@azure/msal-browser 3.27.0 → 4.0.0-alpha.0

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.27.0 2024-11-05 */
+/*! @azure/msal-browser v4.0.0-alpha.0 2024-12-18 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -6,7 +6,7 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msal = {}));
 })(this, (function (exports) { 'use strict';
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -113,12 +113,6 @@
      * Persistent cache keys MSAL which stay while user is logged in.
      */
     const PersistentCacheKeys = {
-        ID_TOKEN: "idtoken",
-        CLIENT_INFO: "client.info",
-        ADAL_ID_TOKEN: "adal.idtoken",
-        ERROR: "error",
-        ERROR_DESC: "error.description",
-        ACTIVE_ACCOUNT: "active-account",
         ACTIVE_ACCOUNT_FILTERS: "active-account-filters", // new cache entry for active_account for a more robust version for browser
     };
     /**
@@ -316,7 +310,7 @@
     // Token renewal offset default in seconds
     const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -333,7 +327,7 @@
         unexpectedError: unexpectedError
     });
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -382,7 +376,7 @@
             : AuthErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -480,7 +474,7 @@
         userTimeoutReached: userTimeoutReached
     });
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -732,7 +726,7 @@
         return new ClientAuthError(errorCode, additionalMessage);
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -771,7 +765,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -962,12 +956,12 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /* eslint-disable header/header */
     const name$1 = "@azure/msal-common";
-    const version$1 = "14.16.0";
+    const version$1 = "15.0.0-alpha.0";
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -987,7 +981,7 @@
         AzureUsGovernment: "https://login.microsoftonline.us",
     };
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1048,7 +1042,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1085,7 +1079,7 @@
         return cachedAtSec > nowSeconds();
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1412,7 +1406,7 @@
         return metadata.expiresAt <= nowSeconds();
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1466,7 +1460,7 @@
         urlParseError: urlParseError
     });
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1604,7 +1598,7 @@
         return new ClientConfigurationError(errorCode);
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1701,7 +1695,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1901,7 +1895,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1941,7 +1935,7 @@
         };
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2020,7 +2014,7 @@
         return updatedAccountInfo;
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2035,7 +2029,7 @@
         Ciam: 3,
     };
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2057,7 +2051,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2070,7 +2064,7 @@
         OIDC: "OIDC",
     };
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2313,7 +2307,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2360,7 +2354,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2524,7 +2518,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2664,7 +2658,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2672,7 +2666,7 @@
     const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
     const cacheUnknownErrorCode = "cache_error_unknown";
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2699,7 +2693,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2870,10 +2864,10 @@
             }
             try {
                 if (!!cacheRecord.account) {
-                    this.setAccount(cacheRecord.account);
+                    await this.setAccount(cacheRecord.account);
                 }
                 if (!!cacheRecord.idToken && storeInCache?.idToken !== false) {
-                    this.setIdTokenCredential(cacheRecord.idToken);
+                    await this.setIdTokenCredential(cacheRecord.idToken);
                 }
                 if (!!cacheRecord.accessToken &&
                     storeInCache?.accessToken !== false) {
@@ -2881,7 +2875,7 @@
                 }
                 if (!!cacheRecord.refreshToken &&
                     storeInCache?.refreshToken !== false) {
-                    this.setRefreshTokenCredential(cacheRecord.refreshToken);
+                    await this.setRefreshTokenCredential(cacheRecord.refreshToken);
                 }
                 if (!!cacheRecord.appMetadata) {
                     this.setAppMetadata(cacheRecord.appMetadata);
@@ -2938,7 +2932,7 @@
                 }
             });
             await Promise.all(removedAccessTokens);
-            this.setAccessTokenCredential(credential);
+            await this.setAccessTokenCredential(credential);
         }
         /**
          * Retrieve account entities matching all provided tenant-agnostic filters; if no filter is set, get all account entities in the cache
@@ -3224,61 +3218,6 @@
             });
             await Promise.all(removedCredentials);
         }
-        /**
-         * Migrates a single-tenant account and all it's associated alternate cross-tenant account objects in the
-         * cache into a condensed multi-tenant account object with tenant profiles.
-         * @param accountKey
-         * @param accountEntity
-         * @param logger
-         * @returns
-         */
-        updateOutdatedCachedAccount(accountKey, accountEntity, logger) {
-            // Only update if account entity is defined and has no tenantProfiles object (is outdated)
-            if (accountEntity && accountEntity.isSingleTenant()) {
-                this.commonLogger?.verbose("updateOutdatedCachedAccount: Found a single-tenant (outdated) account entity in the cache, migrating to multi-tenant account entity");
-                // Get keys of all accounts belonging to user
-                const matchingAccountKeys = this.getAccountKeys().filter((key) => {
-                    return key.startsWith(accountEntity.homeAccountId);
-                });
-                // Get all account entities belonging to user
-                const accountsToMerge = [];
-                matchingAccountKeys.forEach((key) => {
-                    const account = this.getCachedAccountEntity(key);
-                    if (account) {
-                        accountsToMerge.push(account);
-                    }
-                });
-                // Set base account to home account if available, any account if not
-                const baseAccount = accountsToMerge.find((account) => {
-                    return tenantIdMatchesHomeTenant(account.realm, account.homeAccountId);
-                }) || accountsToMerge[0];
-                // Populate tenant profiles built from each account entity belonging to the user
-                baseAccount.tenantProfiles = accountsToMerge.map((account) => {
-                    return {
-                        tenantId: account.realm,
-                        localAccountId: account.localAccountId,
-                        name: account.name,
-                        isHomeTenant: tenantIdMatchesHomeTenant(account.realm, account.homeAccountId),
-                    };
-                });
-                const updatedAccount = CacheManager.toObject(new AccountEntity(), {
-                    ...baseAccount,
-                });
-                const newAccountKey = updatedAccount.generateAccountKey();
-                // Clear cache of legacy account objects that have been collpsed into tenant profiles
-                matchingAccountKeys.forEach((key) => {
-                    if (key !== newAccountKey) {
-                        this.removeOutdatedAccount(accountKey);
-                    }
-                });
-                // Cache updated account object
-                this.setAccount(updatedAccount);
-                logger?.verbose("Updated an outdated account entity in the cache");
-                return updatedAccount;
-            }
-            // No update is necessary
-            return accountEntity;
-        }
         /**
          * returns a boolean if the given credential is removed
          * @param credential
@@ -3874,28 +3813,25 @@
     }
     /** @internal */
     class DefaultStorageClass extends CacheManager {
-        setAccount() {
+        async setAccount() {
             throw createClientAuthError(methodNotImplemented);
         }
         getAccount() {
             throw createClientAuthError(methodNotImplemented);
         }
-        getCachedAccountEntity() {
-            throw createClientAuthError(methodNotImplemented);
-        }
-        setIdTokenCredential() {
+        async setIdTokenCredential() {
             throw createClientAuthError(methodNotImplemented);
         }
         getIdTokenCredential() {
             throw createClientAuthError(methodNotImplemented);
         }
-        setAccessTokenCredential() {
+        async setAccessTokenCredential() {
             throw createClientAuthError(methodNotImplemented);
         }
         getAccessTokenCredential() {
             throw createClientAuthError(methodNotImplemented);
         }
-        setRefreshTokenCredential() {
+        async setRefreshTokenCredential() {
             throw createClientAuthError(methodNotImplemented);
         }
         getRefreshTokenCredential() {
@@ -3940,15 +3876,9 @@
         getTokenKeys() {
             throw createClientAuthError(methodNotImplemented);
         }
-        updateCredentialCacheKey() {
-            throw createClientAuthError(methodNotImplemented);
-        }
-        removeOutdatedAccount() {
-            throw createClientAuthError(methodNotImplemented);
-        }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4047,7 +3977,7 @@
         return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4057,7 +3987,7 @@
         UPN: "UPN",
     };
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4107,7 +4037,7 @@
     const BROKER_CLIENT_ID = "brk_client_id";
     const BROKER_REDIRECT_URI = "brk_redirect_uri";
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4174,7 +4104,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4582,7 +4512,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4594,7 +4524,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4604,7 +4534,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4614,7 +4544,7 @@
             response.hasOwnProperty("error_description"));
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5101,7 +5031,7 @@
         "multiMatchedRT",
     ]);
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5197,7 +5127,7 @@
         };
     };
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5306,7 +5236,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6145,7 +6075,7 @@
         };
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6176,7 +6106,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6195,7 +6125,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6293,7 +6223,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6323,7 +6253,7 @@
         return new NetworkError(error, httpStatus, responseHeaders);
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6473,7 +6403,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6499,7 +6429,7 @@
         refreshTokenExpired: refreshTokenExpired
     });
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6587,7 +6517,7 @@
         return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6659,7 +6589,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6743,7 +6673,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6770,7 +6700,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6930,7 +6860,7 @@
                     !forceCacheRefreshTokenResponse &&
                     cacheRecord.account) {
                     const key = cacheRecord.account.generateAccountKey();
-                    const account = this.cacheStorage.getAccount(key, this.logger);
+                    const account = this.cacheStorage.getAccount(key);
                     if (!account) {
                         this.logger.warning("Account used to refresh tokens not in persistence, refreshed tokens will not be stored in the cache");
                         return await ResponseHandler.generateAuthenticationResult(this.cryptoObj, authority, cacheRecord, false, request, idTokenClaims, requestStateObj, undefined, serverRequestId);
@@ -7122,7 +7052,7 @@
         });
         let cachedAccount = null;
         if (baseAccountKey) {
-            cachedAccount = cacheStorage.getAccount(baseAccountKey, logger);
+            cachedAccount = cacheStorage.getAccount(baseAccountKey);
         }
         const baseAccount = cachedAccount ||
             AccountEntity.createAccount({
@@ -7147,7 +7077,7 @@
         return baseAccount;
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -7165,7 +7095,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7607,7 +7537,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7827,7 +7757,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7963,7 +7893,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7978,7 +7908,7 @@
         },
     };
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8036,7 +7966,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8299,7 +8229,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -8307,7 +8237,7 @@
     const missingKidError = "missing_kid_error";
     const missingAlgError = "missing_alg_error";
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8332,7 +8262,7 @@
         return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8372,7 +8302,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8451,7 +8381,7 @@
         }
     }
 
-    /*! @azure/msal-common v14.16.0 2024-11-05 */
+    /*! @azure/msal-common v15.0.0-alpha.0 2024-12-18 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9688,6 +9618,43 @@
         return btoa(binString);
     }
 
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    /**
+     * Class which exposes APIs to decode base64 strings to plaintext. See here for implementation details:
+     * https://developer.mozilla.org/en-US/docs/Glossary/Base64#the_unicode_problem
+     */
+    /**
+     * Returns a URL-safe plaintext decoded string from b64 encoded input.
+     * @param input
+     */
+    function base64Decode(input) {
+        return new TextDecoder().decode(base64DecToArr(input));
+    }
+    /**
+     * Decodes base64 into Uint8Array
+     * @param base64String
+     */
+    function base64DecToArr(base64String) {
+        let encodedString = base64String.replace(/-/g, "+").replace(/_/g, "/");
+        switch (encodedString.length % 4) {
+            case 0:
+                break;
+            case 2:
+                encodedString += "==";
+                break;
+            case 3:
+                encodedString += "=";
+                break;
+            default:
+                throw createBrowserAuthError(invalidBase64String);
+        }
+        const binString = atob(encodedString);
+        return Uint8Array.from(binString, (m) => m.codePointAt(0) || 0);
+    }
+
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -9699,8 +9666,10 @@
     /**
      * See here for more info on RsaHashedKeyGenParams: https://developer.mozilla.org/en-US/docs/Web/API/RsaHashedKeyGenParams
      */
-    // RSA KeyGen Algorithm
+    // Algorithms
     const PKCS1_V15_KEYGEN_ALG = "RSASSA-PKCS1-v1_5";
+    const AES_GCM = "AES-GCM";
+    const HKDF = "HKDF";
     // SHA-256 hashing algorithm
     const S256_HASH_ALG = "SHA-256";
     // MOD length for PoP tokens
@@ -9711,6 +9680,13 @@
     const UUID_CHARS = "0123456789abcdef";
     // Array to store UINT32 random value
     const UINT32_ARR = new Uint32Array(1);
+    // Key Format
+    const RAW = "raw";
+    // Key Usages
+    const ENCRYPT = "encrypt";
+    const DECRYPT = "decrypt";
+    const DERIVE_KEY = "deriveKey";
+    // Suberror
     const SUBTLE_SUBERROR = "crypto_subtle_undefined";
     const keygenAlgorithmOptions = {
         name: PKCS1_V15_KEYGEN_ALG,
@@ -9833,6 +9809,76 @@
     async function sign(key, data) {
         return window.crypto.subtle.sign(keygenAlgorithmOptions, key, data);
     }
+    /**
+     * Generates symmetric base encryption key. This may be stored as all encryption/decryption keys will be derived from this one.
+     */
+    async function generateBaseKey() {
+        const key = await window.crypto.subtle.generateKey({
+            name: AES_GCM,
+            length: 256,
+        }, true, [ENCRYPT, DECRYPT]);
+        return window.crypto.subtle.exportKey(RAW, key);
+    }
+    /**
+     * Returns the raw key to be passed into the key derivation function
+     * @param baseKey
+     * @returns
+     */
+    async function generateHKDF(baseKey) {
+        return window.crypto.subtle.importKey(RAW, baseKey, HKDF, false, [
+            DERIVE_KEY,
+        ]);
+    }
+    /**
+     * Given a base key and a nonce generates a derived key to be used in encryption and decryption.
+     * Note: every time we encrypt a new key is derived
+     * @param baseKey
+     * @param nonce
+     * @returns
+     */
+    async function deriveKey(baseKey, nonce, context) {
+        return window.crypto.subtle.deriveKey({
+            name: HKDF,
+            salt: nonce,
+            hash: S256_HASH_ALG,
+            info: new TextEncoder().encode(context),
+        }, baseKey, { name: AES_GCM, length: 256 }, false, [ENCRYPT, DECRYPT]);
+    }
+    /**
+     * Encrypt the given data given a base key. Returns encrypted data and a nonce that must be provided during decryption
+     * @param key
+     * @param rawData
+     */
+    async function encrypt(baseKey, rawData, context) {
+        const encodedData = new TextEncoder().encode(rawData);
+        // The nonce must never be reused with a given key.
+        const nonce = window.crypto.getRandomValues(new Uint8Array(16));
+        const derivedKey = await deriveKey(baseKey, nonce, context);
+        const encryptedData = await window.crypto.subtle.encrypt({
+            name: AES_GCM,
+            iv: new Uint8Array(12), // New key is derived for every encrypt so we don't need a new nonce
+        }, derivedKey, encodedData);
+        return {
+            data: urlEncodeArr(new Uint8Array(encryptedData)),
+            nonce: urlEncodeArr(nonce),
+        };
+    }
+    /**
+     * Decrypt data with the given key and nonce
+     * @param key
+     * @param nonce
+     * @param encryptedData
+     * @returns
+     */
+    async function decrypt(baseKey, nonce, context, encryptedData) {
+        const encodedData = base64DecToArr(encryptedData);
+        const derivedKey = await deriveKey(baseKey, base64DecToArr(nonce), context);
+        const decryptedData = await window.crypto.subtle.decrypt({
+            name: AES_GCM,
+            iv: new Uint8Array(12), // New key is derived for every encrypt so we don't need a new nonce
+        }, derivedKey, encodedData);
+        return new TextDecoder().decode(decryptedData);
+    }
     /**
      * Returns the SHA-256 hash of an input string
      * @param plainText
@@ -10370,7 +10416,7 @@
 
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "3.27.0";
+    const version = "4.0.0-alpha.0";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10746,43 +10792,6 @@
      */
     StandardOperatingContext.ID = "StandardOperatingContext";
 
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
-    /**
-     * Class which exposes APIs to decode base64 strings to plaintext. See here for implementation details:
-     * https://developer.mozilla.org/en-US/docs/Glossary/Base64#the_unicode_problem
-     */
-    /**
-     * Returns a URL-safe plaintext decoded string from b64 encoded input.
-     * @param input
-     */
-    function base64Decode(input) {
-        return new TextDecoder().decode(base64DecToArr(input));
-    }
-    /**
-     * Decodes base64 into Uint8Array
-     * @param base64String
-     */
-    function base64DecToArr(base64String) {
-        let encodedString = base64String.replace(/-/g, "+").replace(/_/g, "/");
-        switch (encodedString.length % 4) {
-            case 0:
-                break;
-            case 2:
-                encodedString += "==";
-                break;
-            case 3:
-                encodedString += "=";
-                break;
-            default:
-                throw createBrowserAuthError(invalidBase64String);
-        }
-        const binString = atob(encodedString);
-        return Uint8Array.from(binString, (m) => m.codePointAt(0) || 0);
-    }
-
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -10992,12 +11001,21 @@
         constructor() {
             this.cache = new Map();
         }
+        async initialize() {
+            // Memory storage does not require initialization
+        }
         getItem(key) {
             return this.cache.get(key) || null;
         }
+        getUserData(key) {
+            return this.getItem(key);
+        }
         setItem(key, value) {
             this.cache.set(key, value);
         }
+        async setUserData(key, value) {
+            this.setItem(key, value);
+        }
         removeItem(key) {
             this.cache.delete(key);
         }
@@ -11329,32 +11347,327 @@
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
-    class BrowserStorage {
-        constructor(cacheLocation) {
-            this.validateWindowStorage(cacheLocation);
-            this.windowStorage = window[cacheLocation];
+    // Cookie life calculation (hours * minutes * seconds * ms)
+    const COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
+    class CookieStorage {
+        initialize() {
+            return Promise.resolve();
+        }
+        getItem(key) {
+            const name = `${encodeURIComponent(key)}`;
+            const cookieList = document.cookie.split(";");
+            for (let i = 0; i < cookieList.length; i++) {
+                const cookie = cookieList[i];
+                const [key, ...rest] = decodeURIComponent(cookie).trim().split("=");
+                const value = rest.join("=");
+                if (key === name) {
+                    return value;
+                }
+            }
+            return "";
+        }
+        getUserData() {
+            throw createClientAuthError(methodNotImplemented);
+        }
+        setItem(key, value, cookieLifeDays, secure = true) {
+            let cookieStr = `${encodeURIComponent(key)}=${encodeURIComponent(value)};path=/;SameSite=Lax;`;
+            if (cookieLifeDays) {
+                const expireTime = getCookieExpirationTime(cookieLifeDays);
+                cookieStr += `expires=${expireTime};`;
+            }
+            if (secure) {
+                cookieStr += "Secure;";
+            }
+            document.cookie = cookieStr;
+        }
+        async setUserData() {
+            return Promise.reject(createClientAuthError(methodNotImplemented));
+        }
+        removeItem(key) {
+            // Setting expiration to -1 removes it
+            this.setItem(key, "", -1);
+        }
+        getKeys() {
+            const cookieList = document.cookie.split(";");
+            const keys = [];
+            cookieList.forEach((cookie) => {
+                const cookieParts = decodeURIComponent(cookie).trim().split("=");
+                keys.push(cookieParts[0]);
+            });
+            return keys;
+        }
+        containsKey(key) {
+            return this.getKeys().includes(key);
+        }
+    }
+    /**
+     * Get cookie expiration time
+     * @param cookieLifeDays
+     */
+    function getCookieExpirationTime(cookieLifeDays) {
+        const today = new Date();
+        const expr = new Date(today.getTime() + cookieLifeDays * COOKIE_LIFE_MULTIPLIER);
+        return expr.toUTCString();
+    }
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    /**
+     * Returns a list of cache keys for all known accounts
+     * @param storage
+     * @returns
+     */
+    function getAccountKeys(storage) {
+        const accountKeys = storage.getItem(StaticCacheKeys.ACCOUNT_KEYS);
+        if (accountKeys) {
+            return JSON.parse(accountKeys);
+        }
+        return [];
+    }
+    /**
+     * Returns a list of cache keys for all known tokens
+     * @param clientId
+     * @param storage
+     * @returns
+     */
+    function getTokenKeys(clientId, storage) {
+        const item = storage.getItem(`${StaticCacheKeys.TOKEN_KEYS}.${clientId}`);
+        if (item) {
+            const tokenKeys = JSON.parse(item);
+            if (tokenKeys &&
+                tokenKeys.hasOwnProperty("idToken") &&
+                tokenKeys.hasOwnProperty("accessToken") &&
+                tokenKeys.hasOwnProperty("refreshToken")) {
+                return tokenKeys;
+            }
+        }
+        return {
+            idToken: [],
+            accessToken: [],
+            refreshToken: [],
+        };
+    }
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    const ENCRYPTION_KEY = "msal.cache.encryption";
+    class LocalStorage {
+        constructor(clientId) {
+            if (!window.localStorage) {
+                throw createBrowserConfigurationAuthError(storageNotSupported);
+            }
+            this.memoryStorage = new MemoryStorage();
+            this.initialized = false;
+            this.clientId = clientId;
+        }
+        async initialize() {
+            this.initialized = true;
+            const cookies = new CookieStorage();
+            const cookieString = cookies.getItem(ENCRYPTION_KEY);
+            let parsedCookie = { key: "", id: "" };
+            if (cookieString) {
+                try {
+                    parsedCookie = JSON.parse(cookieString);
+                }
+                catch (e) {
+                    // TODO: Log telemetry but don't throw
+                }
+            }
+            if (parsedCookie.key && parsedCookie.id) {
+                // Encryption key already exists, import
+                this.encryptionCookie = {
+                    id: parsedCookie.id,
+                    key: await generateHKDF(base64DecToArr(parsedCookie.key)),
+                };
+                await this.importExistingCache();
+            }
+            else {
+                // Encryption key doesn't exist or is invalid, generate a new one and clear existing cache
+                this.clear();
+                const id = createNewGuid();
+                const baseKey = await generateBaseKey();
+                const keyStr = urlEncodeArr(new Uint8Array(baseKey));
+                this.encryptionCookie = {
+                    id: id,
+                    key: await generateHKDF(baseKey),
+                };
+                const cookieData = {
+                    id: id,
+                    key: keyStr,
+                };
+                cookies.setItem(ENCRYPTION_KEY, JSON.stringify(cookieData));
+            }
+        }
+        getItem(key) {
+            return window.localStorage.getItem(key);
+        }
+        getUserData(key) {
+            if (!this.initialized) {
+                throw createBrowserAuthError(uninitializedPublicClientApplication);
+            }
+            return this.memoryStorage.getItem(key);
+        }
+        setItem(key, value) {
+            window.localStorage.setItem(key, value);
+        }
+        async setUserData(key, value) {
+            if (!this.initialized || !this.encryptionCookie) {
+                throw createBrowserAuthError(uninitializedPublicClientApplication);
+            }
+            const { data, nonce } = await encrypt(this.encryptionCookie.key, value, this.getContext(key));
+            const encryptedData = {
+                id: this.encryptionCookie.id,
+                nonce: nonce,
+                data: data,
+            };
+            this.memoryStorage.setItem(key, value);
+            this.setItem(key, JSON.stringify(encryptedData));
+        }
+        removeItem(key) {
+            this.memoryStorage.removeItem(key);
+            window.localStorage.removeItem(key);
+        }
+        getKeys() {
+            return Object.keys(window.localStorage);
+        }
+        containsKey(key) {
+            return window.localStorage.hasOwnProperty(key);
+        }
+        /**
+         * Removes all known MSAL keys from the cache
+         */
+        clear() {
+            // Removes all remaining MSAL cache items
+            this.memoryStorage.clear();
+            const accountKeys = getAccountKeys(this);
+            accountKeys.forEach((key) => this.removeItem(key));
+            const tokenKeys = getTokenKeys(this.clientId, this);
+            tokenKeys.idToken.forEach((key) => this.removeItem(key));
+            tokenKeys.accessToken.forEach((key) => this.removeItem(key));
+            tokenKeys.refreshToken.forEach((key) => this.removeItem(key));
+            // Clean up anything left
+            this.getKeys().forEach((cacheKey) => {
+                if (cacheKey.startsWith(Constants.CACHE_PREFIX) ||
+                    cacheKey.indexOf(this.clientId) !== -1) {
+                    this.removeItem(cacheKey);
+                }
+            });
+        }
+        /**
+         * Helper to decrypt all known MSAL keys in localStorage and save them to inMemory storage
+         * @returns
+         */
+        async importExistingCache() {
+            if (!this.encryptionCookie) {
+                return;
+            }
+            const accountKeys = getAccountKeys(this);
+            await this.importArray(accountKeys);
+            const tokenKeys = getTokenKeys(this.clientId, this);
+            await Promise.all([
+                this.importArray(tokenKeys.idToken),
+                this.importArray(tokenKeys.accessToken),
+                this.importArray(tokenKeys.refreshToken),
+            ]);
+        }
+        /**
+         * Helper to decrypt and save cache entries
+         * @param key
+         * @returns
+         */
+        async getItemFromEncryptedCache(key) {
+            if (!this.encryptionCookie) {
+                return null;
+            }
+            const rawCache = this.getItem(key);
+            if (!rawCache) {
+                return null;
+            }
+            let encObj;
+            try {
+                encObj = JSON.parse(rawCache);
+                if (!encObj.id || !encObj.nonce || !encObj.data) {
+                    throw "Not encrypted!"; // TODO: Typed error
+                }
+                if (encObj.id !== this.encryptionCookie.id) {
+                    throw "Old item!"; // TODO: Typed error
+                }
+            }
+            catch (e) {
+                // Not a valid encrypted object, remove
+                this.removeItem(key);
+                // TODO: Log to telemetry
+                return null;
+            }
+            return decrypt(this.encryptionCookie.key, encObj.nonce, this.getContext(key), encObj.data);
+        }
+        /**
+         * Helper to decrypt and save an array of cache keys
+         * @param arr
+         */
+        async importArray(arr) {
+            const promiseArr = [];
+            arr.forEach((key) => {
+                const promise = this.getItemFromEncryptedCache(key).then((value) => {
+                    if (value) {
+                        this.memoryStorage.setItem(key, value);
+                    }
+                });
+                promiseArr.push(promise);
+            });
+            await Promise.all(promiseArr);
+        }
+        /**
+         * Gets encryption context for a given cache entry. This is clientId for app specific entries, empty string for shared entries
+         * @param key
+         * @returns
+         */
+        getContext(key) {
+            let context = "";
+            if (key.includes(this.clientId)) {
+                context = this.clientId; // Used to bind encryption key to this appId
+            }
+            return context;
         }
-        validateWindowStorage(cacheLocation) {
-            if ((cacheLocation !== BrowserCacheLocation.LocalStorage &&
-                cacheLocation !== BrowserCacheLocation.SessionStorage) ||
-                !window[cacheLocation]) {
+    }
+
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    class SessionStorage {
+        constructor() {
+            if (!window.sessionStorage) {
                 throw createBrowserConfigurationAuthError(storageNotSupported);
             }
         }
+        async initialize() {
+            // Session storage does not require initialization
+        }
         getItem(key) {
-            return this.windowStorage.getItem(key);
+            return window.sessionStorage.getItem(key);
+        }
+        getUserData(key) {
+            return this.getItem(key);
         }
         setItem(key, value) {
-            this.windowStorage.setItem(key, value);
+            window.sessionStorage.setItem(key, value);
+        }
+        async setUserData(key, value) {
+            this.setItem(key, value);
         }
         removeItem(key) {
-            this.windowStorage.removeItem(key);
+            window.sessionStorage.removeItem(key);
         }
         getKeys() {
-            return Object.keys(this.windowStorage);
+            return Object.keys(window.sessionStorage);
         }
         containsKey(key) {
-            return this.windowStorage.hasOwnProperty(key);
+            return window.sessionStorage.hasOwnProperty(key);
         }
     }
 
@@ -11392,180 +11705,39 @@
     class BrowserCacheManager extends CacheManager {
         constructor(clientId, cacheConfig, cryptoImpl, logger, staticAuthorityOptions, performanceClient) {
             super(clientId, cryptoImpl, logger, staticAuthorityOptions);
-            // Cookie life calculation (hours * minutes * seconds * ms)
-            this.COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
             this.cacheConfig = cacheConfig;
             this.logger = logger;
             this.internalStorage = new MemoryStorage();
             this.browserStorage = this.setupBrowserStorage(this.cacheConfig.cacheLocation);
-            this.temporaryCacheStorage = this.setupTemporaryCacheStorage(this.cacheConfig.temporaryCacheLocation, this.cacheConfig.cacheLocation);
-            // Migrate cache entries from older versions of MSAL.
-            if (cacheConfig.cacheMigrationEnabled) {
-                this.migrateCacheEntries();
-                this.createKeyMaps();
-            }
+            this.temporaryCacheStorage = this.setupBrowserStorage(this.cacheConfig.temporaryCacheLocation);
+            this.cookieStorage = new CookieStorage();
             this.performanceClient = performanceClient;
         }
+        async initialize() {
+            await this.browserStorage.initialize();
+        }
         /**
          * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
          * @param cacheLocation
          */
         setupBrowserStorage(cacheLocation) {
-            switch (cacheLocation) {
-                case BrowserCacheLocation.LocalStorage:
-                case BrowserCacheLocation.SessionStorage:
-                    try {
-                        return new BrowserStorage(cacheLocation);
-                    }
-                    catch (e) {
-                        this.logger.verbose(e);
+            try {
+                switch (cacheLocation) {
+                    case BrowserCacheLocation.LocalStorage:
+                        return new LocalStorage(this.clientId);
+                    case BrowserCacheLocation.SessionStorage:
+                        return new SessionStorage();
+                    case BrowserCacheLocation.MemoryStorage:
+                    default:
                         break;
-                    }
-                case BrowserCacheLocation.MemoryStorage:
+                }
+            }
+            catch (e) {
+                this.logger.error(e);
             }
             this.cacheConfig.cacheLocation = BrowserCacheLocation.MemoryStorage;
             return new MemoryStorage();
         }
-        /**
-         * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured temporaryCacheLocation.
-         * @param temporaryCacheLocation
-         * @param cacheLocation
-         */
-        setupTemporaryCacheStorage(temporaryCacheLocation, cacheLocation) {
-            switch (cacheLocation) {
-                case BrowserCacheLocation.LocalStorage:
-                case BrowserCacheLocation.SessionStorage:
-                    try {
-                        // Temporary cache items will always be stored in session storage to mitigate problems caused by multiple tabs
-                        return new BrowserStorage(temporaryCacheLocation ||
-                            BrowserCacheLocation.SessionStorage);
-                    }
-                    catch (e) {
-                        this.logger.verbose(e);
-                        return this.internalStorage;
-                    }
-                case BrowserCacheLocation.MemoryStorage:
-                default:
-                    return this.internalStorage;
-            }
-        }
-        /**
-         * Migrate all old cache entries to new schema. No rollback supported.
-         * @param storeAuthStateInCookie
-         */
-        migrateCacheEntries() {
-            const idTokenKey = `${Constants.CACHE_PREFIX}.${PersistentCacheKeys.ID_TOKEN}`;
-            const clientInfoKey = `${Constants.CACHE_PREFIX}.${PersistentCacheKeys.CLIENT_INFO}`;
-            const errorKey = `${Constants.CACHE_PREFIX}.${PersistentCacheKeys.ERROR}`;
-            const errorDescKey = `${Constants.CACHE_PREFIX}.${PersistentCacheKeys.ERROR_DESC}`;
-            const idTokenValue = this.browserStorage.getItem(idTokenKey);
-            const clientInfoValue = this.browserStorage.getItem(clientInfoKey);
-            const errorValue = this.browserStorage.getItem(errorKey);
-            const errorDescValue = this.browserStorage.getItem(errorDescKey);
-            const values = [
-                idTokenValue,
-                clientInfoValue,
-                errorValue,
-                errorDescValue,
-            ];
-            const keysToMigrate = [
-                PersistentCacheKeys.ID_TOKEN,
-                PersistentCacheKeys.CLIENT_INFO,
-                PersistentCacheKeys.ERROR,
-                PersistentCacheKeys.ERROR_DESC,
-            ];
-            keysToMigrate.forEach((cacheKey, index) => {
-                const value = values[index];
-                if (value) {
-                    this.setTemporaryCache(cacheKey, value, true);
-                }
-            });
-        }
-        /**
-         * Searches all cache entries for MSAL accounts and creates the account key map
-         * This is used to migrate users from older versions of MSAL which did not create the map.
-         * @returns
-         */
-        createKeyMaps() {
-            this.logger.trace("BrowserCacheManager - createKeyMaps called.");
-            const accountKeys = this.getItem(StaticCacheKeys.ACCOUNT_KEYS);
-            const tokenKeys = this.getItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`);
-            if (accountKeys && tokenKeys) {
-                this.logger.verbose("BrowserCacheManager:createKeyMaps - account and token key maps already exist, skipping migration.");
-                // Key maps already exist, no need to iterate through cache
-                return;
-            }
-            const allKeys = this.browserStorage.getKeys();
-            allKeys.forEach((key) => {
-                if (this.isCredentialKey(key)) {
-                    // Get item, parse, validate and write key to map
-                    const value = this.getItem(key);
-                    if (value) {
-                        const credObj = this.validateAndParseJson(value);
-                        if (credObj && credObj.hasOwnProperty("credentialType")) {
-                            switch (credObj["credentialType"]) {
-                                case CredentialType.ID_TOKEN:
-                                    if (isIdTokenEntity(credObj)) {
-                                        this.logger.trace("BrowserCacheManager:createKeyMaps - idToken found, saving key to token key map");
-                                        this.logger.tracePii(`BrowserCacheManager:createKeyMaps - idToken with key: ${key} found, saving key to token key map`);
-                                        const idTokenEntity = credObj;
-                                        const newKey = this.updateCredentialCacheKey(key, idTokenEntity);
-                                        this.addTokenKey(newKey, CredentialType.ID_TOKEN);
-                                        return;
-                                    }
-                                    else {
-                                        this.logger.trace("BrowserCacheManager:createKeyMaps - key found matching idToken schema with value containing idToken credentialType field but value failed IdTokenEntity validation, skipping.");
-                                        this.logger.tracePii(`BrowserCacheManager:createKeyMaps - failed idToken validation on key: ${key}`);
-                                    }
-                                    break;
-                                case CredentialType.ACCESS_TOKEN:
-                                case CredentialType.ACCESS_TOKEN_WITH_AUTH_SCHEME:
-                                    if (isAccessTokenEntity(credObj)) {
-                                        this.logger.trace("BrowserCacheManager:createKeyMaps - accessToken found, saving key to token key map");
-                                        this.logger.tracePii(`BrowserCacheManager:createKeyMaps - accessToken with key: ${key} found, saving key to token key map`);
-                                        const accessTokenEntity = credObj;
-                                        const newKey = this.updateCredentialCacheKey(key, accessTokenEntity);
-                                        this.addTokenKey(newKey, CredentialType.ACCESS_TOKEN);
-                                        return;
-                                    }
-                                    else {
-                                        this.logger.trace("BrowserCacheManager:createKeyMaps - key found matching accessToken schema with value containing accessToken credentialType field but value failed AccessTokenEntity validation, skipping.");
-                                        this.logger.tracePii(`BrowserCacheManager:createKeyMaps - failed accessToken validation on key: ${key}`);
-                                    }
-                                    break;
-                                case CredentialType.REFRESH_TOKEN:
-                                    if (isRefreshTokenEntity(credObj)) {
-                                        this.logger.trace("BrowserCacheManager:createKeyMaps - refreshToken found, saving key to token key map");
-                                        this.logger.tracePii(`BrowserCacheManager:createKeyMaps - refreshToken with key: ${key} found, saving key to token key map`);
-                                        const refreshTokenEntity = credObj;
-                                        const newKey = this.updateCredentialCacheKey(key, refreshTokenEntity);
-                                        this.addTokenKey(newKey, CredentialType.REFRESH_TOKEN);
-                                        return;
-                                    }
-                                    else {
-                                        this.logger.trace("BrowserCacheManager:createKeyMaps - key found matching refreshToken schema with value containing refreshToken credentialType field but value failed RefreshTokenEntity validation, skipping.");
-                                        this.logger.tracePii(`BrowserCacheManager:createKeyMaps - failed refreshToken validation on key: ${key}`);
-                                    }
-                                    break;
-                                // If credentialType isn't one of our predefined ones, it may not be an MSAL cache value. Ignore.
-                            }
-                        }
-                    }
-                }
-                if (this.isAccountKey(key)) {
-                    const value = this.getItem(key);
-                    if (value) {
-                        const accountObj = this.validateAndParseJson(value);
-                        if (accountObj &&
-                            AccountEntity.isAccountEntity(accountObj)) {
-                            this.logger.trace("BrowserCacheManager:createKeyMaps - account found, saving key to account key map");
-                            this.logger.tracePii(`BrowserCacheManager:createKeyMaps - account with key: ${key} found, saving key to account key map`);
-                            this.addAccountKeyToMap(key);
-                        }
-                    }
-                }
-            });
-        }
         /**
          * Parses passed value as JSON object, JSON.parse() will throw an error.
          * @param input
@@ -11587,38 +11759,15 @@
                 return null;
             }
         }
-        /**
-         * fetches the entry from the browser storage based off the key
-         * @param key
-         */
-        getItem(key) {
-            return this.browserStorage.getItem(key);
-        }
-        /**
-         * sets the entry in the browser storage
-         * @param key
-         * @param value
-         */
-        setItem(key, value) {
-            this.browserStorage.setItem(key, value);
-        }
-        /**
-         * fetch the account entity from the platform cache
-         * @param accountKey
-         */
-        getAccount(accountKey, logger) {
-            this.logger.trace("BrowserCacheManager.getAccount called");
-            const accountEntity = this.getCachedAccountEntity(accountKey);
-            return this.updateOutdatedCachedAccount(accountKey, accountEntity, logger);
-        }
         /**
          * Reads account from cache, deserializes it into an account entity and returns it.
          * If account is not found from the key, returns null and removes key from map.
          * @param accountKey
          * @returns
          */
-        getCachedAccountEntity(accountKey) {
-            const serializedAccount = this.getItem(accountKey);
+        getAccount(accountKey) {
+            this.logger.trace("BrowserCacheManager.getAccount called");
+            const serializedAccount = this.browserStorage.getUserData(accountKey);
             if (!serializedAccount) {
                 this.removeAccountKeyFromMap(accountKey);
                 return null;
@@ -11634,10 +11783,10 @@
          * set account entity in the platform cache
          * @param account
          */
-        setAccount(account) {
+        async setAccount(account) {
             this.logger.trace("BrowserCacheManager.setAccount called");
             const key = account.generateAccountKey();
-            this.setItem(key, JSON.stringify(account));
+            await this.browserStorage.setUserData(key, JSON.stringify(account));
             this.addAccountKeyToMap(key);
         }
         /**
@@ -11645,13 +11794,7 @@
          * @returns
          */
         getAccountKeys() {
-            this.logger.trace("BrowserCacheManager.getAccountKeys called");
-            const accountKeys = this.getItem(StaticCacheKeys.ACCOUNT_KEYS);
-            if (accountKeys) {
-                return JSON.parse(accountKeys);
-            }
-            this.logger.verbose("BrowserCacheManager.getAccountKeys - No account keys found");
-            return [];
+            return getAccountKeys(this.browserStorage);
         }
         /**
          * Add a new account to the key map
@@ -11664,7 +11807,7 @@
             if (accountKeys.indexOf(key) === -1) {
                 // Only add key if it does not already exist in the map
                 accountKeys.push(key);
-                this.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
+                this.browserStorage.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
                 this.logger.verbose("BrowserCacheManager.addAccountKeyToMap account key added");
             }
             else {
@@ -11682,7 +11825,7 @@
             const removalIndex = accountKeys.indexOf(key);
             if (removalIndex > -1) {
                 accountKeys.splice(removalIndex, 1);
-                this.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
+                this.browserStorage.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
                 this.logger.trace("BrowserCacheManager.removeAccountKeyFromMap account key removed");
             }
             else {
@@ -11697,14 +11840,6 @@
             void super.removeAccount(key);
             this.removeAccountKeyFromMap(key);
         }
-        /**
-         * Remove account entity from the platform cache if it's outdated
-         * @param accountKey
-         */
-        removeOutdatedAccount(accountKey) {
-            this.removeItem(accountKey);
-            this.removeAccountKeyFromMap(accountKey);
-        }
         /**
          * Removes given idToken from the cache and from the key map
          * @param key
@@ -11734,28 +11869,7 @@
          * @returns
          */
         getTokenKeys() {
-            this.logger.trace("BrowserCacheManager.getTokenKeys called");
-            const item = this.getItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`);
-            if (item) {
-                const tokenKeys = this.validateAndParseJson(item);
-                if (tokenKeys &&
-                    tokenKeys.hasOwnProperty("idToken") &&
-                    tokenKeys.hasOwnProperty("accessToken") &&
-                    tokenKeys.hasOwnProperty("refreshToken")) {
-                    return tokenKeys;
-                }
-                else {
-                    this.logger.error("BrowserCacheManager.getTokenKeys - Token keys found but in an unknown format. Returning empty key map.");
-                }
-            }
-            else {
-                this.logger.verbose("BrowserCacheManager.getTokenKeys - No token keys found");
-            }
-            return {
-                idToken: [],
-                accessToken: [],
-                refreshToken: [],
-            };
+            return getTokenKeys(this.clientId, this.browserStorage);
         }
         /**
          * Adds the given key to the token key map
@@ -11788,7 +11902,7 @@
                     this.logger.error(`BrowserCacheManager:addTokenKey - CredentialType provided invalid. CredentialType: ${type}`);
                     throw createClientAuthError(unexpectedCredentialType);
             }
-            this.setItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`, JSON.stringify(tokenKeys));
+            this.browserStorage.setItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`, JSON.stringify(tokenKeys));
         }
         /**
          * Removes the given key from the token key map
@@ -11836,14 +11950,14 @@
                     this.logger.error(`BrowserCacheManager:removeTokenKey - CredentialType provided invalid. CredentialType: ${type}`);
                     throw createClientAuthError(unexpectedCredentialType);
             }
-            this.setItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`, JSON.stringify(tokenKeys));
+            this.browserStorage.setItem(`${StaticCacheKeys.TOKEN_KEYS}.${this.clientId}`, JSON.stringify(tokenKeys));
         }
         /**
          * generates idToken entity from a string
          * @param idTokenKey
          */
         getIdTokenCredential(idTokenKey) {
-            const value = this.getItem(idTokenKey);
+            const value = this.browserStorage.getUserData(idTokenKey);
             if (!value) {
                 this.logger.trace("BrowserCacheManager.getIdTokenCredential: called, no cache hit");
                 this.removeTokenKey(idTokenKey, CredentialType.ID_TOKEN);
@@ -11862,10 +11976,10 @@
          * set IdToken credential to the platform cache
          * @param idToken
          */
-        setIdTokenCredential(idToken) {
+        async setIdTokenCredential(idToken) {
             this.logger.trace("BrowserCacheManager.setIdTokenCredential called");
             const idTokenKey = generateCredentialKey(idToken);
-            this.setItem(idTokenKey, JSON.stringify(idToken));
+            await this.browserStorage.setUserData(idTokenKey, JSON.stringify(idToken));
             this.addTokenKey(idTokenKey, CredentialType.ID_TOKEN);
         }
         /**
@@ -11873,7 +11987,7 @@
          * @param key
          */
         getAccessTokenCredential(accessTokenKey) {
-            const value = this.getItem(accessTokenKey);
+            const value = this.browserStorage.getUserData(accessTokenKey);
             if (!value) {
                 this.logger.trace("BrowserCacheManager.getAccessTokenCredential: called, no cache hit");
                 this.removeTokenKey(accessTokenKey, CredentialType.ACCESS_TOKEN);
@@ -11893,10 +12007,10 @@
          * set accessToken credential to the platform cache
          * @param accessToken
          */
-        setAccessTokenCredential(accessToken) {
+        async setAccessTokenCredential(accessToken) {
             this.logger.trace("BrowserCacheManager.setAccessTokenCredential called");
             const accessTokenKey = generateCredentialKey(accessToken);
-            this.setItem(accessTokenKey, JSON.stringify(accessToken));
+            await this.browserStorage.setUserData(accessTokenKey, JSON.stringify(accessToken));
             this.addTokenKey(accessTokenKey, CredentialType.ACCESS_TOKEN);
         }
         /**
@@ -11904,7 +12018,7 @@
          * @param refreshTokenKey
          */
         getRefreshTokenCredential(refreshTokenKey) {
-            const value = this.getItem(refreshTokenKey);
+            const value = this.browserStorage.getUserData(refreshTokenKey);
             if (!value) {
                 this.logger.trace("BrowserCacheManager.getRefreshTokenCredential: called, no cache hit");
                 this.removeTokenKey(refreshTokenKey, CredentialType.REFRESH_TOKEN);
@@ -11924,10 +12038,10 @@
          * set refreshToken credential to the platform cache
          * @param refreshToken
          */
-        setRefreshTokenCredential(refreshToken) {
+        async setRefreshTokenCredential(refreshToken) {
             this.logger.trace("BrowserCacheManager.setRefreshTokenCredential called");
             const refreshTokenKey = generateCredentialKey(refreshToken);
-            this.setItem(refreshTokenKey, JSON.stringify(refreshToken));
+            await this.browserStorage.setUserData(refreshTokenKey, JSON.stringify(refreshToken));
             this.addTokenKey(refreshTokenKey, CredentialType.REFRESH_TOKEN);
         }
         /**
@@ -11935,7 +12049,7 @@
          * @param appMetadataKey
          */
         getAppMetadata(appMetadataKey) {
-            const value = this.getItem(appMetadataKey);
+            const value = this.browserStorage.getItem(appMetadataKey);
             if (!value) {
                 this.logger.trace("BrowserCacheManager.getAppMetadata: called, no cache hit");
                 return null;
@@ -11956,14 +12070,14 @@
         setAppMetadata(appMetadata) {
             this.logger.trace("BrowserCacheManager.setAppMetadata called");
             const appMetadataKey = generateAppMetadataKey(appMetadata);
-            this.setItem(appMetadataKey, JSON.stringify(appMetadata));
+            this.browserStorage.setItem(appMetadataKey, JSON.stringify(appMetadata));
         }
         /**
          * fetch server telemetry entity from the platform cache
          * @param serverTelemetryKey
          */
         getServerTelemetry(serverTelemetryKey) {
-            const value = this.getItem(serverTelemetryKey);
+            const value = this.browserStorage.getItem(serverTelemetryKey);
             if (!value) {
                 this.logger.trace("BrowserCacheManager.getServerTelemetry: called, no cache hit");
                 return null;
@@ -11984,7 +12098,7 @@
          */
         setServerTelemetry(serverTelemetryKey, serverTelemetry) {
             this.logger.trace("BrowserCacheManager.setServerTelemetry called");
-            this.setItem(serverTelemetryKey, JSON.stringify(serverTelemetry));
+            this.browserStorage.setItem(serverTelemetryKey, JSON.stringify(serverTelemetry));
         }
         /**
          *
@@ -12044,25 +12158,9 @@
          */
         getActiveAccount() {
             const activeAccountKeyFilters = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS);
-            const activeAccountValueFilters = this.getItem(activeAccountKeyFilters);
+            const activeAccountValueFilters = this.browserStorage.getItem(activeAccountKeyFilters);
             if (!activeAccountValueFilters) {
-                // if new active account cache type isn't found, it's an old version, so look for that instead
-                this.logger.trace("BrowserCacheManager.getActiveAccount: No active account filters cache schema found, looking for legacy schema");
-                const activeAccountKeyLocal = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
-                const activeAccountValueLocal = this.getItem(activeAccountKeyLocal);
-                if (!activeAccountValueLocal) {
-                    this.logger.trace("BrowserCacheManager.getActiveAccount: No active account found");
-                    return null;
-                }
-                const activeAccount = this.getAccountInfoFilteredBy({
-                    localAccountId: activeAccountValueLocal,
-                });
-                if (activeAccount) {
-                    this.logger.trace("BrowserCacheManager.getActiveAccount: Legacy active account cache schema found");
-                    this.logger.trace("BrowserCacheManager.getActiveAccount: Adding active account filters cache schema");
-                    this.setActiveAccount(activeAccount);
-                    return activeAccount;
-                }
+                this.logger.trace("BrowserCacheManager.getActiveAccount: No active account filters found");
                 return null;
             }
             const activeAccountValueObj = this.validateAndParseJson(activeAccountValueFilters);
@@ -12083,7 +12181,6 @@
          */
         setActiveAccount(account) {
             const activeAccountKey = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS);
-            const activeAccountKeyLocal = this.generateCacheKey(PersistentCacheKeys.ACTIVE_ACCOUNT);
             if (account) {
                 this.logger.verbose("setActiveAccount: Active account set");
                 const activeAccountValue = {
@@ -12092,12 +12189,10 @@
                     tenantId: account.tenantId,
                 };
                 this.browserStorage.setItem(activeAccountKey, JSON.stringify(activeAccountValue));
-                this.browserStorage.setItem(activeAccountKeyLocal, account.localAccountId);
             }
             else {
                 this.logger.verbose("setActiveAccount: No account passed, active account not set");
                 this.browserStorage.removeItem(activeAccountKey);
-                this.browserStorage.removeItem(activeAccountKeyLocal);
             }
         }
         /**
@@ -12105,7 +12200,7 @@
          * @param throttlingCacheKey
          */
         getThrottlingCache(throttlingCacheKey) {
-            const value = this.getItem(throttlingCacheKey);
+            const value = this.browserStorage.getItem(throttlingCacheKey);
             if (!value) {
                 this.logger.trace("BrowserCacheManager.getThrottlingCache: called, no cache hit");
                 return null;
@@ -12126,7 +12221,7 @@
          */
         setThrottlingCache(throttlingCacheKey, throttlingCache) {
             this.logger.trace("BrowserCacheManager.setThrottlingCache called");
-            this.setItem(throttlingCacheKey, JSON.stringify(throttlingCache));
+            this.browserStorage.setItem(throttlingCacheKey, JSON.stringify(throttlingCache));
         }
         /**
          * Gets cache item with given key.
@@ -12136,7 +12231,7 @@
         getTemporaryCache(cacheKey, generateKey) {
             const key = generateKey ? this.generateCacheKey(cacheKey) : cacheKey;
             if (this.cacheConfig.storeAuthStateInCookie) {
-                const itemCookie = this.getItemCookie(key);
+                const itemCookie = this.cookieStorage.getItem(key);
                 if (itemCookie) {
                     this.logger.trace("BrowserCacheManager.getTemporaryCache: storeAuthStateInCookies set to true, retrieving from cookies");
                     return itemCookie;
@@ -12171,7 +12266,7 @@
             this.temporaryCacheStorage.setItem(key, value);
             if (this.cacheConfig.storeAuthStateInCookie) {
                 this.logger.trace("BrowserCacheManager.setTemporaryCache: storeAuthStateInCookie set to true, setting item cookie");
-                this.setItemCookie(key, value);
+                this.cookieStorage.setItem(key, value, undefined, this.cacheConfig.secureCookies);
             }
         }
         /**
@@ -12190,7 +12285,7 @@
             this.temporaryCacheStorage.removeItem(key);
             if (this.cacheConfig.storeAuthStateInCookie) {
                 this.logger.trace("BrowserCacheManager.removeItem: storeAuthStateInCookie is true, clearing item cookie");
-                this.clearItemCookie(key);
+                this.cookieStorage.removeItem(key);
             }
         }
         /**
@@ -12246,79 +12341,6 @@
                 this.logger.warning(`${removedAccessTokens.length} access tokens with claims in the cache keys have been removed from the cache.`);
             }
         }
-        /**
-         * Add value to cookies
-         * @param cookieName
-         * @param cookieValue
-         * @param expires
-         * @deprecated
-         */
-        setItemCookie(cookieName, cookieValue, expires) {
-            let cookieStr = `${encodeURIComponent(cookieName)}=${encodeURIComponent(cookieValue)};path=/;SameSite=Lax;`;
-            if (expires) {
-                const expireTime = this.getCookieExpirationTime(expires);
-                cookieStr += `expires=${expireTime};`;
-            }
-            if (this.cacheConfig.secureCookies) {
-                cookieStr += "Secure;";
-            }
-            document.cookie = cookieStr;
-        }
-        /**
-         * Get one item by key from cookies
-         * @param cookieName
-         * @deprecated
-         */
-        getItemCookie(cookieName) {
-            const name = `${encodeURIComponent(cookieName)}=`;
-            const cookieList = document.cookie.split(";");
-            for (let i = 0; i < cookieList.length; i++) {
-                let cookie = cookieList[i];
-                while (cookie.charAt(0) === " ") {
-                    cookie = cookie.substring(1);
-                }
-                if (cookie.indexOf(name) === 0) {
-                    return decodeURIComponent(cookie.substring(name.length, cookie.length));
-                }
-            }
-            return Constants.EMPTY_STRING;
-        }
-        /**
-         * Clear all msal-related cookies currently set in the browser. Should only be used to clear temporary cache items.
-         * @deprecated
-         */
-        clearMsalCookies() {
-            const cookiePrefix = `${Constants.CACHE_PREFIX}.${this.clientId}`;
-            const cookieList = document.cookie.split(";");
-            cookieList.forEach((cookie) => {
-                while (cookie.charAt(0) === " ") {
-                    // eslint-disable-next-line no-param-reassign
-                    cookie = cookie.substring(1);
-                }
-                if (cookie.indexOf(cookiePrefix) === 0) {
-                    const cookieKey = cookie.split("=")[0];
-                    this.clearItemCookie(cookieKey);
-                }
-            });
-        }
-        /**
-         * Clear an item in the cookies by key
-         * @param cookieName
-         * @deprecated
-         */
-        clearItemCookie(cookieName) {
-            this.setItemCookie(cookieName, Constants.EMPTY_STRING, -1);
-        }
-        /**
-         * Get cookie expiration time
-         * @param cookieLifeDays
-         * @deprecated
-         */
-        getCookieExpirationTime(cookieLifeDays) {
-            const today = new Date();
-            const expr = new Date(today.getTime() + cookieLifeDays * this.COOKIE_LIFE_MULTIPLIER);
-            return expr.toUTCString();
-        }
         /**
          * Prepend msal.<client-id> to each key; Skip for any JSON object as Key (defined schemas do not need the key appended: AccessToken Keys or the upcoming schema)
          * @param key
@@ -12327,8 +12349,7 @@
         generateCacheKey(key) {
             const generatedKey = this.validateAndParseJson(key);
             if (!generatedKey) {
-                if (StringUtils.startsWith(key, Constants.CACHE_PREFIX) ||
-                    StringUtils.startsWith(key, PersistentCacheKeys.ADAL_ID_TOKEN)) {
+                if (StringUtils.startsWith(key, Constants.CACHE_PREFIX)) {
                     return key;
                 }
                 return `${Constants.CACHE_PREFIX}.${this.clientId}.${key}`;
@@ -12442,7 +12463,6 @@
                 this.logger.infoPii(`BrowserCacheManager.cleanRequestByState: Removing temporary cache items for state: ${cachedState}`);
                 this.resetRequestCache(cachedState || Constants.EMPTY_STRING);
             }
-            this.clearMsalCookies();
         }
         /**
          * Looks in temporary cache for any state values with the provided interactionType and removes all temporary cache items for that state
@@ -12470,7 +12490,6 @@
                     this.resetRequestCache(stateValue);
                 }
             });
-            this.clearMsalCookies();
             this.setInteractionInProgress(false);
         }
         cacheCodeRequest(authCodeRequest) {
@@ -12556,59 +12575,6 @@
                 this.removeTemporaryItem(key);
             }
         }
-        /**
-         * Returns username retrieved from ADAL or MSAL v1 idToken
-         * @deprecated
-         */
-        getLegacyLoginHint() {
-            // Only check for adal/msal token if no SSO params are being used
-            const adalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ADAL_ID_TOKEN);
-            if (adalIdTokenString) {
-                this.browserStorage.removeItem(PersistentCacheKeys.ADAL_ID_TOKEN);
-                this.logger.verbose("Cached ADAL id token retrieved.");
-            }
-            // Check for cached MSAL v1 id token
-            const msalIdTokenString = this.getTemporaryCache(PersistentCacheKeys.ID_TOKEN, true);
-            if (msalIdTokenString) {
-                this.browserStorage.removeItem(this.generateCacheKey(PersistentCacheKeys.ID_TOKEN));
-                this.logger.verbose("Cached MSAL.js v1 id token retrieved");
-            }
-            const cachedIdTokenString = msalIdTokenString || adalIdTokenString;
-            if (cachedIdTokenString) {
-                const idTokenClaims = extractTokenClaims(cachedIdTokenString, base64Decode);
-                if (idTokenClaims.preferred_username) {
-                    this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 preferred_username as loginHint");
-                    return idTokenClaims.preferred_username;
-                }
-                else if (idTokenClaims.upn) {
-                    this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, setting ADAL/MSAL v1 upn as loginHint");
-                    return idTokenClaims.upn;
-                }
-                else {
-                    this.logger.verbose("No SSO params used and ADAL/MSAL v1 token retrieved, however, no account hint claim found. Enable preferred_username or upn id token claim to get SSO.");
-                }
-            }
-            return null;
-        }
-        /**
-         * Updates a credential's cache key if the current cache key is outdated
-         */
-        updateCredentialCacheKey(currentCacheKey, credential) {
-            const updatedCacheKey = generateCredentialKey(credential);
-            if (currentCacheKey !== updatedCacheKey) {
-                const cacheItem = this.getItem(currentCacheKey);
-                if (cacheItem) {
-                    this.browserStorage.removeItem(currentCacheKey);
-                    this.setItem(updatedCacheKey, cacheItem);
-                    this.logger.verbose(`Updated an outdated ${credential.credentialType} cache key`);
-                    return updatedCacheKey;
-                }
-                else {
-                    this.logger.error(`Attempted to update an outdated ${credential.credentialType} cache key but no item matching the outdated key was found in storage`);
-                }
-            }
-            return currentCacheKey;
-        }
         /**
          * Builds credential entities from AuthenticationResult object and saves the resulting credentials to the cache
          * @param result
@@ -13325,19 +13291,16 @@
                 responseMode: this.config.auth.OIDCOptions
                     .serverResponseType,
             };
+            // Skip active account lookup if either login hint or session id is set
+            if (request.loginHint || request.sid) {
+                return validatedRequest;
+            }
             const account = request.account || this.browserStorage.getActiveAccount();
             if (account) {
                 this.logger.verbose("Setting validated request account", this.correlationId);
                 this.logger.verbosePii(`Setting validated request account: ${account.homeAccountId}`, this.correlationId);
                 validatedRequest.account = account;
             }
-            // Check for ADAL/MSAL v1 SSO
-            if (!validatedRequest.loginHint && !account) {
-                const legacyLoginHint = this.browserStorage.getLegacyLoginHint();
-                if (legacyLoginHint) {
-                    validatedRequest.loginHint = legacyLoginHint;
-                }
-            }
             return validatedRequest;
         }
     }
@@ -13741,7 +13704,7 @@
             // generate authenticationResult
             const result = await this.generateAuthenticationResult(response, request, idTokenClaims, baseAccount, authority.canonicalAuthority, reqTimestamp);
             // cache accounts and tokens in the appropriate storage
-            this.cacheAccount(baseAccount);
+            await this.cacheAccount(baseAccount);
             this.cacheNativeTokens(response, request, homeAccountIdentifier, idTokenClaims, response.access_token, result.tenantId, reqTimestamp);
             return result;
         }
@@ -13866,9 +13829,9 @@
          * cache the account entity in browser storage
          * @param accountEntity
          */
-        cacheAccount(accountEntity) {
+        async cacheAccount(accountEntity) {
             // Store the account info and hence `nativeAccountId` in browser cache
-            this.browserStorage.setAccount(accountEntity);
+            await this.browserStorage.setAccount(accountEntity);
             // Remove any existing cached tokens for this account in browser storage
             this.browserStorage.removeAccountContext(accountEntity).catch((e) => {
                 this.logger.error(`Error occurred while removing account context from browser storage. ${e}`);
@@ -15746,7 +15709,7 @@
          * @param options
          * @returns `AuthenticationResult` for the response that was loaded.
          */
-        loadExternalTokens(request, response, options) {
+        async loadExternalTokens(request, response, options) {
             if (!this.isBrowserEnvironment) {
                 throw createBrowserAuthError(nonBrowserEnvironment);
             }
@@ -15763,10 +15726,10 @@
             const authority = request.authority
                 ? new Authority(Authority.generateAuthority(request.authority, request.azureCloudOptions), this.config.system.networkClient, this.storage, authorityOptions, this.logger, request.correlationId || createNewGuid())
                 : undefined;
-            const cacheRecordAccount = this.loadAccount(request, options.clientInfo || response.client_info || "", idTokenClaims, authority);
-            const idToken = this.loadIdToken(response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, cacheRecordAccount.realm);
-            const accessToken = this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, cacheRecordAccount.realm, options);
-            const refreshToken = this.loadRefreshToken(response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment);
+            const cacheRecordAccount = await this.loadAccount(request, options.clientInfo || response.client_info || "", idTokenClaims, authority);
+            const idToken = await this.loadIdToken(response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, cacheRecordAccount.realm);
+            const accessToken = await this.loadAccessToken(request, response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment, cacheRecordAccount.realm, options);
+            const refreshToken = await this.loadRefreshToken(response, cacheRecordAccount.homeAccountId, cacheRecordAccount.environment);
             return this.generateAuthenticationResult(request, {
                 account: cacheRecordAccount,
                 idToken,
@@ -15783,11 +15746,11 @@
          * @param requestHomeAccountId
          * @returns `AccountEntity`
          */
-        loadAccount(request, clientInfo, idTokenClaims, authority) {
+        async loadAccount(request, clientInfo, idTokenClaims, authority) {
             this.logger.verbose("TokenCache - loading account");
             if (request.account) {
                 const accountEntity = AccountEntity.createFromAccountInfo(request.account);
-                this.storage.setAccount(accountEntity);
+                await this.storage.setAccount(accountEntity);
                 return accountEntity;
             }
             else if (!authority || (!clientInfo && !idTokenClaims)) {
@@ -15799,7 +15762,7 @@
             const cachedAccount = buildAccountToCache(this.storage, authority, homeAccountId, base64Decode, idTokenClaims, clientInfo, authority.hostnameAndPort, claimsTenantId, undefined, // authCodePayload
             undefined, // nativeAccountId
             this.logger);
-            this.storage.setAccount(cachedAccount);
+            await this.storage.setAccount(cachedAccount);
             return cachedAccount;
         }
         /**
@@ -15810,14 +15773,14 @@
          * @param tenantId
          * @returns `IdTokenEntity`
          */
-        loadIdToken(response, homeAccountId, environment, tenantId) {
+        async loadIdToken(response, homeAccountId, environment, tenantId) {
             if (!response.id_token) {
                 this.logger.verbose("TokenCache - no id token found in response");
                 return null;
             }
             this.logger.verbose("TokenCache - loading id token");
             const idTokenEntity = createIdTokenEntity(homeAccountId, environment, response.id_token, this.config.auth.clientId, tenantId);
-            this.storage.setIdTokenCredential(idTokenEntity);
+            await this.storage.setIdTokenCredential(idTokenEntity);
             return idTokenEntity;
         }
         /**
@@ -15829,7 +15792,7 @@
          * @param tenantId
          * @returns `AccessTokenEntity`
          */
-        loadAccessToken(request, response, homeAccountId, environment, tenantId, options) {
+        async loadAccessToken(request, response, homeAccountId, environment, tenantId, options) {
             if (!response.access_token) {
                 this.logger.verbose("TokenCache - no access token found in response");
                 return null;
@@ -15853,7 +15816,7 @@
                 (response.ext_expires_in || response.expires_in) +
                     new Date().getTime() / 1000;
             const accessTokenEntity = createAccessTokenEntity(homeAccountId, environment, response.access_token, this.config.auth.clientId, tenantId, scopes.printScopes(), expiresOn, extendedExpiresOn, base64Decode);
-            this.storage.setAccessTokenCredential(accessTokenEntity);
+            await this.storage.setAccessTokenCredential(accessTokenEntity);
             return accessTokenEntity;
         }
         /**
@@ -15864,7 +15827,7 @@
          * @param environment
          * @returns `RefreshTokenEntity`
          */
-        loadRefreshToken(response, homeAccountId, environment) {
+        async loadRefreshToken(response, homeAccountId, environment) {
             if (!response.refresh_token) {
                 this.logger.verbose("TokenCache - no refresh token found in response");
                 return null;
@@ -15872,7 +15835,7 @@
             this.logger.verbose("TokenCache - loading refresh token");
             const refreshTokenEntity = createRefreshTokenEntity(homeAccountId, environment, response.refresh_token, this.config.auth.clientId, response.foci, undefined, // userAssertionHash
             response.refresh_token_expires_in);
-            this.storage.setRefreshTokenCredential(refreshTokenEntity);
+            await this.storage.setRefreshTokenCredential(refreshTokenEntity);
             return refreshTokenEntity;
         }
         /**
@@ -16121,6 +16084,7 @@
                 this.eventHandler.emitEvent(EventType.INITIALIZE_END);
                 return;
             }
+            await this.browserStorage.initialize();
             const initCorrelationId = request?.correlationId || this.getRequestCorrelationId();
             const allowNativeBroker = this.config.system.allowNativeBroker;
             const initMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.InitializeClientApplication, initCorrelationId);
@@ -16846,7 +16810,7 @@
             this.logger.verbose("hydrateCache called");
             // Account gets saved to browser storage regardless of native or not
             const accountEntity = AccountEntity.createFromAccountInfo(result.account, result.cloudGraphHostName, result.msGraphHost);
-            this.browserStorage.setAccount(accountEntity);
+            await this.browserStorage.setAccount(accountEntity);
             if (result.fromNativeBroker) {
                 this.logger.verbose("Response was from native broker, storing in-memory");
                 // Tokens from native broker are stored in-memory
@@ -17647,8 +17611,8 @@
          * Specific implementation of initialize function for NestedAppAuthController
          * @returns
          */
-        initialize() {
-            // do nothing not required by this controller
+        async initialize() {
+            await this.browserStorage.initialize();
             return Promise.resolve();
         }
         /**
@@ -18074,7 +18038,7 @@
         async hydrateCache(result, request) {
             this.logger.verbose("hydrateCache called");
             const accountEntity = AccountEntity.createFromAccountInfo(result.account, result.cloudGraphHostName, result.msGraphHost);
-            this.browserStorage.setAccount(accountEntity);
+            await this.browserStorage.setAccount(accountEntity);
             return this.browserStorage.hydrateCache(result, request);
         }
     }
@@ -19619,7 +19583,6 @@
     exports.BrowserConfigurationAuthErrorMessage = BrowserConfigurationAuthErrorMessage;
     exports.BrowserPerformanceClient = BrowserPerformanceClient;
     exports.BrowserPerformanceMeasurement = BrowserPerformanceMeasurement;
-    exports.BrowserStorage = BrowserStorage;
     exports.BrowserUtils = BrowserUtils;
     exports.CacheLookupPolicy = CacheLookupPolicy;
     exports.ClientAuthError = ClientAuthError;
@@ -19637,6 +19600,7 @@
     exports.InteractionRequiredAuthErrorMessage = InteractionRequiredAuthErrorMessage;
     exports.InteractionStatus = InteractionStatus;
     exports.JsonWebTokenTypes = JsonWebTokenTypes;
+    exports.LocalStorage = LocalStorage;
     exports.Logger = Logger;
     exports.MemoryStorage = MemoryStorage;
     exports.NavigationClient = NavigationClient;
@@ -19648,6 +19612,7 @@
     exports.PublicClientNext = PublicClientNext;
     exports.ServerError = ServerError;
     exports.ServerResponseType = ServerResponseType;
+    exports.SessionStorage = SessionStorage;
     exports.SignedHttpRequest = SignedHttpRequest;
     exports.StringUtils = StringUtils;
     exports.StubPerformanceClient = StubPerformanceClient;