@azure/msal-browser 3.27.0 → 3.28.1

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v3.27.0 2024-11-05 */
+/*! @azure/msal-browser v3.28.1 2025-01-14 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -312,7 +312,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -329,7 +329,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -378,7 +378,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -476,7 +476,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -728,7 +728,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -767,7 +767,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -958,12 +958,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
 const version$1 = "14.16.0";
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -983,7 +983,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1044,7 +1044,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1081,7 +1081,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1408,7 +1408,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1462,7 +1462,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1600,7 +1600,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1697,7 +1697,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1897,7 +1897,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1937,7 +1937,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2016,7 +2016,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2031,7 +2031,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2053,7 +2053,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2066,7 +2066,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2309,7 +2309,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2356,7 +2356,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2520,7 +2520,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2660,7 +2660,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2668,7 +2668,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
 const cacheUnknownErrorCode = "cache_error_unknown";
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2695,7 +2695,7 @@ class CacheError extends Error {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3944,7 +3944,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4043,7 +4043,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4053,7 +4053,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4103,7 +4103,7 @@ const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 const BROKER_CLIENT_ID = "brk_client_id";
 const BROKER_REDIRECT_URI = "brk_redirect_uri";
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4170,7 +4170,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4578,7 +4578,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4590,7 +4590,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4600,7 +4600,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4610,7 +4610,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5097,7 +5097,7 @@ const IntFields = new Set([
     "multiMatchedRT",
 ]);
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5193,7 +5193,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5302,7 +5302,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6141,7 +6141,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6172,7 +6172,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6191,7 +6191,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6289,7 +6289,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6319,7 +6319,7 @@ function createNetworkError(error, httpStatus, responseHeaders) {
     return new NetworkError(error, httpStatus, responseHeaders);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6469,7 +6469,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6495,7 +6495,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6583,7 +6583,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6655,7 +6655,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6739,7 +6739,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6766,7 +6766,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7143,7 +7143,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7161,7 +7161,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7603,7 +7603,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7823,7 +7823,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7959,7 +7959,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7974,7 +7974,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8032,7 +8032,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8295,7 +8295,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8303,7 +8303,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8328,7 +8328,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8368,7 +8368,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8447,7 +8447,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v14.16.0 2025-01-14 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9717,14 +9717,14 @@ const keygenAlgorithmOptions = {
 /**
  * Check whether browser crypto is available.
  */
-function validateCryptoAvailable() {
+function validateCryptoAvailable(skipValidateSubtleCrypto) {
     if (!window) {
         throw createBrowserAuthError(nonBrowserEnvironment);
     }
     if (!window.crypto) {
         throw createBrowserAuthError(cryptoNonExistent);
     }
-    if (!window.crypto.subtle) {
+    if (!skipValidateSubtleCrypto && !window.crypto.subtle) {
         throw createBrowserAuthError(cryptoNonExistent, SUBTLE_SUBERROR);
     }
 }
@@ -9939,7 +9939,9 @@ function isInPopup() {
  * Returns current window URL as redirect uri
  */
 function getCurrentUri() {
-    return window.location.href.split("?")[0].split("#")[0];
+    return typeof window !== "undefined" && window.location
+        ? window.location.href.split("?")[0].split("#")[0]
+        : "";
 }
 /**
  * Gets the homepage url for the current window location.
@@ -10366,7 +10368,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.27.0";
+const version = "3.28.1";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11153,10 +11155,10 @@ class AsyncMemoryStorage {
  * implementing Proof Key for Code Exchange specs for the OAuth Authorization Code Flow using PKCE (rfc here: https://tools.ietf.org/html/rfc7636).
  */
 class CryptoOps {
-    constructor(logger, performanceClient) {
+    constructor(logger, performanceClient, skipValidateSubtleCrypto) {
         this.logger = logger;
         // Browser crypto needs to be validated first before any other classes can be set.
-        validateCryptoAvailable();
+        validateCryptoAvailable(skipValidateSubtleCrypto ?? false);
         this.cache = new AsyncMemoryStorage(this.logger);
         this.performanceClient = performanceClient;
     }
@@ -11325,32 +11327,53 @@ function getSortedObjectString(obj) {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-class BrowserStorage {
-    constructor(cacheLocation) {
-        this.validateWindowStorage(cacheLocation);
-        this.windowStorage = window[cacheLocation];
+class LocalStorage {
+    constructor() {
+        if (!window.localStorage) {
+            throw createBrowserConfigurationAuthError(storageNotSupported);
+        }
+    }
+    getItem(key) {
+        return window.localStorage.getItem(key);
+    }
+    setItem(key, value) {
+        window.localStorage.setItem(key, value);
     }
-    validateWindowStorage(cacheLocation) {
-        if ((cacheLocation !== BrowserCacheLocation.LocalStorage &&
-            cacheLocation !== BrowserCacheLocation.SessionStorage) ||
-            !window[cacheLocation]) {
+    removeItem(key) {
+        window.localStorage.removeItem(key);
+    }
+    getKeys() {
+        return Object.keys(window.localStorage);
+    }
+    containsKey(key) {
+        return window.localStorage.hasOwnProperty(key);
+    }
+}
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class SessionStorage {
+    constructor() {
+        if (!window.sessionStorage) {
             throw createBrowserConfigurationAuthError(storageNotSupported);
         }
     }
     getItem(key) {
-        return this.windowStorage.getItem(key);
+        return window.sessionStorage.getItem(key);
     }
     setItem(key, value) {
-        this.windowStorage.setItem(key, value);
+        window.sessionStorage.setItem(key, value);
     }
     removeItem(key) {
-        this.windowStorage.removeItem(key);
+        window.sessionStorage.removeItem(key);
     }
     getKeys() {
-        return Object.keys(this.windowStorage);
+        return Object.keys(window.sessionStorage);
     }
     containsKey(key) {
-        return this.windowStorage.hasOwnProperty(key);
+        return window.sessionStorage.hasOwnProperty(key);
     }
 }
 
@@ -11376,6 +11399,64 @@ function extractBrowserRequestState(browserCrypto, state) {
     }
 }
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+// Cookie life calculation (hours * minutes * seconds * ms)
+const COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
+class CookieStorage {
+    getItem(key) {
+        const name = `${encodeURIComponent(key)}`;
+        const cookieList = document.cookie.split(";");
+        for (let i = 0; i < cookieList.length; i++) {
+            const cookie = cookieList[i];
+            const [key, ...rest] = decodeURIComponent(cookie).trim().split("=");
+            const value = rest.join("=");
+            if (key === name) {
+                return value;
+            }
+        }
+        return "";
+    }
+    setItem(key, value, cookieLifeDays, secure = true) {
+        let cookieStr = `${encodeURIComponent(key)}=${encodeURIComponent(value)};path=/;SameSite=Lax;`;
+        if (cookieLifeDays) {
+            const expireTime = getCookieExpirationTime(cookieLifeDays);
+            cookieStr += `expires=${expireTime};`;
+        }
+        if (secure) {
+            cookieStr += "Secure;";
+        }
+        document.cookie = cookieStr;
+    }
+    removeItem(key) {
+        // Setting expiration to -1 removes it
+        this.setItem(key, "", -1);
+    }
+    getKeys() {
+        const cookieList = document.cookie.split(";");
+        const keys = [];
+        cookieList.forEach((cookie) => {
+            const cookieParts = decodeURIComponent(cookie).trim().split("=");
+            keys.push(cookieParts[0]);
+        });
+        return keys;
+    }
+    containsKey(key) {
+        return this.getKeys().includes(key);
+    }
+}
+/**
+ * Get cookie expiration time
+ * @param cookieLifeDays
+ */
+function getCookieExpirationTime(cookieLifeDays) {
+    const today = new Date();
+    const expr = new Date(today.getTime() + cookieLifeDays * COOKIE_LIFE_MULTIPLIER);
+    return expr.toUTCString();
+}
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11388,13 +11469,12 @@ function extractBrowserRequestState(browserCrypto, state) {
 class BrowserCacheManager extends CacheManager {
     constructor(clientId, cacheConfig, cryptoImpl, logger, staticAuthorityOptions, performanceClient) {
         super(clientId, cryptoImpl, logger, staticAuthorityOptions);
-        // Cookie life calculation (hours * minutes * seconds * ms)
-        this.COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
         this.cacheConfig = cacheConfig;
         this.logger = logger;
         this.internalStorage = new MemoryStorage();
         this.browserStorage = this.setupBrowserStorage(this.cacheConfig.cacheLocation);
-        this.temporaryCacheStorage = this.setupTemporaryCacheStorage(this.cacheConfig.temporaryCacheLocation, this.cacheConfig.cacheLocation);
+        this.temporaryCacheStorage = this.setupBrowserStorage(this.cacheConfig.temporaryCacheLocation);
+        this.cookieStorage = new CookieStorage();
         // Migrate cache entries from older versions of MSAL.
         if (cacheConfig.cacheMigrationEnabled) {
             this.migrateCacheEntries();
@@ -11407,44 +11487,23 @@ class BrowserCacheManager extends CacheManager {
      * @param cacheLocation
      */
     setupBrowserStorage(cacheLocation) {
-        switch (cacheLocation) {
-            case BrowserCacheLocation.LocalStorage:
-            case BrowserCacheLocation.SessionStorage:
-                try {
-                    return new BrowserStorage(cacheLocation);
-                }
-                catch (e) {
-                    this.logger.verbose(e);
+        try {
+            switch (cacheLocation) {
+                case BrowserCacheLocation.LocalStorage:
+                    return new LocalStorage();
+                case BrowserCacheLocation.SessionStorage:
+                    return new SessionStorage();
+                case BrowserCacheLocation.MemoryStorage:
+                default:
                     break;
-                }
-            case BrowserCacheLocation.MemoryStorage:
+            }
+        }
+        catch (e) {
+            this.logger.error(e);
         }
         this.cacheConfig.cacheLocation = BrowserCacheLocation.MemoryStorage;
         return new MemoryStorage();
     }
-    /**
-     * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured temporaryCacheLocation.
-     * @param temporaryCacheLocation
-     * @param cacheLocation
-     */
-    setupTemporaryCacheStorage(temporaryCacheLocation, cacheLocation) {
-        switch (cacheLocation) {
-            case BrowserCacheLocation.LocalStorage:
-            case BrowserCacheLocation.SessionStorage:
-                try {
-                    // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
-                    return new BrowserStorage(temporaryCacheLocation ||
-                        BrowserCacheLocation.SessionStorage);
-                }
-                catch (e) {
-                    this.logger.verbose(e);
-                    return this.internalStorage;
-                }
-            case BrowserCacheLocation.MemoryStorage:
-            default:
-                return this.internalStorage;
-        }
-    }
     /**
      * Migrate all old cache entries to new schema. No rollback supported.
      * @param storeAuthStateInCookie
@@ -12132,7 +12191,7 @@ class BrowserCacheManager extends CacheManager {
     getTemporaryCache(cacheKey, generateKey) {
         const key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
         if (this.cacheConfig.storeAuthStateInCookie) {
-            const itemCookie = this.getItemCookie(key);
+            const itemCookie = this.cookieStorage.getItem(key);
             if (itemCookie) {
                 this.logger.trace("BrowserCacheManager.getTemporaryCache: storeAuthStateInCookies set to true, retrieving from cookies");
                 return itemCookie;
@@ -12167,7 +12226,7 @@ class BrowserCacheManager extends CacheManager {
         this.temporaryCacheStorage.setItem(key, value);
         if (this.cacheConfig.storeAuthStateInCookie) {
             this.logger.trace("BrowserCacheManager.setTemporaryCache: storeAuthStateInCookie set to true, setting item cookie");
-            this.setItemCookie(key, value);
+            this.cookieStorage.setItem(key, value, undefined, this.cacheConfig.secureCookies);
         }
     }
     /**
@@ -12186,7 +12245,7 @@ class BrowserCacheManager extends CacheManager {
         this.temporaryCacheStorage.removeItem(key);
         if (this.cacheConfig.storeAuthStateInCookie) {
             this.logger.trace("BrowserCacheManager.removeItem: storeAuthStateInCookie is true, clearing item cookie");
-            this.clearItemCookie(key);
+            this.cookieStorage.removeItem(key);
         }
     }
     /**
@@ -12242,79 +12301,6 @@ class BrowserCacheManager extends CacheManager {
             this.logger.warning(`${removedAccessTokens.length} access tokens with claims in the cache keys have been removed from the cache.`);
         }
     }
-    /**
-     * Add value to cookies
-     * @param cookieName
-     * @param cookieValue
-     * @param expires
-     * @deprecated
-     */
-    setItemCookie(cookieName, cookieValue, expires) {
-        let cookieStr = `${encodeURIComponent(cookieName)}=${encodeURIComponent(cookieValue)};path=/;SameSite=Lax;`;
-        if (expires) {
-            const expireTime = this.getCookieExpirationTime(expires);
-            cookieStr += `expires=${expireTime};`;
-        }
-        if (this.cacheConfig.secureCookies) {
-            cookieStr += "Secure;";
-        }
-        document.cookie = cookieStr;
-    }
-    /**
-     * Get one item by key from cookies
-     * @param cookieName
-     * @deprecated
-     */
-    getItemCookie(cookieName) {
-        const name = `${encodeURIComponent(cookieName)}=`;
-        const cookieList = document.cookie.split(";");
-        for (let i = 0; i < cookieList.length; i++) {
-            let cookie = cookieList[i];
-            while (cookie.charAt(0) === " ") {
-                cookie = cookie.substring(1);
-            }
-            if (cookie.indexOf(name) === 0) {
-                return decodeURIComponent(cookie.substring(name.length, cookie.length));
-            }
-        }
-        return Constants.EMPTY_STRING;
-    }
-    /**
-     * Clear all msal-related cookies currently set in the browser. Should only be used to clear temporary cache items.
-     * @deprecated
-     */
-    clearMsalCookies() {
-        const cookiePrefix = `${Constants.CACHE_PREFIX}.${this.clientId}`;
-        const cookieList = document.cookie.split(";");
-        cookieList.forEach((cookie) => {
-            while (cookie.charAt(0) === " ") {
-                // eslint-disable-next-line no-param-reassign
-                cookie = cookie.substring(1);
-            }
-            if (cookie.indexOf(cookiePrefix) === 0) {
-                const cookieKey = cookie.split("=")[0];
-                this.clearItemCookie(cookieKey);
-            }
-        });
-    }
-    /**
-     * Clear an item in the cookies by key
-     * @param cookieName
-     * @deprecated
-     */
-    clearItemCookie(cookieName) {
-        this.setItemCookie(cookieName, Constants.EMPTY_STRING, -1);
-    }
-    /**
-     * Get cookie expiration time
-     * @param cookieLifeDays
-     * @deprecated
-     */
-    getCookieExpirationTime(cookieLifeDays) {
-        const today = new Date();
-        const expr = new Date(today.getTime() + cookieLifeDays * this.COOKIE_LIFE_MULTIPLIER);
-        return expr.toUTCString();
-    }
     /**
      * Prepend msal.<client-id> to each key; Skip for any JSON object as Key (defined schemas do not need the key appended: AccessToken Keys or the upcoming schema)
      * @param key
@@ -12438,7 +12424,6 @@ class BrowserCacheManager extends CacheManager {
             this.logger.infoPii(`BrowserCacheManager.cleanRequestByState: Removing temporary cache items for state: ${cachedState}`);
             this.resetRequestCache(cachedState || Constants.EMPTY_STRING);
         }
-        this.clearMsalCookies();
     }
     /**
      * Looks in temporary cache for any state values with the provided interactionType and removes all temporary cache items for that state
@@ -12466,7 +12451,6 @@ class BrowserCacheManager extends CacheManager {
                 this.resetRequestCache(stateValue);
             }
         });
-        this.clearMsalCookies();
         this.setInteractionInProgress(false);
     }
     cacheCodeRequest(authCodeRequest) {
@@ -13321,6 +13305,10 @@ class StandardInteractionClient extends BaseInteractionClient {
             responseMode: this.config.auth.OIDCOptions
                 .serverResponseType,
         };
+        // Skip active account lookup if either login hint or session id is set
+        if (request.loginHint || request.sid) {
+            return validatedRequest;
+        }
         const account = request.account || this.browserStorage.getActiveAccount();
         if (account) {
             this.logger.verbose("Setting validated request account", this.correlationId);
@@ -17615,7 +17603,7 @@ class NestedAppAuthController {
         this.performanceClient = this.config.telemetry.client;
         // Initialize the crypto class.
         this.browserCrypto = operatingContext.isBrowserEnvironment()
-            ? new CryptoOps(this.logger, this.performanceClient)
+            ? new CryptoOps(this.logger, this.performanceClient, true)
             : DEFAULT_CRYPTO_IMPLEMENTATION;
         // Initialize the browser storage class.
         this.browserStorage = this.operatingContext.isBrowserEnvironment()
@@ -19228,6 +19216,42 @@ const stubbedPublicClientApplication = {
     },
 };
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * @deprecated This class will be removed in a future major version
+ */
+class BrowserStorage {
+    constructor(cacheLocation) {
+        if (cacheLocation === BrowserCacheLocation.LocalStorage) {
+            this.windowStorage = new LocalStorage();
+        }
+        else if (cacheLocation === BrowserCacheLocation.SessionStorage) {
+            this.windowStorage = new SessionStorage();
+        }
+        else {
+            throw createBrowserConfigurationAuthError(storageNotSupported);
+        }
+    }
+    getItem(key) {
+        return this.windowStorage.getItem(key);
+    }
+    setItem(key, value) {
+        this.windowStorage.setItem(key, value);
+    }
+    removeItem(key) {
+        this.windowStorage.removeItem(key);
+    }
+    getKeys() {
+        return Object.keys(this.windowStorage);
+    }
+    containsKey(key) {
+        return this.windowStorage.hasOwnProperty(key);
+    }
+}
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -19633,6 +19657,7 @@ exports.InteractionRequiredAuthErrorCodes = InteractionRequiredAuthErrorCodes;
 exports.InteractionRequiredAuthErrorMessage = InteractionRequiredAuthErrorMessage;
 exports.InteractionStatus = InteractionStatus;
 exports.JsonWebTokenTypes = JsonWebTokenTypes;
+exports.LocalStorage = LocalStorage;
 exports.Logger = Logger;
 exports.MemoryStorage = MemoryStorage;
 exports.NavigationClient = NavigationClient;
@@ -19644,6 +19669,7 @@ exports.PublicClientApplication = PublicClientApplication;
 exports.PublicClientNext = PublicClientNext;
 exports.ServerError = ServerError;
 exports.ServerResponseType = ServerResponseType;
+exports.SessionStorage = SessionStorage;
 exports.SignedHttpRequest = SignedHttpRequest;
 exports.StringUtils = StringUtils;
 exports.StubPerformanceClient = StubPerformanceClient;