@azure/msal-browser 3.10.0 → 3.11.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v3.10.0 2024-02-17 */
+/*! @azure/msal-browser v3.11.0 2024-03-22 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -297,7 +297,7 @@ const JsonWebTokenTypes = {
     Pop: "pop",
 };
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -314,7 +314,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -363,7 +363,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -461,7 +461,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -713,7 +713,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -746,7 +746,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -937,12 +937,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "14.7.1";
+const version$1 = "14.8.0";
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -962,7 +962,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1023,7 +1023,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1060,7 +1060,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1387,7 +1387,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1441,7 +1441,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1579,7 +1579,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1676,7 +1676,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1876,7 +1876,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1916,7 +1916,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1978,7 +1978,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1993,7 +1993,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2015,7 +2015,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2028,7 +2028,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2275,7 +2275,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2322,7 +2322,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2486,7 +2486,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2626,7 +2626,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3033,14 +3033,6 @@ class CacheManager {
      * @param filter
      */
     getAppMetadataFilteredBy(filter) {
-        return this.getAppMetadataFilteredByInternal(filter.environment, filter.clientId);
-    }
-    /**
-     * Support function to help match appMetadata
-     * @param environment
-     * @param clientId
-     */
-    getAppMetadataFilteredByInternal(environment, clientId) {
         const allCacheKeys = this.getKeys();
         const matchingAppMetadata = {};
         allCacheKeys.forEach((cacheKey) => {
@@ -3053,10 +3045,12 @@ class CacheManager {
             if (!entity) {
                 return;
             }
-            if (!!environment && !this.matchEnvironment(entity, environment)) {
+            if (!!filter.environment &&
+                !this.matchEnvironment(entity, filter.environment)) {
                 return;
             }
-            if (!!clientId && !this.matchClientId(entity, clientId)) {
+            if (!!filter.clientId &&
+                !this.matchClientId(entity, filter.clientId)) {
                 return;
             }
             matchingAppMetadata[cacheKey] = entity;
@@ -3843,9 +3837,6 @@ class DefaultStorageClass extends CacheManager {
     removeItem() {
         throw createClientAuthError(methodNotImplemented);
     }
-    containsKey() {
-        throw createClientAuthError(methodNotImplemented);
-    }
     getKeys() {
         throw createClientAuthError(methodNotImplemented);
     }
@@ -3866,7 +3857,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3966,7 +3957,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3983,7 +3974,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4081,7 +4072,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4118,7 +4109,7 @@ class NetworkManager {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4128,7 +4119,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4175,7 +4166,7 @@ const SID = "sid";
 const LOGIN_HINT = "login_hint";
 const DOMAIN_HINT = "domain_hint";
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4259,7 +4250,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4643,7 +4634,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4655,7 +4646,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4665,7 +4656,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4675,7 +4666,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4910,6 +4901,219 @@ const PerformanceEvents = {
     Sha256Digest: "sha256Digest",
     GetRandomValues: "getRandomValues",
 };
+const PerformanceEventAbbreviations = new Map([
+    [PerformanceEvents.AcquireTokenByCode, "ATByCode"],
+    [PerformanceEvents.AcquireTokenByRefreshToken, "ATByRT"],
+    [PerformanceEvents.AcquireTokenSilent, "ATS"],
+    [PerformanceEvents.AcquireTokenSilentAsync, "ATSAsync"],
+    [PerformanceEvents.AcquireTokenPopup, "ATPopup"],
+    [PerformanceEvents.AcquireTokenRedirect, "ATRedirect"],
+    [
+        PerformanceEvents.CryptoOptsGetPublicKeyThumbprint,
+        "CryptoGetPKThumb",
+    ],
+    [PerformanceEvents.CryptoOptsSignJwt, "CryptoSignJwt"],
+    [PerformanceEvents.SilentCacheClientAcquireToken, "SltCacheClientAT"],
+    [PerformanceEvents.SilentIframeClientAcquireToken, "SltIframeClientAT"],
+    [PerformanceEvents.SilentRefreshClientAcquireToken, "SltRClientAT"],
+    [PerformanceEvents.SsoSilent, "SsoSlt"],
+    [
+        PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority,
+        "StdIntClientGetDiscAuth",
+    ],
+    [
+        PerformanceEvents.FetchAccountIdWithNativeBroker,
+        "FetchAccIdWithNtvBroker",
+    ],
+    [
+        PerformanceEvents.NativeInteractionClientAcquireToken,
+        "NtvIntClientAT",
+    ],
+    [
+        PerformanceEvents.BaseClientCreateTokenRequestHeaders,
+        "BaseClientCreateTReqHead",
+    ],
+    [
+        PerformanceEvents.RefreshTokenClientExecutePostToTokenEndpoint,
+        "RTClientExecPost",
+    ],
+    [
+        PerformanceEvents.AuthorizationCodeClientExecutePostToTokenEndpoint,
+        "AuthCodeClientExecPost",
+    ],
+    [PerformanceEvents.BrokerHandhshake, "BrokerHandshake"],
+    [
+        PerformanceEvents.AcquireTokenByRefreshTokenInBroker,
+        "ATByRTInBroker",
+    ],
+    [PerformanceEvents.AcquireTokenByBroker, "ATByBroker"],
+    [
+        PerformanceEvents.RefreshTokenClientExecuteTokenRequest,
+        "RTClientExecTReq",
+    ],
+    [PerformanceEvents.RefreshTokenClientAcquireToken, "RTClientAT"],
+    [
+        PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken,
+        "RTClientATWithCachedRT",
+    ],
+    [
+        PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken,
+        "RTClientATByRT",
+    ],
+    [
+        PerformanceEvents.RefreshTokenClientCreateTokenRequestBody,
+        "RTClientCreateTReqBody",
+    ],
+    [PerformanceEvents.AcquireTokenFromCache, "ATFromCache"],
+    [
+        PerformanceEvents.SilentFlowClientAcquireCachedToken,
+        "SltFlowClientATCached",
+    ],
+    [
+        PerformanceEvents.SilentFlowClientGenerateResultFromCacheRecord,
+        "SltFlowClientGenResFromCache",
+    ],
+    [PerformanceEvents.AcquireTokenBySilentIframe, "ATBySltIframe"],
+    [PerformanceEvents.InitializeBaseRequest, "InitBaseReq"],
+    [PerformanceEvents.InitializeSilentRequest, "InitSltReq"],
+    [
+        PerformanceEvents.InitializeClientApplication,
+        "InitClientApplication",
+    ],
+    [PerformanceEvents.SilentIframeClientTokenHelper, "SIClientTHelper"],
+    [
+        PerformanceEvents.SilentHandlerInitiateAuthRequest,
+        "SHandlerInitAuthReq",
+    ],
+    [
+        PerformanceEvents.SilentHandlerMonitorIframeForHash,
+        "SltHandlerMonitorIframeForHash",
+    ],
+    [PerformanceEvents.SilentHandlerLoadFrame, "SHandlerLoadFrame"],
+    [PerformanceEvents.SilentHandlerLoadFrameSync, "SHandlerLoadFrameSync"],
+    [
+        PerformanceEvents.StandardInteractionClientCreateAuthCodeClient,
+        "StdIntClientCreateAuthCodeClient",
+    ],
+    [
+        PerformanceEvents.StandardInteractionClientGetClientConfiguration,
+        "StdIntClientGetClientConf",
+    ],
+    [
+        PerformanceEvents.StandardInteractionClientInitializeAuthorizationRequest,
+        "StdIntClientInitAuthReq",
+    ],
+    [
+        PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest,
+        "StdIntClientInitAuthCodeReq",
+    ],
+    [PerformanceEvents.GetAuthCodeUrl, "GetAuthCodeUrl"],
+    [
+        PerformanceEvents.HandleCodeResponseFromServer,
+        "HandleCodeResFromServer",
+    ],
+    [PerformanceEvents.HandleCodeResponse, "HandleCodeResp"],
+    [PerformanceEvents.UpdateTokenEndpointAuthority, "UpdTEndpointAuth"],
+    [PerformanceEvents.AuthClientAcquireToken, "AuthClientAT"],
+    [PerformanceEvents.AuthClientExecuteTokenRequest, "AuthClientExecTReq"],
+    [
+        PerformanceEvents.AuthClientCreateTokenRequestBody,
+        "AuthClientCreateTReqBody",
+    ],
+    [
+        PerformanceEvents.AuthClientCreateQueryString,
+        "AuthClientCreateQueryStr",
+    ],
+    [PerformanceEvents.PopTokenGenerateCnf, "PopTGenCnf"],
+    [PerformanceEvents.PopTokenGenerateKid, "PopTGenKid"],
+    [PerformanceEvents.HandleServerTokenResponse, "HandleServerTRes"],
+    [PerformanceEvents.DeserializeResponse, "DeserializeRes"],
+    [
+        PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance,
+        "AuthFactCreateDiscInst",
+    ],
+    [
+        PerformanceEvents.AuthorityResolveEndpointsAsync,
+        "AuthResolveEndpointsAsync",
+    ],
+    [
+        PerformanceEvents.AuthorityResolveEndpointsFromLocalSources,
+        "AuthResolveEndpointsFromLocal",
+    ],
+    [
+        PerformanceEvents.AuthorityGetCloudDiscoveryMetadataFromNetwork,
+        "AuthGetCDMetaFromNet",
+    ],
+    [
+        PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata,
+        "AuthUpdCDMeta",
+    ],
+    [
+        PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork,
+        "AuthUpdCDMetaFromNet",
+    ],
+    [
+        PerformanceEvents.AuthorityUpdateEndpointMetadata,
+        "AuthUpdEndpointMeta",
+    ],
+    [
+        PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation,
+        "AuthUpdMetaWithRegInfo",
+    ],
+    [PerformanceEvents.RegionDiscoveryDetectRegion, "RegDiscDetectReg"],
+    [
+        PerformanceEvents.RegionDiscoveryGetRegionFromIMDS,
+        "RegDiscGetRegFromIMDS",
+    ],
+    [
+        PerformanceEvents.RegionDiscoveryGetCurrentVersion,
+        "RegDiscGetCurrentVer",
+    ],
+    [PerformanceEvents.AcquireTokenByCodeAsync, "ATByCodeAsync"],
+    [
+        PerformanceEvents.GetEndpointMetadataFromNetwork,
+        "GetEndpointMetaFromNet",
+    ],
+    [
+        PerformanceEvents.GetCloudDiscoveryMetadataFromNetworkMeasurement,
+        "GetCDMetaFromNet",
+    ],
+    [
+        PerformanceEvents.HandleRedirectPromiseMeasurement,
+        "HandleRedirectPromise",
+    ],
+    [
+        PerformanceEvents.HandleNativeRedirectPromiseMeasurement,
+        "HandleNtvRedirectPromise",
+    ],
+    [
+        PerformanceEvents.UpdateCloudDiscoveryMetadataMeasurement,
+        "UpdateCDMeta",
+    ],
+    [
+        PerformanceEvents.UsernamePasswordClientAcquireToken,
+        "UserPassClientAT",
+    ],
+    [
+        PerformanceEvents.NativeMessageHandlerHandshake,
+        "NtvMsgHandlerHandshake",
+    ],
+    [PerformanceEvents.NativeGenerateAuthResult, "NtvGenAuthRes"],
+    [PerformanceEvents.RemoveHiddenIframe, "RemoveHiddenIframe"],
+    [
+        PerformanceEvents.ClearTokensAndKeysWithClaims,
+        "ClearTAndKeysWithClaims",
+    ],
+    [PerformanceEvents.CacheManagerGetRefreshToken, "CacheManagerGetRT"],
+    [PerformanceEvents.GeneratePkceCodes, "GenPkceCodes"],
+    [PerformanceEvents.GenerateCodeVerifier, "GenCodeVerifier"],
+    [
+        PerformanceEvents.GenerateCodeChallengeFromVerifier,
+        "GenCodeChallengeFromVerifier",
+    ],
+    [PerformanceEvents.Sha256Digest, "Sha256Digest"],
+    [PerformanceEvents.GetRandomValues, "GetRandomValues"],
+]);
 /**
  * State of the performance event.
  *
@@ -4936,7 +5140,7 @@ const IntFields = new Set([
     "multiMatchedRT",
 ]);
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4980,7 +5184,7 @@ const invoke = (callback, eventName, logger, telemetryClient, correlationId) =>
             }
             inProgressEvent?.end({
                 success: false,
-            });
+            }, e);
             throw e;
         }
     };
@@ -5026,13 +5230,13 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
             }
             inProgressEvent?.end({
                 success: false,
-            });
+            }, e);
             throw e;
         });
     };
 };
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5141,7 +5345,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5976,7 +6180,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6007,7 +6211,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6110,7 +6314,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6136,7 +6340,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6223,7 +6427,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6239,7 +6443,7 @@ class CacheRecord {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6311,7 +6515,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6396,7 +6600,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6423,7 +6627,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6776,7 +6980,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, idTokenClai
     return baseAccount;
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7181,7 +7385,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7388,7 +7592,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7406,7 +7610,12 @@ class SilentFlowClient extends BaseClient {
      */
     async acquireToken(request) {
         try {
-            const [authResponse, cacheOutcome] = await this.acquireCachedToken(request);
+            const [authResponse, cacheOutcome] = await this.acquireCachedToken({
+                ...request,
+                scopes: request.scopes?.length
+                    ? request.scopes
+                    : [...OIDC_DEFAULT_SCOPES],
+            });
             // if the token is not expired but must be refreshed; get a new one in the background
             if (cacheOutcome === CacheOutcome.PROACTIVELY_REFRESHED) {
                 this.logger.info("SilentFlowClient:acquireCachedToken - Cached access token's refreshOn property has been exceeded'. It's not expired, but must be refreshed.");
@@ -7519,7 +7728,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7534,7 +7743,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7542,7 +7751,7 @@ const StubbedNetworkModule = {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7567,7 +7776,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7607,7 +7816,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7665,7 +7874,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7869,7 +8078,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7948,12 +8157,168 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v14.7.1 2024-02-17 */
+/*! @azure/msal-common v14.8.0 2024-03-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
+/**
+ * Starts context by adding payload to the stack
+ * @param event {PerformanceEvent}
+ * @param abbreviations {Map<string, string>} event name abbreviations
+ * @param stack {?PerformanceEventStackedContext[]} stack
+ */
+function startContext(event, abbreviations, stack) {
+    if (!stack) {
+        return;
+    }
+    stack.push({
+        name: abbreviations.get(event.name) || event.name,
+    });
+}
+/**
+ * Ends context by removing payload from the stack and returning parent or self, if stack is empty, payload
+ *
+ * @param event {PerformanceEvent}
+ * @param abbreviations {Map<string, string>} event name abbreviations
+ * @param stack {?PerformanceEventStackedContext[]} stack
+ * @param error {?unknown} error
+ */
+function endContext(event, abbreviations, stack, error) {
+    if (!stack?.length) {
+        return;
+    }
+    const peek = (stack) => {
+        return stack.length ? stack[stack.length - 1] : undefined;
+    };
+    const abbrEventName = abbreviations.get(event.name) || event.name;
+    const top = peek(stack);
+    if (top?.name !== abbrEventName) {
+        return;
+    }
+    const current = stack?.pop();
+    if (!current) {
+        return;
+    }
+    const errorCode = error instanceof AuthError
+        ? error.errorCode
+        : error instanceof Error
+            ? error.name
+            : undefined;
+    const subErr = error instanceof AuthError ? error.subError : undefined;
+    if (errorCode && current.childErr !== errorCode) {
+        current.err = errorCode;
+        if (subErr) {
+            current.subErr = subErr;
+        }
+    }
+    delete current.name;
+    delete current.childErr;
+    const context = {
+        ...current,
+        dur: event.durationMs,
+    };
+    if (!event.success) {
+        context.fail = 1;
+    }
+    const parent = peek(stack);
+    if (!parent) {
+        return { [abbrEventName]: context };
+    }
+    if (errorCode) {
+        parent.childErr = errorCode;
+    }
+    let childName;
+    if (!parent[abbrEventName]) {
+        childName = abbrEventName;
+    }
+    else {
+        const siblings = Object.keys(parent).filter((key) => key.startsWith(abbrEventName)).length;
+        childName = `${abbrEventName}_${siblings + 1}`;
+    }
+    parent[childName] = context;
+    return parent;
+}
+/**
+ * Adds error name and stack trace to the telemetry event
+ * @param error {Error}
+ * @param logger {Logger}
+ * @param event {PerformanceEvent}
+ * @param stackMaxSize {number} max error stack size to capture
+ */
+function addError(error, logger, event, stackMaxSize = 5) {
+    if (!(error instanceof Error)) {
+        logger.trace("PerformanceClient.addErrorStack: Input error is not instance of Error", event.correlationId);
+        return;
+    }
+    else if (error instanceof AuthError) {
+        event.errorCode = error.errorCode;
+        event.subErrorCode = error.subError;
+        return;
+    }
+    else if (event.errorStack?.length) {
+        logger.trace("PerformanceClient.addErrorStack: Stack already exist", event.correlationId);
+        return;
+    }
+    else if (!error.stack?.length) {
+        logger.trace("PerformanceClient.addErrorStack: Input stack is empty", event.correlationId);
+        return;
+    }
+    if (error.stack) {
+        event.errorStack = compactStack(error.stack, stackMaxSize);
+    }
+    event.errorName = error.name;
+}
+/**
+ * Compacts error stack into array by fetching N first entries
+ * @param stack {string} error stack
+ * @param stackMaxSize {number} max error stack size to capture
+ * @returns {string[]}
+ */
+function compactStack(stack, stackMaxSize) {
+    if (stackMaxSize < 0) {
+        return [];
+    }
+    const stackArr = stack.split("\n") || [];
+    if (stackArr.length < 2) {
+        return [];
+    }
+    const res = [];
+    // Get top N stack lines
+    for (
+    // Skip first line as it may contain PII data
+    let ix = Math.max(stackArr.length - stackMaxSize - 1, 1); ix < stackArr.length; ix++) {
+        const line = stackArr[ix];
+        if (res.length >= stackMaxSize) {
+            break;
+        }
+        res.push(compactStackLine(line));
+    }
+    return res;
+}
+/**
+ * Compacts error stack line by shortening file path
+ * Example: https://localhost/msal-common/src/authority/Authority.js:100:1 -> Authority.js:100:1
+ * @param line {string} stack line
+ * @returns {string}
+ */
+function compactStackLine(line) {
+    const filePathIx = line.lastIndexOf(" ") + 1;
+    if (filePathIx < 1) {
+        return line;
+    }
+    const filePath = line.substring(filePathIx);
+    let fileNameIx = filePath.lastIndexOf("/");
+    fileNameIx = fileNameIx < 0 ? filePath.lastIndexOf("\\") : fileNameIx;
+    if (fileNameIx >= 0) {
+        return (line.substring(0, filePathIx) +
+            "(" +
+            filePath.substring(fileNameIx + 1) +
+            (filePath.charAt(filePath.length - 1) === ")" ? "" : ")")).trimStart();
+    }
+    return line.trimStart();
+}
 class PerformanceClient {
     /**
      * Creates an instance of PerformanceClient,
@@ -7967,8 +8332,9 @@ class PerformanceClient {
      * @param {string} libraryVersion Version of the library
      * @param {ApplicationTelemetry} applicationTelemetry application name and version
      * @param {Set<String>} intFields integer fields to be truncated
+     * @param {Map<string, string>} abbreviations event name abbreviations
      */
-    constructor(clientId, authority, logger, libraryName, libraryVersion, applicationTelemetry, intFields) {
+    constructor(clientId, authority, logger, libraryName, libraryVersion, applicationTelemetry, intFields, abbreviations) {
         this.authority = authority;
         this.libraryName = libraryName;
         this.libraryVersion = libraryVersion;
@@ -7977,12 +8343,17 @@ class PerformanceClient {
         this.logger = logger;
         this.callbacks = new Map();
         this.eventsByCorrelationId = new Map();
+        this.eventStack = new Map();
         this.queueMeasurements = new Map();
         this.preQueueTimeByCorrelationId = new Map();
         this.intFields = intFields || new Set();
         for (const item of IntFields) {
             this.intFields.add(item);
         }
+        this.abbreviations = abbreviations || new Map();
+        for (const [key, value] of PerformanceEventAbbreviations) {
+            this.abbreviations.set(key, value);
+        }
     }
     /**
      * Starts and returns an platform-specific implementation of IPerformanceMeasurement.
@@ -8112,15 +8483,16 @@ class PerformanceClient {
         };
         // Store in progress events so they can be discarded if not ended properly
         this.cacheEventByCorrelationId(inProgressEvent);
+        startContext(inProgressEvent, this.abbreviations, this.eventStack.get(eventCorrelationId));
         // Return the event and functions the caller can use to properly end/flush the measurement
         return {
-            end: (event) => {
+            end: (event, error) => {
                 return this.endMeasurement({
                     // Initial set of event properties
                     ...inProgressEvent,
                     // Properties set when event ends
                     ...event,
-                });
+                }, error);
             },
             discard: () => {
                 return this.discardMeasurements(inProgressEvent.correlationId);
@@ -8142,10 +8514,10 @@ class PerformanceClient {
      * otherwise.
      *
      * @param {PerformanceEvent} event
-     * @param {IPerformanceMeasurement} measurement
+     * @param {unknown} error
      * @returns {(PerformanceEvent | null)}
      */
-    endMeasurement(event) {
+    endMeasurement(event, error) {
         const rootEvent = this.eventsByCorrelationId.get(event.correlationId);
         if (!rootEvent) {
             this.logger.trace(`PerformanceClient: Measurement not found for ${event.eventId}`, event.correlationId);
@@ -8157,6 +8529,8 @@ class PerformanceClient {
             totalQueueCount: 0,
             manuallyCompletedCount: 0,
         };
+        event.durationMs = Math.round(event.durationMs || this.getDurationMs(event.startTimeMs));
+        const context = endContext(event, this.abbreviations, this.eventStack.get(rootEvent.correlationId), error);
         if (isRoot) {
             queueInfo = this.getQueueInfo(event.correlationId);
             this.discardCache(rootEvent.correlationId);
@@ -8164,13 +8538,15 @@ class PerformanceClient {
         else {
             rootEvent.incompleteSubMeasurements?.delete(event.eventId);
         }
-        const durationMs = event.durationMs || this.getDurationMs(event.startTimeMs);
-        this.logger.trace(`PerformanceClient: Performance measurement ended for ${event.name}: ${durationMs} ms`, event.correlationId);
+        this.logger.trace(`PerformanceClient: Performance measurement ended for ${event.name}: ${event.durationMs} ms`, event.correlationId);
         // Add sub-measurement attribute to root event.
         if (!isRoot) {
-            rootEvent[event.name + "DurationMs"] = Math.floor(durationMs);
+            rootEvent[event.name + "DurationMs"] = Math.floor(event.durationMs);
             return { ...rootEvent };
         }
+        if (error) {
+            addError(error, this.logger, rootEvent);
+        }
         let finalEvent = { ...rootEvent, ...event };
         let incompleteSubsCount = 0;
         // Incomplete sub-measurements are discarded. They are likely an instrumentation bug that should be fixed.
@@ -8181,12 +8557,12 @@ class PerformanceClient {
         finalEvent.incompleteSubMeasurements = undefined;
         finalEvent = {
             ...finalEvent,
-            durationMs: Math.round(durationMs),
             queuedTimeMs: queueInfo.totalQueueTime,
             queuedCount: queueInfo.totalQueueCount,
             queuedManuallyCompletedCount: queueInfo.manuallyCompletedCount,
             status: PerformanceEventStatus.Completed,
             incompleteSubsCount,
+            context,
         };
         this.truncateIntegralFields(finalEvent);
         this.emitEvents([finalEvent], event.correlationId);
@@ -8256,6 +8632,7 @@ class PerformanceClient {
         else {
             this.logger.trace(`PerformanceClient: Performance measurement for ${event.name} started`, event.correlationId);
             this.eventsByCorrelationId.set(event.correlationId, { ...event });
+            this.eventStack.set(event.correlationId, []);
         }
     }
     getQueueInfo(correlationId) {
@@ -8297,6 +8674,8 @@ class PerformanceClient {
         this.queueMeasurements.delete(correlationId);
         this.logger.trace("PerformanceClient: Pre-queue times discarded", correlationId);
         this.preQueueTimeByCorrelationId.delete(correlationId);
+        this.logger.trace("PerformanceClient: Event stack discarded", correlationId);
+        this.eventStack.delete(correlationId);
     }
     /**
      * Registers a callback function to receive performance events.
@@ -8342,7 +8721,6 @@ class PerformanceClient {
     /**
      * Enforce truncation of integral fields in performance event.
      * @param {PerformanceEvent} event performance event to update.
-     * @param {Set<string>} intFields integral fields.
      */
     truncateIntegralFields(event) {
         this.intFields.forEach((key) => {
@@ -8934,6 +9312,50 @@ const LOG_LEVEL_CACHE_KEY = "msal.browser.log.level";
 const LOG_PII_CACHE_KEY = "msal.browser.log.pii";
 const BROWSER_PERF_ENABLED_KEY = "msal.browser.performance.enabled";
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Class which exposes APIs to encode plaintext to base64 encoded string. See here for implementation details:
+ * https://developer.mozilla.org/en-US/docs/Web/API/WindowBase64/Base64_encoding_and_decoding#Solution_2_%E2%80%93_JavaScript's_UTF-16_%3E_UTF-8_%3E_base64
+ */
+/**
+ * Returns URL Safe b64 encoded string from a plaintext string.
+ * @param input
+ */
+function urlEncode(input) {
+    return encodeURIComponent(base64Encode(input)
+        .replace(/=/g, "")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_"));
+}
+/**
+ * Returns URL Safe b64 encoded string from an int8Array.
+ * @param inputArr
+ */
+function urlEncodeArr(inputArr) {
+    return base64EncArr(inputArr)
+        .replace(/=/g, "")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_");
+}
+/**
+ * Returns b64 encoded string from plaintext string.
+ * @param input
+ */
+function base64Encode(input) {
+    return base64EncArr(new TextEncoder().encode(input));
+}
+/**
+ * Base64 encode byte array
+ * @param aBytes
+ */
+function base64EncArr(aBytes) {
+    const binString = Array.from(aBytes, (x) => String.fromCodePoint(x)).join("");
+    return btoa(binString);
+}
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -9076,6 +9498,71 @@ async function importJwk(key, extractable, usages) {
 async function sign(key, data) {
     return window.crypto.subtle.sign(keygenAlgorithmOptions, key, data);
 }
+/**
+ * Returns the SHA-256 hash of an input string
+ * @param plainText
+ */
+async function hashString(plainText) {
+    const hashBuffer = await sha256Digest(plainText);
+    const hashBytes = new Uint8Array(hashBuffer);
+    return urlEncodeArr(hashBytes);
+}
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+const storageNotSupported = "storage_not_supported";
+const stubbedPublicClientApplicationCalled = "stubbed_public_client_application_called";
+const inMemRedirectUnavailable = "in_mem_redirect_unavailable";
+
+var BrowserConfigurationAuthErrorCodes = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    inMemRedirectUnavailable: inMemRedirectUnavailable,
+    storageNotSupported: storageNotSupported,
+    stubbedPublicClientApplicationCalled: stubbedPublicClientApplicationCalled
+});
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+const BrowserConfigurationAuthErrorMessages = {
+    [storageNotSupported]: "Given storage configuration option was not supported.",
+    [stubbedPublicClientApplicationCalled]: "Stub instance of Public Client Application was called. If using msal-react, please ensure context is not used without a provider. For more visit: aka.ms/msaljs/browser-errors",
+    [inMemRedirectUnavailable]: "Redirect cannot be supported. In-memory storage was selected and storeAuthStateInCookie=false, which would cause the library to be unable to handle the incoming hash. If you would like to use the redirect API, please use session/localStorage or set storeAuthStateInCookie=true.",
+};
+/**
+ * BrowserAuthErrorMessage class containing string constants used by error codes and messages.
+ * @deprecated Use BrowserAuthErrorCodes instead
+ */
+const BrowserConfigurationAuthErrorMessage = {
+    storageNotSupportedError: {
+        code: storageNotSupported,
+        desc: BrowserConfigurationAuthErrorMessages[storageNotSupported],
+    },
+    stubPcaInstanceCalled: {
+        code: stubbedPublicClientApplicationCalled,
+        desc: BrowserConfigurationAuthErrorMessages[stubbedPublicClientApplicationCalled],
+    },
+    inMemRedirectUnavailable: {
+        code: inMemRedirectUnavailable,
+        desc: BrowserConfigurationAuthErrorMessages[inMemRedirectUnavailable],
+    },
+};
+/**
+ * Browser library error class thrown by the MSAL.js library for SPAs
+ */
+class BrowserConfigurationAuthError extends AuthError {
+    constructor(errorCode, errorMessage) {
+        super(errorCode, errorMessage);
+        this.name = "BrowserConfigurationAuthError";
+        Object.setPrototypeOf(this, BrowserConfigurationAuthError.prototype);
+    }
+}
+function createBrowserConfigurationAuthError(errorCode) {
+    return new BrowserConfigurationAuthError(errorCode, BrowserConfigurationAuthErrorMessages[errorCode]);
+}
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9147,11 +9634,8 @@ function blockReloadInHiddenIframes() {
  * @param interactionType Interaction type for the request
  * @param allowRedirectInIframe Config value to allow redirects when app is inside an iframe
  */
-function blockRedirectInIframe(interactionType, allowRedirectInIframe) {
-    const isIframedApp = isInIframe();
-    if (interactionType === exports.InteractionType.Redirect &&
-        isIframedApp &&
-        !allowRedirectInIframe) {
+function blockRedirectInIframe(allowRedirectInIframe) {
+    if (isInIframe() && !allowRedirectInIframe) {
         // If we are not in top frame, we shouldn't redirect. This is also handled by the service.
         throw createBrowserAuthError(redirectInIframe);
     }
@@ -9169,8 +9653,8 @@ function blockAcquireTokenInPopups() {
  * Throws error if token requests are made in non-browser environment
  * @param isBrowserEnvironment Flag indicating if environment is a browser.
  */
-function blockNonBrowserEnvironment(isBrowserEnvironment) {
-    if (!isBrowserEnvironment) {
+function blockNonBrowserEnvironment() {
+    if (typeof window === "undefined") {
         throw createBrowserAuthError(nonBrowserEnvironment);
     }
 }
@@ -9183,6 +9667,34 @@ function blockAPICallsBeforeInitialize(initialized) {
         throw createBrowserAuthError(uninitializedPublicClientApplication);
     }
 }
+/**
+ * Helper to validate app environment before making an auth request
+ * @param initialized
+ */
+function preflightCheck(initialized) {
+    // Block request if not in browser environment
+    blockNonBrowserEnvironment();
+    // Block auth requests inside a hidden iframe
+    blockReloadInHiddenIframes();
+    // Block redirectUri opened in a popup from calling MSAL APIs
+    blockAcquireTokenInPopups();
+    // Block token acquisition before initialize has been called
+    blockAPICallsBeforeInitialize(initialized);
+}
+/**
+ * Helper to validate app enviornment before making redirect request
+ * @param initialized
+ * @param config
+ */
+function redirectPreflightCheck(initialized, config) {
+    preflightCheck(initialized);
+    blockRedirectInIframe(config.system.allowRedirectInIframe);
+    // Block redirects if memory storage is enabled but storeAuthStateInCookie is not
+    if (config.cache.cacheLocation === BrowserCacheLocation.MemoryStorage &&
+        !config.cache.storeAuthStateInCookie) {
+        throw createBrowserConfigurationAuthError(inMemRedirectUnavailable);
+    }
+}
 /**
  * Adds a preconnect link element to the header which begins DNS resolution and SSL connection in anticipation of the /token request
  * @param loginDomain Authority domain, including https protocol e.g. https://login.microsoftonline.com
@@ -9224,6 +9736,8 @@ var BrowserUtils = /*#__PURE__*/Object.freeze({
     isInIframe: isInIframe,
     isInPopup: isInPopup,
     preconnect: preconnect,
+    preflightCheck: preflightCheck,
+    redirectPreflightCheck: redirectPreflightCheck,
     replaceHash: replaceHash
 });
 
@@ -9499,7 +10013,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.10.0";
+const version = "3.11.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9925,50 +10439,6 @@ async function createController(config) {
     }
 }
 
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * Class which exposes APIs to encode plaintext to base64 encoded string. See here for implementation details:
- * https://developer.mozilla.org/en-US/docs/Web/API/WindowBase64/Base64_encoding_and_decoding#Solution_2_%E2%80%93_JavaScript's_UTF-16_%3E_UTF-8_%3E_base64
- */
-/**
- * Returns URL Safe b64 encoded string from a plaintext string.
- * @param input
- */
-function urlEncode(input) {
-    return encodeURIComponent(base64Encode(input)
-        .replace(/=/g, "")
-        .replace(/\+/g, "-")
-        .replace(/\//g, "_"));
-}
-/**
- * Returns URL Safe b64 encoded string from an int8Array.
- * @param inputArr
- */
-function urlEncodeArr(inputArr) {
-    return base64EncArr(inputArr)
-        .replace(/=/g, "")
-        .replace(/\+/g, "-")
-        .replace(/\//g, "_");
-}
-/**
- * Returns b64 encoded string from plaintext string.
- * @param input
- */
-function base64Encode(input) {
-    return base64EncArr(new TextEncoder().encode(input));
-}
-/**
- * Base64 encode byte array
- * @param aBytes
- */
-function base64EncArr(aBytes) {
-    const binString = Array.from(aBytes, (x) => String.fromCodePoint(x)).join("");
-    return btoa(binString);
-}
-
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -10190,9 +10660,19 @@ class DatabaseStorage {
         }
         return new Promise((resolve, reject) => {
             const deleteDbRequest = window.indexedDB.deleteDatabase(DB_NAME);
-            deleteDbRequest.addEventListener("success", () => resolve(true));
-            deleteDbRequest.addEventListener("blocked", () => resolve(true));
-            deleteDbRequest.addEventListener("error", () => reject(false));
+            const id = setTimeout(() => reject(false), 200); // Reject if events aren't raised within 200ms
+            deleteDbRequest.addEventListener("success", () => {
+                clearTimeout(id);
+                return resolve(true);
+            });
+            deleteDbRequest.addEventListener("blocked", () => {
+                clearTimeout(id);
+                return resolve(true);
+            });
+            deleteDbRequest.addEventListener("error", () => {
+                clearTimeout(id);
+                return reject(false);
+            });
         });
     }
 }
@@ -10238,11 +10718,10 @@ class MemoryStorage {
  * backed up with the more volatile MemoryStorage object for cases in which IndexedDB may be unavailable.
  */
 class AsyncMemoryStorage {
-    constructor(logger, storeName) {
+    constructor(logger) {
         this.inMemoryCache = new MemoryStorage();
         this.indexedDBCache = new DatabaseStorage();
         this.logger = logger;
-        this.storeName = storeName;
     }
     handleDatabaseAccessError(error) {
         if (error instanceof BrowserAuthError &&
@@ -10338,66 +10817,25 @@ class AsyncMemoryStorage {
      */
     clearInMemory() {
         // InMemory cache is a Map instance, clear is straightforward
-        this.logger.verbose(`Deleting in-memory keystore ${this.storeName}`);
+        this.logger.verbose(`Deleting in-memory keystore`);
         this.inMemoryCache.clear();
-        this.logger.verbose(`In-memory keystore ${this.storeName} deleted`);
-    }
-    /**
-     * Tries to delete the IndexedDB database
-     * @returns
-     */
-    async clearPersistent() {
-        try {
-            this.logger.verbose("Deleting persistent keystore");
-            const dbDeleted = await this.indexedDBCache.deleteDatabase();
-            if (dbDeleted) {
-                this.logger.verbose("Persistent keystore deleted");
-            }
-            return dbDeleted;
-        }
-        catch (e) {
-            this.handleDatabaseAccessError(e);
-            return false;
-        }
-    }
-}
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-const CryptoKeyStoreNames = {
-    asymmetricKeys: "asymmetricKeys",
-    symmetricKeys: "symmetricKeys",
-};
-/**
- * MSAL CryptoKeyStore DB Version 2
- */
-class CryptoKeyStore {
-    constructor(logger) {
-        this.logger = logger;
-        this.asymmetricKeys = new AsyncMemoryStorage(this.logger, CryptoKeyStoreNames.asymmetricKeys);
-        this.symmetricKeys = new AsyncMemoryStorage(this.logger, CryptoKeyStoreNames.symmetricKeys);
-    }
-    async clear() {
-        // Delete in-memory keystores
-        this.asymmetricKeys.clearInMemory();
-        this.symmetricKeys.clearInMemory();
-        /**
-         * There is only one database, so calling clearPersistent on asymmetric keystore takes care of
-         * every persistent keystore
-         */
+        this.logger.verbose(`In-memory keystore deleted`);
+    }
+    /**
+     * Tries to delete the IndexedDB database
+     * @returns
+     */
+    async clearPersistent() {
         try {
-            await this.asymmetricKeys.clearPersistent();
-            return true;
+            this.logger.verbose("Deleting persistent keystore");
+            const dbDeleted = await this.indexedDBCache.deleteDatabase();
+            if (dbDeleted) {
+                this.logger.verbose("Persistent keystore deleted");
+            }
+            return dbDeleted;
         }
         catch (e) {
-            if (e instanceof Error) {
-                this.logger.error(`Clearing keystore failed with error: ${e.message}`);
-            }
-            else {
-                this.logger.error("Clearing keystore failed with unknown error");
-            }
+            this.handleDatabaseAccessError(e);
             return false;
         }
     }
@@ -10416,7 +10854,7 @@ class CryptoOps {
         this.logger = logger;
         // Browser crypto needs to be validated first before any other classes can be set.
         validateCryptoAvailable(logger);
-        this.cache = new CryptoKeyStore(this.logger);
+        this.cache = new AsyncMemoryStorage(this.logger);
         this.performanceClient = performanceClient;
     }
     /**
@@ -10462,7 +10900,7 @@ class CryptoOps {
         // Re-import private key to make it unextractable
         const unextractablePrivateKey = await importJwk(privateKeyJwk, false, ["sign"]);
         // Store Keypair data in keystore
-        await this.cache.asymmetricKeys.setItem(publicJwkHash, {
+        await this.cache.setItem(publicJwkHash, {
             privateKey: unextractablePrivateKey,
             publicKey: keyPair.publicKey,
             requestMethod: request.resourceRequestMethod,
@@ -10480,15 +10918,33 @@ class CryptoOps {
      * @param kid
      */
     async removeTokenBindingKey(kid) {
-        await this.cache.asymmetricKeys.removeItem(kid);
-        const keyFound = await this.cache.asymmetricKeys.containsKey(kid);
+        await this.cache.removeItem(kid);
+        const keyFound = await this.cache.containsKey(kid);
         return !keyFound;
     }
     /**
      * Removes all cryptographic keys from IndexedDB storage
      */
     async clearKeystore() {
-        return this.cache.clear();
+        // Delete in-memory keystores
+        this.cache.clearInMemory();
+        /**
+         * There is only one database, so calling clearPersistent on asymmetric keystore takes care of
+         * every persistent keystore
+         */
+        try {
+            await this.cache.clearPersistent();
+            return true;
+        }
+        catch (e) {
+            if (e instanceof Error) {
+                this.logger.error(`Clearing keystore failed with error: ${e.message}`);
+            }
+            else {
+                this.logger.error("Clearing keystore failed with unknown error");
+            }
+            return false;
+        }
     }
     /**
      * Signs the given object as a jwt payload with private key retrieved by given kid.
@@ -10497,7 +10953,7 @@ class CryptoOps {
      */
     async signJwt(payload, kid, shrOptions, correlationId) {
         const signJwtMeasurement = this.performanceClient?.startMeasurement(PerformanceEvents.CryptoOptsSignJwt, correlationId);
-        const cachedKeyPair = await this.cache.asymmetricKeys.getItem(kid);
+        const cachedKeyPair = await this.cache.getItem(kid);
         if (!cachedKeyPair) {
             throw createBrowserAuthError(cryptoKeyNotFound);
         }
@@ -10538,9 +10994,7 @@ class CryptoOps {
      * @param plainText
      */
     async hashString(plainText) {
-        const hashBuffer = await sha256Digest(plainText);
-        const hashBytes = new Uint8Array(hashBuffer);
-        return urlEncodeArr(hashBytes);
+        return hashString(plainText);
     }
 }
 CryptoOps.POP_KEY_USAGES = ["sign", "verify"];
@@ -10549,62 +11003,6 @@ function getSortedObjectString(obj) {
     return JSON.stringify(obj, Object.keys(obj).sort());
 }
 
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-const storageNotSupported = "storage_not_supported";
-const stubbedPublicClientApplicationCalled = "stubbed_public_client_application_called";
-const inMemRedirectUnavailable = "in_mem_redirect_unavailable";
-
-var BrowserConfigurationAuthErrorCodes = /*#__PURE__*/Object.freeze({
-    __proto__: null,
-    inMemRedirectUnavailable: inMemRedirectUnavailable,
-    storageNotSupported: storageNotSupported,
-    stubbedPublicClientApplicationCalled: stubbedPublicClientApplicationCalled
-});
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-const BrowserConfigurationAuthErrorMessages = {
-    [storageNotSupported]: "Given storage configuration option was not supported.",
-    [stubbedPublicClientApplicationCalled]: "Stub instance of Public Client Application was called. If using msal-react, please ensure context is not used without a provider. For more visit: aka.ms/msaljs/browser-errors",
-    [inMemRedirectUnavailable]: "Redirect cannot be supported. In-memory storage was selected and storeAuthStateInCookie=false, which would cause the library to be unable to handle the incoming hash. If you would like to use the redirect API, please use session/localStorage or set storeAuthStateInCookie=true.",
-};
-/**
- * BrowserAuthErrorMessage class containing string constants used by error codes and messages.
- * @deprecated Use BrowserAuthErrorCodes instead
- */
-const BrowserConfigurationAuthErrorMessage = {
-    storageNotSupportedError: {
-        code: storageNotSupported,
-        desc: BrowserConfigurationAuthErrorMessages[storageNotSupported],
-    },
-    stubPcaInstanceCalled: {
-        code: stubbedPublicClientApplicationCalled,
-        desc: BrowserConfigurationAuthErrorMessages[stubbedPublicClientApplicationCalled],
-    },
-    inMemRedirectUnavailable: {
-        code: inMemRedirectUnavailable,
-        desc: BrowserConfigurationAuthErrorMessages[inMemRedirectUnavailable],
-    },
-};
-/**
- * Browser library error class thrown by the MSAL.js library for SPAs
- */
-class BrowserConfigurationAuthError extends AuthError {
-    constructor(errorCode, errorMessage) {
-        super(errorCode, errorMessage);
-        this.name = "BrowserConfigurationAuthError";
-        Object.setPrototypeOf(this, BrowserConfigurationAuthError.prototype);
-    }
-}
-function createBrowserConfigurationAuthError(errorCode) {
-    return new BrowserConfigurationAuthError(errorCode, BrowserConfigurationAuthErrorMessages[errorCode]);
-}
-
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -10753,18 +11151,12 @@ class BrowserCacheManager extends CacheManager {
             PersistentCacheKeys.ERROR,
             PersistentCacheKeys.ERROR_DESC,
         ];
-        keysToMigrate.forEach((cacheKey, index) => this.migrateCacheEntry(cacheKey, values[index]));
-    }
-    /**
-     * Utility function to help with migration.
-     * @param newKey
-     * @param value
-     * @param storeAuthStateInCookie
-     */
-    migrateCacheEntry(newKey, value) {
-        if (value) {
-            this.setTemporaryCache(newKey, value, true);
-        }
+        keysToMigrate.forEach((cacheKey, index) => {
+            const value = values[index];
+            if (value) {
+                this.setTemporaryCache(cacheKey, value, true);
+            }
+        });
     }
     /**
      * Searches all cache entries for MSAL accounts and creates the account key map
@@ -11461,33 +11853,28 @@ class BrowserCacheManager extends CacheManager {
     }
     /**
      * Removes the cache item with the given key.
-     * Will also clear the cookie item if storeAuthStateInCookie is set to true.
      * @param key
      */
     removeItem(key) {
         this.browserStorage.removeItem(key);
+    }
+    /**
+     * Removes the temporary cache item with the given key.
+     * Will also clear the cookie item if storeAuthStateInCookie is set to true.
+     * @param key
+     */
+    removeTemporaryItem(key) {
         this.temporaryCacheStorage.removeItem(key);
         if (this.cacheConfig.storeAuthStateInCookie) {
             this.logger.trace("BrowserCacheManager.removeItem: storeAuthStateInCookie is true, clearing item cookie");
             this.clearItemCookie(key);
         }
     }
-    /**
-     * Checks whether key is in cache.
-     * @param key
-     */
-    containsKey(key) {
-        return (this.browserStorage.containsKey(key) ||
-            this.temporaryCacheStorage.containsKey(key));
-    }
     /**
      * Gets all keys in window.
      */
     getKeys() {
-        return [
-            ...this.browserStorage.getKeys(),
-            ...this.temporaryCacheStorage.getKeys(),
-        ];
+        return this.browserStorage.getKeys();
     }
     /**
      * Clears all cache entries created by MSAL.
@@ -11496,14 +11883,18 @@ class BrowserCacheManager extends CacheManager {
         // Removes all accounts and their credentials
         await this.removeAllAccounts();
         this.removeAppMetadata();
+        // Remove temp storage first to make sure any cookies are cleared
+        this.temporaryCacheStorage.getKeys().forEach((cacheKey) => {
+            if (cacheKey.indexOf(Constants.CACHE_PREFIX) !== -1 ||
+                cacheKey.indexOf(this.clientId) !== -1) {
+                this.removeTemporaryItem(cacheKey);
+            }
+        });
         // Removes all remaining MSAL cache items
-        this.getKeys().forEach((cacheKey) => {
-            // Check if key contains msal prefix; For now, we are clearing all the cache items created by MSAL.js
-            if ((this.browserStorage.containsKey(cacheKey) ||
-                this.temporaryCacheStorage.containsKey(cacheKey)) &&
-                (cacheKey.indexOf(Constants.CACHE_PREFIX) !== -1 ||
-                    cacheKey.indexOf(this.clientId) !== -1)) {
-                this.removeItem(cacheKey);
+        this.browserStorage.getKeys().forEach((cacheKey) => {
+            if (cacheKey.indexOf(Constants.CACHE_PREFIX) !== -1 ||
+                cacheKey.indexOf(this.clientId) !== -1) {
+                this.browserStorage.removeItem(cacheKey);
             }
         });
         this.internalStorage.clear();
@@ -11536,6 +11927,7 @@ class BrowserCacheManager extends CacheManager {
      * @param cookieName
      * @param cookieValue
      * @param expires
+     * @deprecated
      */
     setItemCookie(cookieName, cookieValue, expires) {
         let cookieStr = `${encodeURIComponent(cookieName)}=${encodeURIComponent(cookieValue)};path=/;SameSite=Lax;`;
@@ -11551,6 +11943,7 @@ class BrowserCacheManager extends CacheManager {
     /**
      * Get one item by key from cookies
      * @param cookieName
+     * @deprecated
      */
     getItemCookie(cookieName) {
         const name = `${encodeURIComponent(cookieName)}=`;
@@ -11568,6 +11961,7 @@ class BrowserCacheManager extends CacheManager {
     }
     /**
      * Clear all msal-related cookies currently set in the browser. Should only be used to clear temporary cache items.
+     * @deprecated
      */
     clearMsalCookies() {
         const cookiePrefix = `${Constants.CACHE_PREFIX}.${this.clientId}`;
@@ -11586,6 +11980,7 @@ class BrowserCacheManager extends CacheManager {
     /**
      * Clear an item in the cookies by key
      * @param cookieName
+     * @deprecated
      */
     clearItemCookie(cookieName) {
         this.setItemCookie(cookieName, Constants.EMPTY_STRING, -1);
@@ -11593,24 +11988,13 @@ class BrowserCacheManager extends CacheManager {
     /**
      * Get cookie expiration time
      * @param cookieLifeDays
+     * @deprecated
      */
     getCookieExpirationTime(cookieLifeDays) {
         const today = new Date();
         const expr = new Date(today.getTime() + cookieLifeDays * this.COOKIE_LIFE_MULTIPLIER);
         return expr.toUTCString();
     }
-    /**
-     * Gets the cache object referenced by the browser
-     */
-    getCache() {
-        return this.browserStorage;
-    }
-    /**
-     * interface compat, we cannot overwrite browser cache; Functionality is supported by individual entities in browser
-     */
-    setCache() {
-        // sets nothing
-    }
     /**
      * Prepend msal.<client-id> to each key; Skip for any JSON object as Key (defined schemas do not need the key appended: AccessToken Keys or the upcoming schema)
      * @param key
@@ -11703,22 +12087,22 @@ class BrowserCacheManager extends CacheManager {
         this.logger.trace("BrowserCacheManager.resetRequestCache called");
         // check state and remove associated cache items
         if (state) {
-            this.getKeys().forEach((key) => {
+            this.temporaryCacheStorage.getKeys().forEach((key) => {
                 if (key.indexOf(state) !== -1) {
-                    this.removeItem(key);
+                    this.removeTemporaryItem(key);
                 }
             });
             // delete generic interactive request parameters
-            this.removeItem(this.generateStateKey(state));
-            this.removeItem(this.generateNonceKey(state));
-            this.removeItem(this.generateAuthorityKey(state));
-        }
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.ORIGIN_URI));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.URL_HASH));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CORRELATION_ID));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.CCS_CREDENTIAL));
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.NATIVE_REQUEST));
+            this.removeTemporaryItem(this.generateStateKey(state));
+            this.removeTemporaryItem(this.generateNonceKey(state));
+            this.removeTemporaryItem(this.generateAuthorityKey(state));
+        }
+        this.removeTemporaryItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
+        this.removeTemporaryItem(this.generateCacheKey(TemporaryCacheKeys.ORIGIN_URI));
+        this.removeTemporaryItem(this.generateCacheKey(TemporaryCacheKeys.URL_HASH));
+        this.removeTemporaryItem(this.generateCacheKey(TemporaryCacheKeys.CORRELATION_ID));
+        this.removeTemporaryItem(this.generateCacheKey(TemporaryCacheKeys.CCS_CREDENTIAL));
+        this.removeTemporaryItem(this.generateCacheKey(TemporaryCacheKeys.NATIVE_REQUEST));
         this.setInteractionInProgress(false);
     }
     /**
@@ -11744,7 +12128,7 @@ class BrowserCacheManager extends CacheManager {
     cleanRequestByInteractionType(interactionType) {
         this.logger.trace("BrowserCacheManager.cleanRequestByInteractionType called");
         // Loop through all keys to find state key
-        this.getKeys().forEach((key) => {
+        this.temporaryCacheStorage.getKeys().forEach((key) => {
             // If this key is not the state key, move on
             if (key.indexOf(TemporaryCacheKeys.REQUEST_STATE) === -1) {
                 return;
@@ -11789,7 +12173,7 @@ class BrowserCacheManager extends CacheManager {
             this.logger.error(`Parsing cached token request threw with error: ${e}`);
             throw createBrowserAuthError(unableToParseTokenRequestCacheError);
         }
-        this.removeItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
+        this.removeTemporaryItem(this.generateCacheKey(TemporaryCacheKeys.REQUEST_PARAMS));
         // Get cached authority and use if no authority is cached with request.
         if (!parsedRequest.authority) {
             const authorityCacheKey = this.generateAuthorityKey(state);
@@ -11845,7 +12229,7 @@ class BrowserCacheManager extends CacheManager {
         }
         else if (!inProgress &&
             this.getInteractionInProgress() === this.clientId) {
-            this.removeItem(key);
+            this.removeTemporaryItem(key);
         }
     }
     /**
@@ -11862,7 +12246,7 @@ class BrowserCacheManager extends CacheManager {
         // Check for cached MSAL v1 id token
         const msalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ID_TOKEN, true);
         if (msalIdTokenString) {
-            this.removeItem(this.generateCacheKey(PersistentCacheKeys.ID_TOKEN));
+            this.browserStorage.removeItem(this.generateCacheKey(PersistentCacheKeys.ID_TOKEN));
             this.logger.verbose("Cached MSAL.js v1 id token retrieved");
         }
         const cachedIdTokenString = msalIdTokenString || adalIdTokenString;
@@ -11890,7 +12274,7 @@ class BrowserCacheManager extends CacheManager {
         if (currentCacheKey !== updatedCacheKey) {
             const cacheItem = this.getItem(currentCacheKey);
             if (cacheItem) {
-                this.removeItem(currentCacheKey);
+                this.browserStorage.removeItem(currentCacheKey);
                 this.setItem(updatedCacheKey, cacheItem);
                 this.logger.verbose(`Updated an outdated ${credential.credentialType} cache key`);
                 return updatedCacheKey;
@@ -11901,19 +12285,6 @@ class BrowserCacheManager extends CacheManager {
         }
         return currentCacheKey;
     }
-    /**
-     * Returns application id as redirect context during AcquireTokenRedirect flow.
-     */
-    getRedirectRequestContext() {
-        return this.getTemporaryCache(TemporaryCacheKeys.REDIRECT_CONTEXT, true);
-    }
-    /**
-     * Sets application id as the redirect context during AcquireTokenRedirect flow.
-     * @param value
-     */
-    setRedirectRequestContext(value) {
-        this.setTemporaryCache(TemporaryCacheKeys.REDIRECT_CONTEXT, value, true);
-    }
     /**
      * Builds credential entities from AuthenticationResult object and saves the resulting credentials to the cache
      * @param result
@@ -12148,47 +12519,6 @@ class BaseInteractionClient {
             }
         }
     }
-    /**
-     * Initializer function for all request APIs
-     * @param request
-     */
-    async initializeBaseRequest(request) {
-        this.performanceClient.addQueueMeasurement(PerformanceEvents.InitializeBaseRequest, this.correlationId);
-        const authority = request.authority || this.config.auth.authority;
-        const scopes = [...((request && request.scopes) || [])];
-        const validatedRequest = {
-            ...request,
-            correlationId: this.correlationId,
-            authority,
-            scopes,
-        };
-        // Set authenticationScheme to BEARER if not explicitly set in the request
-        if (!validatedRequest.authenticationScheme) {
-            validatedRequest.authenticationScheme = AuthenticationScheme.BEARER;
-            this.logger.verbose('Authentication Scheme wasn\'t explicitly set in request, defaulting to "Bearer" request');
-        }
-        else {
-            if (validatedRequest.authenticationScheme ===
-                AuthenticationScheme.SSH) {
-                if (!request.sshJwk) {
-                    throw createClientConfigurationError(missingSshJwk);
-                }
-                if (!request.sshKid) {
-                    throw createClientConfigurationError(missingSshKid);
-                }
-            }
-            this.logger.verbose(`Authentication Scheme set to "${validatedRequest.authenticationScheme}" as configured in Auth request`);
-        }
-        // Set requested claims hash if claims-based caching is enabled and claims were requested
-        if (this.config.cache.claimsBasedCachingEnabled &&
-            request.claims &&
-            // Checks for empty stringified object "{}" which doesn't qualify as requested claims
-            !StringUtils.isEmptyObj(request.claims)) {
-            validatedRequest.requestedClaimsHash =
-                await this.browserCrypto.hashString(request.claims);
-        }
-        return validatedRequest;
-    }
     /**
      *
      * Use to get the redirect uri configured in MSAL or null.
@@ -12306,6 +12636,60 @@ async function generateCodeChallengeFromVerifier(pkceCodeVerifier, performanceCl
     }
 }
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Initializer function for all request APIs
+ * @param request
+ */
+async function initializeBaseRequest(request, config, performanceClient, logger) {
+    performanceClient.addQueueMeasurement(PerformanceEvents.InitializeBaseRequest, request.correlationId);
+    const authority = request.authority || config.auth.authority;
+    const scopes = [...((request && request.scopes) || [])];
+    const validatedRequest = {
+        ...request,
+        correlationId: request.correlationId,
+        authority,
+        scopes,
+    };
+    // Set authenticationScheme to BEARER if not explicitly set in the request
+    if (!validatedRequest.authenticationScheme) {
+        validatedRequest.authenticationScheme = AuthenticationScheme.BEARER;
+        logger.verbose('Authentication Scheme wasn\'t explicitly set in request, defaulting to "Bearer" request');
+    }
+    else {
+        if (validatedRequest.authenticationScheme === AuthenticationScheme.SSH) {
+            if (!request.sshJwk) {
+                throw createClientConfigurationError(missingSshJwk);
+            }
+            if (!request.sshKid) {
+                throw createClientConfigurationError(missingSshKid);
+            }
+        }
+        logger.verbose(`Authentication Scheme set to "${validatedRequest.authenticationScheme}" as configured in Auth request`);
+    }
+    // Set requested claims hash if claims-based caching is enabled and claims were requested
+    if (config.cache.claimsBasedCachingEnabled &&
+        request.claims &&
+        // Checks for empty stringified object "{}" which doesn't qualify as requested claims
+        !StringUtils.isEmptyObj(request.claims)) {
+        validatedRequest.requestedClaimsHash = await hashString(request.claims);
+    }
+    return validatedRequest;
+}
+async function initializeSilentRequest(request, account, config, performanceClient, logger) {
+    performanceClient.addQueueMeasurement(PerformanceEvents.InitializeSilentRequest, request.correlationId);
+    const baseRequest = await invokeAsync(initializeBaseRequest, PerformanceEvents.InitializeBaseRequest, logger, performanceClient, request.correlationId)(request, config, performanceClient, logger);
+    return {
+        ...request,
+        ...baseRequest,
+        account: account,
+        forceRefresh: request.forceRefresh || false,
+    };
+}
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -12480,7 +12864,7 @@ class StandardInteractionClient extends BaseInteractionClient {
             interactionType: interactionType,
         };
         const state = ProtocolUtils.setRequestState(this.browserCrypto, (request && request.state) || Constants.EMPTY_STRING, browserState);
-        const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, this.correlationId)(request);
+        const baseRequest = await invokeAsync(initializeBaseRequest, PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, this.correlationId)({ ...request, correlationId: this.correlationId }, this.config, this.performanceClient, this.logger);
         const validatedRequest = {
             ...baseRequest,
             redirectUri: redirectUri,
@@ -12599,7 +12983,8 @@ class SilentCacheClient extends StandardInteractionClient {
         this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentCacheClientAcquireToken, silentRequest.correlationId);
         // Telemetry manager only used to increment cacheHits here
         const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);
-        const silentAuthClient = await this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);
+        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);
+        const silentAuthClient = new SilentFlowClient(clientConfig, this.performanceClient);
         this.logger.verbose("Silent auth client created");
         try {
             const response = await invokeAsync(silentAuthClient.acquireCachedToken.bind(silentAuthClient), PerformanceEvents.SilentFlowClientAcquireCachedToken, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest);
@@ -12626,26 +13011,6 @@ class SilentCacheClient extends StandardInteractionClient {
         const validLogoutRequest = this.initializeLogoutRequest(logoutRequest);
         return this.clearCacheOnLogout(validLogoutRequest?.account);
     }
-    /**
-     * Creates an Silent Flow Client with the given authority, or the default authority.
-     * @param serverTelemetryManager
-     * @param authorityUrl
-     */
-    async createSilentFlowClient(serverTelemetryManager, authorityUrl, azureCloudOptions, account) {
-        // Create auth module.
-        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, azureCloudOptions, account);
-        return new SilentFlowClient(clientConfig, this.performanceClient);
-    }
-    async initializeSilentRequest(request, account) {
-        this.performanceClient.addQueueMeasurement(PerformanceEvents.InitializeSilentRequest, this.correlationId);
-        const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, this.correlationId)(request);
-        return {
-            ...request,
-            ...baseRequest,
-            account: account,
-            forceRefresh: request.forceRefresh || false,
-        };
-    }
 }
 
 /*
@@ -14725,7 +15090,7 @@ class SilentRefreshClient extends StandardInteractionClient {
      */
     async acquireToken(request) {
         this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentRefreshClientAcquireToken, request.correlationId);
-        const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, request.correlationId)(request);
+        const baseRequest = await invokeAsync(initializeBaseRequest, PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, request.correlationId)(request, this.config, this.performanceClient, this.logger);
         const silentRequest = {
             ...request,
             ...baseRequest,
@@ -15081,7 +15446,6 @@ class StandardController {
      * @param configuration Object for the MSAL PublicClientApplication instance
      */
     constructor(operatingContext) {
-        this.atsAsyncMeasurement = undefined;
         this.operatingContext = operatingContext;
         this.isBrowserEnvironment =
             this.operatingContext.isBrowserEnvironment();
@@ -15133,14 +15497,12 @@ class StandardController {
         await controller.initialize();
         return controller;
     }
-    trackPageVisibility() {
-        if (!this.atsAsyncMeasurement) {
+    trackPageVisibility(correlationId) {
+        if (!correlationId) {
             return;
         }
         this.logger.info("Perf: Visibility change detected");
-        this.atsAsyncMeasurement.increment({
-            visibilityChangeCount: 1,
-        });
+        this.performanceClient.incrementFields({ visibilityChangeCount: 1 }, correlationId);
     }
     /**
      * Initializer function to perform async startup tasks such as connecting to WAM extension
@@ -15245,18 +15607,9 @@ class StandardController {
                         this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, exports.InteractionType.Redirect, null, eventError);
                     }
                     this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
-                    if (eventError instanceof AuthError) {
-                        rootMeasurement.end({
-                            success: false,
-                            errorCode: eventError.errorCode,
-                            subErrorCode: eventError.subError,
-                        });
-                    }
-                    else {
-                        rootMeasurement.end({
-                            success: false,
-                        });
-                    }
+                    rootMeasurement.end({
+                        success: false,
+                    }, eventError);
                     throw e;
                 });
                 this.redirectResponse.set(redirectResponseKey, response);
@@ -15282,7 +15635,8 @@ class StandardController {
         // Preflight request
         const correlationId = this.getRequestCorrelationId(request);
         this.logger.verbose("acquireTokenRedirect called", correlationId);
-        this.preflightBrowserEnvironmentCheck(exports.InteractionType.Redirect);
+        redirectPreflightCheck(this.initialized, this.config);
+        this.browserStorage.setInteractionInProgress(true);
         // If logged in, emit acquire token events
         const isLoggedIn = this.getAllAccounts().length > 0;
         if (isLoggedIn) {
@@ -15308,7 +15662,7 @@ class StandardController {
                     const redirectClient = this.createRedirectClient(correlationId);
                     return redirectClient.acquireToken(request);
                 }
-                this.getBrowserStorage().setInteractionInProgress(false);
+                this.browserStorage.setInteractionInProgress(false);
                 throw e;
             });
         }
@@ -15341,7 +15695,8 @@ class StandardController {
         const atPopupMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPopup, correlationId);
         try {
             this.logger.verbose("acquireTokenPopup called", correlationId);
-            this.preflightBrowserEnvironmentCheck(exports.InteractionType.Popup);
+            preflightCheck(this.initialized);
+            this.browserStorage.setInteractionInProgress(true);
         }
         catch (e) {
             // Since this function is syncronous we need to reject
@@ -15362,7 +15717,7 @@ class StandardController {
                 correlationId,
             }, ApiId.acquireTokenPopup)
                 .then((response) => {
-                this.getBrowserStorage().setInteractionInProgress(false);
+                this.browserStorage.setInteractionInProgress(false);
                 atPopupMeasurement.end({
                     success: true,
                     isNativeBroker: true,
@@ -15382,7 +15737,7 @@ class StandardController {
                     const popupClient = this.createPopupClient(correlationId);
                     return popupClient.acquireToken(request);
                 }
-                this.getBrowserStorage().setInteractionInProgress(false);
+                this.browserStorage.setInteractionInProgress(false);
                 throw e;
             });
         }
@@ -15420,10 +15775,8 @@ class StandardController {
                 this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, exports.InteractionType.Popup, null, e);
             }
             atPopupMeasurement.end({
-                errorCode: e.errorCode,
-                subErrorCode: e.subError,
                 success: false,
-            });
+            }, e);
             // Since this function is syncronous we need to reject
             return Promise.reject(e);
         });
@@ -15464,7 +15817,7 @@ class StandardController {
             prompt: request.prompt,
             correlationId: correlationId,
         };
-        this.preflightBrowserEnvironmentCheck(exports.InteractionType.Silent);
+        preflightCheck(this.initialized);
         this.ssoSilentMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SsoSilent, correlationId);
         this.ssoSilentMeasurement?.increment({
             visibilityChangeCount: 0,
@@ -15505,10 +15858,8 @@ class StandardController {
             .catch((e) => {
             this.eventHandler.emitEvent(EventType.SSO_SILENT_FAILURE, exports.InteractionType.Silent, null, e);
             this.ssoSilentMeasurement?.end({
-                errorCode: e.errorCode,
-                subErrorCode: e.subError,
                 success: false,
-            });
+            }, e);
             throw e;
         })
             .finally(() => {
@@ -15527,8 +15878,8 @@ class StandardController {
      */
     async acquireTokenByCode(request) {
         const correlationId = this.getRequestCorrelationId(request);
-        this.preflightBrowserEnvironmentCheck(exports.InteractionType.Silent);
         this.logger.trace("acquireTokenByCode called", correlationId);
+        preflightCheck(this.initialized);
         this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_START, exports.InteractionType.Silent, request);
         const atbcMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenByCode, correlationId);
         try {
@@ -15563,10 +15914,8 @@ class StandardController {
                         this.hybridAuthCodeResponses.delete(hybridAuthCode);
                         this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, exports.InteractionType.Silent, null, error);
                         atbcMeasurement.end({
-                            errorCode: error.errorCode,
-                            subErrorCode: error.subError,
                             success: false,
-                        });
+                        }, error);
                         throw error;
                     });
                     this.hybridAuthCodeResponses.set(hybridAuthCode, response);
@@ -15602,10 +15951,8 @@ class StandardController {
         catch (e) {
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_BY_CODE_FAILURE, exports.InteractionType.Silent, null, e);
             atbcMeasurement.end({
-                errorCode: (e instanceof AuthError && e.errorCode) || undefined,
-                subErrorCode: (e instanceof AuthError && e.subError) || undefined,
                 success: false,
-            });
+            }, e);
             throw e;
         }
     }
@@ -15636,10 +15983,8 @@ class StandardController {
         })
             .catch((tokenRenewalError) => {
             this.acquireTokenByCodeAsyncMeasurement?.end({
-                errorCode: tokenRenewalError.errorCode,
-                subErrorCode: tokenRenewalError.subError,
                 success: false,
-            });
+            }, tokenRenewalError);
             throw tokenRenewalError;
         })
             .finally(() => {
@@ -15654,12 +15999,13 @@ class StandardController {
      * @param silentRequest SilentRequest
      * @returns A promise that, when resolved, returns the access token
      */
-    async acquireTokenFromCache(silentCacheClient, commonRequest, cacheLookupPolicy) {
+    async acquireTokenFromCache(commonRequest, cacheLookupPolicy) {
         this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenFromCache, commonRequest.correlationId);
         switch (cacheLookupPolicy) {
             case CacheLookupPolicy.Default:
             case CacheLookupPolicy.AccessToken:
             case CacheLookupPolicy.AccessTokenAndRefreshToken:
+                const silentCacheClient = this.createSilentCacheClient(commonRequest.correlationId);
                 return invokeAsync(silentCacheClient.acquireToken.bind(silentCacheClient), PerformanceEvents.SilentCacheClientAcquireToken, this.logger, this.performanceClient, commonRequest.correlationId)(commonRequest);
             default:
                 throw createClientAuthError(tokenRefreshRequired);
@@ -15716,7 +16062,8 @@ class StandardController {
      */
     async logoutRedirect(logoutRequest) {
         const correlationId = this.getRequestCorrelationId(logoutRequest);
-        this.preflightBrowserEnvironmentCheck(exports.InteractionType.Redirect);
+        redirectPreflightCheck(this.initialized, this.config);
+        this.browserStorage.setInteractionInProgress(true);
         const redirectClient = this.createRedirectClient(correlationId);
         return redirectClient.logout(logoutRequest);
     }
@@ -15727,7 +16074,8 @@ class StandardController {
     logoutPopup(logoutRequest) {
         try {
             const correlationId = this.getRequestCorrelationId(logoutRequest);
-            this.preflightBrowserEnvironmentCheck(exports.InteractionType.Popup);
+            preflightCheck(this.initialized);
+            this.browserStorage.setInteractionInProgress(true);
             const popupClient = this.createPopupClient(correlationId);
             return popupClient.logout(logoutRequest);
         }
@@ -15893,52 +16241,6 @@ class StandardController {
         }
     }
     // #region Helpers
-    /**
-     * Helper to validate app environment before making an auth request
-     *
-     * @protected
-     * @param {InteractionType} interactionType What kind of interaction is being used
-     * @param {boolean} [isAppEmbedded=false] Whether to set interaction in progress temp cache flag
-     */
-    preflightBrowserEnvironmentCheck(interactionType, isAppEmbedded = false) {
-        this.logger.verbose("preflightBrowserEnvironmentCheck started");
-        // Block request if not in browser environment
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
-        // Block redirects if in an iframe
-        blockRedirectInIframe(interactionType, this.config.system.allowRedirectInIframe);
-        // Block auth requests inside a hidden iframe
-        blockReloadInHiddenIframes();
-        // Block redirectUri opened in a popup from calling MSAL APIs
-        blockAcquireTokenInPopups();
-        // Block token acquisition before initialize has been called
-        blockAPICallsBeforeInitialize(this.initialized);
-        // Block redirects if memory storage is enabled but storeAuthStateInCookie is not
-        if (interactionType === exports.InteractionType.Redirect &&
-            this.config.cache.cacheLocation ===
-                BrowserCacheLocation.MemoryStorage &&
-            !this.config.cache.storeAuthStateInCookie) {
-            throw createBrowserConfigurationAuthError(inMemRedirectUnavailable);
-        }
-        if (interactionType === exports.InteractionType.Redirect ||
-            interactionType === exports.InteractionType.Popup) {
-            this.preflightInteractiveRequest(!isAppEmbedded);
-        }
-    }
-    /**
-     * Preflight check for interactive requests
-     *
-     * @protected
-     * @param {boolean} setInteractionInProgress Whether to set interaction in progress temp cache flag
-     */
-    preflightInteractiveRequest(setInteractionInProgress) {
-        this.logger.verbose("preflightInteractiveRequest called, validating app environment");
-        // block the reload if it occurred inside a hidden iframe
-        blockReloadInHiddenIframes();
-        // Set interaction in progress temporary cache or throw if alread set.
-        if (setInteractionInProgress) {
-            this.getBrowserStorage().setInteractionInProgress(true);
-        }
-    }
     /**
      * Acquire a token from native device (e.g. WAM)
      * @param request
@@ -16123,12 +16425,6 @@ class StandardController {
     getPerformanceClient() {
         return this.performanceClient;
     }
-    /**
-     * Returns the browser storage
-     */
-    getBrowserStorage() {
-        return this.browserStorage;
-    }
     /**
      * Returns the browser env indicator
      */
@@ -16206,7 +16502,7 @@ class StandardController {
         atsMeasurement.add({
             cacheLookupPolicy: request.cacheLookupPolicy,
         });
-        this.preflightBrowserEnvironmentCheck(exports.InteractionType.Silent);
+        preflightCheck(this.initialized);
         this.logger.verbose("acquireTokenSilent called", correlationId);
         const account = request.account || this.getActiveAccount();
         if (!account) {
@@ -16251,10 +16547,8 @@ class StandardController {
                 .catch((error) => {
                 this.activeSilentTokenRequests.delete(silentRequestKey);
                 atsMeasurement.end({
-                    errorCode: error.errorCode,
-                    subErrorCode: error.subError,
                     success: false,
-                });
+                }, error);
                 throw error;
             });
             this.activeSilentTokenRequests.set(silentRequestKey, response);
@@ -16282,11 +16576,10 @@ class StandardController {
     async acquireTokenSilentAsync(request, account) {
         this.performanceClient.addQueueMeasurement(PerformanceEvents.AcquireTokenSilentAsync, request.correlationId);
         this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Silent, request);
-        this.atsAsyncMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenSilentAsync, request.correlationId);
-        this.atsAsyncMeasurement?.increment({
-            visibilityChangeCount: 0,
-        });
-        document.addEventListener("visibilitychange", this.trackPageVisibility);
+        if (request.correlationId) {
+            this.performanceClient.incrementFields({ visibilityChangeCount: 0 }, request.correlationId);
+        }
+        document.addEventListener("visibilitychange", () => this.trackPageVisibility(request.correlationId));
         let result;
         if (NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider, request.authenticationScheme) &&
             account.nativeAccountId) {
@@ -16309,16 +16602,13 @@ class StandardController {
         }
         else {
             this.logger.verbose("acquireTokenSilent - attempting to acquire token from web flow");
-            const silentCacheClient = this.createSilentCacheClient(request.correlationId);
-            const silentRequest = await invokeAsync(silentCacheClient.initializeSilentRequest.bind(silentCacheClient), PerformanceEvents.InitializeSilentRequest, this.logger, this.performanceClient, request.correlationId)(request, account);
+            const silentRequest = await invokeAsync(initializeSilentRequest, PerformanceEvents.InitializeSilentRequest, this.logger, this.performanceClient, request.correlationId)(request, account, this.config, this.performanceClient, this.logger);
             const cacheLookupPolicy = request.cacheLookupPolicy || CacheLookupPolicy.Default;
-            result = invokeAsync(this.acquireTokenFromCache.bind(this), PerformanceEvents.AcquireTokenFromCache, this.logger, this.performanceClient, silentRequest.correlationId)(silentCacheClient, silentRequest, cacheLookupPolicy).catch((cacheError) => {
+            result = invokeAsync(this.acquireTokenFromCache.bind(this), PerformanceEvents.AcquireTokenFromCache, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest, cacheLookupPolicy).catch((cacheError) => {
                 if (request.cacheLookupPolicy ===
                     CacheLookupPolicy.AccessToken) {
                     throw cacheError;
                 }
-                // block the reload if it occurred inside a hidden iframe
-                blockReloadInHiddenIframes();
                 this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_NETWORK_START, exports.InteractionType.Silent, silentRequest);
                 return invokeAsync(this.acquireTokenByRefreshToken.bind(this), PerformanceEvents.AcquireTokenByRefreshToken, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest, cacheLookupPolicy).catch((refreshTokenError) => {
                     const shouldTryToResolveSilently = checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, silentRequest, cacheLookupPolicy);
@@ -16336,25 +16626,21 @@ class StandardController {
         return result
             .then((response) => {
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, response);
-            this.atsAsyncMeasurement?.end({
-                success: true,
-                fromCache: response.fromCache,
-                isNativeBroker: response.fromNativeBroker,
-                requestId: response.requestId,
-            });
+            if (request.correlationId) {
+                this.performanceClient.addFields({
+                    fromCache: response.fromCache,
+                    isNativeBroker: response.fromNativeBroker,
+                    requestId: response.requestId,
+                }, request.correlationId);
+            }
             return response;
         })
             .catch((tokenRenewalError) => {
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, tokenRenewalError);
-            this.atsAsyncMeasurement?.end({
-                errorCode: tokenRenewalError.errorCode,
-                subErrorCode: tokenRenewalError.subError,
-                success: false,
-            });
             throw tokenRenewalError;
         })
             .finally(() => {
-            document.removeEventListener("visibilitychange", this.trackPageVisibility);
+            document.removeEventListener("visibilitychange", () => this.trackPageVisibility(request.correlationId));
         });
     }
 }
@@ -16795,27 +17081,27 @@ class UnknownOperatingContextController {
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     acquireTokenPopup(request) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     acquireTokenRedirect(request) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return Promise.resolve();
     }
     acquireTokenSilent(
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     silentRequest) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     acquireTokenByCode(
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     request) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     acquireTokenNative(
@@ -16826,7 +17112,7 @@ class UnknownOperatingContextController {
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     accountId) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     acquireTokenByRefreshToken(
@@ -16835,7 +17121,7 @@ class UnknownOperatingContextController {
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     silentRequest) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     addEventCallback(callback) {
@@ -16847,22 +17133,22 @@ class UnknownOperatingContextController {
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     addPerformanceCallback(callback) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return "";
     }
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     removePerformanceCallback(callbackId) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return true;
     }
     enableAccountStorageEvents() {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
     }
     disableAccountStorageEvents() {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
     }
     handleRedirectPromise(
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
@@ -16874,45 +17160,45 @@ class UnknownOperatingContextController {
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     request) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     loginRedirect(request) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     logout(logoutRequest) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     logoutRedirect(
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     logoutRequest) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     logoutPopup(
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     logoutRequest) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     ssoSilent(
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     request) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     getTokenCache() {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     getLogger() {
@@ -16921,16 +17207,16 @@ class UnknownOperatingContextController {
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     setLogger(logger) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
     }
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     setActiveAccount(account) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
     }
     getActiveAccount() {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return null;
     }
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
@@ -16940,43 +17226,35 @@ class UnknownOperatingContextController {
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     setNavigationClient(navigationClient) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
     }
     getConfiguration() {
         return this.config;
     }
     isBrowserEnv() {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return true;
     }
     getBrowserCrypto() {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     getPerformanceClient() {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
     getRedirectResponse() {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
         return {};
     }
-    preflightBrowserEnvironmentCheck(
-    // eslint-disable-next-line @typescript-eslint/no-unused-vars
-    interactionType, 
-    // eslint-disable-next-line @typescript-eslint/no-unused-vars
-    isAppEmbedded) {
-        blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
-    }
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     async clearCache(logoutRequest) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
     }
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     async hydrateCache(
@@ -16985,7 +17263,7 @@ class UnknownOperatingContextController {
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     request) {
         blockAPICallsBeforeInitialize(this.initialized);
-        blockNonBrowserEnvironment(this.isBrowserEnvironment);
+        blockNonBrowserEnvironment();
     }
 }
 
@@ -17636,11 +17914,11 @@ function getPerfDurationMs(startTime) {
     return Math.round(window.performance.now() - startTime);
 }
 class BrowserPerformanceClient extends PerformanceClient {
-    constructor(configuration, intFields) {
+    constructor(configuration, intFields, abbreviations) {
         super(configuration.auth.clientId, configuration.auth.authority || `${Constants.DEFAULT_AUTHORITY}`, new Logger(configuration.system?.loggerOptions || {}, name, version), name, version, configuration.telemetry?.application || {
             appName: "",
             appVersion: "",
-        }, intFields);
+        }, intFields, abbreviations);
     }
     generateId() {
         return createNewGuid();
@@ -17684,13 +17962,13 @@ class BrowserPerformanceClient extends PerformanceClient {
         void browserMeasurement?.then((measurement) => measurement.startMeasurement());
         return {
             ...inProgressEvent,
-            end: (event) => {
+            end: (event, error) => {
                 const res = inProgressEvent.end({
                     ...event,
                     startPageVisibility,
                     endPageVisibility: this.getPageVisibility(),
                     durationMs: getPerfDurationMs(startTime),
-                });
+                }, error);
                 void browserMeasurement?.then((measurement) => measurement.endMeasurement());
                 this.deleteIncompleteSubMeasurements(inProgressEvent);
                 return res;
@@ -17886,11 +18164,12 @@ class NestedAppAuthAdapter {
         }
         const requestBuilder = new RequestParameterBuilder();
         const claims = requestBuilder.addClientCapabilitiesToClaims(request.claims, this.clientCapabilities);
+        const scopes = request.scopes || OIDC_DEFAULT_SCOPES;
         const tokenRequest = {
             platformBrokerId: request.account?.homeAccountId,
             clientId: this.clientId,
             authority: request.authority,
-            scope: request.scopes.join(" "),
+            scope: scopes.join(" "),
             correlationId: request.correlationId !== undefined
                 ? request.correlationId
                 : this.crypto.createNewGuid(),
@@ -18072,12 +18351,22 @@ class NestedAppAuthController {
         // do nothing not required by this controller
         return Promise.resolve();
     }
+    ensureValidRequest(request) {
+        if (request?.correlationId) {
+            return request;
+        }
+        return {
+            ...request,
+            correlationId: this.browserCrypto.createNewGuid(),
+        };
+    }
     async acquireTokenInteractive(request) {
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Popup, request);
-        const atPopupMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPopup, request.correlationId);
+        const validRequest = this.ensureValidRequest(request);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Popup, validRequest);
+        const atPopupMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.AcquireTokenPopup, validRequest.correlationId);
         atPopupMeasurement?.add({ nestedAppAuthRequest: true });
         try {
-            const naaRequest = this.nestedAppAuthAdapter.toNaaTokenRequest(request);
+            const naaRequest = this.nestedAppAuthAdapter.toNaaTokenRequest(validRequest);
             const reqTimestamp = nowSeconds();
             const response = await this.bridgeProxy.getTokenInteractive(naaRequest);
             const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
@@ -18097,16 +18386,15 @@ class NestedAppAuthController {
             const error = this.nestedAppAuthAdapter.fromBridgeError(e);
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Popup, null, e);
             atPopupMeasurement.end({
-                errorCode: error.errorCode,
-                subErrorCode: error.subError,
                 success: false,
-            });
+            }, e);
             throw error;
         }
     }
     async acquireTokenSilentInternal(request) {
-        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Silent, request);
-        const ssoSilentMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SsoSilent, request.correlationId);
+        const validRequest = this.ensureValidRequest(request);
+        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_START, exports.InteractionType.Silent, validRequest);
+        const ssoSilentMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.SsoSilent, validRequest.correlationId);
         ssoSilentMeasurement?.increment({
             visibilityChangeCount: 0,
         });
@@ -18114,7 +18402,7 @@ class NestedAppAuthController {
             nestedAppAuthRequest: true,
         });
         try {
-            const naaRequest = this.nestedAppAuthAdapter.toNaaTokenRequest(request);
+            const naaRequest = this.nestedAppAuthAdapter.toNaaTokenRequest(validRequest);
             const reqTimestamp = nowSeconds();
             const response = await this.bridgeProxy.getTokenSilent(naaRequest);
             const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
@@ -18134,10 +18422,8 @@ class NestedAppAuthController {
             const error = this.nestedAppAuthAdapter.fromBridgeError(e);
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Silent, null, e);
             ssoSilentMeasurement?.end({
-                errorCode: error.errorCode,
-                subErrorCode: error.subError,
                 success: false,
-            });
+            }, e);
             throw error;
         }
     }
@@ -18254,7 +18540,7 @@ class NestedAppAuthController {
     }
     handleRedirectPromise(hash // eslint-disable-line @typescript-eslint/no-unused-vars
     ) {
-        throw NestedAppAuthError.createUnsupportedError();
+        return Promise.resolve(null);
     }
     loginPopup(request // eslint-disable-line @typescript-eslint/no-unused-vars
     ) {
@@ -18347,11 +18633,6 @@ class NestedAppAuthController {
     getRedirectResponse() {
         throw NestedAppAuthError.createUnsupportedError();
     }
-    preflightBrowserEnvironmentCheck(interactionType, // eslint-disable-line @typescript-eslint/no-unused-vars
-    setInteractionInProgress // eslint-disable-line @typescript-eslint/no-unused-vars
-    ) {
-        throw NestedAppAuthError.createUnsupportedError();
-    }
     // eslint-disable-next-line @typescript-eslint/no-unused-vars
     async clearCache(logoutRequest) {
         throw NestedAppAuthError.createUnsupportedError();
@@ -18418,6 +18699,7 @@ exports.ServerError = ServerError;
 exports.ServerResponseType = ServerResponseType;
 exports.SignedHttpRequest = SignedHttpRequest;
 exports.StringUtils = StringUtils;
+exports.StubPerformanceClient = StubPerformanceClient;
 exports.UrlString = UrlString;
 exports.WrapperSKU = WrapperSKU;
 exports.stubbedPublicClientApplication = stubbedPublicClientApplication;