@azure/msal-browser 3.27.0 → 4.0.0-alpha.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v3.27.0 2024-11-05 */
+/*! @azure/msal-browser v4.0.0-alpha.0 2024-12-18 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -109,12 +109,6 @@ const HeaderNames = {
  * Persistent cache keys MSAL which stay while user is logged in.
  */
 const PersistentCacheKeys = {
-    ID_TOKEN: "idtoken",
-    CLIENT_INFO: "client.info",
-    ADAL_ID_TOKEN: "adal.idtoken",
-    ERROR: "error",
-    ERROR_DESC: "error.description",
-    ACTIVE_ACCOUNT: "active-account",
     ACTIVE_ACCOUNT_FILTERS: "active-account-filters", // new cache entry for active_account for a more robust version for browser
 };
 /**
@@ -312,7 +306,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -329,7 +323,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -378,7 +372,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -476,7 +470,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -728,7 +722,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -767,7 +761,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -958,12 +952,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "14.16.0";
+const version$1 = "15.0.0-alpha.0";
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -983,7 +977,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1044,7 +1038,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1081,7 +1075,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1408,7 +1402,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1462,7 +1456,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1600,7 +1594,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1697,7 +1691,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1897,7 +1891,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1937,7 +1931,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2016,7 +2010,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2031,7 +2025,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2053,7 +2047,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2066,7 +2060,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2309,7 +2303,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2356,7 +2350,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2520,7 +2514,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2660,7 +2654,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2668,7 +2662,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
 const cacheUnknownErrorCode = "cache_error_unknown";
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2695,7 +2689,7 @@ class CacheError extends Error {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2866,10 +2860,10 @@ class CacheManager {
         }
         try {
             if (!!cacheRecord.account) {
-                this.setAccount(cacheRecord.account);
+                await this.setAccount(cacheRecord.account);
             }
             if (!!cacheRecord.idToken && storeInCache?.idToken !== false) {
-                this.setIdTokenCredential(cacheRecord.idToken);
+                await this.setIdTokenCredential(cacheRecord.idToken);
             }
             if (!!cacheRecord.accessToken &&
                 storeInCache?.accessToken !== false) {
@@ -2877,7 +2871,7 @@ class CacheManager {
             }
             if (!!cacheRecord.refreshToken &&
                 storeInCache?.refreshToken !== false) {
-                this.setRefreshTokenCredential(cacheRecord.refreshToken);
+                await this.setRefreshTokenCredential(cacheRecord.refreshToken);
             }
             if (!!cacheRecord.appMetadata) {
                 this.setAppMetadata(cacheRecord.appMetadata);
@@ -2934,7 +2928,7 @@ class CacheManager {
             }
         });
         await Promise.all(removedAccessTokens);
-        this.setAccessTokenCredential(credential);
+        await this.setAccessTokenCredential(credential);
     }
     /**
      * Retrieve account entities matching all provided tenant-agnostic filters; if no filter is set, get all account entities in the cache
@@ -3220,61 +3214,6 @@ class CacheManager {
         });
         await Promise.all(removedCredentials);
     }
-    /**
-     * Migrates a single-tenant account and all it's associated alternate cross-tenant account objects in the
-     * cache into a condensed multi-tenant account object with tenant profiles.
-     * @param accountKey
-     * @param accountEntity
-     * @param logger
-     * @returns
-     */
-    updateOutdatedCachedAccount(accountKey, accountEntity, logger) {
-        // Only update if account entity is defined and has no tenantProfiles object (is outdated)
-        if (accountEntity && accountEntity.isSingleTenant()) {
-            this.commonLogger?.verbose("updateOutdatedCachedAccount: Found a single-tenant (outdated) account entity in the cache, migrating to multi-tenant account entity");
-            // Get keys of all accounts belonging to user
-            const matchingAccountKeys = this.getAccountKeys().filter((key) => {
-                return key.startsWith(accountEntity.homeAccountId);
-            });
-            // Get all account entities belonging to user
-            const accountsToMerge = [];
-            matchingAccountKeys.forEach((key) => {
-                const account = this.getCachedAccountEntity(key);
-                if (account) {
-                    accountsToMerge.push(account);
-                }
-            });
-            // Set base account to home account if available, any account if not
-            const baseAccount = accountsToMerge.find((account) => {
-                return tenantIdMatchesHomeTenant(account.realm, account.homeAccountId);
-            }) || accountsToMerge[0];
-            // Populate tenant profiles built from each account entity belonging to the user
-            baseAccount.tenantProfiles = accountsToMerge.map((account) => {
-                return {
-                    tenantId: account.realm,
-                    localAccountId: account.localAccountId,
-                    name: account.name,
-                    isHomeTenant: tenantIdMatchesHomeTenant(account.realm, account.homeAccountId),
-                };
-            });
-            const updatedAccount = CacheManager.toObject(new AccountEntity(), {
-                ...baseAccount,
-            });
-            const newAccountKey = updatedAccount.generateAccountKey();
-            // Clear cache of legacy account objects that have been collpsed into tenant profiles
-            matchingAccountKeys.forEach((key) => {
-                if (key !== newAccountKey) {
-                    this.removeOutdatedAccount(accountKey);
-                }
-            });
-            // Cache updated account object
-            this.setAccount(updatedAccount);
-            logger?.verbose("Updated an outdated account entity in the cache");
-            return updatedAccount;
-        }
-        // No update is necessary
-        return accountEntity;
-    }
     /**
      * returns a boolean if the given credential is removed
      * @param credential
@@ -3870,28 +3809,25 @@ class CacheManager {
 }
 /** @internal */
 class DefaultStorageClass extends CacheManager {
-    setAccount() {
+    async setAccount() {
         throw createClientAuthError(methodNotImplemented);
     }
     getAccount() {
         throw createClientAuthError(methodNotImplemented);
     }
-    getCachedAccountEntity() {
-        throw createClientAuthError(methodNotImplemented);
-    }
-    setIdTokenCredential() {
+    async setIdTokenCredential() {
         throw createClientAuthError(methodNotImplemented);
     }
     getIdTokenCredential() {
         throw createClientAuthError(methodNotImplemented);
     }
-    setAccessTokenCredential() {
+    async setAccessTokenCredential() {
         throw createClientAuthError(methodNotImplemented);
     }
     getAccessTokenCredential() {
         throw createClientAuthError(methodNotImplemented);
     }
-    setRefreshTokenCredential() {
+    async setRefreshTokenCredential() {
         throw createClientAuthError(methodNotImplemented);
     }
     getRefreshTokenCredential() {
@@ -3936,15 +3872,9 @@ class DefaultStorageClass extends CacheManager {
     getTokenKeys() {
         throw createClientAuthError(methodNotImplemented);
     }
-    updateCredentialCacheKey() {
-        throw createClientAuthError(methodNotImplemented);
-    }
-    removeOutdatedAccount() {
-        throw createClientAuthError(methodNotImplemented);
-    }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4043,7 +3973,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4053,7 +3983,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4103,7 +4033,7 @@ const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 const BROKER_CLIENT_ID = "brk_client_id";
 const BROKER_REDIRECT_URI = "brk_redirect_uri";
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4170,7 +4100,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4578,7 +4508,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4590,7 +4520,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4600,7 +4530,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4610,7 +4540,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5097,7 +5027,7 @@ const IntFields = new Set([
     "multiMatchedRT",
 ]);
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5193,7 +5123,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5302,7 +5232,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6141,7 +6071,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6172,7 +6102,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6191,7 +6121,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6289,7 +6219,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6319,7 +6249,7 @@ function createNetworkError(error, httpStatus, responseHeaders) {
     return new NetworkError(error, httpStatus, responseHeaders);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6469,7 +6399,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6495,7 +6425,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6583,7 +6513,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6655,7 +6585,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6739,7 +6669,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6766,7 +6696,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6926,7 +6856,7 @@ class ResponseHandler {
                 !forceCacheRefreshTokenResponse &&
                 cacheRecord.account) {
                 const key = cacheRecord.account.generateAccountKey();
-                const account = this.cacheStorage.getAccount(key, this.logger);
+                const account = this.cacheStorage.getAccount(key);
                 if (!account) {
                     this.logger.warning("Account used to refresh tokens not in persistence, refreshed tokens will not be stored in the cache");
                     return await ResponseHandler.generateAuthenticationResult(this.cryptoObj, authority, cacheRecord, false, request, idTokenClaims, requestStateObj, undefined, serverRequestId);
@@ -7118,7 +7048,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     });
     let cachedAccount = null;
     if (baseAccountKey) {
-        cachedAccount = cacheStorage.getAccount(baseAccountKey, logger);
+        cachedAccount = cacheStorage.getAccount(baseAccountKey);
     }
     const baseAccount = cachedAccount ||
         AccountEntity.createAccount({
@@ -7143,7 +7073,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7161,7 +7091,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7603,7 +7533,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7823,7 +7753,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7959,7 +7889,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7974,7 +7904,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8032,7 +7962,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8295,7 +8225,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8303,7 +8233,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8328,7 +8258,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8368,7 +8298,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8447,7 +8377,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v14.16.0 2024-11-05 */
+/*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9684,6 +9614,43 @@ function base64EncArr(aBytes) {
     return btoa(binString);
 }
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Class which exposes APIs to decode base64 strings to plaintext. See here for implementation details:
+ * https://developer.mozilla.org/en-US/docs/Glossary/Base64#the_unicode_problem
+ */
+/**
+ * Returns a URL-safe plaintext decoded string from b64 encoded input.
+ * @param input
+ */
+function base64Decode(input) {
+    return new TextDecoder().decode(base64DecToArr(input));
+}
+/**
+ * Decodes base64 into Uint8Array
+ * @param base64String
+ */
+function base64DecToArr(base64String) {
+    let encodedString = base64String.replace(/-/g, "+").replace(/_/g, "/");
+    switch (encodedString.length % 4) {
+        case 0:
+            break;
+        case 2:
+            encodedString += "==";
+            break;
+        case 3:
+            encodedString += "=";
+            break;
+        default:
+            throw createBrowserAuthError(invalidBase64String);
+    }
+    const binString = atob(encodedString);
+    return Uint8Array.from(binString, (m) => m.codePointAt(0) || 0);
+}
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -9695,8 +9662,10 @@ function base64EncArr(aBytes) {
 /**
  * See here for more info on RsaHashedKeyGenParams: https://developer.mozilla.org/en-US/docs/Web/API/RsaHashedKeyGenParams
  */
-// RSA KeyGen Algorithm
+// Algorithms
 const PKCS1_V15_KEYGEN_ALG = "RSASSA-PKCS1-v1_5";
+const AES_GCM = "AES-GCM";
+const HKDF = "HKDF";
 // SHA-256 hashing algorithm
 const S256_HASH_ALG = "SHA-256";
 // MOD length for PoP tokens
@@ -9707,6 +9676,13 @@ const PUBLIC_EXPONENT = new Uint8Array([0x01, 0x00, 0x01]);
 const UUID_CHARS = "0123456789abcdef";
 // Array to store UINT32 random value
 const UINT32_ARR = new Uint32Array(1);
+// Key Format
+const RAW = "raw";
+// Key Usages
+const ENCRYPT = "encrypt";
+const DECRYPT = "decrypt";
+const DERIVE_KEY = "deriveKey";
+// Suberror
 const SUBTLE_SUBERROR = "crypto_subtle_undefined";
 const keygenAlgorithmOptions = {
     name: PKCS1_V15_KEYGEN_ALG,
@@ -9829,6 +9805,76 @@ async function importJwk(key, extractable, usages) {
 async function sign(key, data) {
     return window.crypto.subtle.sign(keygenAlgorithmOptions, key, data);
 }
+/**
+ * Generates symmetric base encryption key. This may be stored as all encryption/decryption keys will be derived from this one.
+ */
+async function generateBaseKey() {
+    const key = await window.crypto.subtle.generateKey({
+        name: AES_GCM,
+        length: 256,
+    }, true, [ENCRYPT, DECRYPT]);
+    return window.crypto.subtle.exportKey(RAW, key);
+}
+/**
+ * Returns the raw key to be passed into the key derivation function
+ * @param baseKey
+ * @returns
+ */
+async function generateHKDF(baseKey) {
+    return window.crypto.subtle.importKey(RAW, baseKey, HKDF, false, [
+        DERIVE_KEY,
+    ]);
+}
+/**
+ * Given a base key and a nonce generates a derived key to be used in encryption and decryption.
+ * Note: every time we encrypt a new key is derived
+ * @param baseKey
+ * @param nonce
+ * @returns
+ */
+async function deriveKey(baseKey, nonce, context) {
+    return window.crypto.subtle.deriveKey({
+        name: HKDF,
+        salt: nonce,
+        hash: S256_HASH_ALG,
+        info: new TextEncoder().encode(context),
+    }, baseKey, { name: AES_GCM, length: 256 }, false, [ENCRYPT, DECRYPT]);
+}
+/**
+ * Encrypt the given data given a base key. Returns encrypted data and a nonce that must be provided during decryption
+ * @param key
+ * @param rawData
+ */
+async function encrypt(baseKey, rawData, context) {
+    const encodedData = new TextEncoder().encode(rawData);
+    // The nonce must never be reused with a given key.
+    const nonce = window.crypto.getRandomValues(new Uint8Array(16));
+    const derivedKey = await deriveKey(baseKey, nonce, context);
+    const encryptedData = await window.crypto.subtle.encrypt({
+        name: AES_GCM,
+        iv: new Uint8Array(12), // New key is derived for every encrypt so we don't need a new nonce
+    }, derivedKey, encodedData);
+    return {
+        data: urlEncodeArr(new Uint8Array(encryptedData)),
+        nonce: urlEncodeArr(nonce),
+    };
+}
+/**
+ * Decrypt data with the given key and nonce
+ * @param key
+ * @param nonce
+ * @param encryptedData
+ * @returns
+ */
+async function decrypt(baseKey, nonce, context, encryptedData) {
+    const encodedData = base64DecToArr(encryptedData);
+    const derivedKey = await deriveKey(baseKey, base64DecToArr(nonce), context);
+    const decryptedData = await window.crypto.subtle.decrypt({
+        name: AES_GCM,
+        iv: new Uint8Array(12), // New key is derived for every encrypt so we don't need a new nonce
+    }, derivedKey, encodedData);
+    return new TextDecoder().decode(decryptedData);
+}
 /**
  * Returns the SHA-256 hash of an input string
  * @param plainText
@@ -10366,7 +10412,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.27.0";
+const version = "4.0.0-alpha.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10742,43 +10788,6 @@ StandardOperatingContext.MODULE_NAME = "";
  */
 StandardOperatingContext.ID = "StandardOperatingContext";
 
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
-/**
- * Class which exposes APIs to decode base64 strings to plaintext. See here for implementation details:
- * https://developer.mozilla.org/en-US/docs/Glossary/Base64#the_unicode_problem
- */
-/**
- * Returns a URL-safe plaintext decoded string from b64 encoded input.
- * @param input
- */
-function base64Decode(input) {
-    return new TextDecoder().decode(base64DecToArr(input));
-}
-/**
- * Decodes base64 into Uint8Array
- * @param base64String
- */
-function base64DecToArr(base64String) {
-    let encodedString = base64String.replace(/-/g, "+").replace(/_/g, "/");
-    switch (encodedString.length % 4) {
-        case 0:
-            break;
-        case 2:
-            encodedString += "==";
-            break;
-        case 3:
-            encodedString += "=";
-            break;
-        default:
-            throw createBrowserAuthError(invalidBase64String);
-    }
-    const binString = atob(encodedString);
-    return Uint8Array.from(binString, (m) => m.codePointAt(0) || 0);
-}
-
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -10988,12 +10997,21 @@ class MemoryStorage {
     constructor() {
         this.cache = new Map();
     }
+    async initialize() {
+        // Memory storage does not require initialization
+    }
     getItem(key) {
         return this.cache.get(key) || null;
     }
+    getUserData(key) {
+        return this.getItem(key);
+    }
     setItem(key, value) {
         this.cache.set(key, value);
     }
+    async setUserData(key, value) {
+        this.setItem(key, value);
+    }
     removeItem(key) {
         this.cache.delete(key);
     }
@@ -11325,32 +11343,327 @@ function getSortedObjectString(obj) {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-class BrowserStorage {
-    constructor(cacheLocation) {
-        this.validateWindowStorage(cacheLocation);
-        this.windowStorage = window[cacheLocation];
+// Cookie life calculation (hours * minutes * seconds * ms)
+const COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
+class CookieStorage {
+    initialize() {
+        return Promise.resolve();
+    }
+    getItem(key) {
+        const name = `${encodeURIComponent(key)}`;
+        const cookieList = document.cookie.split(";");
+        for (let i = 0; i < cookieList.length; i++) {
+            const cookie = cookieList[i];
+            const [key, ...rest] = decodeURIComponent(cookie).trim().split("=");
+            const value = rest.join("=");
+            if (key === name) {
+                return value;
+            }
+        }
+        return "";
+    }
+    getUserData() {
+        throw createClientAuthError(methodNotImplemented);
+    }
+    setItem(key, value, cookieLifeDays, secure = true) {
+        let cookieStr = `${encodeURIComponent(key)}=${encodeURIComponent(value)};path=/;SameSite=Lax;`;
+        if (cookieLifeDays) {
+            const expireTime = getCookieExpirationTime(cookieLifeDays);
+            cookieStr += `expires=${expireTime};`;
+        }
+        if (secure) {
+            cookieStr += "Secure;";
+        }
+        document.cookie = cookieStr;
+    }
+    async setUserData() {
+        return Promise.reject(createClientAuthError(methodNotImplemented));
+    }
+    removeItem(key) {
+        // Setting expiration to -1 removes it
+        this.setItem(key, "", -1);
+    }
+    getKeys() {
+        const cookieList = document.cookie.split(";");
+        const keys = [];
+        cookieList.forEach((cookie) => {
+            const cookieParts = decodeURIComponent(cookie).trim().split("=");
+            keys.push(cookieParts[0]);
+        });
+        return keys;
+    }
+    containsKey(key) {
+        return this.getKeys().includes(key);
+    }
+}
+/**
+ * Get cookie expiration time
+ * @param cookieLifeDays
+ */
+function getCookieExpirationTime(cookieLifeDays) {
+    const today = new Date();
+    const expr = new Date(today.getTime() + cookieLifeDays * COOKIE_LIFE_MULTIPLIER);
+    return expr.toUTCString();
+}
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+/**
+ * Returns a list of cache keys for all known accounts
+ * @param storage
+ * @returns
+ */
+function getAccountKeys(storage) {
+    const accountKeys = storage.getItem(StaticCacheKeys.ACCOUNT_KEYS);
+    if (accountKeys) {
+        return JSON.parse(accountKeys);
+    }
+    return [];
+}
+/**
+ * Returns a list of cache keys for all known tokens
+ * @param clientId
+ * @param storage
+ * @returns
+ */
+function getTokenKeys(clientId, storage) {
+    const item = storage.getItem(`${StaticCacheKeys.TOKEN_KEYS}.${clientId}`);
+    if (item) {
+        const tokenKeys = JSON.parse(item);
+        if (tokenKeys &&
+            tokenKeys.hasOwnProperty("idToken") &&
+            tokenKeys.hasOwnProperty("accessToken") &&
+            tokenKeys.hasOwnProperty("refreshToken")) {
+            return tokenKeys;
+        }
+    }
+    return {
+        idToken: [],
+        accessToken: [],
+        refreshToken: [],
+    };
+}
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+const ENCRYPTION_KEY = "msal.cache.encryption";
+class LocalStorage {
+    constructor(clientId) {
+        if (!window.localStorage) {
+            throw createBrowserConfigurationAuthError(storageNotSupported);
+        }
+        this.memoryStorage = new MemoryStorage();
+        this.initialized = false;
+        this.clientId = clientId;
+    }
+    async initialize() {
+        this.initialized = true;
+        const cookies = new CookieStorage();
+        const cookieString = cookies.getItem(ENCRYPTION_KEY);
+        let parsedCookie = { key: "", id: "" };
+        if (cookieString) {
+            try {
+                parsedCookie = JSON.parse(cookieString);
+            }
+            catch (e) {
+                // TODO: Log telemetry but don't throw
+            }
+        }
+        if (parsedCookie.key && parsedCookie.id) {
+            // Encryption key already exists, import
+            this.encryptionCookie = {
+                id: parsedCookie.id,
+                key: await generateHKDF(base64DecToArr(parsedCookie.key)),
+            };
+            await this.importExistingCache();
+        }
+        else {
+            // Encryption key doesn't exist or is invalid, generate a new one and clear existing cache
+            this.clear();
+            const id = createNewGuid();
+            const baseKey = await generateBaseKey();
+            const keyStr = urlEncodeArr(new Uint8Array(baseKey));
+            this.encryptionCookie = {
+                id: id,
+                key: await generateHKDF(baseKey),
+            };
+            const cookieData = {
+                id: id,
+                key: keyStr,
+            };
+            cookies.setItem(ENCRYPTION_KEY, JSON.stringify(cookieData));
+        }
+    }
+    getItem(key) {
+        return window.localStorage.getItem(key);
+    }
+    getUserData(key) {
+        if (!this.initialized) {
+            throw createBrowserAuthError(uninitializedPublicClientApplication);
+        }
+        return this.memoryStorage.getItem(key);
+    }
+    setItem(key, value) {
+        window.localStorage.setItem(key, value);
+    }
+    async setUserData(key, value) {
+        if (!this.initialized || !this.encryptionCookie) {
+            throw createBrowserAuthError(uninitializedPublicClientApplication);
+        }
+        const { data, nonce } = await encrypt(this.encryptionCookie.key, value, this.getContext(key));
+        const encryptedData = {
+            id: this.encryptionCookie.id,
+            nonce: nonce,
+            data: data,
+        };
+        this.memoryStorage.setItem(key, value);
+        this.setItem(key, JSON.stringify(encryptedData));
+    }
+    removeItem(key) {
+        this.memoryStorage.removeItem(key);
+        window.localStorage.removeItem(key);
+    }
+    getKeys() {
+        return Object.keys(window.localStorage);
+    }
+    containsKey(key) {
+        return window.localStorage.hasOwnProperty(key);
+    }
+    /**
+     * Removes all known MSAL keys from the cache
+     */
+    clear() {
+        // Removes all remaining MSAL cache items
+        this.memoryStorage.clear();
+        const accountKeys = getAccountKeys(this);
+        accountKeys.forEach((key) => this.removeItem(key));
+        const tokenKeys = getTokenKeys(this.clientId, this);
+        tokenKeys.idToken.forEach((key) => this.removeItem(key));
+        tokenKeys.accessToken.forEach((key) => this.removeItem(key));
+        tokenKeys.refreshToken.forEach((key) => this.removeItem(key));
+        // Clean up anything left
+        this.getKeys().forEach((cacheKey) => {
+            if (cacheKey.startsWith(Constants.CACHE_PREFIX) ||
+                cacheKey.indexOf(this.clientId) !== -1) {
+                this.removeItem(cacheKey);
+            }
+        });
+    }
+    /**
+     * Helper to decrypt all known MSAL keys in localStorage and save them to inMemory storage
+     * @returns
+     */
+    async importExistingCache() {
+        if (!this.encryptionCookie) {
+            return;
+        }
+        const accountKeys = getAccountKeys(this);
+        await this.importArray(accountKeys);
+        const tokenKeys = getTokenKeys(this.clientId, this);
+        await Promise.all([
+            this.importArray(tokenKeys.idToken),
+            this.importArray(tokenKeys.accessToken),
+            this.importArray(tokenKeys.refreshToken),
+        ]);
+    }
+    /**
+     * Helper to decrypt and save cache entries
+     * @param key
+     * @returns
+     */
+    async getItemFromEncryptedCache(key) {
+        if (!this.encryptionCookie) {
+            return null;
+        }
+        const rawCache = this.getItem(key);
+        if (!rawCache) {
+            return null;
+        }
+        let encObj;
+        try {
+            encObj = JSON.parse(rawCache);
+            if (!encObj.id || !encObj.nonce || !encObj.data) {
+                throw "Not encrypted!"; // TODO: Typed error
+            }
+            if (encObj.id !== this.encryptionCookie.id) {
+                throw "Old item!"; // TODO: Typed error
+            }
+        }
+        catch (e) {
+            // Not a valid encrypted object, remove
+            this.removeItem(key);
+            // TODO: Log to telemetry
+            return null;
+        }
+        return decrypt(this.encryptionCookie.key, encObj.nonce, this.getContext(key), encObj.data);
+    }
+    /**
+     * Helper to decrypt and save an array of cache keys
+     * @param arr
+     */
+    async importArray(arr) {
+        const promiseArr = [];
+        arr.forEach((key) => {
+            const promise = this.getItemFromEncryptedCache(key).then((value) => {
+                if (value) {
+                    this.memoryStorage.setItem(key, value);
+                }
+            });
+            promiseArr.push(promise);
+        });
+        await Promise.all(promiseArr);
+    }
+    /**
+     * Gets encryption context for a given cache entry. This is clientId for app specific entries, empty string for shared entries
+     * @param key
+     * @returns
+     */
+    getContext(key) {
+        let context = "";
+        if (key.includes(this.clientId)) {
+            context = this.clientId; // Used to bind encryption key to this appId
+        }
+        return context;
     }
-    validateWindowStorage(cacheLocation) {
-        if ((cacheLocation !== BrowserCacheLocation.LocalStorage &&
-            cacheLocation !== BrowserCacheLocation.SessionStorage) ||
-            !window[cacheLocation]) {
+}
+
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+class SessionStorage {
+    constructor() {
+        if (!window.sessionStorage) {
             throw createBrowserConfigurationAuthError(storageNotSupported);
         }
     }
+    async initialize() {
+        // Session storage does not require initialization
+    }
     getItem(key) {
-        return this.windowStorage.getItem(key);
+        return window.sessionStorage.getItem(key);
+    }
+    getUserData(key) {
+        return this.getItem(key);
     }
     setItem(key, value) {
-        this.windowStorage.setItem(key, value);
+        window.sessionStorage.setItem(key, value);
+    }
+    async setUserData(key, value) {
+        this.setItem(key, value);
     }
     removeItem(key) {
-        this.windowStorage.removeItem(key);
+        window.sessionStorage.removeItem(key);
     }
     getKeys() {
-        return Object.keys(this.windowStorage);
+        return Object.keys(window.sessionStorage);
     }
     containsKey(key) {
-        return this.windowStorage.hasOwnProperty(key);
+        return window.sessionStorage.hasOwnProperty(key);
     }
 }
 
@@ -11388,180 +11701,39 @@ function extractBrowserRequestState(browserCrypto, state) {
 class BrowserCacheManager extends CacheManager {
     constructor(clientId, cacheConfig, cryptoImpl, logger, staticAuthorityOptions, performanceClient) {
         super(clientId, cryptoImpl, logger, staticAuthorityOptions);
-        // Cookie life calculation (hours * minutes * seconds * ms)
-        this.COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
         this.cacheConfig = cacheConfig;
         this.logger = logger;
         this.internalStorage = new MemoryStorage();
         this.browserStorage = this.setupBrowserStorage(this.cacheConfig.cacheLocation);
-        this.temporaryCacheStorage = this.setupTemporaryCacheStorage(this.cacheConfig.temporaryCacheLocation, this.cacheConfig.cacheLocation);
-        // Migrate cache entries from older versions of MSAL.
-        if (cacheConfig.cacheMigrationEnabled) {
-            this.migrateCacheEntries();
-            this.createKeyMaps();
-        }
+        this.temporaryCacheStorage = this.setupBrowserStorage(this.cacheConfig.temporaryCacheLocation);
+        this.cookieStorage = new CookieStorage();
         this.performanceClient = performanceClient;
     }
+    async initialize() {
+        await this.browserStorage.initialize();
+    }
     /**
      * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
      * @param cacheLocation
      */
     setupBrowserStorage(cacheLocation) {
-        switch (cacheLocation) {
-            case BrowserCacheLocation.LocalStorage:
-            case BrowserCacheLocation.SessionStorage:
-                try {
-                    return new BrowserStorage(cacheLocation);
-                }
-                catch (e) {
-                    this.logger.verbose(e);
+        try {
+            switch (cacheLocation) {
+                case BrowserCacheLocation.LocalStorage:
+                    return new LocalStorage(this.clientId);
+                case BrowserCacheLocation.SessionStorage:
+                    return new SessionStorage();
+                case BrowserCacheLocation.MemoryStorage:
+                default:
                     break;
-                }
-            case BrowserCacheLocation.MemoryStorage:
+            }
+        }
+        catch (e) {
+            this.logger.error(e);
         }
         this.cacheConfig.cacheLocation = BrowserCacheLocation.MemoryStorage;
         return new MemoryStorage();
     }
-    /**
-     * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured temporaryCacheLocation.
-     * @param temporaryCacheLocation
-     * @param cacheLocation
-     */
-    setupTemporaryCacheStorage(temporaryCacheLocation, cacheLocation) {
-        switch (cacheLocation) {
-            case BrowserCacheLocation.LocalStorage:
-            case BrowserCacheLocation.SessionStorage:
-                try {
-                    // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
-                    return new BrowserStorage(temporaryCacheLocation ||
-                        BrowserCacheLocation.SessionStorage);
-                }
-                catch (e) {
-                    this.logger.verbose(e);
-                    return this.internalStorage;
-                }
-            case BrowserCacheLocation.MemoryStorage:
-            default:
-                return this.internalStorage;
-        }
-    }
-    /**
-     * Migrate all old cache entries to new schema. No rollback supported.
-     * @param storeAuthStateInCookie
-     */
-    migrateCacheEntries() {
-        const idTokenKey = `${Constants.CACHE_PREFIX}.${PersistentCacheKeys.ID_TOKEN}`;
-        const clientInfoKey = `${Constants.CACHE_PREFIX}.${PersistentCacheKeys.CLIENT_INFO}`;
-        const errorKey = `${Constants.CACHE_PREFIX}.${PersistentCacheKeys.ERROR}`;
-        const errorDescKey = `${Constants.CACHE_PREFIX}.${PersistentCacheKeys.ERROR_DESC}`;
-        const idTokenValue = this.browserStorage.getItem(idTokenKey);
-        const clientInfoValue = this.browserStorage.getItem(clientInfoKey);
-        const errorValue = this.browserStorage.getItem(errorKey);
-        const errorDescValue = this.browserStorage.getItem(errorDescKey);
-        const values = [
-            idTokenValue,
-            clientInfoValue,
-            errorValue,
-            errorDescValue,
-        ];
-        const keysToMigrate = [
-            PersistentCacheKeys.ID_TOKEN,
-            PersistentCacheKeys.CLIENT_INFO,
-            PersistentCacheKeys.ERROR,
-            PersistentCacheKeys.ERROR_DESC,
-        ];
-        keysToMigrate.forEach((cacheKey, index) => {
-            const value = values[index];
-            if (value) {
-                this.setTemporaryCache(cacheKey, value, true);
-            }
-        });
-    }
-    /**
-     * Searches all cache entries for MSAL accounts and creates the account key map
-     * This is used to migrate users from older versions of MSAL which did not create the map.
-     * @returns
-     */
-    createKeyMaps() {
-        this.logger.trace("BrowserCacheManager - createKeyMaps called.");
-        const accountKeys = this.getItem(StaticCacheKeys.ACCOUNT_KEYS);
-        const tokenKeys = this.getItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`);
-        if (accountKeys && tokenKeys) {
-            this.logger.verbose("BrowserCacheManager:createKeyMaps - account and token key maps already exist, skipping migration.");
-            // Key maps already exist, no need to iterate through cache
-            return;
-        }
-        const allKeys = this.browserStorage.getKeys();
-        allKeys.forEach((key) => {
-            if (this.isCredentialKey(key)) {
-                // Get item, parse, validate and write key to map
-                const value = this.getItem(key);
-                if (value) {
-                    const credObj = this.validateAndParseJson(value);
-                    if (credObj && credObj.hasOwnProperty("credentialType")) {
-                        switch (credObj["credentialType"]) {
-                            case CredentialType.ID_TOKEN:
-                                if (isIdTokenEntity(credObj)) {
-                                    this.logger.trace("BrowserCacheManager:createKeyMaps - idToken found, saving key to token key map");
-                                    this.logger.tracePii(`BrowserCacheManager:createKeyMaps - idToken with key: ${key} found, saving key to token key map`);
-                                    const idTokenEntity = credObj;
-                                    const newKey = this.updateCredentialCacheKey(key, idTokenEntity);
-                                    this.addTokenKey(newKey, CredentialType.ID_TOKEN);
-                                    return;
-                                }
-                                else {
-                                    this.logger.trace("BrowserCacheManager:createKeyMaps - key found matching idToken schema with value containing idToken credentialType field but value failed IdTokenEntity validation, skipping.");
-                                    this.logger.tracePii(`BrowserCacheManager:createKeyMaps - failed idToken validation on key: ${key}`);
-                                }
-                                break;
-                            case CredentialType.ACCESS_TOKEN:
-                            case CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME:
-                                if (isAccessTokenEntity(credObj)) {
-                                    this.logger.trace("BrowserCacheManager:createKeyMaps - accessToken found, saving key to token key map");
-                                    this.logger.tracePii(`BrowserCacheManager:createKeyMaps - accessToken with key: ${key} found, saving key to token key map`);
-                                    const accessTokenEntity = credObj;
-                                    const newKey = this.updateCredentialCacheKey(key, accessTokenEntity);
-                                    this.addTokenKey(newKey, CredentialType.ACCESS_TOKEN);
-                                    return;
-                                }
-                                else {
-                                    this.logger.trace("BrowserCacheManager:createKeyMaps - key found matching accessToken schema with value containing accessToken credentialType field but value failed AccessTokenEntity validation, skipping.");
-                                    this.logger.tracePii(`BrowserCacheManager:createKeyMaps - failed accessToken validation on key: ${key}`);
-                                }
-                                break;
-                            case CredentialType.REFRESH_TOKEN:
-                                if (isRefreshTokenEntity(credObj)) {
-                                    this.logger.trace("BrowserCacheManager:createKeyMaps - refreshToken found, saving key to token key map");
-                                    this.logger.tracePii(`BrowserCacheManager:createKeyMaps - refreshToken with key: ${key} found, saving key to token key map`);
-                                    const refreshTokenEntity = credObj;
-                                    const newKey = this.updateCredentialCacheKey(key, refreshTokenEntity);
-                                    this.addTokenKey(newKey, CredentialType.REFRESH_TOKEN);
-                                    return;
-                                }
-                                else {
-                                    this.logger.trace("BrowserCacheManager:createKeyMaps - key found matching refreshToken schema with value containing refreshToken credentialType field but value failed RefreshTokenEntity validation, skipping.");
-                                    this.logger.tracePii(`BrowserCacheManager:createKeyMaps - failed refreshToken validation on key: ${key}`);
-                                }
-                                break;
-                            // If credentialType isn't one of our predefined ones, it may not be an MSAL cache value. Ignore.
-                        }
-                    }
-                }
-            }
-            if (this.isAccountKey(key)) {
-                const value = this.getItem(key);
-                if (value) {
-                    const accountObj = this.validateAndParseJson(value);
-                    if (accountObj &&
-                        AccountEntity.isAccountEntity(accountObj)) {
-                        this.logger.trace("BrowserCacheManager:createKeyMaps - account found, saving key to account key map");
-                        this.logger.tracePii(`BrowserCacheManager:createKeyMaps - account with key: ${key} found, saving key to account key map`);
-                        this.addAccountKeyToMap(key);
-                    }
-                }
-            }
-        });
-    }
     /**
      * Parses passed value as JSON object, JSON.parse() will throw an error.
      * @param input
@@ -11583,38 +11755,15 @@ class BrowserCacheManager extends CacheManager {
             return null;
         }
     }
-    /**
-     * fetches the entry from the browser storage based off the key
-     * @param key
-     */
-    getItem(key) {
-        return this.browserStorage.getItem(key);
-    }
-    /**
-     * sets the entry in the browser storage
-     * @param key
-     * @param value
-     */
-    setItem(key, value) {
-        this.browserStorage.setItem(key, value);
-    }
-    /**
-     * fetch the account entity from the platform cache
-     * @param accountKey
-     */
-    getAccount(accountKey, logger) {
-        this.logger.trace("BrowserCacheManager.getAccount called");
-        const accountEntity = this.getCachedAccountEntity(accountKey);
-        return this.updateOutdatedCachedAccount(accountKey, accountEntity, logger);
-    }
     /**
      * Reads account from cache, deserializes it into an account entity and returns it.
      * If account is not found from the key, returns null and removes key from map.
      * @param accountKey
      * @returns
      */
-    getCachedAccountEntity(accountKey) {
-        const serializedAccount = this.getItem(accountKey);
+    getAccount(accountKey) {
+        this.logger.trace("BrowserCacheManager.getAccount called");
+        const serializedAccount = this.browserStorage.getUserData(accountKey);
         if (!serializedAccount) {
             this.removeAccountKeyFromMap(accountKey);
             return null;
@@ -11630,10 +11779,10 @@ class BrowserCacheManager extends CacheManager {
      * set account entity in the platform cache
      * @param account
      */
-    setAccount(account) {
+    async setAccount(account) {
         this.logger.trace("BrowserCacheManager.setAccount called");
         const key = account.generateAccountKey();
-        this.setItem(key, JSON.stringify(account));
+        await this.browserStorage.setUserData(key, JSON.stringify(account));
         this.addAccountKeyToMap(key);
     }
     /**
@@ -11641,13 +11790,7 @@ class BrowserCacheManager extends CacheManager {
      * @returns
      */
     getAccountKeys() {
-        this.logger.trace("BrowserCacheManager.getAccountKeys called");
-        const accountKeys = this.getItem(StaticCacheKeys.ACCOUNT_KEYS);
-        if (accountKeys) {
-            return JSON.parse(accountKeys);
-        }
-        this.logger.verbose("BrowserCacheManager.getAccountKeys - No account keys found");
-        return [];
+        return getAccountKeys(this.browserStorage);
     }
     /**
      * Add a new account to the key map
@@ -11660,7 +11803,7 @@ class BrowserCacheManager extends CacheManager {
         if (accountKeys.indexOf(key) === -1) {
             // Only add key if it does not already exist in the map
             accountKeys.push(key);
-            this.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
+            this.browserStorage.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
             this.logger.verbose("BrowserCacheManager.addAccountKeyToMap account key added");
         }
         else {
@@ -11678,7 +11821,7 @@ class BrowserCacheManager extends CacheManager {
         const removalIndex = accountKeys.indexOf(key);
         if (removalIndex > -1) {
             accountKeys.splice(removalIndex, 1);
-            this.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
+            this.browserStorage.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
             this.logger.trace("BrowserCacheManager.removeAccountKeyFromMap account key removed");
         }
         else {
@@ -11693,14 +11836,6 @@ class BrowserCacheManager extends CacheManager {
         void super.removeAccount(key);
         this.removeAccountKeyFromMap(key);
     }
-    /**
-     * Remove account entity from the platform cache if it's outdated
-     * @param accountKey
-     */
-    removeOutdatedAccount(accountKey) {
-        this.removeItem(accountKey);
-        this.removeAccountKeyFromMap(accountKey);
-    }
     /**
      * Removes given idToken from the cache and from the key map
      * @param key
@@ -11730,28 +11865,7 @@ class BrowserCacheManager extends CacheManager {
      * @returns
      */
     getTokenKeys() {
-        this.logger.trace("BrowserCacheManager.getTokenKeys called");
-        const item = this.getItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`);
-        if (item) {
-            const tokenKeys = this.validateAndParseJson(item);
-            if (tokenKeys &&
-                tokenKeys.hasOwnProperty("idToken") &&
-                tokenKeys.hasOwnProperty("accessToken") &&
-                tokenKeys.hasOwnProperty("refreshToken")) {
-                return tokenKeys;
-            }
-            else {
-                this.logger.error("BrowserCacheManager.getTokenKeys - Token keys found but in an unknown format. Returning empty key map.");
-            }
-        }
-        else {
-            this.logger.verbose("BrowserCacheManager.getTokenKeys - No token keys found");
-        }
-        return {
-            idToken: [],
-            accessToken: [],
-            refreshToken: [],
-        };
+        return getTokenKeys(this.clientId, this.browserStorage);
     }
     /**
      * Adds the given key to the token key map
@@ -11784,7 +11898,7 @@ class BrowserCacheManager extends CacheManager {
                 this.logger.error(`BrowserCacheManager:addTokenKey - CredentialType provided invalid. CredentialType: ${type}`);
                 throw createClientAuthError(unexpectedCredentialType);
         }
-        this.setItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`, JSON.stringify(tokenKeys));
+        this.browserStorage.setItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`, JSON.stringify(tokenKeys));
     }
     /**
      * Removes the given key from the token key map
@@ -11832,14 +11946,14 @@ class BrowserCacheManager extends CacheManager {
                 this.logger.error(`BrowserCacheManager:removeTokenKey - CredentialType provided invalid. CredentialType: ${type}`);
                 throw createClientAuthError(unexpectedCredentialType);
         }
-        this.setItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`, JSON.stringify(tokenKeys));
+        this.browserStorage.setItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`, JSON.stringify(tokenKeys));
     }
     /**
      * generates idToken entity from a string
      * @param idTokenKey
      */
     getIdTokenCredential(idTokenKey) {
-        const value = this.getItem(idTokenKey);
+        const value = this.browserStorage.getUserData(idTokenKey);
         if (!value) {
             this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit");
             this.removeTokenKey(idTokenKey, CredentialType.ID_TOKEN);
@@ -11858,10 +11972,10 @@ class BrowserCacheManager extends CacheManager {
      * set IdToken credential to the platform cache
      * @param idToken
      */
-    setIdTokenCredential(idToken) {
+    async setIdTokenCredential(idToken) {
         this.logger.trace("BrowserCacheManager.setIdTokenCredential called");
         const idTokenKey = generateCredentialKey(idToken);
-        this.setItem(idTokenKey, JSON.stringify(idToken));
+        await this.browserStorage.setUserData(idTokenKey, JSON.stringify(idToken));
         this.addTokenKey(idTokenKey, CredentialType.ID_TOKEN);
     }
     /**
@@ -11869,7 +11983,7 @@ class BrowserCacheManager extends CacheManager {
      * @param key
      */
     getAccessTokenCredential(accessTokenKey) {
-        const value = this.getItem(accessTokenKey);
+        const value = this.browserStorage.getUserData(accessTokenKey);
         if (!value) {
             this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit");
             this.removeTokenKey(accessTokenKey, CredentialType.ACCESS_TOKEN);
@@ -11889,10 +12003,10 @@ class BrowserCacheManager extends CacheManager {
      * set accessToken credential to the platform cache
      * @param accessToken
      */
-    setAccessTokenCredential(accessToken) {
+    async setAccessTokenCredential(accessToken) {
         this.logger.trace("BrowserCacheManager.setAccessTokenCredential called");
         const accessTokenKey = generateCredentialKey(accessToken);
-        this.setItem(accessTokenKey, JSON.stringify(accessToken));
+        await this.browserStorage.setUserData(accessTokenKey, JSON.stringify(accessToken));
         this.addTokenKey(accessTokenKey, CredentialType.ACCESS_TOKEN);
     }
     /**
@@ -11900,7 +12014,7 @@ class BrowserCacheManager extends CacheManager {
      * @param refreshTokenKey
      */
     getRefreshTokenCredential(refreshTokenKey) {
-        const value = this.getItem(refreshTokenKey);
+        const value = this.browserStorage.getUserData(refreshTokenKey);
         if (!value) {
             this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit");
             this.removeTokenKey(refreshTokenKey, CredentialType.REFRESH_TOKEN);
@@ -11920,10 +12034,10 @@ class BrowserCacheManager extends CacheManager {
      * set refreshToken credential to the platform cache
      * @param refreshToken
      */
-    setRefreshTokenCredential(refreshToken) {
+    async setRefreshTokenCredential(refreshToken) {
         this.logger.trace("BrowserCacheManager.setRefreshTokenCredential called");
         const refreshTokenKey = generateCredentialKey(refreshToken);
-        this.setItem(refreshTokenKey, JSON.stringify(refreshToken));
+        await this.browserStorage.setUserData(refreshTokenKey, JSON.stringify(refreshToken));
         this.addTokenKey(refreshTokenKey, CredentialType.REFRESH_TOKEN);
     }
     /**
@@ -11931,7 +12045,7 @@ class BrowserCacheManager extends CacheManager {
      * @param appMetadataKey
      */
     getAppMetadata(appMetadataKey) {
-        const value = this.getItem(appMetadataKey);
+        const value = this.browserStorage.getItem(appMetadataKey);
         if (!value) {
             this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit");
             return null;
@@ -11952,14 +12066,14 @@ class BrowserCacheManager extends CacheManager {
     setAppMetadata(appMetadata) {
         this.logger.trace("BrowserCacheManager.setAppMetadata called");
         const appMetadataKey = generateAppMetadataKey(appMetadata);
-        this.setItem(appMetadataKey, JSON.stringify(appMetadata));
+        this.browserStorage.setItem(appMetadataKey, JSON.stringify(appMetadata));
     }
     /**
      * fetch server telemetry entity from the platform cache
      * @param serverTelemetryKey
      */
     getServerTelemetry(serverTelemetryKey) {
-        const value = this.getItem(serverTelemetryKey);
+        const value = this.browserStorage.getItem(serverTelemetryKey);
         if (!value) {
             this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit");
             return null;
@@ -11980,7 +12094,7 @@ class BrowserCacheManager extends CacheManager {
      */
     setServerTelemetry(serverTelemetryKey, serverTelemetry) {
         this.logger.trace("BrowserCacheManager.setServerTelemetry called");
-        this.setItem(serverTelemetryKey, JSON.stringify(serverTelemetry));
+        this.browserStorage.setItem(serverTelemetryKey, JSON.stringify(serverTelemetry));
     }
     /**
      *
@@ -12040,25 +12154,9 @@ class BrowserCacheManager extends CacheManager {
      */
     getActiveAccount() {
         const activeAccountKeyFilters = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS);
-        const activeAccountValueFilters = this.getItem(activeAccountKeyFilters);
+        const activeAccountValueFilters = this.browserStorage.getItem(activeAccountKeyFilters);
         if (!activeAccountValueFilters) {
-            // if new active account cache type isn't found, it's an old version, so look for that instead
-            this.logger.trace("BrowserCacheManager.getActiveAccount: No active account filters cache schema found, looking for legacy schema");
-            const activeAccountKeyLocal = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
-            const activeAccountValueLocal = this.getItem(activeAccountKeyLocal);
-            if (!activeAccountValueLocal) {
-                this.logger.trace("BrowserCacheManager.getActiveAccount: No active account found");
-                return null;
-            }
-            const activeAccount = this.getAccountInfoFilteredBy({
-                localAccountId: activeAccountValueLocal,
-            });
-            if (activeAccount) {
-                this.logger.trace("BrowserCacheManager.getActiveAccount: Legacy active account cache schema found");
-                this.logger.trace("BrowserCacheManager.getActiveAccount: Adding active account filters cache schema");
-                this.setActiveAccount(activeAccount);
-                return activeAccount;
-            }
+            this.logger.trace("BrowserCacheManager.getActiveAccount: No active account filters found");
             return null;
         }
         const activeAccountValueObj = this.validateAndParseJson(activeAccountValueFilters);
@@ -12079,7 +12177,6 @@ class BrowserCacheManager extends CacheManager {
      */
     setActiveAccount(account) {
         const activeAccountKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS);
-        const activeAccountKeyLocal = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
         if (account) {
             this.logger.verbose("setActiveAccount: Active account set");
             const activeAccountValue = {
@@ -12088,12 +12185,10 @@ class BrowserCacheManager extends CacheManager {
                 tenantId: account.tenantId,
             };
             this.browserStorage.setItem(activeAccountKey, JSON.stringify(activeAccountValue));
-            this.browserStorage.setItem(activeAccountKeyLocal, account.localAccountId);
         }
         else {
             this.logger.verbose("setActiveAccount: No account passed, active account not set");
             this.browserStorage.removeItem(activeAccountKey);
-            this.browserStorage.removeItem(activeAccountKeyLocal);
         }
     }
     /**
@@ -12101,7 +12196,7 @@ class BrowserCacheManager extends CacheManager {
      * @param throttlingCacheKey
      */
     getThrottlingCache(throttlingCacheKey) {
-        const value = this.getItem(throttlingCacheKey);
+        const value = this.browserStorage.getItem(throttlingCacheKey);
         if (!value) {
             this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit");
             return null;
@@ -12122,7 +12217,7 @@ class BrowserCacheManager extends CacheManager {
      */
     setThrottlingCache(throttlingCacheKey, throttlingCache) {
         this.logger.trace("BrowserCacheManager.setThrottlingCache called");
-        this.setItem(throttlingCacheKey, JSON.stringify(throttlingCache));
+        this.browserStorage.setItem(throttlingCacheKey, JSON.stringify(throttlingCache));
     }
     /**
      * Gets cache item with given key.
@@ -12132,7 +12227,7 @@ class BrowserCacheManager extends CacheManager {
     getTemporaryCache(cacheKey, generateKey) {
         const key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
         if (this.cacheConfig.storeAuthStateInCookie) {
-            const itemCookie = this.getItemCookie(key);
+            const itemCookie = this.cookieStorage.getItem(key);
             if (itemCookie) {
                 this.logger.trace("BrowserCacheManager.getTemporaryCache: storeAuthStateInCookies set to true, retrieving from cookies");
                 return itemCookie;
@@ -12167,7 +12262,7 @@ class BrowserCacheManager extends CacheManager {
         this.temporaryCacheStorage.setItem(key, value);
         if (this.cacheConfig.storeAuthStateInCookie) {
             this.logger.trace("BrowserCacheManager.setTemporaryCache: storeAuthStateInCookie set to true, setting item cookie");
-            this.setItemCookie(key, value);
+            this.cookieStorage.setItem(key, value, undefined, this.cacheConfig.secureCookies);
         }
     }
     /**
@@ -12186,7 +12281,7 @@ class BrowserCacheManager extends CacheManager {
         this.temporaryCacheStorage.removeItem(key);
         if (this.cacheConfig.storeAuthStateInCookie) {
             this.logger.trace("BrowserCacheManager.removeItem: storeAuthStateInCookie is true, clearing item cookie");
-            this.clearItemCookie(key);
+            this.cookieStorage.removeItem(key);
         }
     }
     /**
@@ -12242,79 +12337,6 @@ class BrowserCacheManager extends CacheManager {
             this.logger.warning(`${removedAccessTokens.length} access tokens with claims in the cache keys have been removed from the cache.`);
         }
     }
-    /**
-     * Add value to cookies
-     * @param cookieName
-     * @param cookieValue
-     * @param expires
-     * @deprecated
-     */
-    setItemCookie(cookieName, cookieValue, expires) {
-        let cookieStr = `${encodeURIComponent(cookieName)}=${encodeURIComponent(cookieValue)};path=/;SameSite=Lax;`;
-        if (expires) {
-            const expireTime = this.getCookieExpirationTime(expires);
-            cookieStr += `expires=${expireTime};`;
-        }
-        if (this.cacheConfig.secureCookies) {
-            cookieStr += "Secure;";
-        }
-        document.cookie = cookieStr;
-    }
-    /**
-     * Get one item by key from cookies
-     * @param cookieName
-     * @deprecated
-     */
-    getItemCookie(cookieName) {
-        const name = `${encodeURIComponent(cookieName)}=`;
-        const cookieList = document.cookie.split(";");
-        for (let i = 0; i < cookieList.length; i++) {
-            let cookie = cookieList[i];
-            while (cookie.charAt(0) === " ") {
-                cookie = cookie.substring(1);
-            }
-            if (cookie.indexOf(name) === 0) {
-                return decodeURIComponent(cookie.substring(name.length, cookie.length));
-            }
-        }
-        return Constants.EMPTY_STRING;
-    }
-    /**
-     * Clear all msal-related cookies currently set in the browser. Should only be used to clear temporary cache items.
-     * @deprecated
-     */
-    clearMsalCookies() {
-        const cookiePrefix = `${Constants.CACHE_PREFIX}.${this.clientId}`;
-        const cookieList = document.cookie.split(";");
-        cookieList.forEach((cookie) => {
-            while (cookie.charAt(0) === " ") {
-                // eslint-disable-next-line no-param-reassign
-                cookie = cookie.substring(1);
-            }
-            if (cookie.indexOf(cookiePrefix) === 0) {
-                const cookieKey = cookie.split("=")[0];
-                this.clearItemCookie(cookieKey);
-            }
-        });
-    }
-    /**
-     * Clear an item in the cookies by key
-     * @param cookieName
-     * @deprecated
-     */
-    clearItemCookie(cookieName) {
-        this.setItemCookie(cookieName, Constants.EMPTY_STRING, -1);
-    }
-    /**
-     * Get cookie expiration time
-     * @param cookieLifeDays
-     * @deprecated
-     */
-    getCookieExpirationTime(cookieLifeDays) {
-        const today = new Date();
-        const expr = new Date(today.getTime() + cookieLifeDays * this.COOKIE_LIFE_MULTIPLIER);
-        return expr.toUTCString();
-    }
     /**
      * Prepend msal.<client-id> to each key; Skip for any JSON object as Key (defined schemas do not need the key appended: AccessToken Keys or the upcoming schema)
      * @param key
@@ -12323,8 +12345,7 @@ class BrowserCacheManager extends CacheManager {
     generateCacheKey(key) {
         const generatedKey = this.validateAndParseJson(key);
         if (!generatedKey) {
-            if (StringUtils.startsWith(key, Constants.CACHE_PREFIX) ||
-                StringUtils.startsWith(key, PersistentCacheKeys.ADAL_ID_TOKEN)) {
+            if (StringUtils.startsWith(key, Constants.CACHE_PREFIX)) {
                 return key;
             }
             return `${Constants.CACHE_PREFIX}.${this.clientId}.${key}`;
@@ -12438,7 +12459,6 @@ class BrowserCacheManager extends CacheManager {
             this.logger.infoPii(`BrowserCacheManager.cleanRequestByState: Removing temporary cache items for state: ${cachedState}`);
             this.resetRequestCache(cachedState || Constants.EMPTY_STRING);
         }
-        this.clearMsalCookies();
     }
     /**
      * Looks in temporary cache for any state values with the provided interactionType and removes all temporary cache items for that state
@@ -12466,7 +12486,6 @@ class BrowserCacheManager extends CacheManager {
                 this.resetRequestCache(stateValue);
             }
         });
-        this.clearMsalCookies();
         this.setInteractionInProgress(false);
     }
     cacheCodeRequest(authCodeRequest) {
@@ -12552,59 +12571,6 @@ class BrowserCacheManager extends CacheManager {
             this.removeTemporaryItem(key);
         }
     }
-    /**
-     * Returns username retrieved from ADAL or MSAL v1 idToken
-     * @deprecated
-     */
-    getLegacyLoginHint() {
-        // Only check for adal/msal token if no SSO params are being used
-        const adalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ADAL_ID_TOKEN);
-        if (adalIdTokenString) {
-            this.browserStorage.removeItem(PersistentCacheKeys.ADAL_ID_TOKEN);
-            this.logger.verbose("Cached ADAL id token retrieved.");
-        }
-        // Check for cached MSAL v1 id token
-        const msalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ID_TOKEN, true);
-        if (msalIdTokenString) {
-            this.browserStorage.removeItem(this.generateCacheKey(PersistentCacheKeys.ID_TOKEN));
-            this.logger.verbose("Cached MSAL.js v1 id token retrieved");
-        }
-        const cachedIdTokenString = msalIdTokenString || adalIdTokenString;
-        if (cachedIdTokenString) {
-            const idTokenClaims = extractTokenClaims(cachedIdTokenString, base64Decode);
-            if (idTokenClaims.preferred_username) {
-                this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 preferred_username as loginHint");
-                return idTokenClaims.preferred_username;
-            }
-            else if (idTokenClaims.upn) {
-                this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 upn as loginHint");
-                return idTokenClaims.upn;
-            }
-            else {
-                this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, however, no account hint claim found. Enable preferred_username or upn id token claim to get SSO.");
-            }
-        }
-        return null;
-    }
-    /**
-     * Updates a credential's cache key if the current cache key is outdated
-     */
-    updateCredentialCacheKey(currentCacheKey, credential) {
-        const updatedCacheKey = generateCredentialKey(credential);
-        if (currentCacheKey !== updatedCacheKey) {
-            const cacheItem = this.getItem(currentCacheKey);
-            if (cacheItem) {
-                this.browserStorage.removeItem(currentCacheKey);
-                this.setItem(updatedCacheKey, cacheItem);
-                this.logger.verbose(`Updated an outdated ${credential.credentialType} cache key`);
-                return updatedCacheKey;
-            }
-            else {
-                this.logger.error(`Attempted to update an outdated ${credential.credentialType} cache key but no item matching the outdated key was found in storage`);
-            }
-        }
-        return currentCacheKey;
-    }
     /**
      * Builds credential entities from AuthenticationResult object and saves the resulting credentials to the cache
      * @param result
@@ -13321,19 +13287,16 @@ class StandardInteractionClient extends BaseInteractionClient {
             responseMode: this.config.auth.OIDCOptions
                 .serverResponseType,
         };
+        // Skip active account lookup if either login hint or session id is set
+        if (request.loginHint || request.sid) {
+            return validatedRequest;
+        }
         const account = request.account || this.browserStorage.getActiveAccount();
         if (account) {
             this.logger.verbose("Setting validated request account", this.correlationId);
             this.logger.verbosePii(`Setting validated request account: ${account.homeAccountId}`, this.correlationId);
             validatedRequest.account = account;
         }
-        // Check for ADAL/MSAL v1 SSO
-        if (!validatedRequest.loginHint && !account) {
-            const legacyLoginHint = this.browserStorage.getLegacyLoginHint();
-            if (legacyLoginHint) {
-                validatedRequest.loginHint = legacyLoginHint;
-            }
-        }
         return validatedRequest;
     }
 }
@@ -13737,7 +13700,7 @@ class NativeInteractionClient extends BaseInteractionClient {
         // generate authenticationResult
         const result = await this.generateAuthenticationResult(response, request, idTokenClaims, baseAccount, authority.canonicalAuthority, reqTimestamp);
         // cache accounts and tokens in the appropriate storage
-        this.cacheAccount(baseAccount);
+        await this.cacheAccount(baseAccount);
         this.cacheNativeTokens(response, request, homeAccountIdentifier, idTokenClaims, response.access_token, result.tenantId, reqTimestamp);
         return result;
     }
@@ -13862,9 +13825,9 @@ class NativeInteractionClient extends BaseInteractionClient {
      * cache the account entity in browser storage
      * @param accountEntity
      */
-    cacheAccount(accountEntity) {
+    async cacheAccount(accountEntity) {
         // Store the account info and hence `nativeAccountId` in browser cache
-        this.browserStorage.setAccount(accountEntity);
+        await this.browserStorage.setAccount(accountEntity);
         // Remove any existing cached tokens for this account in browser storage
         this.browserStorage.removeAccountContext(accountEntity).catch((e) => {
             this.logger.error(`Error occurred while removing account context from browser storage. ${e}`);
@@ -15742,7 +15705,7 @@ class TokenCache {
      * @param options
      * @returns `AuthenticationResult` for the response that was loaded.
      */
-    loadExternalTokens(request, response, options) {
+    async loadExternalTokens(request, response, options) {
         if (!this.isBrowserEnvironment) {
             throw createBrowserAuthError(nonBrowserEnvironment);
         }
@@ -15759,10 +15722,10 @@ class TokenCache {
         const authority = request.authority
             ? new Authority(Authority.generateAuthority(request.authority, request.azureCloudOptions), this.config.system.networkClient, this.storage, authorityOptions, this.logger, request.correlationId || createNewGuid())
             : undefined;
-        const cacheRecordAccount = this.loadAccount(request, options.clientInfo || response.client_info || "", idTokenClaims, authority);
-        const idToken = this.loadIdToken(response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, cacheRecordAccount.realm);
-        const accessToken = this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, cacheRecordAccount.realm, options);
-        const refreshToken = this.loadRefreshToken(response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment);
+        const cacheRecordAccount = await this.loadAccount(request, options.clientInfo || response.client_info || "", idTokenClaims, authority);
+        const idToken = await this.loadIdToken(response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, cacheRecordAccount.realm);
+        const accessToken = await this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, cacheRecordAccount.realm, options);
+        const refreshToken = await this.loadRefreshToken(response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment);
         return this.generateAuthenticationResult(request, {
             account: cacheRecordAccount,
             idToken,
@@ -15779,11 +15742,11 @@ class TokenCache {
      * @param requestHomeAccountId
      * @returns `AccountEntity`
      */
-    loadAccount(request, clientInfo, idTokenClaims, authority) {
+    async loadAccount(request, clientInfo, idTokenClaims, authority) {
         this.logger.verbose("TokenCache - loading account");
         if (request.account) {
             const accountEntity = AccountEntity.createFromAccountInfo(request.account);
-            this.storage.setAccount(accountEntity);
+            await this.storage.setAccount(accountEntity);
             return accountEntity;
         }
         else if (!authority || (!clientInfo && !idTokenClaims)) {
@@ -15795,7 +15758,7 @@ class TokenCache {
         const cachedAccount = buildAccountToCache(this.storage, authority, homeAccountId, base64Decode, idTokenClaims, clientInfo, authority.hostnameAndPort, claimsTenantId, undefined, // authCodePayload
         undefined, // nativeAccountId
         this.logger);
-        this.storage.setAccount(cachedAccount);
+        await this.storage.setAccount(cachedAccount);
         return cachedAccount;
     }
     /**
@@ -15806,14 +15769,14 @@ class TokenCache {
      * @param tenantId
      * @returns `IdTokenEntity`
      */
-    loadIdToken(response, homeAccountId, environment, tenantId) {
+    async loadIdToken(response, homeAccountId, environment, tenantId) {
         if (!response.id_token) {
             this.logger.verbose("TokenCache - no id token found in response");
             return null;
         }
         this.logger.verbose("TokenCache - loading id token");
         const idTokenEntity = createIdTokenEntity(homeAccountId, environment, response.id_token, this.config.auth.clientId, tenantId);
-        this.storage.setIdTokenCredential(idTokenEntity);
+        await this.storage.setIdTokenCredential(idTokenEntity);
         return idTokenEntity;
     }
     /**
@@ -15825,7 +15788,7 @@ class TokenCache {
      * @param tenantId
      * @returns `AccessTokenEntity`
      */
-    loadAccessToken(request, response, homeAccountId, environment, tenantId, options) {
+    async loadAccessToken(request, response, homeAccountId, environment, tenantId, options) {
         if (!response.access_token) {
             this.logger.verbose("TokenCache - no access token found in response");
             return null;
@@ -15849,7 +15812,7 @@ class TokenCache {
             (response.ext_expires_in || response.expires_in) +
                 new Date().getTime() / 1000;
         const accessTokenEntity = createAccessTokenEntity(homeAccountId, environment, response.access_token, this.config.auth.clientId, tenantId, scopes.printScopes(), expiresOn, extendedExpiresOn, base64Decode);
-        this.storage.setAccessTokenCredential(accessTokenEntity);
+        await this.storage.setAccessTokenCredential(accessTokenEntity);
         return accessTokenEntity;
     }
     /**
@@ -15860,7 +15823,7 @@ class TokenCache {
      * @param environment
      * @returns `RefreshTokenEntity`
      */
-    loadRefreshToken(response, homeAccountId, environment) {
+    async loadRefreshToken(response, homeAccountId, environment) {
         if (!response.refresh_token) {
             this.logger.verbose("TokenCache - no refresh token found in response");
             return null;
@@ -15868,7 +15831,7 @@ class TokenCache {
         this.logger.verbose("TokenCache - loading refresh token");
         const refreshTokenEntity = createRefreshTokenEntity(homeAccountId, environment, response.refresh_token, this.config.auth.clientId, response.foci, undefined, // userAssertionHash
         response.refresh_token_expires_in);
-        this.storage.setRefreshTokenCredential(refreshTokenEntity);
+        await this.storage.setRefreshTokenCredential(refreshTokenEntity);
         return refreshTokenEntity;
     }
     /**
@@ -16117,6 +16080,7 @@ class StandardController {
             this.eventHandler.emitEvent(EventType.INITIALIZE_END);
             return;
         }
+        await this.browserStorage.initialize();
         const initCorrelationId = request?.correlationId || this.getRequestCorrelationId();
         const allowNativeBroker = this.config.system.allowNativeBroker;
         const initMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.InitializeClientApplication, initCorrelationId);
@@ -16842,7 +16806,7 @@ class StandardController {
         this.logger.verbose("hydrateCache called");
         // Account gets saved to browser storage regardless of native or not
         const accountEntity = AccountEntity.createFromAccountInfo(result.account, result.cloudGraphHostName, result.msGraphHost);
-        this.browserStorage.setAccount(accountEntity);
+        await this.browserStorage.setAccount(accountEntity);
         if (result.fromNativeBroker) {
             this.logger.verbose("Response was from native broker, storing in-memory");
             // Tokens from native broker are stored in-memory
@@ -17643,8 +17607,8 @@ class NestedAppAuthController {
      * Specific implementation of initialize function for NestedAppAuthController
      * @returns
      */
-    initialize() {
-        // do nothing not required by this controller
+    async initialize() {
+        await this.browserStorage.initialize();
         return Promise.resolve();
     }
     /**
@@ -18070,7 +18034,7 @@ class NestedAppAuthController {
     async hydrateCache(result, request) {
         this.logger.verbose("hydrateCache called");
         const accountEntity = AccountEntity.createFromAccountInfo(result.account, result.cloudGraphHostName, result.msGraphHost);
-        this.browserStorage.setAccount(accountEntity);
+        await this.browserStorage.setAccount(accountEntity);
         return this.browserStorage.hydrateCache(result, request);
     }
 }
@@ -19615,7 +19579,6 @@ exports.BrowserConfigurationAuthErrorCodes = BrowserConfigurationAuthErrorCodes;
 exports.BrowserConfigurationAuthErrorMessage = BrowserConfigurationAuthErrorMessage;
 exports.BrowserPerformanceClient = BrowserPerformanceClient;
 exports.BrowserPerformanceMeasurement = BrowserPerformanceMeasurement;
-exports.BrowserStorage = BrowserStorage;
 exports.BrowserUtils = BrowserUtils;
 exports.CacheLookupPolicy = CacheLookupPolicy;
 exports.ClientAuthError = ClientAuthError;
@@ -19633,6 +19596,7 @@ exports.InteractionRequiredAuthErrorCodes = InteractionRequiredAuthErrorCodes;
 exports.InteractionRequiredAuthErrorMessage = InteractionRequiredAuthErrorMessage;
 exports.InteractionStatus = InteractionStatus;
 exports.JsonWebTokenTypes = JsonWebTokenTypes;
+exports.LocalStorage = LocalStorage;
 exports.Logger = Logger;
 exports.MemoryStorage = MemoryStorage;
 exports.NavigationClient = NavigationClient;
@@ -19644,6 +19608,7 @@ exports.PublicClientApplication = PublicClientApplication;
 exports.PublicClientNext = PublicClientNext;
 exports.ServerError = ServerError;
 exports.ServerResponseType = ServerResponseType;
+exports.SessionStorage = SessionStorage;
 exports.SignedHttpRequest = SignedHttpRequest;
 exports.StringUtils = StringUtils;
 exports.StubPerformanceClient = StubPerformanceClient;