@azure/msal-browser 4.1.0 → 4.2.0

package/lib/msal-browser.cjs

@@ -1,8 +1,8 @@
-/*! @azure/msal-browser v4.1.0 2025-02-03 */
+/*! @azure/msal-browser v4.2.0 2025-02-05 */
 'use strict';
 'use strict';
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -306,7 +306,7 @@ const JsonWebTokenTypes = {
 // Token renewal offset default in seconds
 const DEFAULT_TOKEN_RENEWAL_OFFSET_SEC = 300;
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -323,7 +323,7 @@ var AuthErrorCodes = /*#__PURE__*/Object.freeze({
     unexpectedError: unexpectedError
 });
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -372,7 +372,7 @@ function createAuthError(code, additionalMessage) {
         : AuthErrorMessages[code]);
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -470,7 +470,7 @@ var ClientAuthErrorCodes = /*#__PURE__*/Object.freeze({
     userTimeoutReached: userTimeoutReached
 });
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -722,7 +722,7 @@ function createClientAuthError(errorCode, additionalMessage) {
     return new ClientAuthError(errorCode, additionalMessage);
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -761,7 +761,7 @@ const DEFAULT_CRYPTO_IMPLEMENTATION = {
     },
 };
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -952,12 +952,12 @@ class Logger {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /* eslint-disable header/header */
 const name$1 = "@azure/msal-common";
-const version$1 = "15.1.0";
+const version$1 = "15.1.1";
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -977,7 +977,7 @@ const AzureCloudInstance = {
     AzureUsGovernment: "https://login.microsoftonline.us",
 };
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1038,7 +1038,7 @@ function checkMaxAge(authTime, maxAge) {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1075,7 +1075,7 @@ function wasClockTurnedBack(cachedAt) {
     return cachedAtSec > nowSeconds();
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1402,7 +1402,7 @@ function isAuthorityMetadataExpired(metadata) {
     return metadata.expiresAt <= nowSeconds();
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1456,7 +1456,7 @@ var ClientConfigurationErrorCodes = /*#__PURE__*/Object.freeze({
     urlParseError: urlParseError
 });
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1594,7 +1594,7 @@ function createClientConfigurationError(errorCode) {
     return new ClientConfigurationError(errorCode);
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -1691,7 +1691,7 @@ class StringUtils {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1882,7 +1882,7 @@ class ScopeSet {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -1922,7 +1922,7 @@ function buildClientInfoFromHomeAccountId(homeAccountId) {
     };
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2001,7 +2001,7 @@ function updateAccountTenantProfileData(baseAccountInfo, tenantProfile, idTokenC
     return updatedAccountInfo;
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2016,7 +2016,7 @@ const AuthorityType = {
     Ciam: 3,
 };
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2038,7 +2038,7 @@ function getTenantIdFromIdTokenClaims(idTokenClaims) {
     return null;
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2051,7 +2051,7 @@ const ProtocolMode = {
     OIDC: "OIDC",
 };
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2294,7 +2294,7 @@ class AccountEntity {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2341,7 +2341,7 @@ function getDeserializedResponse(responseString) {
     return null;
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2505,7 +2505,7 @@ class UrlString {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2645,7 +2645,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
     return null;
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -2653,7 +2653,7 @@ function getCloudDiscoveryMetadataFromNetworkResponse(response, authorityHost) {
 const cacheQuotaExceededErrorCode = "cache_quota_exceeded";
 const cacheUnknownErrorCode = "cache_error_unknown";
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -2680,7 +2680,7 @@ class CacheError extends Error {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3865,7 +3865,7 @@ class DefaultStorageClass extends CacheManager {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -3964,7 +3964,7 @@ function isOidcProtocolMode(config) {
     return (config.authOptions.authority.options.protocolMode === ProtocolMode.OIDC);
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -3974,7 +3974,7 @@ const CcsCredentialType = {
     UPN: "UPN",
 };
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4024,7 +4024,7 @@ const X_CLIENT_EXTRA_SKU = "x-client-xtra-sku";
 const BROKER_CLIENT_ID = "brk_client_id";
 const BROKER_REDIRECT_URI = "brk_redirect_uri";
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4091,7 +4091,7 @@ class RequestValidator {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -4499,7 +4499,7 @@ class RequestParameterBuilder {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4511,7 +4511,7 @@ function isOpenIdConfigResponse(response) {
         response.hasOwnProperty("jwks_uri"));
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4521,7 +4521,7 @@ function isCloudInstanceDiscoveryResponse(response) {
         response.hasOwnProperty("metadata"));
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4531,7 +4531,7 @@ function isCloudInstanceDiscoveryErrorResponse(response) {
         response.hasOwnProperty("error_description"));
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -4769,6 +4769,7 @@ const PerformanceEvents = {
     CacheManagerGetRefreshToken: "cacheManagerGetRefreshToken",
     ImportExistingCache: "importExistingCache",
     SetUserData: "setUserData",
+    LocalStorageUpdated: "localStorageUpdated",
     /**
      * Crypto Operations
      */
@@ -4870,6 +4871,7 @@ const PerformanceEventAbbreviations = new Map([
     [PerformanceEvents.InitializeCache, "InitCache"],
     [PerformanceEvents.ImportExistingCache, "importCache"],
     [PerformanceEvents.SetUserData, "setUserData"],
+    [PerformanceEvents.LocalStorageUpdated, "localStorageUpdated"],
     [PerformanceEvents.SilentIframeClientTokenHelper, "SIClientTHelper"],
     [
         PerformanceEvents.SilentHandlerInitiateAuthRequest,
@@ -5038,7 +5040,7 @@ const IntFields = new Set([
     "encryptedCacheExpiredCount",
 ]);
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -5134,7 +5136,7 @@ const invokeAsync = (callback, eventName, logger, telemetryClient, correlationId
     };
 };
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -5243,7 +5245,7 @@ RegionDiscovery.IMDS_OPTIONS = {
     },
 };
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6082,7 +6084,7 @@ function buildStaticAuthorityOptions(authOptions) {
     };
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6113,7 +6115,7 @@ async function createDiscoveredInstance(authorityUri, networkClient, cacheManage
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6132,7 +6134,7 @@ class ServerError extends AuthError {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6230,7 +6232,7 @@ class ThrottlingUtils {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6260,7 +6262,7 @@ function createNetworkError(error, httpStatus, responseHeaders) {
     return new NetworkError(error, httpStatus, responseHeaders);
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6410,7 +6412,7 @@ class BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6436,7 +6438,7 @@ var InteractionRequiredAuthErrorCodes = /*#__PURE__*/Object.freeze({
     refreshTokenExpired: refreshTokenExpired
 });
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6524,7 +6526,7 @@ function createInteractionRequiredAuthError(errorCode) {
     return new InteractionRequiredAuthError(errorCode, InteractionRequiredAuthErrorMessages[errorCode]);
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6596,7 +6598,7 @@ class ProtocolUtils {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -6680,7 +6682,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -6707,7 +6709,7 @@ class PopTokenGenerator {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7084,7 +7086,7 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
     return baseAccount;
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -7102,7 +7104,7 @@ async function getClientAssertion(clientAssertion, clientId, tokenEndpoint) {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7552,7 +7554,7 @@ class AuthorizationCodeClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7775,7 +7777,7 @@ class RefreshTokenClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7873,7 +7875,7 @@ class SilentFlowClient extends BaseClient {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7888,7 +7890,7 @@ const StubbedNetworkModule = {
     },
 };
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -7946,7 +7948,7 @@ class AuthenticationHeaderParser {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8209,7 +8211,7 @@ class ServerTelemetryManager {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -8217,7 +8219,7 @@ class ServerTelemetryManager {
 const missingKidError = "missing_kid_error";
 const missingAlgError = "missing_alg_error";
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8242,7 +8244,7 @@ function createJoseHeaderError(code) {
     return new JoseHeaderError(code, JoseHeaderErrorMessages[code]);
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8282,7 +8284,7 @@ class JoseHeader {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -8361,7 +8363,7 @@ class StubPerformanceClient {
     }
 }
 
-/*! @azure/msal-common v15.1.0 2025-02-03 */
+/*! @azure/msal-common v15.1.1 2025-02-05 */
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -10398,7 +10400,7 @@ function buildConfiguration({ auth: userInputAuth, cache: userInputCache, system
 
 /* eslint-disable header/header */
 const name = "@azure/msal-browser";
-const version = "4.1.0";
+const version = "4.2.0";
 
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
@@ -11331,6 +11333,10 @@ function getSortedObjectString(obj) {
  */
 // Cookie life calculation (hours * minutes * seconds * ms)
 const COOKIE_LIFE_MULTIPLIER = 24 * 60 * 60 * 1000;
+const SameSiteOptions = {
+    Lax: "Lax",
+    None: "None",
+};
 class CookieStorage {
     initialize() {
         return Promise.resolve();
@@ -11351,13 +11357,14 @@ class CookieStorage {
     getUserData() {
         throw createClientAuthError(methodNotImplemented);
     }
-    setItem(key, value, cookieLifeDays, secure = true) {
-        let cookieStr = `${encodeURIComponent(key)}=${encodeURIComponent(value)};path=/;SameSite=Lax;`;
+    setItem(key, value, cookieLifeDays, secure = true, sameSite = SameSiteOptions.Lax) {
+        let cookieStr = `${encodeURIComponent(key)}=${encodeURIComponent(value)};path=/;SameSite=${sameSite};`;
         if (cookieLifeDays) {
             const expireTime = getCookieExpirationTime(cookieLifeDays);
             cookieStr += `expires=${expireTime};`;
         }
-        if (secure) {
+        if (secure || sameSite === SameSiteOptions.None) {
+            // SameSite None requires Secure flag
             cookieStr += "Secure;";
         }
         document.cookie = cookieStr;
@@ -11437,6 +11444,7 @@ function getTokenKeys(clientId, storage) {
  * Licensed under the MIT License.
  */
 const ENCRYPTION_KEY = "msal.cache.encryption";
+const BROADCAST_CHANNEL_NAME$1 = "msal.broadcast.cache";
 class LocalStorage {
     constructor(clientId, logger, performanceClient) {
         if (!window.localStorage) {
@@ -11447,6 +11455,7 @@ class LocalStorage {
         this.clientId = clientId;
         this.logger = logger;
         this.performanceClient = performanceClient;
+        this.broadcast = new BroadcastChannel(BROADCAST_CHANNEL_NAME$1);
     }
     async initialize(correlationId) {
         this.initialized = true;
@@ -11482,8 +11491,13 @@ class LocalStorage {
                 id: id,
                 key: keyStr,
             };
-            cookies.setItem(ENCRYPTION_KEY, JSON.stringify(cookieData));
+            cookies.setItem(ENCRYPTION_KEY, JSON.stringify(cookieData), 0, // Expiration - 0 means cookie will be cleared at the end of the browser session
+            true, // Secure flag
+            SameSiteOptions.None // SameSite must be None to support iframed apps
+            );
         }
+        // Register listener for cache updates in other tabs
+        this.broadcast.addEventListener("message", this.updateCache.bind(this));
     }
     getItem(key) {
         return window.localStorage.getItem(key);
@@ -11509,9 +11523,22 @@ class LocalStorage {
         };
         this.memoryStorage.setItem(key, value);
         this.setItem(key, JSON.stringify(encryptedData));
+        // Notify other frames to update their in-memory cache
+        this.broadcast.postMessage({
+            key: key,
+            value: value,
+            context: this.getContext(key),
+        });
     }
     removeItem(key) {
-        this.memoryStorage.removeItem(key);
+        if (this.memoryStorage.containsKey(key)) {
+            this.memoryStorage.removeItem(key);
+            this.broadcast.postMessage({
+                key: key,
+                value: null,
+                context: this.getContext(key),
+            });
+        }
         window.localStorage.removeItem(key);
     }
     getKeys() {
@@ -11628,6 +11655,34 @@ class LocalStorage {
         }
         return context;
     }
+    updateCache(event) {
+        this.logger.trace("Updating internal cache from broadcast event");
+        const perfMeasurement = this.performanceClient.startMeasurement(PerformanceEvents.LocalStorageUpdated);
+        perfMeasurement.add({ isBackground: true });
+        const { key, value, context } = event.data;
+        if (!key) {
+            this.logger.error("Broadcast event missing key");
+            perfMeasurement.end({ success: false, errorCode: "noKey" });
+            return;
+        }
+        if (context && context !== this.clientId) {
+            this.logger.trace(`Ignoring broadcast event from clientId: ${context}`);
+            perfMeasurement.end({
+                success: false,
+                errorCode: "contextMismatch",
+            });
+            return;
+        }
+        if (!value) {
+            this.memoryStorage.removeItem(key);
+            this.logger.verbose("Removed item from internal cache");
+        }
+        else {
+            this.memoryStorage.setItem(key, value);
+            this.logger.verbose("Updated item in internal cache");
+        }
+        perfMeasurement.end({ success: true });
+    }
 }
 
 /*
@@ -11688,6 +11743,39 @@ function extractBrowserRequestState(browserCrypto, state) {
     }
 }
 
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */
+const EventType = {
+    INITIALIZE_START: "msal:initializeStart",
+    INITIALIZE_END: "msal:initializeEnd",
+    ACCOUNT_ADDED: "msal:accountAdded",
+    ACCOUNT_REMOVED: "msal:accountRemoved",
+    ACTIVE_ACCOUNT_CHANGED: "msal:activeAccountChanged",
+    LOGIN_START: "msal:loginStart",
+    LOGIN_SUCCESS: "msal:loginSuccess",
+    LOGIN_FAILURE: "msal:loginFailure",
+    ACQUIRE_TOKEN_START: "msal:acquireTokenStart",
+    ACQUIRE_TOKEN_SUCCESS: "msal:acquireTokenSuccess",
+    ACQUIRE_TOKEN_FAILURE: "msal:acquireTokenFailure",
+    ACQUIRE_TOKEN_NETWORK_START: "msal:acquireTokenFromNetworkStart",
+    SSO_SILENT_START: "msal:ssoSilentStart",
+    SSO_SILENT_SUCCESS: "msal:ssoSilentSuccess",
+    SSO_SILENT_FAILURE: "msal:ssoSilentFailure",
+    ACQUIRE_TOKEN_BY_CODE_START: "msal:acquireTokenByCodeStart",
+    ACQUIRE_TOKEN_BY_CODE_SUCCESS: "msal:acquireTokenByCodeSuccess",
+    ACQUIRE_TOKEN_BY_CODE_FAILURE: "msal:acquireTokenByCodeFailure",
+    HANDLE_REDIRECT_START: "msal:handleRedirectStart",
+    HANDLE_REDIRECT_END: "msal:handleRedirectEnd",
+    POPUP_OPENED: "msal:popupOpened",
+    LOGOUT_START: "msal:logoutStart",
+    LOGOUT_SUCCESS: "msal:logoutSuccess",
+    LOGOUT_FAILURE: "msal:logoutFailure",
+    LOGOUT_END: "msal:logoutEnd",
+    RESTORE_FROM_BFCACHE: "msal:restoreFromBFCache",
+};
+
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
@@ -11698,7 +11786,7 @@ function extractBrowserRequestState(browserCrypto, state) {
  * parameters such as state and nonce, generally.
  */
 class BrowserCacheManager extends CacheManager {
-    constructor(clientId, cacheConfig, cryptoImpl, logger, performanceClient, staticAuthorityOptions) {
+    constructor(clientId, cacheConfig, cryptoImpl, logger, performanceClient, eventHandler, staticAuthorityOptions) {
         super(clientId, cryptoImpl, logger, staticAuthorityOptions);
         this.cacheConfig = cacheConfig;
         this.logger = logger;
@@ -11707,6 +11795,7 @@ class BrowserCacheManager extends CacheManager {
         this.temporaryCacheStorage = getStorageImplementation(clientId, cacheConfig.temporaryCacheLocation, logger, performanceClient);
         this.cookieStorage = new CookieStorage();
         this.performanceClient = performanceClient;
+        this.eventHandler = eventHandler;
     }
     async initialize(correlationId) {
         await this.browserStorage.initialize(correlationId);
@@ -11760,7 +11849,15 @@ class BrowserCacheManager extends CacheManager {
         this.logger.trace("BrowserCacheManager.setAccount called");
         const key = account.generateAccountKey();
         await invokeAsync(this.browserStorage.setUserData.bind(this.browserStorage), PerformanceEvents.SetUserData, this.logger, this.performanceClient)(key, JSON.stringify(account), correlationId);
-        this.addAccountKeyToMap(key);
+        const wasAdded = this.addAccountKeyToMap(key);
+        /**
+         * @deprecated - Remove this in next major version in favor of more consistent LOGIN event
+         */
+        if (this.cacheConfig.cacheLocation ===
+            BrowserCacheLocation.LocalStorage &&
+            wasAdded) {
+            this.eventHandler.emitEvent(EventType.ACCOUNT_ADDED, undefined, account.getAccountInfo());
+        }
     }
     /**
      * Returns the array of account keys currently cached
@@ -11782,9 +11879,11 @@ class BrowserCacheManager extends CacheManager {
             accountKeys.push(key);
             this.browserStorage.setItem(StaticCacheKeys.ACCOUNT_KEYS, JSON.stringify(accountKeys));
             this.logger.verbose("BrowserCacheManager.addAccountKeyToMap account key added");
+            return true;
         }
         else {
             this.logger.verbose("BrowserCacheManager.addAccountKeyToMap account key already exists in map");
+            return false;
         }
     }
     /**
@@ -11813,6 +11912,19 @@ class BrowserCacheManager extends CacheManager {
         void super.removeAccount(key);
         this.removeAccountKeyFromMap(key);
     }
+    /**
+     * Removes credentials associated with the provided account
+     * @param account
+     */
+    async removeAccountContext(account) {
+        await super.removeAccountContext(account);
+        /**
+         * @deprecated - Remove this in next major version in favor of more consistent LOGOUT event
+         */
+        if (this.cacheConfig.cacheLocation === BrowserCacheLocation.LocalStorage) {
+            this.eventHandler.emitEvent(EventType.ACCOUNT_REMOVED, undefined, account.getAccountInfo());
+        }
+    }
     /**
      * Removes given idToken from the cache and from the key map
      * @param key
@@ -12167,6 +12279,7 @@ class BrowserCacheManager extends CacheManager {
             this.logger.verbose("setActiveAccount: No account passed, active account not set");
             this.browserStorage.removeItem(activeAccountKey);
         }
+        this.eventHandler.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED);
     }
     /**
      * fetch throttling entity from the platform cache
@@ -12624,7 +12737,7 @@ function getStorageImplementation(clientId, cacheLocation, logger, performanceCl
     }
     return new MemoryStorage();
 }
-const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient) => {
+const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient, eventHandler) => {
     const cacheOptions = {
         cacheLocation: BrowserCacheLocation.MemoryStorage,
         temporaryCacheLocation: BrowserCacheLocation.MemoryStorage,
@@ -12633,7 +12746,7 @@ const DEFAULT_BROWSER_CACHE_MANAGER = (clientId, logger, performanceClient) => {
         cacheMigrationEnabled: false,
         claimsBasedCachingEnabled: false,
     };
-    return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger, performanceClient);
+    return new BrowserCacheManager(clientId, cacheOptions, DEFAULT_CRYPTO_IMPLEMENTATION, logger, performanceClient, eventHandler);
 };
 
 /*
@@ -12767,43 +12880,13 @@ function getActiveAccount(browserStorage) {
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
  */
-const EventType = {
-    INITIALIZE_START: "msal:initializeStart",
-    INITIALIZE_END: "msal:initializeEnd",
-    ACCOUNT_ADDED: "msal:accountAdded",
-    ACCOUNT_REMOVED: "msal:accountRemoved",
-    ACTIVE_ACCOUNT_CHANGED: "msal:activeAccountChanged",
-    LOGIN_START: "msal:loginStart",
-    LOGIN_SUCCESS: "msal:loginSuccess",
-    LOGIN_FAILURE: "msal:loginFailure",
-    ACQUIRE_TOKEN_START: "msal:acquireTokenStart",
-    ACQUIRE_TOKEN_SUCCESS: "msal:acquireTokenSuccess",
-    ACQUIRE_TOKEN_FAILURE: "msal:acquireTokenFailure",
-    ACQUIRE_TOKEN_NETWORK_START: "msal:acquireTokenFromNetworkStart",
-    SSO_SILENT_START: "msal:ssoSilentStart",
-    SSO_SILENT_SUCCESS: "msal:ssoSilentSuccess",
-    SSO_SILENT_FAILURE: "msal:ssoSilentFailure",
-    ACQUIRE_TOKEN_BY_CODE_START: "msal:acquireTokenByCodeStart",
-    ACQUIRE_TOKEN_BY_CODE_SUCCESS: "msal:acquireTokenByCodeSuccess",
-    ACQUIRE_TOKEN_BY_CODE_FAILURE: "msal:acquireTokenByCodeFailure",
-    HANDLE_REDIRECT_START: "msal:handleRedirectStart",
-    HANDLE_REDIRECT_END: "msal:handleRedirectEnd",
-    POPUP_OPENED: "msal:popupOpened",
-    LOGOUT_START: "msal:logoutStart",
-    LOGOUT_SUCCESS: "msal:logoutSuccess",
-    LOGOUT_FAILURE: "msal:logoutFailure",
-    LOGOUT_END: "msal:logoutEnd",
-    RESTORE_FROM_BFCACHE: "msal:restoreFromBFCache",
-};
-
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */
+const BROADCAST_CHANNEL_NAME = "msal.broadcast.event";
 class EventHandler {
     constructor(logger) {
         this.eventCallbacks = new Map();
         this.logger = logger || new Logger({});
+        this.broadcastChannel = new BroadcastChannel(BROADCAST_CHANNEL_NAME);
+        this.invokeCrossTabCallbacks = this.invokeCrossTabCallbacks.bind(this);
     }
     /**
      * Adds event callbacks to array
@@ -12840,23 +12923,59 @@ class EventHandler {
      * @param error
      */
     emitEvent(eventType, interactionType, payload, error) {
-        if (typeof window !== "undefined") {
-            const message = {
-                eventType: eventType,
-                interactionType: interactionType || null,
-                payload: payload || null,
-                error: error || null,
-                timestamp: Date.now(),
-            };
-            this.eventCallbacks.forEach(([callback, eventTypes], callbackId) => {
-                if (eventTypes.length === 0 ||
-                    eventTypes.includes(eventType)) {
-                    this.logger.verbose(`Emitting event to callback ${callbackId}: ${eventType}`);
-                    callback.apply(null, [message]);
-                }
-            });
+        const message = {
+            eventType: eventType,
+            interactionType: interactionType || null,
+            payload: payload || null,
+            error: error || null,
+            timestamp: Date.now(),
+        };
+        switch (eventType) {
+            case EventType.ACCOUNT_ADDED:
+            case EventType.ACCOUNT_REMOVED:
+            case EventType.ACTIVE_ACCOUNT_CHANGED:
+                // Send event to other open tabs / MSAL instances on same domain
+                this.broadcastChannel.postMessage(message);
+                break;
+            default:
+                // Emit event to callbacks registered in this instance
+                this.invokeCallbacks(message);
+                break;
         }
     }
+    /**
+     * Invoke registered callbacks
+     * @param message
+     */
+    invokeCallbacks(message) {
+        this.eventCallbacks.forEach(([callback, eventTypes], callbackId) => {
+            if (eventTypes.length === 0 ||
+                eventTypes.includes(message.eventType)) {
+                this.logger.verbose(`Emitting event to callback ${callbackId}: ${message.eventType}`);
+                callback.apply(null, [message]);
+            }
+        });
+    }
+    /**
+     * Wrapper around invokeCallbacks to handle broadcast events received from other tabs/instances
+     * @param event
+     */
+    invokeCrossTabCallbacks(event) {
+        const message = event.data;
+        this.invokeCallbacks(message);
+    }
+    /**
+     * Listen for events broadcasted from other tabs/instances
+     */
+    subscribeCrossTab() {
+        this.broadcastChannel.addEventListener("message", this.invokeCrossTabCallbacks);
+    }
+    /**
+     * Unsubscribe from broadcast events
+     */
+    unsubscribeCrossTab() {
+        this.broadcastChannel.removeEventListener("message", this.invokeCrossTabCallbacks);
+    }
 }
 
 /*
@@ -16029,8 +16148,8 @@ class StandardController {
         this.eventHandler = new EventHandler(this.logger);
         // Initialize the browser storage class.
         this.browserStorage = this.isBrowserEnvironment
-            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, buildStaticAuthorityOptions(this.config.auth))
-            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient);
+            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler, buildStaticAuthorityOptions(this.config.auth))
+            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient, this.eventHandler);
         // initialize in memory storage for native flows
         const nativeCacheOptions = {
             cacheLocation: BrowserCacheLocation.MemoryStorage,
@@ -16040,7 +16159,7 @@ class StandardController {
             cacheMigrationEnabled: false,
             claimsBasedCachingEnabled: false,
         };
-        this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger, this.performanceClient);
+        this.nativeInternalStorage = new BrowserCacheManager(this.config.auth.clientId, nativeCacheOptions, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler);
         // Initialize the token cache
         this.tokenCache = new TokenCache(this.config, this.browserStorage, this.logger, this.browserCrypto);
         this.activeSilentTokenRequests = new Map();
@@ -16049,10 +16168,6 @@ class StandardController {
         // Register listener functions
         this.trackPageVisibilityWithMeasurement =
             this.trackPageVisibilityWithMeasurement.bind(this);
-        // account storage events
-        this.listeningToStorageEvents = false;
-        this.handleAccountCacheChange =
-            this.handleAccountCacheChange.bind(this);
     }
     static async createController(operatingContext, request) {
         const controller = new StandardController(operatingContext);
@@ -16951,70 +17066,27 @@ class StandardController {
     }
     /**
      * Adds event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window
+     * @deprecated These events will be raised by default and this method will be removed in a future major version.
      */
     enableAccountStorageEvents() {
-        if (typeof window === "undefined") {
+        if (this.config.cache.cacheLocation !==
+            BrowserCacheLocation.LocalStorage) {
+            this.logger.info("Account storage events are only available when cacheLocation is set to localStorage");
             return;
         }
-        if (!this.listeningToStorageEvents) {
-            this.logger.verbose("Adding account storage listener.");
-            this.listeningToStorageEvents = true;
-            window.addEventListener("storage", this.handleAccountCacheChange);
-        }
-        else {
-            this.logger.verbose("Account storage listener already registered.");
-        }
+        this.eventHandler.subscribeCrossTab();
     }
     /**
      * Removes event listener that emits an event when a user account is added or removed from localstorage in a different browser tab or window
+     * @deprecated These events will be raised by default and this method will be removed in a future major version.
      */
     disableAccountStorageEvents() {
-        if (typeof window === "undefined") {
-            return;
-        }
-        if (this.listeningToStorageEvents) {
-            this.logger.verbose("Removing account storage listener.");
-            window.removeEventListener("storage", this.handleAccountCacheChange);
-            this.listeningToStorageEvents = false;
-        }
-        else {
-            this.logger.verbose("No account storage listener registered.");
-        }
-    }
-    /**
-     * Emit account added/removed events when cached accounts are changed in a different tab or frame
-     */
-    handleAccountCacheChange(e) {
-        try {
-            // Handle active account filter change
-            if (e.key?.includes(PersistentCacheKeys.ACTIVE_ACCOUNT_FILTERS)) {
-                // This event has no payload, it only signals cross-tab app instances that the results of calling getActiveAccount() will have changed
-                this.eventHandler.emitEvent(EventType.ACTIVE_ACCOUNT_CHANGED);
-            }
-            // Handle account object change
-            const cacheValue = e.newValue || e.oldValue;
-            if (!cacheValue) {
-                return;
-            }
-            const parsedValue = JSON.parse(cacheValue);
-            if (typeof parsedValue !== "object" ||
-                !AccountEntity.isAccountEntity(parsedValue)) {
-                return;
-            }
-            const accountEntity = CacheManager.toObject(new AccountEntity(), parsedValue);
-            const accountInfo = accountEntity.getAccountInfo();
-            if (!e.oldValue && e.newValue) {
-                this.logger.info("Account was added to cache in a different window");
-                this.eventHandler.emitEvent(EventType.ACCOUNT_ADDED, undefined, accountInfo);
-            }
-            else if (!e.newValue && e.oldValue) {
-                this.logger.info("Account was removed from cache in a different window");
-                this.eventHandler.emitEvent(EventType.ACCOUNT_REMOVED, undefined, accountInfo);
-            }
-        }
-        catch (e) {
+        if (this.config.cache.cacheLocation !==
+            BrowserCacheLocation.LocalStorage) {
+            this.logger.info("Account storage events are only available when cacheLocation is set to localStorage");
             return;
         }
+        this.eventHandler.unsubscribeCrossTab();
     }
     /**
      * Gets the token cache for the application.
@@ -17587,11 +17659,11 @@ class NestedAppAuthController {
         this.browserCrypto = operatingContext.isBrowserEnvironment()
             ? new CryptoOps(this.logger, this.performanceClient, true)
             : DEFAULT_CRYPTO_IMPLEMENTATION;
+        this.eventHandler = new EventHandler(this.logger);
         // Initialize the browser storage class.
         this.browserStorage = this.operatingContext.isBrowserEnvironment()
-            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, buildStaticAuthorityOptions(this.config.auth))
-            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient);
-        this.eventHandler = new EventHandler(this.logger);
+            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler, buildStaticAuthorityOptions(this.config.auth))
+            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient, this.eventHandler);
         this.nestedAppAuthAdapter = new NestedAppAuthAdapter(this.config.auth.clientId, this.config.auth.clientCapabilities, this.browserCrypto, this.logger);
         // Set the active account if available
         const accountContext = this.bridgeProxy.getAccountContext();
@@ -18487,10 +18559,11 @@ class UnknownOperatingContextController {
         this.browserCrypto = this.isBrowserEnvironment
             ? new CryptoOps(this.logger, this.performanceClient)
             : DEFAULT_CRYPTO_IMPLEMENTATION;
+        this.eventHandler = new EventHandler(this.logger);
         // Initialize the browser storage class.
         this.browserStorage = this.isBrowserEnvironment
-            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, undefined)
-            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient);
+            ? new BrowserCacheManager(this.config.auth.clientId, this.config.cache, this.browserCrypto, this.logger, this.performanceClient, this.eventHandler, undefined)
+            : DEFAULT_BROWSER_CACHE_MANAGER(this.config.auth.clientId, this.logger, this.performanceClient, this.eventHandler);
     }
     getBrowserStorage() {
         return this.browserStorage;