {}));
+const WrapperSKU = {
+    React: "@azure/msal-react",
+    Angular: "@azure/msal-angular",
+};
 // DatabaseStorage Constants
 const DB_NAME = "msal.db";
 const DB_VERSION = 1;
 const DB_TABLE_NAME = `${DB_NAME}.keys`;
-exports.CacheLookupPolicy = void 0;
-(function (CacheLookupPolicy) {
+const CacheLookupPolicy = {
     /*
      * acquireTokenSilent will attempt to retrieve an access token from the cache. If the access token is expired
      * or cannot be found the refresh token will be used to acquire a new one. Finally, if the refresh token
      * is expired acquireTokenSilent will attempt to acquire new access and refresh tokens.
      */
-    CacheLookupPolicy[CacheLookupPolicy["Default"] = 0] = "Default";
+    Default: 0,
     /*
      * acquireTokenSilent will only look for access tokens in the cache. It will not attempt to renew access or
      * refresh tokens.
      */
-    CacheLookupPolicy[CacheLookupPolicy["AccessToken"] = 1] = "AccessToken";
+    AccessToken: 1,
     /*
      * acquireTokenSilent will attempt to retrieve an access token from the cache. If the access token is expired or
      * cannot be found, the refresh token will be used to acquire a new one. If the refresh token is expired, it
      * will not be renewed and acquireTokenSilent will fail.
      */
-    CacheLookupPolicy[CacheLookupPolicy["AccessTokenAndRefreshToken"] = 2] = "AccessTokenAndRefreshToken";
+    AccessTokenAndRefreshToken: 2,
     /*
      * acquireTokenSilent will not attempt to retrieve access tokens from the cache and will instead attempt to
      * exchange the cached refresh token for a new access token. If the refresh token is expired, it will not be
      * renewed and acquireTokenSilent will fail.
      */
-    CacheLookupPolicy[CacheLookupPolicy["RefreshToken"] = 3] = "RefreshToken";
+    RefreshToken: 3,
     /*
      * acquireTokenSilent will not look in the cache for the access token. It will go directly to network with the
      * cached refresh token. If the refresh token is expired an attempt will be made to renew it. This is equivalent to
      * setting "forceRefresh: true".
      */
-    CacheLookupPolicy[CacheLookupPolicy["RefreshTokenAndNetwork"] = 4] = "RefreshTokenAndNetwork";
+    RefreshTokenAndNetwork: 4,
     /*
      * acquireTokenSilent will attempt to renew both access and refresh tokens. It will not look in the cache. This will
      * always fail if 3rd party cookies are blocked by the browser.
      */
-    CacheLookupPolicy[CacheLookupPolicy["Skip"] = 5] = "Skip";
-})(exports.CacheLookupPolicy || (exports.CacheLookupPolicy = {}));
+    Skip: 5,
+};
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9857,8 +9813,8 @@ class BrowserStorage {
         this.windowStorage = window[cacheLocation];
     }
     validateWindowStorage(cacheLocation) {
-        if (cacheLocation !== exports.BrowserCacheLocation.LocalStorage &&
-            cacheLocation !== exports.BrowserCacheLocation.SessionStorage) {
+        if (cacheLocation !== BrowserCacheLocation.LocalStorage &&
+            cacheLocation !== BrowserCacheLocation.SessionStorage) {
             throw BrowserConfigurationAuthError.createStorageNotSupportedError(cacheLocation);
         }
         const storageSupported = !!window[cacheLocation];
@@ -9981,8 +9937,8 @@ class BrowserCacheManager extends CacheManager {
      */
     setupBrowserStorage(cacheLocation) {
         switch (cacheLocation) {
-            case exports.BrowserCacheLocation.LocalStorage:
-            case exports.BrowserCacheLocation.SessionStorage:
+            case BrowserCacheLocation.LocalStorage:
+            case BrowserCacheLocation.SessionStorage:
                 try {
                     return new BrowserStorage(cacheLocation);
                 }
@@ -9990,9 +9946,9 @@ class BrowserCacheManager extends CacheManager {
                     this.logger.verbose(e);
                     break;
                 }
-            case exports.BrowserCacheLocation.MemoryStorage:
+            case BrowserCacheLocation.MemoryStorage:
         }
-        this.cacheConfig.cacheLocation = exports.BrowserCacheLocation.MemoryStorage;
+        this.cacheConfig.cacheLocation = BrowserCacheLocation.MemoryStorage;
         return new MemoryStorage();
     }
     /**
@@ -10002,18 +9958,18 @@ class BrowserCacheManager extends CacheManager {
      */
     setupTemporaryCacheStorage(temporaryCacheLocation, cacheLocation) {
         switch (cacheLocation) {
-            case exports.BrowserCacheLocation.LocalStorage:
-            case exports.BrowserCacheLocation.SessionStorage:
+            case BrowserCacheLocation.LocalStorage:
+            case BrowserCacheLocation.SessionStorage:
                 try {
                     // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
                     return new BrowserStorage(temporaryCacheLocation ||
-                        exports.BrowserCacheLocation.SessionStorage);
+                        BrowserCacheLocation.SessionStorage);
                 }
                 catch (e) {
                     this.logger.verbose(e);
                     return this.internalStorage;
                 }
-            case exports.BrowserCacheLocation.MemoryStorage:
+            case BrowserCacheLocation.MemoryStorage:
             default:
                 return this.internalStorage;
         }
@@ -10197,8 +10153,7 @@ class BrowserCacheManager extends CacheManager {
     }
     /**
      * set account entity in the platform cache
-     * @param key
-     * @param value
+     * @param account
      */
     setAccount(account) {
         this.logger.trace("BrowserCacheManager.setAccount called");
@@ -10759,7 +10714,7 @@ class BrowserCacheManager extends CacheManager {
         if (!value) {
             // If temp cache item not found in session/memory, check local storage for items set by old versions
             if (this.cacheConfig.cacheLocation ===
-                exports.BrowserCacheLocation.LocalStorage) {
+                BrowserCacheLocation.LocalStorage) {
                 const item = this.browserStorage.getItem(key);
                 if (item) {
                     this.logger.trace("BrowserCacheManager.getTemporaryCache: Temporary cache item found in local storage");
@@ -11219,18 +11174,30 @@ class BrowserCacheManager extends CacheManager {
 }
 const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger) => {
     const cacheOptions = {
-        cacheLocation: exports.BrowserCacheLocation.MemoryStorage,
-        temporaryCacheLocation: exports.BrowserCacheLocation.MemoryStorage,
+        cacheLocation: BrowserCacheLocation.MemoryStorage,
+        temporaryCacheLocation: BrowserCacheLocation.MemoryStorage,
         storeAuthStateInCookie: false,
         secureCookies: false,
         cacheMigrationEnabled: false,
+        claimsBasedCachingEnabled: false,
     };
     return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger);
 };
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class CacheRecord extends CacheRecord$1 {
+    constructor(accountEntity, idTokenEntity, accessTokenEntity, refreshTokenEntity, appMetadataEntity) {
+        super(accountEntity, idTokenEntity, accessTokenEntity, refreshTokenEntity, appMetadataEntity);
+        this.account = accountEntity;
+    }
+}
+
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.0.0-alpha.2";
+const version = "3.0.0-beta.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11639,10 +11606,13 @@ class BaseInteractionClient {
      * Initializer function for all request APIs
      * @param request
      */
-    async initializeBaseRequest(request) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.InitializeBaseRequest, request.correlationId);
+    async initializeBaseRequest(request, account) {
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.InitializeBaseRequest, request.correlationId);
         this.logger.verbose("Initializing BaseAuthRequest");
         const authority = request.authority || this.config.auth.authority;
+        if (account) {
+            await this.validateRequestAuthority(authority, account);
+        }
         const scopes = [...((request && request.scopes) || [])];
         const validatedRequest = {
             ...request,
@@ -11652,12 +11622,12 @@ class BaseInteractionClient {
         };
         // Set authenticationScheme to BEARER if not explicitly set in the request
         if (!validatedRequest.authenticationScheme) {
-            validatedRequest.authenticationScheme = exports.AuthenticationScheme.BEARER;
+            validatedRequest.authenticationScheme = AuthenticationScheme.BEARER;
             this.logger.verbose('Authentication Scheme wasn\'t explicitly set in request, defaulting to "Bearer" request');
         }
         else {
             if (validatedRequest.authenticationScheme ===
-                exports.AuthenticationScheme.SSH) {
+                AuthenticationScheme.SSH) {
                 if (!request.sshJwk) {
                     throw ClientConfigurationError.createMissingSshJwkError();
                 }
@@ -11667,8 +11637,11 @@ class BaseInteractionClient {
             }
             this.logger.verbose(`Authentication Scheme set to "${validatedRequest.authenticationScheme}" as configured in Auth request`);
         }
-        // Set requested claims hash if claims were requested
-        if (request.claims && !StringUtils.isEmpty(request.claims)) {
+        // Set requested claims hash if claims-based caching is enabled and claims were requested
+        if (this.config.cache.claimsBasedCachingEnabled &&
+            request.claims &&
+            // Checks for empty stringified object "{}" which doesn't qualify as requested claims
+            !StringUtils.isEmptyObj(request.claims)) {
             validatedRequest.requestedClaimsHash =
                 await this.browserCrypto.hashString(request.claims);
         }
@@ -11688,6 +11661,16 @@ class BaseInteractionClient {
             BrowserUtils.getCurrentUri();
         return UrlString.getAbsoluteUrl(redirectUri, BrowserUtils.getCurrentUri());
     }
+    /*
+     * If authority provided in the request does not match environment/authority specified
+     * in the account or MSAL config, we throw an error.
+     */
+    async validateRequestAuthority(authority, account) {
+        const discoveredAuthority = await this.getDiscoveredAuthority(authority);
+        if (!discoveredAuthority.isAlias(account.environment)) {
+            throw ClientConfigurationError.createAuthorityMismatchError();
+        }
+    }
     /**
      *
      * @param apiId
@@ -11741,7 +11724,7 @@ class StandardInteractionClient extends BaseInteractionClient {
      * @param request
      */
     async initializeAuthorizationCodeRequest(request) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, request.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, request.correlationId);
         this.logger.verbose("initializeAuthorizationRequest called", request.correlationId);
         const generatedPkceParams = await this.browserCrypto.generatePkceCodes();
         const authCodeRequest = {
@@ -11844,9 +11827,9 @@ class StandardInteractionClient extends BaseInteractionClient {
      * @param authorityUrl
      */
     async createAuthCodeClient(serverTelemetryManager, authorityUrl, requestAzureCloudOptions) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.correlationId);
         // Create auth module.
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
         const clientConfig = await this.getClientConfiguration(serverTelemetryManager, authorityUrl, requestAzureCloudOptions);
         return new AuthorizationCodeClient(clientConfig, this.performanceClient);
     }
@@ -11857,9 +11840,9 @@ class StandardInteractionClient extends BaseInteractionClient {
      * @param requestCorrelationId
      */
     async getClientConfiguration(serverTelemetryManager, requestAuthority, requestAzureCloudOptions) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
         this.logger.verbose("getClientConfiguration called", this.correlationId);
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);
         const discoveredAuthority = await this.getDiscoveredAuthority(requestAuthority, requestAzureCloudOptions);
         const logger = this.config.system.loggerOptions;
         return {
@@ -11878,6 +11861,9 @@ class StandardInteractionClient extends BaseInteractionClient {
                 logLevel: logger.logLevel,
                 correlationId: this.correlationId,
             },
+            cacheOptions: {
+                claimsBasedCachingEnabled: this.config.cache.claimsBasedCachingEnabled,
+            },
             cryptoInterface: this.browserCrypto,
             networkInterface: this.networkClient,
             storageInterface: this.browserStorage,
@@ -11916,9 +11902,9 @@ class StandardInteractionClient extends BaseInteractionClient {
      * @param requestCorrelationId
      */
     async getDiscoveredAuthority(requestAuthority, requestAzureCloudOptions) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);
         this.logger.verbose("getDiscoveredAuthority called", this.correlationId);
-        const getAuthorityMeasurement = this.performanceClient?.startMeasurement(exports.PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);
+        const getAuthorityMeasurement = this.performanceClient?.startMeasurement(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);
         const authorityOptions = {
             protocolMode: this.config.auth.protocolMode,
             knownAuthorities: this.config.auth.knownAuthorities,
@@ -11933,7 +11919,7 @@ class StandardInteractionClient extends BaseInteractionClient {
         // fall back to the authority from config
         const builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);
         this.logger.verbose("Creating discovered authority with configured authority", this.correlationId);
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, this.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, this.correlationId);
         return await AuthorityFactory.createDiscoveredInstance(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger, this.performanceClient, this.correlationId)
             .then((result) => {
             getAuthorityMeasurement.endMeasurement({
@@ -11956,14 +11942,14 @@ class StandardInteractionClient extends BaseInteractionClient {
      * @param interactionType
      */
     async initializeAuthorizationRequest(request, interactionType) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, this.correlationId);
         this.logger.verbose("initializeAuthorizationRequest called", this.correlationId);
         const redirectUri = this.getRedirectUri(request.redirectUri);
         const browserState = {
             interactionType: interactionType,
         };
         const state = ProtocolUtils.setRequestState(this.browserCrypto, (request && request.state) || Constants.EMPTY_STRING, browserState);
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.InitializeBaseRequest, this.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.InitializeBaseRequest, this.correlationId);
         const validatedRequest = {
             ...(await this.initializeBaseRequest(request)),
             redirectUri: redirectUri,
@@ -12008,7 +11994,7 @@ class InteractionHandler {
      * @param locationHash
      */
     async handleCodeResponseFromHash(locationHash, state, authority, networkModule) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.HandleCodeResponseFromHash, this.authCodeRequest.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.HandleCodeResponseFromHash, this.authCodeRequest.correlationId);
         this.logger.verbose("InteractionHandler.handleCodeResponse called");
         // Check that location hash isn't empty.
         if (StringUtils.isEmpty(locationHash)) {
@@ -12034,7 +12020,7 @@ class InteractionHandler {
                 throw e;
             }
         }
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.HandleCodeResponseFromServer, this.authCodeRequest.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.HandleCodeResponseFromServer, this.authCodeRequest.correlationId);
         return this.handleCodeResponseFromServer(authCodeResponse, state, authority, networkModule);
     }
     /**
@@ -12046,7 +12032,7 @@ class InteractionHandler {
      * @returns
      */
     async handleCodeResponseFromServer(authCodeResponse, state, authority, networkModule, validateNonce = true) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.HandleCodeResponseFromServer, this.authCodeRequest.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.HandleCodeResponseFromServer, this.authCodeRequest.correlationId);
         this.logger.trace("InteractionHandler.handleCodeResponseFromServer called");
         // Handle code response.
         const stateKey = this.browserStorage.generateStateKey(state);
@@ -12061,7 +12047,7 @@ class InteractionHandler {
         this.authCodeRequest.code = authCodeResponse.code;
         // Check for new cloud instance
         if (authCodeResponse.cloud_instance_host_name) {
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.UpdateTokenEndpointAuthority, this.authCodeRequest.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.UpdateTokenEndpointAuthority, this.authCodeRequest.correlationId);
             await this.updateTokenEndpointAuthority(authCodeResponse.cloud_instance_host_name, authority, networkModule);
         }
         // Nonce validation not needed when redirect not involved (e.g. hybrid spa, renewing token via rt)
@@ -12080,7 +12066,7 @@ class InteractionHandler {
             }
         }
         // Acquire token with retrieved code.
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.AuthClientAcquireToken, this.authCodeRequest.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.AuthClientAcquireToken, this.authCodeRequest.correlationId);
         const tokenResponse = await this.authModule.acquireToken(this.authCodeRequest, authCodeResponse);
         this.browserStorage.cleanRequestByState(state);
         return tokenResponse;
@@ -12092,7 +12078,7 @@ class InteractionHandler {
      * @param networkModule
      */
     async updateTokenEndpointAuthority(cloudInstanceHostname, authority, networkModule) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.UpdateTokenEndpointAuthority, this.authCodeRequest.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.UpdateTokenEndpointAuthority, this.authCodeRequest.correlationId);
         const cloudInstanceAuthorityUri = `https://${cloudInstanceHostname}/${authority.tenant}/`;
         const cloudInstanceAuthority = await AuthorityFactory.createDiscoveredInstance(cloudInstanceAuthorityUri, networkModule, this.browserStorage, authority.options, this.logger, this.performanceClient, this.authCodeRequest.correlationId);
         this.authModule.updateAuthority(cloudInstanceAuthority);
@@ -12143,7 +12129,7 @@ class RedirectHandler extends InteractionHandler {
             this.browserStorage.cacheCodeRequest(this.authCodeRequest, this.browserCrypto);
             this.logger.infoPii(`RedirectHandler.initiateAuthRequest: Navigate to: ${requestUrl}`);
             const navigationOptions = {
-                apiId: exports.ApiId.acquireTokenRedirect,
+                apiId: ApiId.acquireTokenRedirect,
                 timeout: params.redirectTimeout,
                 noHistory: false,
             };
@@ -12239,48 +12225,48 @@ class RedirectHandler extends InteractionHandler {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-exports.EventType = void 0;
-(function (EventType) {
-    EventType["INITIALIZE_START"] = "msal:initializeStart";
-    EventType["INITIALIZE_END"] = "msal:initializeEnd";
-    EventType["ACCOUNT_ADDED"] = "msal:accountAdded";
-    EventType["ACCOUNT_REMOVED"] = "msal:accountRemoved";
-    EventType["LOGIN_START"] = "msal:loginStart";
-    EventType["LOGIN_SUCCESS"] = "msal:loginSuccess";
-    EventType["LOGIN_FAILURE"] = "msal:loginFailure";
-    EventType["ACQUIRE_TOKEN_START"] = "msal:acquireTokenStart";
-    EventType["ACQUIRE_TOKEN_SUCCESS"] = "msal:acquireTokenSuccess";
-    EventType["ACQUIRE_TOKEN_FAILURE"] = "msal:acquireTokenFailure";
-    EventType["ACQUIRE_TOKEN_NETWORK_START"] = "msal:acquireTokenFromNetworkStart";
-    EventType["SSO_SILENT_START"] = "msal:ssoSilentStart";
-    EventType["SSO_SILENT_SUCCESS"] = "msal:ssoSilentSuccess";
-    EventType["SSO_SILENT_FAILURE"] = "msal:ssoSilentFailure";
-    EventType["ACQUIRE_TOKEN_BY_CODE_START"] = "msal:acquireTokenByCodeStart";
-    EventType["ACQUIRE_TOKEN_BY_CODE_SUCCESS"] = "msal:acquireTokenByCodeSuccess";
-    EventType["ACQUIRE_TOKEN_BY_CODE_FAILURE"] = "msal:acquireTokenByCodeFailure";
-    EventType["HANDLE_REDIRECT_START"] = "msal:handleRedirectStart";
-    EventType["HANDLE_REDIRECT_END"] = "msal:handleRedirectEnd";
-    EventType["POPUP_OPENED"] = "msal:popupOpened";
-    EventType["LOGOUT_START"] = "msal:logoutStart";
-    EventType["LOGOUT_SUCCESS"] = "msal:logoutSuccess";
-    EventType["LOGOUT_FAILURE"] = "msal:logoutFailure";
-    EventType["LOGOUT_END"] = "msal:logoutEnd";
-})(exports.EventType || (exports.EventType = {}));
+const EventType = {
+    INITIALIZE_START: "msal:initializeStart",
+    INITIALIZE_END: "msal:initializeEnd",
+    ACCOUNT_ADDED: "msal:accountAdded",
+    ACCOUNT_REMOVED: "msal:accountRemoved",
+    LOGIN_START: "msal:loginStart",
+    LOGIN_SUCCESS: "msal:loginSuccess",
+    LOGIN_FAILURE: "msal:loginFailure",
+    ACQUIRE_TOKEN_START: "msal:acquireTokenStart",
+    ACQUIRE_TOKEN_SUCCESS: "msal:acquireTokenSuccess",
+    ACQUIRE_TOKEN_FAILURE: "msal:acquireTokenFailure",
+    ACQUIRE_TOKEN_NETWORK_START: "msal:acquireTokenFromNetworkStart",
+    SSO_SILENT_START: "msal:ssoSilentStart",
+    SSO_SILENT_SUCCESS: "msal:ssoSilentSuccess",
+    SSO_SILENT_FAILURE: "msal:ssoSilentFailure",
+    ACQUIRE_TOKEN_BY_CODE_START: "msal:acquireTokenByCodeStart",
+    ACQUIRE_TOKEN_BY_CODE_SUCCESS: "msal:acquireTokenByCodeSuccess",
+    ACQUIRE_TOKEN_BY_CODE_FAILURE: "msal:acquireTokenByCodeFailure",
+    HANDLE_REDIRECT_START: "msal:handleRedirectStart",
+    HANDLE_REDIRECT_END: "msal:handleRedirectEnd",
+    POPUP_OPENED: "msal:popupOpened",
+    LOGOUT_START: "msal:logoutStart",
+    LOGOUT_SUCCESS: "msal:logoutSuccess",
+    LOGOUT_FAILURE: "msal:logoutFailure",
+    LOGOUT_END: "msal:logoutEnd",
+    RESTORE_FROM_BFCACHE: "msal:restoreFromBFCache"
+};
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-var NativeStatusCode;
-(function (NativeStatusCode) {
-    NativeStatusCode["USER_INTERACTION_REQUIRED"] = "USER_INTERACTION_REQUIRED";
-    NativeStatusCode["USER_CANCEL"] = "USER_CANCEL";
-    NativeStatusCode["NO_NETWORK"] = "NO_NETWORK";
-    NativeStatusCode["TRANSIENT_ERROR"] = "TRANSIENT_ERROR";
-    NativeStatusCode["PERSISTENT_ERROR"] = "PERSISTENT_ERROR";
-    NativeStatusCode["DISABLED"] = "DISABLED";
-    NativeStatusCode["ACCOUNT_UNAVAILABLE"] = "ACCOUNT_UNAVAILABLE";
-})(NativeStatusCode || (NativeStatusCode = {}));
+const INVALID_METHOD_ERROR = -2147186943;
+const NativeStatusCode = {
+    USER_INTERACTION_REQUIRED: "USER_INTERACTION_REQUIRED",
+    USER_CANCEL: "USER_CANCEL",
+    NO_NETWORK: "NO_NETWORK",
+    TRANSIENT_ERROR: "TRANSIENT_ERROR",
+    PERSISTENT_ERROR: "PERSISTENT_ERROR",
+    DISABLED: "DISABLED",
+    ACCOUNT_UNAVAILABLE: "ACCOUNT_UNAVAILABLE",
+};
 const NativeAuthErrorMessage = {
     extensionError: {
         code: "ContentError",
@@ -12311,6 +12297,11 @@ class NativeAuthError extends AuthError {
                 this.ext.status === NativeStatusCode.DISABLED)) {
             return true;
         }
+        if (this.ext &&
+            this.ext.error &&
+            this.ext.error === INVALID_METHOD_ERROR) {
+            return true;
+        }
         switch (this.errorCode) {
             case NativeAuthErrorMessage.extensionError.code:
                 return true;
@@ -12366,9 +12357,9 @@ class SilentCacheClient extends StandardInteractionClient {
      * @param silentRequest
      */
     async acquireToken(silentRequest) {
-        const acquireTokenMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.SilentCacheClientAcquireToken, silentRequest.correlationId);
+        const acquireTokenMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SilentCacheClientAcquireToken, silentRequest.correlationId);
         // Telemetry manager only used to increment cacheHits here
-        const serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenSilent_silentFlow);
+        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);
         const silentAuthClient = await this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions);
         this.logger.verbose("Silent auth client created");
         try {
@@ -12408,16 +12399,16 @@ class SilentCacheClient extends StandardInteractionClient {
      */
     async createSilentFlowClient(serverTelemetryManager, authorityUrl, azureCloudOptions) {
         // Create auth module.
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
         const clientConfig = await this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions);
         return new SilentFlowClient(clientConfig, this.performanceClient);
     }
     async initializeSilentRequest(request, account) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.InitializeSilentRequest, this.correlationId);
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.InitializeBaseRequest, this.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.InitializeSilentRequest, this.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.InitializeBaseRequest, this.correlationId);
         return {
             ...request,
-            ...(await this.initializeBaseRequest(request)),
+            ...await this.initializeBaseRequest(request, account),
             account: account,
             forceRefresh: request.forceRefresh || false,
         };
@@ -12444,7 +12435,7 @@ class NativeInteractionClient extends BaseInteractionClient {
     async acquireToken(request) {
         this.logger.trace("NativeInteractionClient - acquireToken called.");
         // start the perf measurement
-        const nativeATMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);
+        const nativeATMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);
         const reqTimestamp = TimeUtils.nowSeconds();
         // initialize native request
         const nativeRequest = await this.initializeNativeRequest(request);
@@ -12514,7 +12505,7 @@ class NativeInteractionClient extends BaseInteractionClient {
             this.logger.warning("NativeInteractionClient:acquireTokensFromCache - No nativeAccountId provided");
             throw ClientAuthError.createNoAccountFoundError();
         }
-        // fetch the account from in-memory cache
+        // fetch the account from browser cache
         const account = this.browserStorage.getAccountInfoFilteredBy({
             nativeAccountId,
         });
@@ -12554,7 +12545,7 @@ class NativeInteractionClient extends BaseInteractionClient {
         }
         this.browserStorage.setTemporaryCache(TemporaryCacheKeys.NATIVE_REQUEST, JSON.stringify(nativeRequest), true);
         const navigationOptions = {
-            apiId: exports.ApiId.acquireTokenRedirect,
+            apiId: ApiId.acquireTokenRedirect,
             timeout: this.config.system.redirectNavigationTimeout,
             noHistory: false,
         };
@@ -12632,7 +12623,7 @@ class NativeInteractionClient extends BaseInteractionClient {
         const result = await this.generateAuthenticationResult(response, request, idTokenObj, accountEntity, authority.canonicalAuthority, reqTimestamp);
         // cache accounts and tokens in the appropriate storage
         this.cacheAccount(accountEntity);
-        this.cacheNativeTokens(response, request, homeAccountIdentifier, idTokenObj, result.accessToken, result.tenantId, reqTimestamp);
+        this.cacheNativeTokens(response, request, homeAccountIdentifier, accountEntity, idTokenObj, result.accessToken, result.tenantId, reqTimestamp);
         return result;
     }
     /**
@@ -12682,7 +12673,7 @@ class NativeInteractionClient extends BaseInteractionClient {
      * @param response
      */
     async generatePopAccessToken(response, request) {
-        if (request.tokenType === exports.AuthenticationScheme.POP) {
+        if (request.tokenType === AuthenticationScheme.POP) {
             /**
              * This code prioritizes SHR returned from the native layer. In case of error/SHR not calculated from WAM and the AT
              * is still received, SHR is calculated locally
@@ -12740,9 +12731,9 @@ class NativeInteractionClient extends BaseInteractionClient {
             Constants.EMPTY_STRING;
         // generate PoP token as needed
         const responseAccessToken = await this.generatePopAccessToken(response, request);
-        const tokenType = request.tokenType === exports.AuthenticationScheme.POP
-            ? exports.AuthenticationScheme.POP
-            : exports.AuthenticationScheme.BEARER;
+        const tokenType = request.tokenType === AuthenticationScheme.POP
+            ? AuthenticationScheme.POP
+            : AuthenticationScheme.BEARER;
         const result = {
             authority: authority,
             uniqueId: uid,
@@ -12783,20 +12774,21 @@ class NativeInteractionClient extends BaseInteractionClient {
      * @param tenantId
      * @param reqTimestamp
      */
-    cacheNativeTokens(response, request, homeAccountIdentifier, idTokenObj, responseAccessToken, tenantId, reqTimestamp) {
-        // cache idToken in inmemory storage
-        const idTokenEntity = IdTokenEntity.createIdTokenEntity(homeAccountIdentifier, request.authority, response.id_token || Constants.EMPTY_STRING, request.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);
-        this.nativeStorageManager.setIdTokenCredential(idTokenEntity);
+    cacheNativeTokens(response, request, homeAccountIdentifier, accountEntity, idTokenObj, responseAccessToken, tenantId, reqTimestamp) {
+        const cachedIdToken = IdTokenEntity.createIdTokenEntity(homeAccountIdentifier, request.authority, response.id_token || Constants.EMPTY_STRING, request.clientId, idTokenObj.claims.tid || Constants.EMPTY_STRING);
         // cache accessToken in inmemory storage
-        const expiresIn = request.tokenType === exports.AuthenticationScheme.POP
+        const expiresIn = request.tokenType === AuthenticationScheme.POP
             ? Constants.SHR_NONCE_VALIDITY
             : (typeof response.expires_in === "string"
                 ? parseInt(response.expires_in, 10)
                 : response.expires_in) || 0;
         const tokenExpirationSeconds = reqTimestamp + expiresIn;
         const responseScopes = this.generateScopes(response, request);
-        const accessTokenEntity = AccessTokenEntity.createAccessTokenEntity(homeAccountIdentifier, request.authority, responseAccessToken, request.clientId, tenantId, responseScopes.printScopes(), tokenExpirationSeconds, 0, this.browserCrypto);
-        this.nativeStorageManager.setAccessTokenCredential(accessTokenEntity);
+        const cachedAccessToken = AccessTokenEntity.createAccessTokenEntity(homeAccountIdentifier, request.authority, responseAccessToken, request.clientId, idTokenObj
+            ? idTokenObj.claims.tid || Constants.EMPTY_STRING
+            : tenantId, responseScopes.printScopes(), tokenExpirationSeconds, 0, this.browserCrypto);
+        const nativeCacheRecord = new CacheRecord(accountEntity, cachedIdToken, cachedAccessToken);
+        this.nativeStorageManager.saveCacheRecord(nativeCacheRecord);
     }
     addTelemetryFromNativeResponse(response) {
         const mats = this.getMATSFromResponse(response);
@@ -12874,6 +12866,9 @@ class NativeInteractionClient extends BaseInteractionClient {
     async initializeNativeRequest(request) {
         this.logger.trace("NativeInteractionClient - initializeNativeRequest called");
         const authority = request.authority || this.config.auth.authority;
+        if (request.account) {
+            await this.validateRequestAuthority(authority, request.account);
+        }
         const canonicalAuthority = new UrlString(authority);
         canonicalAuthority.validateAsUri();
         // scopes are expected to be received by the native broker as "scope" and will be added to the request below. Other properties that should be dropped from the request to the native broker can be included in the object destructuring here.
@@ -12883,8 +12878,8 @@ class NativeInteractionClient extends BaseInteractionClient {
         const getPrompt = () => {
             // If request is silent, prompt is always none
             switch (this.apiId) {
-                case exports.ApiId.ssoSilent:
-                case exports.ApiId.acquireTokenSilent_silentFlow:
+                case ApiId.ssoSilent:
+                case ApiId.acquireTokenSilent_silentFlow:
                     this.logger.trace("initializeNativeRequest: silent request sets prompt to none");
                     return PromptValue.NONE;
             }
@@ -12923,7 +12918,7 @@ class NativeInteractionClient extends BaseInteractionClient {
             },
             extendedExpiryToken: false, // Make this configurable?
         };
-        if (request.authenticationScheme === exports.AuthenticationScheme.POP) {
+        if (request.authenticationScheme === AuthenticationScheme.POP) {
             // add POP request type
             const shrParameters = {
                 resourceRequestUri: request.resourceRequestUri,
@@ -12955,7 +12950,7 @@ class NativeMessageHandler {
         this.messageChannel = new MessageChannel();
         this.windowListener = this.onWindowMessage.bind(this); // Window event callback doesn't have access to 'this' unless it's bound
         this.performanceClient = performanceClient;
-        this.handshakeEvent = performanceClient.startMeasurement(exports.PerformanceEvents.NativeMessageHandlerHandshake);
+        this.handshakeEvent = performanceClient.startMeasurement(PerformanceEvents.NativeMessageHandlerHandshake);
         this.crypto = crypto;
     }
     /**
@@ -13184,8 +13179,8 @@ class NativeMessageHandler {
         }
         if (authenticationScheme) {
             switch (authenticationScheme) {
-                case exports.AuthenticationScheme.BEARER:
-                case exports.AuthenticationScheme.POP:
+                case AuthenticationScheme.BEARER:
+                case AuthenticationScheme.POP:
                     logger.trace("isNativeAvailable: authenticationScheme is supported, returning true");
                     return true;
                 default:
@@ -13211,23 +13206,24 @@ class RedirectClient extends StandardInteractionClient {
      * @param request
      */
     async acquireToken(request) {
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);
         const validRequest = await this.initializeAuthorizationRequest(request, exports.InteractionType.Redirect);
         this.browserStorage.updateCacheEntries(validRequest.state, validRequest.nonce, validRequest.authority, validRequest.loginHint || Constants.EMPTY_STRING, validRequest.account || null);
-        const serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenRedirect);
+        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenRedirect);
         const handleBackButton = (event) => {
             // Clear temporary cache if the back button is clicked during the redirect flow.
             if (event.persisted) {
                 this.logger.verbose("Page was restored from back/forward cache. Clearing temporary cache.");
                 this.browserStorage.cleanRequestByState(validRequest.state);
+                this.eventHandler.emitEvent(EventType.RESTORE_FROM_BFCACHE, exports.InteractionType.Redirect);
             }
         };
         try {
             // Create auth code request and generate PKCE params
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, request.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, request.correlationId);
             const authCodeRequest = await this.initializeAuthorizationCodeRequest(validRequest);
             // Initialize the client
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, request.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, request.correlationId);
             const authClient = await this.createAuthCodeClient(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions);
             this.logger.verbose("Auth code client created");
             // Create redirect interaction handler.
@@ -13266,7 +13262,7 @@ class RedirectClient extends StandardInteractionClient {
      * @param hash
      */
     async handleRedirectPromise(hash) {
-        const serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.handleRedirectPromise);
+        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.handleRedirectPromise);
         try {
             if (!this.browserStorage.isInteractionInProgress(true)) {
                 this.logger.info("handleRedirectPromise called but there is no interaction in progress, returning null.");
@@ -13318,7 +13314,7 @@ class RedirectClient extends StandardInteractionClient {
                  */
                 this.browserStorage.setTemporaryCache(TemporaryCacheKeys.URL_HASH, responseHash, true);
                 const navigationOptions = {
-                    apiId: exports.ApiId.handleRedirectPromise,
+                    apiId: ApiId.handleRedirectPromise,
                     timeout: this.config.system.redirectNavigationTimeout,
                     noHistory: true,
                 };
@@ -13391,7 +13387,7 @@ class RedirectClient extends StandardInteractionClient {
             if (!this.nativeMessageHandler) {
                 throw BrowserAuthError.createNativeConnectionNotEstablishedError();
             }
-            const nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, exports.ApiId.acquireTokenPopup, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.browserStorage, cachedRequest.correlationId);
+            const nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenPopup, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.nativeStorage, cachedRequest.correlationId);
             const { userRequestState } = ProtocolUtils.parseRequestState(this.browserCrypto, state);
             return nativeInteractionClient
                 .acquireToken({
@@ -13408,7 +13404,7 @@ class RedirectClient extends StandardInteractionClient {
         if (!currentAuthority) {
             throw BrowserAuthError.createNoCachedAuthorityError();
         }
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, cachedRequest.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, cachedRequest.correlationId);
         const authClient = await this.createAuthCodeClient(serverTelemetryManager, currentAuthority);
         this.logger.verbose("Auth code client created");
         ThrottlingUtils.removeThrottle(this.browserStorage, this.config.auth.clientId, cachedRequest);
@@ -13423,22 +13419,22 @@ class RedirectClient extends StandardInteractionClient {
     async logout(logoutRequest) {
         this.logger.verbose("logoutRedirect called");
         const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);
-        const serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.logout);
+        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.logout);
         try {
-            this.eventHandler.emitEvent(exports.EventType.LOGOUT_START, exports.InteractionType.Redirect, logoutRequest);
+            this.eventHandler.emitEvent(EventType.LOGOUT_START, exports.InteractionType.Redirect, logoutRequest);
             // Clear cache on logout
             await this.clearCacheOnLogout(validLogoutRequest.account);
             const navigationOptions = {
-                apiId: exports.ApiId.logout,
+                apiId: ApiId.logout,
                 timeout: this.config.system.redirectNavigationTimeout,
                 noHistory: false,
             };
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, validLogoutRequest.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, validLogoutRequest.correlationId);
             const authClient = await this.createAuthCodeClient(serverTelemetryManager, logoutRequest && logoutRequest.authority);
             this.logger.verbose("Auth code client created");
             // Create logout string and navigate user window to logout.
             const logoutUri = authClient.getLogoutUri(validLogoutRequest);
-            this.eventHandler.emitEvent(exports.EventType.LOGOUT_SUCCESS, exports.InteractionType.Redirect, validLogoutRequest);
+            this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, exports.InteractionType.Redirect, validLogoutRequest);
             // Check if onRedirectNavigate is implemented, and invoke it if so
             if (logoutRequest &&
                 typeof logoutRequest.onRedirectNavigate === "function") {
@@ -13472,11 +13468,11 @@ class RedirectClient extends StandardInteractionClient {
                 e.setCorrelationId(this.correlationId);
                 serverTelemetryManager.cacheFailedRequest(e);
             }
-            this.eventHandler.emitEvent(exports.EventType.LOGOUT_FAILURE, exports.InteractionType.Redirect, null, e);
-            this.eventHandler.emitEvent(exports.EventType.LOGOUT_END, exports.InteractionType.Redirect);
+            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, exports.InteractionType.Redirect, null, e);
+            this.eventHandler.emitEvent(EventType.LOGOUT_END, exports.InteractionType.Redirect);
             throw e;
         }
-        this.eventHandler.emitEvent(exports.EventType.LOGOUT_END, exports.InteractionType.Redirect);
+        this.eventHandler.emitEvent(EventType.LOGOUT_END, exports.InteractionType.Redirect);
     }
     /**
      * Use to get the redirectStartPage either from request or use current window
@@ -13565,16 +13561,16 @@ class PopupClient extends StandardInteractionClient {
      */
     async acquireTokenPopupAsync(request, popupName, popupWindowAttributes, popup) {
         this.logger.verbose("acquireTokenPopupAsync called");
-        const serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenPopup);
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);
+        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenPopup);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);
         const validRequest = await this.initializeAuthorizationRequest(request, exports.InteractionType.Popup);
         this.browserStorage.updateCacheEntries(validRequest.state, validRequest.nonce, validRequest.authority, validRequest.loginHint || Constants.EMPTY_STRING, validRequest.account || null);
         try {
             // Create auth code request and generate PKCE params
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, request.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, request.correlationId);
             const authCodeRequest = await this.initializeAuthorizationCodeRequest(validRequest);
             // Initialize the client
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, request.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, request.correlationId);
             const authClient = await this.createAuthCodeClient(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions);
             this.logger.verbose("Auth code client created");
             const isNativeBroker = NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeMessageHandler, request.authenticationScheme);
@@ -13582,7 +13578,7 @@ class PopupClient extends StandardInteractionClient {
             let fetchNativeAccountIdMeasurement;
             if (isNativeBroker) {
                 fetchNativeAccountIdMeasurement =
-                    this.performanceClient.startMeasurement(exports.PerformanceEvents.FetchAccountIdWithNativeBroker, request.correlationId);
+                    this.performanceClient.startMeasurement(PerformanceEvents.FetchAccountIdWithNativeBroker, request.correlationId);
             }
             // Create acquire token url.
             const navigateUrl = await authClient.getAuthCodeUrl({
@@ -13598,7 +13594,7 @@ class PopupClient extends StandardInteractionClient {
                 popupWindowAttributes,
             };
             const popupWindow = this.initiateAuthRequest(navigateUrl, popupParameters);
-            this.eventHandler.emitEvent(exports.EventType.POPUP_OPENED, exports.InteractionType.Popup, { popupWindow }, null);
+            this.eventHandler.emitEvent(EventType.POPUP_OPENED, exports.InteractionType.Popup, { popupWindow }, null);
             // Monitor the window for the hash. Return the string value and close the popup when the hash is received. Default timeout is 60 seconds.
             const hash = await this.monitorPopupForHash(popupWindow);
             // Deserialize hash fragment response parameters.
@@ -13618,7 +13614,7 @@ class PopupClient extends StandardInteractionClient {
                 if (!this.nativeMessageHandler) {
                     throw BrowserAuthError.createNativeConnectionNotEstablishedError();
                 }
-                const nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, exports.ApiId.acquireTokenPopup, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.nativeStorage, validRequest.correlationId);
+                const nativeInteractionClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenPopup, this.performanceClient, this.nativeMessageHandler, serverParams.accountId, this.nativeStorage, validRequest.correlationId);
                 const { userRequestState } = ProtocolUtils.parseRequestState(this.browserCrypto, state);
                 return nativeInteractionClient
                     .acquireToken({
@@ -13658,29 +13654,29 @@ class PopupClient extends StandardInteractionClient {
      */
     async logoutPopupAsync(validRequest, popupName, popupWindowAttributes, requestAuthority, popup, mainWindowRedirectUri) {
         this.logger.verbose("logoutPopupAsync called");
-        this.eventHandler.emitEvent(exports.EventType.LOGOUT_START, exports.InteractionType.Popup, validRequest);
-        const serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.logoutPopup);
+        this.eventHandler.emitEvent(EventType.LOGOUT_START, exports.InteractionType.Popup, validRequest);
+        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.logoutPopup);
         try {
             // Clear cache on logout
             await this.clearCacheOnLogout(validRequest.account);
             // Initialize the client
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, validRequest.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, validRequest.correlationId);
             const authClient = await this.createAuthCodeClient(serverTelemetryManager, requestAuthority);
             this.logger.verbose("Auth code client created");
             // Create logout string and navigate user window to logout.
             const logoutUri = authClient.getLogoutUri(validRequest);
-            this.eventHandler.emitEvent(exports.EventType.LOGOUT_SUCCESS, exports.InteractionType.Popup, validRequest);
+            this.eventHandler.emitEvent(EventType.LOGOUT_SUCCESS, exports.InteractionType.Popup, validRequest);
             // Open the popup window to requestUrl.
             const popupWindow = this.openPopup(logoutUri, {
                 popupName,
                 popupWindowAttributes,
                 popup,
             });
-            this.eventHandler.emitEvent(exports.EventType.POPUP_OPENED, exports.InteractionType.Popup, { popupWindow }, null);
+            this.eventHandler.emitEvent(EventType.POPUP_OPENED, exports.InteractionType.Popup, { popupWindow }, null);
             await this.waitForLogoutPopup(popupWindow);
             if (mainWindowRedirectUri) {
                 const navigationOptions = {
-                    apiId: exports.ApiId.logoutPopup,
+                    apiId: ApiId.logoutPopup,
                     timeout: this.config.system.redirectNavigationTimeout,
                     noHistory: false,
                 };
@@ -13703,11 +13699,11 @@ class PopupClient extends StandardInteractionClient {
                 serverTelemetryManager.cacheFailedRequest(e);
             }
             this.browserStorage.setInteractionInProgress(false);
-            this.eventHandler.emitEvent(exports.EventType.LOGOUT_FAILURE, exports.InteractionType.Popup, null, e);
-            this.eventHandler.emitEvent(exports.EventType.LOGOUT_END, exports.InteractionType.Popup);
+            this.eventHandler.emitEvent(EventType.LOGOUT_FAILURE, exports.InteractionType.Popup, null, e);
+            this.eventHandler.emitEvent(EventType.LOGOUT_END, exports.InteractionType.Popup);
             throw e;
         }
-        this.eventHandler.emitEvent(exports.EventType.LOGOUT_END, exports.InteractionType.Popup);
+        this.eventHandler.emitEvent(EventType.LOGOUT_END, exports.InteractionType.Popup);
     }
     /**
      * Opens a popup window with given request Url.
@@ -14036,24 +14032,25 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
         postLogoutRedirectUri: Constants.EMPTY_STRING,
         navigateToLoginRequestUrl: true,
         clientCapabilities: [],
-        protocolMode: exports.ProtocolMode.AAD,
+        protocolMode: ProtocolMode.AAD,
         azureCloudOptions: {
-            azureCloudInstance: exports.AzureCloudInstance.None,
+            azureCloudInstance: AzureCloudInstance.None,
             tenant: Constants.EMPTY_STRING,
         },
         skipAuthorityMetadataCache: false,
     };
     // Default cache options for browser
     const DEFAULT_CACHE_OPTIONS = {
-        cacheLocation: exports.BrowserCacheLocation.SessionStorage,
-        temporaryCacheLocation: exports.BrowserCacheLocation.SessionStorage,
+        cacheLocation: BrowserCacheLocation.SessionStorage,
+        temporaryCacheLocation: BrowserCacheLocation.SessionStorage,
         storeAuthStateInCookie: false,
         secureCookies: false,
         // Default cache migration to true if cache location is localStorage since entries are preserved across tabs/windows. Migration has little to no benefit in sessionStorage and memoryStorage
         cacheMigrationEnabled: userInputCache &&
-            userInputCache.cacheLocation === exports.BrowserCacheLocation.LocalStorage
+            userInputCache.cacheLocation === BrowserCacheLocation.LocalStorage
             ? true
             : false,
+        claimsBasedCachingEnabled: false,
     };
     // Default logger options for browser
     const DEFAULT_LOGGER_OPTIONS = {
@@ -14084,10 +14081,6 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
         nativeBrokerHandshakeTimeout: userInputSystem?.nativeBrokerHandshakeTimeout ||
             DEFAULT_NATIVE_BROKER_HANDSHAKE_TIMEOUT_MS,
         pollIntervalMilliseconds: BrowserConstants.DEFAULT_POLL_INTERVAL_MS,
-        cryptoOptions: {
-            useMsrCrypto: false,
-            entropy: undefined,
-        },
     };
     const providedSystemOptions = {
         ...userInputSystem,
@@ -14124,14 +14117,14 @@ class SilentHandler extends InteractionHandler {
      * @param userRequestScopes
      */
     async initiateAuthRequest(requestUrl) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.SilentHandlerInitiateAuthRequest, this.authCodeRequest.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerInitiateAuthRequest, this.authCodeRequest.correlationId);
         if (StringUtils.isEmpty(requestUrl)) {
             // Throw error if request URL is empty.
             this.logger.info("Navigate url is empty");
             throw BrowserAuthError.createEmptyNavigationUriError();
         }
         if (this.navigateFrameWait) {
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.SilentHandlerLoadFrame, this.authCodeRequest.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.SilentHandlerLoadFrame, this.authCodeRequest.correlationId);
             return await this.loadFrame(requestUrl);
         }
         return this.loadFrameSync(requestUrl);
@@ -14142,7 +14135,7 @@ class SilentHandler extends InteractionHandler {
      * @param timeout
      */
     monitorIframeForHash(iframe, timeout) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.SilentHandlerMonitorIframeForHash, this.authCodeRequest.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerMonitorIframeForHash, this.authCodeRequest.correlationId);
         return new Promise((resolve, reject) => {
             if (timeout < DEFAULT_IFRAME_TIMEOUT_MS) {
                 this.logger.warning(`system.loadFrameTimeout or system.iframeHashTimeout set to lower (${timeout}ms) than the default (${DEFAULT_IFRAME_TIMEOUT_MS}ms). This may result in timeouts.`);
@@ -14215,7 +14208,7 @@ class SilentHandler extends InteractionHandler {
      * @ignore
      */
     loadFrame(urlNavigate) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.SilentHandlerLoadFrame, this.authCodeRequest.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentHandlerLoadFrame, this.authCodeRequest.correlationId);
         /*
          * This trick overcomes iframe navigation in IE
          * IE does not load the page consistently in iframe
@@ -14286,9 +14279,9 @@ class SilentIframeClient extends StandardInteractionClient {
      * @param request
      */
     async acquireToken(request) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);
         this.logger.verbose("acquireTokenByIframe called");
-        const acquireTokenMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);
+        const acquireTokenMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);
         // Check that we have some SSO data
         if (StringUtils.isEmpty(request.loginHint) &&
             StringUtils.isEmpty(request.sid) &&
@@ -14305,7 +14298,7 @@ class SilentIframeClient extends StandardInteractionClient {
             throw BrowserAuthError.createSilentPromptValueError(request.prompt);
         }
         // Create silent request
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);
         const silentRequest = await this.initializeAuthorizationRequest({
             ...request,
             prompt: request.prompt || PromptValue.NONE,
@@ -14314,10 +14307,10 @@ class SilentIframeClient extends StandardInteractionClient {
         const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
         try {
             // Initialize the client
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, request.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, request.correlationId);
             const authClient = await this.createAuthCodeClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions);
             this.logger.verbose("Auth code client created");
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.SilentIframeClientTokenHelper, request.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.SilentIframeClientTokenHelper, request.correlationId);
             return await this.silentTokenHelper(authClient, silentRequest).then((result) => {
                 acquireTokenMeasurement.endMeasurement({
                     success: true,
@@ -14355,12 +14348,12 @@ class SilentIframeClient extends StandardInteractionClient {
      * @param userRequestScopes
      */
     async silentTokenHelper(authClient, silentRequest) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.SilentIframeClientTokenHelper, silentRequest.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentIframeClientTokenHelper, silentRequest.correlationId);
         // Create auth code request and generate PKCE params
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, silentRequest.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, silentRequest.correlationId);
         const authCodeRequest = await this.initializeAuthorizationCodeRequest(silentRequest);
         // Create authorize request url
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.GetAuthCodeUrl, silentRequest.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.GetAuthCodeUrl, silentRequest.correlationId);
         const navigateUrl = await authClient.getAuthCodeUrl({
             ...silentRequest,
             nativeBroker: NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeMessageHandler, silentRequest.authenticationScheme),
@@ -14368,10 +14361,10 @@ class SilentIframeClient extends StandardInteractionClient {
         // Create silent handler
         const silentHandler = new SilentHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.config.system, this.performanceClient);
         // Get the frame handle for the silent request
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.SilentHandlerInitiateAuthRequest, silentRequest.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.SilentHandlerInitiateAuthRequest, silentRequest.correlationId);
         const msalFrame = await silentHandler.initiateAuthRequest(navigateUrl);
         // Monitor the window for the hash. Return the string value and close the popup when the hash is received. Default timeout is 60 seconds.
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.SilentHandlerMonitorIframeForHash, silentRequest.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.SilentHandlerMonitorIframeForHash, silentRequest.correlationId);
         const hash = await silentHandler.monitorIframeForHash(msalFrame, this.config.system.iframeHashTimeout);
         // Deserialize hash fragment response parameters.
         const serverParams = UrlString.getDeserializedHash(hash);
@@ -14394,7 +14387,7 @@ class SilentIframeClient extends StandardInteractionClient {
             });
         }
         // Handle response from hash string
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.HandleCodeResponseFromHash, silentRequest.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.HandleCodeResponseFromHash, silentRequest.correlationId);
         return silentHandler.handleCodeResponseFromHash(hash, state, authClient.authority, this.networkClient);
     }
 }
@@ -14409,20 +14402,21 @@ class SilentRefreshClient extends StandardInteractionClient {
      * @param request
      */
     async acquireToken(request) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.SilentRefreshClientAcquireToken, request.correlationId);
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.InitializeBaseRequest, request.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentRefreshClientAcquireToken, request.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.InitializeBaseRequest, request.correlationId);
         const silentRequest = {
             ...request,
-            ...(await this.initializeBaseRequest(request)),
+            ...await this.initializeBaseRequest(request, request.account)
         };
-        const acquireTokenMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.SilentRefreshClientAcquireToken, silentRequest.correlationId);
-        const serverTelemetryManager = this.initializeServerTelemetryManager(exports.ApiId.acquireTokenSilent_silentFlow);
+        const acquireTokenMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SilentRefreshClientAcquireToken, silentRequest.correlationId);
+        const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);
         const refreshTokenClient = await this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions);
         this.logger.verbose("Refresh token client created");
         // Send request to renew token. Auth module will throw errors if token cannot be renewed.
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, request.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, request.correlationId);
         return refreshTokenClient
             .acquireTokenByRefreshToken(silentRequest)
+            .then((result) => result)
             .then((result) => {
             acquireTokenMeasurement.endMeasurement({
                 success: true,
@@ -14456,7 +14450,7 @@ class SilentRefreshClient extends StandardInteractionClient {
      */
     async createRefreshTokenClient(serverTelemetryManager, authorityUrl, azureCloudOptions) {
         // Create auth module.
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
         const clientConfig = await this.getClientConfiguration(serverTelemetryManager, authorityUrl, azureCloudOptions);
         return new RefreshTokenClient(clientConfig, this.performanceClient);
     }
@@ -14569,11 +14563,11 @@ class EventHandler {
             const accountInfo = accountEntity.getAccountInfo();
             if (!e.oldValue && e.newValue) {
                 this.logger.info("Account was added to cache in a different window");
-                this.emitEvent(exports.EventType.ACCOUNT_ADDED, undefined, accountInfo);
+                this.emitEvent(EventType.ACCOUNT_ADDED, undefined, accountInfo);
             }
             else if (!e.newValue && e.oldValue) {
                 this.logger.info("Account was removed from cache in a different window");
-                this.emitEvent(exports.EventType.ACCOUNT_REMOVED, undefined, accountInfo);
+                this.emitEvent(EventType.ACCOUNT_REMOVED, undefined, accountInfo);
             }
         }
         catch (e) {
@@ -14780,18 +14774,6 @@ class BrowserStringUtils {
         }
         return aBytes;
     }
-    /**
-     * Converst string to ArrayBuffer
-     * @param dataString
-     */
-    static stringToArrayBuffer(dataString) {
-        const data = new ArrayBuffer(dataString.length);
-        const dataView = new Uint8Array(data);
-        for (let i = 0; i < dataString.length; i++) {
-            dataView[i] = dataString.charCodeAt(i);
-        }
-        return data;
-    }
     /**
      * Converts Uint8Array to a string
      * @param aBytes
@@ -15089,115 +15071,6 @@ class ModernBrowserCrypto {
     }
 }
 
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-class MsrBrowserCrypto {
-    initPrng(entropy) {
-        // Turn into array, as initPrng seems to not always like Uint8Array (even though it should support both)
-        return window.msrCrypto.initPrng([...entropy]);
-    }
-    getRandomValues(dataBuffer) {
-        return window.msrCrypto.getRandomValues(dataBuffer);
-    }
-    async generateKey(algorithm, extractable, keyUsages) {
-        return window.msrCrypto.subtle.generateKey(algorithm, extractable, keyUsages);
-    }
-    async exportKey(key) {
-        return window.msrCrypto.subtle.exportKey(KEY_FORMAT_JWK, key);
-    }
-    async importKey(keyData, algorithm, extractable, keyUsages) {
-        return window.msrCrypto.subtle.importKey(KEY_FORMAT_JWK, keyData, algorithm, extractable, keyUsages);
-    }
-    async sign(algorithm, key, data) {
-        return window.msrCrypto.subtle.sign(algorithm, key, data);
-    }
-    async digest(algorithm, data) {
-        return window.msrCrypto.subtle.digest(algorithm, data);
-    }
-}
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-class MsBrowserCrypto {
-    getRandomValues(dataBuffer) {
-        return window["msCrypto"].getRandomValues(dataBuffer);
-    }
-    async generateKey(algorithm, extractable, keyUsages) {
-        return new Promise((resolve, reject) => {
-            const msGenerateKey = window["msCrypto"].subtle.generateKey(algorithm, extractable, keyUsages);
-            msGenerateKey.addEventListener("complete", (e) => {
-                resolve(e.target.result);
-            });
-            msGenerateKey.addEventListener("error", (error) => {
-                reject(error);
-            });
-        });
-    }
-    async exportKey(key) {
-        return new Promise((resolve, reject) => {
-            const msExportKey = window["msCrypto"].subtle.exportKey(KEY_FORMAT_JWK, key);
-            msExportKey.addEventListener("complete", (e) => {
-                const resultBuffer = e.target.result;
-                const resultString = BrowserStringUtils.utf8ArrToString(new Uint8Array(resultBuffer))
-                    .replace(/\r/g, Constants.EMPTY_STRING)
-                    .replace(/\n/g, Constants.EMPTY_STRING)
-                    .replace(/\t/g, Constants.EMPTY_STRING)
-                    .split(" ")
-                    .join(Constants.EMPTY_STRING)
-                    .replace("\u0000", Constants.EMPTY_STRING);
-                try {
-                    resolve(JSON.parse(resultString));
-                }
-                catch (e) {
-                    reject(e);
-                }
-            });
-            msExportKey.addEventListener("error", (error) => {
-                reject(error);
-            });
-        });
-    }
-    async importKey(keyData, algorithm, extractable, keyUsages) {
-        const keyString = BrowserStringUtils.getSortedObjectString(keyData);
-        const keyBuffer = BrowserStringUtils.stringToArrayBuffer(keyString);
-        return new Promise((resolve, reject) => {
-            const msImportKey = window["msCrypto"].subtle.importKey(KEY_FORMAT_JWK, keyBuffer, algorithm, extractable, keyUsages);
-            msImportKey.addEventListener("complete", (e) => {
-                resolve(e.target.result);
-            });
-            msImportKey.addEventListener("error", (error) => {
-                reject(error);
-            });
-        });
-    }
-    async sign(algorithm, key, data) {
-        return new Promise((resolve, reject) => {
-            const msSign = window["msCrypto"].subtle.sign(algorithm, key, data);
-            msSign.addEventListener("complete", (e) => {
-                resolve(e.target.result);
-            });
-            msSign.addEventListener("error", (error) => {
-                reject(error);
-            });
-        });
-    }
-    async digest(algorithm, data) {
-        return new Promise((resolve, reject) => {
-            const digestOperation = window["msCrypto"].subtle.digest(algorithm, data.buffer);
-            digestOperation.addEventListener("complete", (e) => {
-                resolve(e.target.result);
-            });
-            digestOperation.addEventListener("error", (error) => {
-                reject(error);
-            });
-        });
-    }
-}
-
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -15218,40 +15091,16 @@ const PUBLIC_EXPONENT = new Uint8Array([0x01, 0x00, 0x01]);
  * hashing and encoding. It also has helper functions to validate the availability of specific APIs.
  */
 class BrowserCrypto {
-    constructor(logger, cryptoOptions) {
+    constructor(logger) {
         this.logger = logger;
-        this.cryptoOptions = cryptoOptions;
         if (this.hasBrowserCrypto()) {
             // Use standard modern web crypto if available
             this.logger.verbose("BrowserCrypto: modern crypto interface available");
             this.subtleCrypto = new ModernBrowserCrypto();
         }
-        else if (this.hasIECrypto()) {
-            // For IE11, use msCrypto interface
-            this.logger.verbose("BrowserCrypto: MS crypto interface available");
-            this.subtleCrypto = new MsBrowserCrypto();
-        }
-        else if (this.hasMsrCrypto() && this.cryptoOptions?.useMsrCrypto) {
-            // For other browsers, use MSR Crypto if found
-            this.logger.verbose("BrowserCrypto: MSR crypto interface available");
-            this.subtleCrypto = new MsrBrowserCrypto();
-        }
         else {
-            if (this.hasMsrCrypto()) {
-                this.logger.info("BrowserCrypto: MSR Crypto interface available but system.cryptoOptions.useMsrCrypto not enabled");
-            }
-            this.logger.error("BrowserCrypto: No crypto interfaces available.");
-            throw BrowserAuthError.createCryptoNotAvailableError("Browser crypto, msCrypto, or msrCrypto interfaces not available.");
-        }
-        // Mainly needed for MSR Crypto: https://github.com/microsoft/MSR-JavaScript-Crypto#random-number-generator-prng
-        if (this.subtleCrypto.initPrng) {
-            this.logger.verbose("BrowserCrypto: Interface requires entropy");
-            if (!this.cryptoOptions?.entropy) {
-                this.logger.error("BrowserCrypto: Interface requires entropy but none provided.");
-                throw BrowserConfigurationAuthError.createEntropyNotProvided();
-            }
-            this.logger.verbose("BrowserCrypto: Entropy provided");
-            this.subtleCrypto.initPrng(this.cryptoOptions.entropy);
+            this.logger.error("BrowserCrypto: crypto interface is unavailable");
+            throw BrowserAuthError.createCryptoNotAvailableError("Browser crypto interface is not available.");
         }
         this.keygenAlgorithmOptions = {
             name: PKCS1_V15_KEYGEN_ALG,
@@ -15260,24 +15109,12 @@ class BrowserCrypto {
             publicExponent: PUBLIC_EXPONENT,
         };
     }
-    /**
-     * Check whether IE crypto or other browser cryptography is available.
-     */
-    hasIECrypto() {
-        return "msCrypto" in window;
-    }
     /**
      * Check whether browser crypto is available.
      */
     hasBrowserCrypto() {
         return "crypto" in window;
     }
-    /**
-     * Check whether MSR crypto polyfill is available
-     */
-    hasMsrCrypto() {
-        return "msrCrypto" in window;
-    }
     /**
      * Returns a sha-256 hash of the given dataString as an ArrayBuffer.
      * @param dataString
@@ -15305,7 +15142,6 @@ class BrowserCrypto {
     /**
      * Export key as Json Web Key (JWK)
      * @param key
-     * @param format
      */
     async exportJwk(key) {
         return this.subtleCrypto.exportKey(key);
@@ -15313,7 +15149,6 @@ class BrowserCrypto {
     /**
      * Imports key as Json Web Key (JWK), can set extractable and usages.
      * @param key
-     * @param format
      * @param extractable
      * @param usages
      */
@@ -15658,11 +15493,10 @@ class AsyncMemoryStorage {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-var CryptoKeyStoreNames;
-(function (CryptoKeyStoreNames) {
-    CryptoKeyStoreNames["asymmetricKeys"] = "asymmetricKeys";
-    CryptoKeyStoreNames["symmetricKeys"] = "symmetricKeys";
-})(CryptoKeyStoreNames || (CryptoKeyStoreNames = {}));
+const CryptoKeyStoreNames = {
+    asymmetricKeys: "asymmetricKeys",
+    symmetricKeys: "symmetricKeys",
+};
 /**
  * MSAL CryptoKeyStore DB Version 2
  */
@@ -15705,10 +15539,10 @@ class CryptoKeyStore {
  * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).
  */
 class CryptoOps {
-    constructor(logger, performanceClient, cryptoConfig) {
+    constructor(logger, performanceClient) {
         this.logger = logger;
         // Browser crypto needs to be validated first before any other classes can be set.
-        this.browserCrypto = new BrowserCrypto(this.logger, cryptoConfig);
+        this.browserCrypto = new BrowserCrypto(this.logger);
         this.b64Encode = new Base64Encode();
         this.b64Decode = new Base64Decode();
         this.guidGenerator = new GuidGenerator(this.browserCrypto);
@@ -15748,7 +15582,7 @@ class CryptoOps {
      * @param request
      */
     async getPublicKeyThumbprint(request) {
-        const publicKeyThumbMeasurement = this.performanceClient?.startMeasurement(exports.PerformanceEvents.CryptoOptsGetPublicKeyThumbprint, request.correlationId);
+        const publicKeyThumbMeasurement = this.performanceClient?.startMeasurement(PerformanceEvents.CryptoOptsGetPublicKeyThumbprint, request.correlationId);
         // Generate Keypair
         const keyPair = await this.browserCrypto.generateKeyPair(CryptoOps.EXTRACTABLE, CryptoOps.POP_KEY_USAGES);
         // Generate Thumbprint for Public Key
@@ -15799,7 +15633,7 @@ class CryptoOps {
      * @param kid
      */
     async signJwt(payload, kid, correlationId) {
-        const signJwtMeasurement = this.performanceClient?.startMeasurement(exports.PerformanceEvents.CryptoOptsSignJwt, correlationId);
+        const signJwtMeasurement = this.performanceClient?.startMeasurement(PerformanceEvents.CryptoOptsSignJwt, correlationId);
         const cachedKeyPair = await this.cache.asymmetricKeys.getItem(kid);
         if (!cachedKeyPair) {
             throw BrowserAuthError.createSigningKeyNotFoundInStorageError(kid);
@@ -15823,7 +15657,7 @@ class CryptoOps {
         // Form token string
         const tokenString = `${encodedShrHeader}.${encodedPayload}`;
         // Sign token
-        const tokenBuffer = BrowserStringUtils.stringToArrayBuffer(tokenString);
+        const tokenBuffer = BrowserStringUtils.stringToUtf8Arr(tokenString);
         const signatureBuffer = await this.browserCrypto.sign(cachedKeyPair.privateKey, tokenBuffer);
         const encodedSignature = this.b64Encode.urlEncodeArr(new Uint8Array(signatureBuffer));
         const signedJwt = `${tokenString}.${encodedSignature}`;
@@ -15945,9 +15779,9 @@ class BrowserPerformanceMeasurement {
  * Licensed under the MIT License.
  */
 class BrowserPerformanceClient extends PerformanceClient {
-    constructor(clientId, authority, logger, libraryName, libraryVersion, applicationTelemetry, cryptoOptions) {
+    constructor(clientId, authority, logger, libraryName, libraryVersion, applicationTelemetry) {
         super(clientId, authority, logger, libraryName, libraryVersion, applicationTelemetry);
-        this.browserCrypto = new BrowserCrypto(this.logger, cryptoOptions);
+        this.browserCrypto = new BrowserCrypto(this.logger);
         this.guidGenerator = new GuidGenerator(this.browserCrypto);
     }
     startPerformanceMeasurement(measureName, correlationId) {
@@ -16076,6 +15910,7 @@ var internals = /*#__PURE__*/Object.freeze({
     BrowserConstants: BrowserConstants,
     BrowserPerformanceClient: BrowserPerformanceClient,
     BrowserPerformanceMeasurement: BrowserPerformanceMeasurement,
+    CacheRecord: CacheRecord,
     CryptoOps: CryptoOps,
     EventHandler: EventHandler,
     NativeAuthError: NativeAuthError,
@@ -16088,7 +15923,7 @@ var internals = /*#__PURE__*/Object.freeze({
     SilentIframeClient: SilentIframeClient,
     SilentRefreshClient: SilentRefreshClient,
     StandardInteractionClient: StandardInteractionClient,
-    get TemporaryCacheKeys () { return TemporaryCacheKeys; }
+    TemporaryCacheKeys: TemporaryCacheKeys
 });
 
 /*
@@ -16464,9 +16299,7 @@ class TokenCache {
             uniqueId: uid,
             tenantId: tid,
             scopes: responseScopes,
-            account: cacheRecord?.account
-                ? cacheRecord.account.getAccountInfo()
-                : null,
+            account: cacheRecord.account.getAccountInfo(),
             idToken: idTokenObj ? idTokenObj.rawToken : Constants.EMPTY_STRING,
             idTokenClaims: idTokenObj ? idTokenObj.claims : {},
             accessToken: accessToken,
@@ -16518,7 +16351,7 @@ class SilentAuthCodeClient extends StandardInteractionClient {
             throw BrowserAuthError.createAuthCodeRequiredError();
         }
         // Create silent request
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest, request.correlationId);
         const silentRequest = await this.initializeAuthorizationRequest(request, exports.InteractionType.Silent);
         this.browserStorage.updateCacheEntries(silentRequest.state, silentRequest.nonce, silentRequest.authority, silentRequest.loginHint || Constants.EMPTY_STRING, silentRequest.account || null);
         const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
@@ -16529,7 +16362,7 @@ class SilentAuthCodeClient extends StandardInteractionClient {
                 code: request.code,
             };
             // Initialize the client
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.StandardInteractionClientGetClientConfiguration, request.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.StandardInteractionClientGetClientConfiguration, request.correlationId);
             const clientConfig = await this.getClientConfiguration(serverTelemetryManager, silentRequest.authority);
             const authClient = new HybridSpaAuthorizationCodeClient(clientConfig);
             this.logger.verbose("Auth code client created");
@@ -16607,11 +16440,11 @@ class StandardController {
         this.hybridAuthCodeResponses = new Map();
         // Initialize performance client
         this.performanceClient = this.isBrowserEnvironment
-            ? new BrowserPerformanceClient(this.config.auth.clientId, this.config.auth.authority, this.logger, name, version, this.config.telemetry.application, this.config.system.cryptoOptions)
+            ? new BrowserPerformanceClient(this.config.auth.clientId, this.config.auth.authority, this.logger, name, version, this.config.telemetry.application)
             : new StubPerformanceClient(this.config.auth.clientId, this.config.auth.authority, this.logger, name, version, this.config.telemetry.application);
         // Initialize the crypto class.
         this.browserCrypto = this.isBrowserEnvironment
-            ? new CryptoOps(this.logger, this.performanceClient, this.config.system.cryptoOptions)
+            ? new CryptoOps(this.logger, this.performanceClient)
             : DEFAULT_CRYPTO_IMPLEMENTATION;
         this.eventHandler = new EventHandler(this.logger, this.browserCrypto);
         // Initialize the browser storage class.
@@ -16620,11 +16453,12 @@ class StandardController {
             : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger);
         // initialize in memory storage for native flows
         const nativeCacheOptions = {
-            cacheLocation: exports.BrowserCacheLocation.MemoryStorage,
-            temporaryCacheLocation: exports.BrowserCacheLocation.MemoryStorage,
+            cacheLocation: BrowserCacheLocation.MemoryStorage,
+            temporaryCacheLocation: BrowserCacheLocation.MemoryStorage,
             storeAuthStateInCookie: false,
             secureCookies: false,
             cacheMigrationEnabled: false,
+            claimsBasedCachingEnabled: false,
         };
         this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger);
         // Initialize the token cache
@@ -16660,8 +16494,8 @@ class StandardController {
             return;
         }
         const allowNativeBroker = this.config.system.allowNativeBroker;
-        const initMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.InitializeClientApplication);
-        this.eventHandler.emitEvent(exports.EventType.INITIALIZE_START);
+        const initMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.InitializeClientApplication);
+        this.eventHandler.emitEvent(EventType.INITIALIZE_START);
         if (allowNativeBroker) {
             try {
                 this.nativeExtensionProvider =
@@ -16672,7 +16506,7 @@ class StandardController {
             }
         }
         this.initialized = true;
-        this.eventHandler.emitEvent(exports.EventType.INITIALIZE_END);
+        this.eventHandler.emitEvent(EventType.INITIALIZE_END);
         initMeasurement.endMeasurement({ allowNativeBroker, success: true });
     }
     // #region Redirect Flow
@@ -16697,7 +16531,7 @@ class StandardController {
             const redirectResponseKey = hash || Constants.EMPTY_STRING;
             let response = this.redirectResponse.get(redirectResponseKey);
             if (typeof response === "undefined") {
-                this.eventHandler.emitEvent(exports.EventType.HANDLE_REDIRECT_START, exports.InteractionType.Redirect);
+                this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, exports.InteractionType.Redirect);
                 this.logger.verbose("handleRedirectPromise has been called for the first time, storing the promise");
                 const request = this.browserStorage.getCachedNativeRequest();
                 let redirectResponse;
@@ -16706,7 +16540,7 @@ class StandardController {
                     this.nativeExtensionProvider &&
                     !hash) {
                     this.logger.trace("handleRedirectPromise - acquiring token from native platform");
-                    const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, exports.ApiId.handleRedirectPromise, this.performanceClient, this.nativeExtensionProvider, request.accountId, this.nativeInternalStorage, request.correlationId);
+                    const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.handleRedirectPromise, this.performanceClient, this.nativeExtensionProvider, request.accountId, this.nativeInternalStorage, request.correlationId);
                     redirectResponse = nativeClient.handleRedirectPromise();
                 }
                 else {
@@ -16723,26 +16557,26 @@ class StandardController {
                         const isLoggingIn = loggedInAccounts.length <
                             this.getAllAccounts().length;
                         if (isLoggingIn) {
-                            this.eventHandler.emitEvent(exports.EventType.LOGIN_SUCCESS, exports.InteractionType.Redirect, result);
+                            this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, exports.InteractionType.Redirect, result);
                             this.logger.verbose("handleRedirectResponse returned result, login success");
                         }
                         else {
-                            this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Redirect, result);
+                            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Redirect, result);
                             this.logger.verbose("handleRedirectResponse returned result, acquire token success");
                         }
                     }
-                    this.eventHandler.emitEvent(exports.EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
+                    this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
                     return result;
                 })
                     .catch((e) => {
                     // Emit login event if there is an account
                     if (loggedInAccounts.length > 0) {
-                        this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Redirect, null, e);
+                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Redirect, null, e);
                     }
                     else {
-                        this.eventHandler.emitEvent(exports.EventType.LOGIN_FAILURE, exports.InteractionType.Redirect, null, e);
+                        this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, exports.InteractionType.Redirect, null, e);
                     }
-                    this.eventHandler.emitEvent(exports.EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
+                    this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
                     throw e;
                 });
                 this.redirectResponse.set(redirectResponseKey, response);
@@ -16772,14 +16606,14 @@ class StandardController {
         // If logged in, emit acquire token events
         const isLoggedIn = this.getAllAccounts().length > 0;
         if (isLoggedIn) {
-            this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Redirect, request);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Redirect, request);
         }
         else {
-            this.eventHandler.emitEvent(exports.EventType.LOGIN_START, exports.InteractionType.Redirect, request);
+            this.eventHandler.emitEvent(EventType.LOGIN_START, exports.InteractionType.Redirect, request);
         }
         let result;
         if (this.nativeExtensionProvider && this.canUseNative(request)) {
-            const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, exports.ApiId.acquireTokenRedirect, this.performanceClient, this.nativeExtensionProvider, this.getNativeAccountId(request), this.nativeInternalStorage, request.correlationId);
+            const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenRedirect, this.performanceClient, this.nativeExtensionProvider, this.getNativeAccountId(request), this.nativeInternalStorage, request.correlationId);
             result = nativeClient
                 .acquireTokenRedirect(request)
                 .catch((e) => {
@@ -16804,10 +16638,10 @@ class StandardController {
         return result.catch((e) => {
             // If logged in, emit acquire token events
             if (isLoggedIn) {
-                this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Redirect, null, e);
+                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Redirect, null, e);
             }
             else {
-                this.eventHandler.emitEvent(exports.EventType.LOGIN_FAILURE, exports.InteractionType.Redirect, null, e);
+                this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, exports.InteractionType.Redirect, null, e);
             }
             throw e;
         });
@@ -16823,7 +16657,7 @@ class StandardController {
      */
     acquireTokenPopup(request) {
         const correlationId = this.getRequestCorrelationId(request);
-        const atPopupMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.AcquireTokenPopup, correlationId);
+        const atPopupMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPopup, correlationId);
         try {
             this.logger.verbose("acquireTokenPopup called", correlationId);
             this.preflightBrowserEnvironmentCheck(exports.InteractionType.Popup);
@@ -16835,14 +16669,14 @@ class StandardController {
         // If logged in, emit acquire token events
         const loggedInAccounts = this.getAllAccounts();
         if (loggedInAccounts.length > 0) {
-            this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Popup, request);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Popup, request);
         }
         else {
-            this.eventHandler.emitEvent(exports.EventType.LOGIN_START, exports.InteractionType.Popup, request);
+            this.eventHandler.emitEvent(EventType.LOGIN_START, exports.InteractionType.Popup, request);
         }
         let result;
         if (this.canUseNative(request)) {
-            result = this.acquireTokenNative(request, exports.ApiId.acquireTokenPopup)
+            result = this.acquireTokenNative(request, ApiId.acquireTokenPopup)
                 .then((response) => {
                 this.browserStorage.setInteractionInProgress(false);
                 atPopupMeasurement.endMeasurement({
@@ -16878,10 +16712,10 @@ class StandardController {
              */
             const isLoggingIn = loggedInAccounts.length < this.getAllAccounts().length;
             if (isLoggingIn) {
-                this.eventHandler.emitEvent(exports.EventType.LOGIN_SUCCESS, exports.InteractionType.Popup, result);
+                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, exports.InteractionType.Popup, result);
             }
             else {
-                this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Popup, result);
+                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Popup, result);
             }
             atPopupMeasurement.addStaticFields({
                 accessTokenSize: result.accessToken.length,
@@ -16895,10 +16729,10 @@ class StandardController {
         })
             .catch((e) => {
             if (loggedInAccounts.length > 0) {
-                this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Popup, null, e);
+                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Popup, null, e);
             }
             else {
-                this.eventHandler.emitEvent(exports.EventType.LOGIN_FAILURE, exports.InteractionType.Popup, null, e);
+                this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, exports.InteractionType.Popup, null, e);
             }
             atPopupMeasurement.endMeasurement({
                 errorCode: e.errorCode,
@@ -16946,16 +16780,16 @@ class StandardController {
             correlationId: correlationId,
         };
         this.preflightBrowserEnvironmentCheck(exports.InteractionType.Silent);
-        this.ssoSilentMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.SsoSilent, correlationId);
+        this.ssoSilentMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SsoSilent, correlationId);
         this.ssoSilentMeasurement?.increment({
             visibilityChangeCount: 0,
         });
         document.addEventListener("visibilitychange", this.trackPageVisibilityWithMeasurement);
         this.logger.verbose("ssoSilent called", correlationId);
-        this.eventHandler.emitEvent(exports.EventType.SSO_SILENT_START, exports.InteractionType.Silent, validRequest);
+        this.eventHandler.emitEvent(EventType.SSO_SILENT_START, exports.InteractionType.Silent, validRequest);
         let result;
         if (this.canUseNative(validRequest)) {
-            result = this.acquireTokenNative(validRequest, exports.ApiId.ssoSilent).catch((e) => {
+            result = this.acquireTokenNative(validRequest, ApiId.ssoSilent).catch((e) => {
                 // If native token acquisition fails for availability reasons fallback to standard flow
                 if (e instanceof NativeAuthError && e.isFatal()) {
                     this.nativeExtensionProvider = undefined; // If extension gets uninstalled during session prevent future requests from continuing to attempt
@@ -16971,7 +16805,7 @@ class StandardController {
         }
         return result
             .then((response) => {
-            this.eventHandler.emitEvent(exports.EventType.SSO_SILENT_SUCCESS, exports.InteractionType.Silent, response);
+            this.eventHandler.emitEvent(EventType.SSO_SILENT_SUCCESS, exports.InteractionType.Silent, response);
             this.ssoSilentMeasurement?.addStaticFields({
                 accessTokenSize: response.accessToken.length,
                 idTokenSize: response.idToken.length,
@@ -16984,7 +16818,7 @@ class StandardController {
             return response;
         })
             .catch((e) => {
-            this.eventHandler.emitEvent(exports.EventType.SSO_SILENT_FAILURE, exports.InteractionType.Silent, null, e);
+            this.eventHandler.emitEvent(EventType.SSO_SILENT_FAILURE, exports.InteractionType.Silent, null, e);
             this.ssoSilentMeasurement?.endMeasurement({
                 errorCode: e.errorCode,
                 subErrorCode: e.subError,
@@ -17010,8 +16844,8 @@ class StandardController {
         const correlationId = this.getRequestCorrelationId(request);
         this.preflightBrowserEnvironmentCheck(exports.InteractionType.Silent);
         this.logger.trace("acquireTokenByCode called", correlationId);
-        this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_BY_CODE_START, exports.InteractionType.Silent, request);
-        const atbcMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.AcquireTokenByCode, request.correlationId);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_START, exports.InteractionType.Silent, request);
+        const atbcMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenByCode, request.correlationId);
         try {
             if (request.code && request.nativeAccountId) {
                 // Throw error in case server returns both spa_code and spa_accountid in exchange for auth code.
@@ -17027,7 +16861,7 @@ class StandardController {
                         correlationId,
                     })
                         .then((result) => {
-                        this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_BY_CODE_SUCCESS, exports.InteractionType.Silent, result);
+                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_SUCCESS, exports.InteractionType.Silent, result);
                         this.hybridAuthCodeResponses.delete(hybridAuthCode);
                         atbcMeasurement.addStaticFields({
                             accessTokenSize: result.accessToken.length,
@@ -17042,7 +16876,7 @@ class StandardController {
                     })
                         .catch((error) => {
                         this.hybridAuthCodeResponses.delete(hybridAuthCode);
-                        this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, exports.InteractionType.Silent, null, error);
+                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, exports.InteractionType.Silent, null, error);
                         atbcMeasurement.endMeasurement({
                             errorCode: error.errorCode,
                             subErrorCode: error.subError,
@@ -17060,7 +16894,7 @@ class StandardController {
             }
             else if (request.nativeAccountId) {
                 if (this.canUseNative(request, request.nativeAccountId)) {
-                    return this.acquireTokenNative(request, exports.ApiId.acquireTokenByCode, request.nativeAccountId).catch((e) => {
+                    return this.acquireTokenNative(request, ApiId.acquireTokenByCode, request.nativeAccountId).catch((e) => {
                         // If native token acquisition fails for availability reasons fallback to standard flow
                         if (e instanceof NativeAuthError && e.isFatal()) {
                             this.nativeExtensionProvider = undefined; // If extension gets uninstalled during session prevent future requests from continuing to attempt
@@ -17077,7 +16911,7 @@ class StandardController {
             }
         }
         catch (e) {
-            this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, exports.InteractionType.Silent, null, e);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, exports.InteractionType.Silent, null, e);
             atbcMeasurement.endMeasurement({
                 errorCode: (e instanceof AuthError && e.errorCode) || undefined,
                 subErrorCode: (e instanceof AuthError && e.subError) || undefined,
@@ -17094,7 +16928,7 @@ class StandardController {
     async acquireTokenByCodeAsync(request) {
         this.logger.trace("acquireTokenByCodeAsync called", request.correlationId);
         this.acquireTokenByCodeAsyncMeasurement =
-            this.performanceClient.startMeasurement(exports.PerformanceEvents.AcquireTokenByCodeAsync, request.correlationId);
+            this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenByCodeAsync, request.correlationId);
         this.acquireTokenByCodeAsyncMeasurement?.increment({
             visibilityChangeCount: 0,
         });
@@ -17132,11 +16966,11 @@ class StandardController {
      * @returns A promise that, when resolved, returns the access token
      */
     async acquireTokenFromCache(silentCacheClient, commonRequest, silentRequest) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.AcquireTokenFromCache, commonRequest.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenFromCache, commonRequest.correlationId);
         switch (silentRequest.cacheLookupPolicy) {
-            case exports.CacheLookupPolicy.Default:
-            case exports.CacheLookupPolicy.AccessToken:
-            case exports.CacheLookupPolicy.AccessTokenAndRefreshToken:
+            case CacheLookupPolicy.Default:
+            case CacheLookupPolicy.AccessToken:
+            case CacheLookupPolicy.AccessTokenAndRefreshToken:
                 return silentCacheClient.acquireToken(commonRequest);
             default:
                 throw ClientAuthError.createRefreshRequiredError();
@@ -17149,14 +16983,14 @@ class StandardController {
      * @returns A promise that, when resolved, returns the access token
      */
     async acquireTokenByRefreshToken(commonRequest, silentRequest) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.AcquireTokenByRefreshToken, commonRequest.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenByRefreshToken, commonRequest.correlationId);
         switch (silentRequest.cacheLookupPolicy) {
-            case exports.CacheLookupPolicy.Default:
-            case exports.CacheLookupPolicy.AccessTokenAndRefreshToken:
-            case exports.CacheLookupPolicy.RefreshToken:
-            case exports.CacheLookupPolicy.RefreshTokenAndNetwork:
+            case CacheLookupPolicy.Default:
+            case CacheLookupPolicy.AccessTokenAndRefreshToken:
+            case CacheLookupPolicy.RefreshToken:
+            case CacheLookupPolicy.RefreshTokenAndNetwork:
                 const silentRefreshClient = this.createSilentRefreshClient(commonRequest.correlationId);
-                this.performanceClient.setPreQueueTime(exports.PerformanceEvents.SilentRefreshClientAcquireToken, commonRequest.correlationId);
+                this.performanceClient.setPreQueueTime(PerformanceEvents.SilentRefreshClientAcquireToken, commonRequest.correlationId);
                 return silentRefreshClient.acquireToken(commonRequest);
             default:
                 throw ClientAuthError.createRefreshRequiredError();
@@ -17168,9 +17002,9 @@ class StandardController {
      * @returns A promise that, when resolved, returns the access token
      */
     async acquireTokenBySilentIframe(request) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.AcquireTokenBySilentIframe, request.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenBySilentIframe, request.correlationId);
         const silentIframeClient = this.createSilentIframeClient(request.correlationId);
-        this.performanceClient.setPreQueueTime(exports.PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);
+        this.performanceClient.setPreQueueTime(PerformanceEvents.SilentIframeClientAcquireToken, request.correlationId);
         return silentIframeClient.acquireToken(request);
     }
     // #endregion
@@ -17328,9 +17162,9 @@ class StandardController {
      *
      * @protected
      * @param {InteractionType} interactionType What kind of interaction is being used
-     * @param {boolean} [setInteractionInProgress=true] Whether to set interaction in progress temp cache flag
+     * @param {boolean} [isAppEmbedded=false] Whether to set interaction in progress temp cache flag
      */
-    preflightBrowserEnvironmentCheck(interactionType, setInteractionInProgress = true) {
+    preflightBrowserEnvironmentCheck(interactionType, isAppEmbedded = false) {
         this.logger.verbose("preflightBrowserEnvironmentCheck started");
         // Block request if not in browser environment
         BrowserUtils.blockNonBrowserEnvironment(this.isBrowserEnvironment);
@@ -17340,18 +17174,23 @@ class StandardController {
         BrowserUtils.blockReloadInHiddenIframes();
         // Block redirectUri opened in a popup from calling MSAL APIs
         BrowserUtils.blockAcquireTokenInPopups();
-        // Block token acquisition before initialize has been called if native brokering is enabled
-        BrowserUtils.blockNativeBrokerCalledBeforeInitialized(this.config.system.allowNativeBroker, this.initialized);
+        /*
+         * Block token acquisition before initialize has been called if native brokering is enabled in top-frame.
+         * Skip check if application is embedded.
+         */
+        if (!isAppEmbedded) {
+            BrowserUtils.blockNativeBrokerCalledBeforeInitialized(this.config.system.allowNativeBroker, this.initialized);
+        }
         // Block redirects if memory storage is enabled but storeAuthStateInCookie is not
         if (interactionType === exports.InteractionType.Redirect &&
             this.config.cache.cacheLocation ===
-                exports.BrowserCacheLocation.MemoryStorage &&
+                BrowserCacheLocation.MemoryStorage &&
             !this.config.cache.storeAuthStateInCookie) {
             throw BrowserConfigurationAuthError.createInMemoryRedirectUnavailableError();
         }
         if (interactionType === exports.InteractionType.Redirect ||
             interactionType === exports.InteractionType.Popup) {
-            this.preflightInteractiveRequest(setInteractionInProgress);
+            this.preflightInteractiveRequest(!isAppEmbedded);
         }
     }
     /**
@@ -17439,7 +17278,7 @@ class StandardController {
      * @param correlationId
      */
     createSilentIframeClient(correlationId) {
-        return new SilentIframeClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, exports.ApiId.ssoSilent, this.performanceClient, this.nativeInternalStorage, this.nativeExtensionProvider, correlationId);
+        return new SilentIframeClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.ssoSilent, this.performanceClient, this.nativeInternalStorage, this.nativeExtensionProvider, correlationId);
     }
     /**
      * Returns new instance of the Silent Cache Interaction Client
@@ -17457,7 +17296,7 @@ class StandardController {
      * Returns new instance of the Silent AuthCode Interaction Client
      */
     createSilentAuthCodeClient(correlationId) {
-        return new SilentAuthCodeClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, exports.ApiId.acquireTokenByCode, this.performanceClient, this.nativeExtensionProvider, correlationId);
+        return new SilentAuthCodeClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.acquireTokenByCode, this.performanceClient, this.nativeExtensionProvider, correlationId);
     }
     /**
      * Adds event callbacks to array
@@ -17666,7 +17505,7 @@ class StandardController {
      */
     async acquireTokenSilent(request) {
         const correlationId = this.getRequestCorrelationId(request);
-        const atsMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.AcquireTokenSilent, correlationId);
+        const atsMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenSilent, correlationId);
         atsMeasurement.addStaticFields({
             cacheLookupPolicy: request.cacheLookupPolicy,
         });
@@ -17692,7 +17531,7 @@ class StandardController {
         const cachedResponse = this.activeSilentTokenRequests.get(silentRequestKey);
         if (typeof cachedResponse === "undefined") {
             this.logger.verbose("acquireTokenSilent called for the first time, storing active request", correlationId);
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.AcquireTokenSilentAsync, correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.AcquireTokenSilentAsync, correlationId);
             const response = this.acquireTokenSilentAsync({
                 ...request,
                 correlationId,
@@ -17738,9 +17577,9 @@ class StandardController {
      * @returns {Promise.<AuthenticationResult>} - a promise that is fulfilled when this function has completed, or rejected if an error was raised. Returns the {@link AuthResponse}
      */
     async acquireTokenSilentAsync(request, account) {
-        this.performanceClient.addQueueMeasurement(exports.PerformanceEvents.AcquireTokenSilentAsync, request.correlationId);
-        this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Silent, request);
-        this.atsAsyncMeasurement = this.performanceClient.startMeasurement(exports.PerformanceEvents.AcquireTokenSilentAsync, request.correlationId);
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenSilentAsync, request.correlationId);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Silent, request);
+        this.atsAsyncMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenSilentAsync, request.correlationId);
         this.atsAsyncMeasurement?.increment({
             visibilityChangeCount: 0,
         });
@@ -17753,7 +17592,7 @@ class StandardController {
                 ...request,
                 account,
             };
-            result = this.acquireTokenNative(silentRequest, exports.ApiId.acquireTokenSilent_silentFlow).catch(async (e) => {
+            result = this.acquireTokenNative(silentRequest, ApiId.acquireTokenSilent_silentFlow).catch(async (e) => {
                 // If native token acquisition fails for availability reasons fallback to web flow
                 if (e instanceof NativeAuthError && e.isFatal()) {
                     this.logger.verbose("acquireTokenSilent - native platform unavailable, falling back to web flow");
@@ -17768,23 +17607,23 @@ class StandardController {
         else {
             this.logger.verbose("acquireTokenSilent - attempting to acquire token from web flow");
             const silentCacheClient = this.createSilentCacheClient(request.correlationId);
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.InitializeSilentRequest, request.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.InitializeSilentRequest, request.correlationId);
             const silentRequest = await silentCacheClient.initializeSilentRequest(request, account);
             const requestWithCLP = {
                 ...request,
                 // set the request's CacheLookupPolicy to Default if it was not optionally passed in
-                cacheLookupPolicy: request.cacheLookupPolicy || exports.CacheLookupPolicy.Default,
+                cacheLookupPolicy: request.cacheLookupPolicy || CacheLookupPolicy.Default,
             };
-            this.performanceClient.setPreQueueTime(exports.PerformanceEvents.AcquireTokenFromCache, silentRequest.correlationId);
+            this.performanceClient.setPreQueueTime(PerformanceEvents.AcquireTokenFromCache, silentRequest.correlationId);
             result = this.acquireTokenFromCache(silentCacheClient, silentRequest, requestWithCLP).catch((cacheError) => {
                 if (requestWithCLP.cacheLookupPolicy ===
-                    exports.CacheLookupPolicy.AccessToken) {
+                    CacheLookupPolicy.AccessToken) {
                     throw cacheError;
                 }
                 // block the reload if it occurred inside a hidden iframe
                 BrowserUtils.blockReloadInHiddenIframes();
-                this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_NETWORK_START, exports.InteractionType.Silent, silentRequest);
-                this.performanceClient.setPreQueueTime(exports.PerformanceEvents.AcquireTokenByRefreshToken, silentRequest.correlationId);
+                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_NETWORK_START, exports.InteractionType.Silent, silentRequest);
+                this.performanceClient.setPreQueueTime(PerformanceEvents.AcquireTokenByRefreshToken, silentRequest.correlationId);
                 return this.acquireTokenByRefreshToken(silentRequest, requestWithCLP).catch((refreshTokenError) => {
                     const isServerError = refreshTokenError instanceof ServerError;
                     const isInteractionRequiredError = refreshTokenError instanceof
@@ -17795,22 +17634,22 @@ class StandardController {
                         !isInvalidGrantError ||
                         isInteractionRequiredError ||
                         requestWithCLP.cacheLookupPolicy ===
-                            exports.CacheLookupPolicy.AccessTokenAndRefreshToken ||
+                            CacheLookupPolicy.AccessTokenAndRefreshToken ||
                         requestWithCLP.cacheLookupPolicy ===
-                            exports.CacheLookupPolicy.RefreshToken) &&
+                            CacheLookupPolicy.RefreshToken) &&
                         requestWithCLP.cacheLookupPolicy !==
-                            exports.CacheLookupPolicy.Skip) {
+                            CacheLookupPolicy.Skip) {
                         throw refreshTokenError;
                     }
                     this.logger.verbose("Refresh token expired/invalid or CacheLookupPolicy is set to Skip, attempting acquire token by iframe.", request.correlationId);
-                    this.performanceClient.setPreQueueTime(exports.PerformanceEvents.AcquireTokenBySilentIframe, silentRequest.correlationId);
+                    this.performanceClient.setPreQueueTime(PerformanceEvents.AcquireTokenBySilentIframe, silentRequest.correlationId);
                     return this.acquireTokenBySilentIframe(silentRequest);
                 });
             });
         }
         return result
             .then((response) => {
-            this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, response);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, response);
             this.atsAsyncMeasurement?.endMeasurement({
                 success: true,
                 fromCache: response.fromCache,
@@ -17820,7 +17659,7 @@ class StandardController {
             return response;
         })
             .catch((tokenRenewalError) => {
-            this.eventHandler.emitEvent(exports.EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, tokenRenewalError);
+            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, tokenRenewalError);
             this.atsAsyncMeasurement?.endMeasurement({
                 errorCode: tokenRenewalError.errorCode,
                 subErrorCode: tokenRenewalError.subError,
@@ -18256,55 +18095,56 @@ class EventMessageUtils {
      */
     static getInteractionStatusFromEvent(message, currentStatus) {
         switch (message.eventType) {
-            case exports.EventType.LOGIN_START:
-                return exports.InteractionStatus.Login;
-            case exports.EventType.SSO_SILENT_START:
-                return exports.InteractionStatus.SsoSilent;
-            case exports.EventType.ACQUIRE_TOKEN_START:
+            case EventType.LOGIN_START:
+                return InteractionStatus.Login;
+            case EventType.SSO_SILENT_START:
+                return InteractionStatus.SsoSilent;
+            case EventType.ACQUIRE_TOKEN_START:
                 if (message.interactionType === exports.InteractionType.Redirect ||
                     message.interactionType === exports.InteractionType.Popup) {
-                    return exports.InteractionStatus.AcquireToken;
+                    return InteractionStatus.AcquireToken;
                 }
                 break;
-            case exports.EventType.HANDLE_REDIRECT_START:
-                return exports.InteractionStatus.HandleRedirect;
-            case exports.EventType.LOGOUT_START:
-                return exports.InteractionStatus.Logout;
-            case exports.EventType.SSO_SILENT_SUCCESS:
-            case exports.EventType.SSO_SILENT_FAILURE:
+            case EventType.HANDLE_REDIRECT_START:
+                return InteractionStatus.HandleRedirect;
+            case EventType.LOGOUT_START:
+                return InteractionStatus.Logout;
+            case EventType.SSO_SILENT_SUCCESS:
+            case EventType.SSO_SILENT_FAILURE:
                 if (currentStatus &&
-                    currentStatus !== exports.InteractionStatus.SsoSilent) {
+                    currentStatus !== InteractionStatus.SsoSilent) {
                     // Prevent this event from clearing any status other than ssoSilent
                     break;
                 }
-                return exports.InteractionStatus.None;
-            case exports.EventType.LOGOUT_END:
+                return InteractionStatus.None;
+            case EventType.LOGOUT_END:
                 if (currentStatus &&
-                    currentStatus !== exports.InteractionStatus.Logout) {
+                    currentStatus !== InteractionStatus.Logout) {
                     // Prevent this event from clearing any status other than logout
                     break;
                 }
-                return exports.InteractionStatus.None;
-            case exports.EventType.HANDLE_REDIRECT_END:
+                return InteractionStatus.None;
+            case EventType.HANDLE_REDIRECT_END:
                 if (currentStatus &&
-                    currentStatus !== exports.InteractionStatus.HandleRedirect) {
+                    currentStatus !== InteractionStatus.HandleRedirect) {
                     // Prevent this event from clearing any status other than handleRedirect
                     break;
                 }
-                return exports.InteractionStatus.None;
-            case exports.EventType.LOGIN_SUCCESS:
-            case exports.EventType.LOGIN_FAILURE:
-            case exports.EventType.ACQUIRE_TOKEN_SUCCESS:
-            case exports.EventType.ACQUIRE_TOKEN_FAILURE:
+                return InteractionStatus.None;
+            case EventType.LOGIN_SUCCESS:
+            case EventType.LOGIN_FAILURE:
+            case EventType.ACQUIRE_TOKEN_SUCCESS:
+            case EventType.ACQUIRE_TOKEN_FAILURE:
+            case EventType.RESTORE_FROM_BFCACHE:
                 if (message.interactionType === exports.InteractionType.Redirect ||
                     message.interactionType === exports.InteractionType.Popup) {
                     if (currentStatus &&
-                        currentStatus !== exports.InteractionStatus.Login &&
-                        currentStatus !== exports.InteractionStatus.AcquireToken) {
+                        currentStatus !== InteractionStatus.Login &&
+                        currentStatus !== InteractionStatus.AcquireToken) {
                         // Prevent this event from clearing any status other than login or acquireToken
                         break;
                     }
-                    return exports.InteractionStatus.None;
+                    return InteractionStatus.None;
                 }
                 break;
         }
@@ -18353,30 +18193,41 @@ class SignedHttpRequest {
 }
 
 exports.AccountEntity = AccountEntity;
+exports.ApiId = ApiId;
 exports.AuthError = AuthError;
 exports.AuthErrorMessage = AuthErrorMessage;
 exports.AuthenticationHeaderParser = AuthenticationHeaderParser;
+exports.AuthenticationScheme = AuthenticationScheme;
+exports.AzureCloudInstance = AzureCloudInstance;
 exports.BrowserAuthError = BrowserAuthError;
 exports.BrowserAuthErrorMessage = BrowserAuthErrorMessage;
+exports.BrowserCacheLocation = BrowserCacheLocation;
 exports.BrowserConfigurationAuthError = BrowserConfigurationAuthError;
 exports.BrowserConfigurationAuthErrorMessage = BrowserConfigurationAuthErrorMessage;
 exports.BrowserUtils = BrowserUtils;
+exports.CacheLookupPolicy = CacheLookupPolicy;
 exports.ClientAuthError = ClientAuthError;
 exports.ClientAuthErrorMessage = ClientAuthErrorMessage;
 exports.ClientConfigurationError = ClientConfigurationError;
 exports.ClientConfigurationErrorMessage = ClientConfigurationErrorMessage;
 exports.DEFAULT_IFRAME_TIMEOUT_MS = DEFAULT_IFRAME_TIMEOUT_MS;
 exports.EventMessageUtils = EventMessageUtils;
+exports.EventType = EventType;
 exports.InteractionRequiredAuthError = InteractionRequiredAuthError;
 exports.InteractionRequiredAuthErrorMessage = InteractionRequiredAuthErrorMessage;
+exports.InteractionStatus = InteractionStatus;
 exports.Logger = Logger;
 exports.NavigationClient = NavigationClient;
 exports.OIDC_DEFAULT_SCOPES = OIDC_DEFAULT_SCOPES;
+exports.PerformanceEvents = PerformanceEvents;
+exports.PromptValue = PromptValue;
+exports.ProtocolMode = ProtocolMode;
 exports.PublicClientApplication = PublicClientApplication;
 exports.ServerError = ServerError;
 exports.SignedHttpRequest = SignedHttpRequest;
 exports.StringUtils = StringUtils;
 exports.UrlString = UrlString;
+exports.WrapperSKU = WrapperSKU;
 exports.internals = internals;
 exports.stubbedPublicClientApplication = stubbedPublicClientApplication;
 exports.version = version;