@azure/msal-browser 4.0.1 → 4.0.2

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v4.0.1 2025-01-15 */
+/*! @azure/msal-browser v4.0.2 2025-01-22 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -306,7 +306,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -323,7 +323,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -372,7 +372,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -470,7 +470,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -722,7 +722,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -761,7 +761,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -952,12 +952,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "15.0.1";
+const version$1 = "15.0.2";
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -977,7 +977,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1038,7 +1038,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1075,7 +1075,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1402,7 +1402,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1456,7 +1456,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1594,7 +1594,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1691,7 +1691,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1711,8 +1711,10 @@ class ScopeSet {
         const filteredInput = scopeArr
             ? StringUtils.removeEmptyStringsFromArray(scopeArr)
             : [];
-        // Validate and filter scopes (validate function throws if validation fails)
-        this.validateInputScopes(filteredInput);
+        // Check if scopes array has at least one member
+        if (!filteredInput || !filteredInput.length) {
+            throw createClientConfigurationError(emptyInputScopesError);
+        }
         this.scopes = new Set(); // Iterator in constructor not supported by IE11
         filteredInput.forEach((scope) => this.scopes.add(scope));
     }
@@ -1742,17 +1744,6 @@ class ScopeSet {
         }
         return scopeSet;
     }
-    /**
-     * Used to validate the scopes input parameter requested  by the developer.
-     * @param {Array<string>} inputScopes - Developer requested permissions. Not all scopes are guaranteed to be included in the access token returned.
-     * @param {boolean} scopesRequired - Boolean indicating whether the scopes array is required or not
-     */
-    validateInputScopes(inputScopes) {
-        // Check if scopes are required but not given or is an empty array
-        if (!inputScopes || inputScopes.length < 1) {
-            throw createClientConfigurationError(emptyInputScopesError);
-        }
-    }
     /**
      * Check if a given scope is present in this set of scopes.
      * @param scope
@@ -1891,7 +1882,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1931,7 +1922,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2010,7 +2001,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2025,7 +2016,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2047,7 +2038,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2060,7 +2051,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2303,7 +2294,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2350,7 +2341,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2514,7 +2505,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2654,7 +2645,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2662,7 +2653,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
 const cacheUnknownErrorCode = "cache_error_unknown";
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2689,7 +2680,7 @@ class CacheError extends Error {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3874,7 +3865,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3973,7 +3964,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3983,7 +3974,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4033,7 +4024,7 @@ const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 const BROKER_CLIENT_ID = "brk_client_id";
 const BROKER_REDIRECT_URI = "brk_redirect_uri";
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4100,7 +4091,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4508,7 +4499,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4520,7 +4511,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4530,7 +4521,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4540,7 +4531,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5047,7 +5038,7 @@ const IntFields = new Set([
     "encryptedCacheExpiredCount",
 ]);
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5143,7 +5134,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5252,7 +5243,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6091,7 +6082,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6122,7 +6113,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6141,7 +6132,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6239,7 +6230,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6269,7 +6260,7 @@ function createNetworkError(error, httpStatus, responseHeaders) {
     return new NetworkError(error, httpStatus, responseHeaders);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6419,7 +6410,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6445,7 +6436,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6533,7 +6524,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6605,7 +6596,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6689,7 +6680,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6716,7 +6707,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7093,7 +7084,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7111,7 +7102,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7553,7 +7544,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7773,7 +7764,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7909,7 +7900,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7924,7 +7915,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7982,7 +7973,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8245,7 +8236,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8253,7 +8244,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8278,7 +8269,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8318,7 +8309,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8397,7 +8388,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v15.0.1 2025-01-15 */
+/*! @azure/msal-common v15.0.2 2025-01-22 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10434,7 +10425,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "4.0.1";
+const version = "4.0.2";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11739,36 +11730,14 @@ class BrowserCacheManager extends CacheManager {
         this.cacheConfig = cacheConfig;
         this.logger = logger;
         this.internalStorage = new MemoryStorage();
-        this.browserStorage = this.setupBrowserStorage(this.cacheConfig.cacheLocation);
-        this.temporaryCacheStorage = this.setupBrowserStorage(this.cacheConfig.temporaryCacheLocation);
+        this.browserStorage = getStorageImplementation(clientId, cacheConfig.cacheLocation, logger, performanceClient);
+        this.temporaryCacheStorage = getStorageImplementation(clientId, cacheConfig.temporaryCacheLocation, logger, performanceClient);
         this.cookieStorage = new CookieStorage();
         this.performanceClient = performanceClient;
     }
     async initialize(correlationId) {
         await this.browserStorage.initialize(correlationId);
     }
-    /**
-     * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
-     * @param cacheLocation
-     */
-    setupBrowserStorage(cacheLocation) {
-        try {
-            switch (cacheLocation) {
-                case BrowserCacheLocation.LocalStorage:
-                    return new LocalStorage(this.clientId, this.logger, this.performanceClient);
-                case BrowserCacheLocation.SessionStorage:
-                    return new SessionStorage();
-                case BrowserCacheLocation.MemoryStorage:
-                default:
-                    break;
-            }
-        }
-        catch (e) {
-            this.logger.error(e);
-        }
-        this.cacheConfig.cacheLocation = BrowserCacheLocation.MemoryStorage;
-        return new MemoryStorage();
-    }
     /**
      * Parses passed value as JSON object, JSON.parse() will throw an error.
      * @param input
@@ -12661,6 +12630,27 @@ class BrowserCacheManager extends CacheManager {
         }
     }
 }
+/**
+ * Returns a window storage class implementing the IWindowStorage interface that corresponds to the configured cacheLocation.
+ * @param cacheLocation
+ */
+function getStorageImplementation(clientId, cacheLocation, logger, performanceClient) {
+    try {
+        switch (cacheLocation) {
+            case BrowserCacheLocation.LocalStorage:
+                return new LocalStorage(clientId, logger, performanceClient);
+            case BrowserCacheLocation.SessionStorage:
+                return new SessionStorage();
+            case BrowserCacheLocation.MemoryStorage:
+            default:
+                break;
+        }
+    }
+    catch (e) {
+        logger.error(e);
+    }
+    return new MemoryStorage();
+}
 const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient) => {
     const cacheOptions = {
         cacheLocation: BrowserCacheLocation.MemoryStorage,
@@ -13476,7 +13466,6 @@ class NativeInteractionClient extends BaseInteractionClient {
         this.nativeMessageHandler = provider;
         this.nativeStorageManager = nativeStorageImpl;
         this.silentCacheClient = new SilentCacheClient(config, this.nativeStorageManager, browserCrypto, logger, eventHandler, navigationClient, performanceClient, provider, correlationId);
-        this.serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
         const extensionName = this.nativeMessageHandler.getExtensionId() ===
             NativeConstants.PREFERRED_EXTENSION_ID
             ? "chrome"
@@ -13511,6 +13500,7 @@ class NativeInteractionClient extends BaseInteractionClient {
         // start the perf measurement
         const nativeATMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.NativeInteractionClientAcquireToken, request.correlationId);
         const reqTimestamp = nowSeconds();
+        const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
         try {
             // initialize native request
             const nativeRequest = await this.initializeNativeRequest(request);
@@ -13543,7 +13533,7 @@ class NativeInteractionClient extends BaseInteractionClient {
                     isNativeBroker: true,
                     requestId: result.requestId,
                 });
-                this.serverTelemetryManager.clearNativeBrokerErrorCode();
+                serverTelemetryManager.clearNativeBrokerErrorCode();
                 return result;
             })
                 .catch((error) => {
@@ -13558,7 +13548,7 @@ class NativeInteractionClient extends BaseInteractionClient {
         }
         catch (e) {
             if (e instanceof NativeAuthError) {
-                this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
+                serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
             }
             throw e;
         }
@@ -13635,7 +13625,8 @@ class NativeInteractionClient extends BaseInteractionClient {
         catch (e) {
             // Only throw fatal errors here to allow application to fallback to regular redirect. Otherwise proceed and the error will be thrown in handleRedirectPromise
             if (e instanceof NativeAuthError) {
-                this.serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
+                const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
+                serverTelemetryManager.setNativeBrokerErrorCode(e.errorCode);
                 if (isFatalNativeAuthError(e)) {
                     throw e;
                 }
@@ -13690,7 +13681,8 @@ class NativeInteractionClient extends BaseInteractionClient {
             const result = this.handleNativeResponse(response, request, reqTimestamp);
             this.browserStorage.setInteractionInProgress(false);
             const res = await result;
-            this.serverTelemetryManager.clearNativeBrokerErrorCode();
+            const serverTelemetryManager = this.initializeServerTelemetryManager(this.apiId);
+            serverTelemetryManager.clearNativeBrokerErrorCode();
             return res;
         }
         catch (e) {
@@ -17629,10 +17621,7 @@ class NestedAppAuthController {
         this.nestedAppAuthAdapter = new NestedAppAuthAdapter(this.config.auth.clientId, this.config.auth.clientCapabilities, this.browserCrypto, this.logger);
         // Set the active account if available
         const accountContext = this.bridgeProxy.getAccountContext();
-        if (accountContext) {
-            const cachedAccount = getAccount(accountContext, this.logger, this.browserStorage);
-            setActiveAccount(cachedAccount, this.browserStorage);
-        }
+        this.currentAccountContext = accountContext ? accountContext : null;
     }
     /**
      * Factory function to create a new instance of NestedAppAuthController
@@ -17685,7 +17674,12 @@ class NestedAppAuthController {
             };
             // cache the tokens in the response
             await this.hydrateCache(result, request);
-            this.browserStorage.setActiveAccount(result.account);
+            // cache the account context in memory after successful token fetch
+            this.currentAccountContext = {
+                homeAccountId: result.account.homeAccountId,
+                environment: result.account.environment,
+                tenantId: result.account.tenantId,
+            };
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Popup, result);
             atPopupMeasurement.add({
                 accessTokenSize: result.accessToken.length,
@@ -17735,7 +17729,12 @@ class NestedAppAuthController {
             const result = this.nestedAppAuthAdapter.fromNaaTokenResponse(naaRequest, response, reqTimestamp);
             // cache the tokens in the response
             await this.hydrateCache(result, request);
-            this.browserStorage.setActiveAccount(result.account);
+            // cache the account context in memory after successful token fetch
+            this.currentAccountContext = {
+                homeAccountId: result.account.homeAccountId,
+                environment: result.account.environment,
+                tenantId: result.account.tenantId,
+            };
             this.eventHandler.emitEvent(EventType.ACQUIRE_TOKEN_SUCCESS, exports.InteractionType.Silent, result);
             ssoSilentMeasurement?.add({
                 accessTokenSize: result.accessToken.length,
@@ -17771,8 +17770,16 @@ class NestedAppAuthController {
             this.logger.verbose("Claims are present in the request, skipping cache lookup");
             return null;
         }
+        // if the request has forceRefresh, we cannot look up in the cache
+        if (request.forceRefresh) {
+            this.logger.verbose("forceRefresh is set to true, skipping cache lookup");
+            return null;
+        }
         // respect cache lookup policy
         let result = null;
+        if (!request.cacheLookupPolicy) {
+            request.cacheLookupPolicy = CacheLookupPolicy.Default;
+        }
         switch (request.cacheLookupPolicy) {
             case CacheLookupPolicy.Default:
             case CacheLookupPolicy.AccessToken:
@@ -17806,12 +17813,11 @@ class NestedAppAuthController {
      * @returns
      */
     async acquireTokenFromCacheInternal(request) {
-        const accountContext = this.bridgeProxy.getAccountContext();
+        // always prioritize the account context from the bridge
+        const accountContext = this.bridgeProxy.getAccountContext() || this.currentAccountContext;
         let currentAccount = null;
         if (accountContext) {
-            const hubAccount = getAccount(accountContext, this.logger, this.browserStorage);
-            // always prioritize for hub account context, the reqirement of `request.account` will be removed soon
-            currentAccount = hubAccount || request.account;
+            currentAccount = getAccount(accountContext, this.logger, this.browserStorage);
         }
         // fall back to brokering if no cached account is found
         if (!currentAccount) {
@@ -18455,7 +18461,9 @@ async function createNestablePublicClientApplication(configuration) {
     await nestedAppAuth.initialize();
     if (nestedAppAuth.isAvailable()) {
         const controller = new NestedAppAuthController(nestedAppAuth);
-        return new PublicClientApplication(configuration, controller);
+        const nestablePCA = new PublicClientApplication(configuration, controller);
+        await nestablePCA.initialize();
+        return nestablePCA;
     }
     return createStandardPublicClientApplication(configuration);
 }