@azure/msal-browser 4.0.2 → 4.2.0

package/lib/msal-browser.js

@@ -1,4 +1,4 @@
-/*! @azure/msal-browser v4.0.2 2025-01-22 */
+/*! @azure/msal-browser v4.2.0 2025-02-05 */
 'use strict';
 (function (global, factory) {
     typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :
@@ -6,7 +6,7 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.msal = {}));
 })(this, (function (exports) { 'use strict';
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -310,7 +310,7 @@
     // Token renewal offset default in seconds
     const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -327,7 +327,7 @@
         unexpectedError: unexpectedError
     });
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -376,7 +376,7 @@
             : AuthErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -474,7 +474,7 @@
         userTimeoutReached: userTimeoutReached
     });
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -726,7 +726,7 @@
         return new ClientAuthError(errorCode, additionalMessage);
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -765,7 +765,7 @@
         },
     };
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -956,12 +956,12 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /* eslint-disable header/header */
     const name$1 = "@azure/msal-common";
-    const version$1 = "15.0.2";
+    const version$1 = "15.1.1";
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -981,7 +981,7 @@
         AzureUsGovernment: "https://login.microsoftonline.us",
     };
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1042,7 +1042,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1079,7 +1079,7 @@
         return cachedAtSec > nowSeconds();
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1406,7 +1406,7 @@
         return metadata.expiresAt <= nowSeconds();
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1460,7 +1460,7 @@
         urlParseError: urlParseError
     });
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1598,7 +1598,7 @@
         return new ClientConfigurationError(errorCode);
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -1695,7 +1695,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1886,7 +1886,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1926,7 +1926,7 @@
         };
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2005,7 +2005,7 @@
         return updatedAccountInfo;
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2020,7 +2020,7 @@
         Ciam: 3,
     };
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2042,7 +2042,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2055,7 +2055,7 @@
         OIDC: "OIDC",
     };
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2298,7 +2298,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2345,7 +2345,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2509,7 +2509,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2649,7 +2649,7 @@
         return null;
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -2657,7 +2657,7 @@
     const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
     const cacheUnknownErrorCode = "cache_error_unknown";
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2684,7 +2684,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3869,7 +3869,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3968,7 +3968,7 @@
         return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -3978,7 +3978,7 @@
         UPN: "UPN",
     };
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4028,7 +4028,7 @@
     const BROKER_CLIENT_ID = "brk_client_id";
     const BROKER_REDIRECT_URI = "brk_redirect_uri";
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4095,7 +4095,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4503,7 +4503,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4515,7 +4515,7 @@
             response.hasOwnProperty("jwks_uri"));
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4525,7 +4525,7 @@
             response.hasOwnProperty("metadata"));
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4535,7 +4535,7 @@
             response.hasOwnProperty("error_description"));
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -4773,6 +4773,7 @@
         CacheManagerGetRefreshToken: "cacheManagerGetRefreshToken",
         ImportExistingCache: "importExistingCache",
         SetUserData: "setUserData",
+        LocalStorageUpdated: "localStorageUpdated",
         /**
          * Crypto Operations
          */
@@ -4874,6 +4875,7 @@
         [PerformanceEvents.InitializeCache, "InitCache"],
         [PerformanceEvents.ImportExistingCache, "importCache"],
         [PerformanceEvents.SetUserData, "setUserData"],
+        [PerformanceEvents.LocalStorageUpdated, "localStorageUpdated"],
         [PerformanceEvents.SilentIframeClientTokenHelper, "SIClientTHelper"],
         [
             PerformanceEvents.SilentHandlerInitiateAuthRequest,
@@ -5042,7 +5044,7 @@
         "encryptedCacheExpiredCount",
     ]);
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -5138,7 +5140,7 @@
         };
     };
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5247,7 +5249,7 @@
         },
     };
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6086,7 +6088,7 @@
         };
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6117,7 +6119,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6136,7 +6138,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6234,7 +6236,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6264,7 +6266,7 @@
         return new NetworkError(error, httpStatus, responseHeaders);
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6414,7 +6416,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6440,7 +6442,7 @@
         refreshTokenExpired: refreshTokenExpired
     });
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6528,7 +6530,7 @@
         return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6600,7 +6602,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6684,7 +6686,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -6711,7 +6713,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7088,7 +7090,7 @@
         return baseAccount;
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -7106,7 +7108,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7392,7 +7394,9 @@
             }
             if (request.domainHint) {
                 parameterBuilder.addDomainHint(request.domainHint);
+                this.performanceClient?.addFields({ domainHintFromRequest: true }, correlationId);
             }
+            this.performanceClient?.addFields({ prompt: request.prompt }, correlationId);
             // Add sid or loginHint with preference for login_hint claim (in request) -> sid -> loginHint (upn/email) -> username of AccountInfo object
             if (request.prompt !== PromptValue.SELECT_ACCOUNT) {
                 // AAD will throw if prompt=select_account is passed with an account hint
@@ -7400,6 +7404,7 @@
                     // SessionID is only used in silent calls
                     this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from request");
                     parameterBuilder.addSid(request.sid);
+                    this.performanceClient?.addFields({ sidFromRequest: true }, correlationId);
                 }
                 else if (request.account) {
                     const accountSid = this.extractAccountSid(request.account);
@@ -7412,6 +7417,7 @@
                     if (accountLoginHintClaim) {
                         this.logger.verbose("createAuthCodeUrlQueryString: login_hint claim present on account");
                         parameterBuilder.addLoginHint(accountLoginHintClaim);
+                        this.performanceClient?.addFields({ loginHintFromClaim: true }, correlationId);
                         try {
                             const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                             parameterBuilder.addCcsOid(clientInfo);
@@ -7427,6 +7433,7 @@
                          */
                         this.logger.verbose("createAuthCodeUrlQueryString: Prompt is none, adding sid from account");
                         parameterBuilder.addSid(accountSid);
+                        this.performanceClient?.addFields({ sidFromClaim: true }, correlationId);
                         try {
                             const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                             parameterBuilder.addCcsOid(clientInfo);
@@ -7439,11 +7446,13 @@
                         this.logger.verbose("createAuthCodeUrlQueryString: Adding login_hint from request");
                         parameterBuilder.addLoginHint(request.loginHint);
                         parameterBuilder.addCcsUpn(request.loginHint);
+                        this.performanceClient?.addFields({ loginHintFromRequest: true }, correlationId);
                     }
                     else if (request.account.username) {
                         // Fallback to account username if provided
                         this.logger.verbose("createAuthCodeUrlQueryString: Adding login_hint from account");
                         parameterBuilder.addLoginHint(request.account.username);
+                        this.performanceClient?.addFields({ loginHintFromUpn: true }, correlationId);
                         try {
                             const clientInfo = buildClientInfoFromHomeAccountId(request.account.homeAccountId);
                             parameterBuilder.addCcsOid(clientInfo);
@@ -7457,6 +7466,7 @@
                     this.logger.verbose("createAuthCodeUrlQueryString: No account, adding login_hint from request");
                     parameterBuilder.addLoginHint(request.loginHint);
                     parameterBuilder.addCcsUpn(request.loginHint);
+                    this.performanceClient?.addFields({ loginHintFromRequest: true }, correlationId);
                 }
             }
             else {
@@ -7548,7 +7558,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7628,6 +7638,7 @@
             if (refreshToken.expiresOn &&
                 isTokenExpired(refreshToken.expiresOn, request.refreshTokenExpirationOffsetSeconds ||
                     DEFAULT_REFRESH_TOKEN_EXPIRATION_OFFSET_SECONDS)) {
+                this.performanceClient?.addFields({ rtExpiresOnMs: Number(refreshToken.expiresOn) }, request.correlationId);
                 throw createInteractionRequiredAuthError(refreshTokenExpired);
             }
             // attach cached RT size to the current measurement
@@ -7644,12 +7655,14 @@
                 return await invokeAsync(this.acquireToken.bind(this), PerformanceEvents.RefreshTokenClientAcquireToken, this.logger, this.performanceClient, request.correlationId)(refreshTokenRequest);
             }
             catch (e) {
-                if (e instanceof InteractionRequiredAuthError &&
-                    e.subError === badToken) {
-                    // Remove bad refresh token from cache
-                    this.logger.verbose("acquireTokenWithRefreshToken: bad refresh token, removing from cache");
-                    const badRefreshTokenKey = generateCredentialKey(refreshToken);
-                    this.cacheManager.removeRefreshToken(badRefreshTokenKey);
+                if (e instanceof InteractionRequiredAuthError) {
+                    this.performanceClient?.addFields({ rtExpiresOnMs: Number(refreshToken.expiresOn) }, request.correlationId);
+                    if (e.subError === badToken) {
+                        // Remove bad refresh token from cache
+                        this.logger.verbose("acquireTokenWithRefreshToken: bad refresh token, removing from cache");
+                        const badRefreshTokenKey = generateCredentialKey(refreshToken);
+                        this.cacheManager.removeRefreshToken(badRefreshTokenKey);
+                    }
                 }
                 throw e;
             }
@@ -7768,7 +7781,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7779,44 +7792,6 @@
         constructor(configuration, performanceClient) {
             super(configuration, performanceClient);
         }
-        /**
-         * Retrieves a token from cache if it is still valid, or uses the cached refresh token to renew
-         * the given token and returns the renewed token
-         * @param request
-         */
-        async acquireToken(request) {
-            try {
-                const [authResponse, cacheOutcome] = await this.acquireCachedToken({
-                    ...request,
-                    scopes: request.scopes?.length
-                        ? request.scopes
-                        : [...OIDC_DEFAULT_SCOPES],
-                });
-                // if the token is not expired but must be refreshed; get a new one in the background
-                if (cacheOutcome === CacheOutcome.PROACTIVELY_REFRESHED) {
-                    this.logger.info("SilentFlowClient:acquireCachedToken - Cached access token's refreshOn property has been exceeded'. It's not expired, but must be refreshed.");
-                    // refresh the access token in the background
-                    const refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
-                    refreshTokenClient
-                        .acquireTokenByRefreshToken(request)
-                        .catch(() => {
-                        // do nothing, this is running in the background and no action is to be taken upon success or failure
-                    });
-                }
-                // return the cached token
-                return authResponse;
-            }
-            catch (e) {
-                if (e instanceof ClientAuthError &&
-                    e.errorCode === tokenRefreshRequired) {
-                    const refreshTokenClient = new RefreshTokenClient(this.config, this.performanceClient);
-                    return refreshTokenClient.acquireTokenByRefreshToken(request);
-                }
-                else {
-                    throw e;
-                }
-            }
-        }
         /**
          * Retrieves token from cache or throws an error if it must be refreshed.
          * @param request
@@ -7904,7 +7879,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7919,7 +7894,7 @@
         },
     };
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7977,7 +7952,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8240,7 +8215,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -8248,7 +8223,7 @@
     const missingKidError = "missing_kid_error";
     const missingAlgError = "missing_alg_error";
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8273,7 +8248,7 @@
         return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8313,7 +8288,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8392,7 +8367,7 @@
         }
     }
 
-    /*! @azure/msal-common v15.0.2 2025-01-22 */
+    /*! @azure/msal-common v15.1.1 2025-02-05 */
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10429,7 +10404,7 @@
 
     /* eslint-disable header/header */
     const name = "@azure/msal-browser";
-    const version = "4.0.2";
+    const version = "4.2.0";
 
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11362,6 +11337,10 @@
      */
     // Cookie life calculation (hours * minutes * seconds * ms)
     const COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
+    const SameSiteOptions = {
+        Lax: "Lax",
+        None: "None",
+    };
     class CookieStorage {
         initialize() {
             return Promise.resolve();
@@ -11382,13 +11361,14 @@
         getUserData() {
             throw createClientAuthError(methodNotImplemented);
         }
-        setItem(key, value, cookieLifeDays, secure = true) {
-            let cookieStr = `${encodeURIComponent(key)}=${encodeURIComponent(value)};path=/;SameSite=Lax;`;
+        setItem(key, value, cookieLifeDays, secure = true, sameSite = SameSiteOptions.Lax) {
+            let cookieStr = `${encodeURIComponent(key)}=${encodeURIComponent(value)};path=/;SameSite=${sameSite};`;
             if (cookieLifeDays) {
                 const expireTime = getCookieExpirationTime(cookieLifeDays);
                 cookieStr += `expires=${expireTime};`;
             }
-            if (secure) {
+            if (secure || sameSite === SameSiteOptions.None) {
+                // SameSite None requires Secure flag
                 cookieStr += "Secure;";
             }
             document.cookie = cookieStr;
@@ -11468,6 +11448,7 @@
      * Licensed under the MIT License.
      */
     const ENCRYPTION_KEY = "msal.cache.encryption";
+    const BROADCAST_CHANNEL_NAME$1 = "msal.broadcast.cache";
     class LocalStorage {
         constructor(clientId, logger, performanceClient) {
             if (!window.localStorage) {
@@ -11478,6 +11459,7 @@
             this.clientId = clientId;
             this.logger = logger;
             this.performanceClient = performanceClient;
+            this.broadcast = new BroadcastChannel(BROADCAST_CHANNEL_NAME$1);
         }
         async initialize(correlationId) {
             this.initialized = true;
@@ -11513,8 +11495,13 @@
                     id: id,
                     key: keyStr,
                 };
-                cookies.setItem(ENCRYPTION_KEY, JSON.stringify(cookieData));
+                cookies.setItem(ENCRYPTION_KEY, JSON.stringify(cookieData), 0, // Expiration - 0 means cookie will be cleared at the end of the browser session
+                true, // Secure flag
+                SameSiteOptions.None // SameSite must be None to support iframed apps
+                );
             }
+            // Register listener for cache updates in other tabs
+            this.broadcast.addEventListener("message", this.updateCache.bind(this));
         }
         getItem(key) {
             return window.localStorage.getItem(key);
@@ -11540,9 +11527,22 @@
             };
             this.memoryStorage.setItem(key, value);
             this.setItem(key, JSON.stringify(encryptedData));
+            // Notify other frames to update their in-memory cache
+            this.broadcast.postMessage({
+                key: key,
+                value: value,
+                context: this.getContext(key),
+            });
         }
         removeItem(key) {
-            this.memoryStorage.removeItem(key);
+            if (this.memoryStorage.containsKey(key)) {
+                this.memoryStorage.removeItem(key);
+                this.broadcast.postMessage({
+                    key: key,
+                    value: null,
+                    context: this.getContext(key),
+                });
+            }
             window.localStorage.removeItem(key);
         }
         getKeys() {
@@ -11659,6 +11659,34 @@
             }
             return context;
         }
+        updateCache(event) {
+            this.logger.trace("Updating internal cache from broadcast event");
+            const perfMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.LocalStorageUpdated);
+            perfMeasurement.add({ isBackground: true });
+            const { key, value, context } = event.data;
+            if (!key) {
+                this.logger.error("Broadcast event missing key");
+                perfMeasurement.end({ success: false, errorCode: "noKey" });
+                return;
+            }
+            if (context && context !== this.clientId) {
+                this.logger.trace(`Ignoring broadcast event from clientId: ${context}`);
+                perfMeasurement.end({
+                    success: false,
+                    errorCode: "contextMismatch",
+                });
+                return;
+            }
+            if (!value) {
+                this.memoryStorage.removeItem(key);
+                this.logger.verbose("Removed item from internal cache");
+            }
+            else {
+                this.memoryStorage.setItem(key, value);
+                this.logger.verbose("Updated item in internal cache");
+            }
+            perfMeasurement.end({ success: true });
+        }
     }
 
     /*
@@ -11719,6 +11747,39 @@
         }
     }
 
+    /*
+     * Copyright (c) Microsoft Corporation. All rights reserved.
+     * Licensed under the MIT License.
+     */
+    const EventType = {
+        INITIALIZE_START: "msal:initializeStart",
+        INITIALIZE_END: "msal:initializeEnd",
+        ACCOUNT_ADDED: "msal:accountAdded",
+        ACCOUNT_REMOVED: "msal:accountRemoved",
+        ACTIVE_ACCOUNT_CHANGED: "msal:activeAccountChanged",
+        LOGIN_START: "msal:loginStart",
+        LOGIN_SUCCESS: "msal:loginSuccess",
+        LOGIN_FAILURE: "msal:loginFailure",
+        ACQUIRE_TOKEN_START: "msal:acquireTokenStart",
+        ACQUIRE_TOKEN_SUCCESS: "msal:acquireTokenSuccess",
+        ACQUIRE_TOKEN_FAILURE: "msal:acquireTokenFailure",
+        ACQUIRE_TOKEN_NETWORK_START: "msal:acquireTokenFromNetworkStart",
+        SSO_SILENT_START: "msal:ssoSilentStart",
+        SSO_SILENT_SUCCESS: "msal:ssoSilentSuccess",
+        SSO_SILENT_FAILURE: "msal:ssoSilentFailure",
+        ACQUIRE_TOKEN_BY_CODE_START: "msal:acquireTokenByCodeStart",
+        ACQUIRE_TOKEN_BY_CODE_SUCCESS: "msal:acquireTokenByCodeSuccess",
+        ACQUIRE_TOKEN_BY_CODE_FAILURE: "msal:acquireTokenByCodeFailure",
+        HANDLE_REDIRECT_START: "msal:handleRedirectStart",
+        HANDLE_REDIRECT_END: "msal:handleRedirectEnd",
+        POPUP_OPENED: "msal:popupOpened",
+        LOGOUT_START: "msal:logoutStart",
+        LOGOUT_SUCCESS: "msal:logoutSuccess",
+        LOGOUT_FAILURE: "msal:logoutFailure",
+        LOGOUT_END: "msal:logoutEnd",
+        RESTORE_FROM_BFCACHE: "msal:restoreFromBFCache",
+    };
+
     /*
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
@@ -11729,7 +11790,7 @@
      * parameters such as state and nonce, generally.
      */
     class BrowserCacheManager extends CacheManager {
-        constructor(clientId, cacheConfig, cryptoImpl, logger, performanceClient, staticAuthorityOptions) {
+        constructor(clientId, cacheConfig, cryptoImpl, logger, performanceClient, eventHandler, staticAuthorityOptions) {
             super(clientId, cryptoImpl, logger, staticAuthorityOptions);
             this.cacheConfig = cacheConfig;
             this.logger = logger;
@@ -11738,6 +11799,7 @@
             this.temporaryCacheStorage = getStorageImplementation(clientId, cacheConfig.temporaryCacheLocation, logger, performanceClient);
             this.cookieStorage = new CookieStorage();
             this.performanceClient = performanceClient;
+            this.eventHandler = eventHandler;
         }
         async initialize(correlationId) {
             await this.browserStorage.initialize(correlationId);
@@ -11791,7 +11853,15 @@
             this.logger.trace("BrowserCacheManager.setAccount called");
             const key = account.generateAccountKey();
             await invokeAsync(this.browserStorage.setUserData.bind(this.browserStorage), PerformanceEvents.SetUserData, this.logger, this.performanceClient)(key, JSON.stringify(account), correlationId);
-            this.addAccountKeyToMap(key);
+            const wasAdded = this.addAccountKeyToMap(key);
+            /**
+             * @deprecated - Remove this in next major version in favor of more consistent LOGIN event
+             */
+            if (this.cacheConfig.cacheLocation ===
+                BrowserCacheLocation.LocalStorage &&
+                wasAdded) {
+                this.eventHandler.emitEvent(EventType.ACCOUNT_ADDED, undefined, account.getAccountInfo());
+            }
         }
         /**
          * Returns the array of account keys currently cached
@@ -11813,9 +11883,11 @@
                 accountKeys.push(key);
                 this.browserStorage.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
                 this.logger.verbose("BrowserCacheManager.addAccountKeyToMap account key added");
+                return true;
             }
             else {
                 this.logger.verbose("BrowserCacheManager.addAccountKeyToMap account key already exists in map");
+                return false;
             }
         }
         /**
@@ -11844,6 +11916,19 @@
             void super.removeAccount(key);
             this.removeAccountKeyFromMap(key);
         }
+        /**
+         * Removes credentials associated with the provided account
+         * @param account
+         */
+        async removeAccountContext(account) {
+            await super.removeAccountContext(account);
+            /**
+             * @deprecated - Remove this in next major version in favor of more consistent LOGOUT event
+             */
+            if (this.cacheConfig.cacheLocation === BrowserCacheLocation.LocalStorage) {
+                this.eventHandler.emitEvent(EventType.ACCOUNT_REMOVED, undefined, account.getAccountInfo());
+            }
+        }
         /**
          * Removes given idToken from the cache and from the key map
          * @param key
@@ -12198,6 +12283,7 @@
                 this.logger.verbose("setActiveAccount: No account passed, active account not set");
                 this.browserStorage.removeItem(activeAccountKey);
             }
+            this.eventHandler.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED);
         }
         /**
          * fetch throttling entity from the platform cache
@@ -12655,7 +12741,7 @@
         }
         return new MemoryStorage();
     }
-    const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient) => {
+    const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient, eventHandler) => {
         const cacheOptions = {
             cacheLocation: BrowserCacheLocation.MemoryStorage,
             temporaryCacheLocation: BrowserCacheLocation.MemoryStorage,
@@ -12664,7 +12750,7 @@
             cacheMigrationEnabled: false,
             claimsBasedCachingEnabled: false,
         };
-        return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger, performanceClient);
+        return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger, performanceClient, eventHandler);
     };
 
     /*
@@ -12798,43 +12884,13 @@
      * Copyright (c) Microsoft Corporation. All rights reserved.
      * Licensed under the MIT License.
      */
-    const EventType = {
-        INITIALIZE_START: "msal:initializeStart",
-        INITIALIZE_END: "msal:initializeEnd",
-        ACCOUNT_ADDED: "msal:accountAdded",
-        ACCOUNT_REMOVED: "msal:accountRemoved",
-        ACTIVE_ACCOUNT_CHANGED: "msal:activeAccountChanged",
-        LOGIN_START: "msal:loginStart",
-        LOGIN_SUCCESS: "msal:loginSuccess",
-        LOGIN_FAILURE: "msal:loginFailure",
-        ACQUIRE_TOKEN_START: "msal:acquireTokenStart",
-        ACQUIRE_TOKEN_SUCCESS: "msal:acquireTokenSuccess",
-        ACQUIRE_TOKEN_FAILURE: "msal:acquireTokenFailure",
-        ACQUIRE_TOKEN_NETWORK_START: "msal:acquireTokenFromNetworkStart",
-        SSO_SILENT_START: "msal:ssoSilentStart",
-        SSO_SILENT_SUCCESS: "msal:ssoSilentSuccess",
-        SSO_SILENT_FAILURE: "msal:ssoSilentFailure",
-        ACQUIRE_TOKEN_BY_CODE_START: "msal:acquireTokenByCodeStart",
-        ACQUIRE_TOKEN_BY_CODE_SUCCESS: "msal:acquireTokenByCodeSuccess",
-        ACQUIRE_TOKEN_BY_CODE_FAILURE: "msal:acquireTokenByCodeFailure",
-        HANDLE_REDIRECT_START: "msal:handleRedirectStart",
-        HANDLE_REDIRECT_END: "msal:handleRedirectEnd",
-        POPUP_OPENED: "msal:popupOpened",
-        LOGOUT_START: "msal:logoutStart",
-        LOGOUT_SUCCESS: "msal:logoutSuccess",
-        LOGOUT_FAILURE: "msal:logoutFailure",
-        LOGOUT_END: "msal:logoutEnd",
-        RESTORE_FROM_BFCACHE: "msal:restoreFromBFCache",
-    };
-
-    /*
-     * Copyright (c) Microsoft Corporation. All rights reserved.
-     * Licensed under the MIT License.
-     */
+    const BROADCAST_CHANNEL_NAME = "msal.broadcast.event";
     class EventHandler {
         constructor(logger) {
             this.eventCallbacks = new Map();
             this.logger = logger || new Logger({});
+            this.broadcastChannel = new BroadcastChannel(BROADCAST_CHANNEL_NAME);
+            this.invokeCrossTabCallbacks = this.invokeCrossTabCallbacks.bind(this);
         }
         /**
          * Adds event callbacks to array
@@ -12871,23 +12927,59 @@
          * @param error
          */
         emitEvent(eventType, interactionType, payload, error) {
-            if (typeof window !== "undefined") {
-                const message = {
-                    eventType: eventType,
-                    interactionType: interactionType || null,
-                    payload: payload || null,
-                    error: error || null,
-                    timestamp: Date.now(),
-                };
-                this.eventCallbacks.forEach(([callback, eventTypes], callbackId) => {
-                    if (eventTypes.length === 0 ||
-                        eventTypes.includes(eventType)) {
-                        this.logger.verbose(`Emitting event to callback ${callbackId}: ${eventType}`);
-                        callback.apply(null, [message]);
-                    }
-                });
+            const message = {
+                eventType: eventType,
+                interactionType: interactionType || null,
+                payload: payload || null,
+                error: error || null,
+                timestamp: Date.now(),
+            };
+            switch (eventType) {
+                case EventType.ACCOUNT_ADDED:
+                case EventType.ACCOUNT_REMOVED:
+                case EventType.ACTIVE_ACCOUNT_CHANGED:
+                    // Send event to other open tabs / MSAL instances on same domain
+                    this.broadcastChannel.postMessage(message);
+                    break;
+                default:
+                    // Emit event to callbacks registered in this instance
+                    this.invokeCallbacks(message);
+                    break;
             }
         }
+        /**
+         * Invoke registered callbacks
+         * @param message
+         */
+        invokeCallbacks(message) {
+            this.eventCallbacks.forEach(([callback, eventTypes], callbackId) => {
+                if (eventTypes.length === 0 ||
+                    eventTypes.includes(message.eventType)) {
+                    this.logger.verbose(`Emitting event to callback ${callbackId}: ${message.eventType}`);
+                    callback.apply(null, [message]);
+                }
+            });
+        }
+        /**
+         * Wrapper around invokeCallbacks to handle broadcast events received from other tabs/instances
+         * @param event
+         */
+        invokeCrossTabCallbacks(event) {
+            const message = event.data;
+            this.invokeCallbacks(message);
+        }
+        /**
+         * Listen for events broadcasted from other tabs/instances
+         */
+        subscribeCrossTab() {
+            this.broadcastChannel.addEventListener("message", this.invokeCrossTabCallbacks);
+        }
+        /**
+         * Unsubscribe from broadcast events
+         */
+        unsubscribeCrossTab() {
+            this.broadcastChannel.removeEventListener("message", this.invokeCrossTabCallbacks);
+        }
     }
 
     /*
@@ -14505,6 +14597,7 @@
                     popupWindowAttributes: request.popupWindowAttributes || {},
                     popupWindowParent: request.popupWindowParent ?? window,
                 };
+                this.performanceClient.addFields({ isAsyncPopup: this.config.system.asyncPopups }, this.correlationId);
                 // asyncPopups flag is true. Acquires token without first opening popup. Popup will be opened later asynchronously.
                 if (this.config.system.asyncPopups) {
                     this.logger.verbose("asyncPopups set to true, acquiring token");
@@ -16059,8 +16152,8 @@
             this.eventHandler = new EventHandler(this.logger);
             // Initialize the browser storage class.
             this.browserStorage = this.isBrowserEnvironment
-                ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, buildStaticAuthorityOptions(this.config.auth))
-                : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient);
+                ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler, buildStaticAuthorityOptions(this.config.auth))
+                : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient, this.eventHandler);
             // initialize in memory storage for native flows
             const nativeCacheOptions = {
                 cacheLocation: BrowserCacheLocation.MemoryStorage,
@@ -16070,7 +16163,7 @@
                 cacheMigrationEnabled: false,
                 claimsBasedCachingEnabled: false,
             };
-            this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger, this.performanceClient);
+            this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler);
             // Initialize the token cache
             this.tokenCache = new TokenCache(this.config, this.browserStorage, this.logger, this.browserCrypto);
             this.activeSilentTokenRequests = new Map();
@@ -16079,10 +16172,6 @@
             // Register listener functions
             this.trackPageVisibilityWithMeasurement =
                 this.trackPageVisibilityWithMeasurement.bind(this);
-            // account storage events
-            this.listeningToStorageEvents = false;
-            this.handleAccountCacheChange =
-                this.handleAccountCacheChange.bind(this);
         }
         static async createController(operatingContext, request) {
             const controller = new StandardController(operatingContext);
@@ -16981,70 +17070,27 @@
         }
         /**
          * Adds event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window
+         * @deprecated These events will be raised by default and this method will be removed in a future major version.
          */
         enableAccountStorageEvents() {
-            if (typeof window === "undefined") {
+            if (this.config.cache.cacheLocation !==
+                BrowserCacheLocation.LocalStorage) {
+                this.logger.info("Account storage events are only available when cacheLocation is set to localStorage");
                 return;
             }
-            if (!this.listeningToStorageEvents) {
-                this.logger.verbose("Adding account storage listener.");
-                this.listeningToStorageEvents = true;
-                window.addEventListener("storage", this.handleAccountCacheChange);
-            }
-            else {
-                this.logger.verbose("Account storage listener already registered.");
-            }
+            this.eventHandler.subscribeCrossTab();
         }
         /**
          * Removes event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window
+         * @deprecated These events will be raised by default and this method will be removed in a future major version.
          */
         disableAccountStorageEvents() {
-            if (typeof window === "undefined") {
-                return;
-            }
-            if (this.listeningToStorageEvents) {
-                this.logger.verbose("Removing account storage listener.");
-                window.removeEventListener("storage", this.handleAccountCacheChange);
-                this.listeningToStorageEvents = false;
-            }
-            else {
-                this.logger.verbose("No account storage listener registered.");
-            }
-        }
-        /**
-         * Emit account added/removed events when cached accounts are changed in a different tab or frame
-         */
-        handleAccountCacheChange(e) {
-            try {
-                // Handle active account filter change
-                if (e.key?.includes(PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS)) {
-                    // This event has no payload, it only signals cross-tab app instances that the results of calling getActiveAccount() will have changed
-                    this.eventHandler.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED);
-                }
-                // Handle account object change
-                const cacheValue = e.newValue || e.oldValue;
-                if (!cacheValue) {
-                    return;
-                }
-                const parsedValue = JSON.parse(cacheValue);
-                if (typeof parsedValue !== "object" ||
-                    !AccountEntity.isAccountEntity(parsedValue)) {
-                    return;
-                }
-                const accountEntity = CacheManager.toObject(new AccountEntity(), parsedValue);
-                const accountInfo = accountEntity.getAccountInfo();
-                if (!e.oldValue && e.newValue) {
-                    this.logger.info("Account was added to cache in a different window");
-                    this.eventHandler.emitEvent(EventType.ACCOUNT_ADDED, undefined, accountInfo);
-                }
-                else if (!e.newValue && e.oldValue) {
-                    this.logger.info("Account was removed from cache in a different window");
-                    this.eventHandler.emitEvent(EventType.ACCOUNT_REMOVED, undefined, accountInfo);
-                }
-            }
-            catch (e) {
+            if (this.config.cache.cacheLocation !==
+                BrowserCacheLocation.LocalStorage) {
+                this.logger.info("Account storage events are only available when cacheLocation is set to localStorage");
                 return;
             }
+            this.eventHandler.unsubscribeCrossTab();
         }
         /**
          * Gets the token cache for the application.
@@ -17617,11 +17663,11 @@
             this.browserCrypto = operatingContext.isBrowserEnvironment()
                 ? new CryptoOps(this.logger, this.performanceClient, true)
                 : DEFAULT_CRYPTO_IMPLEMENTATION;
+            this.eventHandler = new EventHandler(this.logger);
             // Initialize the browser storage class.
             this.browserStorage = this.operatingContext.isBrowserEnvironment()
-                ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, buildStaticAuthorityOptions(this.config.auth))
-                : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient);
-            this.eventHandler = new EventHandler(this.logger);
+                ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler, buildStaticAuthorityOptions(this.config.auth))
+                : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient, this.eventHandler);
             this.nestedAppAuthAdapter = new NestedAppAuthAdapter(this.config.auth.clientId, this.config.auth.clientCapabilities, this.browserCrypto, this.logger);
             // Set the active account if available
             const accountContext = this.bridgeProxy.getAccountContext();
@@ -18517,10 +18563,11 @@
             this.browserCrypto = this.isBrowserEnvironment
                 ? new CryptoOps(this.logger, this.performanceClient)
                 : DEFAULT_CRYPTO_IMPLEMENTATION;
+            this.eventHandler = new EventHandler(this.logger);
             // Initialize the browser storage class.
             this.browserStorage = this.isBrowserEnvironment
-                ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, undefined)
-                : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient);
+                ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler, undefined)
+                : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient, this.eventHandler);
         }
         getBrowserStorage() {
             return this.browserStorage;