@azure/msal-browser 4.0.2 → 4.2.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v4.0.2 2025-01-22 */
+/*! @azure/msal-browser v4.2.0 2025-02-05 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -306,7 +306,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -323,7 +323,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -372,7 +372,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -470,7 +470,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -722,7 +722,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -761,7 +761,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -952,12 +952,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "15.0.2";
+const version$1 = "15.1.1";
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -977,7 +977,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1038,7 +1038,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1075,7 +1075,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1402,7 +1402,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1456,7 +1456,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1594,7 +1594,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1691,7 +1691,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1882,7 +1882,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1922,7 +1922,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2001,7 +2001,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2016,7 +2016,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2038,7 +2038,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2051,7 +2051,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2294,7 +2294,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2341,7 +2341,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2505,7 +2505,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2645,7 +2645,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2653,7 +2653,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
 const cacheUnknownErrorCode = "cache_error_unknown";
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2680,7 +2680,7 @@ class CacheError extends Error {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3865,7 +3865,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3964,7 +3964,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3974,7 +3974,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4024,7 +4024,7 @@ const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 const BROKER_CLIENT_ID = "brk_client_id";
 const BROKER_REDIRECT_URI = "brk_redirect_uri";
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4091,7 +4091,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4499,7 +4499,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4511,7 +4511,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4521,7 +4521,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4531,7 +4531,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4769,6 +4769,7 @@ const PerformanceEvents = {
     CacheManagerGetRefreshToken: "cacheManagerGetRefreshToken",
     ImportExistingCache: "importExistingCache",
     SetUserData: "setUserData",
+    LocalStorageUpdated: "localStorageUpdated",
     /**
      * Crypto Operations
      */
@@ -4870,6 +4871,7 @@ const PerformanceEventAbbreviations = new Map([
     [PerformanceEvents.InitializeCache, "InitCache"],
     [PerformanceEvents.ImportExistingCache, "importCache"],
     [PerformanceEvents.SetUserData, "setUserData"],
+    [PerformanceEvents.LocalStorageUpdated, "localStorageUpdated"],
     [PerformanceEvents.SilentIframeClientTokenHelper, "SIClientTHelper"],
     [
         PerformanceEvents.SilentHandlerInitiateAuthRequest,
@@ -5038,7 +5040,7 @@ const IntFields = new Set([
     "encryptedCacheExpiredCount",
 ]);
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5134,7 +5136,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5243,7 +5245,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6082,7 +6084,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6113,7 +6115,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6132,7 +6134,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6230,7 +6232,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6260,7 +6262,7 @@ function createNetworkError(error, httpStatus, responseHeaders) {
     return new NetworkError(error, httpStatus, responseHeaders);
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6410,7 +6412,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6436,7 +6438,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6524,7 +6526,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6596,7 +6598,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6680,7 +6682,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6707,7 +6709,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7084,7 +7086,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7102,7 +7104,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7388,7 +7390,9 @@ class AuthorizationCodeClient extends BaseClient {
         }
         if (request.domainHint) {
             parameterBuilder.addDomainHint(request.domainHint);
+            this.performanceClient?.addFields({ domainHintFromRequest: true }, correlationId);
         }
+        this.performanceClient?.addFields({ prompt: request.prompt }, correlationId);
         // Add sid or loginHint with preference for login_hint claim (in request) -> sid -> loginHint (upn/email) -> username of AccountInfo object
         if (request.prompt !== PromptValue.SELECT_ACCOUNT) {
             // AAD will throw if prompt=select_account is passed with an account hint
@@ -7396,6 +7400,7 @@ class AuthorizationCodeClient extends BaseClient {
                 // SessionID is only used in silent calls
                 this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from request");
                 parameterBuilder.addSid(request.sid);
+                this.performanceClient?.addFields({ sidFromRequest: true }, correlationId);
             }
             else if (request.account) {
                 const accountSid = this.extractAccountSid(request.account);
@@ -7408,6 +7413,7 @@ class AuthorizationCodeClient extends BaseClient {
                 if (accountLoginHintClaim) {
                     this.logger.verbose("createAuthCodeUrlQueryString: login_hint claim present on account");
                     parameterBuilder.addLoginHint(accountLoginHintClaim);
+                    this.performanceClient?.addFields({ loginHintFromClaim: true }, correlationId);
                     try {
                         const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                         parameterBuilder.addCcsOid(clientInfo);
@@ -7423,6 +7429,7 @@ class AuthorizationCodeClient extends BaseClient {
                      */
                     this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from account");
                     parameterBuilder.addSid(accountSid);
+                    this.performanceClient?.addFields({ sidFromClaim: true }, correlationId);
                     try {
                         const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                         parameterBuilder.addCcsOid(clientInfo);
@@ -7435,11 +7442,13 @@ class AuthorizationCodeClient extends BaseClient {
                     this.logger.verbose("createAuthCodeUrlQueryString: Adding login_hint from request");
                     parameterBuilder.addLoginHint(request.loginHint);
                     parameterBuilder.addCcsUpn(request.loginHint);
+                    this.performanceClient?.addFields({ loginHintFromRequest: true }, correlationId);
                 }
                 else if (request.account.username) {
                     // Fallback to account username if provided
                     this.logger.verbose("createAuthCodeUrlQueryString: Adding login_hint from account");
                     parameterBuilder.addLoginHint(request.account.username);
+                    this.performanceClient?.addFields({ loginHintFromUpn: true }, correlationId);
                     try {
                         const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                         parameterBuilder.addCcsOid(clientInfo);
@@ -7453,6 +7462,7 @@ class AuthorizationCodeClient extends BaseClient {
                 this.logger.verbose("createAuthCodeUrlQueryString: No account, adding login_hint from request");
                 parameterBuilder.addLoginHint(request.loginHint);
                 parameterBuilder.addCcsUpn(request.loginHint);
+                this.performanceClient?.addFields({ loginHintFromRequest: true }, correlationId);
             }
         }
         else {
@@ -7544,7 +7554,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7624,6 +7634,7 @@ class RefreshTokenClient extends BaseClient {
         if (refreshToken.expiresOn &&
             isTokenExpired(refreshToken.expiresOn, request.refreshTokenExpirationOffsetSeconds ||
                 DEFAULT_REFRESH_TOKEN_EXPIRATION_OFFSET_SECONDS)) {
+            this.performanceClient?.addFields({ rtExpiresOnMs: Number(refreshToken.expiresOn) }, request.correlationId);
             throw createInteractionRequiredAuthError(refreshTokenExpired);
         }
         // attach cached RT size to the current measurement
@@ -7640,12 +7651,14 @@ class RefreshTokenClient extends BaseClient {
             return await invokeAsync(this.acquireToken.bind(this), PerformanceEvents.RefreshTokenClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(refreshTokenRequest);
         }
         catch (e) {
-            if (e instanceof InteractionRequiredAuthError &&
-                e.subError === badToken) {
-                // Remove bad refresh token from cache
-                this.logger.verbose("acquireTokenWithRefreshToken: bad refresh token, removing from cache");
-                const badRefreshTokenKey = generateCredentialKey(refreshToken);
-                this.cacheManager.removeRefreshToken(badRefreshTokenKey);
+            if (e instanceof InteractionRequiredAuthError) {
+                this.performanceClient?.addFields({ rtExpiresOnMs: Number(refreshToken.expiresOn) }, request.correlationId);
+                if (e.subError === badToken) {
+                    // Remove bad refresh token from cache
+                    this.logger.verbose("acquireTokenWithRefreshToken: bad refresh token, removing from cache");
+                    const badRefreshTokenKey = generateCredentialKey(refreshToken);
+                    this.cacheManager.removeRefreshToken(badRefreshTokenKey);
+                }
             }
             throw e;
         }
@@ -7764,7 +7777,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7775,44 +7788,6 @@ class SilentFlowClient extends BaseClient {
     constructor(configuration, performanceClient) {
         super(configuration, performanceClient);
     }
-    /**
-     * Retrieves a token from cache if it is still valid, or uses the cached refresh token to renew
-     * the given token and returns the renewed token
-     * @param request
-     */
-    async acquireToken(request) {
-        try {
-            const [authResponse, cacheOutcome] = await this.acquireCachedToken({
-                ...request,
-                scopes: request.scopes?.length
-                    ? request.scopes
-                    : [...OIDC_DEFAULT_SCOPES],
-            });
-            // if the token is not expired but must be refreshed; get a new one in the background
-            if (cacheOutcome === CacheOutcome.PROACTIVELY_REFRESHED) {
-                this.logger.info("SilentFlowClient:acquireCachedToken - Cached access token's refreshOn property has been exceeded'. It's not expired, but must be refreshed.");
-                // refresh the access token in the background
-                const refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
-                refreshTokenClient
-                    .acquireTokenByRefreshToken(request)
-                    .catch(() => {
-                    // do nothing, this is running in the background and no action is to be taken upon success or failure
-                });
-            }
-            // return the cached token
-            return authResponse;
-        }
-        catch (e) {
-            if (e instanceof ClientAuthError &&
-                e.errorCode === tokenRefreshRequired) {
-                const refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
-                return refreshTokenClient.acquireTokenByRefreshToken(request);
-            }
-            else {
-                throw e;
-            }
-        }
-    }
     /**
      * Retrieves token from cache or throws an error if it must be refreshed.
      * @param request
@@ -7900,7 +7875,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7915,7 +7890,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7973,7 +7948,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8236,7 +8211,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8244,7 +8219,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8269,7 +8244,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8309,7 +8284,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8388,7 +8363,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v15.0.2 2025-01-22 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10425,7 +10400,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "4.0.2";
+const version = "4.2.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11358,6 +11333,10 @@ function getSortedObjectString(obj) {
  */
 // Cookie life calculation (hours * minutes * seconds * ms)
 const COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
+const SameSiteOptions = {
+    Lax: "Lax",
+    None: "None",
+};
 class CookieStorage {
     initialize() {
         return Promise.resolve();
@@ -11378,13 +11357,14 @@ class CookieStorage {
     getUserData() {
         throw createClientAuthError(methodNotImplemented);
     }
-    setItem(key, value, cookieLifeDays, secure = true) {
-        let cookieStr = `${encodeURIComponent(key)}=${encodeURIComponent(value)};path=/;SameSite=Lax;`;
+    setItem(key, value, cookieLifeDays, secure = true, sameSite = SameSiteOptions.Lax) {
+        let cookieStr = `${encodeURIComponent(key)}=${encodeURIComponent(value)};path=/;SameSite=${sameSite};`;
         if (cookieLifeDays) {
             const expireTime = getCookieExpirationTime(cookieLifeDays);
             cookieStr += `expires=${expireTime};`;
         }
-        if (secure) {
+        if (secure || sameSite === SameSiteOptions.None) {
+            // SameSite None requires Secure flag
             cookieStr += "Secure;";
         }
         document.cookie = cookieStr;
@@ -11464,6 +11444,7 @@ function getTokenKeys(clientId, storage) {
  * Licensed under the MIT License.
  */
 const ENCRYPTION_KEY = "msal.cache.encryption";
+const BROADCAST_CHANNEL_NAME$1 = "msal.broadcast.cache";
 class LocalStorage {
     constructor(clientId, logger, performanceClient) {
         if (!window.localStorage) {
@@ -11474,6 +11455,7 @@ class LocalStorage {
         this.clientId = clientId;
         this.logger = logger;
         this.performanceClient = performanceClient;
+        this.broadcast = new BroadcastChannel(BROADCAST_CHANNEL_NAME$1);
     }
     async initialize(correlationId) {
         this.initialized = true;
@@ -11509,8 +11491,13 @@ class LocalStorage {
                 id: id,
                 key: keyStr,
             };
-            cookies.setItem(ENCRYPTION_KEY, JSON.stringify(cookieData));
+            cookies.setItem(ENCRYPTION_KEY, JSON.stringify(cookieData), 0, // Expiration - 0 means cookie will be cleared at the end of the browser session
+            true, // Secure flag
+            SameSiteOptions.None // SameSite must be None to support iframed apps
+            );
         }
+        // Register listener for cache updates in other tabs
+        this.broadcast.addEventListener("message", this.updateCache.bind(this));
     }
     getItem(key) {
         return window.localStorage.getItem(key);
@@ -11536,9 +11523,22 @@ class LocalStorage {
         };
         this.memoryStorage.setItem(key, value);
         this.setItem(key, JSON.stringify(encryptedData));
+        // Notify other frames to update their in-memory cache
+        this.broadcast.postMessage({
+            key: key,
+            value: value,
+            context: this.getContext(key),
+        });
     }
     removeItem(key) {
-        this.memoryStorage.removeItem(key);
+        if (this.memoryStorage.containsKey(key)) {
+            this.memoryStorage.removeItem(key);
+            this.broadcast.postMessage({
+                key: key,
+                value: null,
+                context: this.getContext(key),
+            });
+        }
         window.localStorage.removeItem(key);
     }
     getKeys() {
@@ -11655,6 +11655,34 @@ class LocalStorage {
         }
         return context;
     }
+    updateCache(event) {
+        this.logger.trace("Updating internal cache from broadcast event");
+        const perfMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.LocalStorageUpdated);
+        perfMeasurement.add({ isBackground: true });
+        const { key, value, context } = event.data;
+        if (!key) {
+            this.logger.error("Broadcast event missing key");
+            perfMeasurement.end({ success: false, errorCode: "noKey" });
+            return;
+        }
+        if (context && context !== this.clientId) {
+            this.logger.trace(`Ignoring broadcast event from clientId: ${context}`);
+            perfMeasurement.end({
+                success: false,
+                errorCode: "contextMismatch",
+            });
+            return;
+        }
+        if (!value) {
+            this.memoryStorage.removeItem(key);
+            this.logger.verbose("Removed item from internal cache");
+        }
+        else {
+            this.memoryStorage.setItem(key, value);
+            this.logger.verbose("Updated item in internal cache");
+        }
+        perfMeasurement.end({ success: true });
+    }
 }
 
 /*
@@ -11715,6 +11743,39 @@ function extractBrowserRequestState(browserCrypto, state) {
     }
 }
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+const EventType = {
+    INITIALIZE_START: "msal:initializeStart",
+    INITIALIZE_END: "msal:initializeEnd",
+    ACCOUNT_ADDED: "msal:accountAdded",
+    ACCOUNT_REMOVED: "msal:accountRemoved",
+    ACTIVE_ACCOUNT_CHANGED: "msal:activeAccountChanged",
+    LOGIN_START: "msal:loginStart",
+    LOGIN_SUCCESS: "msal:loginSuccess",
+    LOGIN_FAILURE: "msal:loginFailure",
+    ACQUIRE_TOKEN_START: "msal:acquireTokenStart",
+    ACQUIRE_TOKEN_SUCCESS: "msal:acquireTokenSuccess",
+    ACQUIRE_TOKEN_FAILURE: "msal:acquireTokenFailure",
+    ACQUIRE_TOKEN_NETWORK_START: "msal:acquireTokenFromNetworkStart",
+    SSO_SILENT_START: "msal:ssoSilentStart",
+    SSO_SILENT_SUCCESS: "msal:ssoSilentSuccess",
+    SSO_SILENT_FAILURE: "msal:ssoSilentFailure",
+    ACQUIRE_TOKEN_BY_CODE_START: "msal:acquireTokenByCodeStart",
+    ACQUIRE_TOKEN_BY_CODE_SUCCESS: "msal:acquireTokenByCodeSuccess",
+    ACQUIRE_TOKEN_BY_CODE_FAILURE: "msal:acquireTokenByCodeFailure",
+    HANDLE_REDIRECT_START: "msal:handleRedirectStart",
+    HANDLE_REDIRECT_END: "msal:handleRedirectEnd",
+    POPUP_OPENED: "msal:popupOpened",
+    LOGOUT_START: "msal:logoutStart",
+    LOGOUT_SUCCESS: "msal:logoutSuccess",
+    LOGOUT_FAILURE: "msal:logoutFailure",
+    LOGOUT_END: "msal:logoutEnd",
+    RESTORE_FROM_BFCACHE: "msal:restoreFromBFCache",
+};
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11725,7 +11786,7 @@ function extractBrowserRequestState(browserCrypto, state) {
  * parameters such as state and nonce, generally.
  */
 class BrowserCacheManager extends CacheManager {
-    constructor(clientId, cacheConfig, cryptoImpl, logger, performanceClient, staticAuthorityOptions) {
+    constructor(clientId, cacheConfig, cryptoImpl, logger, performanceClient, eventHandler, staticAuthorityOptions) {
         super(clientId, cryptoImpl, logger, staticAuthorityOptions);
         this.cacheConfig = cacheConfig;
         this.logger = logger;
@@ -11734,6 +11795,7 @@ class BrowserCacheManager extends CacheManager {
         this.temporaryCacheStorage = getStorageImplementation(clientId, cacheConfig.temporaryCacheLocation, logger, performanceClient);
         this.cookieStorage = new CookieStorage();
         this.performanceClient = performanceClient;
+        this.eventHandler = eventHandler;
     }
     async initialize(correlationId) {
         await this.browserStorage.initialize(correlationId);
@@ -11787,7 +11849,15 @@ class BrowserCacheManager extends CacheManager {
         this.logger.trace("BrowserCacheManager.setAccount called");
         const key = account.generateAccountKey();
         await invokeAsync(this.browserStorage.setUserData.bind(this.browserStorage), PerformanceEvents.SetUserData, this.logger, this.performanceClient)(key, JSON.stringify(account), correlationId);
-        this.addAccountKeyToMap(key);
+        const wasAdded = this.addAccountKeyToMap(key);
+        /**
+         * @deprecated - Remove this in next major version in favor of more consistent LOGIN event
+         */
+        if (this.cacheConfig.cacheLocation ===
+            BrowserCacheLocation.LocalStorage &&
+            wasAdded) {
+            this.eventHandler.emitEvent(EventType.ACCOUNT_ADDED, undefined, account.getAccountInfo());
+        }
     }
     /**
      * Returns the array of account keys currently cached
@@ -11809,9 +11879,11 @@ class BrowserCacheManager extends CacheManager {
             accountKeys.push(key);
             this.browserStorage.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
             this.logger.verbose("BrowserCacheManager.addAccountKeyToMap account key added");
+            return true;
         }
         else {
             this.logger.verbose("BrowserCacheManager.addAccountKeyToMap account key already exists in map");
+            return false;
         }
     }
     /**
@@ -11840,6 +11912,19 @@ class BrowserCacheManager extends CacheManager {
         void super.removeAccount(key);
         this.removeAccountKeyFromMap(key);
     }
+    /**
+     * Removes credentials associated with the provided account
+     * @param account
+     */
+    async removeAccountContext(account) {
+        await super.removeAccountContext(account);
+        /**
+         * @deprecated - Remove this in next major version in favor of more consistent LOGOUT event
+         */
+        if (this.cacheConfig.cacheLocation === BrowserCacheLocation.LocalStorage) {
+            this.eventHandler.emitEvent(EventType.ACCOUNT_REMOVED, undefined, account.getAccountInfo());
+        }
+    }
     /**
      * Removes given idToken from the cache and from the key map
      * @param key
@@ -12194,6 +12279,7 @@ class BrowserCacheManager extends CacheManager {
             this.logger.verbose("setActiveAccount: No account passed, active account not set");
             this.browserStorage.removeItem(activeAccountKey);
         }
+        this.eventHandler.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED);
     }
     /**
      * fetch throttling entity from the platform cache
@@ -12651,7 +12737,7 @@ function getStorageImplementation(clientId, cacheLocation, logger, performanceCl
     }
     return new MemoryStorage();
 }
-const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient) => {
+const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient, eventHandler) => {
     const cacheOptions = {
         cacheLocation: BrowserCacheLocation.MemoryStorage,
         temporaryCacheLocation: BrowserCacheLocation.MemoryStorage,
@@ -12660,7 +12746,7 @@ const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient) => {
         cacheMigrationEnabled: false,
         claimsBasedCachingEnabled: false,
     };
-    return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger, performanceClient);
+    return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger, performanceClient, eventHandler);
 };
 
 /*
@@ -12794,43 +12880,13 @@ function getActiveAccount(browserStorage) {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-const EventType = {
-    INITIALIZE_START: "msal:initializeStart",
-    INITIALIZE_END: "msal:initializeEnd",
-    ACCOUNT_ADDED: "msal:accountAdded",
-    ACCOUNT_REMOVED: "msal:accountRemoved",
-    ACTIVE_ACCOUNT_CHANGED: "msal:activeAccountChanged",
-    LOGIN_START: "msal:loginStart",
-    LOGIN_SUCCESS: "msal:loginSuccess",
-    LOGIN_FAILURE: "msal:loginFailure",
-    ACQUIRE_TOKEN_START: "msal:acquireTokenStart",
-    ACQUIRE_TOKEN_SUCCESS: "msal:acquireTokenSuccess",
-    ACQUIRE_TOKEN_FAILURE: "msal:acquireTokenFailure",
-    ACQUIRE_TOKEN_NETWORK_START: "msal:acquireTokenFromNetworkStart",
-    SSO_SILENT_START: "msal:ssoSilentStart",
-    SSO_SILENT_SUCCESS: "msal:ssoSilentSuccess",
-    SSO_SILENT_FAILURE: "msal:ssoSilentFailure",
-    ACQUIRE_TOKEN_BY_CODE_START: "msal:acquireTokenByCodeStart",
-    ACQUIRE_TOKEN_BY_CODE_SUCCESS: "msal:acquireTokenByCodeSuccess",
-    ACQUIRE_TOKEN_BY_CODE_FAILURE: "msal:acquireTokenByCodeFailure",
-    HANDLE_REDIRECT_START: "msal:handleRedirectStart",
-    HANDLE_REDIRECT_END: "msal:handleRedirectEnd",
-    POPUP_OPENED: "msal:popupOpened",
-    LOGOUT_START: "msal:logoutStart",
-    LOGOUT_SUCCESS: "msal:logoutSuccess",
-    LOGOUT_FAILURE: "msal:logoutFailure",
-    LOGOUT_END: "msal:logoutEnd",
-    RESTORE_FROM_BFCACHE: "msal:restoreFromBFCache",
-};
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
+const BROADCAST_CHANNEL_NAME = "msal.broadcast.event";
 class EventHandler {
     constructor(logger) {
         this.eventCallbacks = new Map();
         this.logger = logger || new Logger({});
+        this.broadcastChannel = new BroadcastChannel(BROADCAST_CHANNEL_NAME);
+        this.invokeCrossTabCallbacks = this.invokeCrossTabCallbacks.bind(this);
     }
     /**
      * Adds event callbacks to array
@@ -12867,23 +12923,59 @@ class EventHandler {
      * @param error
      */
     emitEvent(eventType, interactionType, payload, error) {
-        if (typeof window !== "undefined") {
-            const message = {
-                eventType: eventType,
-                interactionType: interactionType || null,
-                payload: payload || null,
-                error: error || null,
-                timestamp: Date.now(),
-            };
-            this.eventCallbacks.forEach(([callback, eventTypes], callbackId) => {
-                if (eventTypes.length === 0 ||
-                    eventTypes.includes(eventType)) {
-                    this.logger.verbose(`Emitting event to callback ${callbackId}: ${eventType}`);
-                    callback.apply(null, [message]);
-                }
-            });
+        const message = {
+            eventType: eventType,
+            interactionType: interactionType || null,
+            payload: payload || null,
+            error: error || null,
+            timestamp: Date.now(),
+        };
+        switch (eventType) {
+            case EventType.ACCOUNT_ADDED:
+            case EventType.ACCOUNT_REMOVED:
+            case EventType.ACTIVE_ACCOUNT_CHANGED:
+                // Send event to other open tabs / MSAL instances on same domain
+                this.broadcastChannel.postMessage(message);
+                break;
+            default:
+                // Emit event to callbacks registered in this instance
+                this.invokeCallbacks(message);
+                break;
         }
     }
+    /**
+     * Invoke registered callbacks
+     * @param message
+     */
+    invokeCallbacks(message) {
+        this.eventCallbacks.forEach(([callback, eventTypes], callbackId) => {
+            if (eventTypes.length === 0 ||
+                eventTypes.includes(message.eventType)) {
+                this.logger.verbose(`Emitting event to callback ${callbackId}: ${message.eventType}`);
+                callback.apply(null, [message]);
+            }
+        });
+    }
+    /**
+     * Wrapper around invokeCallbacks to handle broadcast events received from other tabs/instances
+     * @param event
+     */
+    invokeCrossTabCallbacks(event) {
+        const message = event.data;
+        this.invokeCallbacks(message);
+    }
+    /**
+     * Listen for events broadcasted from other tabs/instances
+     */
+    subscribeCrossTab() {
+        this.broadcastChannel.addEventListener("message", this.invokeCrossTabCallbacks);
+    }
+    /**
+     * Unsubscribe from broadcast events
+     */
+    unsubscribeCrossTab() {
+        this.broadcastChannel.removeEventListener("message", this.invokeCrossTabCallbacks);
+    }
 }
 
 /*
@@ -14501,6 +14593,7 @@ class PopupClient extends StandardInteractionClient {
                 popupWindowAttributes: request.popupWindowAttributes || {},
                 popupWindowParent: request.popupWindowParent ?? window,
             };
+            this.performanceClient.addFields({ isAsyncPopup: this.config.system.asyncPopups }, this.correlationId);
             // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.
             if (this.config.system.asyncPopups) {
                 this.logger.verbose("asyncPopups set to true, acquiring token");
@@ -16055,8 +16148,8 @@ class StandardController {
         this.eventHandler = new EventHandler(this.logger);
         // Initialize the browser storage class.
         this.browserStorage = this.isBrowserEnvironment
-            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, buildStaticAuthorityOptions(this.config.auth))
-            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient);
+            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler, buildStaticAuthorityOptions(this.config.auth))
+            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient, this.eventHandler);
         // initialize in memory storage for native flows
         const nativeCacheOptions = {
             cacheLocation: BrowserCacheLocation.MemoryStorage,
@@ -16066,7 +16159,7 @@ class StandardController {
             cacheMigrationEnabled: false,
             claimsBasedCachingEnabled: false,
         };
-        this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger, this.performanceClient);
+        this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler);
         // Initialize the token cache
         this.tokenCache = new TokenCache(this.config, this.browserStorage, this.logger, this.browserCrypto);
         this.activeSilentTokenRequests = new Map();
@@ -16075,10 +16168,6 @@ class StandardController {
         // Register listener functions
         this.trackPageVisibilityWithMeasurement =
             this.trackPageVisibilityWithMeasurement.bind(this);
-        // account storage events
-        this.listeningToStorageEvents = false;
-        this.handleAccountCacheChange =
-            this.handleAccountCacheChange.bind(this);
     }
     static async createController(operatingContext, request) {
         const controller = new StandardController(operatingContext);
@@ -16977,70 +17066,27 @@ class StandardController {
     }
     /**
      * Adds event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window
+     * @deprecated These events will be raised by default and this method will be removed in a future major version.
      */
     enableAccountStorageEvents() {
-        if (typeof window === "undefined") {
+        if (this.config.cache.cacheLocation !==
+            BrowserCacheLocation.LocalStorage) {
+            this.logger.info("Account storage events are only available when cacheLocation is set to localStorage");
             return;
         }
-        if (!this.listeningToStorageEvents) {
-            this.logger.verbose("Adding account storage listener.");
-            this.listeningToStorageEvents = true;
-            window.addEventListener("storage", this.handleAccountCacheChange);
-        }
-        else {
-            this.logger.verbose("Account storage listener already registered.");
-        }
+        this.eventHandler.subscribeCrossTab();
     }
     /**
      * Removes event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window
+     * @deprecated These events will be raised by default and this method will be removed in a future major version.
      */
     disableAccountStorageEvents() {
-        if (typeof window === "undefined") {
-            return;
-        }
-        if (this.listeningToStorageEvents) {
-            this.logger.verbose("Removing account storage listener.");
-            window.removeEventListener("storage", this.handleAccountCacheChange);
-            this.listeningToStorageEvents = false;
-        }
-        else {
-            this.logger.verbose("No account storage listener registered.");
-        }
-    }
-    /**
-     * Emit account added/removed events when cached accounts are changed in a different tab or frame
-     */
-    handleAccountCacheChange(e) {
-        try {
-            // Handle active account filter change
-            if (e.key?.includes(PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS)) {
-                // This event has no payload, it only signals cross-tab app instances that the results of calling getActiveAccount() will have changed
-                this.eventHandler.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED);
-            }
-            // Handle account object change
-            const cacheValue = e.newValue || e.oldValue;
-            if (!cacheValue) {
-                return;
-            }
-            const parsedValue = JSON.parse(cacheValue);
-            if (typeof parsedValue !== "object" ||
-                !AccountEntity.isAccountEntity(parsedValue)) {
-                return;
-            }
-            const accountEntity = CacheManager.toObject(new AccountEntity(), parsedValue);
-            const accountInfo = accountEntity.getAccountInfo();
-            if (!e.oldValue && e.newValue) {
-                this.logger.info("Account was added to cache in a different window");
-                this.eventHandler.emitEvent(EventType.ACCOUNT_ADDED, undefined, accountInfo);
-            }
-            else if (!e.newValue && e.oldValue) {
-                this.logger.info("Account was removed from cache in a different window");
-                this.eventHandler.emitEvent(EventType.ACCOUNT_REMOVED, undefined, accountInfo);
-            }
-        }
-        catch (e) {
+        if (this.config.cache.cacheLocation !==
+            BrowserCacheLocation.LocalStorage) {
+            this.logger.info("Account storage events are only available when cacheLocation is set to localStorage");
             return;
         }
+        this.eventHandler.unsubscribeCrossTab();
     }
     /**
      * Gets the token cache for the application.
@@ -17613,11 +17659,11 @@ class NestedAppAuthController {
         this.browserCrypto = operatingContext.isBrowserEnvironment()
             ? new CryptoOps(this.logger, this.performanceClient, true)
             : DEFAULT_CRYPTO_IMPLEMENTATION;
+        this.eventHandler = new EventHandler(this.logger);
         // Initialize the browser storage class.
         this.browserStorage = this.operatingContext.isBrowserEnvironment()
-            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, buildStaticAuthorityOptions(this.config.auth))
-            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient);
-        this.eventHandler = new EventHandler(this.logger);
+            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler, buildStaticAuthorityOptions(this.config.auth))
+            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient, this.eventHandler);
         this.nestedAppAuthAdapter = new NestedAppAuthAdapter(this.config.auth.clientId, this.config.auth.clientCapabilities, this.browserCrypto, this.logger);
         // Set the active account if available
         const accountContext = this.bridgeProxy.getAccountContext();
@@ -18513,10 +18559,11 @@ class UnknownOperatingContextController {
         this.browserCrypto = this.isBrowserEnvironment
             ? new CryptoOps(this.logger, this.performanceClient)
             : DEFAULT_CRYPTO_IMPLEMENTATION;
+        this.eventHandler = new EventHandler(this.logger);
         // Initialize the browser storage class.
         this.browserStorage = this.isBrowserEnvironment
-            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, undefined)
-            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient);
+            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler, undefined)
+            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient, this.eventHandler);
     }
     getBrowserStorage() {
         return this.browserStorage;