@azure/msal-browser 3.11.1 → 3.13.0

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.11.1 2024-03-27 */
+/*! @azure/msal-browser v3.13.0 2024-04-11 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -6,7 +6,7 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msal = {}));
 })(this, (function (exports) { 'use strict';
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -71,11 +71,20 @@
     };
     const HttpStatus = {
         SUCCESS_RANGE_START: 200,
+        SUCCESS: 200,
         SUCCESS_RANGE_END: 299,
         REDIRECT: 302,
         CLIENT_ERROR_RANGE_START: 400,
+        BAD_REQUEST: 400,
+        UNAUTHORIZED: 401,
+        NOT_FOUND: 404,
+        REQUEST_TIMEOUT: 408,
+        TOO_MANY_REQUESTS: 429,
         CLIENT_ERROR_RANGE_END: 499,
         SERVER_ERROR_RANGE_START: 500,
+        INTERNAL_SERVER_ERROR: 500,
+        SERVICE_UNAVAILABLE: 503,
+        GATEWAY_TIMEOUT: 504,
         SERVER_ERROR_RANGE_END: 599,
     };
     const OIDC_DEFAULT_SCOPES = [
@@ -300,8 +309,10 @@
         Jwk: "JWK",
         Pop: "pop",
     };
+    // Token renewal offset default in seconds
+    const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -318,7 +329,7 @@
         unexpectedError: unexpectedError
     });
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -367,7 +378,7 @@
             : AuthErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -465,7 +476,7 @@
         userTimeoutReached: userTimeoutReached
     });
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -717,7 +728,7 @@
         return new ClientAuthError(errorCode, additionalMessage);
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -750,7 +761,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -941,12 +952,12 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /* eslint-disable header/header */
     const name$1 = "@azure/msal-common";
-    const version$1 = "14.8.1";
+    const version$1 = "14.9.0";
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -966,7 +977,7 @@
         AzureUsGovernment: "https://login.microsoftonline.us",
     };
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1027,7 +1038,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1064,7 +1075,7 @@
         return cachedAtSec > nowSeconds();
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1391,7 +1402,7 @@
         return metadata.expiresAt <= nowSeconds();
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1445,7 +1456,7 @@
         urlParseError: urlParseError
     });
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1583,7 +1594,7 @@
         return new ClientConfigurationError(errorCode);
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1680,7 +1691,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1880,7 +1891,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1920,7 +1931,7 @@
         };
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1982,7 +1993,7 @@
         return updatedAccountInfo;
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1997,7 +2008,7 @@
         Ciam: 3,
     };
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2019,7 +2030,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2032,7 +2043,7 @@
         OIDC: "OIDC",
     };
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2279,7 +2290,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2326,7 +2337,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2490,7 +2501,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2630,7 +2641,42 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
+    const cacheUnknownErrorCode = "cache_error_unknown";
+
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    const CacheErrorMessages = {
+        [cacheQuotaExceededErrorCode]: "Exceeded cache storage capacity.",
+        [cacheUnknownErrorCode]: "Unexpected error occurred when using cache storage.",
+    };
+    /**
+     * Error thrown when there is an error with the cache
+     */
+    class CacheError extends Error {
+        constructor(errorCode, errorMessage) {
+            const message = errorMessage ||
+                (CacheErrorMessages[errorCode]
+                    ? CacheErrorMessages[errorCode]
+                    : CacheErrorMessages[cacheUnknownErrorCode]);
+            super(`${errorCode}: ${message}`);
+            Object.setPrototypeOf(this, CacheError.prototype);
+            this.name = "CacheError";
+            this.errorCode = errorCode;
+            this.errorMessage = message;
+        }
+    }
+
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2794,27 +2840,51 @@
         }
         /**
          * saves a cache record
-         * @param cacheRecord
+         * @param cacheRecord {CacheRecord}
+         * @param storeInCache {?StoreInCache}
+         * @param correlationId {?string} correlation id
          */
-        async saveCacheRecord(cacheRecord, storeInCache) {
+        async saveCacheRecord(cacheRecord, storeInCache, correlationId) {
             if (!cacheRecord) {
                 throw createClientAuthError(invalidCacheRecord);
             }
-            if (!!cacheRecord.account) {
-                this.setAccount(cacheRecord.account);
-            }
-            if (!!cacheRecord.idToken && storeInCache?.idToken !== false) {
-                this.setIdTokenCredential(cacheRecord.idToken);
-            }
-            if (!!cacheRecord.accessToken && storeInCache?.accessToken !== false) {
-                await this.saveAccessToken(cacheRecord.accessToken);
-            }
-            if (!!cacheRecord.refreshToken &&
-                storeInCache?.refreshToken !== false) {
-                this.setRefreshTokenCredential(cacheRecord.refreshToken);
+            try {
+                if (!!cacheRecord.account) {
+                    this.setAccount(cacheRecord.account);
+                }
+                if (!!cacheRecord.idToken && storeInCache?.idToken !== false) {
+                    this.setIdTokenCredential(cacheRecord.idToken);
+                }
+                if (!!cacheRecord.accessToken &&
+                    storeInCache?.accessToken !== false) {
+                    await this.saveAccessToken(cacheRecord.accessToken);
+                }
+                if (!!cacheRecord.refreshToken &&
+                    storeInCache?.refreshToken !== false) {
+                    this.setRefreshTokenCredential(cacheRecord.refreshToken);
+                }
+                if (!!cacheRecord.appMetadata) {
+                    this.setAppMetadata(cacheRecord.appMetadata);
+                }
             }
-            if (!!cacheRecord.appMetadata) {
-                this.setAppMetadata(cacheRecord.appMetadata);
+            catch (e) {
+                this.commonLogger?.error(`CacheManager.saveCacheRecord: failed`);
+                if (e instanceof Error) {
+                    this.commonLogger?.errorPii(`CacheManager.saveCacheRecord: ${e.message}`, correlationId);
+                    if (e.name === "QuotaExceededError" ||
+                        e.name === "NS_ERROR_DOM_QUOTA_REACHED" ||
+                        e.message.includes("exceeded the quota")) {
+                        this.commonLogger?.error(`CacheManager.saveCacheRecord: exceeded storage quota`, correlationId);
+                        throw new CacheError(cacheQuotaExceededErrorCode);
+                    }
+                    else {
+                        throw new CacheError(e.name, e.message);
+                    }
+                }
+                else {
+                    this.commonLogger?.errorPii(`CacheManager.saveCacheRecord: ${e}`, correlationId);
+                    throw new CacheError(cacheUnknownErrorCode);
+                }
             }
         }
         /**
@@ -3861,14 +3931,12 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
-    // Token renewal offset default in seconds
-    const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
     const DEFAULT_SYSTEM_OPTIONS = {
         tokenRenewalOffsetSeconds: DEFAULT_TOKEN_RENEWAL_OFFSET_SEC,
         preventCorsPreflight: false,
@@ -3961,7 +4029,7 @@
         return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3978,7 +4046,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4076,7 +4144,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4113,7 +4181,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4123,7 +4191,7 @@
         UPN: "UPN",
     };
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4170,7 +4238,7 @@
     const LOGIN_HINT = "login_hint";
     const DOMAIN_HINT = "domain_hint";
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4254,7 +4322,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4638,7 +4706,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4650,7 +4718,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4660,7 +4728,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4670,7 +4738,7 @@
             response.hasOwnProperty("error_description"));
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4732,6 +4800,7 @@
          * Used to acquire a new set of tokens from the authorize endpoint in a hidden iframe.
          */
         SilentIframeClientAcquireToken: "silentIframeClientAcquireToken",
+        AwaitConcurrentIframe: "awaitConcurrentIframe",
         /**
          * acquireToken API in SilentRereshClient (msal-browser).
          * Used to acquire a new set of tokens from the token endpoint using a refresh token.
@@ -5144,7 +5213,7 @@
         "multiMatchedRT",
     ]);
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5240,7 +5309,7 @@
         };
     };
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5349,7 +5418,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5361,7 +5430,7 @@
      * @internal
      */
     class Authority {
-        constructor(authority, networkInterface, cacheManager, authorityOptions, logger, correlationId, performanceClient) {
+        constructor(authority, networkInterface, cacheManager, authorityOptions, logger, correlationId, performanceClient, managedIdentity) {
             this.canonicalAuthority = authority;
             this._canonicalAuthority.validateAsUri();
             this.networkInterface = networkInterface;
@@ -5375,6 +5444,7 @@
             this.logger = logger;
             this.performanceClient = performanceClient;
             this.correlationId = correlationId;
+            this.managedIdentity = managedIdentity || false;
             this.regionDiscovery = new RegionDiscovery(networkInterface, this.logger, this.performanceClient, this.correlationId);
         }
         /**
@@ -5580,7 +5650,7 @@
             return `${this.canonicalAuthority}v2.0/.well-known/openid-configuration`;
         }
         /**
-         * Boolean that returns whethr or not tenant discovery has been completed.
+         * Boolean that returns whether or not tenant discovery has been completed.
          */
         discoveryComplete() {
             return !!this.metadata;
@@ -6032,7 +6102,10 @@
          * helper function to generate environment from authority object
          */
         getPreferredCache() {
-            if (this.discoveryComplete()) {
+            if (this.managedIdentity) {
+                return Constants.DEFAULT_AUTHORITY_HOST;
+            }
+            else if (this.discoveryComplete()) {
                 return this.metadata.preferred_cache;
             }
             else {
@@ -6184,7 +6257,7 @@
         };
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6215,7 +6288,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6318,7 +6391,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6344,7 +6417,7 @@
         refreshTokenExpired: refreshTokenExpired
     });
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6431,7 +6504,7 @@
         return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6447,7 +6520,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6519,7 +6592,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6604,7 +6677,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6631,7 +6704,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6786,7 +6859,7 @@
                         return await ResponseHandler.generateAuthenticationResult(this.cryptoObj, authority, cacheRecord, false, request, idTokenClaims, requestStateObj, undefined, serverRequestId);
                     }
                 }
-                await this.cacheStorage.saveCacheRecord(cacheRecord, request.storeInCache);
+                await this.cacheStorage.saveCacheRecord(cacheRecord, request.storeInCache, request.correlationId);
             }
             finally {
                 if (this.persistencePlugin &&
@@ -6984,7 +7057,7 @@
         return baseAccount;
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7269,7 +7342,11 @@
                 }
                 else if (request.account) {
                     const accountSid = this.extractAccountSid(request.account);
-                    const accountLoginHintClaim = this.extractLoginHint(request.account);
+                    let accountLoginHintClaim = this.extractLoginHint(request.account);
+                    if (accountLoginHintClaim && request.domainHint) {
+                        this.logger.warning(`AuthorizationCodeClient.createAuthCodeUrlQueryString: "domainHint" param is set, skipping opaque "login_hint" claim. Please consider not passing domainHint`);
+                        accountLoginHintClaim = null;
+                    }
                     // If login_hint claim is present, use it over sid/username
                     if (accountLoginHintClaim) {
                         this.logger.verbose("createAuthCodeUrlQueryString: login_hint claim present on account");
@@ -7389,7 +7466,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7596,7 +7673,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7732,7 +7809,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7747,7 +7824,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -7755,7 +7832,7 @@
     const missingKidError = "missing_kid_error";
     const missingAlgError = "missing_alg_error";
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7780,7 +7857,7 @@
         return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7820,7 +7897,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7878,7 +7955,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8082,7 +8159,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8161,7 +8238,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.8.1 2024-03-27 */
+    /*! @azure/msal-common v14.9.0 2024-04-11 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8261,6 +8338,10 @@
             event.subErrorCode = error.subError;
             return;
         }
+        else if (error instanceof CacheError) {
+            event.errorCode = error.errorCode;
+            return;
+        }
         else if (event.errorStack?.length) {
             logger.trace("PerformanceClient.addErrorStack: Stack already exist", event.correlationId);
             return;
@@ -10017,7 +10098,7 @@
 
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "3.11.1";
+    const version = "3.13.0";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10152,11 +10233,7 @@
             if (window.nestedAppAuthBridge === undefined) {
                 throw new Error("window.nestedAppAuthBridge is undefined");
             }
-            if (window.crypto === undefined) {
-                throw new Error("window.crypto is undefined");
-            }
             try {
-                BridgeProxy.crypto = window.crypto;
                 window.nestedAppAuthBridge.addEventListener("message", (response) => {
                     const responsePayload = typeof response === "string" ? response : response.data;
                     const responseEnvelope = JSON.parse(responsePayload);
@@ -10175,7 +10252,7 @@
                     const message = {
                         messageType: "NestedAppAuthRequest",
                         method: "GetInitContext",
-                        requestId: BridgeProxy.getRandomId(),
+                        requestId: createNewGuid(),
                     };
                     const request = {
                         requestId: message.requestId,
@@ -10193,9 +10270,6 @@
                 throw error;
             }
         }
-        static getRandomId() {
-            return BridgeProxy.crypto.randomUUID();
-        }
         /**
          * getTokenInteractive - Attempts to get a token interactively from the bridge
          * @param request A token request
@@ -10237,7 +10311,7 @@
             const message = {
                 messageType: "NestedAppAuthRequest",
                 method: method,
-                requestId: BridgeProxy.getRandomId(),
+                requestId: createNewGuid(),
                 ...requestParams,
             };
             const promise = new Promise((resolve, reject) => {
@@ -11072,7 +11146,7 @@
      * parameters such as state and nonce, generally.
      */
     class BrowserCacheManager extends CacheManager {
-        constructor(clientId, cacheConfig, cryptoImpl, logger, staticAuthorityOptions) {
+        constructor(clientId, cacheConfig, cryptoImpl, logger, staticAuthorityOptions, performanceClient) {
             super(clientId, cryptoImpl, logger, staticAuthorityOptions);
             // Cookie life calculation (hours * minutes * seconds * ms)
             this.COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
@@ -11086,6 +11160,7 @@
                 this.migrateCacheEntries();
                 this.createKeyMaps();
             }
+            this.performanceClient = performanceClient;
         }
         /**
          * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
@@ -12306,6 +12381,33 @@
             const cacheRecord = new CacheRecord(undefined, idTokenEntity, accessTokenEntity);
             return this.saveCacheRecord(cacheRecord);
         }
+        /**
+         * saves a cache record
+         * @param cacheRecord {CacheRecord}
+         * @param storeInCache {?StoreInCache}
+         * @param correlationId {?string} correlation id
+         */
+        async saveCacheRecord(cacheRecord, storeInCache, correlationId) {
+            try {
+                await super.saveCacheRecord(cacheRecord, storeInCache, correlationId);
+            }
+            catch (e) {
+                if (e instanceof CacheError &&
+                    this.performanceClient &&
+                    correlationId) {
+                    try {
+                        const tokenKeys = this.getTokenKeys();
+                        this.performanceClient.addFields({
+                            cacheRtCount: tokenKeys.refreshToken.length,
+                            cacheIdCount: tokenKeys.idToken.length,
+                            cacheAtCount: tokenKeys.accessToken.length,
+                        }, correlationId);
+                    }
+                    catch (e) { }
+                }
+                throw e;
+            }
+        }
     }
     const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger) => {
         const cacheOptions = {
@@ -14964,6 +15066,7 @@
      */
     function createHiddenIframe() {
         const authFrame = document.createElement("iframe");
+        authFrame.className = "msalSilentIframe";
         authFrame.style.visibility = "hidden";
         authFrame.style.position = "absolute";
         authFrame.style.width = authFrame.style.height = "0";
@@ -15475,7 +15578,7 @@
             this.eventHandler = new EventHandler(this.logger, this.browserCrypto);
             // Initialize the browser storage class.
             this.browserStorage = this.isBrowserEnvironment
-                ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, buildStaticAuthorityOptions(this.config.auth))
+                ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, buildStaticAuthorityOptions(this.config.auth), this.performanceClient)
                 : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger);
             // initialize in memory storage for native flows
             const nativeCacheOptions = {
@@ -15486,7 +15589,7 @@
                 cacheMigrationEnabled: false,
                 claimsBasedCachingEnabled: false,
             };
-            this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger);
+            this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger, undefined, this.performanceClient);
             // Initialize the token cache
             this.tokenCache = new TokenCache(this.config, this.browserStorage, this.logger, this.browserCrypto);
             this.activeSilentTokenRequests = new Map();
@@ -15549,7 +15652,6 @@
             this.logger.verbose("handleRedirectPromise called");
             // Block token acquisition before initialize has been called
             blockAPICallsBeforeInitialize(this.initialized);
-            const loggedInAccounts = this.getAllAccounts();
             if (this.isBrowserEnvironment) {
                 /**
                  * Store the promise on the PublicClientApplication instance if this is the first invocation of handleRedirectPromise,
@@ -15559,64 +15661,9 @@
                 const redirectResponseKey = hash || "";
                 let response = this.redirectResponse.get(redirectResponseKey);
                 if (typeof response === "undefined") {
-                    const request = this.browserStorage.getCachedNativeRequest();
-                    const useNative = request &&
-                        NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider) &&
-                        this.nativeExtensionProvider &&
-                        !hash;
-                    const correlationId = useNative
-                        ? request?.correlationId
-                        : this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, true) || "";
-                    const rootMeasurement = this.performanceClient.startMeasurement("acquireTokenRedirect", correlationId);
-                    this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, exports.InteractionType.Redirect);
-                    this.logger.verbose("handleRedirectPromise has been called for the first time, storing the promise");
-                    let redirectResponse;
-                    if (useNative && this.nativeExtensionProvider) {
-                        this.logger.trace("handleRedirectPromise - acquiring token from native platform");
-                        const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.handleRedirectPromise, this.performanceClient, this.nativeExtensionProvider, request.accountId, this.nativeInternalStorage, request.correlationId);
-                        redirectResponse = invokeAsync(nativeClient.handleRedirectPromise.bind(nativeClient), PerformanceEvents.HandleNativeRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(this.performanceClient, rootMeasurement.event.correlationId);
-                    }
-                    else {
-                        this.logger.trace("handleRedirectPromise - acquiring token from web flow");
-                        const redirectClient = this.createRedirectClient(correlationId);
-                        redirectResponse = invokeAsync(redirectClient.handleRedirectPromise.bind(redirectClient), PerformanceEvents.HandleRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(hash, this.performanceClient, rootMeasurement.event.correlationId);
-                    }
-                    response = redirectResponse
-                        .then((result) => {
-                        if (result) {
-                            // Emit login event if number of accounts change
-                            const isLoggingIn = loggedInAccounts.length <
-                                this.getAllAccounts().length;
-                            if (isLoggingIn) {
-                                this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, exports.InteractionType.Redirect, result);
-                                this.logger.verbose("handleRedirectResponse returned result, login success");
-                            }
-                            else {
-                                this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Redirect, result);
-                                this.logger.verbose("handleRedirectResponse returned result, acquire token success");
-                            }
-                            rootMeasurement.end({ success: true });
-                        }
-                        this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
-                        rootMeasurement.end({ success: false });
-                        return result;
-                    })
-                        .catch((e) => {
-                        const eventError = e;
-                        // Emit login event if there is an account
-                        if (loggedInAccounts.length > 0) {
-                            this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Redirect, null, eventError);
-                        }
-                        else {
-                            this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, exports.InteractionType.Redirect, null, eventError);
-                        }
-                        this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
-                        rootMeasurement.end({
-                            success: false,
-                        }, eventError);
-                        throw e;
-                    });
+                    response = this.handleRedirectPromiseInternal(hash);
                     this.redirectResponse.set(redirectResponseKey, response);
+                    this.logger.verbose("handleRedirectPromise has been called for the first time, storing the promise");
                 }
                 else {
                     this.logger.verbose("handleRedirectPromise has been called previously, returning the result from the first call");
@@ -15626,6 +15673,69 @@
             this.logger.verbose("handleRedirectPromise returns null, not browser environment");
             return null;
         }
+        /**
+         * The internal details of handleRedirectPromise. This is separated out to a helper to allow handleRedirectPromise to memoize requests
+         * @param hash
+         * @returns
+         */
+        async handleRedirectPromiseInternal(hash) {
+            const loggedInAccounts = this.getAllAccounts();
+            const request = this.browserStorage.getCachedNativeRequest();
+            const useNative = request &&
+                NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider) &&
+                this.nativeExtensionProvider &&
+                !hash;
+            const correlationId = useNative
+                ? request?.correlationId
+                : this.browserStorage.getTemporaryCache(TemporaryCacheKeys.CORRELATION_ID, true) || "";
+            const rootMeasurement = this.performanceClient.startMeasurement("acquireTokenRedirect", correlationId);
+            this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_START, exports.InteractionType.Redirect);
+            let redirectResponse;
+            if (useNative && this.nativeExtensionProvider) {
+                this.logger.trace("handleRedirectPromise - acquiring token from native platform");
+                const nativeClient = new NativeInteractionClient(this.config, this.browserStorage, this.browserCrypto, this.logger, this.eventHandler, this.navigationClient, ApiId.handleRedirectPromise, this.performanceClient, this.nativeExtensionProvider, request.accountId, this.nativeInternalStorage, request.correlationId);
+                redirectResponse = invokeAsync(nativeClient.handleRedirectPromise.bind(nativeClient), PerformanceEvents.HandleNativeRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(this.performanceClient, rootMeasurement.event.correlationId);
+            }
+            else {
+                this.logger.trace("handleRedirectPromise - acquiring token from web flow");
+                const redirectClient = this.createRedirectClient(correlationId);
+                redirectResponse = invokeAsync(redirectClient.handleRedirectPromise.bind(redirectClient), PerformanceEvents.HandleRedirectPromiseMeasurement, this.logger, this.performanceClient, rootMeasurement.event.correlationId)(hash, this.performanceClient, rootMeasurement.event.correlationId);
+            }
+            return redirectResponse
+                .then((result) => {
+                if (result) {
+                    // Emit login event if number of accounts change
+                    const isLoggingIn = loggedInAccounts.length < this.getAllAccounts().length;
+                    if (isLoggingIn) {
+                        this.eventHandler.emitEvent(EventType.LOGIN_SUCCESS, exports.InteractionType.Redirect, result);
+                        this.logger.verbose("handleRedirectResponse returned result, login success");
+                    }
+                    else {
+                        this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Redirect, result);
+                        this.logger.verbose("handleRedirectResponse returned result, acquire token success");
+                    }
+                    rootMeasurement.end({ success: true });
+                }
+                this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
+                rootMeasurement.end({ success: false });
+                return result;
+            })
+                .catch((e) => {
+                const eventError = e;
+                // Emit login event if there is an account
+                if (loggedInAccounts.length > 0) {
+                    this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_FAILURE, exports.InteractionType.Redirect, null, eventError);
+                }
+                else {
+                    this.eventHandler.emitEvent(EventType.LOGIN_FAILURE, exports.InteractionType.Redirect, null, eventError);
+                }
+                this.eventHandler.emitEvent(EventType.HANDLE_REDIRECT_END, exports.InteractionType.Redirect);
+                rootMeasurement.end({
+                    success: false,
+                }, eventError);
+                throw e;
+            });
+        }
         /**
          * Use when you want to obtain an access_token for your API by redirecting the user's browser window to the authorization endpoint. This function redirects
          * the page, so any code that follows this function will not execute.
@@ -16584,49 +16694,69 @@
                 this.performanceClient.incrementFields({ visibilityChangeCount: 0 }, request.correlationId);
             }
             document.addEventListener("visibilitychange", () => this.trackPageVisibility(request.correlationId));
-            let result;
-            if (NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider, request.authenticationScheme) &&
-                account.nativeAccountId) {
-                this.logger.verbose("acquireTokenSilent - attempting to acquire token from native platform");
-                const silentRequest = {
-                    ...request,
-                    account,
-                };
-                result = this.acquireTokenNative(silentRequest, ApiId.acquireTokenSilent_silentFlow).catch(async (e) => {
-                    // If native token acquisition fails for availability reasons fallback to web flow
-                    if (e instanceof NativeAuthError && isFatalNativeAuthError(e)) {
-                        this.logger.verbose("acquireTokenSilent - native platform unavailable, falling back to web flow");
-                        this.nativeExtensionProvider = undefined; // Prevent future requests from continuing to attempt
-                        // Cache will not contain tokens, given that previous WAM requests succeeded. Skip cache and RT renewal and go straight to iframe renewal
-                        const silentIframeClient = this.createSilentIframeClient(request.correlationId);
-                        return silentIframeClient.acquireToken(request);
-                    }
-                    throw e;
-                });
-            }
-            else {
-                this.logger.verbose("acquireTokenSilent - attempting to acquire token from web flow");
-                const silentRequest = await invokeAsync(initializeSilentRequest, PerformanceEvents.InitializeSilentRequest, this.logger, this.performanceClient, request.correlationId)(request, account, this.config, this.performanceClient, this.logger);
-                const cacheLookupPolicy = request.cacheLookupPolicy || CacheLookupPolicy.Default;
-                result = invokeAsync(this.acquireTokenFromCache.bind(this), PerformanceEvents.AcquireTokenFromCache, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest, cacheLookupPolicy).catch((cacheError) => {
-                    if (request.cacheLookupPolicy ===
-                        CacheLookupPolicy.AccessToken) {
-                        throw cacheError;
+            const silentRequest = await invokeAsync(initializeSilentRequest, PerformanceEvents.InitializeSilentRequest, this.logger, this.performanceClient, request.correlationId)(request, account, this.config, this.performanceClient, this.logger);
+            const cacheLookupPolicy = request.cacheLookupPolicy || CacheLookupPolicy.Default;
+            const result = this.acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy).catch(async (refreshTokenError) => {
+                const shouldTryToResolveSilently = checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, cacheLookupPolicy);
+                if (shouldTryToResolveSilently) {
+                    if (!this.activeIframeRequest) {
+                        let _resolve, _reject;
+                        // Always set the active request tracker immediately after checking it to prevent races
+                        this.activeIframeRequest = [
+                            new Promise((resolve, reject) => {
+                                _resolve = resolve;
+                                _reject = reject;
+                            }),
+                            silentRequest.correlationId,
+                        ];
+                        this.logger.verbose("Refresh token expired/invalid or CacheLookupPolicy is set to Skip, attempting acquire token by iframe.", silentRequest.correlationId);
+                        return invokeAsync(this.acquireTokenBySilentIframe.bind(this), PerformanceEvents.AcquireTokenBySilentIframe, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest)
+                            .then((iframeResult) => {
+                            _resolve();
+                            return iframeResult;
+                        })
+                            .catch((e) => {
+                            _reject(e);
+                            throw e;
+                        })
+                            .finally(() => {
+                            this.activeIframeRequest = undefined;
+                        });
                     }
-                    this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_NETWORK_START, exports.InteractionType.Silent, silentRequest);
-                    return invokeAsync(this.acquireTokenByRefreshToken.bind(this), PerformanceEvents.AcquireTokenByRefreshToken, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest, cacheLookupPolicy).catch((refreshTokenError) => {
-                        const shouldTryToResolveSilently = checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, silentRequest, cacheLookupPolicy);
-                        if (shouldTryToResolveSilently) {
-                            this.logger.verbose("Refresh token expired/invalid or CacheLookupPolicy is set to Skip, attempting acquire token by iframe.", silentRequest.correlationId);
-                            return invokeAsync(this.acquireTokenBySilentIframe.bind(this), PerformanceEvents.AcquireTokenBySilentIframe, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest);
-                        }
-                        else {
-                            // Error cannot be silently resolved or iframe renewal is not allowed, interaction required
+                    else if (cacheLookupPolicy !== CacheLookupPolicy.Skip) {
+                        const [activePromise, activeCorrelationId] = this.activeIframeRequest;
+                        this.logger.verbose(`Iframe request is already in progress, awaiting resolution for request with correlationId: ${activeCorrelationId}`, silentRequest.correlationId);
+                        const awaitConcurrentIframeMeasure = this.performanceClient.startMeasurement(PerformanceEvents.AwaitConcurrentIframe, silentRequest.correlationId);
+                        awaitConcurrentIframeMeasure.add({
+                            awaitIframeCorrelationId: activeCorrelationId,
+                        });
+                        // Await for errors first so we can distinguish errors thrown by activePromise versus errors thrown by .then below
+                        await activePromise.catch(() => {
+                            awaitConcurrentIframeMeasure.end({
+                                success: false,
+                            });
+                            this.logger.info(`Iframe request with correlationId: ${activeCorrelationId} failed. Interaction is required.`);
+                            // If previous iframe request failed, it's unlikely to succeed this time. Throw original error.
                             throw refreshTokenError;
-                        }
-                    });
-                });
-            }
+                        });
+                        return activePromise.then(() => {
+                            awaitConcurrentIframeMeasure.end({ success: true });
+                            this.logger.verbose(`Parallel iframe request with correlationId: ${activeCorrelationId} succeeded. Retrying cache and/or RT redemption`, silentRequest.correlationId);
+                            // Retry cache lookup and/or RT exchange after iframe completes
+                            return this.acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy);
+                        });
+                    }
+                    else {
+                        // Cache policy set to skip and another iframe request is already in progress
+                        this.logger.warning("Another iframe request is currently in progress and CacheLookupPolicy is set to Skip. This may result in degraded performance and/or reliability for both calls. Please consider changing the CacheLookupPolicy to take advantage of request queuing and token cache.", silentRequest.correlationId);
+                        return invokeAsync(this.acquireTokenBySilentIframe.bind(this), PerformanceEvents.AcquireTokenBySilentIframe, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest);
+                    }
+                }
+                else {
+                    // Error cannot be silently resolved or iframe renewal is not allowed, interaction required
+                    throw refreshTokenError;
+                }
+            });
             return result
                 .then((response) => {
                 this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, response);
@@ -16647,6 +16777,38 @@
                 document.removeEventListener("visibilitychange", () => this.trackPageVisibility(request.correlationId));
             });
         }
+        /**
+         * AcquireTokenSilent without the iframe fallback. This is used to enable the correct fallbacks in cases where there's a potential for multiple silent requests to be made in parallel and prevent those requests from making concurrent iframe requests.
+         * @param silentRequest
+         * @param cacheLookupPolicy
+         * @returns
+         */
+        async acquireTokenSilentNoIframe(silentRequest, cacheLookupPolicy) {
+            if (NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeExtensionProvider, silentRequest.authenticationScheme) &&
+                silentRequest.account.nativeAccountId) {
+                this.logger.verbose("acquireTokenSilent - attempting to acquire token from native platform");
+                return this.acquireTokenNative(silentRequest, ApiId.acquireTokenSilent_silentFlow).catch(async (e) => {
+                    // If native token acquisition fails for availability reasons fallback to web flow
+                    if (e instanceof NativeAuthError && isFatalNativeAuthError(e)) {
+                        this.logger.verbose("acquireTokenSilent - native platform unavailable, falling back to web flow");
+                        this.nativeExtensionProvider = undefined; // Prevent future requests from continuing to attempt
+                        // Cache will not contain tokens, given that previous WAM requests succeeded. Skip cache and RT renewal and go straight to iframe renewal
+                        throw createClientAuthError(tokenRefreshRequired);
+                    }
+                    throw e;
+                });
+            }
+            else {
+                this.logger.verbose("acquireTokenSilent - attempting to acquire token from web flow");
+                return invokeAsync(this.acquireTokenFromCache.bind(this), PerformanceEvents.AcquireTokenFromCache, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest, cacheLookupPolicy).catch((cacheError) => {
+                    if (cacheLookupPolicy === CacheLookupPolicy.AccessToken) {
+                        throw cacheError;
+                    }
+                    this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_NETWORK_START, exports.InteractionType.Silent, silentRequest);
+                    return invokeAsync(this.acquireTokenByRefreshToken.bind(this), PerformanceEvents.AcquireTokenByRefreshToken, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest, cacheLookupPolicy);
+                });
+            }
+        }
     }
     /**
      * Determines whether an error thrown by the refresh token endpoint can be resolved without interaction
@@ -16655,7 +16817,7 @@
      * @param cacheLookupPolicy
      * @returns
      */
-    function checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, silentRequest, cacheLookupPolicy) {
+    function checkIfRefreshTokenErrorCanBeResolvedSilently(refreshTokenError, cacheLookupPolicy) {
         const noInteractionRequired = !(refreshTokenError instanceof InteractionRequiredAuthError &&
             // For refresh token errors, bad_token does not always require interaction (silently resolvable)
             refreshTokenError.subError !==
@@ -17049,7 +17211,7 @@
                 : DEFAULT_CRYPTO_IMPLEMENTATION;
             // Initialize the browser storage class.
             this.browserStorage = this.isBrowserEnvironment
-                ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger)
+                ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, undefined, this.performanceClient)
                 : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger);
             this.eventHandler = new EventHandler(this.logger, this.browserCrypto);
         }
@@ -18548,12 +18710,7 @@
         }
         loginPopup(request // eslint-disable-line @typescript-eslint/no-unused-vars
         ) {
-            if (request !== undefined) {
-                return this.acquireTokenInteractive(request);
-            }
-            else {
-                throw NestedAppAuthError.createUnsupportedError();
-            }
+            return this.acquireTokenInteractive(request || DEFAULT_REQUEST);
         }
         // eslint-disable-next-line @typescript-eslint/no-unused-vars
         loginRedirect(request) {