npm - @azure/msal-browser - Versions diffs - 3.7.0 → 3.7.2-alpha.0 - Mend

@azure/msal-browser 3.7.0 → 3.7.2-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (117) hide show

package/lib/msal-browser.js CHANGED Viewed

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v3.7.0 2024-01-09 */
+/*! @azure/msal-browser v3.7.2-alpha.0 2024-01-30 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -6,7 +6,7 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msal = {}));
 })(this, (function (exports) { 'use strict';
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -301,7 +301,7 @@
         Pop: "pop",
     };
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -318,7 +318,7 @@
         unexpectedError: unexpectedError
     });
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -367,7 +367,7 @@
             : AuthErrorMessages[code]);
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -465,7 +465,7 @@
         userTimeoutReached: userTimeoutReached
     });
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -717,7 +717,7 @@
         return new ClientAuthError(errorCode, additionalMessage);
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -750,7 +750,7 @@
         },
     };
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -941,12 +941,12 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /* eslint-disable header/header */
     const name$1 = "@azure/msal-common";
-    const version$1 = "14.6.0";
+    const version$1 = "14.6.2-alpha.0";
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -966,7 +966,7 @@
         AzureUsGovernment: "https://login.microsoftonline.us",
     };
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1027,54 +1027,44 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
     /**
-     * Utility class which exposes functions for managing date and time operations.
+     * Utility functions for managing date and time operations.
      */
-    class TimeUtils {
-        /**
-         * return the current time in Unix time (seconds).
-         */
-        static nowSeconds() {
-            // Date.getTime() returns in milliseconds.
-            return Math.round(new Date().getTime() / 1000.0);
-        }
-        /**
-         * check if a token is expired based on given UTC time in seconds.
-         * @param expiresOn
-         */
-        static isTokenExpired(expiresOn, offset) {
-            // check for access token expiry
-            const expirationSec = Number(expiresOn) || 0;
-            const offsetCurrentTimeSec = TimeUtils.nowSeconds() + offset;
-            // If current time + offset is greater than token expiration time, then token is expired.
-            return offsetCurrentTimeSec > expirationSec;
-        }
-        /**
-         * If the current time is earlier than the time that a token was cached at, we must discard the token
-         * i.e. The system clock was turned back after acquiring the cached token
-         * @param cachedAt
-         * @param offset
-         */
-        static wasClockTurnedBack(cachedAt) {
-            const cachedAtSec = Number(cachedAt);
-            return cachedAtSec > TimeUtils.nowSeconds();
-        }
-        /**
-         * Waits for t number of milliseconds
-         * @param t number
-         * @param value T
-         */
-        static delay(t, value) {
-            return new Promise((resolve) => setTimeout(() => resolve(value), t));
-        }
+    /**
+     * return the current time in Unix time (seconds).
+     */
+    function nowSeconds() {
+        // Date.getTime() returns in milliseconds.
+        return Math.round(new Date().getTime() / 1000.0);
+    }
+    /**
+     * check if a token is expired based on given UTC time in seconds.
+     * @param expiresOn
+     */
+    function isTokenExpired(expiresOn, offset) {
+        // check for access token expiry
+        const expirationSec = Number(expiresOn) || 0;
+        const offsetCurrentTimeSec = nowSeconds() + offset;
+        // If current time + offset is greater than token expiration time, then token is expired.
+        return offsetCurrentTimeSec > expirationSec;
+    }
+    /**
+     * If the current time is earlier than the time that a token was cached at, we must discard the token
+     * i.e. The system clock was turned back after acquiring the cached token
+     * @param cachedAt
+     * @param offset
+     */
+    function wasClockTurnedBack(cachedAt) {
+        const cachedAtSec = Number(cachedAt);
+        return cachedAtSec > nowSeconds();
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1132,7 +1122,7 @@
             homeAccountId: homeAccountId,
             credentialType: CredentialType.ACCESS_TOKEN,
             secret: accessToken,
-            cachedAt: TimeUtils.nowSeconds().toString(),
+            cachedAt: nowSeconds().toString(),
             expiresOn: expiresOn.toString(),
             extendedExpiresOn: extExpiresOn.toString(),
             environment: environment,
@@ -1376,7 +1366,7 @@
      * Reset the exiresAt value
      */
     function generateAuthorityMetadataExpiresAt() {
-        return (TimeUtils.nowSeconds() +
+        return (nowSeconds() +
             AUTHORITY_METADATA_CONSTANTS.REFRESH_TIME_SECONDS);
     }
     function updateAuthorityEndpointMetadata(authorityMetadata, updatedValues, fromNetwork) {
@@ -1398,10 +1388,10 @@
      * Returns whether or not the data needs to be refreshed
      */
     function isAuthorityMetadataExpired(metadata) {
-        return metadata.expiresAt <= TimeUtils.nowSeconds();
+        return metadata.expiresAt <= nowSeconds();
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1455,7 +1445,7 @@
         urlParseError: urlParseError
     });
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1593,7 +1583,7 @@
         return new ClientConfigurationError(errorCode);
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1690,7 +1680,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1890,7 +1880,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1930,7 +1920,7 @@
         };
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1991,7 +1981,7 @@
         return updatedAccountInfo;
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2006,7 +1996,7 @@
         Ciam: 3,
     };
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2028,7 +2018,7 @@
         return null;
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2041,7 +2031,7 @@
         OIDC: "OIDC",
     };
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2288,7 +2278,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2335,7 +2325,7 @@
         return null;
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2499,7 +2489,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2507,496 +2497,30 @@
      */
     const rawMetdataJSON = {
         endpointMetadata: {
-            "https://login.microsoftonline.com/common/": {
-                token_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
-                token_endpoint_auth_methods_supported: [
-                    "client_secret_post",
-                    "private_key_jwt",
-                    "client_secret_basic",
-                ],
-                jwks_uri: "https://login.microsoftonline.com/common/discovery/v2.0/keys",
-                response_modes_supported: ["query", "fragment", "form_post"],
-                subject_types_supported: ["pairwise"],
-                id_token_signing_alg_values_supported: ["RS256"],
-                response_types_supported: [
-                    "code",
-                    "id_token",
-                    "code id_token",
-                    "id_token token",
-                ],
-                scopes_supported: ["openid", "profile", "email", "offline_access"],
-                issuer: "https://login.microsoftonline.com/{tenantid}/v2.0",
-                request_uri_parameter_supported: false,
-                userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-                authorization_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
-                device_authorization_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/devicecode",
-                http_logout_supported: true,
-                frontchannel_logout_supported: true,
-                end_session_endpoint: "https://login.microsoftonline.com/common/oauth2/v2.0/logout",
-                claims_supported: [
-                    "sub",
-                    "iss",
-                    "cloud_instance_name",
-                    "cloud_instance_host_name",
-                    "cloud_graph_host_name",
-                    "msgraph_host",
-                    "aud",
-                    "exp",
-                    "iat",
-                    "auth_time",
-                    "acr",
-                    "nonce",
-                    "preferred_username",
-                    "name",
-                    "tid",
-                    "ver",
-                    "at_hash",
-                    "c_hash",
-                    "email",
-                ],
-                kerberos_endpoint: "https://login.microsoftonline.com/common/kerberos",
-                tenant_region_scope: null,
-                cloud_instance_name: "microsoftonline.com",
-                cloud_graph_host_name: "graph.windows.net",
-                msgraph_host: "graph.microsoft.com",
-                rbac_url: "https://pas.windows.net",
-            },
-            "https://login.chinacloudapi.cn/common/": {
-                token_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/token",
-                token_endpoint_auth_methods_supported: [
-                    "client_secret_post",
-                    "private_key_jwt",
-                    "client_secret_basic",
-                ],
-                jwks_uri: "https://login.chinacloudapi.cn/common/discovery/v2.0/keys",
-                response_modes_supported: ["query", "fragment", "form_post"],
-                subject_types_supported: ["pairwise"],
-                id_token_signing_alg_values_supported: ["RS256"],
-                response_types_supported: [
-                    "code",
-                    "id_token",
-                    "code id_token",
-                    "id_token token",
-                ],
-                scopes_supported: ["openid", "profile", "email", "offline_access"],
-                issuer: "https://login.partner.microsoftonline.cn/{tenantid}/v2.0",
-                request_uri_parameter_supported: false,
-                userinfo_endpoint: "https://microsoftgraph.chinacloudapi.cn/oidc/userinfo",
-                authorization_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/authorize",
-                device_authorization_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/devicecode",
-                http_logout_supported: true,
-                frontchannel_logout_supported: true,
-                end_session_endpoint: "https://login.chinacloudapi.cn/common/oauth2/v2.0/logout",
-                claims_supported: [
-                    "sub",
-                    "iss",
-                    "cloud_instance_name",
-                    "cloud_instance_host_name",
-                    "cloud_graph_host_name",
-                    "msgraph_host",
-                    "aud",
-                    "exp",
-                    "iat",
-                    "auth_time",
-                    "acr",
-                    "nonce",
-                    "preferred_username",
-                    "name",
-                    "tid",
-                    "ver",
-                    "at_hash",
-                    "c_hash",
-                    "email",
-                ],
-                kerberos_endpoint: "https://login.chinacloudapi.cn/common/kerberos",
-                tenant_region_scope: null,
-                cloud_instance_name: "partner.microsoftonline.cn",
-                cloud_graph_host_name: "graph.chinacloudapi.cn",
-                msgraph_host: "microsoftgraph.chinacloudapi.cn",
-                rbac_url: "https://pas.chinacloudapi.cn",
-            },
-            "https://login.microsoftonline.us/common/": {
-                token_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/token",
-                token_endpoint_auth_methods_supported: [
-                    "client_secret_post",
-                    "private_key_jwt",
-                    "client_secret_basic",
-                ],
-                jwks_uri: "https://login.microsoftonline.us/common/discovery/v2.0/keys",
-                response_modes_supported: ["query", "fragment", "form_post"],
-                subject_types_supported: ["pairwise"],
-                id_token_signing_alg_values_supported: ["RS256"],
-                response_types_supported: [
-                    "code",
-                    "id_token",
-                    "code id_token",
-                    "id_token token",
-                ],
-                scopes_supported: ["openid", "profile", "email", "offline_access"],
-                issuer: "https://login.microsoftonline.us/{tenantid}/v2.0",
-                request_uri_parameter_supported: false,
-                userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-                authorization_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/authorize",
-                device_authorization_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/devicecode",
-                http_logout_supported: true,
-                frontchannel_logout_supported: true,
-                end_session_endpoint: "https://login.microsoftonline.us/common/oauth2/v2.0/logout",
-                claims_supported: [
-                    "sub",
-                    "iss",
-                    "cloud_instance_name",
-                    "cloud_instance_host_name",
-                    "cloud_graph_host_name",
-                    "msgraph_host",
-                    "aud",
-                    "exp",
-                    "iat",
-                    "auth_time",
-                    "acr",
-                    "nonce",
-                    "preferred_username",
-                    "name",
-                    "tid",
-                    "ver",
-                    "at_hash",
-                    "c_hash",
-                    "email",
-                ],
-                kerberos_endpoint: "https://login.microsoftonline.us/common/kerberos",
-                tenant_region_scope: null,
-                cloud_instance_name: "microsoftonline.us",
-                cloud_graph_host_name: "graph.windows.net",
-                msgraph_host: "graph.microsoft.com",
-                rbac_url: "https://pasff.usgovcloudapi.net",
-            },
-            "https://login.microsoftonline.com/consumers/": {
-                token_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/token",
-                token_endpoint_auth_methods_supported: [
-                    "client_secret_post",
-                    "private_key_jwt",
-                    "client_secret_basic",
-                ],
-                jwks_uri: "https://login.microsoftonline.com/consumers/discovery/v2.0/keys",
-                response_modes_supported: ["query", "fragment", "form_post"],
-                subject_types_supported: ["pairwise"],
-                id_token_signing_alg_values_supported: ["RS256"],
-                response_types_supported: [
-                    "code",
-                    "id_token",
-                    "code id_token",
-                    "id_token token",
-                ],
-                scopes_supported: ["openid", "profile", "email", "offline_access"],
-                issuer: "https://login.microsoftonline.com/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0",
-                request_uri_parameter_supported: false,
-                userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-                authorization_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize",
-                device_authorization_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/devicecode",
-                http_logout_supported: true,
-                frontchannel_logout_supported: true,
-                end_session_endpoint: "https://login.microsoftonline.com/consumers/oauth2/v2.0/logout",
-                claims_supported: [
-                    "sub",
-                    "iss",
-                    "cloud_instance_name",
-                    "cloud_instance_host_name",
-                    "cloud_graph_host_name",
-                    "msgraph_host",
-                    "aud",
-                    "exp",
-                    "iat",
-                    "auth_time",
-                    "acr",
-                    "nonce",
-                    "preferred_username",
-                    "name",
-                    "tid",
-                    "ver",
-                    "at_hash",
-                    "c_hash",
-                    "email",
-                ],
-                kerberos_endpoint: "https://login.microsoftonline.com/consumers/kerberos",
-                tenant_region_scope: null,
-                cloud_instance_name: "microsoftonline.com",
-                cloud_graph_host_name: "graph.windows.net",
-                msgraph_host: "graph.microsoft.com",
-                rbac_url: "https://pas.windows.net",
-            },
-            "https://login.chinacloudapi.cn/consumers/": {
-                token_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/token",
-                token_endpoint_auth_methods_supported: [
-                    "client_secret_post",
-                    "private_key_jwt",
-                    "client_secret_basic",
-                ],
-                jwks_uri: "https://login.chinacloudapi.cn/consumers/discovery/v2.0/keys",
-                response_modes_supported: ["query", "fragment", "form_post"],
-                subject_types_supported: ["pairwise"],
-                id_token_signing_alg_values_supported: ["RS256"],
-                response_types_supported: [
-                    "code",
-                    "id_token",
-                    "code id_token",
-                    "id_token token",
-                ],
-                scopes_supported: ["openid", "profile", "email", "offline_access"],
-                issuer: "https://login.partner.microsoftonline.cn/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0",
-                request_uri_parameter_supported: false,
-                userinfo_endpoint: "https://microsoftgraph.chinacloudapi.cn/oidc/userinfo",
-                authorization_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/authorize",
-                device_authorization_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/devicecode",
-                http_logout_supported: true,
-                frontchannel_logout_supported: true,
-                end_session_endpoint: "https://login.chinacloudapi.cn/consumers/oauth2/v2.0/logout",
-                claims_supported: [
-                    "sub",
-                    "iss",
-                    "cloud_instance_name",
-                    "cloud_instance_host_name",
-                    "cloud_graph_host_name",
-                    "msgraph_host",
-                    "aud",
-                    "exp",
-                    "iat",
-                    "auth_time",
-                    "acr",
-                    "nonce",
-                    "preferred_username",
-                    "name",
-                    "tid",
-                    "ver",
-                    "at_hash",
-                    "c_hash",
-                    "email",
-                ],
-                kerberos_endpoint: "https://login.chinacloudapi.cn/consumers/kerberos",
-                tenant_region_scope: null,
-                cloud_instance_name: "partner.microsoftonline.cn",
-                cloud_graph_host_name: "graph.chinacloudapi.cn",
-                msgraph_host: "microsoftgraph.chinacloudapi.cn",
-                rbac_url: "https://pas.chinacloudapi.cn",
-            },
-            "https://login.microsoftonline.us/consumers/": {
-                token_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/token",
-                token_endpoint_auth_methods_supported: [
-                    "client_secret_post",
-                    "private_key_jwt",
-                    "client_secret_basic",
-                ],
-                jwks_uri: "https://login.microsoftonline.us/consumers/discovery/v2.0/keys",
-                response_modes_supported: ["query", "fragment", "form_post"],
-                subject_types_supported: ["pairwise"],
-                id_token_signing_alg_values_supported: ["RS256"],
-                response_types_supported: [
-                    "code",
-                    "id_token",
-                    "code id_token",
-                    "id_token token",
-                ],
-                scopes_supported: ["openid", "profile", "email", "offline_access"],
-                issuer: "https://login.microsoftonline.us/9188040d-6c67-4c5b-b112-36a304b66dad/v2.0",
-                request_uri_parameter_supported: false,
-                userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-                authorization_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/authorize",
-                device_authorization_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/devicecode",
-                http_logout_supported: true,
-                frontchannel_logout_supported: true,
-                end_session_endpoint: "https://login.microsoftonline.us/consumers/oauth2/v2.0/logout",
-                claims_supported: [
-                    "sub",
-                    "iss",
-                    "cloud_instance_name",
-                    "cloud_instance_host_name",
-                    "cloud_graph_host_name",
-                    "msgraph_host",
-                    "aud",
-                    "exp",
-                    "iat",
-                    "auth_time",
-                    "acr",
-                    "nonce",
-                    "preferred_username",
-                    "name",
-                    "tid",
-                    "ver",
-                    "at_hash",
-                    "c_hash",
-                    "email",
-                ],
-                kerberos_endpoint: "https://login.microsoftonline.us/consumers/kerberos",
-                tenant_region_scope: null,
-                cloud_instance_name: "microsoftonline.us",
-                cloud_graph_host_name: "graph.windows.net",
-                msgraph_host: "graph.microsoft.com",
-                rbac_url: "https://pasff.usgovcloudapi.net",
-            },
-            "https://login.microsoftonline.com/organizations/": {
-                token_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/token",
-                token_endpoint_auth_methods_supported: [
-                    "client_secret_post",
-                    "private_key_jwt",
-                    "client_secret_basic",
-                ],
-                jwks_uri: "https://login.microsoftonline.com/organizations/discovery/v2.0/keys",
-                response_modes_supported: ["query", "fragment", "form_post"],
-                subject_types_supported: ["pairwise"],
-                id_token_signing_alg_values_supported: ["RS256"],
-                response_types_supported: [
-                    "code",
-                    "id_token",
-                    "code id_token",
-                    "id_token token",
-                ],
-                scopes_supported: ["openid", "profile", "email", "offline_access"],
+            "login.microsoftonline.com": {
+                token_endpoint: "https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/token",
+                jwks_uri: "https://login.microsoftonline.com/{tenantid}/discovery/v2.0/keys",
                 issuer: "https://login.microsoftonline.com/{tenantid}/v2.0",
-                request_uri_parameter_supported: false,
-                userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-                authorization_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize",
-                device_authorization_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/devicecode",
-                http_logout_supported: true,
-                frontchannel_logout_supported: true,
-                end_session_endpoint: "https://login.microsoftonline.com/organizations/oauth2/v2.0/logout",
-                claims_supported: [
-                    "sub",
-                    "iss",
-                    "cloud_instance_name",
-                    "cloud_instance_host_name",
-                    "cloud_graph_host_name",
-                    "msgraph_host",
-                    "aud",
-                    "exp",
-                    "iat",
-                    "auth_time",
-                    "acr",
-                    "nonce",
-                    "preferred_username",
-                    "name",
-                    "tid",
-                    "ver",
-                    "at_hash",
-                    "c_hash",
-                    "email",
-                ],
-                kerberos_endpoint: "https://login.microsoftonline.com/organizations/kerberos",
-                tenant_region_scope: null,
-                cloud_instance_name: "microsoftonline.com",
-                cloud_graph_host_name: "graph.windows.net",
-                msgraph_host: "graph.microsoft.com",
-                rbac_url: "https://pas.windows.net",
+                authorization_endpoint: "https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/authorize",
+                end_session_endpoint: "https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/logout",
             },
-            "https://login.chinacloudapi.cn/organizations/": {
-                token_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/token",
-                token_endpoint_auth_methods_supported: [
-                    "client_secret_post",
-                    "private_key_jwt",
-                    "client_secret_basic",
-                ],
-                jwks_uri: "https://login.chinacloudapi.cn/organizations/discovery/v2.0/keys",
-                response_modes_supported: ["query", "fragment", "form_post"],
-                subject_types_supported: ["pairwise"],
-                id_token_signing_alg_values_supported: ["RS256"],
-                response_types_supported: [
-                    "code",
-                    "id_token",
-                    "code id_token",
-                    "id_token token",
-                ],
-                scopes_supported: ["openid", "profile", "email", "offline_access"],
+            "login.chinacloudapi.cn": {
+                token_endpoint: "https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/token",
+                jwks_uri: "https://login.chinacloudapi.cn/{tenantid}/discovery/v2.0/keys",
                 issuer: "https://login.partner.microsoftonline.cn/{tenantid}/v2.0",
-                request_uri_parameter_supported: false,
-                userinfo_endpoint: "https://microsoftgraph.chinacloudapi.cn/oidc/userinfo",
-                authorization_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/authorize",
-                device_authorization_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/devicecode",
-                http_logout_supported: true,
-                frontchannel_logout_supported: true,
-                end_session_endpoint: "https://login.chinacloudapi.cn/organizations/oauth2/v2.0/logout",
-                claims_supported: [
-                    "sub",
-                    "iss",
-                    "cloud_instance_name",
-                    "cloud_instance_host_name",
-                    "cloud_graph_host_name",
-                    "msgraph_host",
-                    "aud",
-                    "exp",
-                    "iat",
-                    "auth_time",
-                    "acr",
-                    "nonce",
-                    "preferred_username",
-                    "name",
-                    "tid",
-                    "ver",
-                    "at_hash",
-                    "c_hash",
-                    "email",
-                ],
-                kerberos_endpoint: "https://login.chinacloudapi.cn/organizations/kerberos",
-                tenant_region_scope: null,
-                cloud_instance_name: "partner.microsoftonline.cn",
-                cloud_graph_host_name: "graph.chinacloudapi.cn",
-                msgraph_host: "microsoftgraph.chinacloudapi.cn",
-                rbac_url: "https://pas.chinacloudapi.cn",
+                authorization_endpoint: "https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/authorize",
+                end_session_endpoint: "https://login.chinacloudapi.cn/{tenantid}/oauth2/v2.0/logout",
             },
-            "https://login.microsoftonline.us/organizations/": {
-                token_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/token",
-                token_endpoint_auth_methods_supported: [
-                    "client_secret_post",
-                    "private_key_jwt",
-                    "client_secret_basic",
-                ],
-                jwks_uri: "https://login.microsoftonline.us/organizations/discovery/v2.0/keys",
-                response_modes_supported: ["query", "fragment", "form_post"],
-                subject_types_supported: ["pairwise"],
-                id_token_signing_alg_values_supported: ["RS256"],
-                response_types_supported: [
-                    "code",
-                    "id_token",
-                    "code id_token",
-                    "id_token token",
-                ],
-                scopes_supported: ["openid", "profile", "email", "offline_access"],
+            "login.microsoftonline.us": {
+                token_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/token",
+                jwks_uri: "https://login.microsoftonline.us/{tenantid}/discovery/v2.0/keys",
                 issuer: "https://login.microsoftonline.us/{tenantid}/v2.0",
-                request_uri_parameter_supported: false,
-                userinfo_endpoint: "https://graph.microsoft.com/oidc/userinfo",
-                authorization_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/authorize",
-                device_authorization_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/devicecode",
-                http_logout_supported: true,
-                frontchannel_logout_supported: true,
-                end_session_endpoint: "https://login.microsoftonline.us/organizations/oauth2/v2.0/logout",
-                claims_supported: [
-                    "sub",
-                    "iss",
-                    "cloud_instance_name",
-                    "cloud_instance_host_name",
-                    "cloud_graph_host_name",
-                    "msgraph_host",
-                    "aud",
-                    "exp",
-                    "iat",
-                    "auth_time",
-                    "acr",
-                    "nonce",
-                    "preferred_username",
-                    "name",
-                    "tid",
-                    "ver",
-                    "at_hash",
-                    "c_hash",
-                    "email",
-                ],
-                kerberos_endpoint: "https://login.microsoftonline.us/organizations/kerberos",
-                tenant_region_scope: null,
-                cloud_instance_name: "microsoftonline.us",
-                cloud_graph_host_name: "graph.windows.net",
-                msgraph_host: "graph.microsoft.com",
-                rbac_url: "https://pasff.usgovcloudapi.net",
+                authorization_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/authorize",
+                end_session_endpoint: "https://login.microsoftonline.us/{tenantid}/oauth2/v2.0/logout",
             },
         },
         instanceDiscoveryMetadata: {
             tenant_discovery_endpoint: "https://{canonicalAuthority}/v2.0/.well-known/openid-configuration",
-            "api-version": "1.1",
             metadata: [
                 {
                     preferred_network: "login.microsoftonline.com",
@@ -3105,7 +2629,7 @@
         return null;
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4345,7 +3869,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4445,7 +3969,7 @@
         return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4462,7 +3986,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4560,7 +4084,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4597,7 +4121,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4607,7 +4131,7 @@
         UPN: "UPN",
     };
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4654,7 +4178,7 @@
     const LOGIN_HINT = "login_hint";
     const DOMAIN_HINT = "domain_hint";
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4738,7 +4262,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5122,7 +4646,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5134,7 +4658,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5144,7 +4668,7 @@
             response.hasOwnProperty("metadata"));
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5154,7 +4678,7 @@
             response.hasOwnProperty("error_description"));
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5409,7 +4933,7 @@
         "multiMatchedRT",
     ]);
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5430,6 +4954,11 @@
         return (...args) => {
             logger.trace(`Executing function ${eventName}`);
             const inProgressEvent = telemetryClient?.startMeasurement(eventName, correlationId);
+            if (correlationId) {
+                // Track number of times this API is called in a single request
+                const eventCount = eventName + "CallCount";
+                telemetryClient?.incrementFields({ [eventCount]: 1 }, correlationId);
+            }
             try {
                 const result = callback(...args);
                 inProgressEvent?.end({
@@ -5470,6 +4999,11 @@
         return (...args) => {
             logger.trace(`Executing function ${eventName}`);
             const inProgressEvent = telemetryClient?.startMeasurement(eventName, correlationId);
+            if (correlationId) {
+                // Track number of times this API is called in a single request
+                const eventCount = eventName + "CallCount";
+                telemetryClient?.incrementFields({ [eventCount]: 1 }, correlationId);
+            }
             telemetryClient?.setPreQueueTime(eventName, correlationId);
             return callback(...args)
                 .then((response) => {
@@ -5495,7 +5029,7 @@
         };
     };
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5604,7 +5138,7 @@
         },
     };
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5616,7 +5150,7 @@
      * @internal
      */
     class Authority {
-        constructor(authority, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
+        constructor(authority, networkInterface, cacheManager, authorityOptions, logger, correlationId, performanceClient) {
             this.canonicalAuthority = authority;
             this._canonicalAuthority.validateAsUri();
             this.networkInterface = networkInterface;
@@ -5853,6 +5387,10 @@
             this.updateCachedMetadata(metadataEntity, cloudDiscoverySource, {
                 source: endpointSource,
             });
+            this.performanceClient?.addFields({
+                cloudDiscoverySource: cloudDiscoverySource,
+                authorityEndpointSource: endpointSource,
+            }, this.correlationId);
         }
         /**
          * Returns metadata entity from cache if it exists, otherwiser returns a new metadata entity built
@@ -6044,8 +5582,8 @@
          * Get OAuth endpoints for common authorities.
          */
         getEndpointMetadataFromHardcodedValues() {
-            if (this.canonicalAuthority in EndpointMetadata) {
-                return EndpointMetadata[this.canonicalAuthority];
+            if (this.hostnameAndPort in EndpointMetadata) {
+                return EndpointMetadata[this.hostnameAndPort];
             }
             return null;
         }
@@ -6433,57 +5971,38 @@
         };
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
-    /** @internal */
-    class AuthorityFactory {
-        /**
-         * Create an authority object of the correct type based on the url
-         * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)
-         *
-         * Also performs endpoint discovery.
-         *
-         * @param authorityUri
-         * @param networkClient
-         * @param protocolMode
-         */
-        static async createDiscoveredInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
-            performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
-            const authorityUriFinal = Authority.transformCIAMAuthority(formatAuthorityUri(authorityUri));
-            // Initialize authority and perform discovery endpoint check.
-            const acquireTokenAuthority = AuthorityFactory.createInstance(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, performanceClient, correlationId);
-            try {
-                await invokeAsync(acquireTokenAuthority.resolveEndpointsAsync.bind(acquireTokenAuthority), PerformanceEvents.AuthorityResolveEndpointsAsync, logger, performanceClient, correlationId)();
-                return acquireTokenAuthority;
-            }
-            catch (e) {
-                throw createClientAuthError(endpointResolutionError);
-            }
+    /**
+     * Create an authority object of the correct type based on the url
+     * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)
+     *
+     * Also performs endpoint discovery.
+     *
+     * @param authorityUri
+     * @param networkClient
+     * @param protocolMode
+     * @internal
+     */
+    async function createDiscoveredInstance(authorityUri, networkClient, cacheManager, authorityOptions, logger, correlationId, performanceClient) {
+        performanceClient?.addQueueMeasurement(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
+        const authorityUriFinal = Authority.transformCIAMAuthority(formatAuthorityUri(authorityUri));
+        // Initialize authority and perform discovery endpoint check.
+        const acquireTokenAuthority = new Authority(authorityUriFinal, networkClient, cacheManager, authorityOptions, logger, correlationId, performanceClient);
+        try {
+            await invokeAsync(acquireTokenAuthority.resolveEndpointsAsync.bind(acquireTokenAuthority), PerformanceEvents.AuthorityResolveEndpointsAsync, logger, performanceClient, correlationId)();
+            return acquireTokenAuthority;
         }
-        /**
-         * Create an authority object of the correct type based on the url
-         * Performs basic authority validation - checks to see if the authority is of a valid type (i.e. aad, b2c, adfs)
-         *
-         * Does not perform endpoint discovery.
-         *
-         * @param authorityUrl
-         * @param networkInterface
-         * @param protocolMode
-         */
-        static createInstance(authorityUrl, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId) {
-            // Throw error if authority url is empty
-            if (!authorityUrl) {
-                throw createClientConfigurationError(urlEmptyError);
-            }
-            return new Authority(authorityUrl, networkInterface, cacheManager, authorityOptions, logger, performanceClient, correlationId);
+        catch (e) {
+            throw createClientAuthError(endpointResolutionError);
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6570,7 +6089,7 @@
         async updateAuthority(cloudInstanceHostname, correlationId) {
             this.performanceClient?.addQueueMeasurement(PerformanceEvents.UpdateTokenEndpointAuthority, correlationId);
             const cloudInstanceAuthorityUri = `https://${cloudInstanceHostname}/${this.authority.tenant}/`;
-            const cloudInstanceAuthority = await AuthorityFactory.createDiscoveredInstance(cloudInstanceAuthorityUri, this.networkClient, this.cacheManager, this.authority.options, this.logger, this.performanceClient, correlationId);
+            const cloudInstanceAuthority = await createDiscoveredInstance(cloudInstanceAuthorityUri, this.networkClient, this.cacheManager, this.authority.options, this.logger, correlationId, this.performanceClient);
             this.authority = cloudInstanceAuthority;
         }
         /**
@@ -6586,7 +6105,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6612,7 +6131,7 @@
         refreshTokenExpired: refreshTokenExpired
     });
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6699,7 +6218,7 @@
         return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6715,7 +6234,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6787,7 +6306,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6858,7 +6377,7 @@
             const resourceUrlComponents = resourceUrlString?.getUrlComponents();
             return this.cryptoUtils.signJwt({
                 at: payload,
-                ts: TimeUtils.nowSeconds(),
+                ts: nowSeconds(),
                 m: resourceRequestMethod?.toUpperCase(),
                 u: resourceUrlComponents?.HostNameAndPort,
                 nonce: shrNonce || this.cryptoUtils.createNewGuid(),
@@ -6872,7 +6391,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6899,7 +6418,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7112,7 +6631,7 @@
                     ? reqTimestamp + refreshIn
                     : undefined;
                 // non AAD scenarios can have empty realm
-                cachedAccessToken = createAccessTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.access_token, this.clientId, claimsTenantId || authority.tenant, responseScopes.printScopes(), tokenExpirationSeconds, extendedTokenExpirationSeconds, this.cryptoObj.base64Decode, refreshOnSeconds, serverTokenResponse.token_type, userAssertionHash, serverTokenResponse.key_id, request.claims, request.requestedClaimsHash);
+                cachedAccessToken = createAccessTokenEntity(this.homeAccountIdentifier, env, serverTokenResponse.access_token, this.clientId, claimsTenantId || authority.tenant || "", responseScopes.printScopes(), tokenExpirationSeconds, extendedTokenExpirationSeconds, this.cryptoObj.base64Decode, refreshOnSeconds, serverTokenResponse.token_type, userAssertionHash, serverTokenResponse.key_id, request.claims, request.requestedClaimsHash);
             }
             // refreshToken
             let cachedRefreshToken = null;
@@ -7252,7 +6771,7 @@
         return baseAccount;
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7295,7 +6814,7 @@
             if (!request.code) {
                 throw createClientAuthError(requestCannotBeMade);
             }
-            const reqTimestamp = TimeUtils.nowSeconds();
+            const reqTimestamp = nowSeconds();
             const response = await invokeAsync(this.executeTokenRequest.bind(this), PerformanceEvents.AuthClientExecuteTokenRequest, this.logger, this.performanceClient, request.correlationId)(this.authority, request);
             // Retrieve requestId from response headers
             const requestId = response.headers?.[HeaderNames.X_MS_REQUEST_ID];
@@ -7657,7 +7176,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7674,7 +7193,7 @@
         }
         async acquireToken(request) {
             this.performanceClient?.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
-            const reqTimestamp = TimeUtils.nowSeconds();
+            const reqTimestamp = nowSeconds();
             const response = await invokeAsync(this.executeTokenRequest.bind(this), PerformanceEvents.RefreshTokenClientExecuteTokenRequest, this.logger, this.performanceClient, request.correlationId)(request, this.authority);
             // Retrieve requestId from response headers
             const requestId = response.headers?.[HeaderNames.X_MS_REQUEST_ID];
@@ -7735,7 +7254,7 @@
                 throw createInteractionRequiredAuthError(noTokensFound);
             }
             if (refreshToken.expiresOn &&
-                TimeUtils.isTokenExpired(refreshToken.expiresOn, request.refreshTokenExpirationOffsetSeconds ||
+                isTokenExpired(refreshToken.expiresOn, request.refreshTokenExpirationOffsetSeconds ||
                     DEFAULT_REFRESH_TOKEN_EXPIRATION_OFFSET_SECONDS)) {
                 throw createInteractionRequiredAuthError(refreshTokenExpired);
             }
@@ -7864,7 +7383,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7935,14 +7454,14 @@
                 this.setCacheOutcome(CacheOutcome.NO_CACHED_ACCESS_TOKEN, request.correlationId);
                 throw createClientAuthError(tokenRefreshRequired);
             }
-            else if (TimeUtils.wasClockTurnedBack(cachedAccessToken.cachedAt) ||
-                TimeUtils.isTokenExpired(cachedAccessToken.expiresOn, this.config.systemOptions.tokenRenewalOffsetSeconds)) {
+            else if (wasClockTurnedBack(cachedAccessToken.cachedAt) ||
+                isTokenExpired(cachedAccessToken.expiresOn, this.config.systemOptions.tokenRenewalOffsetSeconds)) {
                 // must refresh due to the expires_in value
                 this.setCacheOutcome(CacheOutcome.CACHED_ACCESS_TOKEN_EXPIRED, request.correlationId);
                 throw createClientAuthError(tokenRefreshRequired);
             }
             else if (cachedAccessToken.refreshOn &&
-                TimeUtils.isTokenExpired(cachedAccessToken.refreshOn, 0)) {
+                isTokenExpired(cachedAccessToken.refreshOn, 0)) {
                 // must refresh (in the background) due to the refresh_in value
                 lastCacheOutcome = CacheOutcome.PROACTIVELY_REFRESHED;
                 // don't throw ClientAuthError.createRefreshRequiredError(), return cached token instead
@@ -7995,7 +7514,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8010,7 +7529,7 @@
         },
     };
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -8018,7 +7537,7 @@
     const missingKidError = "missing_kid_error";
     const missingAlgError = "missing_alg_error";
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8043,7 +7562,7 @@
         return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8083,7 +7602,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8141,7 +7660,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8345,7 +7864,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8424,7 +7943,7 @@
         }
     }
-    /*! @azure/msal-common v14.6.0 2024-01-09 */
+    /*! @azure/msal-common v14.6.2-alpha.0 2024-01-30 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -9824,7 +9343,7 @@
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "3.7.0";
+    const version = "3.7.2-alpha.0";
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10350,6 +9869,10 @@
     const MODULUS_LENGTH = 2048;
     // Public Exponent
     const PUBLIC_EXPONENT = new Uint8Array([0x01, 0x00, 0x01]);
+    // UUID hex digits
+    const UUID_CHARS = "0123456789abcdef";
+    // Array to store UINT32 random value
+    const UINT32_ARR = new Uint32Array(1);
     const keygenAlgorithmOptions = {
         name: PKCS1_V15_KEYGEN_ALG,
         hash: S256_HASH_ALG,
@@ -10370,7 +9893,9 @@
     }
     /**
      * Returns a sha-256 hash of the given dataString as an ArrayBuffer.
-     * @param dataString
+     * @param dataString {string} data string
+     * @param performanceClient {?IPerformanceClient}
+     * @param correlationId {?string} correlation id
      */
     async function sha256Digest(dataString, performanceClient, correlationId) {
         performanceClient?.addQueueMeasurement(PerformanceEvents.Sha256Digest, correlationId);
@@ -10386,11 +9911,54 @@
         return window.crypto.getRandomValues(dataBuffer);
     }
     /**
-     * Creates a new random GUID
-     * @returns
+     * Returns random Uint32 value.
+     * @returns {number}
+     */
+    function getRandomUint32() {
+        window.crypto.getRandomValues(UINT32_ARR);
+        return UINT32_ARR[0];
+    }
+    /**
+     * Creates a UUID v7 from the current timestamp.
+     * Implementation relies on the system clock to guarantee increasing order of generated identifiers.
+     * @returns {number}
      */
     function createNewGuid() {
-        return window.crypto.randomUUID();
+        const currentTimestamp = Date.now();
+        const baseRand = getRandomUint32() * 0x400 + (getRandomUint32() & 0x3ff);
+        // Result byte array
+        const bytes = new Uint8Array(16);
+        // A 12-bit `rand_a` field value
+        const randA = Math.trunc(baseRand / 2 ** 30);
+        // The higher 30 bits of 62-bit `rand_b` field value
+        const randBHi = baseRand & (2 ** 30 - 1);
+        // The lower 32 bits of 62-bit `rand_b` field value
+        const randBLo = getRandomUint32();
+        bytes[0] = currentTimestamp / 2 ** 40;
+        bytes[1] = currentTimestamp / 2 ** 32;
+        bytes[2] = currentTimestamp / 2 ** 24;
+        bytes[3] = currentTimestamp / 2 ** 16;
+        bytes[4] = currentTimestamp / 2 ** 8;
+        bytes[5] = currentTimestamp;
+        bytes[6] = 0x70 | (randA >>> 8);
+        bytes[7] = randA;
+        bytes[8] = 0x80 | (randBHi >>> 24);
+        bytes[9] = randBHi >>> 16;
+        bytes[10] = randBHi >>> 8;
+        bytes[11] = randBHi;
+        bytes[12] = randBLo >>> 24;
+        bytes[13] = randBLo >>> 16;
+        bytes[14] = randBLo >>> 8;
+        bytes[15] = randBLo;
+        let text = "";
+        for (let i = 0; i < bytes.length; i++) {
+            text += UUID_CHARS.charAt(bytes[i] >>> 4);
+            text += UUID_CHARS.charAt(bytes[i] & 0xf);
+            if (i === 3 || i === 5 || i === 7 || i === 9) {
+                text += "-";
+            }
+        }
+        return text;
     }
     /**
      * Generates a keypair based on current keygen algorithm config.
@@ -12564,12 +12132,9 @@
          * Initializer function for all request APIs
          * @param request
          */
-        async initializeBaseRequest(request, account) {
+        async initializeBaseRequest(request) {
             this.performanceClient.addQueueMeasurement(PerformanceEvents.InitializeBaseRequest, this.correlationId);
             const authority = request.authority || this.config.auth.authority;
-            if (account) {
-                await this.validateRequestAuthority(authority, account);
-            }
             const scopes = [...((request && request.scopes) || [])];
             const validatedRequest = {
                 ...request,
@@ -12618,16 +12183,6 @@
                 getCurrentUri();
             return UrlString.getAbsoluteUrl(redirectUri, getCurrentUri());
         }
-        /*
-         * If authority provided in the request does not match environment/authority specified
-         * in the account or MSAL config, we throw an error.
-         */
-        async validateRequestAuthority(authority, account) {
-            const discoveredAuthority = await this.getDiscoveredAuthority(authority);
-            if (!discoveredAuthority.isAlias(account.environment)) {
-                throw createClientConfigurationError(authorityMismatch);
-            }
-        }
         /**
          *
          * @param apiId
@@ -12649,22 +12204,30 @@
         /**
          * Used to get a discovered version of the default authority.
          * @param requestAuthority
+         * @param requestAzureCloudOptions
+         * @param account
          */
-        async getDiscoveredAuthority(requestAuthority) {
-            this.logger.verbose("getDiscoveredAuthority called");
+        async getDiscoveredAuthority(requestAuthority, requestAzureCloudOptions, account) {
+            this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);
             const authorityOptions = {
                 protocolMode: this.config.auth.protocolMode,
                 OIDCOptions: this.config.auth.OIDCOptions,
                 knownAuthorities: this.config.auth.knownAuthorities,
                 cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,
                 authorityMetadata: this.config.auth.authorityMetadata,
+                skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,
             };
-            if (requestAuthority) {
-                this.logger.verbose("Creating discovered authority with request authority");
-                return AuthorityFactory.createDiscoveredInstance(requestAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger);
+            // build authority string based on auth params, precedence - azureCloudInstance + tenant >> authority
+            const userAuthority = requestAuthority
+                ? requestAuthority
+                : this.config.auth.authority;
+            // fall back to the authority from config
+            const builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);
+            const discoveredAuthority = await invokeAsync(createDiscoveredInstance, PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, this.logger, this.performanceClient, this.correlationId)(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger, this.correlationId, this.performanceClient);
+            if (account && !discoveredAuthority.isAlias(account.environment)) {
+                throw createClientConfigurationError(authorityMismatch);
             }
-            this.logger.verbose("Creating discovered authority with configured authority");
-            return AuthorityFactory.createDiscoveredInstance(this.config.auth.authority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger);
+            return discoveredAuthority;
         }
     }
@@ -12837,10 +12400,10 @@
          * @param serverTelemetryManager
          * @param authorityUrl
          */
-        async createAuthCodeClient(serverTelemetryManager, authorityUrl, requestAzureCloudOptions) {
+        async createAuthCodeClient(serverTelemetryManager, authorityUrl, requestAzureCloudOptions, account) {
             this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.correlationId);
             // Create auth module.
-            const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, requestAzureCloudOptions);
+            const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, requestAzureCloudOptions, account);
             return new AuthorizationCodeClient(clientConfig, this.performanceClient);
         }
         /**
@@ -12849,9 +12412,9 @@
          * @param requestAuthority
          * @param requestCorrelationId
          */
-        async getClientConfiguration(serverTelemetryManager, requestAuthority, requestAzureCloudOptions) {
+        async getClientConfiguration(serverTelemetryManager, requestAuthority, requestAzureCloudOptions, account) {
             this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.correlationId);
-            const discoveredAuthority = await invokeAsync(this.getDiscoveredAuthority.bind(this), PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.logger, this.performanceClient, this.correlationId)(requestAuthority, requestAzureCloudOptions);
+            const discoveredAuthority = await invokeAsync(this.getDiscoveredAuthority.bind(this), PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.logger, this.performanceClient, this.correlationId)(requestAuthority, requestAzureCloudOptions, account);
             const logger = this.config.system.loggerOptions;
             return {
                 authOptions: {
@@ -12885,29 +12448,6 @@
                 telemetry: this.config.telemetry,
             };
         }
-        /**
-         * Used to get a discovered version of the default authority.
-         * @param requestAuthority
-         * @param requestCorrelationId
-         */
-        async getDiscoveredAuthority(requestAuthority, requestAzureCloudOptions) {
-            this.performanceClient.addQueueMeasurement(PerformanceEvents.StandardInteractionClientGetDiscoveredAuthority, this.correlationId);
-            const authorityOptions = {
-                protocolMode: this.config.auth.protocolMode,
-                OIDCOptions: this.config.auth.OIDCOptions,
-                knownAuthorities: this.config.auth.knownAuthorities,
-                cloudDiscoveryMetadata: this.config.auth.cloudDiscoveryMetadata,
-                authorityMetadata: this.config.auth.authorityMetadata,
-                skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,
-            };
-            // build authority string based on auth params, precedence - azureCloudInstance + tenant >> authority
-            const userAuthority = requestAuthority
-                ? requestAuthority
-                : this.config.auth.authority;
-            // fall back to the authority from config
-            const builtAuthority = Authority.generateAuthority(userAuthority, requestAzureCloudOptions || this.config.auth.azureCloudOptions);
-            return invokeAsync(AuthorityFactory.createDiscoveredInstance.bind(AuthorityFactory), PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, this.logger, this.performanceClient, this.correlationId)(builtAuthority, this.config.system.networkClient, this.browserStorage, authorityOptions, this.logger, this.performanceClient, this.correlationId);
-        }
         /**
          * Helper to initialize required request parameters for interactive APIs and ssoSilent()
          * @param request
@@ -13039,7 +12579,7 @@
             this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentCacheClientAcquireToken, silentRequest.correlationId);
             // Telemetry manager only used to increment cacheHits here
             const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);
-            const silentAuthClient = await this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions);
+            const silentAuthClient = await this.createSilentFlowClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);
             this.logger.verbose("Silent auth client created");
             try {
                 const response = await invokeAsync(silentAuthClient.acquireCachedToken.bind(silentAuthClient), PerformanceEvents.SilentFlowClientAcquireCachedToken, this.logger, this.performanceClient, silentRequest.correlationId)(silentRequest);
@@ -13071,14 +12611,14 @@
          * @param serverTelemetryManager
          * @param authorityUrl
          */
-        async createSilentFlowClient(serverTelemetryManager, authorityUrl, azureCloudOptions) {
+        async createSilentFlowClient(serverTelemetryManager, authorityUrl, azureCloudOptions, account) {
             // Create auth module.
-            const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, azureCloudOptions);
+            const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, azureCloudOptions, account);
             return new SilentFlowClient(clientConfig, this.performanceClient);
         }
         async initializeSilentRequest(request, account) {
             this.performanceClient.addQueueMeasurement(PerformanceEvents.InitializeSilentRequest, this.correlationId);
-            const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, this.correlationId)(request, account);
+            const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, this.correlationId)(request);
             return {
                 ...request,
                 ...baseRequest,
@@ -13114,7 +12654,7 @@
             this.logger.trace("NativeInteractionClient - acquireToken called.");
             // start the perf measurement
             const nativeATMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);
-            const reqTimestamp = TimeUtils.nowSeconds();
+            const reqTimestamp = nowSeconds();
             // initialize native request
             const nativeRequest = await this.initializeNativeRequest(request);
             // check if the tokens can be retrieved from internal cache
@@ -13263,7 +12803,7 @@
                 method: NativeExtensionMethod.GetToken,
                 request: request,
             };
-            const reqTimestamp = TimeUtils.nowSeconds();
+            const reqTimestamp = nowSeconds();
             try {
                 this.logger.verbose("NativeInteractionClient - handleRedirectPromise sending message to native broker.");
                 const response = await this.nativeMessageHandler.sendMessage(messageBody);
@@ -13534,7 +13074,8 @@
             this.logger.trace("NativeInteractionClient - initializeNativeRequest called");
             const authority = request.authority || this.config.auth.authority;
             if (request.account) {
-                await this.validateRequestAuthority(authority, request.account);
+                // validate authority
+                await this.getDiscoveredAuthority(authority, request.azureCloudOptions, request.account);
             }
             const canonicalAuthority = new UrlString(authority);
             canonicalAuthority.validateAsUri();
@@ -14099,7 +13640,7 @@
                 // Create auth code request and generate PKCE params
                 const authCodeRequest = await invokeAsync(this.initializeAuthorizationCodeRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, this.logger, this.performanceClient, this.correlationId)(validRequest);
                 // Initialize the client
-                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions);
+                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions, validRequest.account);
                 const isNativeBroker = NativeMessageHandler.isNativeAvailable(this.config, this.logger, this.nativeMessageHandler, request.authenticationScheme);
                 // Start measurement for server calls with native brokering enabled
                 let fetchNativeAccountIdMeasurement;
@@ -14180,7 +13721,8 @@
                 // Clear cache on logout
                 await this.clearCacheOnLogout(validRequest.account);
                 // Initialize the client
-                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, requestAuthority);
+                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, requestAuthority, undefined, // AzureCloudOptions
+                validRequest.account || undefined);
                 try {
                     authClient.authority.endSessionEndpoint;
                 }
@@ -14612,7 +14154,7 @@
                 // Create auth code request and generate PKCE params
                 const authCodeRequest = await invokeAsync(this.initializeAuthorizationCodeRequest.bind(this), PerformanceEvents.StandardInteractionClientInitializeAuthorizationCodeRequest, this.logger, this.performanceClient, this.correlationId)(validRequest);
                 // Initialize the client
-                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions);
+                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, validRequest.authority, validRequest.azureCloudOptions, validRequest.account);
                 // Create redirect interaction handler.
                 const interactionHandler = new RedirectHandler(authClient, this.browserStorage, authCodeRequest, this.logger, this.performanceClient);
                 // Create acquire token url.
@@ -14830,7 +14372,8 @@
                     timeout: this.config.system.redirectNavigationTimeout,
                     noHistory: false,
                 };
-                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, logoutRequest && logoutRequest.authority);
+                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, logoutRequest && logoutRequest.authority, undefined, // AzureCloudOptions
+                (logoutRequest && logoutRequest.account) || undefined);
                 if (authClient.authority.protocolMode === ProtocolMode.OIDC) {
                     try {
                         authClient.authority.endSessionEndpoint;
@@ -15066,7 +14609,7 @@
             const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
             try {
                 // Initialize the client
-                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, request.correlationId)(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions);
+                const authClient = await invokeAsync(this.createAuthCodeClient.bind(this), PerformanceEvents.StandardInteractionClientCreateAuthCodeClient, this.logger, this.performanceClient, request.correlationId)(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);
                 return await invokeAsync(this.silentTokenHelper.bind(this), PerformanceEvents.SilentIframeClientTokenHelper, this.logger, this.performanceClient, request.correlationId)(authClient, silentRequest);
             }
             catch (e) {
@@ -15137,7 +14680,7 @@
          */
         async acquireToken(request) {
             this.performanceClient.addQueueMeasurement(PerformanceEvents.SilentRefreshClientAcquireToken, request.correlationId);
-            const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, request.correlationId)(request, request.account);
+            const baseRequest = await invokeAsync(this.initializeBaseRequest.bind(this), PerformanceEvents.InitializeBaseRequest, this.logger, this.performanceClient, request.correlationId)(request);
             const silentRequest = {
                 ...request,
                 ...baseRequest,
@@ -15147,7 +14690,7 @@
                 silentRequest.redirectUri = this.getRedirectUri(request.redirectUri);
             }
             const serverTelemetryManager = this.initializeServerTelemetryManager(ApiId.acquireTokenSilent_silentFlow);
-            const refreshTokenClient = await this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions);
+            const refreshTokenClient = await this.createRefreshTokenClient(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);
             // Send request to renew token. Auth module will throw errors if token cannot be renewed.
             return invokeAsync(refreshTokenClient.acquireTokenByRefreshToken.bind(refreshTokenClient), PerformanceEvents.RefreshTokenClientAcquireTokenByRefreshToken, this.logger, this.performanceClient, request.correlationId)(silentRequest).catch((e) => {
                 e.setCorrelationId(this.correlationId);
@@ -15167,9 +14710,9 @@
          * @param serverTelemetryManager
          * @param authorityUrl
          */
-        async createRefreshTokenClient(serverTelemetryManager, authorityUrl, azureCloudOptions) {
+        async createRefreshTokenClient(serverTelemetryManager, authorityUrl, azureCloudOptions, account) {
             // Create auth module.
-            const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, azureCloudOptions);
+            const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, this.correlationId)(serverTelemetryManager, authorityUrl, azureCloudOptions, account);
             return new RefreshTokenClient(clientConfig, this.performanceClient);
         }
     }
@@ -15219,7 +14762,7 @@
                     authorityMetadata: this.config.auth.authorityMetadata,
                     skipAuthorityMetadataCache: this.config.auth.skipAuthorityMetadataCache,
                 };
-                authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions, this.logger);
+                authority = new Authority(authorityUrl, this.config.system.networkClient, this.storage, authorityOptions, this.logger, request.correlationId || createNewGuid());
                 // "clientInfo" from options takes precedence over "clientInfo" in response
                 if (options.clientInfo) {
                     this.logger.trace("TokenCache - homeAccountId from options");
@@ -15436,7 +14979,7 @@
                     code: request.code,
                 };
                 // Initialize the client
-                const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, request.correlationId)(serverTelemetryManager, silentRequest.authority);
+                const clientConfig = await invokeAsync(this.getClientConfiguration.bind(this), PerformanceEvents.StandardInteractionClientGetClientConfiguration, this.logger, this.performanceClient, request.correlationId)(serverTelemetryManager, silentRequest.authority, silentRequest.azureCloudOptions, silentRequest.account);
                 const authClient = new HybridSpaAuthorizationCodeClient(clientConfig);
                 this.logger.verbose("Auth code client created");
                 // Create silent handler
@@ -16652,13 +16195,19 @@
                     throw error;
                 });
                 this.activeSilentTokenRequests.set(silentRequestKey, response);
-                return response;
+                return {
+                    ...(await response),
+                    state: request.state,
+                };
             }
             else {
                 this.logger.verbose("acquireTokenSilent has been called previously, returning the result from the first call", correlationId);
                 // Discard measurements for memoized calls, as they are usually only a couple of ms and will artificially deflate metrics
                 atsMeasurement.discard();
-                return cachedResponse;
+                return {
+                    ...(await cachedResponse),
+                    state: request.state,
+                };
             }
         }
         /**
@@ -18466,7 +18015,7 @@
             atPopupMeasurement?.add({ nestedAppAuthRequest: true });
             try {
                 const naaRequest = this.nestedAppAuthAdapter.toNaaTokenRequest(request);
-                const reqTimestamp = TimeUtils.nowSeconds();
+                const reqTimestamp = nowSeconds();
                 const response = await this.bridgeProxy.getTokenInteractive(naaRequest);
                 const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
                 this.operatingContext.setActiveAccount(result.account);
@@ -18503,7 +18052,7 @@
             });
             try {
                 const naaRequest = this.nestedAppAuthAdapter.toNaaTokenRequest(request);
-                const reqTimestamp = TimeUtils.nowSeconds();
+                const reqTimestamp = nowSeconds();
                 const response = await this.bridgeProxy.getTokenSilent(naaRequest);
                 const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
                 this.operatingContext.setActiveAccount(result.account);