@azure/msal-browser 3.7.0 → 3.7.2-alpha.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v3.7.0 2024-01-09 */
+/*! @azure/msal-browser v3.7.2-alpha.0 2024-01-30 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -297,7 +297,7 @@ const JsonWebTokenTypes = {
     Pop: "pop",
 };
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -314,7 +314,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -363,7 +363,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -461,7 +461,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -713,7 +713,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -746,7 +746,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -937,12 +937,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "14.6.0";
+const version$1 = "14.6.2-alpha.0";
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -962,7 +962,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1023,54 +1023,44 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
 /**
- * Utility class which exposes functions for managing date and time operations.
+ * Utility functions for managing date and time operations.
  */
-class TimeUtils {
-    /**
-     * return the current time in Unix time (seconds).
-     */
-    static nowSeconds() {
-        // Date.getTime() returns in milliseconds.
-        return Math.round(new Date().getTime() / 1000.0);
-    }
-    /**
-     * check if a token is expired based on given UTC time in seconds.
-     * @param expiresOn
-     */
-    static isTokenExpired(expiresOn, offset) {
-        // check for access token expiry
-        const expirationSec = Number(expiresOn) || 0;
-        const offsetCurrentTimeSec = TimeUtils.nowSeconds() + offset;
-        // If current time + offset is greater than token expiration time, then token is expired.
-        return offsetCurrentTimeSec > expirationSec;
-    }
-    /**
-     * If the current time is earlier than the time that a token was cached at, we must discard the token
-     * i.e. The system clock was turned back after acquiring the cached token
-     * @param cachedAt
-     * @param offset
-     */
-    static wasClockTurnedBack(cachedAt) {
-        const cachedAtSec = Number(cachedAt);
-        return cachedAtSec > TimeUtils.nowSeconds();
-    }
-    /**
-     * Waits for t number of milliseconds
-     * @param t number
-     * @param value T
-     */
-    static delay(t, value) {
-        return new Promise((resolve) => setTimeout(() => resolve(value), t));
-    }
+/**
+ * return the current time in Unix time (seconds).
+ */
+function nowSeconds() {
+    // Date.getTime() returns in milliseconds.
+    return Math.round(new Date().getTime() / 1000.0);
+}
+/**
+ * check if a token is expired based on given UTC time in seconds.
+ * @param expiresOn
+ */
+function isTokenExpired(expiresOn, offset) {
+    // check for access token expiry
+    const expirationSec = Number(expiresOn) || 0;
+    const offsetCurrentTimeSec = nowSeconds() + offset;
+    // If current time + offset is greater than token expiration time, then token is expired.
+    return offsetCurrentTimeSec > expirationSec;
+}
+/**
+ * If the current time is earlier than the time that a token was cached at, we must discard the token
+ * i.e. The system clock was turned back after acquiring the cached token
+ * @param cachedAt
+ * @param offset
+ */
+function wasClockTurnedBack(cachedAt) {
+    const cachedAtSec = Number(cachedAt);
+    return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1128,7 +1118,7 @@ function createAccessTokenEntity(homeAccountId, environment, accessToken, client
         homeAccountId: homeAccountId,
         credentialType: CredentialType.ACCESS_TOKEN,
         secret: accessToken,
-        cachedAt: TimeUtils.nowSeconds().toString(),
+        cachedAt: nowSeconds().toString(),
         expiresOn: expiresOn.toString(),
         extendedExpiresOn: extExpiresOn.toString(),
         environment: environment,
@@ -1372,7 +1362,7 @@ function isAuthorityMetadataEntity(key, entity) {
  * Reset the exiresAt value
  */
 function generateAuthorityMetadataExpiresAt() {
-    return (TimeUtils.nowSeconds() +
+    return (nowSeconds() +
         AUTHORITY_METADATA_CONSTANTS.REFRESH_TIME_SECONDS);
 }
 function updateAuthorityEndpointMetadata(authorityMetadata, updatedValues, fromNetwork) {
@@ -1394,10 +1384,10 @@ function updateCloudDiscoveryMetadata(authorityMetadata, updatedValues, fromNetw
  * Returns whether or not the data needs to be refreshed
  */
 function isAuthorityMetadataExpired(metadata) {
-    return metadata.expiresAt <= TimeUtils.nowSeconds();
+    return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1451,7 +1441,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1589,7 +1579,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1686,7 +1676,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1886,7 +1876,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1926,7 +1916,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1987,7 +1977,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2002,7 +1992,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2024,7 +2014,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2037,7 +2027,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2284,7 +2274,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2331,7 +2321,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2495,7 +2485,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2503,496 +2493,30 @@ class UrlString {
  */
 const rawMetdataJSON = {
     endpointMetadata: {
-        "https://login.microsoftonline.com/common/": {
-            token_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.com/common/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.microsoftonline.com/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.com/common/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.com",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pas.windows.net",
-        },
-        "https://login.chinacloudapi.cn/common/": {
-            token_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.chinacloudapi.cn/common/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.partner.microsoftonline.cn/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://microsoftgraph.chinacloudapi.cn/oidc/userinfo",
-            authorization_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.chinacloudapi.cn/common/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "partner.microsoftonline.cn",
-            cloud_graph_host_name: "graph.chinacloudapi.cn",
-            msgraph_host: "microsoftgraph.chinacloudapi.cn",
-            rbac_url: "https://pas.chinacloudapi.cn",
-        },
-        "https://login.microsoftonline.us/common/": {
-            token_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.us/common/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.microsoftonline.us/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.us/common/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.us",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pasff.usgovcloudapi.net",
-        },
-        "https://login.microsoftonline.com/consumers/": {
-            token_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.com/consumers/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.microsoftonline.com/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.com/consumers/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.com",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pas.windows.net",
-        },
-        "https://login.chinacloudapi.cn/consumers/": {
-            token_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.chinacloudapi.cn/consumers/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.partner.microsoftonline.cn/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://microsoftgraph.chinacloudapi.cn/oidc/userinfo",
-            authorization_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.chinacloudapi.cn/consumers/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "partner.microsoftonline.cn",
-            cloud_graph_host_name: "graph.chinacloudapi.cn",
-            msgraph_host: "microsoftgraph.chinacloudapi.cn",
-            rbac_url: "https://pas.chinacloudapi.cn",
-        },
-        "https://login.microsoftonline.us/consumers/": {
-            token_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.us/consumers/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
-            issuer: "https://login.microsoftonline.us/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.us/consumers/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.us",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pasff.usgovcloudapi.net",
-        },
-        "https://login.microsoftonline.com/organizations/": {
-            token_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.com/organizations/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
+        "login.microsoftonline.com": {
+            token_endpoint: "https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/token",
+            jwks_uri: "https://login.microsoftonline.com/{tenantid}/discovery/v2.0/keys",
             issuer: "https://login.microsoftonline.com/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.com/organizations/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.com",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pas.windows.net",
+            authorization_endpoint: "https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/authorize",
+            end_session_endpoint: "https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/logout",
         },
-        "https://login.chinacloudapi.cn/organizations/": {
-            token_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.chinacloudapi.cn/organizations/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
+        "login.chinacloudapi.cn": {
+            token_endpoint: "https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/token",
+            jwks_uri: "https://login.chinacloudapi.cn/{tenantid}/discovery/v2.0/keys",
             issuer: "https://login.partner.microsoftonline.cn/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://microsoftgraph.chinacloudapi.cn/oidc/userinfo",
-            authorization_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.chinacloudapi.cn/organizations/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "partner.microsoftonline.cn",
-            cloud_graph_host_name: "graph.chinacloudapi.cn",
-            msgraph_host: "microsoftgraph.chinacloudapi.cn",
-            rbac_url: "https://pas.chinacloudapi.cn",
+            authorization_endpoint: "https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/authorize",
+            end_session_endpoint: "https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/logout",
         },
-        "https://login.microsoftonline.us/organizations/": {
-            token_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/token",
-            token_endpoint_auth_methods_supported: [
-                "client_secret_post",
-                "private_key_jwt",
-                "client_secret_basic",
-            ],
-            jwks_uri: "https://login.microsoftonline.us/organizations/discovery/v2.0/keys",
-            response_modes_supported: ["query", "fragment", "form_post"],
-            subject_types_supported: ["pairwise"],
-            id_token_signing_alg_values_supported: ["RS256"],
-            response_types_supported: [
-                "code",
-                "id_token",
-                "code id_token",
-                "id_token token",
-            ],
-            scopes_supported: ["openid", "profile", "email", "offline_access"],
+        "login.microsoftonline.us": {
+            token_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/token",
+            jwks_uri: "https://login.microsoftonline.us/{tenantid}/discovery/v2.0/keys",
             issuer: "https://login.microsoftonline.us/{tenantid}/v2.0",
-            request_uri_parameter_supported: false,
-            userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-            authorization_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/authorize",
-            device_authorization_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/devicecode",
-            http_logout_supported: true,
-            frontchannel_logout_supported: true,
-            end_session_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/logout",
-            claims_supported: [
-                "sub",
-                "iss",
-                "cloud_instance_name",
-                "cloud_instance_host_name",
-                "cloud_graph_host_name",
-                "msgraph_host",
-                "aud",
-                "exp",
-                "iat",
-                "auth_time",
-                "acr",
-                "nonce",
-                "preferred_username",
-                "name",
-                "tid",
-                "ver",
-                "at_hash",
-                "c_hash",
-                "email",
-            ],
-            kerberos_endpoint: "https://login.microsoftonline.us/organizations/kerberos",
-            tenant_region_scope: null,
-            cloud_instance_name: "microsoftonline.us",
-            cloud_graph_host_name: "graph.windows.net",
-            msgraph_host: "graph.microsoft.com",
-            rbac_url: "https://pasff.usgovcloudapi.net",
+            authorization_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/authorize",
+            end_session_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/logout",
         },
     },
     instanceDiscoveryMetadata: {
         tenant_discovery_endpoint: "https://{canonicalAuthority}/v2.0/.well-known/openid-configuration",
-        "api-version": "1.1",
         metadata: [
             {
                 preferred_network: "login.microsoftonline.com",
@@ -3101,7 +2625,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4341,7 +3865,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4441,7 +3965,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4458,7 +3982,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4556,7 +4080,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4593,7 +4117,7 @@ class NetworkManager {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4603,7 +4127,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4650,7 +4174,7 @@ const SID = "sid";
 const LOGIN_HINT = "login_hint";
 const DOMAIN_HINT = "domain_hint";
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4734,7 +4258,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5118,7 +4642,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5130,7 +4654,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5140,7 +4664,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5150,7 +4674,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5405,7 +4929,7 @@ const IntFields = new Set([
     "multiMatchedRT",
 ]);
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5426,6 +4950,11 @@ const invoke = (callback, eventName, logger, telemetryClient, correlationId) =>
     return (...args) => {
         logger.trace(`Executing function ${eventName}`);
         const inProgressEvent = telemetryClient?.startMeasurement(eventName, correlationId);
+        if (correlationId) {
+            // Track number of times this API is called in a single request
+            const eventCount = eventName + "CallCount";
+            telemetryClient?.incrementFields({ [eventCount]: 1 }, correlationId);
+        }
         try {
             const result = callback(...args);
             inProgressEvent?.end({
@@ -5466,6 +4995,11 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     return (...args) => {
         logger.trace(`Executing function ${eventName}`);
         const inProgressEvent = telemetryClient?.startMeasurement(eventName, correlationId);
+        if (correlationId) {
+            // Track number of times this API is called in a single request
+            const eventCount = eventName + "CallCount";
+            telemetryClient?.incrementFields({ [eventCount]: 1 }, correlationId);
+        }
         telemetryClient?.setPreQueueTime(eventName, correlationId);
         return callback(...args)
             .then((response) => {
@@ -5491,7 +5025,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5600,7 +5134,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5612,7 +5146,7 @@ RegionDiscovery.IMDS_OPTIONS = {
  * @internal
  */
 class Authority {
-    constructor(authority, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
+    constructor(authority, networkInterface, cacheManager, authorityOptions, logger, correlationId, performanceClient) {
         this.canonicalAuthority = authority;
         this._canonicalAuthority.validateAsUri();
         this.networkInterface = networkInterface;
@@ -5849,6 +5383,10 @@ class Authority {
         this.updateCachedMetadata(metadataEntity, cloudDiscoverySource, {
             source: endpointSource,
         });
+        this.performanceClient?.addFields({
+            cloudDiscoverySource: cloudDiscoverySource,
+            authorityEndpointSource: endpointSource,
+        }, this.correlationId);
     }
     /**
      * Returns metadata entity from cache if it exists, otherwiser returns a new metadata entity built
@@ -6040,8 +5578,8 @@ class Authority {
      * Get OAuth endpoints for common authorities.
      */
     getEndpointMetadataFromHardcodedValues() {
-        if (this.canonicalAuthority in EndpointMetadata) {
-            return EndpointMetadata[this.canonicalAuthority];
+        if (this.hostnameAndPort in EndpointMetadata) {
+            return EndpointMetadata[this.hostnameAndPort];
         }
         return null;
     }
@@ -6429,57 +5967,38 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-/** @internal */
-class AuthorityFactory {
-    /**
-     * Create an authority object of the correct type based on the url
-     * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)
-     *
-     * Also performs endpoint discovery.
-     *
-     * @param authorityUri
-     * @param networkClient
-     * @param protocolMode
-     */
-    static async createDiscoveredInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
-        performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
-        const authorityUriFinal = Authority.transformCIAMAuthority(formatAuthorityUri(authorityUri));
-        // Initialize authority and perform discovery endpoint check.
-        const acquireTokenAuthority = AuthorityFactory.createInstance(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
-        try {
-            await invokeAsync(acquireTokenAuthority.resolveEndpointsAsync.bind(acquireTokenAuthority), PerformanceEvents.AuthorityResolveEndpointsAsync, logger, performanceClient, correlationId)();
-            return acquireTokenAuthority;
-        }
-        catch (e) {
-            throw createClientAuthError(endpointResolutionError);
-        }
+/**
+ * Create an authority object of the correct type based on the url
+ * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)
+ *
+ * Also performs endpoint discovery.
+ *
+ * @param authorityUri
+ * @param networkClient
+ * @param protocolMode
+ * @internal
+ */
+async function createDiscoveredInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, correlationId, performanceClient) {
+    performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
+    const authorityUriFinal = Authority.transformCIAMAuthority(formatAuthorityUri(authorityUri));
+    // Initialize authority and perform discovery endpoint check.
+    const acquireTokenAuthority = new Authority(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, correlationId, performanceClient);
+    try {
+        await invokeAsync(acquireTokenAuthority.resolveEndpointsAsync.bind(acquireTokenAuthority), PerformanceEvents.AuthorityResolveEndpointsAsync, logger, performanceClient, correlationId)();
+        return acquireTokenAuthority;
     }
-    /**
-     * Create an authority object of the correct type based on the url
-     * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)
-     *
-     * Does not perform endpoint discovery.
-     *
-     * @param authorityUrl
-     * @param networkInterface
-     * @param protocolMode
-     */
-    static createInstance(authorityUrl, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
-        // Throw error if authority url is empty
-        if (!authorityUrl) {
-            throw createClientConfigurationError(urlEmptyError);
-        }
-        return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId);
+    catch (e) {
+        throw createClientAuthError(endpointResolutionError);
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6566,7 +6085,7 @@ class BaseClient {
     async updateAuthority(cloudInstanceHostname, correlationId) {
         this.performanceClient?.addQueueMeasurement(PerformanceEvents.UpdateTokenEndpointAuthority, correlationId);
         const cloudInstanceAuthorityUri = `https://${cloudInstanceHostname}/${this.authority.tenant}/`;
-        const cloudInstanceAuthority = await AuthorityFactory.createDiscoveredInstance(cloudInstanceAuthorityUri, this.networkClient, this.cacheManager, this.authority.options, this.logger, this.performanceClient, correlationId);
+        const cloudInstanceAuthority = await createDiscoveredInstance(cloudInstanceAuthorityUri, this.networkClient, this.cacheManager, this.authority.options, this.logger, correlationId, this.performanceClient);
         this.authority = cloudInstanceAuthority;
     }
     /**
@@ -6582,7 +6101,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6608,7 +6127,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6695,7 +6214,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6711,7 +6230,7 @@ class CacheRecord {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6783,7 +6302,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6854,7 +6373,7 @@ class PopTokenGenerator {
         const resourceUrlComponents = resourceUrlString?.getUrlComponents();
         return this.cryptoUtils.signJwt({
             at: payload,
-            ts: TimeUtils.nowSeconds(),
+            ts: nowSeconds(),
             m: resourceRequestMethod?.toUpperCase(),
             u: resourceUrlComponents?.HostNameAndPort,
             nonce: shrNonce || this.cryptoUtils.createNewGuid(),
@@ -6868,7 +6387,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6895,7 +6414,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7108,7 +6627,7 @@ class ResponseHandler {
                 ? reqTimestamp + refreshIn
                 : undefined;
             // non AAD scenarios can have empty realm
-            cachedAccessToken = createAccessTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.access_token, this.clientId, claimsTenantId || authority.tenant, responseScopes.printScopes(), tokenExpirationSeconds, extendedTokenExpirationSeconds, this.cryptoObj.base64Decode, refreshOnSeconds, serverTokenResponse.token_type, userAssertionHash, serverTokenResponse.key_id, request.claims, request.requestedClaimsHash);
+            cachedAccessToken = createAccessTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.access_token, this.clientId, claimsTenantId || authority.tenant || "", responseScopes.printScopes(), tokenExpirationSeconds, extendedTokenExpirationSeconds, this.cryptoObj.base64Decode, refreshOnSeconds, serverTokenResponse.token_type, userAssertionHash, serverTokenResponse.key_id, request.claims, request.requestedClaimsHash);
         }
         // refreshToken
         let cachedRefreshToken = null;
@@ -7248,7 +6767,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, idTokenClai
     return baseAccount;
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7291,7 +6810,7 @@ class AuthorizationCodeClient extends BaseClient {
         if (!request.code) {
             throw createClientAuthError(requestCannotBeMade);
         }
-        const reqTimestamp = TimeUtils.nowSeconds();
+        const reqTimestamp = nowSeconds();
         const response = await invokeAsync(this.executeTokenRequest.bind(this), PerformanceEvents.AuthClientExecuteTokenRequest, this.logger, this.performanceClient, request.correlationId)(this.authority, request);
         // Retrieve requestId from response headers
         const requestId = response.headers?.[HeaderNames.X_MS_REQUEST_ID];
@@ -7653,7 +7172,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7670,7 +7189,7 @@ class RefreshTokenClient extends BaseClient {
     }
     async acquireToken(request) {
         this.performanceClient?.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
-        const reqTimestamp = TimeUtils.nowSeconds();
+        const reqTimestamp = nowSeconds();
         const response = await invokeAsync(this.executeTokenRequest.bind(this), PerformanceEvents.RefreshTokenClientExecuteTokenRequest, this.logger, this.performanceClient, request.correlationId)(request, this.authority);
         // Retrieve requestId from response headers
         const requestId = response.headers?.[HeaderNames.X_MS_REQUEST_ID];
@@ -7731,7 +7250,7 @@ class RefreshTokenClient extends BaseClient {
             throw createInteractionRequiredAuthError(noTokensFound);
         }
         if (refreshToken.expiresOn &&
-            TimeUtils.isTokenExpired(refreshToken.expiresOn, request.refreshTokenExpirationOffsetSeconds ||
+            isTokenExpired(refreshToken.expiresOn, request.refreshTokenExpirationOffsetSeconds ||
                 DEFAULT_REFRESH_TOKEN_EXPIRATION_OFFSET_SECONDS)) {
             throw createInteractionRequiredAuthError(refreshTokenExpired);
         }
@@ -7860,7 +7379,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7931,14 +7450,14 @@ class SilentFlowClient extends BaseClient {
             this.setCacheOutcome(CacheOutcome.NO_CACHED_ACCESS_TOKEN, request.correlationId);
             throw createClientAuthError(tokenRefreshRequired);
         }
-        else if (TimeUtils.wasClockTurnedBack(cachedAccessToken.cachedAt) ||
-            TimeUtils.isTokenExpired(cachedAccessToken.expiresOn, this.config.systemOptions.tokenRenewalOffsetSeconds)) {
+        else if (wasClockTurnedBack(cachedAccessToken.cachedAt) ||
+            isTokenExpired(cachedAccessToken.expiresOn, this.config.systemOptions.tokenRenewalOffsetSeconds)) {
             // must refresh due to the expires_in value
             this.setCacheOutcome(CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED, request.correlationId);
             throw createClientAuthError(tokenRefreshRequired);
         }
         else if (cachedAccessToken.refreshOn &&
-            TimeUtils.isTokenExpired(cachedAccessToken.refreshOn, 0)) {
+            isTokenExpired(cachedAccessToken.refreshOn, 0)) {
             // must refresh (in the background) due to the refresh_in value
             lastCacheOutcome = CacheOutcome.PROACTIVELY_REFRESHED;
             // don't throw ClientAuthError.createRefreshRequiredError(), return cached token instead
@@ -7991,7 +7510,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8006,7 +7525,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8014,7 +7533,7 @@ const StubbedNetworkModule = {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8039,7 +7558,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8079,7 +7598,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8137,7 +7656,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8341,7 +7860,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8420,7 +7939,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v14.6.0 2024-01-09 */
+/*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9820,7 +9339,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "3.7.0";
+const version = "3.7.2-alpha.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10346,6 +9865,10 @@ const S256_HASH_ALG = "SHA-256";
 const MODULUS_LENGTH = 2048;
 // Public Exponent
 const PUBLIC_EXPONENT = new Uint8Array([0x01, 0x00, 0x01]);
+// UUID hex digits
+const UUID_CHARS = "0123456789abcdef";
+// Array to store UINT32 random value
+const UINT32_ARR = new Uint32Array(1);
 const keygenAlgorithmOptions = {
     name: PKCS1_V15_KEYGEN_ALG,
     hash: S256_HASH_ALG,
@@ -10366,7 +9889,9 @@ function validateCryptoAvailable(logger) {
 }
 /**
  * Returns a sha-256 hash of the given dataString as an ArrayBuffer.
- * @param dataString
+ * @param dataString {string} data string
+ * @param performanceClient {?IPerformanceClient}
+ * @param correlationId {?string} correlation id
  */
 async function sha256Digest(dataString, performanceClient, correlationId) {
     performanceClient?.addQueueMeasurement(PerformanceEvents.Sha256Digest, correlationId);
@@ -10382,11 +9907,54 @@ function getRandomValues(dataBuffer) {
     return window.crypto.getRandomValues(dataBuffer);
 }
 /**
- * Creates a new random GUID
- * @returns
+ * Returns random Uint32 value.
+ * @returns {number}
+ */
+function getRandomUint32() {
+    window.crypto.getRandomValues(UINT32_ARR);
+    return UINT32_ARR[0];
+}
+/**
+ * Creates a UUID v7 from the current timestamp.
+ * Implementation relies on the system clock to guarantee increasing order of generated identifiers.
+ * @returns {number}
  */
 function createNewGuid() {
-    return window.crypto.randomUUID();
+    const currentTimestamp = Date.now();
+    const baseRand = getRandomUint32() * 0x400 + (getRandomUint32() & 0x3ff);
+    // Result byte array
+    const bytes = new Uint8Array(16);
+    // A 12-bit `rand_a` field value
+    const randA = Math.trunc(baseRand / 2 ** 30);
+    // The higher 30 bits of 62-bit `rand_b` field value
+    const randBHi = baseRand & (2 ** 30 - 1);
+    // The lower 32 bits of 62-bit `rand_b` field value
+    const randBLo = getRandomUint32();
+    bytes[0] = currentTimestamp / 2 ** 40;
+    bytes[1] = currentTimestamp / 2 ** 32;
+    bytes[2] = currentTimestamp / 2 ** 24;
+    bytes[3] = currentTimestamp / 2 ** 16;
+    bytes[4] = currentTimestamp / 2 ** 8;
+    bytes[5] = currentTimestamp;
+    bytes[6] = 0x70 | (randA >>> 8);
+    bytes[7] = randA;
+    bytes[8] = 0x80 | (randBHi >>> 24);
+    bytes[9] = randBHi >>> 16;
+    bytes[10] = randBHi >>> 8;
+    bytes[11] = randBHi;
+    bytes[12] = randBLo >>> 24;
+    bytes[13] = randBLo >>> 16;
+    bytes[14] = randBLo >>> 8;
+    bytes[15] = randBLo;
+    let text = "";
+    for (let i = 0; i < bytes.length; i++) {
+        text += UUID_CHARS.charAt(bytes[i] >>> 4);
+        text += UUID_CHARS.charAt(bytes[i] & 0xf);
+        if (i === 3 || i === 5 || i === 7 || i === 9) {
+            text += "-";
+        }
+    }
+    return text;
 }
 /**
  * Generates a keypair based on current keygen algorithm config.
@@ -12560,12 +12128,9 @@ class BaseInteractionClient {
      * Initializer function for all request APIs
      * @param request
      */
-    async initializeBaseRequest(request, account) {
+    async initializeBaseRequest(request) {
         this.performanceClient.addQueueMeasurement(PerformanceEvents.InitializeBaseRequest, this.correlationId);
         const authority = request.authority || this.config.auth.authority;
-        if (account) {
-            await this.validateRequestAuthority(authority, account);
-        }
         const scopes = [...((request && request.scopes) || [])];
         const validatedRequest = {
             ...request,
@@ -12614,16 +12179,6 @@ class BaseInteractionClient {
             getCurrentUri();
         return UrlString.getAbsoluteUrl(redirectUri, getCurrentUri());
     }
-    /*
-     * If authority provided in the request does not match environment/authority specified
-     * in the account or MSAL config, we throw an error.
-     */
-    async validateRequestAuthority(authority, account) {
-        const discoveredAuthority = await this.getDiscoveredAuthority(authority);
-        if (!discoveredAuthority.isAlias(account.environment)) {
-            throw createClientConfigurationError(authorityMismatch);
-        }
-    }
     /**
      *
      * @param apiId
@@ -12645,22 +12200,30 @@ class BaseInteractionClient {
     /**
      * Used to get a discovered version of the default authority.
      * @param requestAuthority
+     * @param requestAzureCloudOptions
+     * @param account
      */
-    async getDiscoveredAuthority(requestAuthority) {
-        this.logger.verbose("getDiscoveredAuthority called");
+    async getDiscoveredAuthority(requestAuthority, requestAzureCloudOptions, account) {
+        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);
         const authorityOptions = {
             protocolMode: this.config.auth.protocolMode,
             OIDCOptions: this.config.auth.OIDCOptions,
             knownAuthorities: this.config.auth.knownAuthorities,
             cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,
             authorityMetadata: this.config.auth.authorityMetadata,
+            skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,
         };
-        if (requestAuthority) {
-            this.logger.verbose("Creating discovered authority with request authority");
-            return AuthorityFactory.createDiscoveredInstance(requestAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger);
+        // build authority string based on auth params, precedence - azureCloudInstance + tenant >> authority
+        const userAuthority = requestAuthority
+            ? requestAuthority
+            : this.config.auth.authority;
+        // fall back to the authority from config
+        const builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);
+        const discoveredAuthority = await invokeAsync(createDiscoveredInstance, PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, this.logger, this.performanceClient, this.correlationId)(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger, this.correlationId, this.performanceClient);
+        if (account && !discoveredAuthority.isAlias(account.environment)) {
+            throw createClientConfigurationError(authorityMismatch);
         }
-        this.logger.verbose("Creating discovered authority with configured authority");
-        return AuthorityFactory.createDiscoveredInstance(this.config.auth.authority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger);
+        return discoveredAuthority;
     }
 }
 
@@ -12833,10 +12396,10 @@ class StandardInteractionClient extends BaseInteractionClient {
      * @param serverTelemetryManager
      * @param authorityUrl
      */
-    async createAuthCodeClient(serverTelemetryManager, authorityUrl, requestAzureCloudOptions) {
+    async createAuthCodeClient(serverTelemetryManager, authorityUrl, requestAzureCloudOptions, account) {
         this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.correlationId);
         // Create auth module.
-        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, requestAzureCloudOptions);
+        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, requestAzureCloudOptions, account);
         return new AuthorizationCodeClient(clientConfig, this.performanceClient);
     }
     /**
@@ -12845,9 +12408,9 @@ class StandardInteractionClient extends BaseInteractionClient {
      * @param requestAuthority
      * @param requestCorrelationId
      */
-    async getClientConfiguration(serverTelemetryManager, requestAuthority, requestAzureCloudOptions) {
+    async getClientConfiguration(serverTelemetryManager, requestAuthority, requestAzureCloudOptions, account) {
         this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
-        const discoveredAuthority = await invokeAsync(this.getDiscoveredAuthority.bind(this), PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.logger, this.performanceClient, this.correlationId)(requestAuthority, requestAzureCloudOptions);
+        const discoveredAuthority = await invokeAsync(this.getDiscoveredAuthority.bind(this), PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.logger, this.performanceClient, this.correlationId)(requestAuthority, requestAzureCloudOptions, account);
         const logger = this.config.system.loggerOptions;
         return {
             authOptions: {
@@ -12881,29 +12444,6 @@ class StandardInteractionClient extends BaseInteractionClient {
             telemetry: this.config.telemetry,
         };
     }
-    /**
-     * Used to get a discovered version of the default authority.
-     * @param requestAuthority
-     * @param requestCorrelationId
-     */
-    async getDiscoveredAuthority(requestAuthority, requestAzureCloudOptions) {
-        this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);
-        const authorityOptions = {
-            protocolMode: this.config.auth.protocolMode,
-            OIDCOptions: this.config.auth.OIDCOptions,
-            knownAuthorities: this.config.auth.knownAuthorities,
-            cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,
-            authorityMetadata: this.config.auth.authorityMetadata,
-            skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,
-        };
-        // build authority string based on auth params, precedence - azureCloudInstance + tenant >> authority
-        const userAuthority = requestAuthority
-            ? requestAuthority
-            : this.config.auth.authority;
-        // fall back to the authority from config
-        const builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);
-        return invokeAsync(AuthorityFactory.createDiscoveredInstance.bind(AuthorityFactory), PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, this.logger, this.performanceClient, this.correlationId)(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger, this.performanceClient, this.correlationId);
-    }
     /**
      * Helper to initialize required request parameters for interactive APIs and ssoSilent()
      * @param request
@@ -13035,7 +12575,7 @@ class SilentCacheClient extends StandardInteractionClient {
         this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentCacheClientAcquireToken, silentRequest.correlationId);
         // Telemetry manager only used to increment cacheHits here
         const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);
-        const silentAuthClient = await this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions);
+        const silentAuthClient = await this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);
         this.logger.verbose("Silent auth client created");
         try {
             const response = await invokeAsync(silentAuthClient.acquireCachedToken.bind(silentAuthClient), PerformanceEvents.SilentFlowClientAcquireCachedToken, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest);
@@ -13067,14 +12607,14 @@ class SilentCacheClient extends StandardInteractionClient {
      * @param serverTelemetryManager
      * @param authorityUrl
      */
-    async createSilentFlowClient(serverTelemetryManager, authorityUrl, azureCloudOptions) {
+    async createSilentFlowClient(serverTelemetryManager, authorityUrl, azureCloudOptions, account) {
         // Create auth module.
-        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, azureCloudOptions);
+        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, azureCloudOptions, account);
         return new SilentFlowClient(clientConfig, this.performanceClient);
     }
     async initializeSilentRequest(request, account) {
         this.performanceClient.addQueueMeasurement(PerformanceEvents.InitializeSilentRequest, this.correlationId);
-        const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, this.correlationId)(request, account);
+        const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, this.correlationId)(request);
         return {
             ...request,
             ...baseRequest,
@@ -13110,7 +12650,7 @@ class NativeInteractionClient extends BaseInteractionClient {
         this.logger.trace("NativeInteractionClient - acquireToken called.");
         // start the perf measurement
         const nativeATMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);
-        const reqTimestamp = TimeUtils.nowSeconds();
+        const reqTimestamp = nowSeconds();
         // initialize native request
         const nativeRequest = await this.initializeNativeRequest(request);
         // check if the tokens can be retrieved from internal cache
@@ -13259,7 +12799,7 @@ class NativeInteractionClient extends BaseInteractionClient {
             method: NativeExtensionMethod.GetToken,
             request: request,
         };
-        const reqTimestamp = TimeUtils.nowSeconds();
+        const reqTimestamp = nowSeconds();
         try {
             this.logger.verbose("NativeInteractionClient - handleRedirectPromise sending message to native broker.");
             const response = await this.nativeMessageHandler.sendMessage(messageBody);
@@ -13530,7 +13070,8 @@ class NativeInteractionClient extends BaseInteractionClient {
         this.logger.trace("NativeInteractionClient - initializeNativeRequest called");
         const authority = request.authority || this.config.auth.authority;
         if (request.account) {
-            await this.validateRequestAuthority(authority, request.account);
+            // validate authority
+            await this.getDiscoveredAuthority(authority, request.azureCloudOptions, request.account);
         }
         const canonicalAuthority = new UrlString(authority);
         canonicalAuthority.validateAsUri();
@@ -14095,7 +13636,7 @@ class PopupClient extends StandardInteractionClient {
             // Create auth code request and generate PKCE params
             const authCodeRequest = await invokeAsync(this.initializeAuthorizationCodeRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, this.logger, this.performanceClient, this.correlationId)(validRequest);
             // Initialize the client
-            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions);
+            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions, validRequest.account);
             const isNativeBroker = NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeMessageHandler, request.authenticationScheme);
             // Start measurement for server calls with native brokering enabled
             let fetchNativeAccountIdMeasurement;
@@ -14176,7 +13717,8 @@ class PopupClient extends StandardInteractionClient {
             // Clear cache on logout
             await this.clearCacheOnLogout(validRequest.account);
             // Initialize the client
-            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, requestAuthority);
+            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, requestAuthority, undefined, // AzureCloudOptions
+            validRequest.account || undefined);
             try {
                 authClient.authority.endSessionEndpoint;
             }
@@ -14608,7 +14150,7 @@ class RedirectClient extends StandardInteractionClient {
             // Create auth code request and generate PKCE params
             const authCodeRequest = await invokeAsync(this.initializeAuthorizationCodeRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, this.logger, this.performanceClient, this.correlationId)(validRequest);
             // Initialize the client
-            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions);
+            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions, validRequest.account);
             // Create redirect interaction handler.
             const interactionHandler = new RedirectHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.performanceClient);
             // Create acquire token url.
@@ -14826,7 +14368,8 @@ class RedirectClient extends StandardInteractionClient {
                 timeout: this.config.system.redirectNavigationTimeout,
                 noHistory: false,
             };
-            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, logoutRequest && logoutRequest.authority);
+            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, logoutRequest && logoutRequest.authority, undefined, // AzureCloudOptions
+            (logoutRequest && logoutRequest.account) || undefined);
             if (authClient.authority.protocolMode === ProtocolMode.OIDC) {
                 try {
                     authClient.authority.endSessionEndpoint;
@@ -15062,7 +14605,7 @@ class SilentIframeClient extends StandardInteractionClient {
         const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
         try {
             // Initialize the client
-            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, request.correlationId)(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions);
+            const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, request.correlationId)(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);
             return await invokeAsync(this.silentTokenHelper.bind(this), PerformanceEvents.SilentIframeClientTokenHelper, this.logger, this.performanceClient, request.correlationId)(authClient, silentRequest);
         }
         catch (e) {
@@ -15133,7 +14676,7 @@ class SilentRefreshClient extends StandardInteractionClient {
      */
     async acquireToken(request) {
         this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentRefreshClientAcquireToken, request.correlationId);
-        const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, request.correlationId)(request, request.account);
+        const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, request.correlationId)(request);
         const silentRequest = {
             ...request,
             ...baseRequest,
@@ -15143,7 +14686,7 @@ class SilentRefreshClient extends StandardInteractionClient {
             silentRequest.redirectUri = this.getRedirectUri(request.redirectUri);
         }
         const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);
-        const refreshTokenClient = await this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions);
+        const refreshTokenClient = await this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);
         // Send request to renew token. Auth module will throw errors if token cannot be renewed.
         return invokeAsync(refreshTokenClient.acquireTokenByRefreshToken.bind(refreshTokenClient), PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, this.logger, this.performanceClient, request.correlationId)(silentRequest).catch((e) => {
             e.setCorrelationId(this.correlationId);
@@ -15163,9 +14706,9 @@ class SilentRefreshClient extends StandardInteractionClient {
      * @param serverTelemetryManager
      * @param authorityUrl
      */
-    async createRefreshTokenClient(serverTelemetryManager, authorityUrl, azureCloudOptions) {
+    async createRefreshTokenClient(serverTelemetryManager, authorityUrl, azureCloudOptions, account) {
         // Create auth module.
-        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, azureCloudOptions);
+        const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, azureCloudOptions, account);
         return new RefreshTokenClient(clientConfig, this.performanceClient);
     }
 }
@@ -15215,7 +14758,7 @@ class TokenCache {
                 authorityMetadata: this.config.auth.authorityMetadata,
                 skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,
             };
-            authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions, this.logger);
+            authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions, this.logger, request.correlationId || createNewGuid());
             // "clientInfo" from options takes precedence over "clientInfo" in response
             if (options.clientInfo) {
                 this.logger.trace("TokenCache - homeAccountId from options");
@@ -15432,7 +14975,7 @@ class SilentAuthCodeClient extends StandardInteractionClient {
                 code: request.code,
             };
             // Initialize the client
-            const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, request.correlationId)(serverTelemetryManager, silentRequest.authority);
+            const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, request.correlationId)(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);
             const authClient = new HybridSpaAuthorizationCodeClient(clientConfig);
             this.logger.verbose("Auth code client created");
             // Create silent handler
@@ -16648,13 +16191,19 @@ class StandardController {
                 throw error;
             });
             this.activeSilentTokenRequests.set(silentRequestKey, response);
-            return response;
+            return {
+                ...(await response),
+                state: request.state,
+            };
         }
         else {
             this.logger.verbose("acquireTokenSilent has been called previously, returning the result from the first call", correlationId);
             // Discard measurements for memoized calls, as they are usually only a couple of ms and will artificially deflate metrics
             atsMeasurement.discard();
-            return cachedResponse;
+            return {
+                ...(await cachedResponse),
+                state: request.state,
+            };
         }
     }
     /**
@@ -18462,7 +18011,7 @@ class NestedAppAuthController {
         atPopupMeasurement?.add({ nestedAppAuthRequest: true });
         try {
             const naaRequest = this.nestedAppAuthAdapter.toNaaTokenRequest(request);
-            const reqTimestamp = TimeUtils.nowSeconds();
+            const reqTimestamp = nowSeconds();
             const response = await this.bridgeProxy.getTokenInteractive(naaRequest);
             const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
             this.operatingContext.setActiveAccount(result.account);
@@ -18499,7 +18048,7 @@ class NestedAppAuthController {
         });
         try {
             const naaRequest = this.nestedAppAuthAdapter.toNaaTokenRequest(request);
-            const reqTimestamp = TimeUtils.nowSeconds();
+            const reqTimestamp = nowSeconds();
             const response = await this.bridgeProxy.getTokenSilent(naaRequest);
             const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
             this.operatingContext.setActiveAccount(result.account);