@arkitektbedriftene/fe-lib 0.4.37 → 0.4.38

package/dist/oidc.es.js

@@ -1,2874 +1,198 @@
-import { jsx as re } from "react/jsx-runtime";
-import { createContext as ge, useContext as _e, useMemo as pe, useEffect as $, useState as Ie, useRef as fe, useCallback as ce } from "react";
-import { u as Re } from "./useLocalStorageState-b4fb2a60.js";
-var N = typeof globalThis < "u" ? globalThis : typeof window < "u" ? window : typeof global < "u" ? global : typeof self < "u" ? self : {};
-function Te(e) {
-  if (e.__esModule)
-    return e;
-  var t = e.default;
-  if (typeof t == "function") {
-    var s = function r() {
-      if (this instanceof r) {
-        var n = [null];
-        n.push.apply(n, arguments);
-        var i = Function.bind.apply(t, n);
-        return new i();
-      }
-      return t.apply(this, arguments);
-    };
-    s.prototype = t.prototype;
-  } else
-    s = {};
-  return Object.defineProperty(s, "__esModule", { value: !0 }), Object.keys(e).forEach(function(r) {
-    var n = Object.getOwnPropertyDescriptor(e, r);
-    Object.defineProperty(s, r, n.get ? n : {
-      enumerable: !0,
-      get: function() {
-        return e[r];
-      }
-    });
-  }), s;
-}
-function Ue(e) {
-  throw new Error('Could not dynamically require "' + e + '". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.');
-}
-var M = {}, Ae = {
-  get exports() {
-    return M;
-  },
-  set exports(e) {
-    M = e;
-  }
-};
-const Pe = {}, Oe = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
-  __proto__: null,
-  default: Pe
-}, Symbol.toStringTag, { value: "Module" })), qe = /* @__PURE__ */ Te(Oe);
-(function(e, t) {
-  (function(s, r) {
-    e.exports = r();
-  })(N, function() {
-    var s = s || function(r, n) {
-      var i;
-      if (typeof window < "u" && window.crypto && (i = window.crypto), typeof self < "u" && self.crypto && (i = self.crypto), typeof globalThis < "u" && globalThis.crypto && (i = globalThis.crypto), !i && typeof window < "u" && window.msCrypto && (i = window.msCrypto), !i && typeof N < "u" && N.crypto && (i = N.crypto), !i && typeof Ue == "function")
-        try {
-          i = qe;
-        } catch {
-        }
-      var o = function() {
-        if (i) {
-          if (typeof i.getRandomValues == "function")
-            try {
-              return i.getRandomValues(new Uint32Array(1))[0];
-            } catch {
-            }
-          if (typeof i.randomBytes == "function")
-            try {
-              return i.randomBytes(4).readInt32LE();
-            } catch {
-            }
-        }
-        throw new Error("Native crypto module could not be used to get secure random number.");
-      }, c = Object.create || function() {
-        function a() {
-        }
-        return function(d) {
-          var p;
-          return a.prototype = d, p = new a(), a.prototype = null, p;
-        };
-      }(), l = {}, h = l.lib = {}, g = h.Base = function() {
-        return {
-          /**
-           * Creates a new object that inherits from this object.
-           *
-           * @param {Object} overrides Properties to copy into the new object.
-           *
-           * @return {Object} The new object.
-           *
-           * @static
-           *
-           * @example
-           *
-           *     var MyType = CryptoJS.lib.Base.extend({
-           *         field: 'value',
-           *
-           *         method: function () {
-           *         }
-           *     });
-           */
-          extend: function(a) {
-            var d = c(this);
-            return a && d.mixIn(a), (!d.hasOwnProperty("init") || this.init === d.init) && (d.init = function() {
-              d.$super.init.apply(this, arguments);
-            }), d.init.prototype = d, d.$super = this, d;
-          },
-          /**
-           * Extends this object and runs the init method.
-           * Arguments to create() will be passed to init().
-           *
-           * @return {Object} The new object.
-           *
-           * @static
-           *
-           * @example
-           *
-           *     var instance = MyType.create();
-           */
-          create: function() {
-            var a = this.extend();
-            return a.init.apply(a, arguments), a;
-          },
-          /**
-           * Initializes a newly created object.
-           * Override this method to add some logic when your objects are created.
-           *
-           * @example
-           *
-           *     var MyType = CryptoJS.lib.Base.extend({
-           *         init: function () {
-           *             // ...
-           *         }
-           *     });
-           */
-          init: function() {
-          },
-          /**
-           * Copies properties into this object.
-           *
-           * @param {Object} properties The properties to mix in.
-           *
-           * @example
-           *
-           *     MyType.mixIn({
-           *         field: 'value'
-           *     });
-           */
-          mixIn: function(a) {
-            for (var d in a)
-              a.hasOwnProperty(d) && (this[d] = a[d]);
-            a.hasOwnProperty("toString") && (this.toString = a.toString);
-          },
-          /**
-           * Creates a copy of this object.
-           *
-           * @return {Object} The clone.
-           *
-           * @example
-           *
-           *     var clone = instance.clone();
-           */
-          clone: function() {
-            return this.init.prototype.extend(this);
-          }
-        };
-      }(), u = h.WordArray = g.extend({
-        /**
-         * Initializes a newly created word array.
-         *
-         * @param {Array} words (Optional) An array of 32-bit words.
-         * @param {number} sigBytes (Optional) The number of significant bytes in the words.
-         *
-         * @example
-         *
-         *     var wordArray = CryptoJS.lib.WordArray.create();
-         *     var wordArray = CryptoJS.lib.WordArray.create([0x00010203, 0x04050607]);
-         *     var wordArray = CryptoJS.lib.WordArray.create([0x00010203, 0x04050607], 6);
-         */
-        init: function(a, d) {
-          a = this.words = a || [], d != n ? this.sigBytes = d : this.sigBytes = a.length * 4;
-        },
-        /**
-         * Converts this word array to a string.
-         *
-         * @param {Encoder} encoder (Optional) The encoding strategy to use. Default: CryptoJS.enc.Hex
-         *
-         * @return {string} The stringified word array.
-         *
-         * @example
-         *
-         *     var string = wordArray + '';
-         *     var string = wordArray.toString();
-         *     var string = wordArray.toString(CryptoJS.enc.Utf8);
-         */
-        toString: function(a) {
-          return (a || w).stringify(this);
-        },
-        /**
-         * Concatenates a word array to this word array.
-         *
-         * @param {WordArray} wordArray The word array to append.
-         *
-         * @return {WordArray} This word array.
-         *
-         * @example
-         *
-         *     wordArray1.concat(wordArray2);
-         */
-        concat: function(a) {
-          var d = this.words, p = a.words, m = this.sigBytes, b = a.sigBytes;
-          if (this.clamp(), m % 4)
-            for (var E = 0; E < b; E++) {
-              var C = p[E >>> 2] >>> 24 - E % 4 * 8 & 255;
-              d[m + E >>> 2] |= C << 24 - (m + E) % 4 * 8;
-            }
-          else
-            for (var x = 0; x < b; x += 4)
-              d[m + x >>> 2] = p[x >>> 2];
-          return this.sigBytes += b, this;
-        },
-        /**
-         * Removes insignificant bits.
-         *
-         * @example
-         *
-         *     wordArray.clamp();
-         */
-        clamp: function() {
-          var a = this.words, d = this.sigBytes;
-          a[d >>> 2] &= 4294967295 << 32 - d % 4 * 8, a.length = r.ceil(d / 4);
-        },
-        /**
-         * Creates a copy of this word array.
-         *
-         * @return {WordArray} The clone.
-         *
-         * @example
-         *
-         *     var clone = wordArray.clone();
-         */
-        clone: function() {
-          var a = g.clone.call(this);
-          return a.words = this.words.slice(0), a;
-        },
-        /**
-         * Creates a word array filled with random bytes.
-         *
-         * @param {number} nBytes The number of random bytes to generate.
-         *
-         * @return {WordArray} The random word array.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var wordArray = CryptoJS.lib.WordArray.random(16);
-         */
-        random: function(a) {
-          for (var d = [], p = 0; p < a; p += 4)
-            d.push(o());
-          return new u.init(d, a);
-        }
-      }), S = l.enc = {}, w = S.Hex = {
-        /**
-         * Converts a word array to a hex string.
-         *
-         * @param {WordArray} wordArray The word array.
-         *
-         * @return {string} The hex string.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var hexString = CryptoJS.enc.Hex.stringify(wordArray);
-         */
-        stringify: function(a) {
-          for (var d = a.words, p = a.sigBytes, m = [], b = 0; b < p; b++) {
-            var E = d[b >>> 2] >>> 24 - b % 4 * 8 & 255;
-            m.push((E >>> 4).toString(16)), m.push((E & 15).toString(16));
-          }
-          return m.join("");
-        },
-        /**
-         * Converts a hex string to a word array.
-         *
-         * @param {string} hexStr The hex string.
-         *
-         * @return {WordArray} The word array.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var wordArray = CryptoJS.enc.Hex.parse(hexString);
-         */
-        parse: function(a) {
-          for (var d = a.length, p = [], m = 0; m < d; m += 2)
-            p[m >>> 3] |= parseInt(a.substr(m, 2), 16) << 24 - m % 8 * 4;
-          return new u.init(p, d / 2);
-        }
-      }, k = S.Latin1 = {
-        /**
-         * Converts a word array to a Latin1 string.
-         *
-         * @param {WordArray} wordArray The word array.
-         *
-         * @return {string} The Latin1 string.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var latin1String = CryptoJS.enc.Latin1.stringify(wordArray);
-         */
-        stringify: function(a) {
-          for (var d = a.words, p = a.sigBytes, m = [], b = 0; b < p; b++) {
-            var E = d[b >>> 2] >>> 24 - b % 4 * 8 & 255;
-            m.push(String.fromCharCode(E));
-          }
-          return m.join("");
-        },
-        /**
-         * Converts a Latin1 string to a word array.
-         *
-         * @param {string} latin1Str The Latin1 string.
-         *
-         * @return {WordArray} The word array.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var wordArray = CryptoJS.enc.Latin1.parse(latin1String);
-         */
-        parse: function(a) {
-          for (var d = a.length, p = [], m = 0; m < d; m++)
-            p[m >>> 2] |= (a.charCodeAt(m) & 255) << 24 - m % 4 * 8;
-          return new u.init(p, d);
-        }
-      }, _ = S.Utf8 = {
-        /**
-         * Converts a word array to a UTF-8 string.
-         *
-         * @param {WordArray} wordArray The word array.
-         *
-         * @return {string} The UTF-8 string.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var utf8String = CryptoJS.enc.Utf8.stringify(wordArray);
-         */
-        stringify: function(a) {
-          try {
-            return decodeURIComponent(escape(k.stringify(a)));
-          } catch {
-            throw new Error("Malformed UTF-8 data");
-          }
-        },
-        /**
-         * Converts a UTF-8 string to a word array.
-         *
-         * @param {string} utf8Str The UTF-8 string.
-         *
-         * @return {WordArray} The word array.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var wordArray = CryptoJS.enc.Utf8.parse(utf8String);
-         */
-        parse: function(a) {
-          return k.parse(unescape(encodeURIComponent(a)));
-        }
-      }, v = h.BufferedBlockAlgorithm = g.extend({
-        /**
-         * Resets this block algorithm's data buffer to its initial state.
-         *
-         * @example
-         *
-         *     bufferedBlockAlgorithm.reset();
-         */
-        reset: function() {
-          this._data = new u.init(), this._nDataBytes = 0;
-        },
-        /**
-         * Adds new data to this block algorithm's buffer.
-         *
-         * @param {WordArray|string} data The data to append. Strings are converted to a WordArray using UTF-8.
-         *
-         * @example
-         *
-         *     bufferedBlockAlgorithm._append('data');
-         *     bufferedBlockAlgorithm._append(wordArray);
-         */
-        _append: function(a) {
-          typeof a == "string" && (a = _.parse(a)), this._data.concat(a), this._nDataBytes += a.sigBytes;
-        },
-        /**
-         * Processes available data blocks.
-         *
-         * This method invokes _doProcessBlock(offset), which must be implemented by a concrete subtype.
-         *
-         * @param {boolean} doFlush Whether all blocks and partial blocks should be processed.
-         *
-         * @return {WordArray} The processed data.
-         *
-         * @example
-         *
-         *     var processedData = bufferedBlockAlgorithm._process();
-         *     var processedData = bufferedBlockAlgorithm._process(!!'flush');
-         */
-        _process: function(a) {
-          var d, p = this._data, m = p.words, b = p.sigBytes, E = this.blockSize, C = E * 4, x = b / C;
-          a ? x = r.ceil(x) : x = r.max((x | 0) - this._minBufferSize, 0);
-          var P = x * E, I = r.min(P * 4, b);
-          if (P) {
-            for (var q = 0; q < P; q += E)
-              this._doProcessBlock(m, q);
-            d = m.splice(0, P), p.sigBytes -= I;
-          }
-          return new u.init(d, I);
-        },
-        /**
-         * Creates a copy of this object.
-         *
-         * @return {Object} The clone.
-         *
-         * @example
-         *
-         *     var clone = bufferedBlockAlgorithm.clone();
-         */
-        clone: function() {
-          var a = g.clone.call(this);
-          return a._data = this._data.clone(), a;
-        },
-        _minBufferSize: 0
-      });
-      h.Hasher = v.extend({
-        /**
-         * Configuration options.
-         */
-        cfg: g.extend(),
-        /**
-         * Initializes a newly created hasher.
-         *
-         * @param {Object} cfg (Optional) The configuration options to use for this hash computation.
-         *
-         * @example
-         *
-         *     var hasher = CryptoJS.algo.SHA256.create();
-         */
-        init: function(a) {
-          this.cfg = this.cfg.extend(a), this.reset();
-        },
-        /**
-         * Resets this hasher to its initial state.
-         *
-         * @example
-         *
-         *     hasher.reset();
-         */
-        reset: function() {
-          v.reset.call(this), this._doReset();
-        },
-        /**
-         * Updates this hasher with a message.
-         *
-         * @param {WordArray|string} messageUpdate The message to append.
-         *
-         * @return {Hasher} This hasher.
-         *
-         * @example
-         *
-         *     hasher.update('message');
-         *     hasher.update(wordArray);
-         */
-        update: function(a) {
-          return this._append(a), this._process(), this;
-        },
-        /**
-         * Finalizes the hash computation.
-         * Note that the finalize operation is effectively a destructive, read-once operation.
-         *
-         * @param {WordArray|string} messageUpdate (Optional) A final message update.
-         *
-         * @return {WordArray} The hash.
-         *
-         * @example
-         *
-         *     var hash = hasher.finalize();
-         *     var hash = hasher.finalize('message');
-         *     var hash = hasher.finalize(wordArray);
-         */
-        finalize: function(a) {
-          a && this._append(a);
-          var d = this._doFinalize();
-          return d;
-        },
-        blockSize: 16,
-        /**
-         * Creates a shortcut function to a hasher's object interface.
-         *
-         * @param {Hasher} hasher The hasher to create a helper for.
-         *
-         * @return {Function} The shortcut function.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var SHA256 = CryptoJS.lib.Hasher._createHelper(CryptoJS.algo.SHA256);
-         */
-        _createHelper: function(a) {
-          return function(d, p) {
-            return new a.init(p).finalize(d);
-          };
-        },
-        /**
-         * Creates a shortcut function to the HMAC's object interface.
-         *
-         * @param {Hasher} hasher The hasher to use in this HMAC helper.
-         *
-         * @return {Function} The shortcut function.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var HmacSHA256 = CryptoJS.lib.Hasher._createHmacHelper(CryptoJS.algo.SHA256);
-         */
-        _createHmacHelper: function(a) {
-          return function(d, p) {
-            return new y.HMAC.init(a, p).finalize(d);
-          };
-        }
-      });
-      var y = l.algo = {};
-      return l;
-    }(Math);
-    return s;
-  });
-})(Ae);
-var X = {}, Ne = {
-  get exports() {
-    return X;
-  },
-  set exports(e) {
-    X = e;
-  }
-};
-(function(e, t) {
-  (function(s, r) {
-    e.exports = r(M);
-  })(N, function(s) {
-    return function(r) {
-      var n = s, i = n.lib, o = i.WordArray, c = i.Hasher, l = n.algo, h = [], g = [];
-      (function() {
-        function w(y) {
-          for (var a = r.sqrt(y), d = 2; d <= a; d++)
-            if (!(y % d))
-              return !1;
-          return !0;
-        }
-        function k(y) {
-          return (y - (y | 0)) * 4294967296 | 0;
-        }
-        for (var _ = 2, v = 0; v < 64; )
-          w(_) && (v < 8 && (h[v] = k(r.pow(_, 1 / 2))), g[v] = k(r.pow(_, 1 / 3)), v++), _++;
-      })();
-      var u = [], S = l.SHA256 = c.extend({
-        _doReset: function() {
-          this._hash = new o.init(h.slice(0));
-        },
-        _doProcessBlock: function(w, k) {
-          for (var _ = this._hash.words, v = _[0], y = _[1], a = _[2], d = _[3], p = _[4], m = _[5], b = _[6], E = _[7], C = 0; C < 64; C++) {
-            if (C < 16)
-              u[C] = w[k + C] | 0;
-            else {
-              var x = u[C - 15], P = (x << 25 | x >>> 7) ^ (x << 14 | x >>> 18) ^ x >>> 3, I = u[C - 2], q = (I << 15 | I >>> 17) ^ (I << 13 | I >>> 19) ^ I >>> 10;
-              u[C] = P + u[C - 7] + q + u[C - 16];
-            }
-            var W = p & m ^ ~p & b, K = v & y ^ v & a ^ y & a, V = (v << 30 | v >>> 2) ^ (v << 19 | v >>> 13) ^ (v << 10 | v >>> 22), G = (p << 26 | p >>> 6) ^ (p << 21 | p >>> 11) ^ (p << 7 | p >>> 25), L = E + G + W + g[C] + u[C], xe = V + K;
-            E = b, b = m, m = p, p = d + L | 0, d = a, a = y, y = v, v = L + xe | 0;
-          }
-          _[0] = _[0] + v | 0, _[1] = _[1] + y | 0, _[2] = _[2] + a | 0, _[3] = _[3] + d | 0, _[4] = _[4] + p | 0, _[5] = _[5] + m | 0, _[6] = _[6] + b | 0, _[7] = _[7] + E | 0;
-        },
-        _doFinalize: function() {
-          var w = this._data, k = w.words, _ = this._nDataBytes * 8, v = w.sigBytes * 8;
-          return k[v >>> 5] |= 128 << 24 - v % 32, k[(v + 64 >>> 9 << 4) + 14] = r.floor(_ / 4294967296), k[(v + 64 >>> 9 << 4) + 15] = _, w.sigBytes = k.length * 4, this._process(), this._hash;
-        },
-        clone: function() {
-          var w = c.clone.call(this);
-          return w._hash = this._hash.clone(), w;
-        }
-      });
-      n.SHA256 = c._createHelper(S), n.HmacSHA256 = c._createHmacHelper(S);
-    }(Math), s.SHA256;
-  });
-})(Ne);
-var z = {}, je = {
-  get exports() {
-    return z;
-  },
-  set exports(e) {
-    z = e;
-  }
-};
-(function(e, t) {
-  (function(s, r) {
-    e.exports = r(M);
-  })(N, function(s) {
-    return function() {
-      var r = s, n = r.lib, i = n.WordArray, o = r.enc;
-      o.Base64 = {
-        /**
-         * Converts a word array to a Base64 string.
-         *
-         * @param {WordArray} wordArray The word array.
-         *
-         * @return {string} The Base64 string.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var base64String = CryptoJS.enc.Base64.stringify(wordArray);
-         */
-        stringify: function(l) {
-          var h = l.words, g = l.sigBytes, u = this._map;
-          l.clamp();
-          for (var S = [], w = 0; w < g; w += 3)
-            for (var k = h[w >>> 2] >>> 24 - w % 4 * 8 & 255, _ = h[w + 1 >>> 2] >>> 24 - (w + 1) % 4 * 8 & 255, v = h[w + 2 >>> 2] >>> 24 - (w + 2) % 4 * 8 & 255, y = k << 16 | _ << 8 | v, a = 0; a < 4 && w + a * 0.75 < g; a++)
-              S.push(u.charAt(y >>> 6 * (3 - a) & 63));
-          var d = u.charAt(64);
-          if (d)
-            for (; S.length % 4; )
-              S.push(d);
-          return S.join("");
-        },
-        /**
-         * Converts a Base64 string to a word array.
-         *
-         * @param {string} base64Str The Base64 string.
-         *
-         * @return {WordArray} The word array.
-         *
-         * @static
-         *
-         * @example
-         *
-         *     var wordArray = CryptoJS.enc.Base64.parse(base64String);
-         */
-        parse: function(l) {
-          var h = l.length, g = this._map, u = this._reverseMap;
-          if (!u) {
-            u = this._reverseMap = [];
-            for (var S = 0; S < g.length; S++)
-              u[g.charCodeAt(S)] = S;
-          }
-          var w = g.charAt(64);
-          if (w) {
-            var k = l.indexOf(w);
-            k !== -1 && (h = k);
-          }
-          return c(l, h, u);
-        },
-        _map: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="
-      };
-      function c(l, h, g) {
-        for (var u = [], S = 0, w = 0; w < h; w++)
-          if (w % 4) {
-            var k = g[l.charCodeAt(w - 1)] << w % 4 * 2, _ = g[l.charCodeAt(w)] >>> 6 - w % 4 * 2, v = k | _;
-            u[S >>> 2] |= v << 24 - S % 4 * 8, S++;
-          }
-        return i.create(u, S);
-      }
-    }(), s.enc.Base64;
-  });
-})(je);
-var Y = {}, Me = {
-  get exports() {
-    return Y;
-  },
-  set exports(e) {
-    Y = e;
-  }
-};
-(function(e, t) {
-  (function(s, r) {
-    e.exports = r(M);
-  })(N, function(s) {
-    return s.enc.Utf8;
-  });
-})(Me);
-function Z(e) {
-  this.message = e;
-}
-Z.prototype = new Error(), Z.prototype.name = "InvalidCharacterError";
-var le = typeof window < "u" && window.atob && window.atob.bind(window) || function(e) {
-  var t = String(e).replace(/=+$/, "");
-  if (t.length % 4 == 1)
-    throw new Z("'atob' failed: The string to be decoded is not correctly encoded.");
-  for (var s, r, n = 0, i = 0, o = ""; r = t.charAt(i++); ~r && (s = n % 4 ? 64 * s + r : r, n++ % 4) ? o += String.fromCharCode(255 & s >> (-2 * n & 6)) : 0)
-    r = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(r);
-  return o;
-};
-function He(e) {
-  var t = e.replace(/-/g, "+").replace(/_/g, "/");
-  switch (t.length % 4) {
-    case 0:
-      break;
-    case 2:
-      t += "==";
-      break;
-    case 3:
-      t += "=";
-      break;
-    default:
-      throw "Illegal base64url string!";
-  }
-  try {
-    return function(s) {
-      return decodeURIComponent(le(s).replace(/(.)/g, function(r, n) {
-        var i = n.charCodeAt(0).toString(16).toUpperCase();
-        return i.length < 2 && (i = "0" + i), "%" + i;
-      }));
-    }(t);
-  } catch {
-    return le(t);
-  }
-}
-function D(e) {
-  this.message = e;
-}
-function We(e, t) {
-  if (typeof e != "string")
-    throw new D("Invalid token specified");
-  var s = (t = t || {}).header === !0 ? 0 : 1;
-  try {
-    return JSON.parse(He(e.split(".")[s]));
-  } catch (r) {
-    throw new D("Invalid token specified: " + r.message);
-  }
-}
-D.prototype = new Error(), D.prototype.name = "InvalidTokenError";
-var Be = {
-  debug: () => {
-  },
-  info: () => {
-  },
-  warn: () => {
-  },
-  error: () => {
-  }
-}, T, U, J = /* @__PURE__ */ ((e) => (e[e.NONE = 0] = "NONE", e[e.ERROR = 1] = "ERROR", e[e.WARN = 2] = "WARN", e[e.INFO = 3] = "INFO", e[e.DEBUG = 4] = "DEBUG", e))(J || {});
-((e) => {
-  function t() {
-    T = 3, U = Be;
-  }
-  e.reset = t;
-  function s(n) {
-    if (!(0 <= n && n <= 4))
-      throw new Error("Invalid log level");
-    T = n;
-  }
-  e.setLevel = s;
-  function r(n) {
-    U = n;
-  }
-  e.setLogger = r;
-})(J || (J = {}));
-var f = class {
-  constructor(e) {
-    this._name = e;
-  }
-  debug(...e) {
-    T >= 4 && U.debug(f._format(this._name, this._method), ...e);
-  }
-  info(...e) {
-    T >= 3 && U.info(f._format(this._name, this._method), ...e);
-  }
-  warn(...e) {
-    T >= 2 && U.warn(f._format(this._name, this._method), ...e);
-  }
-  error(...e) {
-    T >= 1 && U.error(f._format(this._name, this._method), ...e);
-  }
-  throw(e) {
-    throw this.error(e), e;
-  }
-  create(e) {
-    const t = Object.create(this);
-    return t._method = e, t.debug("begin"), t;
-  }
-  static createStatic(e, t) {
-    const s = new f(`${e}.${t}`);
-    return s.debug("begin"), s;
-  }
-  static _format(e, t) {
-    const s = `[${e}]`;
-    return t ? `${s} ${t}:` : s;
-  }
-  // helpers for static class methods
-  static debug(e, ...t) {
-    T >= 4 && U.debug(f._format(e), ...t);
-  }
-  static info(e, ...t) {
-    T >= 3 && U.info(f._format(e), ...t);
-  }
-  static warn(e, ...t) {
-    T >= 2 && U.warn(f._format(e), ...t);
-  }
-  static error(e, ...t) {
-    T >= 1 && U.error(f._format(e), ...t);
-  }
-};
-J.reset();
-var Le = "10000000-1000-4000-8000-100000000000", A = class {
-  static _randomWord() {
-    return M.lib.WordArray.random(1).words[0];
-  }
-  /**
-   * Generates RFC4122 version 4 guid
-   */
-  static generateUUIDv4() {
-    return Le.replace(
-      /[018]/g,
-      (t) => (+t ^ A._randomWord() & 15 >> +t / 4).toString(16)
-    ).replace(/-/g, "");
-  }
-  /**
-   * PKCE: Generate a code verifier
-   */
-  static generateCodeVerifier() {
-    return A.generateUUIDv4() + A.generateUUIDv4() + A.generateUUIDv4();
-  }
-  /**
-   * PKCE: Generate a code challenge
-   */
-  static generateCodeChallenge(e) {
-    try {
-      const t = X(e);
-      return z.stringify(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-    } catch (t) {
-      throw f.error("CryptoUtils.generateCodeChallenge", t), t;
-    }
-  }
-  /**
-   * Generates a base64-encoded string for a basic auth header
-   */
-  static generateBasicAuth(e, t) {
-    const s = Y.parse([e, t].join(":"));
-    return z.stringify(s);
-  }
-}, O = class {
-  constructor(e) {
-    this._name = e, this._logger = new f(`Event('${this._name}')`), this._callbacks = [];
-  }
-  addHandler(e) {
-    return this._callbacks.push(e), () => this.removeHandler(e);
-  }
-  removeHandler(e) {
-    const t = this._callbacks.lastIndexOf(e);
-    t >= 0 && this._callbacks.splice(t, 1);
-  }
-  raise(...e) {
-    this._logger.debug("raise:", ...e);
-    for (const t of this._callbacks)
-      t(...e);
-  }
-}, ee = class {
-  // IMPORTANT: doesn't validate the token
-  static decode(e) {
-    try {
-      return We(e);
-    } catch (t) {
-      throw f.error("JwtUtils.decode", t), t;
-    }
-  }
-}, de = class {
-  /**
-   * Populates a map of window features with a placement centered in front of
-   * the current window. If no explicit width is given, a default value is
-   * binned into [800, 720, 600, 480, 360] based on the current window's width.
-   */
-  static center({ ...e }) {
-    var t, s, r;
-    return e.width == null && (e.width = (t = [800, 720, 600, 480].find((n) => n <= window.outerWidth / 1.618)) != null ? t : 360), (s = e.left) != null || (e.left = Math.max(0, Math.round(window.screenX + (window.outerWidth - e.width) / 2))), e.height != null && ((r = e.top) != null || (e.top = Math.max(0, Math.round(window.screenY + (window.outerHeight - e.height) / 2)))), e;
-  }
-  static serialize(e) {
-    return Object.entries(e).filter(([, t]) => t != null).map(([t, s]) => `${t}=${typeof s != "boolean" ? s : s ? "yes" : "no"}`).join(",");
-  }
-}, R = class extends O {
-  constructor() {
-    super(...arguments), this._logger = new f(`Timer('${this._name}')`), this._timerHandle = null, this._expiration = 0, this._callback = () => {
-      const e = this._expiration - R.getEpochTime();
-      this._logger.debug("timer completes in", e), this._expiration <= R.getEpochTime() && (this.cancel(), super.raise());
-    };
-  }
-  // get the time
-  static getEpochTime() {
-    return Math.floor(Date.now() / 1e3);
-  }
-  init(e) {
-    const t = this._logger.create("init");
-    e = Math.max(Math.floor(e), 1);
-    const s = R.getEpochTime() + e;
-    if (this.expiration === s && this._timerHandle) {
-      t.debug("skipping since already initialized for expiration at", this.expiration);
-      return;
-    }
-    this.cancel(), t.debug("using duration", e), this._expiration = s;
-    const r = Math.min(e, 5);
-    this._timerHandle = setInterval(this._callback, r * 1e3);
-  }
-  get expiration() {
-    return this._expiration;
-  }
-  cancel() {
-    this._logger.create("cancel"), this._timerHandle && (clearInterval(this._timerHandle), this._timerHandle = null);
-  }
-}, te = class {
-  static readParams(e, t = "query") {
-    if (!e)
-      throw new TypeError("Invalid URL");
-    const r = new URL(e, window.location.origin)[t === "fragment" ? "hash" : "search"];
-    return new URLSearchParams(r.slice(1));
-  }
-}, j = class extends Error {
-  constructor(e, t) {
-    var s, r, n;
-    if (super(e.error_description || e.error || ""), this.form = t, this.name = "ErrorResponse", !e.error)
-      throw f.error("ErrorResponse", "No error passed"), new Error("No error passed");
-    this.error = e.error, this.error_description = (s = e.error_description) != null ? s : null, this.error_uri = (r = e.error_uri) != null ? r : null, this.state = e.userState, this.session_state = (n = e.session_state) != null ? n : null;
-  }
-}, ie = class extends Error {
-  constructor(e) {
-    super(e), this.name = "ErrorTimeout";
-  }
-}, Fe = class {
-  constructor(e) {
-    this._logger = new f("AccessTokenEvents"), this._expiringTimer = new R("Access token expiring"), this._expiredTimer = new R("Access token expired"), this._expiringNotificationTimeInSeconds = e.expiringNotificationTimeInSeconds;
-  }
-  load(e) {
-    const t = this._logger.create("load");
-    if (e.access_token && e.expires_in !== void 0) {
-      const s = e.expires_in;
-      if (t.debug("access token present, remaining duration:", s), s > 0) {
-        let n = s - this._expiringNotificationTimeInSeconds;
-        n <= 0 && (n = 1), t.debug("registering expiring timer, raising in", n, "seconds"), this._expiringTimer.init(n);
-      } else
-        t.debug("canceling existing expiring timer because we're past expiration."), this._expiringTimer.cancel();
-      const r = s + 1;
-      t.debug("registering expired timer, raising in", r, "seconds"), this._expiredTimer.init(r);
-    } else
-      this._expiringTimer.cancel(), this._expiredTimer.cancel();
-  }
-  unload() {
-    this._logger.debug("unload: canceling existing access token timers"), this._expiringTimer.cancel(), this._expiredTimer.cancel();
-  }
-  /**
-   * Add callback: Raised prior to the access token expiring.
-   */
-  addAccessTokenExpiring(e) {
-    return this._expiringTimer.addHandler(e);
-  }
-  /**
-   * Remove callback: Raised prior to the access token expiring.
-   */
-  removeAccessTokenExpiring(e) {
-    this._expiringTimer.removeHandler(e);
-  }
-  /**
-   * Add callback: Raised after the access token has expired.
-   */
-  addAccessTokenExpired(e) {
-    return this._expiredTimer.addHandler(e);
-  }
-  /**
-   * Remove callback: Raised after the access token has expired.
-   */
-  removeAccessTokenExpired(e) {
-    this._expiredTimer.removeHandler(e);
-  }
-}, $e = class {
-  constructor(e, t, s, r, n) {
-    this._callback = e, this._client_id = t, this._intervalInSeconds = r, this._stopOnError = n, this._logger = new f("CheckSessionIFrame"), this._timer = null, this._session_state = null, this._message = (o) => {
-      o.origin === this._frame_origin && o.source === this._frame.contentWindow && (o.data === "error" ? (this._logger.error("error message from check session op iframe"), this._stopOnError && this.stop()) : o.data === "changed" ? (this._logger.debug("changed message from check session op iframe"), this.stop(), this._callback()) : this._logger.debug(o.data + " message from check session op iframe"));
-    };
-    const i = new URL(s);
-    this._frame_origin = i.origin, this._frame = window.document.createElement("iframe"), this._frame.style.visibility = "hidden", this._frame.style.position = "fixed", this._frame.style.left = "-1000px", this._frame.style.top = "0", this._frame.width = "0", this._frame.height = "0", this._frame.src = i.href;
-  }
-  load() {
-    return new Promise((e) => {
-      this._frame.onload = () => {
-        e();
-      }, window.document.body.appendChild(this._frame), window.addEventListener("message", this._message, !1);
-    });
-  }
-  start(e) {
-    if (this._session_state === e)
-      return;
-    this._logger.create("start"), this.stop(), this._session_state = e;
-    const t = () => {
-      !this._frame.contentWindow || !this._session_state || this._frame.contentWindow.postMessage(this._client_id + " " + this._session_state, this._frame_origin);
-    };
-    t(), this._timer = setInterval(t, this._intervalInSeconds * 1e3);
-  }
-  stop() {
-    this._logger.create("stop"), this._session_state = null, this._timer && (clearInterval(this._timer), this._timer = null);
-  }
-}, we = class {
-  constructor() {
-    this._logger = new f("InMemoryWebStorage"), this._data = {};
-  }
-  clear() {
-    this._logger.create("clear"), this._data = {};
-  }
-  getItem(e) {
-    return this._logger.create(`getItem('${e}')`), this._data[e];
-  }
-  setItem(e, t) {
-    this._logger.create(`setItem('${e}')`), this._data[e] = t;
-  }
-  removeItem(e) {
-    this._logger.create(`removeItem('${e}')`), delete this._data[e];
-  }
-  get length() {
-    return Object.getOwnPropertyNames(this._data).length;
-  }
-  key(e) {
-    return Object.getOwnPropertyNames(this._data)[e];
-  }
-}, ne = class {
-  constructor(e = [], t = null) {
-    this._jwtHandler = t, this._logger = new f("JsonService"), this._contentTypes = [], this._contentTypes.push(...e, "application/json"), t && this._contentTypes.push("application/jwt");
-  }
-  async fetchWithTimeout(e, t = {}) {
-    const { timeoutInSeconds: s, ...r } = t;
-    if (!s)
-      return await fetch(e, r);
-    const n = new AbortController(), i = setTimeout(() => n.abort(), s * 1e3);
-    try {
-      return await fetch(e, {
-        ...t,
-        signal: n.signal
-      });
-    } catch (o) {
-      throw o instanceof DOMException && o.name === "AbortError" ? new ie("Network timed out") : o;
-    } finally {
-      clearTimeout(i);
-    }
-  }
-  async getJson(e, {
-    token: t,
-    credentials: s
-  } = {}) {
-    const r = this._logger.create("getJson"), n = {
-      Accept: this._contentTypes.join(", ")
-    };
-    t && (r.debug("token passed, setting Authorization header"), n.Authorization = "Bearer " + t);
-    let i;
-    try {
-      r.debug("url:", e), i = await this.fetchWithTimeout(e, { method: "GET", headers: n, credentials: s });
-    } catch (l) {
-      throw r.error("Network Error"), l;
-    }
-    r.debug("HTTP response received, status", i.status);
-    const o = i.headers.get("Content-Type");
-    if (o && !this._contentTypes.find((l) => o.startsWith(l)) && r.throw(new Error(`Invalid response Content-Type: ${o ?? "undefined"}, from URL: ${e}`)), i.ok && this._jwtHandler && (o != null && o.startsWith("application/jwt")))
-      return await this._jwtHandler(await i.text());
-    let c;
-    try {
-      c = await i.json();
-    } catch (l) {
-      throw r.error("Error parsing JSON response", l), i.ok ? l : new Error(`${i.statusText} (${i.status})`);
-    }
-    if (!i.ok)
-      throw r.error("Error from server:", c), c.error ? new j(c) : new Error(`${i.statusText} (${i.status}): ${JSON.stringify(c)}`);
-    return c;
-  }
-  async postForm(e, {
-    body: t,
-    basicAuth: s,
-    timeoutInSeconds: r,
-    initCredentials: n
-  }) {
-    const i = this._logger.create("postForm"), o = {
-      Accept: this._contentTypes.join(", "),
-      "Content-Type": "application/x-www-form-urlencoded"
-    };
-    s !== void 0 && (o.Authorization = "Basic " + s);
-    let c;
-    try {
-      i.debug("url:", e), c = await this.fetchWithTimeout(e, { method: "POST", headers: o, body: t, timeoutInSeconds: r, credentials: n });
-    } catch (u) {
-      throw i.error("Network error"), u;
-    }
-    i.debug("HTTP response received, status", c.status);
-    const l = c.headers.get("Content-Type");
-    if (l && !this._contentTypes.find((u) => l.startsWith(u)))
-      throw new Error(`Invalid response Content-Type: ${l ?? "undefined"}, from URL: ${e}`);
-    const h = await c.text();
-    let g = {};
-    if (h)
-      try {
-        g = JSON.parse(h);
-      } catch (u) {
-        throw i.error("Error parsing JSON response", u), c.ok ? u : new Error(`${c.statusText} (${c.status})`);
-      }
-    if (!c.ok)
-      throw i.error("Error from server:", g), g.error ? new j(g, t) : new Error(`${c.statusText} (${c.status}): ${JSON.stringify(g)}`);
-    return g;
-  }
-}, ze = class {
-  constructor(e) {
-    this._settings = e, this._logger = new f("MetadataService"), this._jsonService = new ne(["application/jwk-set+json"]), this._signingKeys = null, this._metadata = null, this._metadataUrl = this._settings.metadataUrl, this._settings.signingKeys && (this._logger.debug("using signingKeys from settings"), this._signingKeys = this._settings.signingKeys), this._settings.metadata && (this._logger.debug("using metadata from settings"), this._metadata = this._settings.metadata), this._settings.fetchRequestCredentials && (this._logger.debug("using fetchRequestCredentials from settings"), this._fetchRequestCredentials = this._settings.fetchRequestCredentials);
-  }
-  resetSigningKeys() {
-    this._signingKeys = null;
-  }
-  async getMetadata() {
-    const e = this._logger.create("getMetadata");
-    if (this._metadata)
-      return e.debug("using cached values"), this._metadata;
-    if (!this._metadataUrl)
-      throw e.throw(new Error("No authority or metadataUrl configured on settings")), null;
-    e.debug("getting metadata from", this._metadataUrl);
-    const t = await this._jsonService.getJson(this._metadataUrl, { credentials: this._fetchRequestCredentials });
-    return e.debug("merging remote JSON with seed metadata"), this._metadata = Object.assign({}, this._settings.metadataSeed, t), this._metadata;
-  }
-  getIssuer() {
-    return this._getMetadataProperty("issuer");
-  }
-  getAuthorizationEndpoint() {
-    return this._getMetadataProperty("authorization_endpoint");
-  }
-  getUserInfoEndpoint() {
-    return this._getMetadataProperty("userinfo_endpoint");
-  }
-  getTokenEndpoint(e = !0) {
-    return this._getMetadataProperty("token_endpoint", e);
-  }
-  getCheckSessionIframe() {
-    return this._getMetadataProperty("check_session_iframe", !0);
-  }
-  getEndSessionEndpoint() {
-    return this._getMetadataProperty("end_session_endpoint", !0);
-  }
-  getRevocationEndpoint(e = !0) {
-    return this._getMetadataProperty("revocation_endpoint", e);
-  }
-  getKeysEndpoint(e = !0) {
-    return this._getMetadataProperty("jwks_uri", e);
-  }
-  async _getMetadataProperty(e, t = !1) {
-    const s = this._logger.create(`_getMetadataProperty('${e}')`), r = await this.getMetadata();
-    if (s.debug("resolved"), r[e] === void 0) {
-      if (t === !0) {
-        s.warn("Metadata does not contain optional property");
-        return;
-      }
-      s.throw(new Error("Metadata does not contain property " + e));
-    }
-    return r[e];
-  }
-  async getSigningKeys() {
-    const e = this._logger.create("getSigningKeys");
-    if (this._signingKeys)
-      return e.debug("returning signingKeys from cache"), this._signingKeys;
-    const t = await this.getKeysEndpoint(!1);
-    e.debug("got jwks_uri", t);
-    const s = await this._jsonService.getJson(t);
-    if (e.debug("got key set", s), !Array.isArray(s.keys))
-      throw e.throw(new Error("Missing keys on keyset")), null;
-    return this._signingKeys = s.keys, this._signingKeys;
-  }
-}, me = class {
-  constructor({
-    prefix: e = "oidc.",
-    store: t = localStorage
-  } = {}) {
-    this._logger = new f("WebStorageStateStore"), this._store = t, this._prefix = e;
-  }
-  async set(e, t) {
-    this._logger.create(`set('${e}')`), e = this._prefix + e, await this._store.setItem(e, t);
-  }
-  async get(e) {
-    return this._logger.create(`get('${e}')`), e = this._prefix + e, await this._store.getItem(e);
-  }
-  async remove(e) {
-    this._logger.create(`remove('${e}')`), e = this._prefix + e;
-    const t = await this._store.getItem(e);
-    return await this._store.removeItem(e), t;
-  }
-  async getAllKeys() {
-    this._logger.create("getAllKeys");
-    const e = await this._store.length, t = [];
-    for (let s = 0; s < e; s++) {
-      const r = await this._store.key(s);
-      r && r.indexOf(this._prefix) === 0 && t.push(r.substr(this._prefix.length));
-    }
-    return t;
-  }
-}, De = "code", Je = "openid", Ke = "client_secret_post", Ve = "query", Ge = 60 * 15, Qe = 60 * 5, ve = class {
-  constructor({
-    // metadata related
-    authority: e,
-    metadataUrl: t,
-    metadata: s,
-    signingKeys: r,
-    metadataSeed: n,
-    // client related
-    client_id: i,
-    client_secret: o,
-    response_type: c = De,
-    scope: l = Je,
-    redirect_uri: h,
-    post_logout_redirect_uri: g,
-    client_authentication: u = Ke,
-    // optional protocol
-    prompt: S,
-    display: w,
-    max_age: k,
-    ui_locales: _,
-    acr_values: v,
-    resource: y,
-    response_mode: a = Ve,
-    // behavior flags
-    filterProtocolClaims: d = !0,
-    loadUserInfo: p = !1,
-    staleStateAgeInSeconds: m = Ge,
-    clockSkewInSeconds: b = Qe,
-    userInfoJwtIssuer: E = "OP",
-    mergeClaims: C = !1,
-    disablePKCE: x = !1,
-    // other behavior
-    stateStore: P,
-    refreshTokenCredentials: I,
-    revokeTokenAdditionalContentTypes: q,
-    fetchRequestCredentials: W,
-    refreshTokenAllowedScope: K,
-    // extra query params
-    extraQueryParams: V = {},
-    extraTokenParams: G = {}
-  }) {
-    if (this.authority = e, t ? this.metadataUrl = t : (this.metadataUrl = e, e && (this.metadataUrl.endsWith("/") || (this.metadataUrl += "/"), this.metadataUrl += ".well-known/openid-configuration")), this.metadata = s, this.metadataSeed = n, this.signingKeys = r, this.client_id = i, this.client_secret = o, this.response_type = c, this.scope = l, this.redirect_uri = h, this.post_logout_redirect_uri = g, this.client_authentication = u, this.prompt = S, this.display = w, this.max_age = k, this.ui_locales = _, this.acr_values = v, this.resource = y, this.response_mode = a, this.filterProtocolClaims = d ?? !0, this.loadUserInfo = !!p, this.staleStateAgeInSeconds = m, this.clockSkewInSeconds = b, this.userInfoJwtIssuer = E, this.mergeClaims = !!C, this.disablePKCE = !!x, this.revokeTokenAdditionalContentTypes = q, W && I && console.warn("Both fetchRequestCredentials and refreshTokenCredentials is set. Only fetchRequestCredentials will be used."), this.fetchRequestCredentials = W || I || "same-origin", P)
-      this.stateStore = P;
-    else {
-      const L = typeof window < "u" ? window.localStorage : new we();
-      this.stateStore = new me({ store: L });
-    }
-    this.refreshTokenAllowedScope = K, this.extraQueryParams = V, this.extraTokenParams = G;
-  }
-}, Xe = class {
-  constructor(e, t) {
-    this._settings = e, this._metadataService = t, this._logger = new f("UserInfoService"), this._getClaimsFromJwt = async (s) => {
-      const r = this._logger.create("_getClaimsFromJwt");
-      try {
-        const n = ee.decode(s);
-        return r.debug("JWT decoding successful"), n;
-      } catch (n) {
-        throw r.error("Error parsing JWT response"), n;
-      }
-    }, this._jsonService = new ne(void 0, this._getClaimsFromJwt);
-  }
-  async getClaims(e) {
-    const t = this._logger.create("getClaims");
-    e || this._logger.throw(new Error("No token passed"));
-    const s = await this._metadataService.getUserInfoEndpoint();
-    t.debug("got userinfo url", s);
-    const r = await this._jsonService.getJson(s, {
-      token: e,
-      credentials: this._settings.fetchRequestCredentials
-    });
-    return t.debug("got claims", r), r;
-  }
-}, Se = class {
-  constructor(e, t) {
-    this._settings = e, this._metadataService = t, this._logger = new f("TokenClient"), this._jsonService = new ne(this._settings.revokeTokenAdditionalContentTypes);
-  }
-  async exchangeCode({
-    grant_type: e = "authorization_code",
-    redirect_uri: t = this._settings.redirect_uri,
-    client_id: s = this._settings.client_id,
-    client_secret: r = this._settings.client_secret,
-    ...n
-  }) {
-    const i = this._logger.create("exchangeCode");
-    s || i.throw(new Error("A client_id is required")), t || i.throw(new Error("A redirect_uri is required")), n.code || i.throw(new Error("A code is required"));
-    const o = new URLSearchParams({ grant_type: e, redirect_uri: t });
-    for (const [g, u] of Object.entries(n))
-      u != null && o.set(g, u);
-    let c;
-    switch (this._settings.client_authentication) {
-      case "client_secret_basic":
-        if (!r)
-          throw i.throw(new Error("A client_secret is required")), null;
-        c = A.generateBasicAuth(s, r);
-        break;
-      case "client_secret_post":
-        o.append("client_id", s), r && o.append("client_secret", r);
-        break;
-    }
-    const l = await this._metadataService.getTokenEndpoint(!1);
-    i.debug("got token endpoint");
-    const h = await this._jsonService.postForm(l, { body: o, basicAuth: c, initCredentials: this._settings.fetchRequestCredentials });
-    return i.debug("got response"), h;
-  }
-  async exchangeCredentials({
-    grant_type: e = "password",
-    client_id: t = this._settings.client_id,
-    client_secret: s = this._settings.client_secret,
-    scope: r = this._settings.scope,
-    ...n
-  }) {
-    const i = this._logger.create("exchangeCredentials");
-    t || i.throw(new Error("A client_id is required"));
-    const o = new URLSearchParams({ grant_type: e, scope: r });
-    for (const [g, u] of Object.entries(n))
-      u != null && o.set(g, u);
-    let c;
-    switch (this._settings.client_authentication) {
-      case "client_secret_basic":
-        if (!s)
-          throw i.throw(new Error("A client_secret is required")), null;
-        c = A.generateBasicAuth(t, s);
-        break;
-      case "client_secret_post":
-        o.append("client_id", t), s && o.append("client_secret", s);
-        break;
-    }
-    const l = await this._metadataService.getTokenEndpoint(!1);
-    i.debug("got token endpoint");
-    const h = await this._jsonService.postForm(l, { body: o, basicAuth: c, initCredentials: this._settings.fetchRequestCredentials });
-    return i.debug("got response"), h;
-  }
-  async exchangeRefreshToken({
-    grant_type: e = "refresh_token",
-    client_id: t = this._settings.client_id,
-    client_secret: s = this._settings.client_secret,
-    timeoutInSeconds: r,
-    ...n
-  }) {
-    const i = this._logger.create("exchangeRefreshToken");
-    t || i.throw(new Error("A client_id is required")), n.refresh_token || i.throw(new Error("A refresh_token is required"));
-    const o = new URLSearchParams({ grant_type: e });
-    for (const [g, u] of Object.entries(n))
-      u != null && o.set(g, u);
-    let c;
-    switch (this._settings.client_authentication) {
-      case "client_secret_basic":
-        if (!s)
-          throw i.throw(new Error("A client_secret is required")), null;
-        c = A.generateBasicAuth(t, s);
-        break;
-      case "client_secret_post":
-        o.append("client_id", t), s && o.append("client_secret", s);
-        break;
-    }
-    const l = await this._metadataService.getTokenEndpoint(!1);
-    i.debug("got token endpoint");
-    const h = await this._jsonService.postForm(l, { body: o, basicAuth: c, timeoutInSeconds: r, initCredentials: this._settings.fetchRequestCredentials });
-    return i.debug("got response"), h;
-  }
-  /**
-   * Revoke an access or refresh token.
-   *
-   * @see https://datatracker.ietf.org/doc/html/rfc7009#section-2.1
-   */
-  async revoke(e) {
-    var t;
-    const s = this._logger.create("revoke");
-    e.token || s.throw(new Error("A token is required"));
-    const r = await this._metadataService.getRevocationEndpoint(!1);
-    s.debug(`got revocation endpoint, revoking ${(t = e.token_type_hint) != null ? t : "default token type"}`);
-    const n = new URLSearchParams();
-    for (const [i, o] of Object.entries(e))
-      o != null && n.set(i, o);
-    n.set("client_id", this._settings.client_id), this._settings.client_secret && n.set("client_secret", this._settings.client_secret), await this._jsonService.postForm(r, { body: n }), s.debug("got response");
-  }
-}, Ye = [
-  "nbf",
-  "jti",
-  "auth_time",
-  "nonce",
-  "acr",
-  "amr",
-  "azp",
-  "at_hash"
-  // https://openid.net/specs/openid-connect-core-1_0.html#CodeIDToken
-], Ze = ["sub", "iss", "aud", "exp", "iat"], et = class {
-  constructor(e, t) {
-    this._settings = e, this._metadataService = t, this._logger = new f("ResponseValidator"), this._userInfoService = new Xe(this._settings, this._metadataService), this._tokenClient = new Se(this._settings, this._metadataService);
-  }
-  async validateSigninResponse(e, t) {
-    const s = this._logger.create("validateSigninResponse");
-    this._processSigninState(e, t), s.debug("state processed"), await this._processCode(e, t), s.debug("code processed"), e.isOpenId && this._validateIdTokenAttributes(e), s.debug("tokens validated"), await this._processClaims(e, t == null ? void 0 : t.skipUserInfo, e.isOpenId), s.debug("claims processed");
-  }
-  async validateCredentialsResponse(e, t) {
-    const s = this._logger.create("validateCredentialsResponse");
-    e.isOpenId && this._validateIdTokenAttributes(e), s.debug("tokens validated"), await this._processClaims(e, t, e.isOpenId), s.debug("claims processed");
-  }
-  async validateRefreshResponse(e, t) {
-    var s, r;
-    const n = this._logger.create("validateRefreshResponse");
-    e.userState = t.data, (s = e.session_state) != null || (e.session_state = t.session_state), (r = e.scope) != null || (e.scope = t.scope), e.isOpenId && e.id_token && (this._validateIdTokenAttributes(e, t.id_token), n.debug("ID Token validated")), e.id_token || (e.id_token = t.id_token, e.profile = t.profile);
-    const i = e.isOpenId && !!e.id_token;
-    await this._processClaims(e, !1, i), n.debug("claims processed");
-  }
-  validateSignoutResponse(e, t) {
-    const s = this._logger.create("validateSignoutResponse");
-    if (t.id !== e.state && s.throw(new Error("State does not match")), s.debug("state validated"), e.userState = t.data, e.error)
-      throw s.warn("Response was error", e.error), new j(e);
-  }
-  _processSigninState(e, t) {
-    var s;
-    const r = this._logger.create("_processSigninState");
-    if (t.id !== e.state && r.throw(new Error("State does not match")), t.client_id || r.throw(new Error("No client_id on state")), t.authority || r.throw(new Error("No authority on state")), this._settings.authority !== t.authority && r.throw(new Error("authority mismatch on settings vs. signin state")), this._settings.client_id && this._settings.client_id !== t.client_id && r.throw(new Error("client_id mismatch on settings vs. signin state")), r.debug("state validated"), e.userState = t.data, (s = e.scope) != null || (e.scope = t.scope), e.error)
-      throw r.warn("Response was error", e.error), new j(e);
-    t.code_verifier && !e.code && r.throw(new Error("Expected code in response"));
-  }
-  async _processClaims(e, t = !1, s = !0) {
-    const r = this._logger.create("_processClaims");
-    if (e.profile = this._filterProtocolClaims(e.profile), t || !this._settings.loadUserInfo || !e.access_token) {
-      r.debug("not loading user info");
-      return;
-    }
-    r.debug("loading user info");
-    const n = await this._userInfoService.getClaims(e.access_token);
-    r.debug("user info claims received from user info endpoint"), s && n.sub !== e.profile.sub && r.throw(new Error("subject from UserInfo response does not match subject in ID Token")), e.profile = this._mergeClaims(e.profile, this._filterProtocolClaims(n)), r.debug("user info claims received, updated profile:", e.profile);
-  }
-  _mergeClaims(e, t) {
-    const s = { ...e };
-    for (const [r, n] of Object.entries(t))
-      for (const i of Array.isArray(n) ? n : [n]) {
-        const o = s[r];
-        o ? Array.isArray(o) ? o.includes(i) || o.push(i) : s[r] !== i && (typeof i == "object" && this._settings.mergeClaims ? s[r] = this._mergeClaims(o, i) : s[r] = [o, i]) : s[r] = i;
-      }
-    return s;
-  }
-  _filterProtocolClaims(e) {
-    const t = { ...e };
-    if (this._settings.filterProtocolClaims) {
-      let s;
-      Array.isArray(this._settings.filterProtocolClaims) ? s = this._settings.filterProtocolClaims : s = Ye;
-      for (const r of s)
-        Ze.includes(r) || delete t[r];
-    }
-    return t;
-  }
-  async _processCode(e, t) {
-    const s = this._logger.create("_processCode");
-    if (e.code) {
-      s.debug("Validating code");
-      const r = await this._tokenClient.exchangeCode({
-        client_id: t.client_id,
-        client_secret: t.client_secret,
-        code: e.code,
-        redirect_uri: t.redirect_uri,
-        code_verifier: t.code_verifier,
-        ...t.extraTokenParams
-      });
-      Object.assign(e, r);
-    } else
-      s.debug("No code to process");
-  }
-  _validateIdTokenAttributes(e, t) {
-    var s;
-    const r = this._logger.create("_validateIdTokenAttributes");
-    r.debug("decoding ID Token JWT");
-    const n = ee.decode((s = e.id_token) != null ? s : "");
-    if (n.sub || r.throw(new Error("ID Token is missing a subject claim")), t) {
-      const i = ee.decode(t);
-      i.sub !== n.sub && r.throw(new Error("sub in id_token does not match current sub")), i.auth_time && i.auth_time !== n.auth_time && r.throw(new Error("auth_time in id_token does not match original auth_time")), i.azp && i.azp !== n.azp && r.throw(new Error("azp in id_token does not match original azp")), !i.azp && n.azp && r.throw(new Error("azp not in id_token, but present in original id_token"));
-    }
-    e.profile = n;
-  }
-}, H = class {
-  constructor(e) {
-    this.id = e.id || A.generateUUIDv4(), this.data = e.data, e.created && e.created > 0 ? this.created = e.created : this.created = R.getEpochTime(), this.request_type = e.request_type;
-  }
-  toStorageString() {
-    return new f("State").create("toStorageString"), JSON.stringify({
-      id: this.id,
-      data: this.data,
-      created: this.created,
-      request_type: this.request_type
-    });
-  }
-  static fromStorageString(e) {
-    return f.createStatic("State", "fromStorageString"), new H(JSON.parse(e));
-  }
-  static async clearStaleState(e, t) {
-    const s = f.createStatic("State", "clearStaleState"), r = R.getEpochTime() - t, n = await e.getAllKeys();
-    s.debug("got keys", n);
-    for (let i = 0; i < n.length; i++) {
-      const o = n[i], c = await e.get(o);
-      let l = !1;
-      if (c)
-        try {
-          const h = H.fromStorageString(c);
-          s.debug("got item from key:", o, h.created), h.created <= r && (l = !0);
-        } catch (h) {
-          s.error("Error parsing state for key:", o, h), l = !0;
-        }
-      else
-        s.debug("no item in storage for key:", o), l = !0;
-      l && (s.debug("removed item for key:", o), e.remove(o));
-    }
-  }
-}, oe = class extends H {
-  constructor(e) {
-    super(e), e.code_verifier === !0 ? this.code_verifier = A.generateCodeVerifier() : e.code_verifier && (this.code_verifier = e.code_verifier), this.code_verifier && (this.code_challenge = A.generateCodeChallenge(this.code_verifier)), this.authority = e.authority, this.client_id = e.client_id, this.redirect_uri = e.redirect_uri, this.scope = e.scope, this.client_secret = e.client_secret, this.extraTokenParams = e.extraTokenParams, this.response_mode = e.response_mode, this.skipUserInfo = e.skipUserInfo;
-  }
-  toStorageString() {
-    return new f("SigninState").create("toStorageString"), JSON.stringify({
-      id: this.id,
-      data: this.data,
-      created: this.created,
-      request_type: this.request_type,
-      code_verifier: this.code_verifier,
-      authority: this.authority,
-      client_id: this.client_id,
-      redirect_uri: this.redirect_uri,
-      scope: this.scope,
-      client_secret: this.client_secret,
-      extraTokenParams: this.extraTokenParams,
-      response_mode: this.response_mode,
-      skipUserInfo: this.skipUserInfo
-    });
-  }
-  static fromStorageString(e) {
-    f.createStatic("SigninState", "fromStorageString");
-    const t = JSON.parse(e);
-    return new oe(t);
-  }
-}, tt = class {
-  constructor({
-    // mandatory
-    url: e,
-    authority: t,
-    client_id: s,
-    redirect_uri: r,
-    response_type: n,
-    scope: i,
-    // optional
-    state_data: o,
-    response_mode: c,
-    request_type: l,
-    client_secret: h,
-    nonce: g,
-    resource: u,
-    skipUserInfo: S,
-    extraQueryParams: w,
-    extraTokenParams: k,
-    disablePKCE: _,
-    ...v
-  }) {
-    if (this._logger = new f("SigninRequest"), !e)
-      throw this._logger.error("ctor: No url passed"), new Error("url");
-    if (!s)
-      throw this._logger.error("ctor: No client_id passed"), new Error("client_id");
-    if (!r)
-      throw this._logger.error("ctor: No redirect_uri passed"), new Error("redirect_uri");
-    if (!n)
-      throw this._logger.error("ctor: No response_type passed"), new Error("response_type");
-    if (!i)
-      throw this._logger.error("ctor: No scope passed"), new Error("scope");
-    if (!t)
-      throw this._logger.error("ctor: No authority passed"), new Error("authority");
-    this.state = new oe({
-      data: o,
-      request_type: l,
-      code_verifier: !_,
-      client_id: s,
-      authority: t,
-      redirect_uri: r,
-      response_mode: c,
-      client_secret: h,
-      scope: i,
-      extraTokenParams: k,
-      skipUserInfo: S
-    });
-    const y = new URL(e);
-    y.searchParams.append("client_id", s), y.searchParams.append("redirect_uri", r), y.searchParams.append("response_type", n), y.searchParams.append("scope", i), g && y.searchParams.append("nonce", g), y.searchParams.append("state", this.state.id), this.state.code_challenge && (y.searchParams.append("code_challenge", this.state.code_challenge), y.searchParams.append("code_challenge_method", "S256")), u && (Array.isArray(u) ? u : [u]).forEach((d) => y.searchParams.append("resource", d));
-    for (const [a, d] of Object.entries({ response_mode: c, ...v, ...w }))
-      d != null && y.searchParams.append(a, d.toString());
-    this.url = y.href;
-  }
-}, st = "openid", Q = class {
-  constructor(e) {
-    this.access_token = "", this.token_type = "", this.profile = {}, this.state = e.get("state"), this.session_state = e.get("session_state"), this.error = e.get("error"), this.error_description = e.get("error_description"), this.error_uri = e.get("error_uri"), this.code = e.get("code");
-  }
-  get expires_in() {
-    if (this.expires_at !== void 0)
-      return this.expires_at - R.getEpochTime();
-  }
-  set expires_in(e) {
-    typeof e == "string" && (e = Number(e)), e !== void 0 && e >= 0 && (this.expires_at = Math.floor(e) + R.getEpochTime());
-  }
-  get isOpenId() {
-    var e;
-    return ((e = this.scope) == null ? void 0 : e.split(" ").includes(st)) || !!this.id_token;
-  }
-}, rt = class {
-  constructor({
-    url: e,
-    state_data: t,
-    id_token_hint: s,
-    post_logout_redirect_uri: r,
-    extraQueryParams: n,
-    request_type: i
-  }) {
-    if (this._logger = new f("SignoutRequest"), !e)
-      throw this._logger.error("ctor: No url passed"), new Error("url");
-    const o = new URL(e);
-    s && o.searchParams.append("id_token_hint", s), r && (o.searchParams.append("post_logout_redirect_uri", r), t && (this.state = new H({ data: t, request_type: i }), o.searchParams.append("state", this.state.id)));
-    for (const [c, l] of Object.entries({ ...n }))
-      l != null && o.searchParams.append(c, l.toString());
-    this.url = o.href;
-  }
-}, it = class {
-  constructor(e) {
-    this.state = e.get("state"), this.error = e.get("error"), this.error_description = e.get("error_description"), this.error_uri = e.get("error_uri");
-  }
-}, nt = class {
-  constructor(e) {
-    this._logger = new f("OidcClient"), this.settings = new ve(e), this.metadataService = new ze(this.settings), this._validator = new et(this.settings, this.metadataService), this._tokenClient = new Se(this.settings, this.metadataService);
-  }
-  async createSigninRequest({
-    state: e,
-    request: t,
-    request_uri: s,
-    request_type: r,
-    id_token_hint: n,
-    login_hint: i,
-    skipUserInfo: o,
-    nonce: c,
-    response_type: l = this.settings.response_type,
-    scope: h = this.settings.scope,
-    redirect_uri: g = this.settings.redirect_uri,
-    prompt: u = this.settings.prompt,
-    display: S = this.settings.display,
-    max_age: w = this.settings.max_age,
-    ui_locales: k = this.settings.ui_locales,
-    acr_values: _ = this.settings.acr_values,
-    resource: v = this.settings.resource,
-    response_mode: y = this.settings.response_mode,
-    extraQueryParams: a = this.settings.extraQueryParams,
-    extraTokenParams: d = this.settings.extraTokenParams
-  }) {
-    const p = this._logger.create("createSigninRequest");
-    if (l !== "code")
-      throw new Error("Only the Authorization Code flow (with PKCE) is supported");
-    const m = await this.metadataService.getAuthorizationEndpoint();
-    p.debug("Received authorization endpoint", m);
-    const b = new tt({
-      url: m,
-      authority: this.settings.authority,
-      client_id: this.settings.client_id,
-      redirect_uri: g,
-      response_type: l,
-      scope: h,
-      state_data: e,
-      prompt: u,
-      display: S,
-      max_age: w,
-      ui_locales: k,
-      id_token_hint: n,
-      login_hint: i,
-      acr_values: _,
-      resource: v,
-      request: t,
-      request_uri: s,
-      extraQueryParams: a,
-      extraTokenParams: d,
-      request_type: r,
-      response_mode: y,
-      client_secret: this.settings.client_secret,
-      skipUserInfo: o,
-      nonce: c,
-      disablePKCE: this.settings.disablePKCE
-    });
-    await this.clearStaleState();
-    const E = b.state;
-    return await this.settings.stateStore.set(E.id, E.toStorageString()), b;
-  }
-  async readSigninResponseState(e, t = !1) {
-    const s = this._logger.create("readSigninResponseState"), r = new Q(te.readParams(e, this.settings.response_mode));
-    if (!r.state)
-      throw s.throw(new Error("No state in response")), null;
-    const n = await this.settings.stateStore[t ? "remove" : "get"](r.state);
-    if (!n)
-      throw s.throw(new Error("No matching state found in storage")), null;
-    return { state: oe.fromStorageString(n), response: r };
-  }
-  async processSigninResponse(e) {
-    const t = this._logger.create("processSigninResponse"), { state: s, response: r } = await this.readSigninResponseState(e, !0);
-    return t.debug("received state from storage; validating response"), await this._validator.validateSigninResponse(r, s), r;
-  }
-  async processResourceOwnerPasswordCredentials({
-    username: e,
-    password: t,
-    skipUserInfo: s = !1,
-    extraTokenParams: r = {}
-  }) {
-    const n = await this._tokenClient.exchangeCredentials({ username: e, password: t, ...r }), i = new Q(new URLSearchParams());
-    return Object.assign(i, n), await this._validator.validateCredentialsResponse(i, s), i;
-  }
-  async useRefreshToken({
-    state: e,
-    timeoutInSeconds: t
-  }) {
-    var s;
-    const r = this._logger.create("useRefreshToken");
-    let n;
-    if (this.settings.refreshTokenAllowedScope === void 0)
-      n = e.scope;
-    else {
-      const c = this.settings.refreshTokenAllowedScope.split(" ");
-      n = (((s = e.scope) == null ? void 0 : s.split(" ")) || []).filter((h) => c.includes(h)).join(" ");
-    }
-    const i = await this._tokenClient.exchangeRefreshToken({
-      refresh_token: e.refresh_token,
-      // provide the (possible filtered) scope list
-      scope: n,
-      timeoutInSeconds: t
-    }), o = new Q(new URLSearchParams());
-    return Object.assign(o, i), r.debug("validating response", o), await this._validator.validateRefreshResponse(o, {
-      ...e,
-      // overide the scope in the state handed over to the validator
-      // so it can set the granted scope to the requested scope in case none is included in the response
-      scope: n
-    }), o;
-  }
-  async createSignoutRequest({
-    state: e,
-    id_token_hint: t,
-    request_type: s,
-    post_logout_redirect_uri: r = this.settings.post_logout_redirect_uri,
-    extraQueryParams: n = this.settings.extraQueryParams
-  } = {}) {
-    const i = this._logger.create("createSignoutRequest"), o = await this.metadataService.getEndSessionEndpoint();
-    if (!o)
-      throw i.throw(new Error("No end session endpoint")), null;
-    i.debug("Received end session endpoint", o);
-    const c = new rt({
-      url: o,
-      id_token_hint: t,
-      post_logout_redirect_uri: r,
-      state_data: e,
-      extraQueryParams: n,
-      request_type: s
-    });
-    await this.clearStaleState();
-    const l = c.state;
-    return l && (i.debug("Signout request has state to persist"), await this.settings.stateStore.set(l.id, l.toStorageString())), c;
-  }
-  async readSignoutResponseState(e, t = !1) {
-    const s = this._logger.create("readSignoutResponseState"), r = new it(te.readParams(e, this.settings.response_mode));
-    if (!r.state) {
-      if (s.debug("No state in response"), r.error)
-        throw s.warn("Response was error:", r.error), new j(r);
-      return { state: void 0, response: r };
-    }
-    const n = await this.settings.stateStore[t ? "remove" : "get"](r.state);
-    if (!n)
-      throw s.throw(new Error("No matching state found in storage")), null;
-    return { state: H.fromStorageString(n), response: r };
-  }
-  async processSignoutResponse(e) {
-    const t = this._logger.create("processSignoutResponse"), { state: s, response: r } = await this.readSignoutResponseState(e, !0);
-    return s ? (t.debug("Received state from storage; validating response"), this._validator.validateSignoutResponse(r, s)) : t.debug("No state from storage; skipping response validation"), r;
-  }
-  clearStaleState() {
-    return this._logger.create("clearStaleState"), H.clearStaleState(this.settings.stateStore, this.settings.staleStateAgeInSeconds);
-  }
-  async revokeToken(e, t) {
-    return this._logger.create("revokeToken"), await this._tokenClient.revoke({
-      token: e,
-      token_type_hint: t
-    });
-  }
-}, ot = class {
-  constructor(e) {
-    this._userManager = e, this._logger = new f("SessionMonitor"), this._start = async (t) => {
-      const s = t.session_state;
-      if (!s)
-        return;
-      const r = this._logger.create("_start");
-      if (t.profile ? (this._sub = t.profile.sub, this._sid = t.profile.sid, r.debug("session_state", s, ", sub", this._sub)) : (this._sub = void 0, this._sid = void 0, r.debug("session_state", s, ", anonymous user")), this._checkSessionIFrame) {
-        this._checkSessionIFrame.start(s);
-        return;
-      }
-      try {
-        const n = await this._userManager.metadataService.getCheckSessionIframe();
-        if (n) {
-          r.debug("initializing check session iframe");
-          const i = this._userManager.settings.client_id, o = this._userManager.settings.checkSessionIntervalInSeconds, c = this._userManager.settings.stopCheckSessionOnError, l = new $e(this._callback, i, n, o, c);
-          await l.load(), this._checkSessionIFrame = l, l.start(s);
-        } else
-          r.warn("no check session iframe found in the metadata");
-      } catch (n) {
-        r.error("Error from getCheckSessionIframe:", n instanceof Error ? n.message : n);
-      }
-    }, this._stop = () => {
-      const t = this._logger.create("_stop");
-      if (this._sub = void 0, this._sid = void 0, this._checkSessionIFrame && this._checkSessionIFrame.stop(), this._userManager.settings.monitorAnonymousSession) {
-        const s = setInterval(async () => {
-          clearInterval(s);
-          try {
-            const r = await this._userManager.querySessionStatus();
-            if (r) {
-              const n = {
-                session_state: r.session_state,
-                profile: r.sub && r.sid ? {
-                  sub: r.sub,
-                  sid: r.sid
-                } : null
-              };
-              this._start(n);
-            }
-          } catch (r) {
-            t.error("error from querySessionStatus", r instanceof Error ? r.message : r);
-          }
-        }, 1e3);
-      }
-    }, this._callback = async () => {
-      const t = this._logger.create("_callback");
-      try {
-        const s = await this._userManager.querySessionStatus();
-        let r = !0;
-        s && this._checkSessionIFrame ? s.sub === this._sub ? (r = !1, this._checkSessionIFrame.start(s.session_state), s.sid === this._sid ? t.debug("same sub still logged in at OP, restarting check session iframe; session_state", s.session_state) : (t.debug("same sub still logged in at OP, session state has changed, restarting check session iframe; session_state", s.session_state), this._userManager.events._raiseUserSessionChanged())) : t.debug("different subject signed into OP", s.sub) : t.debug("subject no longer signed into OP"), r ? this._sub ? this._userManager.events._raiseUserSignedOut() : this._userManager.events._raiseUserSignedIn() : t.debug("no change in session detected, no event to raise");
-      } catch (s) {
-        this._sub && (t.debug("Error calling queryCurrentSigninSession; raising signed out event", s), this._userManager.events._raiseUserSignedOut());
-      }
-    }, e || this._logger.throw(new Error("No user manager passed")), this._userManager.events.addUserLoaded(this._start), this._userManager.events.addUserUnloaded(this._stop), this._init().catch((t) => {
-      this._logger.error(t);
-    });
-  }
-  async _init() {
-    this._logger.create("_init");
-    const e = await this._userManager.getUser();
-    if (e)
-      this._start(e);
-    else if (this._userManager.settings.monitorAnonymousSession) {
-      const t = await this._userManager.querySessionStatus();
-      if (t) {
-        const s = {
-          session_state: t.session_state,
-          profile: t.sub && t.sid ? {
-            sub: t.sub,
-            sid: t.sid
-          } : null
-        };
-        this._start(s);
-      }
-    }
-  }
-}, F = class {
-  constructor(e) {
-    var t;
-    this.id_token = e.id_token, this.session_state = (t = e.session_state) != null ? t : null, this.access_token = e.access_token, this.refresh_token = e.refresh_token, this.token_type = e.token_type, this.scope = e.scope, this.profile = e.profile, this.expires_at = e.expires_at, this.state = e.userState;
-  }
-  /** Computed number of seconds the access token has remaining. */
-  get expires_in() {
-    if (this.expires_at !== void 0)
-      return this.expires_at - R.getEpochTime();
-  }
-  set expires_in(e) {
-    e !== void 0 && (this.expires_at = Math.floor(e) + R.getEpochTime());
-  }
-  /** Computed value indicating if the access token is expired. */
-  get expired() {
-    const e = this.expires_in;
-    if (e !== void 0)
-      return e <= 0;
-  }
-  /** Array representing the parsed values from the `scope`. */
-  get scopes() {
-    var e, t;
-    return (t = (e = this.scope) == null ? void 0 : e.split(" ")) != null ? t : [];
-  }
-  toStorageString() {
-    return new f("User").create("toStorageString"), JSON.stringify({
-      id_token: this.id_token,
-      session_state: this.session_state,
-      access_token: this.access_token,
-      refresh_token: this.refresh_token,
-      token_type: this.token_type,
-      scope: this.scope,
-      profile: this.profile,
-      expires_at: this.expires_at
-    });
-  }
-  static fromStorageString(e) {
-    return f.createStatic("User", "fromStorageString"), new F(JSON.parse(e));
-  }
-}, he = "oidc-client", ye = class {
-  constructor() {
-    this._abort = new O("Window navigation aborted"), this._disposeHandlers = /* @__PURE__ */ new Set(), this._window = null;
-  }
-  async navigate(e) {
-    const t = this._logger.create("navigate");
-    if (!this._window)
-      throw new Error("Attempted to navigate on a disposed window");
-    t.debug("setting URL in window"), this._window.location.replace(e.url);
-    const { url: s, keepOpen: r } = await new Promise((n, i) => {
-      const o = (c) => {
-        var l;
-        const h = c.data, g = (l = e.scriptOrigin) != null ? l : window.location.origin;
-        if (!(c.origin !== g || (h == null ? void 0 : h.source) !== he)) {
-          try {
-            const u = te.readParams(h.url, e.response_mode).get("state");
-            if (u || t.warn("no state found in response url"), c.source !== this._window && u !== e.state)
-              return;
-          } catch {
-            this._dispose(), i(new Error("Invalid response from window"));
-          }
-          n(h);
-        }
-      };
-      window.addEventListener("message", o, !1), this._disposeHandlers.add(() => window.removeEventListener("message", o, !1)), this._disposeHandlers.add(this._abort.addHandler((c) => {
-        this._dispose(), i(c);
-      }));
-    });
-    return t.debug("got response from window"), this._dispose(), r || this.close(), { url: s };
-  }
-  _dispose() {
-    this._logger.create("_dispose");
-    for (const e of this._disposeHandlers)
-      e();
-    this._disposeHandlers.clear();
-  }
-  static _notifyParent(e, t, s = !1, r = window.location.origin) {
-    e.postMessage({
-      source: he,
-      url: t,
-      keepOpen: s
-    }, r);
-  }
-}, be = {
-  location: !1,
-  toolbar: !1,
-  height: 640
-}, ke = "_blank", at = 60, ct = 2, Ee = 10, lt = class extends ve {
-  constructor(e) {
-    const {
-      popup_redirect_uri: t = e.redirect_uri,
-      popup_post_logout_redirect_uri: s = e.post_logout_redirect_uri,
-      popupWindowFeatures: r = be,
-      popupWindowTarget: n = ke,
-      redirectMethod: i = "assign",
-      redirectTarget: o = "self",
-      iframeNotifyParentOrigin: c = e.iframeNotifyParentOrigin,
-      iframeScriptOrigin: l = e.iframeScriptOrigin,
-      silent_redirect_uri: h = e.redirect_uri,
-      silentRequestTimeoutInSeconds: g = Ee,
-      automaticSilentRenew: u = !0,
-      validateSubOnSilentRenew: S = !0,
-      includeIdTokenInSilentRenew: w = !1,
-      monitorSession: k = !1,
-      monitorAnonymousSession: _ = !1,
-      checkSessionIntervalInSeconds: v = ct,
-      query_status_response_type: y = "code",
-      stopCheckSessionOnError: a = !0,
-      revokeTokenTypes: d = ["access_token", "refresh_token"],
-      revokeTokensOnSignout: p = !1,
-      includeIdTokenInSilentSignout: m = !1,
-      accessTokenExpiringNotificationTimeInSeconds: b = at,
-      userStore: E
-    } = e;
-    if (super(e), this.popup_redirect_uri = t, this.popup_post_logout_redirect_uri = s, this.popupWindowFeatures = r, this.popupWindowTarget = n, this.redirectMethod = i, this.redirectTarget = o, this.iframeNotifyParentOrigin = c, this.iframeScriptOrigin = l, this.silent_redirect_uri = h, this.silentRequestTimeoutInSeconds = g, this.automaticSilentRenew = u, this.validateSubOnSilentRenew = S, this.includeIdTokenInSilentRenew = w, this.monitorSession = k, this.monitorAnonymousSession = _, this.checkSessionIntervalInSeconds = v, this.stopCheckSessionOnError = a, this.query_status_response_type = y, this.revokeTokenTypes = d, this.revokeTokensOnSignout = p, this.includeIdTokenInSilentSignout = m, this.accessTokenExpiringNotificationTimeInSeconds = b, E)
-      this.userStore = E;
-    else {
-      const C = typeof window < "u" ? window.sessionStorage : new we();
-      this.userStore = new me({ store: C });
-    }
-  }
-}, se = class extends ye {
-  constructor({
-    silentRequestTimeoutInSeconds: e = Ee
-  }) {
-    super(), this._logger = new f("IFrameWindow"), this._timeoutInSeconds = e, this._frame = se.createHiddenIframe(), this._window = this._frame.contentWindow;
-  }
-  static createHiddenIframe() {
-    const e = window.document.createElement("iframe");
-    return e.style.visibility = "hidden", e.style.position = "fixed", e.style.left = "-1000px", e.style.top = "0", e.width = "0", e.height = "0", e.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms"), window.document.body.appendChild(e), e;
-  }
-  async navigate(e) {
-    this._logger.debug("navigate: Using timeout of:", this._timeoutInSeconds);
-    const t = setTimeout(() => this._abort.raise(new ie("IFrame timed out without a response")), this._timeoutInSeconds * 1e3);
-    return this._disposeHandlers.add(() => clearTimeout(t)), await super.navigate(e);
-  }
-  close() {
-    var e;
-    this._frame && (this._frame.parentNode && (this._frame.addEventListener("load", (t) => {
-      var s;
-      const r = t.target;
-      (s = r.parentNode) == null || s.removeChild(r), this._abort.raise(new Error("IFrame removed from DOM"));
-    }, !0), (e = this._frame.contentWindow) == null || e.location.replace("about:blank")), this._frame = null), this._window = null;
-  }
-  static notifyParent(e, t) {
-    return super._notifyParent(window.parent, e, !1, t);
-  }
-}, dt = class {
-  constructor(e) {
-    this._settings = e, this._logger = new f("IFrameNavigator");
-  }
-  async prepare({
-    silentRequestTimeoutInSeconds: e = this._settings.silentRequestTimeoutInSeconds
-  }) {
-    return new se({ silentRequestTimeoutInSeconds: e });
-  }
-  async callback(e) {
-    this._logger.create("callback"), se.notifyParent(e, this._settings.iframeNotifyParentOrigin);
-  }
-}, ht = 500, ue = class extends ye {
-  constructor({
-    popupWindowTarget: e = ke,
-    popupWindowFeatures: t = {}
-  }) {
-    super(), this._logger = new f("PopupWindow");
-    const s = de.center({ ...be, ...t });
-    this._window = window.open(void 0, e, de.serialize(s));
-  }
-  async navigate(e) {
-    var t;
-    (t = this._window) == null || t.focus();
-    const s = setInterval(() => {
-      (!this._window || this._window.closed) && this._abort.raise(new Error("Popup closed by user"));
-    }, ht);
-    return this._disposeHandlers.add(() => clearInterval(s)), await super.navigate(e);
-  }
-  close() {
-    this._window && (this._window.closed || (this._window.close(), this._abort.raise(new Error("Popup closed")))), this._window = null;
-  }
-  static notifyOpener(e, t) {
-    if (!window.opener)
-      throw new Error("No window.opener. Can't complete notification.");
-    return super._notifyParent(window.opener, e, t);
-  }
-}, ut = class {
-  constructor(e) {
-    this._settings = e, this._logger = new f("PopupNavigator");
-  }
-  async prepare({
-    popupWindowFeatures: e = this._settings.popupWindowFeatures,
-    popupWindowTarget: t = this._settings.popupWindowTarget
-  }) {
-    return new ue({ popupWindowFeatures: e, popupWindowTarget: t });
-  }
-  async callback(e, t = !1) {
-    this._logger.create("callback"), ue.notifyOpener(e, t);
-  }
-}, gt = class {
-  constructor(e) {
-    this._settings = e, this._logger = new f("RedirectNavigator");
-  }
-  async prepare({
-    redirectMethod: e = this._settings.redirectMethod,
-    redirectTarget: t = this._settings.redirectTarget
-  }) {
-    var s;
-    this._logger.create("prepare");
-    let r = window.self;
-    t === "top" && (r = (s = window.top) != null ? s : window.self);
-    const n = r.location[e].bind(r.location);
-    let i;
-    return {
-      navigate: async (o) => {
-        this._logger.create("navigate");
-        const c = new Promise((l, h) => {
-          i = h;
-        });
-        return n(o.url), await c;
-      },
-      close: () => {
-        this._logger.create("close"), i == null || i(new Error("Redirect aborted")), r.stop();
-      }
-    };
-  }
-}, _t = class extends Fe {
-  constructor(e) {
-    super({ expiringNotificationTimeInSeconds: e.accessTokenExpiringNotificationTimeInSeconds }), this._logger = new f("UserManagerEvents"), this._userLoaded = new O("User loaded"), this._userUnloaded = new O("User unloaded"), this._silentRenewError = new O("Silent renew error"), this._userSignedIn = new O("User signed in"), this._userSignedOut = new O("User signed out"), this._userSessionChanged = new O("User session changed");
-  }
-  load(e, t = !0) {
-    super.load(e), t && this._userLoaded.raise(e);
-  }
-  unload() {
-    super.unload(), this._userUnloaded.raise();
-  }
-  /**
-   * Add callback: Raised when a user session has been established (or re-established).
-   */
-  addUserLoaded(e) {
-    return this._userLoaded.addHandler(e);
-  }
-  /**
-   * Remove callback: Raised when a user session has been established (or re-established).
-   */
-  removeUserLoaded(e) {
-    return this._userLoaded.removeHandler(e);
-  }
-  /**
-   * Add callback: Raised when a user session has been terminated.
-   */
-  addUserUnloaded(e) {
-    return this._userUnloaded.addHandler(e);
-  }
-  /**
-   * Remove callback: Raised when a user session has been terminated.
-   */
-  removeUserUnloaded(e) {
-    return this._userUnloaded.removeHandler(e);
-  }
-  /**
-   * Add callback: Raised when the automatic silent renew has failed.
-   */
-  addSilentRenewError(e) {
-    return this._silentRenewError.addHandler(e);
-  }
-  /**
-   * Remove callback: Raised when the automatic silent renew has failed.
-   */
-  removeSilentRenewError(e) {
-    return this._silentRenewError.removeHandler(e);
-  }
-  /**
-   * @internal
-   */
-  _raiseSilentRenewError(e) {
-    this._silentRenewError.raise(e);
-  }
-  /**
-   * Add callback: Raised when the user is signed in (when `monitorSession` is set).
-   * @see {@link UserManagerSettings.monitorSession}
-   */
-  addUserSignedIn(e) {
-    return this._userSignedIn.addHandler(e);
-  }
-  /**
-   * Remove callback: Raised when the user is signed in (when `monitorSession` is set).
-   */
-  removeUserSignedIn(e) {
-    this._userSignedIn.removeHandler(e);
-  }
-  /**
-   * @internal
-   */
-  _raiseUserSignedIn() {
-    this._userSignedIn.raise();
-  }
-  /**
-   * Add callback: Raised when the user's sign-in status at the OP has changed (when `monitorSession` is set).
-   * @see {@link UserManagerSettings.monitorSession}
-   */
-  addUserSignedOut(e) {
-    return this._userSignedOut.addHandler(e);
-  }
-  /**
-   * Remove callback: Raised when the user's sign-in status at the OP has changed (when `monitorSession` is set).
-   */
-  removeUserSignedOut(e) {
-    this._userSignedOut.removeHandler(e);
-  }
-  /**
-   * @internal
-   */
-  _raiseUserSignedOut() {
-    this._userSignedOut.raise();
-  }
-  /**
-   * Add callback: Raised when the user session changed (when `monitorSession` is set).
-   * @see {@link UserManagerSettings.monitorSession}
-   */
-  addUserSessionChanged(e) {
-    return this._userSessionChanged.addHandler(e);
-  }
-  /**
-   * Remove callback: Raised when the user session changed (when `monitorSession` is set).
-   */
-  removeUserSessionChanged(e) {
-    this._userSessionChanged.removeHandler(e);
-  }
-  /**
-   * @internal
-   */
-  _raiseUserSessionChanged() {
-    this._userSessionChanged.raise();
-  }
-}, pt = class {
-  constructor(e) {
-    this._userManager = e, this._logger = new f("SilentRenewService"), this._isStarted = !1, this._retryTimer = new R("Retry Silent Renew"), this._tokenExpiring = async () => {
-      const t = this._logger.create("_tokenExpiring");
-      try {
-        await this._userManager.signinSilent(), t.debug("silent token renewal successful");
-      } catch (s) {
-        if (s instanceof ie) {
-          t.warn("ErrorTimeout from signinSilent:", s, "retry in 5s"), this._retryTimer.init(5);
-          return;
-        }
-        t.error("Error from signinSilent:", s), this._userManager.events._raiseSilentRenewError(s);
-      }
-    };
-  }
-  async start() {
-    const e = this._logger.create("start");
-    if (!this._isStarted) {
-      this._isStarted = !0, this._userManager.events.addAccessTokenExpiring(this._tokenExpiring), this._retryTimer.addHandler(this._tokenExpiring);
-      try {
-        await this._userManager.getUser();
-      } catch (t) {
-        e.error("getUser error", t);
-      }
-    }
-  }
-  stop() {
-    this._isStarted && (this._retryTimer.cancel(), this._retryTimer.removeHandler(this._tokenExpiring), this._userManager.events.removeAccessTokenExpiring(this._tokenExpiring), this._isStarted = !1);
-  }
-}, ft = class {
-  constructor(e) {
-    this.refresh_token = e.refresh_token, this.id_token = e.id_token, this.session_state = e.session_state, this.scope = e.scope, this.profile = e.profile, this.data = e.state;
-  }
-}, Rt = class {
-  constructor(e) {
-    this._logger = new f("UserManager"), this.settings = new lt(e), this._client = new nt(e), this._redirectNavigator = new gt(this.settings), this._popupNavigator = new ut(this.settings), this._iframeNavigator = new dt(this.settings), this._events = new _t(this.settings), this._silentRenewService = new pt(this), this.settings.automaticSilentRenew && this.startSilentRenew(), this._sessionMonitor = null, this.settings.monitorSession && (this._sessionMonitor = new ot(this));
-  }
-  /** Returns an object used to register for events raised by the `UserManager`. */
-  get events() {
-    return this._events;
-  }
-  /** Returns an object used to access the metadata configuration of the OIDC provider. */
-  get metadataService() {
-    return this._client.metadataService;
-  }
-  /**
-   * Returns promise to load the `User` object for the currently authenticated user.
-   */
-  async getUser() {
-    const e = this._logger.create("getUser"), t = await this._loadUser();
-    return t ? (e.info("user loaded"), this._events.load(t, !1), t) : (e.info("user not found in storage"), null);
-  }
-  /**
-   * Returns promise to remove from any storage the currently authenticated user.
-   */
-  async removeUser() {
-    const e = this._logger.create("removeUser");
-    await this.storeUser(null), e.info("user removed from storage"), this._events.unload();
-  }
-  /**
-   * Returns promise to trigger a redirect of the current window to the authorization endpoint.
-   */
-  async signinRedirect(e = {}) {
-    this._logger.create("signinRedirect");
-    const {
-      redirectMethod: t,
-      ...s
-    } = e, r = await this._redirectNavigator.prepare({ redirectMethod: t });
-    await this._signinStart({
-      request_type: "si:r",
-      ...s
-    }, r);
-  }
-  /**
-   * Returns promise to process response from the authorization endpoint. The result of the promise is the authenticated `User`.
-   */
-  async signinRedirectCallback(e = window.location.href) {
-    const t = this._logger.create("signinRedirectCallback"), s = await this._signinEnd(e);
-    return s.profile && s.profile.sub ? t.info("success, signed in subject", s.profile.sub) : t.info("no subject"), s;
-  }
-  /**
-   * Returns promise to process the signin with user/password. The result of the promise is the authenticated `User`.
-   *
-   * Throws an ErrorResponse in case of wrong authentication.
-   */
-  async signinResourceOwnerCredentials({
-    username: e,
-    password: t,
-    skipUserInfo: s = !1
-  }) {
-    const r = this._logger.create("signinResourceOwnerCredential"), n = await this._client.processResourceOwnerPasswordCredentials({ username: e, password: t, skipUserInfo: s, extraTokenParams: this.settings.extraTokenParams });
-    r.debug("got signin response");
-    const i = await this._buildUser(n);
-    return i.profile && i.profile.sub ? r.info("success, signed in subject", i.profile.sub) : r.info("no subject"), i;
-  }
-  /**
-   * Returns promise to trigger a request (via a popup window) to the authorization endpoint. The result of the promise is the authenticated `User`.
-   */
-  async signinPopup(e = {}) {
-    const t = this._logger.create("signinPopup"), {
-      popupWindowFeatures: s,
-      popupWindowTarget: r,
-      ...n
-    } = e, i = this.settings.popup_redirect_uri;
-    i || t.throw(new Error("No popup_redirect_uri configured"));
-    const o = await this._popupNavigator.prepare({ popupWindowFeatures: s, popupWindowTarget: r }), c = await this._signin({
-      request_type: "si:p",
-      redirect_uri: i,
-      display: "popup",
-      ...n
-    }, o);
-    return c && (c.profile && c.profile.sub ? t.info("success, signed in subject", c.profile.sub) : t.info("no subject")), c;
-  }
-  /**
-   * Returns promise to notify the opening window of response from the authorization endpoint.
-   */
-  async signinPopupCallback(e = window.location.href, t = !1) {
-    const s = this._logger.create("signinPopupCallback");
-    await this._popupNavigator.callback(e, t), s.info("success");
-  }
-  /**
-   * Returns promise to trigger a silent request (via an iframe) to the authorization endpoint.
-   * The result of the promise is the authenticated `User`.
-   */
-  async signinSilent(e = {}) {
-    var t;
-    const s = this._logger.create("signinSilent"), {
-      silentRequestTimeoutInSeconds: r,
-      ...n
-    } = e;
-    let i = await this._loadUser();
-    if (i != null && i.refresh_token) {
-      s.debug("using refresh token");
-      const h = new ft(i);
-      return await this._useRefreshToken(h);
-    }
-    const o = this.settings.silent_redirect_uri;
-    o || s.throw(new Error("No silent_redirect_uri configured"));
-    let c;
-    i && this.settings.validateSubOnSilentRenew && (s.debug("subject prior to silent renew:", i.profile.sub), c = i.profile.sub);
-    const l = await this._iframeNavigator.prepare({ silentRequestTimeoutInSeconds: r });
-    return i = await this._signin({
-      request_type: "si:s",
-      redirect_uri: o,
-      prompt: "none",
-      id_token_hint: this.settings.includeIdTokenInSilentRenew ? i == null ? void 0 : i.id_token : void 0,
-      ...n
-    }, l, c), i && ((t = i.profile) != null && t.sub ? s.info("success, signed in subject", i.profile.sub) : s.info("no subject")), i;
-  }
-  async _useRefreshToken(e) {
-    const t = await this._client.useRefreshToken({
-      state: e,
-      timeoutInSeconds: this.settings.silentRequestTimeoutInSeconds
-    }), s = new F({ ...e, ...t });
-    return await this.storeUser(s), this._events.load(s), s;
-  }
-  /**
-   * Returns promise to notify the parent window of response from the authorization endpoint.
-   */
-  async signinSilentCallback(e = window.location.href) {
-    const t = this._logger.create("signinSilentCallback");
-    await this._iframeNavigator.callback(e), t.info("success");
-  }
-  async signinCallback(e = window.location.href) {
-    const { state: t } = await this._client.readSigninResponseState(e);
-    switch (t.request_type) {
-      case "si:r":
-        return await this.signinRedirectCallback(e);
-      case "si:p":
-        return await this.signinPopupCallback(e);
-      case "si:s":
-        return await this.signinSilentCallback(e);
-      default:
-        throw new Error("invalid response_type in state");
-    }
-  }
-  async signoutCallback(e = window.location.href, t = !1) {
-    const { state: s } = await this._client.readSignoutResponseState(e);
-    if (s)
-      switch (s.request_type) {
-        case "so:r":
-          await this.signoutRedirectCallback(e);
-          break;
-        case "so:p":
-          await this.signoutPopupCallback(e, t);
-          break;
-        case "so:s":
-          await this.signoutSilentCallback(e);
-          break;
-        default:
-          throw new Error("invalid response_type in state");
-      }
-  }
-  /**
-   * Returns promise to query OP for user's current signin status. Returns object with session_state and subject identifier.
-   */
-  async querySessionStatus(e = {}) {
-    const t = this._logger.create("querySessionStatus"), {
-      silentRequestTimeoutInSeconds: s,
-      ...r
-    } = e, n = this.settings.silent_redirect_uri;
-    n || t.throw(new Error("No silent_redirect_uri configured"));
-    const i = await this._loadUser(), o = await this._iframeNavigator.prepare({ silentRequestTimeoutInSeconds: s }), c = await this._signinStart({
-      request_type: "si:s",
-      // this acts like a signin silent
-      redirect_uri: n,
-      prompt: "none",
-      id_token_hint: this.settings.includeIdTokenInSilentRenew ? i == null ? void 0 : i.id_token : void 0,
-      response_type: this.settings.query_status_response_type,
-      scope: "openid",
-      skipUserInfo: !0,
-      ...r
-    }, o);
-    try {
-      const l = await this._client.processSigninResponse(c.url);
-      return t.debug("got signin response"), l.session_state && l.profile.sub ? (t.info("success for subject", l.profile.sub), {
-        session_state: l.session_state,
-        sub: l.profile.sub,
-        sid: l.profile.sid
-      }) : (t.info("success, user not authenticated"), null);
-    } catch (l) {
-      if (this.settings.monitorAnonymousSession && l instanceof j)
-        switch (l.error) {
-          case "login_required":
-          case "consent_required":
-          case "interaction_required":
-          case "account_selection_required":
-            return t.info("success for anonymous user"), {
-              // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
-              session_state: l.session_state
-            };
-        }
-      throw l;
-    }
-  }
-  async _signin(e, t, s) {
-    const r = await this._signinStart(e, t);
-    return await this._signinEnd(r.url, s);
-  }
-  async _signinStart(e, t) {
-    const s = this._logger.create("_signinStart");
-    try {
-      const r = await this._client.createSigninRequest(e);
-      return s.debug("got signin request"), await t.navigate({
-        url: r.url,
-        state: r.state.id,
-        response_mode: r.state.response_mode,
-        scriptOrigin: this.settings.iframeScriptOrigin
-      });
-    } catch (r) {
-      throw s.debug("error after preparing navigator, closing navigator window"), t.close(), r;
-    }
-  }
-  async _signinEnd(e, t) {
-    const s = this._logger.create("_signinEnd"), r = await this._client.processSigninResponse(e);
-    return s.debug("got signin response"), await this._buildUser(r, t);
-  }
-  async _buildUser(e, t) {
-    const s = this._logger.create("_buildUser"), r = new F(e);
-    if (t) {
-      if (t !== r.profile.sub)
-        throw s.debug("current user does not match user returned from signin. sub from signin:", r.profile.sub), new j({ ...e, error: "login_required" });
-      s.debug("current user matches user returned from signin");
-    }
-    return await this.storeUser(r), s.debug("user stored"), this._events.load(r), r;
-  }
-  /**
-   * Returns promise to trigger a redirect of the current window to the end session endpoint.
-   */
-  async signoutRedirect(e = {}) {
-    const t = this._logger.create("signoutRedirect"), {
-      redirectMethod: s,
-      ...r
-    } = e, n = await this._redirectNavigator.prepare({ redirectMethod: s });
-    await this._signoutStart({
-      request_type: "so:r",
-      post_logout_redirect_uri: this.settings.post_logout_redirect_uri,
-      ...r
-    }, n), t.info("success");
-  }
-  /**
-   * Returns promise to process response from the end session endpoint.
-   */
-  async signoutRedirectCallback(e = window.location.href) {
-    const t = this._logger.create("signoutRedirectCallback"), s = await this._signoutEnd(e);
-    return t.info("success"), s;
-  }
-  /**
-   * Returns promise to trigger a redirect of a popup window window to the end session endpoint.
-   */
-  async signoutPopup(e = {}) {
-    const t = this._logger.create("signoutPopup"), {
-      popupWindowFeatures: s,
-      popupWindowTarget: r,
-      ...n
-    } = e, i = this.settings.popup_post_logout_redirect_uri, o = await this._popupNavigator.prepare({ popupWindowFeatures: s, popupWindowTarget: r });
-    await this._signout({
-      request_type: "so:p",
-      post_logout_redirect_uri: i,
-      // we're putting a dummy entry in here because we
-      // need a unique id from the state for notification
-      // to the parent window, which is necessary if we
-      // plan to return back to the client after signout
-      // and so we can close the popup after signout
-      state: i == null ? void 0 : {},
-      ...n
-    }, o), t.info("success");
-  }
-  /**
-   * Returns promise to process response from the end session endpoint from a popup window.
-   */
-  async signoutPopupCallback(e = window.location.href, t = !1) {
-    const s = this._logger.create("signoutPopupCallback");
-    await this._popupNavigator.callback(e, t), s.info("success");
-  }
-  async _signout(e, t) {
-    const s = await this._signoutStart(e, t);
-    return await this._signoutEnd(s.url);
-  }
-  async _signoutStart(e = {}, t) {
-    var s;
-    const r = this._logger.create("_signoutStart");
-    try {
-      const n = await this._loadUser();
-      r.debug("loaded current user from storage"), this.settings.revokeTokensOnSignout && await this._revokeInternal(n);
-      const i = e.id_token_hint || n && n.id_token;
-      i && (r.debug("setting id_token_hint in signout request"), e.id_token_hint = i), await this.removeUser(), r.debug("user removed, creating signout request");
-      const o = await this._client.createSignoutRequest(e);
-      return r.debug("got signout request"), await t.navigate({
-        url: o.url,
-        state: (s = o.state) == null ? void 0 : s.id
-      });
-    } catch (n) {
-      throw r.debug("error after preparing navigator, closing navigator window"), t.close(), n;
-    }
-  }
-  async _signoutEnd(e) {
-    const t = this._logger.create("_signoutEnd"), s = await this._client.processSignoutResponse(e);
-    return t.debug("got signout response"), s;
-  }
-  /**
-   * Returns promise to trigger a silent request (via an iframe) to the end session endpoint.
-   */
-  async signoutSilent(e = {}) {
-    var t;
-    const s = this._logger.create("signoutSilent"), {
-      silentRequestTimeoutInSeconds: r,
-      ...n
-    } = e, i = this.settings.includeIdTokenInSilentSignout ? (t = await this._loadUser()) == null ? void 0 : t.id_token : void 0, o = this.settings.popup_post_logout_redirect_uri, c = await this._iframeNavigator.prepare({ silentRequestTimeoutInSeconds: r });
-    await this._signout({
-      request_type: "so:s",
-      post_logout_redirect_uri: o,
-      id_token_hint: i,
-      ...n
-    }, c), s.info("success");
-  }
-  /**
-   * Returns promise to notify the parent window of response from the end session endpoint.
-   */
-  async signoutSilentCallback(e = window.location.href) {
-    const t = this._logger.create("signoutSilentCallback");
-    await this._iframeNavigator.callback(e), t.info("success");
-  }
-  async revokeTokens(e) {
-    const t = await this._loadUser();
-    await this._revokeInternal(t, e);
-  }
-  async _revokeInternal(e, t = this.settings.revokeTokenTypes) {
-    const s = this._logger.create("_revokeInternal");
-    if (!e)
-      return;
-    const r = t.filter((n) => typeof e[n] == "string");
-    if (!r.length) {
-      s.debug("no need to revoke due to no token(s)");
-      return;
-    }
-    for (const n of r)
-      await this._client.revokeToken(
-        e[n],
-        // eslint-disable-line @typescript-eslint/no-non-null-assertion
-        n
-      ), s.info(`${n} revoked successfully`), n !== "access_token" && (e[n] = null);
-    await this.storeUser(e), s.debug("user stored"), this._events.load(e);
-  }
-  /**
-   * Enables silent renew for the `UserManager`.
-   */
-  startSilentRenew() {
-    this._logger.create("startSilentRenew"), this._silentRenewService.start();
-  }
-  /**
-   * Disables silent renew for the `UserManager`.
-   */
-  stopSilentRenew() {
-    this._silentRenewService.stop();
-  }
-  get _userStoreKey() {
-    return `user:${this.settings.authority}:${this.settings.client_id}`;
-  }
-  async _loadUser() {
-    const e = this._logger.create("_loadUser"), t = await this.settings.userStore.get(this._userStoreKey);
-    return t ? (e.debug("user storageString loaded"), F.fromStorageString(t)) : (e.debug("no user storageString"), null);
-  }
-  async storeUser(e) {
-    const t = this._logger.create("storeUser");
-    if (e) {
-      t.debug("storing user");
-      const s = e.toStorageString();
-      await this.settings.userStore.set(this._userStoreKey, s);
-    } else
-      this._logger.debug("removing user"), await this.settings.userStore.remove(this._userStoreKey);
-  }
-  /**
-   * Removes stale state entries in storage for incomplete authorize requests.
-   */
-  async clearStaleState() {
-    await this._client.clearStaleState();
-  }
-}, wt = "2.2.2", Tt = wt;
-class B extends Error {
-}
-B.prototype.name = "InvalidTokenError";
-function mt(e) {
-  return decodeURIComponent(atob(e).replace(/(.)/g, (t, s) => {
-    let r = s.charCodeAt(0).toString(16).toUpperCase();
-    return r.length < 2 && (r = "0" + r), "%" + r;
-  }));
-}
-function vt(e) {
-  let t = e.replace(/-/g, "+").replace(/_/g, "/");
-  switch (t.length % 4) {
-    case 0:
-      break;
-    case 2:
-      t += "==";
-      break;
-    case 3:
-      t += "=";
-      break;
-    default:
-      throw new Error("base64 string is not of the correct length");
-  }
-  try {
-    return mt(t);
-  } catch {
-    return atob(t);
-  }
-}
-function St(e, t) {
-  if (typeof e != "string")
-    throw new B("Invalid token specified: must be a string");
-  t || (t = {});
-  const s = t.header === !0 ? 0 : 1, r = e.split(".")[s];
-  if (typeof r != "string")
-    throw new B(`Invalid token specified: missing part #${s + 1}`);
-  let n;
-  try {
-    n = vt(r);
-  } catch (i) {
-    throw new B(`Invalid token specified: invalid base64 for part #${s + 1} (${i.message})`);
-  }
-  try {
-    return JSON.parse(n);
-  } catch (i) {
-    throw new B(`Invalid token specified: invalid json for part #${s + 1} (${i.message})`);
-  }
-}
-const Ce = ge(
+import { jsx as C } from "react/jsx-runtime";
+import { createContext as S, useContext as p, useMemo as x, useEffect as d, useState as I, useRef as v, useCallback as h } from "react";
+export * from "oidc-client-ts";
+import U from "use-local-storage-state";
+import { jwtDecode as E } from "jwt-decode";
+const w = S(
   null
-), yt = () => {
-  const e = _e(Ce);
+), k = () => {
+  const e = p(w);
   if (!e)
     throw new Error(
       "useImpersonationContext must be used within a ImpersonationContextProvider"
     );
   return e;
-}, Ut = ({
+}, O = ({
   children: e
 }) => {
-  const [t, s] = Re("impersonationState", {
+  const [t, c] = U("impersonationState", {
     defaultValue: {}
-  }), r = pe(() => ({
+  }), s = x(() => ({
     accessToken: t == null ? void 0 : t.accessToken,
     userInfo: t == null ? void 0 : t.userInfo,
-    setImpersonation: (n, i) => {
-      s({ accessToken: n, userInfo: i });
+    setImpersonation: (n, o) => {
+      c({ accessToken: n, userInfo: o });
     }
   }), []);
-  return /* @__PURE__ */ re(Ce.Provider, { value: r, children: e });
-}, At = (e) => {
-  const { setImpersonation: t } = yt();
-  $(() => {
-    const { search: s } = window.location, r = new URLSearchParams(s).get(
+  return /* @__PURE__ */ C(w.Provider, { value: s, children: e });
+}, F = (e) => {
+  const { setImpersonation: t } = k();
+  d(() => {
+    const { search: c } = window.location, s = new URLSearchParams(c).get(
       "impersonateAccessToken"
     );
-    if (r && t) {
-      const n = St(r);
-      t(r, n), e();
+    if (s && t) {
+      const n = E(s);
+      t(s, n), e();
     }
   }, []);
 };
-function Pt(e) {
-  return JSON.parse(e).map((r) => {
+function j(e) {
+  return JSON.parse(e).map((s) => {
     const [
       n,
-      i,
       o,
-      c,
-      l
-    ] = r.split("|"), h = c.split(",");
+      a,
+      i,
+      m
+    ] = s.split("|"), r = i.split(",");
     return {
       CustomerExternalId: n,
-      CustomerFirmId: i,
-      CustomerFirmName: o,
-      CustomerUserRoles: h,
-      CustomerUserIsAdmin: l === "True"
+      CustomerFirmId: o,
+      CustomerFirmName: a,
+      CustomerUserRoles: r,
+      CustomerUserIsAdmin: m === "True"
     };
   });
 }
-const Ot = [
+const z = [
   "97",
   "131",
   "132",
   "141"
-], qt = [
+], N = [
   "3"
-], Nt = [
+], V = [
   "0"
-], bt = ({
+], L = ({
   userManager: e,
   context: t,
-  children: s
+  children: c
 }) => {
-  const [r, n] = Ie({
+  const [s, n] = I({
     user: null,
     isLoading: !0,
     isAuthenticated: !1,
     isError: !1,
     error: null
-  }), i = fe(!1);
-  $(() => {
-    i.current || (i.current = !0, (async () => {
+  }), o = v(!1);
+  d(() => {
+    o.current || (o.current = !0, (async () => {
       try {
-        const h = await e.getUser();
+        const r = await e.getUser();
         n({
-          user: h,
+          user: r,
           isLoading: !1,
-          isAuthenticated: h ? !h.expired : !1,
+          isAuthenticated: r ? !r.expired : !1,
           isError: !1,
           error: null
         });
-      } catch (h) {
+      } catch (r) {
         n({
           user: null,
           isLoading: !1,
           isAuthenticated: !1,
           isError: !0,
-          error: h instanceof Error ? h : new Error("Unknown error during auth")
+          error: r instanceof Error ? r : new Error("Unknown error during auth")
         });
       }
     })());
-  }, [e]), $(() => {
-    const h = (S) => {
+  }, [e]), d(() => {
+    const r = (l) => {
       n({
-        user: S,
+        user: l,
         isLoading: !1,
-        isAuthenticated: !S.expired,
+        isAuthenticated: !l.expired,
         isError: !1,
         error: null
       });
     };
-    e.events.addUserLoaded(h);
-    const g = () => {
+    e.events.addUserLoaded(r);
+    const u = () => {
       n({
-        ...r,
+        ...s,
         user: null,
         isAuthenticated: !1
       });
     };
-    e.events.addUserUnloaded(g);
-    const u = (S) => {
+    e.events.addUserUnloaded(u);
+    const f = (l) => {
       n({
-        ...r,
+        ...s,
         isLoading: !1,
         isError: !0,
-        error: S
+        error: l
       });
     };
-    return e.events.addSilentRenewError(u), () => {
-      e.events.removeUserLoaded(h), e.events.removeUserUnloaded(g), e.events.removeSilentRenewError(u);
+    return e.events.addSilentRenewError(f), () => {
+      e.events.removeUserLoaded(r), e.events.removeUserUnloaded(u), e.events.removeSilentRenewError(f);
     };
   }, [e]);
-  const o = ce(async () => {
-    const h = await e.signinCallback();
+  const a = h(async () => {
+    const r = await e.signinCallback();
     return n({
-      user: h ?? null,
+      user: r ?? null,
       isLoading: !1,
-      isAuthenticated: h ? !h.expired : !1,
+      isAuthenticated: r ? !r.expired : !1,
       isError: !1,
       error: null
-    }), h ?? void 0;
-  }, [e]), c = ce(
-    async (h) => {
+    }), r ?? void 0;
+  }, [e]), i = h(
+    async (r) => {
       try {
-        await e.signinRedirect(h);
-      } catch (g) {
-        console.error(g);
+        await e.signinRedirect(r);
+      } catch (u) {
+        console.error(u);
       }
     },
     [e]
-  ), l = pe(
+  ), m = x(
     () => ({
-      state: r,
-      handleSigninCallback: o,
-      redirectToSignin: c
+      state: s,
+      handleSigninCallback: a,
+      redirectToSignin: i
     }),
-    [r, o, c]
+    [s, a, i]
   );
-  return /* @__PURE__ */ re(t.Provider, { value: l, children: s });
-}, ae = (e) => {
-  const t = _e(e);
+  return /* @__PURE__ */ C(t.Provider, { value: m, children: c });
+}, A = (e) => {
+  const t = p(e);
   if (!t)
     throw new Error("useAuthContext must be used within an AuthProvider");
   return t;
-}, kt = (e) => {
-  const { state: t } = ae(e);
+}, P = (e) => {
+  const { state: t } = A(e);
   return t;
-}, Et = (e, t) => {
-  const { state: s, handleSigninCallback: r } = ae(e), n = fe(!1);
-  return $(() => {
-    n.current || (n.current = !0, r().then(
-      (i) => new Promise(
-        (o) => setTimeout(() => o(i), 0)
+}, R = (e, t) => {
+  const { state: c, handleSigninCallback: s } = A(e), n = v(!1);
+  return d(() => {
+    n.current || (n.current = !0, s().then(
+      (o) => new Promise(
+        (a) => setTimeout(() => a(o), 0)
       )
-    ).then((i) => t == null ? void 0 : t(i)));
-  }, [r]), s;
-}, jt = (e) => {
-  const t = ge(null);
+    ).then((o) => t == null ? void 0 : t(o)));
+  }, [s]), c;
+}, J = (e) => {
+  const t = S(null);
   return {
     AuthContext: t,
-    AuthProvider: ({ children: c }) => /* @__PURE__ */ re(bt, { userManager: e, context: t, children: c }),
-    useAuthContext: () => ae(t),
-    useAuthState: () => kt(t),
-    useSigninCallback: (c) => Et(t, c),
+    AuthProvider: ({ children: i }) => /* @__PURE__ */ C(L, { userManager: e, context: t, children: i }),
+    useAuthContext: () => A(t),
+    useAuthState: () => P(t),
+    useSigninCallback: (i) => R(t, i),
     getAccessToken: async () => {
-      const c = await e.getUser();
-      return c ? c.access_token : null;
+      const i = await e.getUser();
+      return i ? i.access_token : null;
     }
   };
 };
 export {
-  Fe as AccessTokenEvents,
-  $e as CheckSessionIFrame,
-  j as ErrorResponse,
-  ie as ErrorTimeout,
-  Ut as ImpersonationContextProvider,
-  we as InMemoryWebStorage,
-  J as Log,
-  f as Logger,
-  ze as MetadataService,
-  nt as OidcClient,
-  ve as OidcClientSettingsStore,
-  Ot as ROLESAdminInCompany,
-  Nt as ROLESAnsatt,
-  qt as ROLESMAKSAdministrator,
-  ot as SessionMonitor,
-  Q as SigninResponse,
-  oe as SigninState,
-  it as SignoutResponse,
-  H as State,
-  F as User,
-  Rt as UserManager,
-  lt as UserManagerSettingsStore,
-  Tt as Version,
-  me as WebStorageStateStore,
-  jt as createAuthContext,
-  Pt as parseUserProfileFCString,
-  At as useImpersonationCallback,
-  yt as useImpersonationContext
+  O as ImpersonationContextProvider,
+  z as ROLESAdminInCompany,
+  V as ROLESAnsatt,
+  N as ROLESMAKSAdministrator,
+  J as createAuthContext,
+  j as parseUserProfileFCString,
+  F as useImpersonationCallback,
+  k as useImpersonationContext
 };