@arkitektbedriftene/fe-lib 0.4.35 → 0.4.37

package/dist/oidc.es.js

@@ -1,5 +1,5 @@
-import { jsx as se } from "react/jsx-runtime";
-import { createContext as ue, useContext as ge, useMemo as _e, useEffect as F, useState as xe, useRef as pe, useCallback as ae } from "react";
+import { jsx as re } from "react/jsx-runtime";
+import { createContext as ge, useContext as _e, useMemo as pe, useEffect as $, useState as Ie, useRef as fe, useCallback as ce } from "react";
 import { u as Re } from "./useLocalStorageState-b4fb2a60.js";
 var N = typeof globalThis < "u" ? globalThis : typeof window < "u" ? window : typeof global < "u" ? global : typeof self < "u" ? self : {};
 function Te(e) {
@@ -9,10 +9,10 @@ function Te(e) {
   if (typeof t == "function") {
     var s = function r() {
       if (this instanceof r) {
-        var i = [null];
-        i.push.apply(i, arguments);
-        var n = Function.bind.apply(t, i);
-        return new n();
+        var n = [null];
+        n.push.apply(n, arguments);
+        var i = Function.bind.apply(t, n);
+        return new i();
       }
       return t.apply(this, arguments);
     };
@@ -20,8 +20,8 @@ function Te(e) {
   } else
     s = {};
   return Object.defineProperty(s, "__esModule", { value: !0 }), Object.keys(e).forEach(function(r) {
-    var i = Object.getOwnPropertyDescriptor(e, r);
-    Object.defineProperty(s, r, i.get ? i : {
+    var n = Object.getOwnPropertyDescriptor(e, r);
+    Object.defineProperty(s, r, n.get ? n : {
       enumerable: !0,
       get: function() {
         return e[r];
@@ -29,10 +29,10 @@ function Te(e) {
     });
   }), s;
 }
-function Ie(e) {
+function Ue(e) {
   throw new Error('Could not dynamically require "' + e + '". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.');
 }
-var M = {}, Ue = {
+var M = {}, Ae = {
   get exports() {
     return M;
   },
@@ -40,31 +40,31 @@ var M = {}, Ue = {
     M = e;
   }
 };
-const Ae = {}, Pe = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const Pe = {}, Oe = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  default: Ae
-}, Symbol.toStringTag, { value: "Module" })), Oe = /* @__PURE__ */ Te(Pe);
+  default: Pe
+}, Symbol.toStringTag, { value: "Module" })), qe = /* @__PURE__ */ Te(Oe);
 (function(e, t) {
   (function(s, r) {
     e.exports = r();
   })(N, function() {
-    var s = s || function(r, i) {
-      var n;
-      if (typeof window < "u" && window.crypto && (n = window.crypto), typeof self < "u" && self.crypto && (n = self.crypto), typeof globalThis < "u" && globalThis.crypto && (n = globalThis.crypto), !n && typeof window < "u" && window.msCrypto && (n = window.msCrypto), !n && typeof N < "u" && N.crypto && (n = N.crypto), !n && typeof Ie == "function")
+    var s = s || function(r, n) {
+      var i;
+      if (typeof window < "u" && window.crypto && (i = window.crypto), typeof self < "u" && self.crypto && (i = self.crypto), typeof globalThis < "u" && globalThis.crypto && (i = globalThis.crypto), !i && typeof window < "u" && window.msCrypto && (i = window.msCrypto), !i && typeof N < "u" && N.crypto && (i = N.crypto), !i && typeof Ue == "function")
         try {
-          n = Oe;
+          i = qe;
         } catch {
         }
       var o = function() {
-        if (n) {
-          if (typeof n.getRandomValues == "function")
+        if (i) {
+          if (typeof i.getRandomValues == "function")
             try {
-              return n.getRandomValues(new Uint32Array(1))[0];
+              return i.getRandomValues(new Uint32Array(1))[0];
             } catch {
             }
-          if (typeof n.randomBytes == "function")
+          if (typeof i.randomBytes == "function")
             try {
-              return n.randomBytes(4).readInt32LE();
+              return i.randomBytes(4).readInt32LE();
             } catch {
             }
         }
@@ -175,7 +175,7 @@ const Ae = {}, Pe = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineP
          *     var wordArray = CryptoJS.lib.WordArray.create([0x00010203, 0x04050607], 6);
          */
         init: function(a, d) {
-          a = this.words = a || [], d != i ? this.sigBytes = d : this.sigBytes = a.length * 4;
+          a = this.words = a || [], d != n ? this.sigBytes = d : this.sigBytes = a.length * 4;
         },
         /**
          * Converts this word array to a string.
@@ -414,13 +414,13 @@ const Ae = {}, Pe = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineP
         _process: function(a) {
           var d, p = this._data, m = p.words, b = p.sigBytes, E = this.blockSize, C = E * 4, x = b / C;
           a ? x = r.ceil(x) : x = r.max((x | 0) - this._minBufferSize, 0);
-          var P = x * E, R = r.min(P * 4, b);
+          var P = x * E, I = r.min(P * 4, b);
           if (P) {
             for (var q = 0; q < P; q += E)
               this._doProcessBlock(m, q);
-            d = m.splice(0, P), p.sigBytes -= R;
+            d = m.splice(0, P), p.sigBytes -= I;
           }
-          return new u.init(d, R);
+          return new u.init(d, I);
         },
         /**
          * Creates a copy of this object.
@@ -541,13 +541,13 @@ const Ae = {}, Pe = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineP
     }(Math);
     return s;
   });
-})(Ue);
-var Q = {}, qe = {
+})(Ae);
+var X = {}, Ne = {
   get exports() {
-    return Q;
+    return X;
   },
   set exports(e) {
-    Q = e;
+    X = e;
   }
 };
 (function(e, t) {
@@ -555,7 +555,7 @@ var Q = {}, qe = {
     e.exports = r(M);
   })(N, function(s) {
     return function(r) {
-      var i = s, n = i.lib, o = n.WordArray, c = n.Hasher, l = i.algo, h = [], g = [];
+      var n = s, i = n.lib, o = i.WordArray, c = i.Hasher, l = n.algo, h = [], g = [];
       (function() {
         function w(y) {
           for (var a = r.sqrt(y), d = 2; d <= a; d++)
@@ -578,11 +578,11 @@ var Q = {}, qe = {
             if (C < 16)
               u[C] = w[k + C] | 0;
             else {
-              var x = u[C - 15], P = (x << 25 | x >>> 7) ^ (x << 14 | x >>> 18) ^ x >>> 3, R = u[C - 2], q = (R << 15 | R >>> 17) ^ (R << 13 | R >>> 19) ^ R >>> 10;
+              var x = u[C - 15], P = (x << 25 | x >>> 7) ^ (x << 14 | x >>> 18) ^ x >>> 3, I = u[C - 2], q = (I << 15 | I >>> 17) ^ (I << 13 | I >>> 19) ^ I >>> 10;
               u[C] = P + u[C - 7] + q + u[C - 16];
             }
-            var W = p & m ^ ~p & b, J = v & y ^ v & a ^ y & a, K = (v << 30 | v >>> 2) ^ (v << 19 | v >>> 13) ^ (v << 10 | v >>> 22), V = (p << 26 | p >>> 6) ^ (p << 21 | p >>> 11) ^ (p << 7 | p >>> 25), B = E + V + W + g[C] + u[C], Ce = K + J;
-            E = b, b = m, m = p, p = d + B | 0, d = a, a = y, y = v, v = B + Ce | 0;
+            var W = p & m ^ ~p & b, K = v & y ^ v & a ^ y & a, V = (v << 30 | v >>> 2) ^ (v << 19 | v >>> 13) ^ (v << 10 | v >>> 22), G = (p << 26 | p >>> 6) ^ (p << 21 | p >>> 11) ^ (p << 7 | p >>> 25), L = E + G + W + g[C] + u[C], xe = V + K;
+            E = b, b = m, m = p, p = d + L | 0, d = a, a = y, y = v, v = L + xe | 0;
           }
           _[0] = _[0] + v | 0, _[1] = _[1] + y | 0, _[2] = _[2] + a | 0, _[3] = _[3] + d | 0, _[4] = _[4] + p | 0, _[5] = _[5] + m | 0, _[6] = _[6] + b | 0, _[7] = _[7] + E | 0;
         },
@@ -595,16 +595,16 @@ var Q = {}, qe = {
           return w._hash = this._hash.clone(), w;
         }
       });
-      i.SHA256 = c._createHelper(S), i.HmacSHA256 = c._createHmacHelper(S);
+      n.SHA256 = c._createHelper(S), n.HmacSHA256 = c._createHmacHelper(S);
     }(Math), s.SHA256;
   });
-})(qe);
-var $ = {}, Ne = {
+})(Ne);
+var z = {}, je = {
   get exports() {
-    return $;
+    return z;
   },
   set exports(e) {
-    $ = e;
+    z = e;
   }
 };
 (function(e, t) {
@@ -612,7 +612,7 @@ var $ = {}, Ne = {
     e.exports = r(M);
   })(N, function(s) {
     return function() {
-      var r = s, i = r.lib, n = i.WordArray, o = r.enc;
+      var r = s, n = r.lib, i = n.WordArray, o = r.enc;
       o.Base64 = {
         /**
          * Converts a word array to a Base64 string.
@@ -674,17 +674,17 @@ var $ = {}, Ne = {
             var k = g[l.charCodeAt(w - 1)] << w % 4 * 2, _ = g[l.charCodeAt(w)] >>> 6 - w % 4 * 2, v = k | _;
             u[S >>> 2] |= v << 24 - S % 4 * 8, S++;
           }
-        return n.create(u, S);
+        return i.create(u, S);
       }
     }(), s.enc.Base64;
   });
-})(Ne);
-var X = {}, je = {
+})(je);
+var Y = {}, Me = {
   get exports() {
-    return X;
+    return Y;
   },
   set exports(e) {
-    X = e;
+    Y = e;
   }
 };
 (function(e, t) {
@@ -693,20 +693,20 @@ var X = {}, je = {
   })(N, function(s) {
     return s.enc.Utf8;
   });
-})(je);
-function Y(e) {
+})(Me);
+function Z(e) {
   this.message = e;
 }
-Y.prototype = new Error(), Y.prototype.name = "InvalidCharacterError";
-var ce = typeof window < "u" && window.atob && window.atob.bind(window) || function(e) {
+Z.prototype = new Error(), Z.prototype.name = "InvalidCharacterError";
+var le = typeof window < "u" && window.atob && window.atob.bind(window) || function(e) {
   var t = String(e).replace(/=+$/, "");
   if (t.length % 4 == 1)
-    throw new Y("'atob' failed: The string to be decoded is not correctly encoded.");
-  for (var s, r, i = 0, n = 0, o = ""; r = t.charAt(n++); ~r && (s = i % 4 ? 64 * s + r : r, i++ % 4) ? o += String.fromCharCode(255 & s >> (-2 * i & 6)) : 0)
+    throw new Z("'atob' failed: The string to be decoded is not correctly encoded.");
+  for (var s, r, n = 0, i = 0, o = ""; r = t.charAt(i++); ~r && (s = n % 4 ? 64 * s + r : r, n++ % 4) ? o += String.fromCharCode(255 & s >> (-2 * n & 6)) : 0)
     r = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(r);
   return o;
 };
-function Me(e) {
+function He(e) {
   var t = e.replace(/-/g, "+").replace(/_/g, "/");
   switch (t.length % 4) {
     case 0:
@@ -722,30 +722,30 @@ function Me(e) {
   }
   try {
     return function(s) {
-      return decodeURIComponent(ce(s).replace(/(.)/g, function(r, i) {
-        var n = i.charCodeAt(0).toString(16).toUpperCase();
-        return n.length < 2 && (n = "0" + n), "%" + n;
+      return decodeURIComponent(le(s).replace(/(.)/g, function(r, n) {
+        var i = n.charCodeAt(0).toString(16).toUpperCase();
+        return i.length < 2 && (i = "0" + i), "%" + i;
       }));
     }(t);
   } catch {
-    return ce(t);
+    return le(t);
   }
 }
-function z(e) {
+function D(e) {
   this.message = e;
 }
-function He(e, t) {
+function We(e, t) {
   if (typeof e != "string")
-    throw new z("Invalid token specified");
+    throw new D("Invalid token specified");
   var s = (t = t || {}).header === !0 ? 0 : 1;
   try {
-    return JSON.parse(Me(e.split(".")[s]));
+    return JSON.parse(He(e.split(".")[s]));
   } catch (r) {
-    throw new z("Invalid token specified: " + r.message);
+    throw new D("Invalid token specified: " + r.message);
   }
 }
-z.prototype = new Error(), z.prototype.name = "InvalidTokenError";
-var We = {
+D.prototype = new Error(), D.prototype.name = "InvalidTokenError";
+var Be = {
   debug: () => {
   },
   info: () => {
@@ -754,38 +754,38 @@ var We = {
   },
   error: () => {
   }
-}, I, U, D = /* @__PURE__ */ ((e) => (e[e.NONE = 0] = "NONE", e[e.ERROR = 1] = "ERROR", e[e.WARN = 2] = "WARN", e[e.INFO = 3] = "INFO", e[e.DEBUG = 4] = "DEBUG", e))(D || {});
+}, T, U, J = /* @__PURE__ */ ((e) => (e[e.NONE = 0] = "NONE", e[e.ERROR = 1] = "ERROR", e[e.WARN = 2] = "WARN", e[e.INFO = 3] = "INFO", e[e.DEBUG = 4] = "DEBUG", e))(J || {});
 ((e) => {
   function t() {
-    I = 3, U = We;
+    T = 3, U = Be;
   }
   e.reset = t;
-  function s(i) {
-    if (!(0 <= i && i <= 4))
+  function s(n) {
+    if (!(0 <= n && n <= 4))
       throw new Error("Invalid log level");
-    I = i;
+    T = n;
   }
   e.setLevel = s;
-  function r(i) {
-    U = i;
+  function r(n) {
+    U = n;
   }
   e.setLogger = r;
-})(D || (D = {}));
+})(J || (J = {}));
 var f = class {
   constructor(e) {
     this._name = e;
   }
   debug(...e) {
-    I >= 4 && U.debug(f._format(this._name, this._method), ...e);
+    T >= 4 && U.debug(f._format(this._name, this._method), ...e);
   }
   info(...e) {
-    I >= 3 && U.info(f._format(this._name, this._method), ...e);
+    T >= 3 && U.info(f._format(this._name, this._method), ...e);
   }
   warn(...e) {
-    I >= 2 && U.warn(f._format(this._name, this._method), ...e);
+    T >= 2 && U.warn(f._format(this._name, this._method), ...e);
   }
   error(...e) {
-    I >= 1 && U.error(f._format(this._name, this._method), ...e);
+    T >= 1 && U.error(f._format(this._name, this._method), ...e);
   }
   throw(e) {
     throw this.error(e), e;
@@ -804,20 +804,20 @@ var f = class {
   }
   // helpers for static class methods
   static debug(e, ...t) {
-    I >= 4 && U.debug(f._format(e), ...t);
+    T >= 4 && U.debug(f._format(e), ...t);
   }
   static info(e, ...t) {
-    I >= 3 && U.info(f._format(e), ...t);
+    T >= 3 && U.info(f._format(e), ...t);
   }
   static warn(e, ...t) {
-    I >= 2 && U.warn(f._format(e), ...t);
+    T >= 2 && U.warn(f._format(e), ...t);
   }
   static error(e, ...t) {
-    I >= 1 && U.error(f._format(e), ...t);
+    T >= 1 && U.error(f._format(e), ...t);
   }
 };
-D.reset();
-var Be = "10000000-1000-4000-8000-100000000000", A = class {
+J.reset();
+var Le = "10000000-1000-4000-8000-100000000000", A = class {
   static _randomWord() {
     return M.lib.WordArray.random(1).words[0];
   }
@@ -825,7 +825,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
    * Generates RFC4122 version 4 guid
    */
   static generateUUIDv4() {
-    return Be.replace(
+    return Le.replace(
       /[018]/g,
       (t) => (+t ^ A._randomWord() & 15 >> +t / 4).toString(16)
     ).replace(/-/g, "");
@@ -841,8 +841,8 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
    */
   static generateCodeChallenge(e) {
     try {
-      const t = Q(e);
-      return $.stringify(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+      const t = X(e);
+      return z.stringify(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
     } catch (t) {
       throw f.error("CryptoUtils.generateCodeChallenge", t), t;
     }
@@ -851,8 +851,8 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
    * Generates a base64-encoded string for a basic auth header
    */
   static generateBasicAuth(e, t) {
-    const s = X.parse([e, t].join(":"));
-    return $.stringify(s);
+    const s = Y.parse([e, t].join(":"));
+    return z.stringify(s);
   }
 }, O = class {
   constructor(e) {
@@ -870,16 +870,16 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     for (const t of this._callbacks)
       t(...e);
   }
-}, Z = class {
+}, ee = class {
   // IMPORTANT: doesn't validate the token
   static decode(e) {
     try {
-      return He(e);
+      return We(e);
     } catch (t) {
       throw f.error("JwtUtils.decode", t), t;
     }
   }
-}, le = class {
+}, de = class {
   /**
    * Populates a map of window features with a placement centered in front of
    * the current window. If no explicit width is given, a default value is
@@ -887,16 +887,16 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
    */
   static center({ ...e }) {
     var t, s, r;
-    return e.width == null && (e.width = (t = [800, 720, 600, 480].find((i) => i <= window.outerWidth / 1.618)) != null ? t : 360), (s = e.left) != null || (e.left = Math.max(0, Math.round(window.screenX + (window.outerWidth - e.width) / 2))), e.height != null && ((r = e.top) != null || (e.top = Math.max(0, Math.round(window.screenY + (window.outerHeight - e.height) / 2)))), e;
+    return e.width == null && (e.width = (t = [800, 720, 600, 480].find((n) => n <= window.outerWidth / 1.618)) != null ? t : 360), (s = e.left) != null || (e.left = Math.max(0, Math.round(window.screenX + (window.outerWidth - e.width) / 2))), e.height != null && ((r = e.top) != null || (e.top = Math.max(0, Math.round(window.screenY + (window.outerHeight - e.height) / 2)))), e;
   }
   static serialize(e) {
     return Object.entries(e).filter(([, t]) => t != null).map(([t, s]) => `${t}=${typeof s != "boolean" ? s : s ? "yes" : "no"}`).join(",");
   }
-}, T = class extends O {
+}, R = class extends O {
   constructor() {
     super(...arguments), this._logger = new f(`Timer('${this._name}')`), this._timerHandle = null, this._expiration = 0, this._callback = () => {
-      const e = this._expiration - T.getEpochTime();
-      this._logger.debug("timer completes in", e), this._expiration <= T.getEpochTime() && (this.cancel(), super.raise());
+      const e = this._expiration - R.getEpochTime();
+      this._logger.debug("timer completes in", e), this._expiration <= R.getEpochTime() && (this.cancel(), super.raise());
     };
   }
   // get the time
@@ -906,7 +906,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   init(e) {
     const t = this._logger.create("init");
     e = Math.max(Math.floor(e), 1);
-    const s = T.getEpochTime() + e;
+    const s = R.getEpochTime() + e;
     if (this.expiration === s && this._timerHandle) {
       t.debug("skipping since already initialized for expiration at", this.expiration);
       return;
@@ -921,7 +921,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   cancel() {
     this._logger.create("cancel"), this._timerHandle && (clearInterval(this._timerHandle), this._timerHandle = null);
   }
-}, ee = class {
+}, te = class {
   static readParams(e, t = "query") {
     if (!e)
       throw new TypeError("Invalid URL");
@@ -930,26 +930,26 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   }
 }, j = class extends Error {
   constructor(e, t) {
-    var s, r, i;
+    var s, r, n;
     if (super(e.error_description || e.error || ""), this.form = t, this.name = "ErrorResponse", !e.error)
       throw f.error("ErrorResponse", "No error passed"), new Error("No error passed");
-    this.error = e.error, this.error_description = (s = e.error_description) != null ? s : null, this.error_uri = (r = e.error_uri) != null ? r : null, this.state = e.userState, this.session_state = (i = e.session_state) != null ? i : null;
+    this.error = e.error, this.error_description = (s = e.error_description) != null ? s : null, this.error_uri = (r = e.error_uri) != null ? r : null, this.state = e.userState, this.session_state = (n = e.session_state) != null ? n : null;
   }
-}, re = class extends Error {
+}, ie = class extends Error {
   constructor(e) {
     super(e), this.name = "ErrorTimeout";
   }
-}, Le = class {
+}, Fe = class {
   constructor(e) {
-    this._logger = new f("AccessTokenEvents"), this._expiringTimer = new T("Access token expiring"), this._expiredTimer = new T("Access token expired"), this._expiringNotificationTimeInSeconds = e.expiringNotificationTimeInSeconds;
+    this._logger = new f("AccessTokenEvents"), this._expiringTimer = new R("Access token expiring"), this._expiredTimer = new R("Access token expired"), this._expiringNotificationTimeInSeconds = e.expiringNotificationTimeInSeconds;
   }
   load(e) {
     const t = this._logger.create("load");
     if (e.access_token && e.expires_in !== void 0) {
       const s = e.expires_in;
       if (t.debug("access token present, remaining duration:", s), s > 0) {
-        let i = s - this._expiringNotificationTimeInSeconds;
-        i <= 0 && (i = 1), t.debug("registering expiring timer, raising in", i, "seconds"), this._expiringTimer.init(i);
+        let n = s - this._expiringNotificationTimeInSeconds;
+        n <= 0 && (n = 1), t.debug("registering expiring timer, raising in", n, "seconds"), this._expiringTimer.init(n);
       } else
         t.debug("canceling existing expiring timer because we're past expiration."), this._expiringTimer.cancel();
       const r = s + 1;
@@ -984,13 +984,13 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   removeAccessTokenExpired(e) {
     this._expiredTimer.removeHandler(e);
   }
-}, Fe = class {
-  constructor(e, t, s, r, i) {
-    this._callback = e, this._client_id = t, this._intervalInSeconds = r, this._stopOnError = i, this._logger = new f("CheckSessionIFrame"), this._timer = null, this._session_state = null, this._message = (o) => {
+}, $e = class {
+  constructor(e, t, s, r, n) {
+    this._callback = e, this._client_id = t, this._intervalInSeconds = r, this._stopOnError = n, this._logger = new f("CheckSessionIFrame"), this._timer = null, this._session_state = null, this._message = (o) => {
       o.origin === this._frame_origin && o.source === this._frame.contentWindow && (o.data === "error" ? (this._logger.error("error message from check session op iframe"), this._stopOnError && this.stop()) : o.data === "changed" ? (this._logger.debug("changed message from check session op iframe"), this.stop(), this._callback()) : this._logger.debug(o.data + " message from check session op iframe"));
     };
-    const n = new URL(s);
-    this._frame_origin = n.origin, this._frame = window.document.createElement("iframe"), this._frame.style.visibility = "hidden", this._frame.style.position = "fixed", this._frame.style.left = "-1000px", this._frame.style.top = "0", this._frame.width = "0", this._frame.height = "0", this._frame.src = n.href;
+    const i = new URL(s);
+    this._frame_origin = i.origin, this._frame = window.document.createElement("iframe"), this._frame.style.visibility = "hidden", this._frame.style.position = "fixed", this._frame.style.left = "-1000px", this._frame.style.top = "0", this._frame.width = "0", this._frame.height = "0", this._frame.src = i.href;
   }
   load() {
     return new Promise((e) => {
@@ -1011,7 +1011,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   stop() {
     this._logger.create("stop"), this._session_state = null, this._timer && (clearInterval(this._timer), this._timer = null);
   }
-}, fe = class {
+}, we = class {
   constructor() {
     this._logger = new f("InMemoryWebStorage"), this._data = {};
   }
@@ -1033,7 +1033,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   key(e) {
     return Object.getOwnPropertyNames(this._data)[e];
   }
-}, ie = class {
+}, ne = class {
   constructor(e = [], t = null) {
     this._jwtHandler = t, this._logger = new f("JsonService"), this._contentTypes = [], this._contentTypes.push(...e, "application/json"), t && this._contentTypes.push("application/jwt");
   }
@@ -1041,64 +1041,64 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     const { timeoutInSeconds: s, ...r } = t;
     if (!s)
       return await fetch(e, r);
-    const i = new AbortController(), n = setTimeout(() => i.abort(), s * 1e3);
+    const n = new AbortController(), i = setTimeout(() => n.abort(), s * 1e3);
     try {
       return await fetch(e, {
         ...t,
-        signal: i.signal
+        signal: n.signal
       });
     } catch (o) {
-      throw o instanceof DOMException && o.name === "AbortError" ? new re("Network timed out") : o;
+      throw o instanceof DOMException && o.name === "AbortError" ? new ie("Network timed out") : o;
     } finally {
-      clearTimeout(n);
+      clearTimeout(i);
     }
   }
   async getJson(e, {
     token: t,
     credentials: s
   } = {}) {
-    const r = this._logger.create("getJson"), i = {
+    const r = this._logger.create("getJson"), n = {
       Accept: this._contentTypes.join(", ")
     };
-    t && (r.debug("token passed, setting Authorization header"), i.Authorization = "Bearer " + t);
-    let n;
+    t && (r.debug("token passed, setting Authorization header"), n.Authorization = "Bearer " + t);
+    let i;
     try {
-      r.debug("url:", e), n = await this.fetchWithTimeout(e, { method: "GET", headers: i, credentials: s });
+      r.debug("url:", e), i = await this.fetchWithTimeout(e, { method: "GET", headers: n, credentials: s });
     } catch (l) {
       throw r.error("Network Error"), l;
     }
-    r.debug("HTTP response received, status", n.status);
-    const o = n.headers.get("Content-Type");
-    if (o && !this._contentTypes.find((l) => o.startsWith(l)) && r.throw(new Error(`Invalid response Content-Type: ${o ?? "undefined"}, from URL: ${e}`)), n.ok && this._jwtHandler && (o != null && o.startsWith("application/jwt")))
-      return await this._jwtHandler(await n.text());
+    r.debug("HTTP response received, status", i.status);
+    const o = i.headers.get("Content-Type");
+    if (o && !this._contentTypes.find((l) => o.startsWith(l)) && r.throw(new Error(`Invalid response Content-Type: ${o ?? "undefined"}, from URL: ${e}`)), i.ok && this._jwtHandler && (o != null && o.startsWith("application/jwt")))
+      return await this._jwtHandler(await i.text());
     let c;
     try {
-      c = await n.json();
+      c = await i.json();
     } catch (l) {
-      throw r.error("Error parsing JSON response", l), n.ok ? l : new Error(`${n.statusText} (${n.status})`);
+      throw r.error("Error parsing JSON response", l), i.ok ? l : new Error(`${i.statusText} (${i.status})`);
     }
-    if (!n.ok)
-      throw r.error("Error from server:", c), c.error ? new j(c) : new Error(`${n.statusText} (${n.status}): ${JSON.stringify(c)}`);
+    if (!i.ok)
+      throw r.error("Error from server:", c), c.error ? new j(c) : new Error(`${i.statusText} (${i.status}): ${JSON.stringify(c)}`);
     return c;
   }
   async postForm(e, {
     body: t,
     basicAuth: s,
     timeoutInSeconds: r,
-    initCredentials: i
+    initCredentials: n
   }) {
-    const n = this._logger.create("postForm"), o = {
+    const i = this._logger.create("postForm"), o = {
       Accept: this._contentTypes.join(", "),
       "Content-Type": "application/x-www-form-urlencoded"
     };
     s !== void 0 && (o.Authorization = "Basic " + s);
     let c;
     try {
-      n.debug("url:", e), c = await this.fetchWithTimeout(e, { method: "POST", headers: o, body: t, timeoutInSeconds: r, credentials: i });
+      i.debug("url:", e), c = await this.fetchWithTimeout(e, { method: "POST", headers: o, body: t, timeoutInSeconds: r, credentials: n });
     } catch (u) {
-      throw n.error("Network error"), u;
+      throw i.error("Network error"), u;
     }
-    n.debug("HTTP response received, status", c.status);
+    i.debug("HTTP response received, status", c.status);
     const l = c.headers.get("Content-Type");
     if (l && !this._contentTypes.find((u) => l.startsWith(u)))
       throw new Error(`Invalid response Content-Type: ${l ?? "undefined"}, from URL: ${e}`);
@@ -1108,15 +1108,15 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       try {
         g = JSON.parse(h);
       } catch (u) {
-        throw n.error("Error parsing JSON response", u), c.ok ? u : new Error(`${c.statusText} (${c.status})`);
+        throw i.error("Error parsing JSON response", u), c.ok ? u : new Error(`${c.statusText} (${c.status})`);
       }
     if (!c.ok)
-      throw n.error("Error from server:", g), g.error ? new j(g, t) : new Error(`${c.statusText} (${c.status}): ${JSON.stringify(g)}`);
+      throw i.error("Error from server:", g), g.error ? new j(g, t) : new Error(`${c.statusText} (${c.status}): ${JSON.stringify(g)}`);
     return g;
   }
-}, $e = class {
+}, ze = class {
   constructor(e) {
-    this._settings = e, this._logger = new f("MetadataService"), this._jsonService = new ie(["application/jwk-set+json"]), this._signingKeys = null, this._metadata = null, this._metadataUrl = this._settings.metadataUrl, this._settings.signingKeys && (this._logger.debug("using signingKeys from settings"), this._signingKeys = this._settings.signingKeys), this._settings.metadata && (this._logger.debug("using metadata from settings"), this._metadata = this._settings.metadata), this._settings.fetchRequestCredentials && (this._logger.debug("using fetchRequestCredentials from settings"), this._fetchRequestCredentials = this._settings.fetchRequestCredentials);
+    this._settings = e, this._logger = new f("MetadataService"), this._jsonService = new ne(["application/jwk-set+json"]), this._signingKeys = null, this._metadata = null, this._metadataUrl = this._settings.metadataUrl, this._settings.signingKeys && (this._logger.debug("using signingKeys from settings"), this._signingKeys = this._settings.signingKeys), this._settings.metadata && (this._logger.debug("using metadata from settings"), this._metadata = this._settings.metadata), this._settings.fetchRequestCredentials && (this._logger.debug("using fetchRequestCredentials from settings"), this._fetchRequestCredentials = this._settings.fetchRequestCredentials);
   }
   resetSigningKeys() {
     this._signingKeys = null;
@@ -1177,7 +1177,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       throw e.throw(new Error("Missing keys on keyset")), null;
     return this._signingKeys = s.keys, this._signingKeys;
   }
-}, we = class {
+}, me = class {
   constructor({
     prefix: e = "oidc.",
     store: t = localStorage
@@ -1204,22 +1204,22 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     }
     return t;
   }
-}, ze = "code", De = "openid", Je = "client_secret_post", Ke = "query", Ve = 60 * 15, Ge = 60 * 5, me = class {
+}, De = "code", Je = "openid", Ke = "client_secret_post", Ve = "query", Ge = 60 * 15, Qe = 60 * 5, ve = class {
   constructor({
     // metadata related
     authority: e,
     metadataUrl: t,
     metadata: s,
     signingKeys: r,
-    metadataSeed: i,
+    metadataSeed: n,
     // client related
-    client_id: n,
+    client_id: i,
     client_secret: o,
-    response_type: c = ze,
-    scope: l = De,
+    response_type: c = De,
+    scope: l = Je,
     redirect_uri: h,
     post_logout_redirect_uri: g,
-    client_authentication: u = Je,
+    client_authentication: u = Ke,
     // optional protocol
     prompt: S,
     display: w,
@@ -1227,44 +1227,44 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     ui_locales: _,
     acr_values: v,
     resource: y,
-    response_mode: a = Ke,
+    response_mode: a = Ve,
     // behavior flags
     filterProtocolClaims: d = !0,
     loadUserInfo: p = !1,
-    staleStateAgeInSeconds: m = Ve,
-    clockSkewInSeconds: b = Ge,
+    staleStateAgeInSeconds: m = Ge,
+    clockSkewInSeconds: b = Qe,
     userInfoJwtIssuer: E = "OP",
     mergeClaims: C = !1,
     disablePKCE: x = !1,
     // other behavior
     stateStore: P,
-    refreshTokenCredentials: R,
+    refreshTokenCredentials: I,
     revokeTokenAdditionalContentTypes: q,
     fetchRequestCredentials: W,
-    refreshTokenAllowedScope: J,
+    refreshTokenAllowedScope: K,
     // extra query params
-    extraQueryParams: K = {},
-    extraTokenParams: V = {}
+    extraQueryParams: V = {},
+    extraTokenParams: G = {}
   }) {
-    if (this.authority = e, t ? this.metadataUrl = t : (this.metadataUrl = e, e && (this.metadataUrl.endsWith("/") || (this.metadataUrl += "/"), this.metadataUrl += ".well-known/openid-configuration")), this.metadata = s, this.metadataSeed = i, this.signingKeys = r, this.client_id = n, this.client_secret = o, this.response_type = c, this.scope = l, this.redirect_uri = h, this.post_logout_redirect_uri = g, this.client_authentication = u, this.prompt = S, this.display = w, this.max_age = k, this.ui_locales = _, this.acr_values = v, this.resource = y, this.response_mode = a, this.filterProtocolClaims = d ?? !0, this.loadUserInfo = !!p, this.staleStateAgeInSeconds = m, this.clockSkewInSeconds = b, this.userInfoJwtIssuer = E, this.mergeClaims = !!C, this.disablePKCE = !!x, this.revokeTokenAdditionalContentTypes = q, W && R && console.warn("Both fetchRequestCredentials and refreshTokenCredentials is set. Only fetchRequestCredentials will be used."), this.fetchRequestCredentials = W || R || "same-origin", P)
+    if (this.authority = e, t ? this.metadataUrl = t : (this.metadataUrl = e, e && (this.metadataUrl.endsWith("/") || (this.metadataUrl += "/"), this.metadataUrl += ".well-known/openid-configuration")), this.metadata = s, this.metadataSeed = n, this.signingKeys = r, this.client_id = i, this.client_secret = o, this.response_type = c, this.scope = l, this.redirect_uri = h, this.post_logout_redirect_uri = g, this.client_authentication = u, this.prompt = S, this.display = w, this.max_age = k, this.ui_locales = _, this.acr_values = v, this.resource = y, this.response_mode = a, this.filterProtocolClaims = d ?? !0, this.loadUserInfo = !!p, this.staleStateAgeInSeconds = m, this.clockSkewInSeconds = b, this.userInfoJwtIssuer = E, this.mergeClaims = !!C, this.disablePKCE = !!x, this.revokeTokenAdditionalContentTypes = q, W && I && console.warn("Both fetchRequestCredentials and refreshTokenCredentials is set. Only fetchRequestCredentials will be used."), this.fetchRequestCredentials = W || I || "same-origin", P)
       this.stateStore = P;
     else {
-      const B = typeof window < "u" ? window.localStorage : new fe();
-      this.stateStore = new we({ store: B });
+      const L = typeof window < "u" ? window.localStorage : new we();
+      this.stateStore = new me({ store: L });
     }
-    this.refreshTokenAllowedScope = J, this.extraQueryParams = K, this.extraTokenParams = V;
+    this.refreshTokenAllowedScope = K, this.extraQueryParams = V, this.extraTokenParams = G;
   }
-}, Qe = class {
+}, Xe = class {
   constructor(e, t) {
     this._settings = e, this._metadataService = t, this._logger = new f("UserInfoService"), this._getClaimsFromJwt = async (s) => {
       const r = this._logger.create("_getClaimsFromJwt");
       try {
-        const i = Z.decode(s);
-        return r.debug("JWT decoding successful"), i;
-      } catch (i) {
-        throw r.error("Error parsing JWT response"), i;
+        const n = ee.decode(s);
+        return r.debug("JWT decoding successful"), n;
+      } catch (n) {
+        throw r.error("Error parsing JWT response"), n;
       }
-    }, this._jsonService = new ie(void 0, this._getClaimsFromJwt);
+    }, this._jsonService = new ne(void 0, this._getClaimsFromJwt);
   }
   async getClaims(e) {
     const t = this._logger.create("getClaims");
@@ -1277,27 +1277,27 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     });
     return t.debug("got claims", r), r;
   }
-}, ve = class {
+}, Se = class {
   constructor(e, t) {
-    this._settings = e, this._metadataService = t, this._logger = new f("TokenClient"), this._jsonService = new ie(this._settings.revokeTokenAdditionalContentTypes);
+    this._settings = e, this._metadataService = t, this._logger = new f("TokenClient"), this._jsonService = new ne(this._settings.revokeTokenAdditionalContentTypes);
   }
   async exchangeCode({
     grant_type: e = "authorization_code",
     redirect_uri: t = this._settings.redirect_uri,
     client_id: s = this._settings.client_id,
     client_secret: r = this._settings.client_secret,
-    ...i
+    ...n
   }) {
-    const n = this._logger.create("exchangeCode");
-    s || n.throw(new Error("A client_id is required")), t || n.throw(new Error("A redirect_uri is required")), i.code || n.throw(new Error("A code is required"));
+    const i = this._logger.create("exchangeCode");
+    s || i.throw(new Error("A client_id is required")), t || i.throw(new Error("A redirect_uri is required")), n.code || i.throw(new Error("A code is required"));
     const o = new URLSearchParams({ grant_type: e, redirect_uri: t });
-    for (const [g, u] of Object.entries(i))
+    for (const [g, u] of Object.entries(n))
       u != null && o.set(g, u);
     let c;
     switch (this._settings.client_authentication) {
       case "client_secret_basic":
         if (!r)
-          throw n.throw(new Error("A client_secret is required")), null;
+          throw i.throw(new Error("A client_secret is required")), null;
         c = A.generateBasicAuth(s, r);
         break;
       case "client_secret_post":
@@ -1305,27 +1305,27 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
         break;
     }
     const l = await this._metadataService.getTokenEndpoint(!1);
-    n.debug("got token endpoint");
+    i.debug("got token endpoint");
     const h = await this._jsonService.postForm(l, { body: o, basicAuth: c, initCredentials: this._settings.fetchRequestCredentials });
-    return n.debug("got response"), h;
+    return i.debug("got response"), h;
   }
   async exchangeCredentials({
     grant_type: e = "password",
     client_id: t = this._settings.client_id,
     client_secret: s = this._settings.client_secret,
     scope: r = this._settings.scope,
-    ...i
+    ...n
   }) {
-    const n = this._logger.create("exchangeCredentials");
-    t || n.throw(new Error("A client_id is required"));
+    const i = this._logger.create("exchangeCredentials");
+    t || i.throw(new Error("A client_id is required"));
     const o = new URLSearchParams({ grant_type: e, scope: r });
-    for (const [g, u] of Object.entries(i))
+    for (const [g, u] of Object.entries(n))
       u != null && o.set(g, u);
     let c;
     switch (this._settings.client_authentication) {
       case "client_secret_basic":
         if (!s)
-          throw n.throw(new Error("A client_secret is required")), null;
+          throw i.throw(new Error("A client_secret is required")), null;
         c = A.generateBasicAuth(t, s);
         break;
       case "client_secret_post":
@@ -1333,27 +1333,27 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
         break;
     }
     const l = await this._metadataService.getTokenEndpoint(!1);
-    n.debug("got token endpoint");
+    i.debug("got token endpoint");
     const h = await this._jsonService.postForm(l, { body: o, basicAuth: c, initCredentials: this._settings.fetchRequestCredentials });
-    return n.debug("got response"), h;
+    return i.debug("got response"), h;
   }
   async exchangeRefreshToken({
     grant_type: e = "refresh_token",
     client_id: t = this._settings.client_id,
     client_secret: s = this._settings.client_secret,
     timeoutInSeconds: r,
-    ...i
+    ...n
   }) {
-    const n = this._logger.create("exchangeRefreshToken");
-    t || n.throw(new Error("A client_id is required")), i.refresh_token || n.throw(new Error("A refresh_token is required"));
+    const i = this._logger.create("exchangeRefreshToken");
+    t || i.throw(new Error("A client_id is required")), n.refresh_token || i.throw(new Error("A refresh_token is required"));
     const o = new URLSearchParams({ grant_type: e });
-    for (const [g, u] of Object.entries(i))
+    for (const [g, u] of Object.entries(n))
       u != null && o.set(g, u);
     let c;
     switch (this._settings.client_authentication) {
       case "client_secret_basic":
         if (!s)
-          throw n.throw(new Error("A client_secret is required")), null;
+          throw i.throw(new Error("A client_secret is required")), null;
         c = A.generateBasicAuth(t, s);
         break;
       case "client_secret_post":
@@ -1361,9 +1361,9 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
         break;
     }
     const l = await this._metadataService.getTokenEndpoint(!1);
-    n.debug("got token endpoint");
+    i.debug("got token endpoint");
     const h = await this._jsonService.postForm(l, { body: o, basicAuth: c, timeoutInSeconds: r, initCredentials: this._settings.fetchRequestCredentials });
-    return n.debug("got response"), h;
+    return i.debug("got response"), h;
   }
   /**
    * Revoke an access or refresh token.
@@ -1376,12 +1376,12 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     e.token || s.throw(new Error("A token is required"));
     const r = await this._metadataService.getRevocationEndpoint(!1);
     s.debug(`got revocation endpoint, revoking ${(t = e.token_type_hint) != null ? t : "default token type"}`);
-    const i = new URLSearchParams();
-    for (const [n, o] of Object.entries(e))
-      o != null && i.set(n, o);
-    i.set("client_id", this._settings.client_id), this._settings.client_secret && i.set("client_secret", this._settings.client_secret), await this._jsonService.postForm(r, { body: i }), s.debug("got response");
+    const n = new URLSearchParams();
+    for (const [i, o] of Object.entries(e))
+      o != null && n.set(i, o);
+    n.set("client_id", this._settings.client_id), this._settings.client_secret && n.set("client_secret", this._settings.client_secret), await this._jsonService.postForm(r, { body: n }), s.debug("got response");
   }
-}, Xe = [
+}, Ye = [
   "nbf",
   "jti",
   "auth_time",
@@ -1391,9 +1391,9 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   "azp",
   "at_hash"
   // https://openid.net/specs/openid-connect-core-1_0.html#CodeIDToken
-], Ye = ["sub", "iss", "aud", "exp", "iat"], Ze = class {
+], Ze = ["sub", "iss", "aud", "exp", "iat"], et = class {
   constructor(e, t) {
-    this._settings = e, this._metadataService = t, this._logger = new f("ResponseValidator"), this._userInfoService = new Qe(this._settings, this._metadataService), this._tokenClient = new ve(this._settings, this._metadataService);
+    this._settings = e, this._metadataService = t, this._logger = new f("ResponseValidator"), this._userInfoService = new Xe(this._settings, this._metadataService), this._tokenClient = new Se(this._settings, this._metadataService);
   }
   async validateSigninResponse(e, t) {
     const s = this._logger.create("validateSigninResponse");
@@ -1405,10 +1405,10 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   }
   async validateRefreshResponse(e, t) {
     var s, r;
-    const i = this._logger.create("validateRefreshResponse");
-    e.userState = t.data, (s = e.session_state) != null || (e.session_state = t.session_state), (r = e.scope) != null || (e.scope = t.scope), e.isOpenId && e.id_token && (this._validateIdTokenAttributes(e, t.id_token), i.debug("ID Token validated")), e.id_token || (e.id_token = t.id_token, e.profile = t.profile);
-    const n = e.isOpenId && !!e.id_token;
-    await this._processClaims(e, !1, n), i.debug("claims processed");
+    const n = this._logger.create("validateRefreshResponse");
+    e.userState = t.data, (s = e.session_state) != null || (e.session_state = t.session_state), (r = e.scope) != null || (e.scope = t.scope), e.isOpenId && e.id_token && (this._validateIdTokenAttributes(e, t.id_token), n.debug("ID Token validated")), e.id_token || (e.id_token = t.id_token, e.profile = t.profile);
+    const i = e.isOpenId && !!e.id_token;
+    await this._processClaims(e, !1, i), n.debug("claims processed");
   }
   validateSignoutResponse(e, t) {
     const s = this._logger.create("validateSignoutResponse");
@@ -1429,15 +1429,15 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       return;
     }
     r.debug("loading user info");
-    const i = await this._userInfoService.getClaims(e.access_token);
-    r.debug("user info claims received from user info endpoint"), s && i.sub !== e.profile.sub && r.throw(new Error("subject from UserInfo response does not match subject in ID Token")), e.profile = this._mergeClaims(e.profile, this._filterProtocolClaims(i)), r.debug("user info claims received, updated profile:", e.profile);
+    const n = await this._userInfoService.getClaims(e.access_token);
+    r.debug("user info claims received from user info endpoint"), s && n.sub !== e.profile.sub && r.throw(new Error("subject from UserInfo response does not match subject in ID Token")), e.profile = this._mergeClaims(e.profile, this._filterProtocolClaims(n)), r.debug("user info claims received, updated profile:", e.profile);
   }
   _mergeClaims(e, t) {
     const s = { ...e };
-    for (const [r, i] of Object.entries(t))
-      for (const n of Array.isArray(i) ? i : [i]) {
+    for (const [r, n] of Object.entries(t))
+      for (const i of Array.isArray(n) ? n : [n]) {
         const o = s[r];
-        o ? Array.isArray(o) ? o.includes(n) || o.push(n) : s[r] !== n && (typeof n == "object" && this._settings.mergeClaims ? s[r] = this._mergeClaims(o, n) : s[r] = [o, n]) : s[r] = n;
+        o ? Array.isArray(o) ? o.includes(i) || o.push(i) : s[r] !== i && (typeof i == "object" && this._settings.mergeClaims ? s[r] = this._mergeClaims(o, i) : s[r] = [o, i]) : s[r] = i;
       }
     return s;
   }
@@ -1445,9 +1445,9 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     const t = { ...e };
     if (this._settings.filterProtocolClaims) {
       let s;
-      Array.isArray(this._settings.filterProtocolClaims) ? s = this._settings.filterProtocolClaims : s = Xe;
+      Array.isArray(this._settings.filterProtocolClaims) ? s = this._settings.filterProtocolClaims : s = Ye;
       for (const r of s)
-        Ye.includes(r) || delete t[r];
+        Ze.includes(r) || delete t[r];
     }
     return t;
   }
@@ -1471,16 +1471,16 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     var s;
     const r = this._logger.create("_validateIdTokenAttributes");
     r.debug("decoding ID Token JWT");
-    const i = Z.decode((s = e.id_token) != null ? s : "");
-    if (i.sub || r.throw(new Error("ID Token is missing a subject claim")), t) {
-      const n = Z.decode(t);
-      n.sub !== i.sub && r.throw(new Error("sub in id_token does not match current sub")), n.auth_time && n.auth_time !== i.auth_time && r.throw(new Error("auth_time in id_token does not match original auth_time")), n.azp && n.azp !== i.azp && r.throw(new Error("azp in id_token does not match original azp")), !n.azp && i.azp && r.throw(new Error("azp not in id_token, but present in original id_token"));
+    const n = ee.decode((s = e.id_token) != null ? s : "");
+    if (n.sub || r.throw(new Error("ID Token is missing a subject claim")), t) {
+      const i = ee.decode(t);
+      i.sub !== n.sub && r.throw(new Error("sub in id_token does not match current sub")), i.auth_time && i.auth_time !== n.auth_time && r.throw(new Error("auth_time in id_token does not match original auth_time")), i.azp && i.azp !== n.azp && r.throw(new Error("azp in id_token does not match original azp")), !i.azp && n.azp && r.throw(new Error("azp not in id_token, but present in original id_token"));
     }
-    e.profile = i;
+    e.profile = n;
   }
 }, H = class {
   constructor(e) {
-    this.id = e.id || A.generateUUIDv4(), this.data = e.data, e.created && e.created > 0 ? this.created = e.created : this.created = T.getEpochTime(), this.request_type = e.request_type;
+    this.id = e.id || A.generateUUIDv4(), this.data = e.data, e.created && e.created > 0 ? this.created = e.created : this.created = R.getEpochTime(), this.request_type = e.request_type;
   }
   toStorageString() {
     return new f("State").create("toStorageString"), JSON.stringify({
@@ -1494,10 +1494,10 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     return f.createStatic("State", "fromStorageString"), new H(JSON.parse(e));
   }
   static async clearStaleState(e, t) {
-    const s = f.createStatic("State", "clearStaleState"), r = T.getEpochTime() - t, i = await e.getAllKeys();
-    s.debug("got keys", i);
-    for (let n = 0; n < i.length; n++) {
-      const o = i[n], c = await e.get(o);
+    const s = f.createStatic("State", "clearStaleState"), r = R.getEpochTime() - t, n = await e.getAllKeys();
+    s.debug("got keys", n);
+    for (let i = 0; i < n.length; i++) {
+      const o = n[i], c = await e.get(o);
       let l = !1;
       if (c)
         try {
@@ -1511,7 +1511,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       l && (s.debug("removed item for key:", o), e.remove(o));
     }
   }
-}, ne = class extends H {
+}, oe = class extends H {
   constructor(e) {
     super(e), e.code_verifier === !0 ? this.code_verifier = A.generateCodeVerifier() : e.code_verifier && (this.code_verifier = e.code_verifier), this.code_verifier && (this.code_challenge = A.generateCodeChallenge(this.code_verifier)), this.authority = e.authority, this.client_id = e.client_id, this.redirect_uri = e.redirect_uri, this.scope = e.scope, this.client_secret = e.client_secret, this.extraTokenParams = e.extraTokenParams, this.response_mode = e.response_mode, this.skipUserInfo = e.skipUserInfo;
   }
@@ -1535,17 +1535,17 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   static fromStorageString(e) {
     f.createStatic("SigninState", "fromStorageString");
     const t = JSON.parse(e);
-    return new ne(t);
+    return new oe(t);
   }
-}, et = class {
+}, tt = class {
   constructor({
     // mandatory
     url: e,
     authority: t,
     client_id: s,
     redirect_uri: r,
-    response_type: i,
-    scope: n,
+    response_type: n,
+    scope: i,
     // optional
     state_data: o,
     response_mode: c,
@@ -1565,13 +1565,13 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       throw this._logger.error("ctor: No client_id passed"), new Error("client_id");
     if (!r)
       throw this._logger.error("ctor: No redirect_uri passed"), new Error("redirect_uri");
-    if (!i)
-      throw this._logger.error("ctor: No response_type passed"), new Error("response_type");
     if (!n)
+      throw this._logger.error("ctor: No response_type passed"), new Error("response_type");
+    if (!i)
       throw this._logger.error("ctor: No scope passed"), new Error("scope");
     if (!t)
       throw this._logger.error("ctor: No authority passed"), new Error("authority");
-    this.state = new ne({
+    this.state = new oe({
       data: o,
       request_type: l,
       code_verifier: !_,
@@ -1580,63 +1580,63 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       redirect_uri: r,
       response_mode: c,
       client_secret: h,
-      scope: n,
+      scope: i,
       extraTokenParams: k,
       skipUserInfo: S
     });
     const y = new URL(e);
-    y.searchParams.append("client_id", s), y.searchParams.append("redirect_uri", r), y.searchParams.append("response_type", i), y.searchParams.append("scope", n), g && y.searchParams.append("nonce", g), y.searchParams.append("state", this.state.id), this.state.code_challenge && (y.searchParams.append("code_challenge", this.state.code_challenge), y.searchParams.append("code_challenge_method", "S256")), u && (Array.isArray(u) ? u : [u]).forEach((d) => y.searchParams.append("resource", d));
+    y.searchParams.append("client_id", s), y.searchParams.append("redirect_uri", r), y.searchParams.append("response_type", n), y.searchParams.append("scope", i), g && y.searchParams.append("nonce", g), y.searchParams.append("state", this.state.id), this.state.code_challenge && (y.searchParams.append("code_challenge", this.state.code_challenge), y.searchParams.append("code_challenge_method", "S256")), u && (Array.isArray(u) ? u : [u]).forEach((d) => y.searchParams.append("resource", d));
     for (const [a, d] of Object.entries({ response_mode: c, ...v, ...w }))
       d != null && y.searchParams.append(a, d.toString());
     this.url = y.href;
   }
-}, tt = "openid", G = class {
+}, st = "openid", Q = class {
   constructor(e) {
     this.access_token = "", this.token_type = "", this.profile = {}, this.state = e.get("state"), this.session_state = e.get("session_state"), this.error = e.get("error"), this.error_description = e.get("error_description"), this.error_uri = e.get("error_uri"), this.code = e.get("code");
   }
   get expires_in() {
     if (this.expires_at !== void 0)
-      return this.expires_at - T.getEpochTime();
+      return this.expires_at - R.getEpochTime();
   }
   set expires_in(e) {
-    typeof e == "string" && (e = Number(e)), e !== void 0 && e >= 0 && (this.expires_at = Math.floor(e) + T.getEpochTime());
+    typeof e == "string" && (e = Number(e)), e !== void 0 && e >= 0 && (this.expires_at = Math.floor(e) + R.getEpochTime());
   }
   get isOpenId() {
     var e;
-    return ((e = this.scope) == null ? void 0 : e.split(" ").includes(tt)) || !!this.id_token;
+    return ((e = this.scope) == null ? void 0 : e.split(" ").includes(st)) || !!this.id_token;
   }
-}, st = class {
+}, rt = class {
   constructor({
     url: e,
     state_data: t,
     id_token_hint: s,
     post_logout_redirect_uri: r,
-    extraQueryParams: i,
-    request_type: n
+    extraQueryParams: n,
+    request_type: i
   }) {
     if (this._logger = new f("SignoutRequest"), !e)
       throw this._logger.error("ctor: No url passed"), new Error("url");
     const o = new URL(e);
-    s && o.searchParams.append("id_token_hint", s), r && (o.searchParams.append("post_logout_redirect_uri", r), t && (this.state = new H({ data: t, request_type: n }), o.searchParams.append("state", this.state.id)));
-    for (const [c, l] of Object.entries({ ...i }))
+    s && o.searchParams.append("id_token_hint", s), r && (o.searchParams.append("post_logout_redirect_uri", r), t && (this.state = new H({ data: t, request_type: i }), o.searchParams.append("state", this.state.id)));
+    for (const [c, l] of Object.entries({ ...n }))
       l != null && o.searchParams.append(c, l.toString());
     this.url = o.href;
   }
-}, rt = class {
+}, it = class {
   constructor(e) {
     this.state = e.get("state"), this.error = e.get("error"), this.error_description = e.get("error_description"), this.error_uri = e.get("error_uri");
   }
-}, it = class {
+}, nt = class {
   constructor(e) {
-    this._logger = new f("OidcClient"), this.settings = new me(e), this.metadataService = new $e(this.settings), this._validator = new Ze(this.settings, this.metadataService), this._tokenClient = new ve(this.settings, this.metadataService);
+    this._logger = new f("OidcClient"), this.settings = new ve(e), this.metadataService = new ze(this.settings), this._validator = new et(this.settings, this.metadataService), this._tokenClient = new Se(this.settings, this.metadataService);
   }
   async createSigninRequest({
     state: e,
     request: t,
     request_uri: s,
     request_type: r,
-    id_token_hint: i,
-    login_hint: n,
+    id_token_hint: n,
+    login_hint: i,
     skipUserInfo: o,
     nonce: c,
     response_type: l = this.settings.response_type,
@@ -1657,7 +1657,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       throw new Error("Only the Authorization Code flow (with PKCE) is supported");
     const m = await this.metadataService.getAuthorizationEndpoint();
     p.debug("Received authorization endpoint", m);
-    const b = new et({
+    const b = new tt({
       url: m,
       authority: this.settings.authority,
       client_id: this.settings.client_id,
@@ -1669,8 +1669,8 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       display: S,
       max_age: w,
       ui_locales: k,
-      id_token_hint: i,
-      login_hint: n,
+      id_token_hint: n,
+      login_hint: i,
       acr_values: _,
       resource: v,
       request: t,
@@ -1689,13 +1689,13 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     return await this.settings.stateStore.set(E.id, E.toStorageString()), b;
   }
   async readSigninResponseState(e, t = !1) {
-    const s = this._logger.create("readSigninResponseState"), r = new G(ee.readParams(e, this.settings.response_mode));
+    const s = this._logger.create("readSigninResponseState"), r = new Q(te.readParams(e, this.settings.response_mode));
     if (!r.state)
       throw s.throw(new Error("No state in response")), null;
-    const i = await this.settings.stateStore[t ? "remove" : "get"](r.state);
-    if (!i)
+    const n = await this.settings.stateStore[t ? "remove" : "get"](r.state);
+    if (!n)
       throw s.throw(new Error("No matching state found in storage")), null;
-    return { state: ne.fromStorageString(i), response: r };
+    return { state: oe.fromStorageString(n), response: r };
   }
   async processSigninResponse(e) {
     const t = this._logger.create("processSigninResponse"), { state: s, response: r } = await this.readSigninResponseState(e, !0);
@@ -1707,8 +1707,8 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     skipUserInfo: s = !1,
     extraTokenParams: r = {}
   }) {
-    const i = await this._tokenClient.exchangeCredentials({ username: e, password: t, ...r }), n = new G(new URLSearchParams());
-    return Object.assign(n, i), await this._validator.validateCredentialsResponse(n, s), n;
+    const n = await this._tokenClient.exchangeCredentials({ username: e, password: t, ...r }), i = new Q(new URLSearchParams());
+    return Object.assign(i, n), await this._validator.validateCredentialsResponse(i, s), i;
   }
   async useRefreshToken({
     state: e,
@@ -1716,24 +1716,24 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   }) {
     var s;
     const r = this._logger.create("useRefreshToken");
-    let i;
+    let n;
     if (this.settings.refreshTokenAllowedScope === void 0)
-      i = e.scope;
+      n = e.scope;
     else {
       const c = this.settings.refreshTokenAllowedScope.split(" ");
-      i = (((s = e.scope) == null ? void 0 : s.split(" ")) || []).filter((h) => c.includes(h)).join(" ");
+      n = (((s = e.scope) == null ? void 0 : s.split(" ")) || []).filter((h) => c.includes(h)).join(" ");
     }
-    const n = await this._tokenClient.exchangeRefreshToken({
+    const i = await this._tokenClient.exchangeRefreshToken({
       refresh_token: e.refresh_token,
       // provide the (possible filtered) scope list
-      scope: i,
+      scope: n,
       timeoutInSeconds: t
-    }), o = new G(new URLSearchParams());
-    return Object.assign(o, n), r.debug("validating response", o), await this._validator.validateRefreshResponse(o, {
+    }), o = new Q(new URLSearchParams());
+    return Object.assign(o, i), r.debug("validating response", o), await this._validator.validateRefreshResponse(o, {
       ...e,
       // overide the scope in the state handed over to the validator
       // so it can set the granted scope to the requested scope in case none is included in the response
-      scope: i
+      scope: n
     }), o;
   }
   async createSignoutRequest({
@@ -1741,35 +1741,35 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     id_token_hint: t,
     request_type: s,
     post_logout_redirect_uri: r = this.settings.post_logout_redirect_uri,
-    extraQueryParams: i = this.settings.extraQueryParams
+    extraQueryParams: n = this.settings.extraQueryParams
   } = {}) {
-    const n = this._logger.create("createSignoutRequest"), o = await this.metadataService.getEndSessionEndpoint();
+    const i = this._logger.create("createSignoutRequest"), o = await this.metadataService.getEndSessionEndpoint();
     if (!o)
-      throw n.throw(new Error("No end session endpoint")), null;
-    n.debug("Received end session endpoint", o);
-    const c = new st({
+      throw i.throw(new Error("No end session endpoint")), null;
+    i.debug("Received end session endpoint", o);
+    const c = new rt({
       url: o,
       id_token_hint: t,
       post_logout_redirect_uri: r,
       state_data: e,
-      extraQueryParams: i,
+      extraQueryParams: n,
       request_type: s
     });
     await this.clearStaleState();
     const l = c.state;
-    return l && (n.debug("Signout request has state to persist"), await this.settings.stateStore.set(l.id, l.toStorageString())), c;
+    return l && (i.debug("Signout request has state to persist"), await this.settings.stateStore.set(l.id, l.toStorageString())), c;
   }
   async readSignoutResponseState(e, t = !1) {
-    const s = this._logger.create("readSignoutResponseState"), r = new rt(ee.readParams(e, this.settings.response_mode));
+    const s = this._logger.create("readSignoutResponseState"), r = new it(te.readParams(e, this.settings.response_mode));
     if (!r.state) {
       if (s.debug("No state in response"), r.error)
         throw s.warn("Response was error:", r.error), new j(r);
       return { state: void 0, response: r };
     }
-    const i = await this.settings.stateStore[t ? "remove" : "get"](r.state);
-    if (!i)
+    const n = await this.settings.stateStore[t ? "remove" : "get"](r.state);
+    if (!n)
       throw s.throw(new Error("No matching state found in storage")), null;
-    return { state: H.fromStorageString(i), response: r };
+    return { state: H.fromStorageString(n), response: r };
   }
   async processSignoutResponse(e) {
     const t = this._logger.create("processSignoutResponse"), { state: s, response: r } = await this.readSignoutResponseState(e, !0);
@@ -1784,7 +1784,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       token_type_hint: t
     });
   }
-}, nt = class {
+}, ot = class {
   constructor(e) {
     this._userManager = e, this._logger = new f("SessionMonitor"), this._start = async (t) => {
       const s = t.session_state;
@@ -1796,15 +1796,15 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
         return;
       }
       try {
-        const i = await this._userManager.metadataService.getCheckSessionIframe();
-        if (i) {
+        const n = await this._userManager.metadataService.getCheckSessionIframe();
+        if (n) {
           r.debug("initializing check session iframe");
-          const n = this._userManager.settings.client_id, o = this._userManager.settings.checkSessionIntervalInSeconds, c = this._userManager.settings.stopCheckSessionOnError, l = new Fe(this._callback, n, i, o, c);
+          const i = this._userManager.settings.client_id, o = this._userManager.settings.checkSessionIntervalInSeconds, c = this._userManager.settings.stopCheckSessionOnError, l = new $e(this._callback, i, n, o, c);
           await l.load(), this._checkSessionIFrame = l, l.start(s);
         } else
           r.warn("no check session iframe found in the metadata");
-      } catch (i) {
-        r.error("Error from getCheckSessionIframe:", i instanceof Error ? i.message : i);
+      } catch (n) {
+        r.error("Error from getCheckSessionIframe:", n instanceof Error ? n.message : n);
       }
     }, this._stop = () => {
       const t = this._logger.create("_stop");
@@ -1814,14 +1814,14 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
           try {
             const r = await this._userManager.querySessionStatus();
             if (r) {
-              const i = {
+              const n = {
                 session_state: r.session_state,
                 profile: r.sub && r.sid ? {
                   sub: r.sub,
                   sid: r.sid
                 } : null
               };
-              this._start(i);
+              this._start(n);
             }
           } catch (r) {
             t.error("error from querySessionStatus", r instanceof Error ? r.message : r);
@@ -1860,7 +1860,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       }
     }
   }
-}, L = class {
+}, F = class {
   constructor(e) {
     var t;
     this.id_token = e.id_token, this.session_state = (t = e.session_state) != null ? t : null, this.access_token = e.access_token, this.refresh_token = e.refresh_token, this.token_type = e.token_type, this.scope = e.scope, this.profile = e.profile, this.expires_at = e.expires_at, this.state = e.userState;
@@ -1868,10 +1868,10 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   /** Computed number of seconds the access token has remaining. */
   get expires_in() {
     if (this.expires_at !== void 0)
-      return this.expires_at - T.getEpochTime();
+      return this.expires_at - R.getEpochTime();
   }
   set expires_in(e) {
-    e !== void 0 && (this.expires_at = Math.floor(e) + T.getEpochTime());
+    e !== void 0 && (this.expires_at = Math.floor(e) + R.getEpochTime());
   }
   /** Computed value indicating if the access token is expired. */
   get expired() {
@@ -1897,9 +1897,9 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     });
   }
   static fromStorageString(e) {
-    return f.createStatic("User", "fromStorageString"), new L(JSON.parse(e));
+    return f.createStatic("User", "fromStorageString"), new F(JSON.parse(e));
   }
-}, de = "oidc-client", Se = class {
+}, he = "oidc-client", ye = class {
   constructor() {
     this._abort = new O("Window navigation aborted"), this._disposeHandlers = /* @__PURE__ */ new Set(), this._window = null;
   }
@@ -1908,23 +1908,23 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     if (!this._window)
       throw new Error("Attempted to navigate on a disposed window");
     t.debug("setting URL in window"), this._window.location.replace(e.url);
-    const { url: s, keepOpen: r } = await new Promise((i, n) => {
+    const { url: s, keepOpen: r } = await new Promise((n, i) => {
       const o = (c) => {
         var l;
         const h = c.data, g = (l = e.scriptOrigin) != null ? l : window.location.origin;
-        if (!(c.origin !== g || (h == null ? void 0 : h.source) !== de)) {
+        if (!(c.origin !== g || (h == null ? void 0 : h.source) !== he)) {
           try {
-            const u = ee.readParams(h.url, e.response_mode).get("state");
+            const u = te.readParams(h.url, e.response_mode).get("state");
             if (u || t.warn("no state found in response url"), c.source !== this._window && u !== e.state)
               return;
           } catch {
-            this._dispose(), n(new Error("Invalid response from window"));
+            this._dispose(), i(new Error("Invalid response from window"));
           }
-          i(h);
+          n(h);
         }
       };
       window.addEventListener("message", o, !1), this._disposeHandlers.add(() => window.removeEventListener("message", o, !1)), this._disposeHandlers.add(this._abort.addHandler((c) => {
-        this._dispose(), n(c);
+        this._dispose(), i(c);
       }));
     });
     return t.debug("got response from window"), this._dispose(), r || this.close(), { url: s };
@@ -1937,54 +1937,54 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   }
   static _notifyParent(e, t, s = !1, r = window.location.origin) {
     e.postMessage({
-      source: de,
+      source: he,
       url: t,
       keepOpen: s
     }, r);
   }
-}, ye = {
+}, be = {
   location: !1,
   toolbar: !1,
   height: 640
-}, be = "_blank", ot = 60, at = 2, ke = 10, ct = class extends me {
+}, ke = "_blank", at = 60, ct = 2, Ee = 10, lt = class extends ve {
   constructor(e) {
     const {
       popup_redirect_uri: t = e.redirect_uri,
       popup_post_logout_redirect_uri: s = e.post_logout_redirect_uri,
-      popupWindowFeatures: r = ye,
-      popupWindowTarget: i = be,
-      redirectMethod: n = "assign",
+      popupWindowFeatures: r = be,
+      popupWindowTarget: n = ke,
+      redirectMethod: i = "assign",
       redirectTarget: o = "self",
       iframeNotifyParentOrigin: c = e.iframeNotifyParentOrigin,
       iframeScriptOrigin: l = e.iframeScriptOrigin,
       silent_redirect_uri: h = e.redirect_uri,
-      silentRequestTimeoutInSeconds: g = ke,
+      silentRequestTimeoutInSeconds: g = Ee,
       automaticSilentRenew: u = !0,
       validateSubOnSilentRenew: S = !0,
       includeIdTokenInSilentRenew: w = !1,
       monitorSession: k = !1,
       monitorAnonymousSession: _ = !1,
-      checkSessionIntervalInSeconds: v = at,
+      checkSessionIntervalInSeconds: v = ct,
       query_status_response_type: y = "code",
       stopCheckSessionOnError: a = !0,
       revokeTokenTypes: d = ["access_token", "refresh_token"],
       revokeTokensOnSignout: p = !1,
       includeIdTokenInSilentSignout: m = !1,
-      accessTokenExpiringNotificationTimeInSeconds: b = ot,
+      accessTokenExpiringNotificationTimeInSeconds: b = at,
       userStore: E
     } = e;
-    if (super(e), this.popup_redirect_uri = t, this.popup_post_logout_redirect_uri = s, this.popupWindowFeatures = r, this.popupWindowTarget = i, this.redirectMethod = n, this.redirectTarget = o, this.iframeNotifyParentOrigin = c, this.iframeScriptOrigin = l, this.silent_redirect_uri = h, this.silentRequestTimeoutInSeconds = g, this.automaticSilentRenew = u, this.validateSubOnSilentRenew = S, this.includeIdTokenInSilentRenew = w, this.monitorSession = k, this.monitorAnonymousSession = _, this.checkSessionIntervalInSeconds = v, this.stopCheckSessionOnError = a, this.query_status_response_type = y, this.revokeTokenTypes = d, this.revokeTokensOnSignout = p, this.includeIdTokenInSilentSignout = m, this.accessTokenExpiringNotificationTimeInSeconds = b, E)
+    if (super(e), this.popup_redirect_uri = t, this.popup_post_logout_redirect_uri = s, this.popupWindowFeatures = r, this.popupWindowTarget = n, this.redirectMethod = i, this.redirectTarget = o, this.iframeNotifyParentOrigin = c, this.iframeScriptOrigin = l, this.silent_redirect_uri = h, this.silentRequestTimeoutInSeconds = g, this.automaticSilentRenew = u, this.validateSubOnSilentRenew = S, this.includeIdTokenInSilentRenew = w, this.monitorSession = k, this.monitorAnonymousSession = _, this.checkSessionIntervalInSeconds = v, this.stopCheckSessionOnError = a, this.query_status_response_type = y, this.revokeTokenTypes = d, this.revokeTokensOnSignout = p, this.includeIdTokenInSilentSignout = m, this.accessTokenExpiringNotificationTimeInSeconds = b, E)
       this.userStore = E;
     else {
-      const C = typeof window < "u" ? window.sessionStorage : new fe();
-      this.userStore = new we({ store: C });
+      const C = typeof window < "u" ? window.sessionStorage : new we();
+      this.userStore = new me({ store: C });
     }
   }
-}, te = class extends Se {
+}, se = class extends ye {
   constructor({
-    silentRequestTimeoutInSeconds: e = ke
+    silentRequestTimeoutInSeconds: e = Ee
   }) {
-    super(), this._logger = new f("IFrameWindow"), this._timeoutInSeconds = e, this._frame = te.createHiddenIframe(), this._window = this._frame.contentWindow;
+    super(), this._logger = new f("IFrameWindow"), this._timeoutInSeconds = e, this._frame = se.createHiddenIframe(), this._window = this._frame.contentWindow;
   }
   static createHiddenIframe() {
     const e = window.document.createElement("iframe");
@@ -1992,7 +1992,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   }
   async navigate(e) {
     this._logger.debug("navigate: Using timeout of:", this._timeoutInSeconds);
-    const t = setTimeout(() => this._abort.raise(new re("IFrame timed out without a response")), this._timeoutInSeconds * 1e3);
+    const t = setTimeout(() => this._abort.raise(new ie("IFrame timed out without a response")), this._timeoutInSeconds * 1e3);
     return this._disposeHandlers.add(() => clearTimeout(t)), await super.navigate(e);
   }
   close() {
@@ -2006,33 +2006,33 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   static notifyParent(e, t) {
     return super._notifyParent(window.parent, e, !1, t);
   }
-}, lt = class {
+}, dt = class {
   constructor(e) {
     this._settings = e, this._logger = new f("IFrameNavigator");
   }
   async prepare({
     silentRequestTimeoutInSeconds: e = this._settings.silentRequestTimeoutInSeconds
   }) {
-    return new te({ silentRequestTimeoutInSeconds: e });
+    return new se({ silentRequestTimeoutInSeconds: e });
   }
   async callback(e) {
-    this._logger.create("callback"), te.notifyParent(e, this._settings.iframeNotifyParentOrigin);
+    this._logger.create("callback"), se.notifyParent(e, this._settings.iframeNotifyParentOrigin);
   }
-}, dt = 500, he = class extends Se {
+}, ht = 500, ue = class extends ye {
   constructor({
-    popupWindowTarget: e = be,
+    popupWindowTarget: e = ke,
     popupWindowFeatures: t = {}
   }) {
     super(), this._logger = new f("PopupWindow");
-    const s = le.center({ ...ye, ...t });
-    this._window = window.open(void 0, e, le.serialize(s));
+    const s = de.center({ ...be, ...t });
+    this._window = window.open(void 0, e, de.serialize(s));
   }
   async navigate(e) {
     var t;
     (t = this._window) == null || t.focus();
     const s = setInterval(() => {
       (!this._window || this._window.closed) && this._abort.raise(new Error("Popup closed by user"));
-    }, dt);
+    }, ht);
     return this._disposeHandlers.add(() => clearInterval(s)), await super.navigate(e);
   }
   close() {
@@ -2043,7 +2043,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
       throw new Error("No window.opener. Can't complete notification.");
     return super._notifyParent(window.opener, e, t);
   }
-}, ht = class {
+}, ut = class {
   constructor(e) {
     this._settings = e, this._logger = new f("PopupNavigator");
   }
@@ -2051,12 +2051,12 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     popupWindowFeatures: e = this._settings.popupWindowFeatures,
     popupWindowTarget: t = this._settings.popupWindowTarget
   }) {
-    return new he({ popupWindowFeatures: e, popupWindowTarget: t });
+    return new ue({ popupWindowFeatures: e, popupWindowTarget: t });
   }
   async callback(e, t = !1) {
-    this._logger.create("callback"), he.notifyOpener(e, t);
+    this._logger.create("callback"), ue.notifyOpener(e, t);
   }
-}, ut = class {
+}, gt = class {
   constructor(e) {
     this._settings = e, this._logger = new f("RedirectNavigator");
   }
@@ -2068,22 +2068,22 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     this._logger.create("prepare");
     let r = window.self;
     t === "top" && (r = (s = window.top) != null ? s : window.self);
-    const i = r.location[e].bind(r.location);
-    let n;
+    const n = r.location[e].bind(r.location);
+    let i;
     return {
       navigate: async (o) => {
         this._logger.create("navigate");
         const c = new Promise((l, h) => {
-          n = h;
+          i = h;
         });
-        return i(o.url), await c;
+        return n(o.url), await c;
       },
       close: () => {
-        this._logger.create("close"), n == null || n(new Error("Redirect aborted")), r.stop();
+        this._logger.create("close"), i == null || i(new Error("Redirect aborted")), r.stop();
       }
     };
   }
-}, gt = class extends Le {
+}, _t = class extends Fe {
   constructor(e) {
     super({ expiringNotificationTimeInSeconds: e.accessTokenExpiringNotificationTimeInSeconds }), this._logger = new f("UserManagerEvents"), this._userLoaded = new O("User loaded"), this._userUnloaded = new O("User unloaded"), this._silentRenewError = new O("Silent renew error"), this._userSignedIn = new O("User signed in"), this._userSignedOut = new O("User signed out"), this._userSessionChanged = new O("User session changed");
   }
@@ -2192,14 +2192,14 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   _raiseUserSessionChanged() {
     this._userSessionChanged.raise();
   }
-}, _t = class {
+}, pt = class {
   constructor(e) {
-    this._userManager = e, this._logger = new f("SilentRenewService"), this._isStarted = !1, this._retryTimer = new T("Retry Silent Renew"), this._tokenExpiring = async () => {
+    this._userManager = e, this._logger = new f("SilentRenewService"), this._isStarted = !1, this._retryTimer = new R("Retry Silent Renew"), this._tokenExpiring = async () => {
       const t = this._logger.create("_tokenExpiring");
       try {
         await this._userManager.signinSilent(), t.debug("silent token renewal successful");
       } catch (s) {
-        if (s instanceof re) {
+        if (s instanceof ie) {
           t.warn("ErrorTimeout from signinSilent:", s, "retry in 5s"), this._retryTimer.init(5);
           return;
         }
@@ -2221,13 +2221,13 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   stop() {
     this._isStarted && (this._retryTimer.cancel(), this._retryTimer.removeHandler(this._tokenExpiring), this._userManager.events.removeAccessTokenExpiring(this._tokenExpiring), this._isStarted = !1);
   }
-}, pt = class {
+}, ft = class {
   constructor(e) {
     this.refresh_token = e.refresh_token, this.id_token = e.id_token, this.session_state = e.session_state, this.scope = e.scope, this.profile = e.profile, this.data = e.state;
   }
-}, Ct = class {
+}, Rt = class {
   constructor(e) {
-    this._logger = new f("UserManager"), this.settings = new ct(e), this._client = new it(e), this._redirectNavigator = new ut(this.settings), this._popupNavigator = new ht(this.settings), this._iframeNavigator = new lt(this.settings), this._events = new gt(this.settings), this._silentRenewService = new _t(this), this.settings.automaticSilentRenew && this.startSilentRenew(), this._sessionMonitor = null, this.settings.monitorSession && (this._sessionMonitor = new nt(this));
+    this._logger = new f("UserManager"), this.settings = new lt(e), this._client = new nt(e), this._redirectNavigator = new gt(this.settings), this._popupNavigator = new ut(this.settings), this._iframeNavigator = new dt(this.settings), this._events = new _t(this.settings), this._silentRenewService = new pt(this), this.settings.automaticSilentRenew && this.startSilentRenew(), this._sessionMonitor = null, this.settings.monitorSession && (this._sessionMonitor = new ot(this));
   }
   /** Returns an object used to register for events raised by the `UserManager`. */
   get events() {
@@ -2282,10 +2282,10 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     password: t,
     skipUserInfo: s = !1
   }) {
-    const r = this._logger.create("signinResourceOwnerCredential"), i = await this._client.processResourceOwnerPasswordCredentials({ username: e, password: t, skipUserInfo: s, extraTokenParams: this.settings.extraTokenParams });
+    const r = this._logger.create("signinResourceOwnerCredential"), n = await this._client.processResourceOwnerPasswordCredentials({ username: e, password: t, skipUserInfo: s, extraTokenParams: this.settings.extraTokenParams });
     r.debug("got signin response");
-    const n = await this._buildUser(i);
-    return n.profile && n.profile.sub ? r.info("success, signed in subject", n.profile.sub) : r.info("no subject"), n;
+    const i = await this._buildUser(n);
+    return i.profile && i.profile.sub ? r.info("success, signed in subject", i.profile.sub) : r.info("no subject"), i;
   }
   /**
    * Returns promise to trigger a request (via a popup window) to the authorization endpoint. The result of the promise is the authenticated `User`.
@@ -2294,14 +2294,14 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     const t = this._logger.create("signinPopup"), {
       popupWindowFeatures: s,
       popupWindowTarget: r,
-      ...i
-    } = e, n = this.settings.popup_redirect_uri;
-    n || t.throw(new Error("No popup_redirect_uri configured"));
+      ...n
+    } = e, i = this.settings.popup_redirect_uri;
+    i || t.throw(new Error("No popup_redirect_uri configured"));
     const o = await this._popupNavigator.prepare({ popupWindowFeatures: s, popupWindowTarget: r }), c = await this._signin({
       request_type: "si:p",
-      redirect_uri: n,
+      redirect_uri: i,
       display: "popup",
-      ...i
+      ...n
     }, o);
     return c && (c.profile && c.profile.sub ? t.info("success, signed in subject", c.profile.sub) : t.info("no subject")), c;
   }
@@ -2320,32 +2320,32 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     var t;
     const s = this._logger.create("signinSilent"), {
       silentRequestTimeoutInSeconds: r,
-      ...i
+      ...n
     } = e;
-    let n = await this._loadUser();
-    if (n != null && n.refresh_token) {
+    let i = await this._loadUser();
+    if (i != null && i.refresh_token) {
       s.debug("using refresh token");
-      const h = new pt(n);
+      const h = new ft(i);
       return await this._useRefreshToken(h);
     }
     const o = this.settings.silent_redirect_uri;
     o || s.throw(new Error("No silent_redirect_uri configured"));
     let c;
-    n && this.settings.validateSubOnSilentRenew && (s.debug("subject prior to silent renew:", n.profile.sub), c = n.profile.sub);
+    i && this.settings.validateSubOnSilentRenew && (s.debug("subject prior to silent renew:", i.profile.sub), c = i.profile.sub);
     const l = await this._iframeNavigator.prepare({ silentRequestTimeoutInSeconds: r });
-    return n = await this._signin({
+    return i = await this._signin({
       request_type: "si:s",
       redirect_uri: o,
       prompt: "none",
-      id_token_hint: this.settings.includeIdTokenInSilentRenew ? n == null ? void 0 : n.id_token : void 0,
-      ...i
-    }, l, c), n && ((t = n.profile) != null && t.sub ? s.info("success, signed in subject", n.profile.sub) : s.info("no subject")), n;
+      id_token_hint: this.settings.includeIdTokenInSilentRenew ? i == null ? void 0 : i.id_token : void 0,
+      ...n
+    }, l, c), i && ((t = i.profile) != null && t.sub ? s.info("success, signed in subject", i.profile.sub) : s.info("no subject")), i;
   }
   async _useRefreshToken(e) {
     const t = await this._client.useRefreshToken({
       state: e,
       timeoutInSeconds: this.settings.silentRequestTimeoutInSeconds
-    }), s = new L({ ...e, ...t });
+    }), s = new F({ ...e, ...t });
     return await this.storeUser(s), this._events.load(s), s;
   }
   /**
@@ -2392,14 +2392,14 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     const t = this._logger.create("querySessionStatus"), {
       silentRequestTimeoutInSeconds: s,
       ...r
-    } = e, i = this.settings.silent_redirect_uri;
-    i || t.throw(new Error("No silent_redirect_uri configured"));
-    const n = await this._loadUser(), o = await this._iframeNavigator.prepare({ silentRequestTimeoutInSeconds: s }), c = await this._signinStart({
+    } = e, n = this.settings.silent_redirect_uri;
+    n || t.throw(new Error("No silent_redirect_uri configured"));
+    const i = await this._loadUser(), o = await this._iframeNavigator.prepare({ silentRequestTimeoutInSeconds: s }), c = await this._signinStart({
       request_type: "si:s",
       // this acts like a signin silent
-      redirect_uri: i,
+      redirect_uri: n,
       prompt: "none",
-      id_token_hint: this.settings.includeIdTokenInSilentRenew ? n == null ? void 0 : n.id_token : void 0,
+      id_token_hint: this.settings.includeIdTokenInSilentRenew ? i == null ? void 0 : i.id_token : void 0,
       response_type: this.settings.query_status_response_type,
       scope: "openid",
       skipUserInfo: !0,
@@ -2450,7 +2450,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     return s.debug("got signin response"), await this._buildUser(r, t);
   }
   async _buildUser(e, t) {
-    const s = this._logger.create("_buildUser"), r = new L(e);
+    const s = this._logger.create("_buildUser"), r = new F(e);
     if (t) {
       if (t !== r.profile.sub)
         throw s.debug("current user does not match user returned from signin. sub from signin:", r.profile.sub), new j({ ...e, error: "login_required" });
@@ -2465,12 +2465,12 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     const t = this._logger.create("signoutRedirect"), {
       redirectMethod: s,
       ...r
-    } = e, i = await this._redirectNavigator.prepare({ redirectMethod: s });
+    } = e, n = await this._redirectNavigator.prepare({ redirectMethod: s });
     await this._signoutStart({
       request_type: "so:r",
       post_logout_redirect_uri: this.settings.post_logout_redirect_uri,
       ...r
-    }, i), t.info("success");
+    }, n), t.info("success");
   }
   /**
    * Returns promise to process response from the end session endpoint.
@@ -2486,18 +2486,18 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     const t = this._logger.create("signoutPopup"), {
       popupWindowFeatures: s,
       popupWindowTarget: r,
-      ...i
-    } = e, n = this.settings.popup_post_logout_redirect_uri, o = await this._popupNavigator.prepare({ popupWindowFeatures: s, popupWindowTarget: r });
+      ...n
+    } = e, i = this.settings.popup_post_logout_redirect_uri, o = await this._popupNavigator.prepare({ popupWindowFeatures: s, popupWindowTarget: r });
     await this._signout({
       request_type: "so:p",
-      post_logout_redirect_uri: n,
+      post_logout_redirect_uri: i,
       // we're putting a dummy entry in here because we
       // need a unique id from the state for notification
       // to the parent window, which is necessary if we
       // plan to return back to the client after signout
       // and so we can close the popup after signout
-      state: n == null ? void 0 : {},
-      ...i
+      state: i == null ? void 0 : {},
+      ...n
     }, o), t.info("success");
   }
   /**
@@ -2515,17 +2515,17 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     var s;
     const r = this._logger.create("_signoutStart");
     try {
-      const i = await this._loadUser();
-      r.debug("loaded current user from storage"), this.settings.revokeTokensOnSignout && await this._revokeInternal(i);
-      const n = e.id_token_hint || i && i.id_token;
-      n && (r.debug("setting id_token_hint in signout request"), e.id_token_hint = n), await this.removeUser(), r.debug("user removed, creating signout request");
+      const n = await this._loadUser();
+      r.debug("loaded current user from storage"), this.settings.revokeTokensOnSignout && await this._revokeInternal(n);
+      const i = e.id_token_hint || n && n.id_token;
+      i && (r.debug("setting id_token_hint in signout request"), e.id_token_hint = i), await this.removeUser(), r.debug("user removed, creating signout request");
       const o = await this._client.createSignoutRequest(e);
       return r.debug("got signout request"), await t.navigate({
         url: o.url,
         state: (s = o.state) == null ? void 0 : s.id
       });
-    } catch (i) {
-      throw r.debug("error after preparing navigator, closing navigator window"), t.close(), i;
+    } catch (n) {
+      throw r.debug("error after preparing navigator, closing navigator window"), t.close(), n;
     }
   }
   async _signoutEnd(e) {
@@ -2539,13 +2539,13 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     var t;
     const s = this._logger.create("signoutSilent"), {
       silentRequestTimeoutInSeconds: r,
-      ...i
-    } = e, n = this.settings.includeIdTokenInSilentSignout ? (t = await this._loadUser()) == null ? void 0 : t.id_token : void 0, o = this.settings.popup_post_logout_redirect_uri, c = await this._iframeNavigator.prepare({ silentRequestTimeoutInSeconds: r });
+      ...n
+    } = e, i = this.settings.includeIdTokenInSilentSignout ? (t = await this._loadUser()) == null ? void 0 : t.id_token : void 0, o = this.settings.popup_post_logout_redirect_uri, c = await this._iframeNavigator.prepare({ silentRequestTimeoutInSeconds: r });
     await this._signout({
       request_type: "so:s",
       post_logout_redirect_uri: o,
-      id_token_hint: n,
-      ...i
+      id_token_hint: i,
+      ...n
     }, c), s.info("success");
   }
   /**
@@ -2563,17 +2563,17 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
     const s = this._logger.create("_revokeInternal");
     if (!e)
       return;
-    const r = t.filter((i) => typeof e[i] == "string");
+    const r = t.filter((n) => typeof e[n] == "string");
     if (!r.length) {
       s.debug("no need to revoke due to no token(s)");
       return;
     }
-    for (const i of r)
+    for (const n of r)
       await this._client.revokeToken(
-        e[i],
+        e[n],
         // eslint-disable-line @typescript-eslint/no-non-null-assertion
-        i
-      ), s.info(`${i} revoked successfully`), i !== "access_token" && (e[i] = null);
+        n
+      ), s.info(`${n} revoked successfully`), n !== "access_token" && (e[n] = null);
     await this.storeUser(e), s.debug("user stored"), this._events.load(e);
   }
   /**
@@ -2593,7 +2593,7 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   }
   async _loadUser() {
     const e = this._logger.create("_loadUser"), t = await this.settings.userStore.get(this._userStoreKey);
-    return t ? (e.debug("user storageString loaded"), L.fromStorageString(t)) : (e.debug("no user storageString"), null);
+    return t ? (e.debug("user storageString loaded"), F.fromStorageString(t)) : (e.debug("no user storageString"), null);
   }
   async storeUser(e) {
     const t = this._logger.create("storeUser");
@@ -2610,88 +2610,133 @@ var Be = "10000000-1000-4000-8000-100000000000", A = class {
   async clearStaleState() {
     await this._client.clearStaleState();
   }
-}, ft = "2.2.2", xt = ft;
-const Ee = ue(
+}, wt = "2.2.2", Tt = wt;
+class B extends Error {
+}
+B.prototype.name = "InvalidTokenError";
+function mt(e) {
+  return decodeURIComponent(atob(e).replace(/(.)/g, (t, s) => {
+    let r = s.charCodeAt(0).toString(16).toUpperCase();
+    return r.length < 2 && (r = "0" + r), "%" + r;
+  }));
+}
+function vt(e) {
+  let t = e.replace(/-/g, "+").replace(/_/g, "/");
+  switch (t.length % 4) {
+    case 0:
+      break;
+    case 2:
+      t += "==";
+      break;
+    case 3:
+      t += "=";
+      break;
+    default:
+      throw new Error("base64 string is not of the correct length");
+  }
+  try {
+    return mt(t);
+  } catch {
+    return atob(t);
+  }
+}
+function St(e, t) {
+  if (typeof e != "string")
+    throw new B("Invalid token specified: must be a string");
+  t || (t = {});
+  const s = t.header === !0 ? 0 : 1, r = e.split(".")[s];
+  if (typeof r != "string")
+    throw new B(`Invalid token specified: missing part #${s + 1}`);
+  let n;
+  try {
+    n = vt(r);
+  } catch (i) {
+    throw new B(`Invalid token specified: invalid base64 for part #${s + 1} (${i.message})`);
+  }
+  try {
+    return JSON.parse(n);
+  } catch (i) {
+    throw new B(`Invalid token specified: invalid json for part #${s + 1} (${i.message})`);
+  }
+}
+const Ce = ge(
   null
-), wt = () => {
-  const e = ge(Ee);
+), yt = () => {
+  const e = _e(Ce);
   if (!e)
     throw new Error(
       "useImpersonationContext must be used within a ImpersonationContextProvider"
     );
   return e;
-}, Rt = ({
+}, Ut = ({
   children: e
 }) => {
   const [t, s] = Re("impersonationState", {
     defaultValue: {}
-  }), r = _e(() => ({
+  }), r = pe(() => ({
     accessToken: t == null ? void 0 : t.accessToken,
     userInfo: t == null ? void 0 : t.userInfo,
-    setImpersonation: (i, n) => {
-      s({ accessToken: i, userInfo: n });
+    setImpersonation: (n, i) => {
+      s({ accessToken: n, userInfo: i });
     }
   }), []);
-  return /* @__PURE__ */ se(Ee.Provider, { value: r, children: e });
-}, mt = (e) => {
-  const s = e.split(".")[1].replace(/-/g, "+").replace(/_/g, "/"), r = atob(s);
-  return JSON.parse(r);
-}, Tt = (e) => {
-  const { setImpersonation: t } = wt();
-  F(() => {
+  return /* @__PURE__ */ re(Ce.Provider, { value: r, children: e });
+}, At = (e) => {
+  const { setImpersonation: t } = yt();
+  $(() => {
     const { search: s } = window.location, r = new URLSearchParams(s).get(
       "impersonateAccessToken"
     );
     if (r && t) {
-      const i = mt(r);
-      t(r, i), e();
+      const n = St(r);
+      t(r, n), e();
     }
   }, []);
 };
-function It(e) {
+function Pt(e) {
   return JSON.parse(e).map((r) => {
     const [
-      i,
       n,
+      i,
       o,
       c,
       l
     ] = r.split("|"), h = c.split(",");
     return {
-      CustomerExternalId: i,
-      CustomerFirmId: n,
+      CustomerExternalId: n,
+      CustomerFirmId: i,
       CustomerFirmName: o,
       CustomerUserRoles: h,
       CustomerUserIsAdmin: l === "True"
     };
   });
 }
-const Ut = [
+const Ot = [
   "97",
   "131",
   "132",
   "141"
-], At = [
+], qt = [
   "3"
-], Pt = [
+], Nt = [
   "0"
-], vt = ({
+], bt = ({
   userManager: e,
   context: t,
   children: s
 }) => {
-  const [r, i] = xe({
+  const [r, n] = Ie({
     user: null,
     isLoading: !0,
     isAuthenticated: !1,
     isError: !1,
     error: null
-  }), n = pe(!1);
-  F(() => {
-    n.current || (n.current = !0, (async () => {
+  }), i = fe(!1);
+  $(() => {
+    i.current || (i.current = !0, (async () => {
       try {
         const h = await e.getUser();
-        i({
+        n({
           user: h,
           isLoading: !1,
           isAuthenticated: h ? !h.expired : !1,
@@ -2699,7 +2744,7 @@ const Ut = [
           error: null
         });
       } catch (h) {
-        i({
+        n({
           user: null,
           isLoading: !1,
           isAuthenticated: !1,
@@ -2708,9 +2753,9 @@ const Ut = [
         });
       }
     })());
-  }, [e]), F(() => {
+  }, [e]), $(() => {
     const h = (S) => {
-      i({
+      n({
         user: S,
         isLoading: !1,
         isAuthenticated: !S.expired,
@@ -2720,7 +2765,7 @@ const Ut = [
     };
     e.events.addUserLoaded(h);
     const g = () => {
-      i({
+      n({
         ...r,
         user: null,
         isAuthenticated: !1
@@ -2728,7 +2773,7 @@ const Ut = [
     };
     e.events.addUserUnloaded(g);
     const u = (S) => {
-      i({
+      n({
         ...r,
         isLoading: !1,
         isError: !0,
@@ -2739,16 +2784,16 @@ const Ut = [
       e.events.removeUserLoaded(h), e.events.removeUserUnloaded(g), e.events.removeSilentRenewError(u);
     };
   }, [e]);
-  const o = ae(async () => {
+  const o = ce(async () => {
     const h = await e.signinCallback();
-    return i({
+    return n({
       user: h ?? null,
       isLoading: !1,
       isAuthenticated: h ? !h.expired : !1,
       isError: !1,
       error: null
     }), h ?? void 0;
-  }, [e]), c = ae(
+  }, [e]), c = ce(
     async (h) => {
       try {
         await e.signinRedirect(h);
@@ -2757,7 +2802,7 @@ const Ut = [
       }
     },
     [e]
-  ), l = _e(
+  ), l = pe(
     () => ({
       state: r,
       handleSigninCallback: o,
@@ -2765,32 +2810,32 @@ const Ut = [
     }),
     [r, o, c]
   );
-  return /* @__PURE__ */ se(t.Provider, { value: l, children: s });
-}, oe = (e) => {
-  const t = ge(e);
+  return /* @__PURE__ */ re(t.Provider, { value: l, children: s });
+}, ae = (e) => {
+  const t = _e(e);
   if (!t)
     throw new Error("useAuthContext must be used within an AuthProvider");
   return t;
-}, St = (e) => {
-  const { state: t } = oe(e);
+}, kt = (e) => {
+  const { state: t } = ae(e);
   return t;
-}, yt = (e, t) => {
-  const { state: s, handleSigninCallback: r } = oe(e), i = pe(!1);
-  return F(() => {
-    i.current || (i.current = !0, r().then(
-      (n) => new Promise(
-        (o) => setTimeout(() => o(n), 0)
+}, Et = (e, t) => {
+  const { state: s, handleSigninCallback: r } = ae(e), n = fe(!1);
+  return $(() => {
+    n.current || (n.current = !0, r().then(
+      (i) => new Promise(
+        (o) => setTimeout(() => o(i), 0)
       )
-    ).then((n) => t == null ? void 0 : t(n)));
+    ).then((i) => t == null ? void 0 : t(i)));
   }, [r]), s;
-}, Ot = (e) => {
-  const t = ue(null);
+}, jt = (e) => {
+  const t = ge(null);
   return {
     AuthContext: t,
-    AuthProvider: ({ children: c }) => /* @__PURE__ */ se(vt, { userManager: e, context: t, children: c }),
-    useAuthContext: () => oe(t),
-    useAuthState: () => St(t),
-    useSigninCallback: (c) => yt(t, c),
+    AuthProvider: ({ children: c }) => /* @__PURE__ */ re(bt, { userManager: e, context: t, children: c }),
+    useAuthContext: () => ae(t),
+    useAuthState: () => kt(t),
+    useSigninCallback: (c) => Et(t, c),
     getAccessToken: async () => {
       const c = await e.getUser();
       return c ? c.access_token : null;
@@ -2798,32 +2843,32 @@ const Ut = [
   };
 };
 export {
-  Le as AccessTokenEvents,
-  Fe as CheckSessionIFrame,
+  Fe as AccessTokenEvents,
+  $e as CheckSessionIFrame,
   j as ErrorResponse,
-  re as ErrorTimeout,
-  Rt as ImpersonationContextProvider,
-  fe as InMemoryWebStorage,
-  D as Log,
+  ie as ErrorTimeout,
+  Ut as ImpersonationContextProvider,
+  we as InMemoryWebStorage,
+  J as Log,
   f as Logger,
-  $e as MetadataService,
-  it as OidcClient,
-  me as OidcClientSettingsStore,
-  Ut as ROLESAdminInCompany,
-  Pt as ROLESAnsatt,
-  At as ROLESMAKSAdministrator,
-  nt as SessionMonitor,
-  G as SigninResponse,
-  ne as SigninState,
-  rt as SignoutResponse,
+  ze as MetadataService,
+  nt as OidcClient,
+  ve as OidcClientSettingsStore,
+  Ot as ROLESAdminInCompany,
+  Nt as ROLESAnsatt,
+  qt as ROLESMAKSAdministrator,
+  ot as SessionMonitor,
+  Q as SigninResponse,
+  oe as SigninState,
+  it as SignoutResponse,
   H as State,
-  L as User,
-  Ct as UserManager,
-  ct as UserManagerSettingsStore,
-  xt as Version,
-  we as WebStorageStateStore,
-  Ot as createAuthContext,
-  It as parseUserProfileFCString,
-  Tt as useImpersonationCallback,
-  wt as useImpersonationContext
+  F as User,
+  Rt as UserManager,
+  lt as UserManagerSettingsStore,
+  Tt as Version,
+  me as WebStorageStateStore,
+  jt as createAuthContext,
+  Pt as parseUserProfileFCString,
+  At as useImpersonationCallback,
+  yt as useImpersonationContext
 };