npm - @digipair/skill-microsoft - Versions diffs - 0.21.2 → 0.21.7 - Mend

@digipair/skill-microsoft 0.21.2 → 0.21.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/index.cjs.js CHANGED Viewed

@@ -2354,7 +2354,7 @@ function _create_class$E(Constructor, protoProps, staticProps) {
     if (staticProps) _defineProperties$E(Constructor, staticProps);
     return Constructor;
 }
-function _ts_generator$p(thisArg, body) {
+function _ts_generator$o(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -2471,7 +2471,7 @@ function _ts_generator$p(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$o(function() {
                     var _this_performanceClient, autodetectedRegionName, options, localIMDSVersionResponse, currentIMDSVersion, currentIMDSVersionResponse;
-                    return _ts_generator$p(this, function(_state) {
+                    return _ts_generator$o(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.RegionDiscoveryDetectRegion, _this.correlationId);
@@ -2573,7 +2573,7 @@ function _ts_generator$p(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$o(function() {
                     var _this_performanceClient;
-                    return _ts_generator$p(this, function(_state) {
+                    return _ts_generator$o(this, function(_state) {
                         (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.RegionDiscoveryGetRegionFromIMDS, _this.correlationId);
                         return [
                             2,
@@ -2593,7 +2593,7 @@ function _ts_generator$p(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$o(function() {
                     var _this_performanceClient, response;
-                    return _ts_generator$p(this, function(_state) {
+                    return _ts_generator$o(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.RegionDiscoveryGetCurrentVersion, _this.correlationId);
@@ -3006,7 +3006,7 @@ function _define_property$i(obj, key, value) {
     }
     return obj;
 }
-function _instanceof$j(left, right) {
+function _instanceof$i(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
@@ -3052,7 +3052,7 @@ function _object_spread_props$8(target, source) {
     }
     return target;
 }
-function _ts_generator$o(thisArg, body) {
+function _ts_generator$n(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -3416,7 +3416,7 @@ function _ts_generator$o(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$n(function() {
                     var _this_performanceClient, _this_performanceClient1, metadataEntity, cloudDiscoverySource, endpointSource;
-                    return _ts_generator$o(this, function(_state) {
+                    return _ts_generator$n(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.AuthorityResolveEndpointsAsync, _this.correlationId);
@@ -3504,7 +3504,7 @@ function _ts_generator$o(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$n(function() {
                     var _this_performanceClient, localMetadata, _this_authorityOptions_azureRegionConfiguration, hardcodedMetadata, metadata, _this_authorityOptions_azureRegionConfiguration1;
-                    return _ts_generator$o(this, function(_state) {
+                    return _ts_generator$n(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.AuthorityUpdateEndpointMetadata, _this.correlationId);
@@ -3664,7 +3664,7 @@ function _ts_generator$o(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$n(function() {
                     var _this_performanceClient, options, openIdConfigurationEndpoint, response, isValidResponse, e;
-                    return _ts_generator$o(this, function(_state) {
+                    return _ts_generator$n(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.AuthorityGetEndpointMetadataFromNetwork, _this.correlationId);
@@ -3737,7 +3737,7 @@ function _ts_generator$o(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$n(function() {
                     var _this_performanceClient, _this_authorityOptions_azureRegionConfiguration, userConfiguredAzureRegion, _this_authorityOptions_azureRegionConfiguration1, autodetectedRegionName;
-                    return _ts_generator$o(this, function(_state) {
+                    return _ts_generator$n(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.AuthorityUpdateMetadataWithRegionalInformation, _this.correlationId);
@@ -3791,7 +3791,7 @@ function _ts_generator$o(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$n(function() {
                     var _this_performanceClient, localMetadataSource, metadata;
-                    return _ts_generator$o(this, function(_state) {
+                    return _ts_generator$n(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.AuthorityUpdateCloudDiscoveryMetadata, _this.correlationId);
@@ -3906,7 +3906,7 @@ function _ts_generator$o(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$n(function() {
                     var _this_performanceClient, instanceDiscoveryEndpoint, options, match, response, typedResponseBody, metadata, error, typedError;
-                    return _ts_generator$o(this, function(_state) {
+                    return _ts_generator$n(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.AuthorityGetCloudDiscoveryMetadataFromNetwork, _this.correlationId);
@@ -3963,7 +3963,7 @@ function _ts_generator$o(thisArg, body) {
                                 ];
                             case 3:
                                 error = _state.sent();
-                                if (_instanceof$j(error, AuthError)) {
+                                if (_instanceof$i(error, AuthError)) {
                                     _this.logger.error("There was a network error while attempting to get the cloud discovery instance metadata.\nError: ".concat(error.errorCode, "\nError Description: ").concat(error.errorMessage));
                                 } else {
                                     typedError = error;
@@ -4222,7 +4222,7 @@ function _async_to_generator$m(fn) {
         });
     };
 }
-function _ts_generator$n(thisArg, body) {
+function _ts_generator$m(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -4336,7 +4336,7 @@ function _createDiscoveredInstance() {
  * @internal
  */ _async_to_generator$m(function(authorityUri, networkClient, cacheManager, authorityOptions, logger, correlationId, performanceClient) {
         var authorityUriFinal, acquireTokenAuthority;
-        return _ts_generator$n(this, function(_state) {
+        return _ts_generator$m(this, function(_state) {
             switch(_state.label){
                 case 0:
                     performanceClient === null || performanceClient === void 0 ? void 0 : performanceClient.addQueueMeasurement(PerformanceEvents.AuthorityFactoryCreateDiscoveredInstance, correlationId);
@@ -4403,7 +4403,7 @@ function _async_to_generator$l(fn) {
         });
     };
 }
-function _ts_generator$m(thisArg, body) {
+function _ts_generator$l(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -4507,7 +4507,7 @@ function _getClientAssertion() {
  * Licensed under the MIT License.
  */ _async_to_generator$l(function(clientAssertion, clientId, tokenEndpoint) {
         var config;
-        return _ts_generator$m(this, function(_state) {
+        return _ts_generator$l(this, function(_state) {
             if (typeof clientAssertion === "string") {
                 return [
                     2,
@@ -4603,7 +4603,7 @@ function _async_to_generator$k(fn) {
         });
     };
 }
-function _ts_generator$l(thisArg, body) {
+function _ts_generator$k(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -4719,35 +4719,35 @@ function _ts_generator$l(thisArg, body) {
     },
     getPublicKeyThumbprint: function getPublicKeyThumbprint() {
         return _async_to_generator$k(function() {
-            return _ts_generator$l(this, function(_state) {
+            return _ts_generator$k(this, function(_state) {
                 throw createClientAuthError(methodNotImplemented);
             });
         })();
     },
     removeTokenBindingKey: function removeTokenBindingKey() {
         return _async_to_generator$k(function() {
-            return _ts_generator$l(this, function(_state) {
+            return _ts_generator$k(this, function(_state) {
                 throw createClientAuthError(methodNotImplemented);
             });
         })();
     },
     clearKeystore: function clearKeystore() {
         return _async_to_generator$k(function() {
-            return _ts_generator$l(this, function(_state) {
+            return _ts_generator$k(this, function(_state) {
                 throw createClientAuthError(methodNotImplemented);
             });
         })();
     },
     signJwt: function signJwt() {
         return _async_to_generator$k(function() {
-            return _ts_generator$l(this, function(_state) {
+            return _ts_generator$k(this, function(_state) {
                 throw createClientAuthError(methodNotImplemented);
             });
         })();
     },
     hashString: function hashString() {
         return _async_to_generator$k(function() {
-            return _ts_generator$l(this, function(_state) {
+            return _ts_generator$k(this, function(_state) {
                 throw createClientAuthError(methodNotImplemented);
             });
         })();
@@ -4990,7 +4990,7 @@ function _create_class$C(Constructor, protoProps, staticProps) {
 }();
 /* eslint-disable header/header */ var name$1 = "@azure/msal-common";
-var version$1 = "14.13.0";
+var version$1 = "14.13.1";
 function _array_like_to_array$a(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
@@ -5399,20 +5399,35 @@ function _object_without_properties_loose(source, excluded) {
  */ function tenantIdMatchesHomeTenant(tenantId, homeAccountId) {
     return !!tenantId && !!homeAccountId && tenantId === homeAccountId.split(".")[1];
 }
-function buildTenantProfileFromIdTokenClaims(homeAccountId, idTokenClaims) {
-    var oid = idTokenClaims.oid, sub = idTokenClaims.sub, tid = idTokenClaims.tid, name = idTokenClaims.name, tfp = idTokenClaims.tfp, acr = idTokenClaims.acr;
-    /**
-     * Since there is no way to determine if the authority is AAD or B2C, we exhaust all the possible claims that can serve as tenant ID with the following precedence:
-     * tid - TenantID claim that identifies the tenant that issued the token in AAD. Expected in all AAD ID tokens, not present in B2C ID Tokens.
-     * tfp - Trust Framework Policy claim that identifies the policy that was used to authenticate the user. Functions as tenant for B2C scenarios.
-     * acr - Authentication Context Class Reference claim used only with older B2C policies. Fallback in case tfp is not present, but likely won't be present anyway.
-     */ var tenantId = tid || tfp || acr || "";
-    return {
-        tenantId: tenantId,
-        localAccountId: oid || sub || "",
-        name: name,
-        isHomeTenant: tenantIdMatchesHomeTenant(tenantId, homeAccountId)
-    };
+/**
+ * Build tenant profile
+ * @param homeAccountId - Home account identifier for this account object
+ * @param localAccountId - Local account identifer for this account object
+ * @param tenantId - Full tenant or organizational id that this account belongs to
+ * @param idTokenClaims - Claims from the ID token
+ * @returns
+ */ function buildTenantProfile(homeAccountId, localAccountId, tenantId, idTokenClaims) {
+    if (idTokenClaims) {
+        var oid = idTokenClaims.oid, sub = idTokenClaims.sub, tid = idTokenClaims.tid, name = idTokenClaims.name, tfp = idTokenClaims.tfp, acr = idTokenClaims.acr;
+        /**
+         * Since there is no way to determine if the authority is AAD or B2C, we exhaust all the possible claims that can serve as tenant ID with the following precedence:
+         * tid - TenantID claim that identifies the tenant that issued the token in AAD. Expected in all AAD ID tokens, not present in B2C ID Tokens.
+         * tfp - Trust Framework Policy claim that identifies the policy that was used to authenticate the user. Functions as tenant for B2C scenarios.
+         * acr - Authentication Context Class Reference claim used only with older B2C policies. Fallback in case tfp is not present, but likely won't be present anyway.
+         */ var _$tenantId = tid || tfp || acr || "";
+        return {
+            tenantId: _$tenantId,
+            localAccountId: oid || sub || "",
+            name: name,
+            isHomeTenant: tenantIdMatchesHomeTenant(_$tenantId, homeAccountId)
+        };
+    } else {
+        return {
+            tenantId: tenantId,
+            localAccountId: localAccountId,
+            isHomeTenant: tenantIdMatchesHomeTenant(tenantId, homeAccountId)
+        };
+    }
 }
 /**
  * Replaces account info that varies by tenant profile sourced from the ID token claims passed in with the tenant-specific account info
@@ -5433,7 +5448,7 @@ function buildTenantProfileFromIdTokenClaims(homeAccountId, idTokenClaims) {
     if (idTokenClaims) {
         // Ignore isHomeTenant, loginHint, and sid which are part of tenant profile but not base account info
         // eslint-disable-next-line @typescript-eslint/no-unused-vars
-        var _buildTenantProfileFromIdTokenClaims = buildTenantProfileFromIdTokenClaims(baseAccountInfo.homeAccountId, idTokenClaims); _buildTenantProfileFromIdTokenClaims.isHomeTenant; var claimsSourcedTenantProfile = _object_without_properties(_buildTenantProfileFromIdTokenClaims, [
+        var _buildTenantProfile = buildTenantProfile(baseAccountInfo.homeAccountId, baseAccountInfo.localAccountId, baseAccountInfo.tenantId, idTokenClaims); _buildTenantProfile.isHomeTenant; var claimsSourcedTenantProfile = _object_without_properties(_buildTenantProfile, [
             "isHomeTenant"
         ]);
         updatedAccountInfo = _object_spread_props$7(_object_spread$b({}, updatedAccountInfo, claimsSourcedTenantProfile), {
@@ -5631,12 +5646,10 @@ function _create_class$A(Constructor, protoProps, staticProps) {
                 if (accountDetails.tenantProfiles) {
                     account.tenantProfiles = accountDetails.tenantProfiles;
                 } else {
-                    var tenantProfiles = [];
-                    if (accountDetails.idTokenClaims) {
-                        var tenantProfile = buildTenantProfileFromIdTokenClaims(accountDetails.homeAccountId, accountDetails.idTokenClaims);
-                        tenantProfiles.push(tenantProfile);
-                    }
-                    account.tenantProfiles = tenantProfiles;
+                    var tenantProfile = buildTenantProfile(accountDetails.homeAccountId, account.localAccountId, account.realm, accountDetails.idTokenClaims);
+                    account.tenantProfiles = [
+                        tenantProfile
+                    ];
                 }
                 return account;
             }
@@ -5974,7 +5987,7 @@ function _inherits$c(subClass, superClass) {
     });
     if (superClass) _set_prototype_of$c(subClass, superClass);
 }
-function _instanceof$i(left, right) {
+function _instanceof$h(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
@@ -6037,7 +6050,7 @@ function _create_super$c(Derived) {
         return _possible_constructor_return$c(this, result);
     };
 }
-function _ts_generator$k(thisArg, body) {
+function _ts_generator$j(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -6203,16 +6216,10 @@ function _ts_generator$k(thisArg, body) {
             value: function buildTenantProfiles(cachedAccounts, accountFilter) {
                 var _this = this;
                 return cachedAccounts.flatMap(function(accountEntity) {
-                    return _this.getAccountInfoForTenantProfiles(accountEntity, accountFilter);
+                    return _this.getTenantProfilesFromAccountEntity(accountEntity, accountFilter === null || accountFilter === void 0 ? void 0 : accountFilter.tenantId, accountFilter);
                 });
             }
         },
-        {
-            key: "getAccountInfoForTenantProfiles",
-            value: function getAccountInfoForTenantProfiles(accountEntity, accountFilter) {
-                return this.getTenantProfilesFromAccountEntity(accountEntity, accountFilter === null || accountFilter === void 0 ? void 0 : accountFilter.tenantId, accountFilter);
-            }
-        },
         {
             key: "getTenantedAccountInfoByFilter",
             value: function getTenantedAccountInfoByFilter(accountInfo, tokenKeys, tenantProfile, tenantProfileFilter) {
@@ -6319,7 +6326,7 @@ function _ts_generator$k(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$j(function() {
                     var e, _this_commonLogger, _this_commonLogger1, _this_commonLogger2, _this_commonLogger3;
-                    return _ts_generator$k(this, function(_state) {
+                    return _ts_generator$j(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 if (!cacheRecord) {
@@ -6364,7 +6371,7 @@ function _ts_generator$k(thisArg, body) {
                             case 4:
                                 e = _state.sent();
                                 (_this_commonLogger = _this.commonLogger) === null || _this_commonLogger === void 0 ? void 0 : _this_commonLogger.error("CacheManager.saveCacheRecord: failed");
-                                if (_instanceof$i(e, Error)) {
+                                if (_instanceof$h(e, Error)) {
                                     (_this_commonLogger1 = _this.commonLogger) === null || _this_commonLogger1 === void 0 ? void 0 : _this_commonLogger1.errorPii("CacheManager.saveCacheRecord: ".concat(e.message), correlationId);
                                     if (e.name === "QuotaExceededError" || e.name === "NS_ERROR_DOM_QUOTA_REACHED" || e.message.includes("exceeded the quota")) {
                                         (_this_commonLogger2 = _this.commonLogger) === null || _this_commonLogger2 === void 0 ? void 0 : _this_commonLogger2.error("CacheManager.saveCacheRecord: exceeded storage quota", correlationId);
@@ -6394,7 +6401,7 @@ function _ts_generator$k(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$j(function() {
                     var accessTokenFilter, tokenKeys, currentScopes, removedAccessTokens;
-                    return _ts_generator$k(this, function(_state) {
+                    return _ts_generator$j(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 accessTokenFilter = {
@@ -6669,7 +6676,7 @@ function _ts_generator$k(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$j(function() {
                     var allAccountKeys, removedAccounts;
-                    return _ts_generator$k(this, function(_state) {
+                    return _ts_generator$j(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 allAccountKeys = _this.getAccountKeys();
@@ -6700,7 +6707,7 @@ function _ts_generator$k(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$j(function() {
                     var account;
-                    return _ts_generator$k(this, function(_state) {
+                    return _ts_generator$j(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 account = _this.getAccount(accountKey, _this.commonLogger);
@@ -6733,7 +6740,7 @@ function _ts_generator$k(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$j(function() {
                     var allTokenKeys, accountId, removedCredentials;
-                    return _ts_generator$k(this, function(_state) {
+                    return _ts_generator$j(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 allTokenKeys = _this.getTokenKeys();
@@ -6834,7 +6841,7 @@ function _ts_generator$k(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$j(function() {
                     var credential, accessTokenWithAuthSchemeEntity, kid;
-                    return _ts_generator$k(this, function(_state) {
+                    return _ts_generator$j(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 credential = _this.getAccessTokenCredential(key);
@@ -7653,7 +7660,7 @@ function _ts_generator$k(thisArg, body) {
             key: "clear",
             value: function clear() {
                 return _async_to_generator$j(function() {
-                    return _ts_generator$k(this, function(_state) {
+                    return _ts_generator$j(this, function(_state) {
                         throw createClientAuthError(methodNotImplemented);
                     });
                 })();
@@ -7732,7 +7739,7 @@ function _object_spread$9(target) {
     }
     return target;
 }
-function _ts_generator$j(thisArg, body) {
+function _ts_generator$i(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -7848,14 +7855,14 @@ var DEFAULT_CACHE_OPTIONS$1 = {
 var DEFAULT_NETWORK_IMPLEMENTATION = {
     sendGetRequestAsync: function sendGetRequestAsync() {
         return _async_to_generator$i(function() {
-            return _ts_generator$j(this, function(_state) {
+            return _ts_generator$i(this, function(_state) {
                 throw createClientAuthError(methodNotImplemented);
             });
         })();
     },
     sendPostRequestAsync: function sendPostRequestAsync() {
         return _async_to_generator$i(function() {
-            return _ts_generator$j(this, function(_state) {
+            return _ts_generator$i(this, function(_state) {
                 throw createClientAuthError(methodNotImplemented);
             });
         })();
@@ -8193,14 +8200,14 @@ function _create_class$x(Constructor, protoProps, staticProps) {
     if (staticProps) _defineProperties$x(Constructor, staticProps);
     return Constructor;
 }
-function _instanceof$h(left, right) {
+function _instanceof$g(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
         return left instanceof right;
     }
 }
-function _ts_generator$i(thisArg, body) {
+function _ts_generator$h(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -8316,7 +8323,7 @@ function _ts_generator$i(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$h(function() {
                     var response, e;
-                    return _ts_generator$i(this, function(_state) {
+                    return _ts_generator$h(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 ThrottlingUtils.preProcess(_this.cacheManager, thumbprint);
@@ -8340,7 +8347,7 @@ function _ts_generator$i(thisArg, body) {
                                 ];
                             case 3:
                                 e = _state.sent();
-                                if (_instanceof$h(e, AuthError)) {
+                                if (_instanceof$g(e, AuthError)) {
                                     throw e;
                                 } else {
                                     throw createClientAuthError(networkError);
@@ -9058,7 +9065,7 @@ function _create_class$u(Constructor, protoProps, staticProps) {
     if (staticProps) _defineProperties$u(Constructor, staticProps);
     return Constructor;
 }
-function _ts_generator$h(thisArg, body) {
+function _ts_generator$g(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -9219,7 +9226,7 @@ function _ts_generator$h(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$g(function() {
                     var _response_body_refresh_token, _response_headers, _this_performanceClient, _this_performanceClient1, response;
-                    return _ts_generator$h(this, function(_state) {
+                    return _ts_generator$g(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 if (queuedEvent) {
@@ -9260,7 +9267,7 @@ function _ts_generator$h(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$g(function() {
                     var _this_performanceClient, cloudInstanceAuthorityUri, cloudInstanceAuthority;
-                    return _ts_generator$h(this, function(_state) {
+                    return _ts_generator$g(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.UpdateTokenEndpointAuthority, correlationId);
@@ -9641,7 +9648,7 @@ function _object_spread$8(target) {
     }
     return target;
 }
-function _ts_generator$g(thisArg, body) {
+function _ts_generator$f(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -9761,7 +9768,7 @@ function _ts_generator$g(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$f(function() {
                     var _this_performanceClient, reqCnf, reqCnfString;
-                    return _ts_generator$g(this, function(_state) {
+                    return _ts_generator$f(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.PopTokenGenerateCnf, request.correlationId);
@@ -9794,7 +9801,7 @@ function _ts_generator$g(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$f(function() {
                     var _this_performanceClient, kidThumbprint;
-                    return _ts_generator$g(this, function(_state) {
+                    return _ts_generator$f(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.PopTokenGenerateKid, request.correlationId);
@@ -9826,7 +9833,7 @@ function _ts_generator$g(thisArg, body) {
      */ function signPopToken(accessToken, keyId, request) {
                 var _this = this;
                 return _async_to_generator$f(function() {
-                    return _ts_generator$g(this, function(_state) {
+                    return _ts_generator$f(this, function(_state) {
                         return [
                             2,
                             _this.signPayload(accessToken, keyId, request)
@@ -9848,7 +9855,7 @@ function _ts_generator$g(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$f(function() {
                     var resourceRequestMethod, resourceRequestUri, shrClaims, shrNonce, shrOptions, resourceUrlString, resourceUrlComponents;
-                    return _ts_generator$g(this, function(_state) {
+                    return _ts_generator$f(this, function(_state) {
                         // Deconstruct request to extract SHR parameters
                         resourceRequestMethod = request.resourceRequestMethod, resourceRequestUri = request.resourceRequestUri, shrClaims = request.shrClaims, shrNonce = request.shrNonce, shrOptions = request.shrOptions;
                         resourceUrlString = resourceRequestUri ? new UrlString(resourceRequestUri) : undefined;
@@ -9977,7 +9984,7 @@ function _create_class$q(Constructor, protoProps, staticProps) {
     if (staticProps) _defineProperties$q(Constructor, staticProps);
     return Constructor;
 }
-function _ts_generator$f(thisArg, body) {
+function _ts_generator$e(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -10173,7 +10180,7 @@ function _ts_generator$f(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$e(function() {
                     var _this_performanceClient, idTokenClaims, authTime, requestStateObj, cacheRecord, cacheContext, key, account;
-                    return _ts_generator$f(this, function(_state) {
+                    return _ts_generator$e(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.HandleServerTokenResponse, serverTokenResponse.correlation_id);
@@ -10362,7 +10369,7 @@ function _ts_generator$f(thisArg, body) {
      */ function generateAuthenticationResult(cryptoObj, authority, cacheRecord, fromTokenCache, request, idTokenClaims, requestState, serverTokenResponse, requestId) {
                 return _async_to_generator$e(function() {
                     var _cacheRecord_idToken, _cacheRecord_idToken1, _cacheRecord_accessToken, _cacheRecord_account, _cacheRecord_account1, accessToken, responseScopes, expiresOn, extExpiresOn, refreshOn, familyId, popTokenGenerator, _cacheRecord_accessToken1, secret, keyId, uid, tid, accountInfo;
-                    return _ts_generator$f(this, function(_state) {
+                    return _ts_generator$e(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 accessToken = Constants$1.EMPTY_STRING;
@@ -10469,10 +10476,11 @@ function buildAccountToCache(cacheStorage, authority, homeAccountId, base64Decod
         nativeAccountId: nativeAccountId
     }, authority, base64Decode);
     var tenantProfiles = baseAccount.tenantProfiles || [];
-    if (claimsTenantId && idTokenClaims && !tenantProfiles.find(function(tenantProfile) {
-        return tenantProfile.tenantId === claimsTenantId;
+    var tenantId = claimsTenantId || baseAccount.realm;
+    if (tenantId && !tenantProfiles.find(function(tenantProfile) {
+        return tenantProfile.tenantId === tenantId;
     })) {
-        var newTenantProfile = buildTenantProfileFromIdTokenClaims(homeAccountId, idTokenClaims);
+        var newTenantProfile = buildTenantProfile(homeAccountId, baseAccount.localAccountId, tenantId, idTokenClaims);
         tenantProfiles.push(newTenantProfile);
     }
     baseAccount.tenantProfiles = tenantProfiles;
@@ -10631,7 +10639,7 @@ function _create_super$9(Derived) {
         return _possible_constructor_return$9(this, result);
     };
 }
-function _ts_generator$e(thisArg, body) {
+function _ts_generator$d(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -10761,7 +10769,7 @@ function _ts_generator$e(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$d(function() {
                     var _this_performanceClient, queryString;
-                    return _ts_generator$e(this, function(_state) {
+                    return _ts_generator$d(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.GetAuthCodeUrl, request.correlationId);
@@ -10790,7 +10798,7 @@ function _ts_generator$e(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$d(function() {
                     var _this_performanceClient, _response_headers, reqTimestamp, response, requestId, responseHandler;
-                    return _ts_generator$e(this, function(_state) {
+                    return _ts_generator$d(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.AuthClientAcquireToken, request.correlationId);
@@ -10862,7 +10870,7 @@ function _ts_generator$e(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$d(function() {
                     var _this_performanceClient, _request_tokenBodyParameters, queryParametersString, endpoint, requestBody, ccsCredential, clientInfo, headers, thumbprint;
-                    return _ts_generator$e(this, function(_state) {
+                    return _ts_generator$d(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.AuthClientExecuteTokenRequest, request.correlationId);
@@ -10916,7 +10924,7 @@ function _ts_generator$e(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$d(function() {
                     var _this_performanceClient, _request_tokenBodyParameters, parameterBuilder, clientAssertion, _, popTokenGenerator, reqCnfData, generatedReqCnfData, correlationId, ccsCred, clientInfo, clientInfo1;
-                    return _ts_generator$e(this, function(_state) {
+                    return _ts_generator$d(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.AuthClientCreateTokenRequestBody, request.correlationId);
@@ -11069,7 +11077,7 @@ function _ts_generator$e(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$d(function() {
                     var _this_performanceClient, _request_extraQueryParameters, parameterBuilder, requestScopes, correlationId, accountSid, accountLoginHintClaim, clientInfo, clientInfo1, clientInfo2, popTokenGenerator, reqCnfData, generatedReqCnfData;
-                    return _ts_generator$e(this, function(_state) {
+                    return _ts_generator$d(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.AuthClientCreateQueryString, request.correlationId);
@@ -11350,7 +11358,7 @@ function _inherits$8(subClass, superClass) {
     });
     if (superClass) _set_prototype_of$8(subClass, superClass);
 }
-function _instanceof$g(left, right) {
+function _instanceof$f(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
@@ -11437,7 +11445,7 @@ function _create_super$8(Derived) {
         return _possible_constructor_return$8(this, result);
     };
 }
-function _ts_generator$d(thisArg, body) {
+function _ts_generator$c(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -11553,7 +11561,7 @@ function _ts_generator$d(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$c(function() {
                     var _this_performanceClient, _response_headers, reqTimestamp, response, requestId, responseHandler;
-                    return _ts_generator$d(this, function(_state) {
+                    return _ts_generator$c(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireToken, request.correlationId);
@@ -11586,7 +11594,7 @@ function _ts_generator$d(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$c(function() {
                     var _this_performanceClient, isFOCI, e, noFamilyRTInCache, clientMismatchErrorWithFamilyRT;
-                    return _ts_generator$d(this, function(_state) {
+                    return _ts_generator$c(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 // Cannot renew token if no request object is given.
@@ -11623,8 +11631,8 @@ function _ts_generator$d(thisArg, body) {
                                 ];
                             case 3:
                                 e = _state.sent();
-                                noFamilyRTInCache = _instanceof$g(e, InteractionRequiredAuthError) && e.errorCode === noTokensFound;
-                                clientMismatchErrorWithFamilyRT = _instanceof$g(e, ServerError) && e.errorCode === Errors.INVALID_GRANT_ERROR && e.subError === Errors.CLIENT_MISMATCH_ERROR;
+                                noFamilyRTInCache = _instanceof$f(e, InteractionRequiredAuthError) && e.errorCode === noTokensFound;
+                                clientMismatchErrorWithFamilyRT = _instanceof$f(e, ServerError) && e.errorCode === Errors.INVALID_GRANT_ERROR && e.subError === Errors.CLIENT_MISMATCH_ERROR;
                                 // if family Refresh Token (FRT) cache acquisition fails or if client_mismatch error is seen with FRT, reattempt with application Refresh Token (ART)
                                 if (noFamilyRTInCache || clientMismatchErrorWithFamilyRT) {
                                     return [
@@ -11655,7 +11663,7 @@ function _ts_generator$d(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$c(function() {
                     var _this_performanceClient, refreshToken, refreshTokenRequest, e, badRefreshTokenKey;
-                    return _ts_generator$d(this, function(_state) {
+                    return _ts_generator$c(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.RefreshTokenClientAcquireTokenWithCachedRefreshToken, request.correlationId);
@@ -11695,7 +11703,7 @@ function _ts_generator$d(thisArg, body) {
                                 ];
                             case 3:
                                 e = _state.sent();
-                                if (_instanceof$g(e, InteractionRequiredAuthError) && e.subError === badToken) {
+                                if (_instanceof$f(e, InteractionRequiredAuthError) && e.subError === badToken) {
                                     // Remove bad refresh token from cache
                                     _this.logger.verbose("acquireTokenWithRefreshToken: bad refresh token, removing from cache");
                                     badRefreshTokenKey = generateCredentialKey(refreshToken);
@@ -11721,7 +11729,7 @@ function _ts_generator$d(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$c(function() {
                     var _this_performanceClient, _request_tokenBodyParameters, queryParametersString, endpoint, requestBody, headers, thumbprint;
-                    return _ts_generator$d(this, function(_state) {
+                    return _ts_generator$c(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.RefreshTokenClientExecuteTokenRequest, request.correlationId);
@@ -11763,7 +11771,7 @@ function _ts_generator$d(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$c(function() {
                     var _this_performanceClient, _request_tokenBodyParameters, _this_config_authOptions_authority_options_OIDCOptions, correlationId, parameterBuilder, clientAssertion, _, popTokenGenerator, reqCnfData, generatedReqCnfData, clientInfo;
-                    return _ts_generator$d(this, function(_state) {
+                    return _ts_generator$c(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.RefreshTokenClientCreateTokenRequestBody, request.correlationId);
@@ -11975,7 +11983,7 @@ function _inherits$7(subClass, superClass) {
     });
     if (superClass) _set_prototype_of$7(subClass, superClass);
 }
-function _instanceof$f(left, right) {
+function _instanceof$e(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
@@ -12109,7 +12117,7 @@ function _create_super$7(Derived) {
         return _possible_constructor_return$7(this, result);
     };
 }
-function _ts_generator$c(thisArg, body) {
+function _ts_generator$b(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -12225,7 +12233,7 @@ function _ts_generator$c(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$b(function() {
                     var _request_scopes, _ref, authResponse, cacheOutcome, refreshTokenClient, e, refreshTokenClient1;
-                    return _ts_generator$c(this, function(_state) {
+                    return _ts_generator$b(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 _state.trys.push([
@@ -12261,7 +12269,7 @@ function _ts_generator$c(thisArg, body) {
                                 ];
                             case 2:
                                 e = _state.sent();
-                                if (_instanceof$f(e, ClientAuthError) && e.errorCode === tokenRefreshRequired) {
+                                if (_instanceof$e(e, ClientAuthError) && e.errorCode === tokenRefreshRequired) {
                                     refreshTokenClient1 = new RefreshTokenClient(_this.config, _this.performanceClient);
                                     return [
                                         2,
@@ -12288,7 +12296,7 @@ function _ts_generator$c(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$b(function() {
                     var _this_performanceClient, lastCacheOutcome, requestTenantId, tokenKeys, cachedAccessToken, environment, cacheRecord;
-                    return _ts_generator$c(this, function(_state) {
+                    return _ts_generator$b(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.SilentFlowClientAcquireCachedToken, request.correlationId);
@@ -12369,7 +12377,7 @@ function _ts_generator$c(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$b(function() {
                     var _this_performanceClient, idTokenClaims, authTime;
-                    return _ts_generator$c(this, function(_state) {
+                    return _ts_generator$b(this, function(_state) {
                         (_this_performanceClient = _this.performanceClient) === null || _this_performanceClient === void 0 ? void 0 : _this_performanceClient.addQueueMeasurement(PerformanceEvents.SilentFlowClientGenerateResultFromCacheRecord, request.correlationId);
                         if (cacheRecord.idToken) {
                             idTokenClaims = extractTokenClaims(cacheRecord.idToken.secret, _this.config.cryptoInterface.base64Decode);
@@ -12413,7 +12421,7 @@ function _create_class$m(Constructor, protoProps, staticProps) {
     if (staticProps) _defineProperties$m(Constructor, staticProps);
     return Constructor;
 }
-function _instanceof$e(left, right) {
+function _instanceof$d(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
@@ -12496,8 +12504,8 @@ function _instanceof$e(left, right) {
                     lastRequests.errors.shift();
                 }
                 lastRequests.failedRequests.push(this.apiId, this.correlationId);
-                if (_instanceof$e(error, Error) && !!error && error.toString()) {
-                    if (_instanceof$e(error, AuthError)) {
+                if (_instanceof$d(error, Error) && !!error && error.toString()) {
+                    if (_instanceof$d(error, AuthError)) {
                         if (error.subError) {
                             lastRequests.errors.push(error.subError);
                         } else if (error.errorCode) {
@@ -12899,6 +12907,8 @@ var ProxyStatus = {
  */ var JwtConstants = {
     ALGORITHM: "alg",
     RSA_256: "RS256",
+    PSS_256: "PS256",
+    X5T_256: "x5t#S256",
     X5T: "x5t",
     X5C: "x5c",
     AUDIENCE: "aud",
@@ -13108,7 +13118,7 @@ function _unsupported_iterable_to_array$6(o, minLen) {
     if (n === "Map" || n === "Set") return Array.from(n);
     if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$6(o, minLen);
 }
-function _ts_generator$b(thisArg, body) {
+function _ts_generator$a(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -13224,7 +13234,7 @@ function _ts_generator$b(thisArg, body) {
      */ function sendGetRequestAsync(url, options, timeout) {
                 var _this = this;
                 return _async_to_generator$a(function() {
-                    return _ts_generator$b(this, function(_state) {
+                    return _ts_generator$a(this, function(_state) {
                         if (_this.proxyUrl) {
                             return [
                                 2,
@@ -13249,7 +13259,7 @@ function _ts_generator$b(thisArg, body) {
      */ function sendPostRequestAsync(url, options) {
                 var _this = this;
                 return _async_to_generator$a(function() {
-                    return _ts_generator$b(this, function(_state) {
+                    return _ts_generator$a(this, function(_state) {
                         if (_this.proxyUrl) {
                             return [
                                 2,
@@ -13621,78 +13631,282 @@ function createManagedIdentityError(errorCode) {
     return new ManagedIdentityError(errorCode);
 }
-function _define_property$5(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
+function _assert_this_initialized$5(self) {
+    if (self === void 0) {
+        throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
     }
-    return obj;
+    return self;
 }
-function _object_spread$4(target) {
-    for(var i = 1; i < arguments.length; i++){
-        var source = arguments[i] != null ? arguments[i] : {};
-        var ownKeys = Object.keys(source);
-        if (typeof Object.getOwnPropertySymbols === "function") {
-            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
-            }));
-        }
-        ownKeys.forEach(function(key) {
-            _define_property$5(target, key, source[key]);
-        });
+function _class_call_check$i(instance, Constructor) {
+    if (!(instance instanceof Constructor)) {
+        throw new TypeError("Cannot call a class as a function");
     }
-    return target;
 }
-function ownKeys$3(object, enumerableOnly) {
-    var keys = Object.keys(object);
-    if (Object.getOwnPropertySymbols) {
-        var symbols = Object.getOwnPropertySymbols(object);
-        if (enumerableOnly) {
-            symbols = symbols.filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(object, sym).enumerable;
-            });
+function _defineProperties$i(target, props) {
+    for(var i = 0; i < props.length; i++){
+        var descriptor = props[i];
+        descriptor.enumerable = descriptor.enumerable || false;
+        descriptor.configurable = true;
+        if ("value" in descriptor) descriptor.writable = true;
+        Object.defineProperty(target, descriptor.key, descriptor);
+    }
+}
+function _create_class$i(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$i(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$i(Constructor, staticProps);
+    return Constructor;
+}
+function _get_prototype_of$5(o) {
+    _get_prototype_of$5 = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o) {
+        return o.__proto__ || Object.getPrototypeOf(o);
+    };
+    return _get_prototype_of$5(o);
+}
+function _inherits$5(subClass, superClass) {
+    if (typeof superClass !== "function" && superClass !== null) {
+        throw new TypeError("Super expression must either be null or a function");
+    }
+    subClass.prototype = Object.create(superClass && superClass.prototype, {
+        constructor: {
+            value: subClass,
+            writable: true,
+            configurable: true
         }
-        keys.push.apply(keys, symbols);
+    });
+    if (superClass) _set_prototype_of$5(subClass, superClass);
+}
+function _possible_constructor_return$5(self, call) {
+    if (call && (_type_of$d(call) === "object" || typeof call === "function")) {
+        return call;
     }
-    return keys;
+    return _assert_this_initialized$5(self);
 }
-function _object_spread_props$3(target, source) {
-    source = source != null ? source : {};
-    if (Object.getOwnPropertyDescriptors) {
-        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
-    } else {
-        ownKeys$3(Object(source)).forEach(function(key) {
-            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
-        });
+function _set_prototype_of$5(o, p) {
+    _set_prototype_of$5 = Object.setPrototypeOf || function setPrototypeOf(o, p) {
+        o.__proto__ = p;
+        return o;
+    };
+    return _set_prototype_of$5(o, p);
+}
+function _type_of$d(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _is_native_reflect_construct$5() {
+    if (typeof Reflect === "undefined" || !Reflect.construct) return false;
+    if (Reflect.construct.sham) return false;
+    if (typeof Proxy === "function") return true;
+    try {
+        Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function() {}));
+        return true;
+    } catch (e) {
+        return false;
     }
-    return target;
+}
+function _create_super$5(Derived) {
+    var hasNativeReflectConstruct = _is_native_reflect_construct$5();
+    return function _createSuperInternal() {
+        var Super = _get_prototype_of$5(Derived), result;
+        if (hasNativeReflectConstruct) {
+            var NewTarget = _get_prototype_of$5(this).constructor;
+            result = Reflect.construct(Super, arguments, NewTarget);
+        } else {
+            result = Super.apply(this, arguments);
+        }
+        return _possible_constructor_return$5(this, result);
+    };
 }
 /*
  * Copyright (c) Microsoft Corporation. All rights reserved.
  * Licensed under the MIT License.
- */ var DEFAULT_AUTH_OPTIONS = {
-    clientId: Constants$1.EMPTY_STRING,
-    authority: Constants$1.DEFAULT_AUTHORITY,
-    clientSecret: Constants$1.EMPTY_STRING,
-    clientAssertion: Constants$1.EMPTY_STRING,
-    clientCertificate: {
-        thumbprint: Constants$1.EMPTY_STRING,
-        privateKey: Constants$1.EMPTY_STRING,
-        x5c: Constants$1.EMPTY_STRING
+ */ /**
+ * NodeAuthErrorMessage class containing string constants used by error codes and messages.
+ */ var NodeAuthErrorMessage = {
+    invalidLoopbackAddressType: {
+        code: "invalid_loopback_server_address_type",
+        desc: "Loopback server address is not type string. This is unexpected."
     },
-    knownAuthorities: [],
-    cloudDiscoveryMetadata: Constants$1.EMPTY_STRING,
-    authorityMetadata: Constants$1.EMPTY_STRING,
-    clientCapabilities: [],
-    protocolMode: ProtocolMode.AAD,
-    azureCloudOptions: {
-        azureCloudInstance: AzureCloudInstance.None,
+    unableToLoadRedirectUri: {
+        code: "unable_to_load_redirectUrl",
+        desc: "Loopback server callback was invoked without a url. This is unexpected."
+    },
+    noAuthCodeInResponse: {
+        code: "no_auth_code_in_response",
+        desc: "No auth code found in the server response. Please check your network trace to determine what happened."
+    },
+    noLoopbackServerExists: {
+        code: "no_loopback_server_exists",
+        desc: "No loopback server exists yet."
+    },
+    loopbackServerAlreadyExists: {
+        code: "loopback_server_already_exists",
+        desc: "Loopback server already exists. Cannot create another."
+    },
+    loopbackServerTimeout: {
+        code: "loopback_server_timeout",
+        desc: "Timed out waiting for auth code listener to be registered."
+    },
+    stateNotFoundError: {
+        code: "state_not_found",
+        desc: "State not found. Please verify that the request originated from msal."
+    },
+    thumbprintMissing: {
+        code: "thumbprint_missing_from_client_certificate",
+        desc: "Client certificate does not contain a SHA-1 or SHA-256 thumbprint."
+    }
+};
+var NodeAuthError = /*#__PURE__*/ function(AuthError) {
+    _inherits$5(NodeAuthError, AuthError);
+    var _super = _create_super$5(NodeAuthError);
+    function NodeAuthError(errorCode, errorMessage) {
+        _class_call_check$i(this, NodeAuthError);
+        var _this;
+        _this = _super.call(this, errorCode, errorMessage);
+        _this.name = "NodeAuthError";
+        return _this;
+    }
+    _create_class$i(NodeAuthError, null, [
+        {
+            key: "createInvalidLoopbackAddressTypeError",
+            value: /**
+     * Creates an error thrown if loopback server address is of type string.
+     */ function createInvalidLoopbackAddressTypeError() {
+                return new NodeAuthError(NodeAuthErrorMessage.invalidLoopbackAddressType.code, "".concat(NodeAuthErrorMessage.invalidLoopbackAddressType.desc));
+            }
+        },
+        {
+            key: "createUnableToLoadRedirectUrlError",
+            value: /**
+     * Creates an error thrown if the loopback server is unable to get a url.
+     */ function createUnableToLoadRedirectUrlError() {
+                return new NodeAuthError(NodeAuthErrorMessage.unableToLoadRedirectUri.code, "".concat(NodeAuthErrorMessage.unableToLoadRedirectUri.desc));
+            }
+        },
+        {
+            key: "createNoAuthCodeInResponseError",
+            value: /**
+     * Creates an error thrown if the server response does not contain an auth code.
+     */ function createNoAuthCodeInResponseError() {
+                return new NodeAuthError(NodeAuthErrorMessage.noAuthCodeInResponse.code, "".concat(NodeAuthErrorMessage.noAuthCodeInResponse.desc));
+            }
+        },
+        {
+            key: "createNoLoopbackServerExistsError",
+            value: /**
+     * Creates an error thrown if the loopback server has not been spun up yet.
+     */ function createNoLoopbackServerExistsError() {
+                return new NodeAuthError(NodeAuthErrorMessage.noLoopbackServerExists.code, "".concat(NodeAuthErrorMessage.noLoopbackServerExists.desc));
+            }
+        },
+        {
+            key: "createLoopbackServerAlreadyExistsError",
+            value: /**
+     * Creates an error thrown if a loopback server already exists when attempting to create another one.
+     */ function createLoopbackServerAlreadyExistsError() {
+                return new NodeAuthError(NodeAuthErrorMessage.loopbackServerAlreadyExists.code, "".concat(NodeAuthErrorMessage.loopbackServerAlreadyExists.desc));
+            }
+        },
+        {
+            key: "createLoopbackServerTimeoutError",
+            value: /**
+     * Creates an error thrown if the loopback server times out registering the auth code listener.
+     */ function createLoopbackServerTimeoutError() {
+                return new NodeAuthError(NodeAuthErrorMessage.loopbackServerTimeout.code, "".concat(NodeAuthErrorMessage.loopbackServerTimeout.desc));
+            }
+        },
+        {
+            key: "createStateNotFoundError",
+            value: /**
+     * Creates an error thrown when the state is not present.
+     */ function createStateNotFoundError() {
+                return new NodeAuthError(NodeAuthErrorMessage.stateNotFoundError.code, NodeAuthErrorMessage.stateNotFoundError.desc);
+            }
+        },
+        {
+            key: "createThumbprintMissingError",
+            value: /**
+     * Creates an error thrown when client certificate was provided, but neither the SHA-1 or SHA-256 thumbprints were provided
+     */ function createThumbprintMissingError() {
+                return new NodeAuthError(NodeAuthErrorMessage.thumbprintMissing.code, NodeAuthErrorMessage.thumbprintMissing.desc);
+            }
+        }
+    ]);
+    return NodeAuthError;
+}(AuthError);
+function _define_property$5(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$4(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$5(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$3(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        if (enumerableOnly) {
+            symbols = symbols.filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(object, sym).enumerable;
+            });
+        }
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$3(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$3(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+/*
+ * Copyright (c) Microsoft Corporation. All rights reserved.
+ * Licensed under the MIT License.
+ */ var DEFAULT_AUTH_OPTIONS = {
+    clientId: Constants$1.EMPTY_STRING,
+    authority: Constants$1.DEFAULT_AUTHORITY,
+    clientSecret: Constants$1.EMPTY_STRING,
+    clientAssertion: Constants$1.EMPTY_STRING,
+    clientCertificate: {
+        thumbprint: Constants$1.EMPTY_STRING,
+        thumbprintSha256: Constants$1.EMPTY_STRING,
+        privateKey: Constants$1.EMPTY_STRING,
+        x5c: Constants$1.EMPTY_STRING
+    },
+    knownAuthorities: [],
+    cloudDiscoveryMetadata: Constants$1.EMPTY_STRING,
+    authorityMetadata: Constants$1.EMPTY_STRING,
+    clientCapabilities: [],
+    protocolMode: ProtocolMode.AAD,
+    azureCloudOptions: {
+        azureCloudInstance: AzureCloudInstance.None,
         tenant: Constants$1.EMPTY_STRING
     },
     skipAuthorityMetadataCache: false
@@ -13737,6 +13951,10 @@ var DEFAULT_TELEMETRY_OPTIONS = {
         loggerOptions: (system === null || system === void 0 ? void 0 : system.loggerOptions) || DEFAULT_LOGGER_OPTIONS,
         disableInternalRetries: (system === null || system === void 0 ? void 0 : system.disableInternalRetries) || false
     });
+    // if client certificate was provided, ensure that at least one of the SHA-1 or SHA-256 thumbprints were provided
+    if (!!auth.clientCertificate && !!!auth.clientCertificate.thumbprint && !!!auth.clientCertificate.thumbprintSha256) {
+        throw NodeAuthError.createStateNotFoundError();
+    }
     return {
         auth: _object_spread$4({}, DEFAULT_AUTH_OPTIONS, auth),
         broker: _object_spread$4({}, broker),
@@ -13807,12 +14025,12 @@ function v4(options, buf, offset) {
     return stringify(rnds);
 }
-function _class_call_check$i(instance, Constructor) {
+function _class_call_check$h(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$i(target, props) {
+function _defineProperties$h(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -13821,9 +14039,9 @@ function _defineProperties$i(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$i(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$i(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$i(Constructor, staticProps);
+function _create_class$h(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$h(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$h(Constructor, staticProps);
     return Constructor;
 }
 /*
@@ -13831,9 +14049,9 @@ function _create_class$i(Constructor, protoProps, staticProps) {
  * Licensed under the MIT License.
  */ var GuidGenerator = /*#__PURE__*/ function() {
     function GuidGenerator() {
-        _class_call_check$i(this, GuidGenerator);
+        _class_call_check$h(this, GuidGenerator);
     }
-    _create_class$i(GuidGenerator, [
+    _create_class$h(GuidGenerator, [
         {
             /**
      *
@@ -13858,12 +14076,12 @@ function _create_class$i(Constructor, protoProps, staticProps) {
     return GuidGenerator;
 }();
-function _class_call_check$h(instance, Constructor) {
+function _class_call_check$g(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$h(target, props) {
+function _defineProperties$g(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -13872,9 +14090,9 @@ function _defineProperties$h(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$h(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$h(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$h(Constructor, staticProps);
+function _create_class$g(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$g(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$g(Constructor, staticProps);
     return Constructor;
 }
 /*
@@ -13882,9 +14100,9 @@ function _create_class$h(Constructor, protoProps, staticProps) {
  * Licensed under the MIT License.
  */ var EncodingUtils = /*#__PURE__*/ function() {
     function EncodingUtils() {
-        _class_call_check$h(this, EncodingUtils);
+        _class_call_check$g(this, EncodingUtils);
     }
-    _create_class$h(EncodingUtils, null, [
+    _create_class$g(EncodingUtils, null, [
         {
             key: "base64Encode",
             value: /**
@@ -13932,12 +14150,12 @@ function _create_class$h(Constructor, protoProps, staticProps) {
     return EncodingUtils;
 }();
-function _class_call_check$g(instance, Constructor) {
+function _class_call_check$f(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$g(target, props) {
+function _defineProperties$f(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -13946,9 +14164,9 @@ function _defineProperties$g(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$g(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$g(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$g(Constructor, staticProps);
+function _create_class$f(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$f(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$f(Constructor, staticProps);
     return Constructor;
 }
 /*
@@ -13956,9 +14174,9 @@ function _create_class$g(Constructor, protoProps, staticProps) {
  * Licensed under the MIT License.
  */ var HashUtils = /*#__PURE__*/ function() {
     function HashUtils() {
-        _class_call_check$g(this, HashUtils);
+        _class_call_check$f(this, HashUtils);
     }
-    _create_class$g(HashUtils, [
+    _create_class$f(HashUtils, [
         {
             /**
      * generate 'SHA256' hash
@@ -14001,12 +14219,12 @@ function _async_to_generator$9(fn) {
         });
     };
 }
-function _class_call_check$f(instance, Constructor) {
+function _class_call_check$e(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$f(target, props) {
+function _defineProperties$e(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -14015,12 +14233,12 @@ function _defineProperties$f(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$f(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$f(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$f(Constructor, staticProps);
+function _create_class$e(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$e(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$e(Constructor, staticProps);
     return Constructor;
 }
-function _ts_generator$a(thisArg, body) {
+function _ts_generator$9(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -14122,10 +14340,10 @@ function _ts_generator$a(thisArg, body) {
  * https://tools.ietf.org/html/rfc7636#page-8
  */ var PkceGenerator = /*#__PURE__*/ function() {
     function PkceGenerator() {
-        _class_call_check$f(this, PkceGenerator);
+        _class_call_check$e(this, PkceGenerator);
         this.hashUtils = new HashUtils();
     }
-    _create_class$f(PkceGenerator, [
+    _create_class$e(PkceGenerator, [
         {
             key: "generatePkceCodes",
             value: /**
@@ -14135,7 +14353,7 @@ function _ts_generator$a(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$9(function() {
                     var verifier, challenge;
-                    return _ts_generator$a(this, function(_state) {
+                    return _ts_generator$9(this, function(_state) {
                         verifier = _this.generateCodeVerifier();
                         challenge = _this.generateCodeChallengeFromVerifier(verifier);
                         return [
@@ -14210,12 +14428,12 @@ function _async_to_generator$8(fn) {
         });
     };
 }
-function _class_call_check$e(instance, Constructor) {
+function _class_call_check$d(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$e(target, props) {
+function _defineProperties$d(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -14224,12 +14442,12 @@ function _defineProperties$e(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$e(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$e(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$e(Constructor, staticProps);
+function _create_class$d(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$d(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$d(Constructor, staticProps);
     return Constructor;
 }
-function _ts_generator$9(thisArg, body) {
+function _ts_generator$8(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -14333,13 +14551,13 @@ function _ts_generator$9(thisArg, body) {
  * @public
  */ var CryptoProvider = /*#__PURE__*/ function() {
     function CryptoProvider() {
-        _class_call_check$e(this, CryptoProvider);
+        _class_call_check$d(this, CryptoProvider);
         // Browser crypto needs to be validated first before any other classes can be set.
         this.pkceGenerator = new PkceGenerator();
         this.guidGenerator = new GuidGenerator();
         this.hashUtils = new HashUtils();
     }
-    _create_class$e(CryptoProvider, [
+    _create_class$d(CryptoProvider, [
         {
             /**
      * base64 URL safe encoded string
@@ -14433,7 +14651,7 @@ function _ts_generator$9(thisArg, body) {
      */ function hashString(plainText) {
                 var _this = this;
                 return _async_to_generator$8(function() {
-                    return _ts_generator$9(this, function(_state) {
+                    return _ts_generator$8(this, function(_state) {
                         return [
                             2,
                             EncodingUtils.base64EncodeUrl(_this.hashUtils.sha256(plainText).toString("base64"), "base64")
@@ -14454,7 +14672,7 @@ function _array_like_to_array$5(arr, len) {
 function _array_without_holes$3(arr) {
     if (Array.isArray(arr)) return _array_like_to_array$5(arr);
 }
-function _assert_this_initialized$5(self) {
+function _assert_this_initialized$4(self) {
     if (self === void 0) {
         throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
     }
@@ -14489,12 +14707,12 @@ function _async_to_generator$7(fn) {
         });
     };
 }
-function _class_call_check$d(instance, Constructor) {
+function _class_call_check$c(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$d(target, props) {
+function _defineProperties$c(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -14503,9 +14721,9 @@ function _defineProperties$d(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$d(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$d(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$d(Constructor, staticProps);
+function _create_class$c(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$c(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$c(Constructor, staticProps);
     return Constructor;
 }
 function _define_property$4(obj, key, value) {
@@ -14521,13 +14739,13 @@ function _define_property$4(obj, key, value) {
     }
     return obj;
 }
-function _get_prototype_of$5(o) {
-    _get_prototype_of$5 = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o) {
+function _get_prototype_of$4(o) {
+    _get_prototype_of$4 = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o) {
         return o.__proto__ || Object.getPrototypeOf(o);
     };
-    return _get_prototype_of$5(o);
+    return _get_prototype_of$4(o);
 }
-function _inherits$5(subClass, superClass) {
+function _inherits$4(subClass, superClass) {
     if (typeof superClass !== "function" && superClass !== null) {
         throw new TypeError("Super expression must either be null or a function");
     }
@@ -14538,9 +14756,9 @@ function _inherits$5(subClass, superClass) {
             configurable: true
         }
     });
-    if (superClass) _set_prototype_of$5(subClass, superClass);
+    if (superClass) _set_prototype_of$4(subClass, superClass);
 }
-function _instanceof$d(left, right) {
+function _instanceof$c(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
@@ -14568,23 +14786,23 @@ function _object_spread$3(target) {
     }
     return target;
 }
-function _possible_constructor_return$5(self, call) {
-    if (call && (_type_of$d(call) === "object" || typeof call === "function")) {
+function _possible_constructor_return$4(self, call) {
+    if (call && (_type_of$c(call) === "object" || typeof call === "function")) {
         return call;
     }
-    return _assert_this_initialized$5(self);
+    return _assert_this_initialized$4(self);
 }
-function _set_prototype_of$5(o, p) {
-    _set_prototype_of$5 = Object.setPrototypeOf || function setPrototypeOf(o, p) {
+function _set_prototype_of$4(o, p) {
+    _set_prototype_of$4 = Object.setPrototypeOf || function setPrototypeOf(o, p) {
         o.__proto__ = p;
         return o;
     };
-    return _set_prototype_of$5(o, p);
+    return _set_prototype_of$4(o, p);
 }
 function _to_consumable_array$3(arr) {
     return _array_without_holes$3(arr) || _iterable_to_array$3(arr) || _unsupported_iterable_to_array$5(arr) || _non_iterable_spread$3();
 }
-function _type_of$d(obj) {
+function _type_of$c(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
@@ -14596,7 +14814,7 @@ function _unsupported_iterable_to_array$5(o, minLen) {
     if (n === "Map" || n === "Set") return Array.from(n);
     if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$5(o, minLen);
 }
-function _is_native_reflect_construct$5() {
+function _is_native_reflect_construct$4() {
     if (typeof Reflect === "undefined" || !Reflect.construct) return false;
     if (Reflect.construct.sham) return false;
     if (typeof Proxy === "function") return true;
@@ -14607,20 +14825,20 @@ function _is_native_reflect_construct$5() {
         return false;
     }
 }
-function _create_super$5(Derived) {
-    var hasNativeReflectConstruct = _is_native_reflect_construct$5();
+function _create_super$4(Derived) {
+    var hasNativeReflectConstruct = _is_native_reflect_construct$4();
     return function _createSuperInternal() {
-        var Super = _get_prototype_of$5(Derived), result;
+        var Super = _get_prototype_of$4(Derived), result;
         if (hasNativeReflectConstruct) {
-            var NewTarget = _get_prototype_of$5(this).constructor;
+            var NewTarget = _get_prototype_of$4(this).constructor;
             result = Reflect.construct(Super, arguments, NewTarget);
         } else {
             result = Super.apply(this, arguments);
         }
-        return _possible_constructor_return$5(this, result);
+        return _possible_constructor_return$4(this, result);
     };
 }
-function _ts_generator$8(thisArg, body) {
+function _ts_generator$7(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -14722,10 +14940,10 @@ function _ts_generator$8(thisArg, body) {
  * This class implements Storage for node, reading cache from user specified storage location or an  extension library
  * @public
  */ var NodeStorage = /*#__PURE__*/ function(CacheManager) {
-    _inherits$5(NodeStorage, CacheManager);
-    var _super = _create_super$5(NodeStorage);
+    _inherits$4(NodeStorage, CacheManager);
+    var _super = _create_super$4(NodeStorage);
     function NodeStorage(logger, clientId, cryptoImpl, staticAuthorityOptions) {
-        _class_call_check$d(this, NodeStorage);
+        _class_call_check$c(this, NodeStorage);
         var _this;
         _this = _super.call(this, clientId, cryptoImpl, logger, staticAuthorityOptions);
         _this.cache = {};
@@ -14733,7 +14951,7 @@ function _ts_generator$8(thisArg, body) {
         _this.logger = logger;
         return _this;
     }
-    _create_class$d(NodeStorage, [
+    _create_class$c(NodeStorage, [
         {
             /**
      * Queue up callbacks
@@ -14771,7 +14989,7 @@ function _ts_generator$8(thisArg, body) {
                     if (typeof value !== "object") {
                         continue;
                     }
-                    if (_instanceof$d(value, AccountEntity)) {
+                    if (_instanceof$c(value, AccountEntity)) {
                         inMemoryCache.accounts[key] = value;
                     } else if (isIdTokenEntity(value)) {
                         inMemoryCache.idTokens[key] = value;
@@ -15159,7 +15377,7 @@ function _ts_generator$8(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$7(function() {
                     var cacheKeys;
-                    return _ts_generator$8(this, function(_state) {
+                    return _ts_generator$7(this, function(_state) {
                         _this.logger.trace("Clearing cache entries created by MSAL");
                         // read inMemoryCache
                         cacheKeys = _this.getKeys();
@@ -15247,12 +15465,12 @@ function _async_to_generator$6(fn) {
         });
     };
 }
-function _class_call_check$c(instance, Constructor) {
+function _class_call_check$b(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$c(target, props) {
+function _defineProperties$b(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -15261,9 +15479,9 @@ function _defineProperties$c(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$c(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$c(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$c(Constructor, staticProps);
+function _create_class$b(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$b(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$b(Constructor, staticProps);
     return Constructor;
 }
 function _define_property$3(obj, key, value) {
@@ -15318,7 +15536,7 @@ function _object_spread_props$2(target, source) {
     }
     return target;
 }
-function _ts_generator$7(thisArg, body) {
+function _ts_generator$6(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -15428,7 +15646,7 @@ function _ts_generator$7(thisArg, body) {
  * @public
  */ var TokenCache = /*#__PURE__*/ function() {
     function TokenCache(storage, logger, cachePlugin) {
-        _class_call_check$c(this, TokenCache);
+        _class_call_check$b(this, TokenCache);
         this.cacheHasChanged = false;
         this.storage = storage;
         this.storage.registerChangeEmitter(this.handleChangeEvent.bind(this));
@@ -15437,7 +15655,7 @@ function _ts_generator$7(thisArg, body) {
         }
         this.logger = logger;
     }
-    _create_class$c(TokenCache, [
+    _create_class$b(TokenCache, [
         {
             /**
      * Set to true if cache state has changed since last time serialize or writeToPersistence was called
@@ -15497,7 +15715,7 @@ function _ts_generator$7(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$6(function() {
                     var cacheContext;
-                    return _ts_generator$7(this, function(_state) {
+                    return _ts_generator$6(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 _this.logger.trace("getAllAccounts called");
@@ -15562,7 +15780,7 @@ function _ts_generator$7(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$6(function() {
                     var allAccounts;
-                    return _ts_generator$7(this, function(_state) {
+                    return _ts_generator$6(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 return [
@@ -15600,7 +15818,7 @@ function _ts_generator$7(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$6(function() {
                     var allAccounts;
-                    return _ts_generator$7(this, function(_state) {
+                    return _ts_generator$6(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 return [
@@ -15636,7 +15854,7 @@ function _ts_generator$7(thisArg, body) {
                 var _this = this;
                 return _async_to_generator$6(function() {
                     var cacheContext;
-                    return _ts_generator$7(this, function(_state) {
+                    return _ts_generator$6(this, function(_state) {
                         switch(_state.label){
                             case 0:
                                 _this.logger.trace("removeAccount called");
@@ -15874,7 +16092,7 @@ SafeBuffer.allocUnsafeSlow = function(size) {
 /*global module, process*/
-function _type_of$c(obj) {
+function _type_of$b(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
@@ -15908,7 +16126,7 @@ function DataStream$2(data) {
         }).bind(this));
         return this;
     }
-    throw new TypeError("Unexpected data type (" + (typeof data === "undefined" ? "undefined" : _type_of$c(data)) + ")");
+    throw new TypeError("Unexpected data type (" + (typeof data === "undefined" ? "undefined" : _type_of$b(data)) + ")");
 }
 util$3.inherits(DataStream$2, Stream$2);
 DataStream$2.prototype.write = function write(data) {
@@ -16593,7 +16811,7 @@ var TokenExpiredError_1 = TokenExpiredError$1;
  * Helpers.
  */
-function _type_of$b(obj) {
+function _type_of$a(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
@@ -16617,7 +16835,7 @@ var y = d * 365.25;
  * @api public
  */ var ms$1 = function(val, options) {
     options = options || {};
-    var type = typeof val === "undefined" ? "undefined" : _type_of$b(val);
+    var type = typeof val === "undefined" ? "undefined" : _type_of$a(val);
     if (type === "string" && val.length > 0) {
         return parse$7(val);
     } else if (type === "number" && isFinite(val)) {
@@ -17060,12 +17278,12 @@ var identifiers$1 = {
     rcompareIdentifiers: rcompareIdentifiers
 };
-function _class_call_check$b(instance, Constructor) {
+function _class_call_check$a(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$b(target, props) {
+function _defineProperties$a(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -17074,19 +17292,19 @@ function _defineProperties$b(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$b(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$b(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$b(Constructor, staticProps);
+function _create_class$a(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$a(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$a(Constructor, staticProps);
     return Constructor;
 }
-function _instanceof$c(left, right) {
+function _instanceof$b(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
         return left instanceof right;
     }
 }
-function _type_of$a(obj) {
+function _type_of$9(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
@@ -17097,16 +17315,16 @@ var parseOptions$2 = parseOptions_1;
 var compareIdentifiers = identifiers$1.compareIdentifiers;
 var SemVer$f = /*#__PURE__*/ function() {
     function SemVer(version, options) {
-        _class_call_check$b(this, SemVer);
+        _class_call_check$a(this, SemVer);
         options = parseOptions$2(options);
-        if (_instanceof$c(version, SemVer)) {
+        if (_instanceof$b(version, SemVer)) {
             if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) {
                 return version;
             } else {
                 version = version.version;
             }
         } else if (typeof version !== "string") {
-            throw new TypeError('Invalid version. Must be a string. Got type "'.concat(typeof version === "undefined" ? "undefined" : _type_of$a(version), '".'));
+            throw new TypeError('Invalid version. Must be a string. Got type "'.concat(typeof version === "undefined" ? "undefined" : _type_of$9(version), '".'));
         }
         if (version.length > MAX_LENGTH) {
             throw new TypeError("version is longer than ".concat(MAX_LENGTH, " characters"));
@@ -17152,7 +17370,7 @@ var SemVer$f = /*#__PURE__*/ function() {
         this.build = m[5] ? m[5].split(".") : [];
         this.format();
     }
-    _create_class$b(SemVer, [
+    _create_class$a(SemVer, [
         {
             key: "format",
             value: function format() {
@@ -17173,7 +17391,7 @@ var SemVer$f = /*#__PURE__*/ function() {
             key: "compare",
             value: function compare(other) {
                 debug$2("SemVer.compare", this.version, this.options, other);
-                if (!_instanceof$c(other, SemVer)) {
+                if (!_instanceof$b(other, SemVer)) {
                     if (typeof other === "string" && other === this.version) {
                         return 0;
                     }
@@ -17188,7 +17406,7 @@ var SemVer$f = /*#__PURE__*/ function() {
         {
             key: "compareMain",
             value: function compareMain(other) {
-                if (!_instanceof$c(other, SemVer)) {
+                if (!_instanceof$b(other, SemVer)) {
                     other = new SemVer(other, this.options);
                 }
                 return compareIdentifiers(this.major, other.major) || compareIdentifiers(this.minor, other.minor) || compareIdentifiers(this.patch, other.patch);
@@ -17197,7 +17415,7 @@ var SemVer$f = /*#__PURE__*/ function() {
         {
             key: "comparePre",
             value: function comparePre(other) {
-                if (!_instanceof$c(other, SemVer)) {
+                if (!_instanceof$b(other, SemVer)) {
                     other = new SemVer(other, this.options);
                 }
                 // NOT having a prerelease is > having one
@@ -17230,14 +17448,14 @@ var SemVer$f = /*#__PURE__*/ function() {
         {
             key: "compareBuild",
             value: function compareBuild(other) {
-                if (!_instanceof$c(other, SemVer)) {
+                if (!_instanceof$b(other, SemVer)) {
                     other = new SemVer(other, this.options);
                 }
                 var i = 0;
                 do {
                     var a = this.build[i];
                     var b = other.build[i];
-                    debug$2("prerelease compare", i, a, b);
+                    debug$2("build compare", i, a, b);
                     if (a === undefined && b === undefined) {
                         return 0;
                     } else if (b === undefined) {
@@ -17385,7 +17603,7 @@ var SemVer$f = /*#__PURE__*/ function() {
 }();
 var semver$4 = SemVer$f;
-function _instanceof$b(left, right) {
+function _instanceof$a(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
@@ -17395,7 +17613,7 @@ function _instanceof$b(left, right) {
 var SemVer$e = semver$4;
 var parse$6 = function(version, options) {
     var throwErrors = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : false;
-    if (_instanceof$b(version, SemVer$e)) {
+    if (_instanceof$a(version, SemVer$e)) {
         return version;
     }
     try {
@@ -17423,7 +17641,7 @@ var clean$1 = function(version, options) {
 };
 var clean_1 = clean$1;
-function _instanceof$a(left, right) {
+function _instanceof$9(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
@@ -17438,7 +17656,7 @@ var inc$1 = function(version, release, options, identifier, identifierBase) {
         options = undefined;
     }
     try {
-        return new SemVer$d(_instanceof$a(version, SemVer$d) ? version.version : version, options).inc(release, identifier, identifierBase).version;
+        return new SemVer$d(_instanceof$9(version, SemVer$d) ? version.version : version, options).inc(release, identifier, identifierBase).version;
     } catch (er) {
         return null;
     }
@@ -17643,7 +17861,7 @@ var cmp$2 = function(a, op, b, loose) {
 };
 var cmp_1 = cmp$2;
-function _instanceof$9(left, right) {
+function _instanceof$8(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
@@ -17654,7 +17872,7 @@ var SemVer$7 = semver$4;
 var parse$1 = parse_1;
 var _require$4 = re$4.exports, re$2 = _require$4.safeRe, t$2 = _require$4.t;
 var coerce$1 = function(version, options) {
-    if (_instanceof$9(version, SemVer$7)) {
+    if (_instanceof$8(version, SemVer$7)) {
         return version;
     }
     if (typeof version === "number") {
@@ -17700,517 +17918,12 @@ var coerce$1 = function(version, options) {
 };
 var coerce_1 = coerce$1;
-function _ts_generator$6(thisArg, body) {
-    var f, y, t, g, _ = {
-        label: 0,
-        sent: function() {
-            if (t[0] & 1) throw t[1];
-            return t[1];
-        },
-        trys: [],
-        ops: []
-    };
-    return g = {
-        next: verb(0),
-        "throw": verb(1),
-        "return": verb(2)
-    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-        return this;
-    }), g;
-    function verb(n) {
-        return function(v) {
-            return step([
-                n,
-                v
-            ]);
-        };
-    }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while(_)try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [
-                op[0] & 2,
-                t.value
-            ];
-            switch(op[0]){
-                case 0:
-                case 1:
-                    t = op;
-                    break;
-                case 4:
-                    _.label++;
-                    return {
-                        value: op[1],
-                        done: false
-                    };
-                case 5:
-                    _.label++;
-                    y = op[1];
-                    op = [
-                        0
-                    ];
-                    continue;
-                case 7:
-                    op = _.ops.pop();
-                    _.trys.pop();
-                    continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-                        _ = 0;
-                        continue;
-                    }
-                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-                        _.label = op[1];
-                        break;
-                    }
-                    if (op[0] === 6 && _.label < t[1]) {
-                        _.label = t[1];
-                        t = op;
-                        break;
-                    }
-                    if (t && _.label < t[2]) {
-                        _.label = t[2];
-                        _.ops.push(op);
-                        break;
-                    }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop();
-                    continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) {
-            op = [
-                6,
-                e
-            ];
-            y = 0;
-        } finally{
-            f = t = 0;
-        }
-        if (op[0] & 5) throw op[1];
-        return {
-            value: op[0] ? op[1] : void 0,
-            done: true
-        };
-    }
-}
-var iterator = function(Yallist) {
-    Yallist.prototype[Symbol.iterator] = function() {
-        var walker;
-        return _ts_generator$6(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    walker = this.head;
-                    _state.label = 1;
-                case 1:
-                    if (!walker) return [
-                        3,
-                        4
-                    ];
-                    return [
-                        4,
-                        walker.value
-                    ];
-                case 2:
-                    _state.sent();
-                    _state.label = 3;
-                case 3:
-                    walker = walker.next;
-                    return [
-                        3,
-                        1
-                    ];
-                case 4:
-                    return [
-                        2
-                    ];
-            }
-        });
-    };
-};
-function _instanceof$8(left, right) {
-    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
-        return !!right[Symbol.hasInstance](left);
-    } else {
-        return left instanceof right;
-    }
-}
-var yallist = Yallist$1;
-Yallist$1.Node = Node;
-Yallist$1.create = Yallist$1;
-function Yallist$1(list) {
-    var self = this;
-    if (!_instanceof$8(self, Yallist$1)) {
-        self = new Yallist$1();
-    }
-    self.tail = null;
-    self.head = null;
-    self.length = 0;
-    if (list && typeof list.forEach === "function") {
-        list.forEach(function(item) {
-            self.push(item);
-        });
-    } else if (arguments.length > 0) {
-        for(var i = 0, l = arguments.length; i < l; i++){
-            self.push(arguments[i]);
-        }
-    }
-    return self;
-}
-Yallist$1.prototype.removeNode = function(node) {
-    if (node.list !== this) {
-        throw new Error("removing node which does not belong to this list");
-    }
-    var next = node.next;
-    var prev = node.prev;
-    if (next) {
-        next.prev = prev;
-    }
-    if (prev) {
-        prev.next = next;
-    }
-    if (node === this.head) {
-        this.head = next;
-    }
-    if (node === this.tail) {
-        this.tail = prev;
-    }
-    node.list.length--;
-    node.next = null;
-    node.prev = null;
-    node.list = null;
-    return next;
-};
-Yallist$1.prototype.unshiftNode = function(node) {
-    if (node === this.head) {
-        return;
-    }
-    if (node.list) {
-        node.list.removeNode(node);
-    }
-    var head = this.head;
-    node.list = this;
-    node.next = head;
-    if (head) {
-        head.prev = node;
-    }
-    this.head = node;
-    if (!this.tail) {
-        this.tail = node;
-    }
-    this.length++;
-};
-Yallist$1.prototype.pushNode = function(node) {
-    if (node === this.tail) {
-        return;
-    }
-    if (node.list) {
-        node.list.removeNode(node);
-    }
-    var tail = this.tail;
-    node.list = this;
-    node.prev = tail;
-    if (tail) {
-        tail.next = node;
-    }
-    this.tail = node;
-    if (!this.head) {
-        this.head = node;
-    }
-    this.length++;
-};
-Yallist$1.prototype.push = function() {
-    for(var i = 0, l = arguments.length; i < l; i++){
-        push(this, arguments[i]);
-    }
-    return this.length;
-};
-Yallist$1.prototype.unshift = function() {
-    for(var i = 0, l = arguments.length; i < l; i++){
-        unshift(this, arguments[i]);
-    }
-    return this.length;
-};
-Yallist$1.prototype.pop = function() {
-    if (!this.tail) {
-        return undefined;
-    }
-    var res = this.tail.value;
-    this.tail = this.tail.prev;
-    if (this.tail) {
-        this.tail.next = null;
-    } else {
-        this.head = null;
-    }
-    this.length--;
-    return res;
-};
-Yallist$1.prototype.shift = function() {
-    if (!this.head) {
-        return undefined;
-    }
-    var res = this.head.value;
-    this.head = this.head.next;
-    if (this.head) {
-        this.head.prev = null;
-    } else {
-        this.tail = null;
-    }
-    this.length--;
-    return res;
-};
-Yallist$1.prototype.forEach = function(fn, thisp) {
-    thisp = thisp || this;
-    for(var walker = this.head, i = 0; walker !== null; i++){
-        fn.call(thisp, walker.value, i, this);
-        walker = walker.next;
-    }
-};
-Yallist$1.prototype.forEachReverse = function(fn, thisp) {
-    thisp = thisp || this;
-    for(var walker = this.tail, i = this.length - 1; walker !== null; i--){
-        fn.call(thisp, walker.value, i, this);
-        walker = walker.prev;
-    }
-};
-Yallist$1.prototype.get = function(n) {
-    for(var i = 0, walker = this.head; walker !== null && i < n; i++){
-        // abort out of the list early if we hit a cycle
-        walker = walker.next;
-    }
-    if (i === n && walker !== null) {
-        return walker.value;
-    }
-};
-Yallist$1.prototype.getReverse = function(n) {
-    for(var i = 0, walker = this.tail; walker !== null && i < n; i++){
-        // abort out of the list early if we hit a cycle
-        walker = walker.prev;
-    }
-    if (i === n && walker !== null) {
-        return walker.value;
-    }
-};
-Yallist$1.prototype.map = function(fn, thisp) {
-    thisp = thisp || this;
-    var res = new Yallist$1();
-    for(var walker = this.head; walker !== null;){
-        res.push(fn.call(thisp, walker.value, this));
-        walker = walker.next;
-    }
-    return res;
-};
-Yallist$1.prototype.mapReverse = function(fn, thisp) {
-    thisp = thisp || this;
-    var res = new Yallist$1();
-    for(var walker = this.tail; walker !== null;){
-        res.push(fn.call(thisp, walker.value, this));
-        walker = walker.prev;
-    }
-    return res;
-};
-Yallist$1.prototype.reduce = function(fn, initial) {
-    var acc;
-    var walker = this.head;
-    if (arguments.length > 1) {
-        acc = initial;
-    } else if (this.head) {
-        walker = this.head.next;
-        acc = this.head.value;
-    } else {
-        throw new TypeError("Reduce of empty list with no initial value");
-    }
-    for(var i = 0; walker !== null; i++){
-        acc = fn(acc, walker.value, i);
-        walker = walker.next;
-    }
-    return acc;
-};
-Yallist$1.prototype.reduceReverse = function(fn, initial) {
-    var acc;
-    var walker = this.tail;
-    if (arguments.length > 1) {
-        acc = initial;
-    } else if (this.tail) {
-        walker = this.tail.prev;
-        acc = this.tail.value;
-    } else {
-        throw new TypeError("Reduce of empty list with no initial value");
-    }
-    for(var i = this.length - 1; walker !== null; i--){
-        acc = fn(acc, walker.value, i);
-        walker = walker.prev;
-    }
-    return acc;
-};
-Yallist$1.prototype.toArray = function() {
-    var arr = new Array(this.length);
-    for(var i = 0, walker = this.head; walker !== null; i++){
-        arr[i] = walker.value;
-        walker = walker.next;
-    }
-    return arr;
-};
-Yallist$1.prototype.toArrayReverse = function() {
-    var arr = new Array(this.length);
-    for(var i = 0, walker = this.tail; walker !== null; i++){
-        arr[i] = walker.value;
-        walker = walker.prev;
-    }
-    return arr;
-};
-Yallist$1.prototype.slice = function(from, to) {
-    to = to || this.length;
-    if (to < 0) {
-        to += this.length;
-    }
-    from = from || 0;
-    if (from < 0) {
-        from += this.length;
-    }
-    var ret = new Yallist$1();
-    if (to < from || to < 0) {
-        return ret;
-    }
-    if (from < 0) {
-        from = 0;
-    }
-    if (to > this.length) {
-        to = this.length;
-    }
-    for(var i = 0, walker = this.head; walker !== null && i < from; i++){
-        walker = walker.next;
-    }
-    for(; walker !== null && i < to; i++, walker = walker.next){
-        ret.push(walker.value);
-    }
-    return ret;
-};
-Yallist$1.prototype.sliceReverse = function(from, to) {
-    to = to || this.length;
-    if (to < 0) {
-        to += this.length;
-    }
-    from = from || 0;
-    if (from < 0) {
-        from += this.length;
-    }
-    var ret = new Yallist$1();
-    if (to < from || to < 0) {
-        return ret;
-    }
-    if (from < 0) {
-        from = 0;
-    }
-    if (to > this.length) {
-        to = this.length;
-    }
-    for(var i = this.length, walker = this.tail; walker !== null && i > to; i--){
-        walker = walker.prev;
-    }
-    for(; walker !== null && i > from; i--, walker = walker.prev){
-        ret.push(walker.value);
-    }
-    return ret;
-};
-Yallist$1.prototype.splice = function(start, deleteCount) {
-    for(var _len = arguments.length, nodes = new Array(_len > 2 ? _len - 2 : 0), _key = 2; _key < _len; _key++){
-        nodes[_key - 2] = arguments[_key];
-    }
-    if (start > this.length) {
-        start = this.length - 1;
-    }
-    if (start < 0) {
-        start = this.length + start;
-    }
-    for(var i = 0, walker = this.head; walker !== null && i < start; i++){
-        walker = walker.next;
-    }
-    var ret = [];
-    for(var i = 0; walker && i < deleteCount; i++){
-        ret.push(walker.value);
-        walker = this.removeNode(walker);
-    }
-    if (walker === null) {
-        walker = this.tail;
-    }
-    if (walker !== this.head && walker !== this.tail) {
-        walker = walker.prev;
-    }
-    for(var i = 0; i < nodes.length; i++){
-        walker = insert(this, walker, nodes[i]);
-    }
-    return ret;
-};
-Yallist$1.prototype.reverse = function() {
-    var head = this.head;
-    var tail = this.tail;
-    for(var walker = head; walker !== null; walker = walker.prev){
-        var p = walker.prev;
-        walker.prev = walker.next;
-        walker.next = p;
-    }
-    this.head = tail;
-    this.tail = head;
-    return this;
-};
-function insert(self, node, value) {
-    var inserted = node === self.head ? new Node(value, null, node, self) : new Node(value, node, node.next, self);
-    if (inserted.next === null) {
-        self.tail = inserted;
-    }
-    if (inserted.prev === null) {
-        self.head = inserted;
-    }
-    self.length++;
-    return inserted;
-}
-function push(self, item) {
-    self.tail = new Node(item, self.tail, null, self);
-    if (!self.head) {
-        self.head = self.tail;
-    }
-    self.length++;
-}
-function unshift(self, item) {
-    self.head = new Node(item, null, self.head, self);
-    if (!self.tail) {
-        self.tail = self.head;
-    }
-    self.length++;
-}
-function Node(value, prev, next, list) {
-    if (!_instanceof$8(this, Node)) {
-        return new Node(value, prev, next, list);
-    }
-    this.list = list;
-    this.value = value;
-    if (prev) {
-        prev.next = this;
-        this.prev = prev;
-    } else {
-        this.prev = null;
-    }
-    if (next) {
-        next.prev = this;
-        this.next = next;
-    } else {
-        this.next = null;
-    }
-}
-try {
-    // add if support for Symbol.iterator is present
-    iterator(Yallist$1);
-} catch (er) {}
-function _class_call_check$a(instance, Constructor) {
+function _class_call_check$9(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$a(target, props) {
+function _defineProperties$9(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -18219,366 +17932,58 @@ function _defineProperties$a(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$a(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$a(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$a(Constructor, staticProps);
+function _create_class$9(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$9(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$9(Constructor, staticProps);
     return Constructor;
 }
-// A linked list to keep track of recently-used-ness
-var Yallist = yallist;
-var MAX = Symbol("max");
-var LENGTH = Symbol("length");
-var LENGTH_CALCULATOR = Symbol("lengthCalculator");
-var ALLOW_STALE = Symbol("allowStale");
-var MAX_AGE = Symbol("maxAge");
-var DISPOSE = Symbol("dispose");
-var NO_DISPOSE_ON_SET = Symbol("noDisposeOnSet");
-var LRU_LIST = Symbol("lruList");
-var CACHE = Symbol("cache");
-var UPDATE_AGE_ON_GET = Symbol("updateAgeOnGet");
-var naiveLength = function() {
-    return 1;
-};
-// lruList is a yallist where the head is the youngest
-// item, and the tail is the oldest.  the list contains the Hit
-// objects as the entries.
-// Each Hit object has a reference to its Yallist.Node.  This
-// never changes.
-//
-// cache is a Map (or PseudoMap) that matches the keys to
-// the Yallist.Node object.
 var LRUCache = /*#__PURE__*/ function() {
-    function LRUCache(options) {
-        _class_call_check$a(this, LRUCache);
-        if (typeof options === "number") options = {
-            max: options
-        };
-        if (!options) options = {};
-        if (options.max && (typeof options.max !== "number" || options.max < 0)) throw new TypeError("max must be a non-negative number");
-        // Kind of weird to have a default max of Infinity, but oh well.
-        this[MAX] = options.max || Infinity;
-        var lc = options.length || naiveLength;
-        this[LENGTH_CALCULATOR] = typeof lc !== "function" ? naiveLength : lc;
-        this[ALLOW_STALE] = options.stale || false;
-        if (options.maxAge && typeof options.maxAge !== "number") throw new TypeError("maxAge must be a number");
-        this[MAX_AGE] = options.maxAge || 0;
-        this[DISPOSE] = options.dispose;
-        this[NO_DISPOSE_ON_SET] = options.noDisposeOnSet || false;
-        this[UPDATE_AGE_ON_GET] = options.updateAgeOnGet || false;
-        this.reset();
-    }
-    _create_class$a(LRUCache, [
-        {
-            key: "max",
-            get: function get() {
-                return this[MAX];
-            },
-            set: // resize the cache when the max changes.
-            function set(mL) {
-                if (typeof mL !== "number" || mL < 0) throw new TypeError("max must be a non-negative number");
-                this[MAX] = mL || Infinity;
-                trim(this);
-            }
-        },
-        {
-            key: "allowStale",
-            get: function get() {
-                return this[ALLOW_STALE];
-            },
-            set: function set(allowStale) {
-                this[ALLOW_STALE] = !!allowStale;
-            }
-        },
-        {
-            key: "maxAge",
-            get: function get() {
-                return this[MAX_AGE];
-            },
-            set: function set(mA) {
-                if (typeof mA !== "number") throw new TypeError("maxAge must be a non-negative number");
-                this[MAX_AGE] = mA;
-                trim(this);
-            }
-        },
-        {
-            key: "lengthCalculator",
-            get: function get() {
-                return this[LENGTH_CALCULATOR];
-            },
-            set: // resize the cache when the lengthCalculator changes.
-            function set(lC) {
-                var _this = this;
-                if (typeof lC !== "function") lC = naiveLength;
-                if (lC !== this[LENGTH_CALCULATOR]) {
-                    this[LENGTH_CALCULATOR] = lC;
-                    this[LENGTH] = 0;
-                    this[LRU_LIST].forEach(function(hit) {
-                        hit.length = _this[LENGTH_CALCULATOR](hit.value, hit.key);
-                        _this[LENGTH] += hit.length;
-                    });
-                }
-                trim(this);
-            }
-        },
-        {
-            key: "length",
-            get: function get() {
-                return this[LENGTH];
-            }
-        },
-        {
-            key: "itemCount",
-            get: function get() {
-                return this[LRU_LIST].length;
-            }
-        },
-        {
-            key: "rforEach",
-            value: function rforEach(fn, thisp) {
-                thisp = thisp || this;
-                for(var walker = this[LRU_LIST].tail; walker !== null;){
-                    var prev = walker.prev;
-                    forEachStep(this, fn, walker, thisp);
-                    walker = prev;
-                }
-            }
-        },
-        {
-            key: "forEach",
-            value: function forEach(fn, thisp) {
-                thisp = thisp || this;
-                for(var walker = this[LRU_LIST].head; walker !== null;){
-                    var next = walker.next;
-                    forEachStep(this, fn, walker, thisp);
-                    walker = next;
-                }
-            }
-        },
-        {
-            key: "keys",
-            value: function keys() {
-                return this[LRU_LIST].toArray().map(function(k) {
-                    return k.key;
-                });
-            }
-        },
-        {
-            key: "values",
-            value: function values() {
-                return this[LRU_LIST].toArray().map(function(k) {
-                    return k.value;
-                });
-            }
-        },
+    function LRUCache() {
+        _class_call_check$9(this, LRUCache);
+        this.max = 1000;
+        this.map = new Map();
+    }
+    _create_class$9(LRUCache, [
         {
-            key: "reset",
-            value: function reset() {
-                var _this = this;
-                if (this[DISPOSE] && this[LRU_LIST] && this[LRU_LIST].length) {
-                    this[LRU_LIST].forEach(function(hit) {
-                        return _this[DISPOSE](hit.key, hit.value);
-                    });
+            key: "get",
+            value: function get(key) {
+                var value = this.map.get(key);
+                if (value === undefined) {
+                    return undefined;
+                } else {
+                    // Remove the key from the map and add it to the end
+                    this.map.delete(key);
+                    this.map.set(key, value);
+                    return value;
                 }
-                this[CACHE] = new Map() // hash of items by key
-                ;
-                this[LRU_LIST] = new Yallist() // list of items in order of use recency
-                ;
-                this[LENGTH] = 0 // length of items in the list
-                ;
-            }
-        },
-        {
-            key: "dump",
-            value: function dump() {
-                var _this = this;
-                return this[LRU_LIST].map(function(hit) {
-                    return isStale(_this, hit) ? false : {
-                        k: hit.key,
-                        v: hit.value,
-                        e: hit.now + (hit.maxAge || 0)
-                    };
-                }).toArray().filter(function(h) {
-                    return h;
-                });
             }
         },
         {
-            key: "dumpLru",
-            value: function dumpLru() {
-                return this[LRU_LIST];
+            key: "delete",
+            value: function _delete(key) {
+                return this.map.delete(key);
             }
         },
         {
             key: "set",
-            value: function set(key, value, maxAge) {
-                maxAge = maxAge || this[MAX_AGE];
-                if (maxAge && typeof maxAge !== "number") throw new TypeError("maxAge must be a number");
-                var now = maxAge ? Date.now() : 0;
-                var len = this[LENGTH_CALCULATOR](value, key);
-                if (this[CACHE].has(key)) {
-                    if (len > this[MAX]) {
-                        del(this, this[CACHE].get(key));
-                        return false;
-                    }
-                    var node = this[CACHE].get(key);
-                    var item = node.value;
-                    // dispose of the old one before overwriting
-                    // split out into 2 ifs for better coverage tracking
-                    if (this[DISPOSE]) {
-                        if (!this[NO_DISPOSE_ON_SET]) this[DISPOSE](key, item.value);
-                    }
-                    item.now = now;
-                    item.maxAge = maxAge;
-                    item.value = value;
-                    this[LENGTH] += len - item.length;
-                    item.length = len;
-                    this.get(key);
-                    trim(this);
-                    return true;
-                }
-                var hit = new Entry(key, value, len, now, maxAge);
-                // oversized objects fall out of cache automatically.
-                if (hit.length > this[MAX]) {
-                    if (this[DISPOSE]) this[DISPOSE](key, value);
-                    return false;
-                }
-                this[LENGTH] += hit.length;
-                this[LRU_LIST].unshift(hit);
-                this[CACHE].set(key, this[LRU_LIST].head);
-                trim(this);
-                return true;
-            }
-        },
-        {
-            key: "has",
-            value: function has(key) {
-                if (!this[CACHE].has(key)) return false;
-                var hit = this[CACHE].get(key).value;
-                return !isStale(this, hit);
-            }
-        },
-        {
-            key: "get",
-            value: function get1(key) {
-                return get(this, key, true);
-            }
-        },
-        {
-            key: "peek",
-            value: function peek(key) {
-                return get(this, key, false);
-            }
-        },
-        {
-            key: "pop",
-            value: function pop() {
-                var node = this[LRU_LIST].tail;
-                if (!node) return null;
-                del(this, node);
-                return node.value;
-            }
-        },
-        {
-            key: "del",
-            value: function del1(key) {
-                del(this, this[CACHE].get(key));
-            }
-        },
-        {
-            key: "load",
-            value: function load(arr) {
-                // reset the cache
-                this.reset();
-                var now = Date.now();
-                // A previous serialized cache has the most recent items first
-                for(var l = arr.length - 1; l >= 0; l--){
-                    var hit = arr[l];
-                    var expiresAt = hit.e || 0;
-                    if (expiresAt === 0) // the item was created without expiration in a non aged cache
-                    this.set(hit.k, hit.v);
-                    else {
-                        var maxAge = expiresAt - now;
-                        // dont add already expired items
-                        if (maxAge > 0) {
-                            this.set(hit.k, hit.v, maxAge);
-                        }
+            value: function set(key, value) {
+                var deleted = this.delete(key);
+                if (!deleted && value !== undefined) {
+                    // If cache is full, delete the least recently used item
+                    if (this.map.size >= this.max) {
+                        var firstKey = this.map.keys().next().value;
+                        this.delete(firstKey);
                     }
+                    this.map.set(key, value);
                 }
-            }
-        },
-        {
-            key: "prune",
-            value: function prune() {
-                var _this = this;
-                this[CACHE].forEach(function(value, key) {
-                    return get(_this, key, false);
-                });
+                return this;
             }
         }
     ]);
-    return LRUCache;
-}();
-var get = function(self, key, doUse) {
-    var node = self[CACHE].get(key);
-    if (node) {
-        var hit = node.value;
-        if (isStale(self, hit)) {
-            del(self, node);
-            if (!self[ALLOW_STALE]) return undefined;
-        } else {
-            if (doUse) {
-                if (self[UPDATE_AGE_ON_GET]) node.value.now = Date.now();
-                self[LRU_LIST].unshiftNode(node);
-            }
-        }
-        return hit.value;
-    }
-};
-var isStale = function(self, hit) {
-    if (!hit || !hit.maxAge && !self[MAX_AGE]) return false;
-    var diff = Date.now() - hit.now;
-    return hit.maxAge ? diff > hit.maxAge : self[MAX_AGE] && diff > self[MAX_AGE];
-};
-var trim = function(self) {
-    if (self[LENGTH] > self[MAX]) {
-        for(var walker = self[LRU_LIST].tail; self[LENGTH] > self[MAX] && walker !== null;){
-            // We know that we're about to delete this one, and also
-            // what the next least recently used key will be, so just
-            // go ahead and set it now.
-            var prev = walker.prev;
-            del(self, walker);
-            walker = prev;
-        }
-    }
-};
-var del = function(self, node) {
-    if (node) {
-        var hit = node.value;
-        if (self[DISPOSE]) self[DISPOSE](hit.key, hit.value);
-        self[LENGTH] -= hit.length;
-        self[CACHE].delete(hit.key);
-        self[LRU_LIST].removeNode(node);
-    }
-};
-var Entry = function Entry(key, value, length, now, maxAge) {
-    _class_call_check$a(this, Entry);
-    this.key = key;
-    this.value = value;
-    this.length = length;
-    this.now = now;
-    this.maxAge = maxAge || 0;
-};
-var forEachStep = function(self, fn, node, thisp) {
-    var hit = node.value;
-    if (isStale(self, hit)) {
-        del(self, node);
-        if (!self[ALLOW_STALE]) hit = undefined;
-    }
-    if (hit) fn.call(thisp, hit.value, hit.key, self);
-};
-var lruCache = LRUCache;
+    return LRUCache;
+}();
+var lrucache = LRUCache;
-// hoisted class for cyclic dependency
 function _array_like_to_array$3(arr, len) {
     if (len == null || len > arr.length) len = arr.length;
     for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
@@ -18587,12 +17992,12 @@ function _array_like_to_array$3(arr, len) {
 function _array_without_holes$1(arr) {
     if (Array.isArray(arr)) return _array_like_to_array$3(arr);
 }
-function _class_call_check$9(instance, Constructor) {
+function _class_call_check$8(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$9(target, props) {
+function _defineProperties$8(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -18601,9 +18006,9 @@ function _defineProperties$9(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$9(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$9(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$9(Constructor, staticProps);
+function _create_class$8(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$8(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$8(Constructor, staticProps);
     return Constructor;
 }
 function _instanceof$7(left, right) {
@@ -18630,10 +18035,12 @@ function _unsupported_iterable_to_array$3(o, minLen) {
     if (n === "Map" || n === "Set") return Array.from(n);
     if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$3(o, minLen);
 }
+var SPACE_CHARACTERS = /\s+/g;
+// hoisted class for cyclic dependency
 var Range$b = /*#__PURE__*/ function() {
     function Range(range, options) {
         var _this = this;
-        _class_call_check$9(this, Range);
+        _class_call_check$8(this, Range);
         options = parseOptions$1(options);
         if (_instanceof$7(range, Range)) {
             if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) {
@@ -18650,7 +18057,7 @@ var Range$b = /*#__PURE__*/ function() {
                     range
                 ]
             ];
-            this.format();
+            this.formatted = undefined;
             return this;
         }
         this.options = options;
@@ -18659,7 +18066,7 @@ var Range$b = /*#__PURE__*/ function() {
         // First reduce all whitespace as much as possible so we do not have to rely
         // on potentially slow regexes like \s*. This is then stored and used for
         // future error messages as well.
-        this.raw = range.trim().split(/\s+/).join(" ");
+        this.raw = range.trim().replace(SPACE_CHARACTERS, " ");
         // First, split on ||
         this.set = this.raw.split("||")// map the range to a 2d array of comparators
         .map(function(r) {
@@ -18713,15 +18120,33 @@ var Range$b = /*#__PURE__*/ function() {
                 }
             }
         }
-        this.format();
+        this.formatted = undefined;
     }
-    _create_class$9(Range, [
+    _create_class$8(Range, [
+        {
+            key: "range",
+            get: function get() {
+                if (this.formatted === undefined) {
+                    this.formatted = "";
+                    for(var i = 0; i < this.set.length; i++){
+                        if (i > 0) {
+                            this.formatted += "||";
+                        }
+                        var comps = this.set[i];
+                        for(var k = 0; k < comps.length; k++){
+                            if (k > 0) {
+                                this.formatted += " ";
+                            }
+                            this.formatted += comps[k].toString().trim();
+                        }
+                    }
+                }
+                return this.formatted;
+            }
+        },
         {
             key: "format",
             value: function format() {
-                this.range = this.set.map(function(comps) {
-                    return comps.join(" ").trim();
-                }).join("||").trim();
                 return this.range;
             }
         },
@@ -18856,10 +18281,8 @@ var Range$b = /*#__PURE__*/ function() {
     return Range;
 }();
 var range = Range$b;
-var LRU = lruCache;
-var cache = new LRU({
-    max: 1000
-});
+var LRU = lrucache;
+var cache = new LRU();
 var parseOptions$1 = parseOptions_1;
 var Comparator$4 = comparator;
 var debug$1 = debug_1;
@@ -19083,8 +18506,9 @@ var replaceGTE0 = function(comp, options) {
 // 1.2 - 3.4.5 => >=1.2.0 <=3.4.5
 // 1.2.3 - 3.4 => >=1.2.0 <3.5.0-0 Any 3.4.x will do
 // 1.2 - 3.4 => >=1.2.0 <3.5.0-0
+// TODO build?
 var hyphenReplace = function(incPr) {
-    return function($0, from, fM, fm, fp, fpr, fb, to, tM, tm, tp, tpr, tb) {
+    return function($0, from, fM, fm, fp, fpr, fb, to, tM, tm, tp, tpr) {
         if (isX(fM)) {
             from = "";
         } else if (isX(fm)) {
@@ -19142,12 +18566,12 @@ var testSet = function(set, version, options) {
     return true;
 };
-function _class_call_check$8(instance, Constructor) {
+function _class_call_check$7(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$8(target, props) {
+function _defineProperties$7(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -19156,9 +18580,9 @@ function _defineProperties$8(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$8(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$8(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$8(Constructor, staticProps);
+function _create_class$7(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$7(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$7(Constructor, staticProps);
     return Constructor;
 }
 function _instanceof$6(left, right) {
@@ -19172,7 +18596,7 @@ var ANY$2 = Symbol("SemVer ANY");
 // hoisted class for cyclic dependency
 var Comparator$3 = /*#__PURE__*/ function() {
     function Comparator(comp, options) {
-        _class_call_check$8(this, Comparator);
+        _class_call_check$7(this, Comparator);
         options = parseOptions(options);
         if (_instanceof$6(comp, Comparator)) {
             if (comp.loose === !!options.loose) {
@@ -19193,7 +18617,7 @@ var Comparator$3 = /*#__PURE__*/ function() {
         }
         debug("comp", this);
     }
-    _create_class$8(Comparator, [
+    _create_class$7(Comparator, [
         {
             key: "parse",
             value: function parse(comp) {
@@ -19440,7 +18864,7 @@ var validRange$1 = function(range, options) {
 };
 var valid$1 = validRange$1;
-function _type_of$9(obj) {
+function _type_of$8(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
@@ -19518,7 +18942,7 @@ var outside$3 = function(version, range, hilo, options) {
     // but note that everything is flipped for the "ltr" function.
     for(var i = 0; i < range.set.length; ++i){
         var _ret = _loop(i);
-        if (_type_of$9(_ret) === "object") return _ret.v;
+        if (_type_of$8(_ret) === "object") return _ret.v;
     }
     return true;
 };
@@ -20414,7 +19838,7 @@ var verify = function(jwtString, secretOrPublicKey, options, callback) {
  * Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
  */
-/** Used as references for various `Number` constants. */ function _type_of$8(obj) {
+/** Used as references for various `Number` constants. */ function _type_of$7(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
@@ -20808,7 +20232,7 @@ var INFINITY$2 = 1 / 0, MAX_SAFE_INTEGER = 9007199254740991, MAX_INTEGER$2 = 1.7
  * _.isObject(null);
  * // => false
  */ function isObject$2(value) {
-    var type = typeof value === "undefined" ? "undefined" : _type_of$8(value);
+    var type = typeof value === "undefined" ? "undefined" : _type_of$7(value);
     return !!value && (type == "object" || type == "function");
 }
 /**
@@ -20873,7 +20297,7 @@ var INFINITY$2 = 1 / 0, MAX_SAFE_INTEGER = 9007199254740991, MAX_INTEGER$2 = 1.7
  * _.isSymbol('abc');
  * // => false
  */ function isSymbol$2(value) {
-    return (typeof value === "undefined" ? "undefined" : _type_of$8(value)) == "symbol" || isObjectLike$6(value) && objectToString$6.call(value) == symbolTag$2;
+    return (typeof value === "undefined" ? "undefined" : _type_of$7(value)) == "symbol" || isObjectLike$6(value) && objectToString$6.call(value) == symbolTag$2;
 }
 /**
  * Converts `value` to a finite number.
@@ -21106,7 +20530,7 @@ var lodash_isboolean = isBoolean$1;
  * Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
  */
-/** Used as references for various `Number` constants. */ function _type_of$7(obj) {
+/** Used as references for various `Number` constants. */ function _type_of$6(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
@@ -21176,7 +20600,7 @@ var INFINITY$1 = 1 / 0, MAX_INTEGER$1 = 1.7976931348623157e+308, NAN$1 = 0 / 0;
  * _.isObject(null);
  * // => false
  */ function isObject$1(value) {
-    var type = typeof value === "undefined" ? "undefined" : _type_of$7(value);
+    var type = typeof value === "undefined" ? "undefined" : _type_of$6(value);
     return !!value && (type == "object" || type == "function");
 }
 /**
@@ -21222,7 +20646,7 @@ var INFINITY$1 = 1 / 0, MAX_INTEGER$1 = 1.7976931348623157e+308, NAN$1 = 0 / 0;
  * _.isSymbol('abc');
  * // => false
  */ function isSymbol$1(value) {
-    return (typeof value === "undefined" ? "undefined" : _type_of$7(value)) == "symbol" || isObjectLike$4(value) && objectToString$4.call(value) == symbolTag$1;
+    return (typeof value === "undefined" ? "undefined" : _type_of$6(value)) == "symbol" || isObjectLike$4(value) && objectToString$4.call(value) == symbolTag$1;
 }
 /**
  * Converts `value` to a finite number.
@@ -21611,7 +21035,7 @@ var lodash_isstring = isString$1;
  * Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors
  */
-/** Used as the `TypeError` message for "Functions" methods. */ function _type_of$6(obj) {
+/** Used as the `TypeError` message for "Functions" methods. */ function _type_of$5(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
@@ -21706,7 +21130,7 @@ var FUNC_ERROR_TEXT = "Expected a function";
  * _.isObject(null);
  * // => false
  */ function isObject(value) {
-    var type = typeof value === "undefined" ? "undefined" : _type_of$6(value);
+    var type = typeof value === "undefined" ? "undefined" : _type_of$5(value);
     return !!value && (type == "object" || type == "function");
 }
 /**
@@ -21752,7 +21176,7 @@ var FUNC_ERROR_TEXT = "Expected a function";
  * _.isSymbol('abc');
  * // => false
  */ function isSymbol(value) {
-    return (typeof value === "undefined" ? "undefined" : _type_of$6(value)) == "symbol" || isObjectLike(value) && objectToString.call(value) == symbolTag;
+    return (typeof value === "undefined" ? "undefined" : _type_of$5(value)) == "symbol" || isObjectLike(value) && objectToString.call(value) == symbolTag;
 }
 /**
  * Converts `value` to a finite number.
@@ -21865,7 +21289,7 @@ function _instanceof$3(left, right) {
         return left instanceof right;
     }
 }
-function _type_of$5(obj) {
+function _type_of$4(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
@@ -22072,7 +21496,7 @@ var sign = function(payload, secretOrPrivateKey, options, callback) {
             return typeof options[opt] !== "undefined";
         });
         if (invalid_options.length > 0) {
-            return failure(new Error("invalid " + invalid_options.join(",") + " option for " + (typeof payload === "undefined" ? "undefined" : _type_of$5(payload)) + " payload"));
+            return failure(new Error("invalid " + invalid_options.join(",") + " option for " + (typeof payload === "undefined" ? "undefined" : _type_of$4(payload)) + " payload"));
         }
     }
     if (typeof payload.exp !== "undefined" && typeof options.expiresIn !== "undefined") {
@@ -22167,12 +21591,12 @@ var jsonwebtoken = {
     TokenExpiredError: TokenExpiredError_1
 };
-function _class_call_check$7(instance, Constructor) {
+function _class_call_check$6(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$7(target, props) {
+function _defineProperties$6(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -22181,9 +21605,9 @@ function _defineProperties$7(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$7(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$7(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$7(Constructor, staticProps);
+function _create_class$6(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties$6(Constructor.prototype, protoProps);
+    if (staticProps) _defineProperties$6(Constructor, staticProps);
     return Constructor;
 }
 function _define_property$2(obj, key, value) {
@@ -22207,9 +21631,9 @@ function _define_property$2(obj, key, value) {
  * @public
  */ var ClientAssertion = /*#__PURE__*/ function() {
     function ClientAssertion() {
-        _class_call_check$7(this, ClientAssertion);
+        _class_call_check$6(this, ClientAssertion);
     }
-    _create_class$7(ClientAssertion, [
+    _create_class$6(ClientAssertion, [
         {
             /**
      * Update JWT for certificate based clientAssertion, if passed by the user, uses it as is
@@ -22243,14 +21667,14 @@ function _define_property$2(obj, key, value) {
                 this.jwtAudience = jwtAudience;
                 var issuedAt = nowSeconds();
                 this.expirationTime = issuedAt + 600;
+                var algorithm = this.useSha256 ? JwtConstants.PSS_256 : JwtConstants.RSA_256;
                 var header = {
-                    alg: JwtConstants.RSA_256,
-                    x5t: EncodingUtils.base64EncodeUrl(this.thumbprint, "hex")
+                    alg: algorithm
                 };
+                var thumbprintHeader = this.useSha256 ? JwtConstants.X5T_256 : JwtConstants.X5T;
+                Object.assign(header, _define_property$2({}, thumbprintHeader, EncodingUtils.base64EncodeUrl(this.thumbprint, "hex")));
                 if (this.publicCertificate) {
-                    Object.assign(header, {
-                        x5c: this.publicCertificate
-                    });
+                    Object.assign(header, _define_property$2({}, JwtConstants.X5C, this.publicCertificate));
                 }
                 var _obj;
                 var payload = (_obj = {}, _define_property$2(_obj, JwtConstants.AUDIENCE, this.jwtAudience), _define_property$2(_obj, JwtConstants.EXPIRATION_TIME, this.expirationTime), _define_property$2(_obj, JwtConstants.ISSUER, this.issuer), _define_property$2(_obj, JwtConstants.SUBJECT, this.issuer), _define_property$2(_obj, JwtConstants.NOT_BEFORE, issuedAt), _define_property$2(_obj, JwtConstants.JWT_ID, cryptoProvider.createNewGuid()), _obj);
@@ -22283,6 +21707,7 @@ function _define_property$2(obj, key, value) {
         {
             key: "fromCertificate",
             value: /**
+     * @deprecated Use fromCertificateWithSha256Thumbprint instead, with a SHA-256 thumprint
      * Initialize the ClientAssertion class from the certificate passed by the user
      * @param thumbprint - identifier of a certificate
      * @param privateKey - secret key
@@ -22291,6 +21716,25 @@ function _define_property$2(obj, key, value) {
                 var clientAssertion = new ClientAssertion();
                 clientAssertion.privateKey = privateKey;
                 clientAssertion.thumbprint = thumbprint;
+                clientAssertion.useSha256 = false;
+                if (publicCertificate) {
+                    clientAssertion.publicCertificate = this.parseCertificate(publicCertificate);
+                }
+                return clientAssertion;
+            }
+        },
+        {
+            key: "fromCertificateWithSha256Thumbprint",
+            value: /**
+     * Initialize the ClientAssertion class from the certificate passed by the user
+     * @param thumbprint - identifier of a certificate
+     * @param privateKey - secret key
+     * @param publicCertificate - electronic document provided to prove the ownership of the public key
+     */ function fromCertificateWithSha256Thumbprint(thumbprint, privateKey, publicCertificate) {
+                var clientAssertion = new ClientAssertion();
+                clientAssertion.privateKey = privateKey;
+                clientAssertion.thumbprint = thumbprint;
+                clientAssertion.useSha256 = true;
                 if (publicCertificate) {
                     clientAssertion.publicCertificate = this.parseCertificate(publicCertificate);
                 }
@@ -22324,198 +21768,7 @@ function _define_property$2(obj, key, value) {
 }();
 /* eslint-disable header/header */ var name = "@azure/msal-node";
-var version = "2.10.0";
-function _assert_this_initialized$4(self) {
-    if (self === void 0) {
-        throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
-    }
-    return self;
-}
-function _class_call_check$6(instance, Constructor) {
-    if (!(instance instanceof Constructor)) {
-        throw new TypeError("Cannot call a class as a function");
-    }
-}
-function _defineProperties$6(target, props) {
-    for(var i = 0; i < props.length; i++){
-        var descriptor = props[i];
-        descriptor.enumerable = descriptor.enumerable || false;
-        descriptor.configurable = true;
-        if ("value" in descriptor) descriptor.writable = true;
-        Object.defineProperty(target, descriptor.key, descriptor);
-    }
-}
-function _create_class$6(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$6(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$6(Constructor, staticProps);
-    return Constructor;
-}
-function _get_prototype_of$4(o) {
-    _get_prototype_of$4 = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o) {
-        return o.__proto__ || Object.getPrototypeOf(o);
-    };
-    return _get_prototype_of$4(o);
-}
-function _inherits$4(subClass, superClass) {
-    if (typeof superClass !== "function" && superClass !== null) {
-        throw new TypeError("Super expression must either be null or a function");
-    }
-    subClass.prototype = Object.create(superClass && superClass.prototype, {
-        constructor: {
-            value: subClass,
-            writable: true,
-            configurable: true
-        }
-    });
-    if (superClass) _set_prototype_of$4(subClass, superClass);
-}
-function _possible_constructor_return$4(self, call) {
-    if (call && (_type_of$4(call) === "object" || typeof call === "function")) {
-        return call;
-    }
-    return _assert_this_initialized$4(self);
-}
-function _set_prototype_of$4(o, p) {
-    _set_prototype_of$4 = Object.setPrototypeOf || function setPrototypeOf(o, p) {
-        o.__proto__ = p;
-        return o;
-    };
-    return _set_prototype_of$4(o, p);
-}
-function _type_of$4(obj) {
-    "@swc/helpers - typeof";
-    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
-}
-function _is_native_reflect_construct$4() {
-    if (typeof Reflect === "undefined" || !Reflect.construct) return false;
-    if (Reflect.construct.sham) return false;
-    if (typeof Proxy === "function") return true;
-    try {
-        Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function() {}));
-        return true;
-    } catch (e) {
-        return false;
-    }
-}
-function _create_super$4(Derived) {
-    var hasNativeReflectConstruct = _is_native_reflect_construct$4();
-    return function _createSuperInternal() {
-        var Super = _get_prototype_of$4(Derived), result;
-        if (hasNativeReflectConstruct) {
-            var NewTarget = _get_prototype_of$4(this).constructor;
-            result = Reflect.construct(Super, arguments, NewTarget);
-        } else {
-            result = Super.apply(this, arguments);
-        }
-        return _possible_constructor_return$4(this, result);
-    };
-}
-/*
- * Copyright (c) Microsoft Corporation. All rights reserved.
- * Licensed under the MIT License.
- */ /**
- * NodeAuthErrorMessage class containing string constants used by error codes and messages.
- */ var NodeAuthErrorMessage = {
-    invalidLoopbackAddressType: {
-        code: "invalid_loopback_server_address_type",
-        desc: "Loopback server address is not type string. This is unexpected."
-    },
-    unableToLoadRedirectUri: {
-        code: "unable_to_load_redirectUrl",
-        desc: "Loopback server callback was invoked without a url. This is unexpected."
-    },
-    noAuthCodeInResponse: {
-        code: "no_auth_code_in_response",
-        desc: "No auth code found in the server response. Please check your network trace to determine what happened."
-    },
-    noLoopbackServerExists: {
-        code: "no_loopback_server_exists",
-        desc: "No loopback server exists yet."
-    },
-    loopbackServerAlreadyExists: {
-        code: "loopback_server_already_exists",
-        desc: "Loopback server already exists. Cannot create another."
-    },
-    loopbackServerTimeout: {
-        code: "loopback_server_timeout",
-        desc: "Timed out waiting for auth code listener to be registered."
-    },
-    stateNotFoundError: {
-        code: "state_not_found",
-        desc: "State not found. Please verify that the request originated from msal."
-    }
-};
-var NodeAuthError = /*#__PURE__*/ function(AuthError) {
-    _inherits$4(NodeAuthError, AuthError);
-    var _super = _create_super$4(NodeAuthError);
-    function NodeAuthError(errorCode, errorMessage) {
-        _class_call_check$6(this, NodeAuthError);
-        var _this;
-        _this = _super.call(this, errorCode, errorMessage);
-        _this.name = "NodeAuthError";
-        return _this;
-    }
-    _create_class$6(NodeAuthError, null, [
-        {
-            key: "createInvalidLoopbackAddressTypeError",
-            value: /**
-     * Creates an error thrown if loopback server address is of type string.
-     */ function createInvalidLoopbackAddressTypeError() {
-                return new NodeAuthError(NodeAuthErrorMessage.invalidLoopbackAddressType.code, "".concat(NodeAuthErrorMessage.invalidLoopbackAddressType.desc));
-            }
-        },
-        {
-            key: "createUnableToLoadRedirectUrlError",
-            value: /**
-     * Creates an error thrown if the loopback server is unable to get a url.
-     */ function createUnableToLoadRedirectUrlError() {
-                return new NodeAuthError(NodeAuthErrorMessage.unableToLoadRedirectUri.code, "".concat(NodeAuthErrorMessage.unableToLoadRedirectUri.desc));
-            }
-        },
-        {
-            key: "createNoAuthCodeInResponseError",
-            value: /**
-     * Creates an error thrown if the server response does not contain an auth code.
-     */ function createNoAuthCodeInResponseError() {
-                return new NodeAuthError(NodeAuthErrorMessage.noAuthCodeInResponse.code, "".concat(NodeAuthErrorMessage.noAuthCodeInResponse.desc));
-            }
-        },
-        {
-            key: "createNoLoopbackServerExistsError",
-            value: /**
-     * Creates an error thrown if the loopback server has not been spun up yet.
-     */ function createNoLoopbackServerExistsError() {
-                return new NodeAuthError(NodeAuthErrorMessage.noLoopbackServerExists.code, "".concat(NodeAuthErrorMessage.noLoopbackServerExists.desc));
-            }
-        },
-        {
-            key: "createLoopbackServerAlreadyExistsError",
-            value: /**
-     * Creates an error thrown if a loopback server already exists when attempting to create another one.
-     */ function createLoopbackServerAlreadyExistsError() {
-                return new NodeAuthError(NodeAuthErrorMessage.loopbackServerAlreadyExists.code, "".concat(NodeAuthErrorMessage.loopbackServerAlreadyExists.desc));
-            }
-        },
-        {
-            key: "createLoopbackServerTimeoutError",
-            value: /**
-     * Creates an error thrown if the loopback server times out registering the auth code listener.
-     */ function createLoopbackServerTimeoutError() {
-                return new NodeAuthError(NodeAuthErrorMessage.loopbackServerTimeout.code, "".concat(NodeAuthErrorMessage.loopbackServerTimeout.desc));
-            }
-        },
-        {
-            key: "createStateNotFoundError",
-            value: /**
-     * Creates an error thrown when the state is not present.
-     */ function createStateNotFoundError() {
-                return new NodeAuthError(NodeAuthErrorMessage.stateNotFoundError.code, NodeAuthErrorMessage.stateNotFoundError.desc);
-            }
-        }
-    ]);
-    return NodeAuthError;
-}(AuthError);
+var version = "2.11.1";
 function _assert_this_initialized$3(self) {
     if (self === void 0) {
@@ -25141,7 +24394,7 @@ function _ts_generator$1(thisArg, body) {
         _class_call_check$1(this, ConfidentialClientApplication);
         var _this;
         _this = _super.call(this, configuration);
-        _this.setClientCredential(_this.config);
+        _this.setClientCredential();
         _this.appTokenProvider = undefined;
         return _this;
     }
@@ -25325,14 +24578,10 @@ function _ts_generator$1(thisArg, body) {
         },
         {
             key: "setClientCredential",
-            value: function setClientCredential(configuration) {
-                var clientSecretNotEmpty = !!configuration.auth.clientSecret;
-                var clientAssertionNotEmpty = !!configuration.auth.clientAssertion;
-                var certificate = configuration.auth.clientCertificate || {
-                    thumbprint: Constants$1.EMPTY_STRING,
-                    privateKey: Constants$1.EMPTY_STRING
-                };
-                var certificateNotEmpty = !!certificate.thumbprint || !!certificate.privateKey;
+            value: function setClientCredential() {
+                var clientSecretNotEmpty = !!this.config.auth.clientSecret;
+                var clientAssertionNotEmpty = !!this.config.auth.clientAssertion;
+                var certificateNotEmpty = (!!this.config.auth.clientCertificate.thumbprint || !!this.config.auth.clientCertificate.thumbprintSha256) && !!this.config.auth.clientCertificate.privateKey;
                 /*
          * If app developer configures this callback, they don't need a credential
          * i.e. AzureSDK can get token from Managed Identity without a cert / secret
@@ -25343,19 +24592,19 @@ function _ts_generator$1(thisArg, body) {
                 if (clientSecretNotEmpty && clientAssertionNotEmpty || clientAssertionNotEmpty && certificateNotEmpty || clientSecretNotEmpty && certificateNotEmpty) {
                     throw createClientAuthError(invalidClientCredential);
                 }
-                if (configuration.auth.clientSecret) {
-                    this.clientSecret = configuration.auth.clientSecret;
+                if (this.config.auth.clientSecret) {
+                    this.clientSecret = this.config.auth.clientSecret;
                     return;
                 }
-                if (configuration.auth.clientAssertion) {
-                    this.developerProvidedClientAssertion = configuration.auth.clientAssertion;
+                if (this.config.auth.clientAssertion) {
+                    this.developerProvidedClientAssertion = this.config.auth.clientAssertion;
                     return;
                 }
                 if (!certificateNotEmpty) {
                     throw createClientAuthError(invalidClientCredential);
                 } else {
-                    var _configuration_auth_clientCertificate;
-                    this.clientAssertion = ClientAssertion.fromCertificate(certificate.thumbprint, certificate.privateKey, (_configuration_auth_clientCertificate = configuration.auth.clientCertificate) === null || _configuration_auth_clientCertificate === void 0 ? void 0 : _configuration_auth_clientCertificate.x5c);
+                    this.clientAssertion = !!this.config.auth.clientCertificate.thumbprintSha256 ? ClientAssertion.fromCertificateWithSha256Thumbprint(this.config.auth.clientCertificate.thumbprintSha256, this.config.auth.clientCertificate.privateKey, this.config.auth.clientCertificate.x5c) : ClientAssertion.fromCertificate(// guaranteed to be a string, due to prior error checking in this function
+                    this.config.auth.clientCertificate.thumbprint, this.config.auth.clientCertificate.privateKey, this.config.auth.clientCertificate.x5c);
                 }
             }
         }