@asgardeo/javascript 0.0.1

package/dist/cjs/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/index.ts", "../../src/constants/PKCEConstants.ts", "../../src/utils/extractPkceStorageKeyFromState.ts", "../../src/utils/generateStateParamForRequestCorrelation.ts", "../../src/__legacy__/exception/exception.ts", "../../src/utils/extractTenantDomainFromIdTokenPayload.ts", "../../src/utils/extractUserClaimsFromIdToken.ts", "../../src/constants/ScopeConstants.ts", "../../src/constants/OIDCDiscoveryConstants.ts", "../../src/constants/TokenExchangeConstants.ts", "../../src/__legacy__/helpers/authentication-helper.ts", "../../src/utils/generatePkceStorageKey.ts", "../../src/constants/OIDCRequestConstants.ts", "../../src/constants/TokenConstants.ts", "../../src/IsomorphicCrypto.ts", "../../src/__legacy__/core/authentication-core.ts", "../../src/__legacy__/data/data-layer.ts", "../../src/models/oauth-response.ts", "../../src/__legacy__/client.ts", "../../src/errors/AsgardeoError.ts", "../../src/errors/AsgardeoAPIError.ts", "../../src/api/oidc/getUserInfo.ts", "../../src/errors/AsgardeoRuntimeError.ts", "../../src/models/scim2-schema.ts", "../../src/AsgardeoJavaScriptClient.ts", "../../src/theme/createTheme.ts", "../../src/utils/removeTrailingSlash.ts"],
+  "sourcesContent": ["/**\n * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport * from './__legacy__/client';\nexport * from './__legacy__/models';\nexport * from './models/oauth-response';\nexport * from './IsomorphicCrypto';\nexport * from './__legacy__/exception';\nexport * from './__legacy__/data';\n\nexport {default as getUserInfo} from './api/oidc/getUserInfo';\n\nexport {default as TokenConstants} from './constants/TokenConstants';\nexport {default as OIDCRequestConstants} from './constants/OIDCRequestConstants';\n\nexport {default as AsgardeoError} from './errors/AsgardeoError';\nexport {default as AsgardeoAPIError} from './errors/AsgardeoAPIError';\nexport {default as AsgardeoRuntimeError} from './errors/AsgardeoRuntimeError';\n\nexport {AsgardeoClient, SignInOptions, SignOutOptions} from './models/client';\nexport {BaseConfig, Config, Preferences, ThemePreferences} from './models/config';\nexport {TokenResponse} from './models/token';\nexport {Crypto, JWKInterface} from './models/crypto';\nexport {IdTokenPayload} from './models/id-token';\nexport {OIDCEndpoints} from './models/oidc-endpoints';\nexport {Store} from './models/store';\nexport {User} from './models/user';\nexport {Schema, SchemaAttribute, WellKnownSchemaIds} from './models/scim2-schema';\nexport {RecursivePartial} from './models/utility-types';\n\nexport {default as AsgardeoJavaScriptClient} from './AsgardeoJavaScriptClient';\n\nexport {default as createTheme} from './theme/createTheme';\nexport {ThemeColors, ThemeConfig, Theme, ThemeMode} from './theme/types';\n\nexport {default as extractUserClaimsFromIdToken} from './utils/extractUserClaimsFromIdToken';\nexport {default as extractPkceStorageKeyFromState} from './utils/extractPkceStorageKeyFromState';\nexport {default as removeTrailingSlash} from './utils/removeTrailingSlash';\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n/**\n * Constants related to Proof Key for Code Exchange (PKCE) implementation.\n * This object contains all the necessary constants for implementing PKCE\n * flow in the OAuth 2.0 authorization code grant.\n *\n * @remarks\n * PKCE is an extension to the authorization code flow to prevent CSRF and\n * authorization code injection attacks. The constants are organized into\n * storage-related sections for managing PKCE state.\n *\n * @example\n * ```typescript\n * // Using storage keys\n * const codeVerifierKey = PKCEConstants.Storage.StorageKeys.CODE_VERIFIER;\n * const separator = PKCEConstants.Storage.StorageKeys.SEPARATOR;\n * ```\n */\nconst PKCEConstants = {\n  /**\n   * Storage-related constants for managing PKCE state\n   */\n  Storage: {\n    /**\n     * Collection of storage keys used in PKCE implementation\n     */\n    StorageKeys: {\n      /**\n       * Key used to store the PKCE code verifier in temporary storage.\n       * The code verifier is a cryptographically random string that is\n       * used to generate the code challenge.\n       */\n      CODE_VERIFIER: 'pkce_code_verifier',\n\n      /**\n       * Separator used in storage keys to create unique identifiers\n       * by combining different parts of the key.\n       */\n      SEPARATOR: '#',\n    },\n  },\n} as const;\n\nexport default PKCEConstants;\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport PKCEConstants from '../constants/PKCEConstants';\n\n/**\n * Extracts the PKCE key from a state parameter string.\n *\n * @param state - The state parameter string containing the request index.\n * @returns The PKCE key string in the format `pkce_code_verifier_${index}`.\n *\n * @example\n * ```typescript\n * const state = \"request_1\";\n * const pkceKey = extractPkceStorageKeyFromState(state);\n * // Returns: \"pkce_code_verifier_1\"\n * ```\n */\nconst extractPkceStorageKeyFromState = (state: string): string => {\n  const index: number = parseInt(state.split('request_')[1]);\n\n  return `${PKCEConstants.Storage.StorageKeys.CODE_VERIFIER}${PKCEConstants.Storage.StorageKeys.SEPARATOR}${index}`;\n};\n\nexport default extractPkceStorageKeyFromState;\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport PKCEConstants from '../constants/PKCEConstants';\n\n/**\n * Generates a state parameter for request correlation by combining an optional state string with a request index.\n *\n * @param pkceKey - The PKCE key containing the index (format: 'pkce_code_verifier_[index]').\n * @param state - Optional state string to prepend to the request correlation.\n * @returns A state parameter string in the format '[state_]request_[index]'.\n *\n * @example\n * const pkceKey = \"pkce_code_verifier_1\";\n * const result = generateStateParamForRequestCorrelation(pkceKey, \"myState\");\n * // Returns: \"myState_request_1\"\n *\n * const resultNoState = generateStateParamForRequestCorrelation(pkceKey);\n * // Returns: \"request_1\"\n */\nconst generateStateParamForRequestCorrelation = (pkceKey: string, state?: string): string => {\n  const index: number = parseInt(pkceKey.split(PKCEConstants.Storage.StorageKeys.SEPARATOR)[1]);\n\n  return state ? `${state}_request_${index}` : `request_${index}`;\n};\n\nexport default generateStateParamForRequestCorrelation;\n", "/**\n * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport class AsgardeoAuthException {\n    public name: string;\n    public code: string | undefined;\n    public message: string;\n\n    public constructor(\n        code: string,\n        name: string,\n        message: string\n    ) {\n        this.message = message;\n        this.name = name;\n        this.code = code;\n        Object.setPrototypeOf(this, new.target.prototype);\n    }\n}\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {IdTokenPayload} from '../models/id-token';\n\n/**\n * Extracts the tenant domain from the ID token payload.\n *\n * @deprecated since v1.0.6 \u2014 This utility assumes a legacy tenant extraction pattern from the `sub` claim,\n * which may not be reliable. Will be removed in a future version.\n *\n * @param payload - The ID token payload containing the `sub` claim.\n * @param subjectSeparator - The separator used in the `sub` claim to split the user identifier and tenant domain.\n *\n * Consider extracting the tenant domain using a dedicated claim (e.g., `tenant_domain`) when available.\n */\nconst extractTenantDomainFromIdTokenPayload = (payload: IdTokenPayload, subjectSeparator: string = '@'): string => {\n  const uid: string = payload.sub;\n\n  if (!uid) return '';\n\n  const tokens: string[] = uid.split(subjectSeparator);\n\n  // This pattern assumes a format like: `<username>@<something>@<tenant_domain>`\n  return tokens.length > 2 ? tokens[tokens.length - 1] : '';\n};\n\nexport default extractTenantDomainFromIdTokenPayload;\n", "/**\n * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {IdTokenPayload} from '../models/id-token';\n\n/**\n * Removes standard protocol-specific claims from the ID token payload\n * and returns a camelCased object of user-specific claims.\n *\n * @param payload The raw ID token payload.\n * @returns A cleaned-up, camelCased object containing only user-specific claims.\n * \n * @example\n * ````typescript\n * const idTokenPayload = {\n *   iss: 'https://example.com',\n *   aud: 'client_id',\n *   exp: 1712345678,\n *   iat: 1712345670,\n *   email: 'user@example.com'\n *  };\n * \n * const userClaims = extractUserClaimsFromIdToken(idTokenPayload);\n * // // userClaims will be:\n * // {\n * //   email: 'user@example.com'\n * // }\n * ```\n */\nconst extractUserClaimsFromIdToken = (payload: IdTokenPayload): Record<string, unknown> => {\n  const filteredPayload: Partial<IdTokenPayload> = {...payload};\n\n  const protocolClaims = [\n    'iss',\n    'aud',\n    'exp',\n    'iat',\n    'acr',\n    'amr',\n    'azp',\n    'auth_time',\n    'nonce',\n    'c_hash',\n    'at_hash',\n    'nbf',\n    'isk',\n    'sid',\n    'jti',\n    'sub',\n  ];\n\n  protocolClaims.forEach(claim => {\n    delete filteredPayload[claim as keyof IdTokenPayload];\n  });\n\n  const userClaims: Record<string, unknown> = {};\n\n  Object.entries(filteredPayload).forEach(([key, value]) => {\n    const camelCasedKey = key\n      .split('_')\n      .map((part, i) => (i === 0 ? part : part[0].toUpperCase() + part.slice(1)))\n      .join('');\n\n    userClaims[camelCasedKey] = value;\n  });\n\n  return userClaims;\n};\n\nexport default extractUserClaimsFromIdToken;\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n/**\n * Constants for OAuth 2.0 and OpenID Connect scopes.\n * These scopes define the level of access that the client application\n * is requesting from the authorization server.\n *\n * @remarks\n * Scopes are space-separated strings that represent different permissions.\n * The 'openid' scope is required for OpenID Connect flows, while other\n * scopes provide access to different resources or user information.\n *\n * @example\n * ```typescript\n * // Requesting OpenID Connect authentication\n * const scope = [ScopeConstants.OPENID];\n * \n * // Requesting profile information\n * const scopes = [ScopeConstants.OPENID, ScopeConstants.PROFILE];\n * ```\n */\nconst ScopeConstants = {\n  /**\n   * The base OpenID Connect scope.\n   * Required for all OpenID Connect flows. Indicates that the client\n   * is initiating an OpenID Connect authentication request.\n   */\n  OPENID: 'openid',\n} as const;\n\nexport default ScopeConstants;\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n/**\n * Constants related to OpenID Connect (OIDC) metadata and endpoints.\n * This object contains all the standard OIDC endpoints and storage keys\n * used throughout the application for authentication and authorization.\n *\n * @remarks\n * The constants are organized into two main sections:\n * 1. Endpoints - Contains all OIDC standard endpoint paths\n * 2. Storage - Contains keys used for storing OIDC-related data\n *\n * @example\n * ```typescript\n * // Using an endpoint\n * const authEndpoint = OIDCDiscoveryConstants.Endpoints.AUTHORIZATION;\n *\n * // Using a storage key\n * const tokenKey = OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.TOKEN;\n * ```\n */\nconst OIDCDiscoveryConstants = {\n  /**\n   * Collection of standard OIDC endpoint paths used for authentication flows.\n   * These endpoints are relative paths that should be appended to the base URL\n   * of your identity provider.\n   */\n\n  Endpoints: {\n    /**\n     * Authorization endpoint for initiating the OAuth2/OIDC flow.\n     * This endpoint is used to request authorization and receive an authorization code.\n     */\n    AUTHORIZATION: '/oauth2/authorize',\n\n    /**\n     * Session check iframe endpoint for session management.\n     * Used to monitor the user's session state through a hidden iframe.\n     */\n    SESSION_IFRAME: '/oidc/checksession',\n\n    /**\n     * End session endpoint for logout functionality.\n     * Used to terminate the user's session and perform logout operations.\n     */\n    END_SESSION: '/oidc/logout',\n\n    /**\n     * Token issuer endpoint.\n     * The endpoint that issues OAuth2/OIDC tokens.\n     */\n    ISSUER: '/oauth2/token',\n\n    /**\n     * JSON Web Key Set endpoint for key validation.\n     * Provides the public keys used to verify token signatures.\n     */\n    JWKS: '/oauth2/jwks',\n\n    /**\n     * Token revocation endpoint.\n     * Used to invalidate access or refresh tokens before they expire.\n     */\n    REVOCATION: '/oauth2/revoke',\n\n    /**\n     * Token endpoint for obtaining access tokens.\n     * Used to exchange authorization codes for access tokens and refresh tokens.\n     */\n    TOKEN: '/oauth2/token',\n\n    /**\n     * UserInfo endpoint for obtaining user claims.\n     * Provides authenticated user information when called with a valid access token.\n     */\n    USERINFO: '/oauth2/userinfo',\n  },\n\n  /**\n   * Storage related constants used for maintaining OIDC state.\n   * These constants define the keys used to store OIDC-related data\n   * in the browser's storage mechanisms.\n   */\n\n  Storage: {\n    /**\n     * Storage keys for various OIDC endpoints and configurations.\n     * These keys are used to store endpoint URLs and configuration\n     * states in the browser's storage.\n     */\n\n    StorageKeys: {\n      /**\n       * Collection of storage keys for OIDC endpoints.\n       * These keys are used to store the discovered endpoint URLs\n       * from the OpenID Provider's configuration.\n       */\n\n      Endpoints: {\n        /**\n         * Storage key for the authorization endpoint URL.\n         * Used to store the URL where authorization requests should be sent.\n         */\n        AUTHORIZATION: 'authorization_endpoint',\n\n        /**\n         * Storage key for the token endpoint URL.\n         * Used to store the URL where token requests should be sent.\n         */\n        TOKEN: 'token_endpoint',\n\n        /**\n         * Storage key for the revocation endpoint URL.\n         * Used to store the URL where token revocation requests should be sent.\n         */\n        REVOCATION: 'revocation_endpoint',\n\n        /**\n         * Storage key for the end session endpoint URL.\n         * Used to store the URL where logout requests should be sent.\n         */\n        END_SESSION: 'end_session_endpoint',\n\n        /**\n         * Storage key for the JWKS URI endpoint URL.\n         * Used to store the URL where JSON Web Key Sets can be retrieved.\n         */\n        JWKS: 'jwks_uri',\n\n        /**\n         * Storage key for the session check iframe URL.\n         * Used to store the URL of the iframe used for session state monitoring.\n         */\n        SESSION_IFRAME: 'check_session_iframe',\n\n        /**\n         * Storage key for the issuer identifier URL.\n         * Used to store the URL that identifies the OpenID Provider.\n         */\n        ISSUER: 'issuer',\n\n        /**\n         * Storage key for the userinfo endpoint URL.\n         * Used to store the URL where user information can be retrieved.\n         */\n        USERINFO: 'userinfo_endpoint',\n      },\n\n      /**\n       * Flag to track if OpenID Provider configuration is initiated.\n       * Used to determine if the OIDC discovery process has been started.\n       * This helps prevent duplicate initialization attempts.\n       */\n      OPENID_PROVIDER_CONFIG_INITIATED: 'op_config_initiated',\n    },\n  },\n} as const;\n\nexport default OIDCDiscoveryConstants;\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n/**\n * Constants for OAuth 2.0 Token Exchange operations.\n * This object contains placeholders used in token exchange requests\n * and responses for dynamic value substitution.\n *\n * @remarks\n * These placeholders are used in token exchange templates and are replaced\n * with actual values during request processing. They help in creating\n * flexible and reusable token exchange configurations.\n *\n * @example\n * ```typescript\n * // Using placeholders in a token exchange template\n * const template = `grant_type=urn:ietf:params:oauth:grant-type:token-exchange&subject_token=${TokenExchangeConstants.Placeholders.TOKEN}`;\n * ```\n */\nconst TokenExchangeConstants = {\n  /**\n   * Collection of placeholder strings used in token exchange operations.\n   * These placeholders are replaced with actual values when processing\n   * token exchange requests.\n   */\n  Placeholders: {\n    /**\n     * Placeholder for the token value in exchange requests.\n     * Usually replaced with an access token or refresh token.\n     */\n    TOKEN: '{{token}}',\n\n    /**\n     * Placeholder for the username in token exchange operations.\n     * Used when user identity needs to be included in the exchange.\n     */\n    USERNAME: '{{username}}',\n\n    /**\n     * Placeholder for OAuth scopes in token exchange requests.\n     * Replaced with space-separated scope strings.\n     */\n    SCOPE: '{{scope}}',\n\n    /**\n     * Placeholder for client ID in token exchange operations.\n     * Required for client authentication.\n     */\n    CLIENT_ID: '{{clientID}}',\n\n    /**\n     * Placeholder for client secret in token exchange operations.\n     * Used for client authentication in confidential client flows.\n     */\n    CLIENT_SECRET: '{{clientSecret}}',\n  },\n} as const;\n\nexport default TokenExchangeConstants;\n", "/**\n * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {IsomorphicCrypto} from '../../IsomorphicCrypto';\nimport {DataLayer} from '../data';\nimport {AsgardeoAuthException} from '../exception';\nimport {AuthClientConfig, AuthenticatedUserInfo, SessionData, StrictAuthClientConfig} from '../models';\nimport {JWKInterface} from '../../models/crypto';\nimport {TokenResponse, AccessTokenApiResponse} from '../../models/token';\nimport {IdTokenPayload} from '../../models/id-token';\nimport PKCEConstants from '../../constants/PKCEConstants';\nimport extractTenantDomainFromIdTokenPayload from '../../utils/extractTenantDomainFromIdTokenPayload';\nimport extractUserClaimsFromIdToken from '../../utils/extractUserClaimsFromIdToken';\nimport ScopeConstants from '../../constants/ScopeConstants';\nimport OIDCDiscoveryConstants from '../../constants/OIDCDiscoveryConstants';\nimport TokenExchangeConstants from '../../constants/TokenExchangeConstants';\nimport {OIDCDiscoveryEndpointsApiResponse, OIDCDiscoveryApiResponse} from '../../models/oidc-discovery';\n\nexport class AuthenticationHelper<T> {\n  private _dataLayer: DataLayer<T>;\n  private _config: () => Promise<AuthClientConfig>;\n  private _oidcProviderMetaData: () => Promise<OIDCDiscoveryApiResponse>;\n  private _cryptoHelper: IsomorphicCrypto;\n\n  public constructor(dataLayer: DataLayer<T>, cryptoHelper: IsomorphicCrypto) {\n    this._dataLayer = dataLayer;\n    this._config = async () => await this._dataLayer.getConfigData();\n    this._oidcProviderMetaData = async () => await this._dataLayer.getOIDCProviderMetaData();\n    this._cryptoHelper = cryptoHelper;\n  }\n\n  public async resolveEndpoints(response: OIDCDiscoveryApiResponse): Promise<OIDCDiscoveryApiResponse> {\n    const oidcProviderMetaData: OIDCDiscoveryApiResponse = {};\n    const configData: StrictAuthClientConfig = await this._config();\n\n    configData.endpoints &&\n      Object.keys(configData.endpoints).forEach((endpointName: string) => {\n        const snakeCasedName: string = endpointName.replace(/[A-Z]/g, (letter: string) => `_${letter.toLowerCase()}`);\n\n        oidcProviderMetaData[snakeCasedName] = configData?.endpoints ? configData.endpoints[endpointName] : '';\n      });\n\n    return {...response, ...oidcProviderMetaData};\n  }\n\n  public async resolveEndpointsExplicitly(): Promise<OIDCDiscoveryEndpointsApiResponse> {\n    const oidcProviderMetaData: OIDCDiscoveryApiResponse = {};\n    const configData: StrictAuthClientConfig = await this._config();\n\n    const requiredEndpoints: string[] = [\n      OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.AUTHORIZATION,\n      OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.END_SESSION,\n      OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.JWKS,\n      OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.SESSION_IFRAME,\n      OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.REVOCATION,\n      OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.TOKEN,\n      OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.ISSUER,\n      OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.USERINFO,\n    ];\n\n    const isRequiredEndpointsContains: boolean = configData.endpoints\n      ? requiredEndpoints.every((reqEndpointName: string) => {\n          return configData.endpoints\n            ? Object.keys(configData.endpoints).some((endpointName: string) => {\n                const snakeCasedName: string = endpointName.replace(\n                  /[A-Z]/g,\n                  (letter: string) => `_${letter.toLowerCase()}`,\n                );\n\n                return snakeCasedName === reqEndpointName;\n              })\n            : false;\n        })\n      : false;\n\n    if (!isRequiredEndpointsContains) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_HELPER-REE-NF01',\n        'Required endpoints missing',\n        'Some or all of the required endpoints are missing in the object passed to the `endpoints` ' +\n          'attribute of the`AuthConfig` object.',\n      );\n    }\n\n    configData.endpoints &&\n      Object.keys(configData.endpoints).forEach((endpointName: string) => {\n        const snakeCasedName: string = endpointName.replace(/[A-Z]/g, (letter: string) => `_${letter.toLowerCase()}`);\n\n        oidcProviderMetaData[snakeCasedName] = configData?.endpoints ? configData.endpoints[endpointName] : '';\n      });\n\n    return {...oidcProviderMetaData};\n  }\n\n  public async resolveEndpointsByBaseURL(): Promise<OIDCDiscoveryEndpointsApiResponse> {\n    const oidcProviderMetaData: OIDCDiscoveryEndpointsApiResponse = {};\n    const configData: StrictAuthClientConfig = await this._config();\n\n    const baseUrl: string = (configData as any).baseUrl;\n\n    if (!baseUrl) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_HELPER_REBO-NF01',\n        'Base URL not defined.',\n        'Base URL is not defined in AuthClient config.',\n      );\n    }\n\n    configData.endpoints &&\n      Object.keys(configData.endpoints).forEach((endpointName: string) => {\n        const snakeCasedName: string = endpointName.replace(/[A-Z]/g, (letter: string) => `_${letter.toLowerCase()}`);\n\n        oidcProviderMetaData[snakeCasedName] = configData?.endpoints ? configData.endpoints[endpointName] : '';\n      });\n\n    const defaultEndpoints: OIDCDiscoveryApiResponse = {\n      [OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints\n        .AUTHORIZATION]: `${baseUrl}${OIDCDiscoveryConstants.Endpoints.AUTHORIZATION}`,\n      [OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints\n        .END_SESSION]: `${baseUrl}${OIDCDiscoveryConstants.Endpoints.END_SESSION}`,\n      [OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints\n        .ISSUER]: `${baseUrl}${OIDCDiscoveryConstants.Endpoints.ISSUER}`,\n      [OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.JWKS]: `${baseUrl}${OIDCDiscoveryConstants.Endpoints.JWKS}`,\n      [OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints\n        .SESSION_IFRAME]: `${baseUrl}${OIDCDiscoveryConstants.Endpoints.SESSION_IFRAME}`,\n      [OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints\n        .REVOCATION]: `${baseUrl}${OIDCDiscoveryConstants.Endpoints.REVOCATION}`,\n      [OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints\n        .TOKEN]: `${baseUrl}${OIDCDiscoveryConstants.Endpoints.TOKEN}`,\n      [OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints\n        .USERINFO]: `${baseUrl}${OIDCDiscoveryConstants.Endpoints.USERINFO}`,\n    };\n\n    return {...defaultEndpoints, ...oidcProviderMetaData};\n  }\n\n  public async validateIdToken(idToken: string): Promise<boolean> {\n    const jwksEndpoint: string | undefined = (await this._dataLayer.getOIDCProviderMetaData()).jwks_uri;\n    const configData: StrictAuthClientConfig = await this._config();\n\n    if (!jwksEndpoint || jwksEndpoint.trim().length === 0) {\n      throw new AsgardeoAuthException(\n        'JS_AUTH_HELPER-VIT-NF01',\n        'JWKS endpoint not found.',\n        'No JWKS endpoint was found in the OIDC provider meta data returned by the well-known endpoint ' +\n          'or the JWKS endpoint passed to the SDK is empty.',\n      );\n    }\n\n    let response: Response;\n\n    try {\n      response = await fetch(jwksEndpoint, {\n        credentials: configData.sendCookiesInRequests ? 'include' : 'same-origin',\n      });\n    } catch (error: any) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_HELPER-VIT-NE02',\n        'Request to jwks endpoint failed.',\n        error ?? 'The request sent to get the jwks from the server failed.',\n      );\n    }\n\n    if (response.status !== 200 || !response.ok) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_HELPER-VIT-HE03',\n        `Invalid response status received for jwks request (${response.statusText}).`,\n        (await response.json()) as string,\n      );\n    }\n\n    const issuer: string | undefined = (await this._oidcProviderMetaData()).issuer;\n\n    const {keys}: {keys: JWKInterface[]} = (await response.json()) as {\n      keys: JWKInterface[];\n    };\n\n    const jwk: any = await this._cryptoHelper.getJWKForTheIdToken(idToken.split('.')[0], keys);\n\n    return this._cryptoHelper.isValidIdToken(\n      idToken,\n      jwk,\n      (await this._config()).clientID,\n      issuer ?? '',\n      this._cryptoHelper.decodeIDToken(idToken).sub,\n      (await this._config()).clockTolerance,\n      (await this._config()).validateIDTokenIssuer ?? true,\n    );\n  }\n\n  public getAuthenticatedUserInfo(idToken: string): AuthenticatedUserInfo {\n    const payload: IdTokenPayload = this._cryptoHelper.decodeIDToken(idToken);\n    const tenantDomain: string = extractTenantDomainFromIdTokenPayload(payload);\n    const username: string = payload?.['username'] ?? '';\n    const givenName: string = payload?.['given_name'] ?? '';\n    const familyName: string = payload?.['family_name'] ?? '';\n    const fullName: string =\n      givenName && familyName ? `${givenName} ${familyName}` : givenName ? givenName : familyName ? familyName : '';\n    const displayName: string = payload.preferred_username ?? fullName;\n\n    return {\n      displayName: displayName,\n      tenantDomain,\n      username: username,\n      ...extractUserClaimsFromIdToken(payload),\n    };\n  }\n\n  public async replaceCustomGrantTemplateTags(text: string, userID?: string): Promise<string> {\n    let scope: string = ScopeConstants.OPENID;\n    const configData: StrictAuthClientConfig = await this._config();\n    const sessionData: SessionData = await this._dataLayer.getSessionData(userID);\n\n    if (configData.scope && configData.scope.length > 0) {\n      if (!configData.scope.includes(ScopeConstants.OPENID)) {\n        configData.scope.push(ScopeConstants.OPENID);\n      }\n      scope = configData.scope.join(' ');\n    }\n\n    return text\n      .replace(TokenExchangeConstants.Placeholders.TOKEN, sessionData.access_token)\n      .replace(\n        TokenExchangeConstants.Placeholders.USERNAME,\n        this.getAuthenticatedUserInfo(sessionData.id_token).username,\n      )\n      .replace(TokenExchangeConstants.Placeholders.SCOPE, scope)\n      .replace(TokenExchangeConstants.Placeholders.CLIENT_ID, configData.clientID)\n      .replace(TokenExchangeConstants.Placeholders.CLIENT_SECRET, configData.clientSecret ?? '');\n  }\n\n  public async clearUserSessionData(userID?: string): Promise<void> {\n    await this._dataLayer.removeTemporaryData(userID);\n    await this._dataLayer.removeSessionData(userID);\n  }\n\n  public async handleTokenResponse(response: Response, userID?: string): Promise<TokenResponse> {\n    if (response.status !== 200 || !response.ok) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_HELPER-HTR-NE01',\n        `Invalid response status received for token request (${response.statusText}).`,\n        (await response.json()) as string,\n      );\n    }\n\n    //Get the response in JSON\n    const parsedResponse: AccessTokenApiResponse = (await response.json()) as AccessTokenApiResponse;\n\n    parsedResponse.created_at = new Date().getTime();\n\n    const shouldValidateIdToken: boolean | undefined = (await this._config()).validateIDToken;\n\n    if (shouldValidateIdToken) {\n      return this.validateIdToken(parsedResponse.id_token).then(async () => {\n        await this._dataLayer.setSessionData(parsedResponse, userID);\n\n        const tokenResponse: TokenResponse = {\n          accessToken: parsedResponse.access_token,\n          createdAt: parsedResponse.created_at,\n          expiresIn: parsedResponse.expires_in,\n          idToken: parsedResponse.id_token,\n          refreshToken: parsedResponse.refresh_token,\n          scope: parsedResponse.scope,\n          tokenType: parsedResponse.token_type,\n        };\n\n        return Promise.resolve(tokenResponse);\n      });\n    } else {\n      const tokenResponse: TokenResponse = {\n        accessToken: parsedResponse.access_token,\n        createdAt: parsedResponse.created_at,\n        expiresIn: parsedResponse.expires_in,\n        idToken: parsedResponse.id_token,\n        refreshToken: parsedResponse.refresh_token,\n        scope: parsedResponse.scope,\n        tokenType: parsedResponse.token_type,\n      };\n\n      await this._dataLayer.setSessionData(parsedResponse, userID);\n\n      return Promise.resolve(tokenResponse);\n    }\n  }\n}\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport PKCEConstants from '../constants/PKCEConstants';\nimport {TemporaryStore} from '../models/store';\n\n/**\n * Generates the next available PKCE storage key based on the current temporary data.\n *\n * The generated key will follow the format: `pkce_code_verifier_<index>`, where `<index>` is incremented\n * based on the highest existing index in the provided storage object.\n *\n * @param tempStore - The object that holds temporary PKCE-related data (e.g., sessionStorage).\n *\n * @returns A new unique PKCE storage key to store the next `code_verifier`.\n *\n * @example\n * const key = generatePkceStorageKey(sessionStorage);\n * // Returns: \"pkce_code_verifier_3\" (if existing keys are pkce_code_verifier_0 to _2)\n */\nconst generatePkceStorageKey = (tempStore: TemporaryStore): string => {\n  const keys: string[] = [];\n\n  Object.keys(tempStore).forEach((key: string) => {\n    if (key.startsWith(PKCEConstants.Storage.StorageKeys.CODE_VERIFIER)) {\n      keys.push(key);\n    }\n  });\n\n  const lastKey: string | undefined = keys.sort().pop();\n  const index: number = parseInt(lastKey?.split(PKCEConstants.Storage.StorageKeys.SEPARATOR)[1] ?? '-1');\n\n  return `${PKCEConstants.Storage.StorageKeys.CODE_VERIFIER}${PKCEConstants.Storage.StorageKeys.SEPARATOR}${index + 1}`;\n};\n\nexport default generatePkceStorageKey;\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n/**\n * Constants representing standard OpenID Connect (OIDC) request and response parameters.\n * These parameters are commonly used during authorization, token exchange, and logout flows.\n */\nconst OIDCRequestConstants = {\n  Params: {\n    /**\n     * The authorization code returned from the authorization endpoint.\n     * Used in the authorization code flow.\n     */\n    AUTHORIZATION_CODE: 'code',\n\n    /**\n     * Session state parameter used for session management between the client and the OP.\n     */\n    SESSION_STATE: 'session_state',\n\n    /**\n     * State parameter used to maintain state between the request and the callback.\n     * Helps in preventing CSRF attacks.\n     */\n    STATE: 'state',\n\n    /**\n     * Indicates whether sign-out was successful during the end-session flow.\n     * May be returned by the OP after a logout request.\n     */\n    SIGN_OUT_SUCCESS: 'sign_out_success',\n  },\n  \n  /**\n   * Sign-out related constants for managing the end-session flow in OIDC.\n   */\n  SignOut: {\n    /**\n     * Storage-related constants for managing sign-out state.\n     */\n    Storage: {\n      /**\n       * Collection of storage keys used in sign-out implementation\n       */\n      StorageKeys: {\n        /**\n         * Storage key for the sign-out URL.\n         * Used to store the complete URL where the user should be redirected after\n         * completing the OIDC logout process.\n         */\n        SIGN_OUT_URL: 'sign_out_url',\n      },\n    },\n  },\n} as const;\n\nexport default OIDCRequestConstants;\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n/**\n * Constants related to OIDC token management and storage.\n * This object contains configuration values and storage keys\n * used in token validation and management processes.\n *\n * @remarks\n * The constants are organized into two main sections:\n * 1. SignatureValidation - Contains supported algorithms for token validation\n * 2. Storage - Contains keys used for storing token-related data\n *\n * @example\n * ```typescript\n * // Using signature validation algorithms\n * const algorithms = TokenConstants.SignatureValidation.SUPPORTED_ALGORITHMS;\n *\n * // Using storage keys\n * const timerKey = TokenConstants.Storage.StorageKeys.REFRESH_TOKEN_TIMER;\n * ```\n */\nconst TokenConstants = {\n  /**\n   * Token signature validation constants.\n   * Contains configurations related to token signature verification.\n   */\n  SignatureValidation: {\n    /**\n     * Fallback array of supported signature algorithms for OIDC token validation.\n     * These values are used when the supported algorithms cannot be retrieved from\n     * the .well-known/openid-configuration endpoint.\n     *\n     * Supported algorithms:\n     * - `RS256` - RSASSA-PKCS1-v1_5 using SHA-256\n     * - `RS512` - RSASSA-PKCS1-v1_5 using SHA-512\n     * - `RS384` - RSASSA-PKCS1-v1_5 using SHA-384\n     * - `PS256` - RSASSA-PSS using SHA-256 and MGF1 with SHA-256\n     */\n    SUPPORTED_ALGORITHMS: ['RS256', 'RS512', 'RS384', 'PS256'],\n  },\n\n  /**\n   * Storage-related constants for OIDC tokens.\n   * Contains keys used to store token-related data in browser storage.\n   */\n  Storage: {\n    /**\n     * Collection of storage keys used in token management.\n     * These keys are used to store and retrieve token-related\n     * information from browser storage.\n     */\n    StorageKeys: {\n      /**\n       * Key used to store the refresh token timer identifier.\n       * This timer is used to schedule token refresh operations\n       * before the current token expires.\n       */\n      REFRESH_TOKEN_TIMER: 'refresh_token_timer',\n    },\n  },\n} as const;\n\nexport default TokenConstants;\n", "/**\n * Copyright (c) 2022, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {AsgardeoAuthException} from './__legacy__/exception';\nimport {Crypto, JWKInterface} from './models/crypto';\nimport {IdTokenPayload} from './models/id-token';\nimport TokenConstants from './constants/TokenConstants';\n\nexport class IsomorphicCrypto<T = any> {\n  private _cryptoUtils: Crypto<T>;\n\n  public constructor(cryptoUtils: Crypto<T>) {\n    this._cryptoUtils = cryptoUtils;\n  }\n\n  /**\n   * Generate code verifier.\n   *\n   * @returns code verifier.\n   */\n  public getCodeVerifier(): string {\n    return this._cryptoUtils.base64URLEncode(this._cryptoUtils.generateRandomBytes(32));\n  }\n\n  /**\n   * Derive code challenge from the code verifier.\n   *\n   * @param verifier - Code verifier.\n   *\n   * @returns - code challenge.\n   */\n  public getCodeChallenge(verifier: string): string {\n    return this._cryptoUtils.base64URLEncode(this._cryptoUtils.hashSha256(verifier));\n  }\n\n  /**\n   * Get JWK used for the id_token\n   *\n   * @param jwtHeader - header of the id_token.\n   * @param keys - jwks response.\n   *\n   * @returns public key.\n   *\n   * @throws\n   */\n  /* eslint-disable @typescript-eslint/no-explicit-any */\n  public getJWKForTheIdToken(jwtHeader: string, keys: JWKInterface[]): JWKInterface {\n    const headerJSON: Record<string, string> = JSON.parse(this._cryptoUtils.base64URLDecode(jwtHeader));\n\n    for (const key of keys) {\n      if (headerJSON['kid'] === key.kid) {\n        return key;\n      }\n    }\n\n    throw new AsgardeoAuthException(\n      'JS-CRYPTO_UTIL-GJFTIT-IV01',\n      'kid not found.',\n      \"Failed to find the 'kid' specified in the id_token. 'kid' found in the header : \" +\n        headerJSON['kid'] +\n        ', Expected values: ' +\n        keys.map((key: JWKInterface) => key.kid).join(', '),\n    );\n  }\n\n  /**\n   * Verify id token.\n   *\n   * @param idToken - id_token received from the IdP.\n   * @param jwk - public key used for signing.\n   * @param clientID - app identification.\n   * @param issuer - id_token issuer.\n   * @param username - Username.\n   * @param clockTolerance - Allowed leeway for id_tokens (in seconds).\n   *\n   * @returns whether the id_token is valid.\n   *\n   * @throws\n   */\n  public isValidIdToken(\n    idToken: string,\n    jwk: JWKInterface,\n    clientID: string,\n    issuer: string,\n    username: string,\n    clockTolerance: number | undefined,\n    validateJwtIssuer: boolean | undefined,\n  ): Promise<boolean> {\n    return this._cryptoUtils\n      .verifyJwt(\n        idToken,\n        jwk,\n        TokenConstants.SignatureValidation.SUPPORTED_ALGORITHMS as unknown as string[],\n        clientID,\n        issuer,\n        username,\n        clockTolerance,\n        validateJwtIssuer,\n      )\n      .then((response: boolean) => {\n        if (response) {\n          return Promise.resolve(true);\n        }\n\n        return Promise.reject(\n          new AsgardeoAuthException(\n            'JS-CRYPTO_HELPER-IVIT-IV01',\n            'Invalid ID token.',\n            'ID token validation returned false',\n          ),\n        );\n      });\n  }\n\n  /**\n   * This function decodes the payload of an id token and returns it.\n   *\n   * @param idToken - The id token to be decoded.\n   *\n   * @returns - The decoded payload of the id token.\n   *\n   * @throws\n   */\n  public decodeIDToken(idToken: string): IdTokenPayload {\n    try {\n      const utf8String: string = this._cryptoUtils.base64URLDecode(idToken.split('.')[1]);\n      const payload: IdTokenPayload = JSON.parse(utf8String);\n\n      return payload;\n    } catch (error: any) {\n      throw new AsgardeoAuthException('JS-CRYPTO_UTIL-DIT-IV01', 'Decoding ID token failed.', error);\n    }\n  }\n}\n", "/**\n * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\nimport extractPkceStorageKeyFromState from '../../utils/extractPkceStorageKeyFromState';\nimport generateStateParamForRequestCorrelation from '../../utils/generateStateParamForRequestCorrelation';\nimport {DataLayer} from '../data';\nimport {AsgardeoAuthException} from '../exception';\nimport {AuthenticationHelper} from '../helpers';\nimport {\n  AuthClientConfig,\n  AuthenticatedUserInfo,\n  AuthorizationURLParams,\n  BasicUserInfo,\n  CustomGrantConfig,\n  FetchRequestConfig,\n  FetchResponse,\n  SessionData,\n  StrictAuthClientConfig,\n} from '../models';\nimport {TokenResponse} from '../../models/token';\nimport {Crypto} from '../../models/crypto';\nimport {IdTokenPayload} from '../../models/id-token';\nimport {TemporaryStore} from '../../models/store';\nimport {OIDCEndpoints} from '../../models/oidc-endpoints';\nimport generatePkceStorageKey from '../../utils/generatePkceStorageKey';\nimport ScopeConstants from '../../constants/ScopeConstants';\nimport OIDCDiscoveryConstants from '../../constants/OIDCDiscoveryConstants';\nimport OIDCRequestConstants from '../../constants/OIDCRequestConstants';\nimport {OIDCDiscoveryApiResponse} from '../../models/oidc-discovery';\nimport { IsomorphicCrypto } from '../../IsomorphicCrypto';\n\nexport class AuthenticationCore<T> {\n  private _dataLayer: DataLayer<T>;\n  private _config: () => Promise<AuthClientConfig>;\n  private _oidcProviderMetaData: () => Promise<OIDCDiscoveryApiResponse>;\n  private _authenticationHelper: AuthenticationHelper<T>;\n  private _cryptoUtils: Crypto;\n  private _cryptoHelper: IsomorphicCrypto;\n\n  public constructor(dataLayer: DataLayer<T>, cryptoUtils: Crypto) {\n    this._cryptoUtils = cryptoUtils;\n    this._cryptoHelper = new IsomorphicCrypto(cryptoUtils);\n    this._authenticationHelper = new AuthenticationHelper(dataLayer, this._cryptoHelper);\n    this._dataLayer = dataLayer;\n    this._config = async () => await this._dataLayer.getConfigData();\n    this._oidcProviderMetaData = async () => await this._dataLayer.getOIDCProviderMetaData();\n  }\n\n  public async getAuthorizationURLParams(\n    config?: AuthorizationURLParams,\n    userID?: string,\n  ): Promise<Map<string, string>> {\n    const configData: StrictAuthClientConfig = await this._config();\n\n    const authorizeRequestParams: Map<string, string> = new Map<string, string>();\n\n    authorizeRequestParams.set('response_type', 'code');\n    authorizeRequestParams.set('client_id', configData.clientID);\n\n    let scope: string = ScopeConstants.OPENID;\n\n    if (configData.scope && configData.scope.length > 0) {\n      if (!configData.scope.includes(ScopeConstants.OPENID)) {\n        configData.scope.push(ScopeConstants.OPENID);\n      }\n      scope = configData.scope.join(' ');\n    }\n\n    authorizeRequestParams.set('scope', scope);\n    authorizeRequestParams.set('redirect_uri', configData.signInRedirectURL);\n\n    if (configData.responseMode) {\n      authorizeRequestParams.set('response_mode', configData.responseMode);\n    }\n\n    const tempStore: TemporaryStore = await this._dataLayer.getTemporaryData(userID);\n    const pkceKey: string = await generatePkceStorageKey(tempStore);\n\n    if (configData.enablePKCE) {\n      const codeVerifier: string = this._cryptoHelper?.getCodeVerifier();\n      const codeChallenge: string = this._cryptoHelper?.getCodeChallenge(codeVerifier);\n\n      await this._dataLayer.setTemporaryDataParameter(pkceKey, codeVerifier, userID);\n      authorizeRequestParams.set('code_challenge_method', 'S256');\n      authorizeRequestParams.set('code_challenge', codeChallenge);\n    }\n\n    if (configData.prompt) {\n      authorizeRequestParams.set('prompt', configData.prompt);\n    }\n\n    const customParams: AuthorizationURLParams | undefined = config;\n\n    if (customParams) {\n      for (const [key, value] of Object.entries(customParams)) {\n        if (key != '' && value != '' && key !== OIDCRequestConstants.Params.STATE) {\n          authorizeRequestParams.set(key, value.toString());\n        }\n      }\n    }\n\n    authorizeRequestParams.set(\n      OIDCRequestConstants.Params.STATE,\n      generateStateParamForRequestCorrelation(\n        pkceKey,\n        customParams ? customParams[OIDCRequestConstants.Params.STATE]?.toString() : '',\n      ),\n    );\n\n    return authorizeRequestParams;\n  }\n\n  public async getAuthorizationURL(config?: AuthorizationURLParams, userID?: string): Promise<string> {\n    const authorizeEndpoint: string = (await this._dataLayer.getOIDCProviderMetaDataParameter(\n      OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.AUTHORIZATION as keyof OIDCDiscoveryApiResponse,\n    )) as string;\n\n    if (!authorizeEndpoint || authorizeEndpoint.trim().length === 0) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-GAU-NF01',\n        'No authorization endpoint found.',\n        'No authorization endpoint was found in the OIDC provider meta data from the well-known endpoint ' +\n          'or the authorization endpoint passed to the SDK is empty.',\n      );\n    }\n\n    const authorizeRequest: URL = new URL(authorizeEndpoint);\n\n    const authorizeRequestParams: Map<string, string> = await this.getAuthorizationURLParams(config, userID);\n\n    for (const [key, value] of authorizeRequestParams.entries()) {\n      authorizeRequest.searchParams.append(key, value);\n    }\n\n    return authorizeRequest.toString();\n  }\n\n  public async requestAccessToken(\n    authorizationCode: string,\n    sessionState: string,\n    state: string,\n    userID?: string,\n    tokenRequestConfig?: {\n      params: Record<string, unknown>;\n    },\n  ): Promise<TokenResponse> {\n    const tokenEndpoint: string | undefined = (await this._oidcProviderMetaData()).token_endpoint;\n    const configData: StrictAuthClientConfig = await this._config();\n\n    if (!tokenEndpoint || tokenEndpoint.trim().length === 0) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RAT1-NF01',\n        'Token endpoint not found.',\n        'No token endpoint was found in the OIDC provider meta data returned by the well-known endpoint ' +\n          'or the token endpoint passed to the SDK is empty.',\n      );\n    }\n\n    sessionState &&\n      (await this._dataLayer.setSessionDataParameter(\n        OIDCRequestConstants.Params.SESSION_STATE as keyof SessionData,\n        sessionState,\n        userID,\n      ));\n\n    const body: URLSearchParams = new URLSearchParams();\n\n    body.set('client_id', configData.clientID);\n\n    if (configData.clientSecret && configData.clientSecret.trim().length > 0) {\n      body.set('client_secret', configData.clientSecret);\n    }\n\n    const code: string = authorizationCode;\n\n    body.set('code', code);\n\n    body.set('grant_type', 'authorization_code');\n    body.set('redirect_uri', configData.signInRedirectURL);\n\n    if (tokenRequestConfig?.params) {\n      Object.entries(tokenRequestConfig.params).forEach(([key, value]: [key: string, value: unknown]) => {\n        body.append(key, value as string);\n      });\n    }\n\n    if (configData.enablePKCE) {\n      body.set(\n        'code_verifier',\n        `${await this._dataLayer.getTemporaryDataParameter(extractPkceStorageKeyFromState(state), userID)}`,\n      );\n\n      await this._dataLayer.removeTemporaryDataParameter(extractPkceStorageKeyFromState(state), userID);\n    }\n\n    let tokenResponse: Response;\n\n    try {\n      tokenResponse = await fetch(tokenEndpoint, {\n        body: body,\n        credentials: configData.sendCookiesInRequests ? 'include' : 'same-origin',\n        headers: {\n          Accept: 'application/json',\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        method: 'POST',\n      });\n    } catch (error: any) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RAT1-NE02',\n        'Requesting access token failed',\n        error ?? 'The request to get the access token from the server failed.',\n      );\n    }\n\n    if (!tokenResponse.ok) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RAT1-HE03',\n        `Requesting access token failed with ${tokenResponse.statusText}`,\n        (await tokenResponse.json()) as string,\n      );\n    }\n\n    return await this._authenticationHelper.handleTokenResponse(tokenResponse, userID);\n  }\n\n  public async refreshAccessToken(userID?: string): Promise<TokenResponse> {\n    const tokenEndpoint: string | undefined = (await this._oidcProviderMetaData()).token_endpoint;\n    const configData: StrictAuthClientConfig = await this._config();\n    const sessionData: SessionData = await this._dataLayer.getSessionData(userID);\n\n    if (!sessionData.refresh_token) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RAT2-NF01',\n        'No refresh token found.',\n        \"There was no refresh token found. Asgardeo doesn't return a \" +\n          'refresh token if the refresh token grant is not enabled.',\n      );\n    }\n\n    if (!tokenEndpoint || tokenEndpoint.trim().length === 0) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RAT2-NF02',\n        'No refresh token endpoint found.',\n        'No refresh token endpoint was in the OIDC provider meta data returned by the well-known ' +\n          'endpoint or the refresh token endpoint passed to the SDK is empty.',\n      );\n    }\n\n    const body: string[] = [];\n\n    body.push(`client_id=${configData.clientID}`);\n    body.push(`refresh_token=${sessionData.refresh_token}`);\n    body.push('grant_type=refresh_token');\n\n    if (configData.clientSecret && configData.clientSecret.trim().length > 0) {\n      body.push(`client_secret=${configData.clientSecret}`);\n    }\n\n    let tokenResponse: Response;\n\n    try {\n      tokenResponse = await fetch(tokenEndpoint, {\n        body: body.join('&'),\n        credentials: configData.sendCookiesInRequests ? 'include' : 'same-origin',\n        headers: {\n          Accept: 'application/json',\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        method: 'POST',\n      });\n    } catch (error: any) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RAT2-NR03',\n        'Refresh access token request failed.',\n        error ?? 'The request to refresh the access token failed.',\n      );\n    }\n\n    if (!tokenResponse.ok) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RAT2-HE04',\n        `Refreshing access token failed with ${tokenResponse.statusText}`,\n        (await tokenResponse.json()) as string,\n      );\n    }\n\n    return this._authenticationHelper.handleTokenResponse(tokenResponse, userID);\n  }\n\n  public async revokeAccessToken(userID?: string): Promise<FetchResponse> {\n    const revokeTokenEndpoint: string | undefined = (await this._oidcProviderMetaData()).revocation_endpoint;\n    const configData: StrictAuthClientConfig = await this._config();\n\n    if (!revokeTokenEndpoint || revokeTokenEndpoint.trim().length === 0) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RAT3-NF01',\n        'No revoke access token endpoint found.',\n        'No revoke access token endpoint was found in the OIDC provider meta data returned by ' +\n          'the well-known endpoint or the revoke access token endpoint passed to the SDK is empty.',\n      );\n    }\n\n    const body: string[] = [];\n\n    body.push(`client_id=${configData.clientID}`);\n    body.push(`token=${(await this._dataLayer.getSessionData(userID)).access_token}`);\n    body.push('token_type_hint=access_token');\n\n    if (configData.clientSecret && configData.clientSecret.trim().length > 0) {\n      body.push(`client_secret=${configData.clientSecret}`);\n    }\n\n    let response: Response;\n\n    try {\n      response = await fetch(revokeTokenEndpoint, {\n        body: body.join('&'),\n        credentials: configData.sendCookiesInRequests ? 'include' : 'same-origin',\n        headers: {\n          Accept: 'application/json',\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        method: 'POST',\n      });\n    } catch (error: any) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RAT3-NE02',\n        'The request to revoke access token failed.',\n        error ?? 'The request sent to revoke the access token failed.',\n      );\n    }\n\n    if (response.status !== 200 || !response.ok) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RAT3-HE03',\n        `Invalid response status received for revoke access token request (${response.statusText}).`,\n        (await response.json()) as string,\n      );\n    }\n\n    this._authenticationHelper.clearUserSessionData(userID);\n\n    return Promise.resolve(response);\n  }\n\n  public async requestCustomGrant(\n    customGrantParams: CustomGrantConfig,\n    userID?: string,\n  ): Promise<TokenResponse | FetchResponse> {\n    const oidcProviderMetadata: OIDCDiscoveryApiResponse = await this._oidcProviderMetaData();\n    const configData: StrictAuthClientConfig = await this._config();\n\n    let tokenEndpoint: string | undefined;\n\n    if (customGrantParams.tokenEndpoint && customGrantParams.tokenEndpoint.trim().length !== 0) {\n      tokenEndpoint = customGrantParams.tokenEndpoint;\n    } else {\n      tokenEndpoint = oidcProviderMetadata.token_endpoint;\n    }\n\n    if (!tokenEndpoint || tokenEndpoint.trim().length === 0) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RCG-NF01',\n        'Token endpoint not found.',\n        'No token endpoint was found in the OIDC provider meta data returned by the well-known endpoint ' +\n          'or the token endpoint passed to the SDK is empty.',\n      );\n    }\n\n    const data: string[] = await Promise.all(\n      Object.entries(customGrantParams.data).map(async ([key, value]: [key: string, value: any]) => {\n        const newValue: string = await this._authenticationHelper.replaceCustomGrantTemplateTags(\n          value as string,\n          userID,\n        );\n\n        return `${key}=${newValue}`;\n      }),\n    );\n\n    let requestHeaders: Record<string, any> = {\n      Accept: 'application/json',\n      'Content-Type': 'application/x-www-form-urlencoded',\n    };\n\n    if (customGrantParams.attachToken) {\n      requestHeaders = {\n        ...requestHeaders,\n        Authorization: `Bearer ${(await this._dataLayer.getSessionData(userID)).access_token}`,\n      };\n    }\n\n    const requestConfig: FetchRequestConfig = {\n      body: data.join('&'),\n      credentials: configData.sendCookiesInRequests ? 'include' : 'same-origin',\n      headers: new Headers(requestHeaders),\n      method: 'POST',\n    };\n\n    let response: Response;\n\n    try {\n      response = await fetch(tokenEndpoint, requestConfig);\n    } catch (error: any) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RCG-NE02',\n        'The custom grant request failed.',\n        error ?? 'The request sent to get the custom grant failed.',\n      );\n    }\n\n    if (response.status !== 200 || !response.ok) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-RCG-HE03',\n        `Invalid response status received for the custom grant request. (${response.statusText})`,\n        (await response.json()) as string,\n      );\n    }\n\n    if (customGrantParams.returnsSession) {\n      return this._authenticationHelper.handleTokenResponse(response, userID);\n    } else {\n      return Promise.resolve((await response.json()) as TokenResponse | FetchResponse);\n    }\n  }\n\n  public async getBasicUserInfo(userID?: string): Promise<BasicUserInfo> {\n    const sessionData: SessionData = await this._dataLayer.getSessionData(userID);\n    const authenticatedUser: AuthenticatedUserInfo = this._authenticationHelper.getAuthenticatedUserInfo(\n      sessionData?.id_token,\n    );\n\n    let basicUserInfo: BasicUserInfo = {\n      allowedScopes: sessionData.scope,\n      sessionState: sessionData.session_state,\n    };\n\n    Object.keys(authenticatedUser).forEach((key: string) => {\n      if (authenticatedUser[key] === undefined || authenticatedUser[key] === '' || authenticatedUser[key] === null) {\n        delete authenticatedUser[key];\n      }\n    });\n\n    basicUserInfo = {...basicUserInfo, ...authenticatedUser};\n\n    return basicUserInfo;\n  }\n\n  public async getDecodedIDToken(userID?: string): Promise<IdTokenPayload> {\n    const idToken: string = (await this._dataLayer.getSessionData(userID)).id_token;\n    const payload: IdTokenPayload = this._cryptoHelper.decodeIDToken(idToken);\n\n    return payload;\n  }\n\n  public async getCryptoHelper(): Promise<IsomorphicCrypto> {\n    return this._cryptoHelper;\n  }\n\n  public async getIDToken(userID?: string): Promise<string> {\n    return (await this._dataLayer.getSessionData(userID)).id_token;\n  }\n\n  public async getOIDCProviderMetaData(forceInit: boolean): Promise<void> {\n    const configData: StrictAuthClientConfig = await this._config();\n\n    if (\n      !forceInit &&\n      (await this._dataLayer.getTemporaryDataParameter(\n        OIDCDiscoveryConstants.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED,\n      ))\n    ) {\n      return Promise.resolve();\n    }\n\n    const wellKnownEndpoint: string = (configData as any).wellKnownEndpoint;\n\n    if (wellKnownEndpoint) {\n      let response: Response;\n\n      try {\n        response = await fetch(wellKnownEndpoint);\n        if (response.status !== 200 || !response.ok) {\n          throw new Error();\n        }\n      } catch {\n        throw new AsgardeoAuthException(\n          'JS-AUTH_CORE-GOPMD-HE01',\n          'Invalid well-known response',\n          'The well known endpoint response has been failed with an error.',\n        );\n      }\n\n      await this._dataLayer.setOIDCProviderMetaData(\n        await this._authenticationHelper.resolveEndpoints(await response.json()),\n      );\n      await this._dataLayer.setTemporaryDataParameter(\n        OIDCDiscoveryConstants.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED,\n        true,\n      );\n\n      return Promise.resolve();\n    } else if ((configData as any).baseUrl) {\n      try {\n        await this._dataLayer.setOIDCProviderMetaData(await this._authenticationHelper.resolveEndpointsByBaseURL());\n      } catch (error: any) {\n        throw new AsgardeoAuthException(\n          'JS-AUTH_CORE-GOPMD-IV02',\n          'Resolving endpoints failed.',\n          error ?? 'Resolving endpoints by base url failed.',\n        );\n      }\n      await this._dataLayer.setTemporaryDataParameter(\n        OIDCDiscoveryConstants.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED,\n        true,\n      );\n\n      return Promise.resolve();\n    } else {\n      await this._dataLayer.setOIDCProviderMetaData(await this._authenticationHelper.resolveEndpointsExplicitly());\n\n      await this._dataLayer.setTemporaryDataParameter(\n        OIDCDiscoveryConstants.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED,\n        true,\n      );\n\n      return Promise.resolve();\n    }\n  }\n\n  // TODO: Remove `Partial<OIDCEndpoints>` once the refactoring is done.\n  public async getOIDCServiceEndpoints(): Promise<Partial<OIDCEndpoints>> {\n    const oidcProviderMetaData: OIDCDiscoveryApiResponse = await this._oidcProviderMetaData();\n\n    return {\n      authorizationEndpoint: oidcProviderMetaData.authorization_endpoint ?? '',\n      checkSessionIframe: oidcProviderMetaData.check_session_iframe ?? '',\n      endSessionEndpoint: oidcProviderMetaData.end_session_endpoint ?? '',\n      introspectionEndpoint: oidcProviderMetaData.introspection_endpoint ?? '',\n      issuer: oidcProviderMetaData.issuer ?? '',\n      jwksUri: oidcProviderMetaData.jwks_uri ?? '',\n      registrationEndpoint: oidcProviderMetaData.registration_endpoint ?? '',\n      revocationEndpoint: oidcProviderMetaData.revocation_endpoint ?? '',\n      tokenEndpoint: oidcProviderMetaData.token_endpoint ?? '',\n      userinfoEndpoint: oidcProviderMetaData.userinfo_endpoint ?? '',\n    };\n  }\n\n  public async getSignOutURL(userID?: string): Promise<string> {\n    const logoutEndpoint: string | undefined = (await this._oidcProviderMetaData())?.end_session_endpoint;\n    const configData: StrictAuthClientConfig = await this._config();\n\n    if (!logoutEndpoint || logoutEndpoint.trim().length === 0) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-GSOU-NF01',\n        'Sign-out endpoint not found.',\n        'No sign-out endpoint was found in the OIDC provider meta data returned by the well-known endpoint ' +\n          'or the sign-out endpoint passed to the SDK is empty.',\n      );\n    }\n\n    const callbackURL: string = configData?.signOutRedirectURL ?? configData?.signInRedirectURL;\n\n    if (!callbackURL || callbackURL.trim().length === 0) {\n      throw new AsgardeoAuthException(\n        'JS-AUTH_CORE-GSOU-NF03',\n        'No sign-out redirect URL found.',\n        'The sign-out redirect URL cannot be found or the URL passed to the SDK is empty. ' +\n          'No sign-in redirect URL has been found either. ',\n      );\n    }\n    const queryParams: URLSearchParams = new URLSearchParams();\n\n    queryParams.set('post_logout_redirect_uri', callbackURL);\n\n    if (configData.sendIdTokenInLogoutRequest) {\n      const idToken: string = (await this._dataLayer.getSessionData(userID))?.id_token;\n\n      if (!idToken || idToken.trim().length === 0) {\n        throw new AsgardeoAuthException(\n          'JS-AUTH_CORE-GSOU-NF02',\n          'ID token not found.',\n          'No ID token could be found. Either the session information is lost or you have not signed in.',\n        );\n      }\n      queryParams.set('id_token_hint', idToken);\n    } else {\n      queryParams.set('client_id', configData.clientID);\n    }\n\n    queryParams.set('state', OIDCRequestConstants.Params.SIGN_OUT_SUCCESS);\n\n    return `${logoutEndpoint}?${queryParams.toString()}`;\n  }\n\n  public async clearUserSessionData(userID?: string): Promise<void> {\n    await this._authenticationHelper.clearUserSessionData(userID);\n  }\n\n  public async getAccessToken(userID?: string): Promise<string> {\n    return (await this._dataLayer.getSessionData(userID))?.access_token;\n  }\n\n  /**\n   * The created timestamp of the token response in milliseconds.\n   *\n   * @param userID - User ID\n   * @returns Created at timestamp of the token response in milliseconds.\n   */\n  public async getCreatedAt(userID?: string): Promise<number> {\n    return (await this._dataLayer.getSessionData(userID))?.created_at;\n  }\n\n  /**\n   * The expires timestamp of the token response in seconds.\n   *\n   * @param userID - User ID\n   * @returns Expires in timestamp of the token response in seconds.\n   */\n  public async getExpiresIn(userID?: string): Promise<string> {\n    return (await this._dataLayer.getSessionData(userID))?.expires_in;\n  }\n\n  public async isAuthenticated(userID?: string): Promise<boolean> {\n    const isAccessTokenAvailable: boolean = Boolean(await this.getAccessToken(userID));\n\n    // Check if the access token is expired.\n    const createdAt: number = await this.getCreatedAt(userID);\n\n    // Get the expires in value.\n    const expiresInString: string = await this.getExpiresIn(userID);\n\n    // If the expires in value is not available, the token is invalid and the user is not authenticated.\n    if (!expiresInString) {\n      return false;\n    }\n\n    // Convert to milliseconds.\n    const expiresIn: number = parseInt(expiresInString) * 1000;\n    const currentTime: number = new Date().getTime();\n    const isAccessTokenValid: boolean = createdAt + expiresIn > currentTime;\n\n    const isAuthenticated: boolean = isAccessTokenAvailable && isAccessTokenValid;\n\n    return isAuthenticated;\n  }\n\n  public async getPKCECode(state: string, userID?: string): Promise<string> {\n    return (await this._dataLayer.getTemporaryDataParameter(extractPkceStorageKeyFromState(state), userID)) as string;\n  }\n\n  public async setPKCECode(pkce: string, state: string, userID?: string): Promise<void> {\n    return await this._dataLayer.setTemporaryDataParameter(extractPkceStorageKeyFromState(state), pkce, userID);\n  }\n\n  public async updateConfig(config: Partial<AuthClientConfig<T>>): Promise<void> {\n    await this._dataLayer.setConfigData(config);\n    await this.getOIDCProviderMetaData(true);\n  }\n}\n", "/**\n * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {Stores} from '../../models/store';\nimport {Store} from '../../models/store';\nimport {AuthClientConfig, SessionData} from '../models';\nimport {TemporaryStore, TemporaryStoreValue} from '../../models/store';\nimport {OIDCDiscoveryApiResponse} from '../../models/oidc-discovery';\n\ntype PartialData<T> = Partial<AuthClientConfig<T> | OIDCDiscoveryApiResponse | SessionData | TemporaryStore>;\n\nexport const ASGARDEO_SESSION_ACTIVE: string = 'asgardeo-session-active';\n\nexport class DataLayer<T> {\n  protected _id: string;\n  protected _store: Store;\n  public constructor(instanceID: string, store: Store) {\n    this._id = instanceID;\n    this._store = store;\n  }\n\n  protected async setDataInBulk(key: string, data: PartialData<T>): Promise<void> {\n    const existingDataJSON: string = (await this._store.getData(key)) ?? null;\n    const existingData: PartialData<T> = existingDataJSON && JSON.parse(existingDataJSON);\n\n    const dataToBeSaved: PartialData<T> = {...existingData, ...data};\n    const dataToBeSavedJSON: string = JSON.stringify(dataToBeSaved);\n\n    await this._store.setData(key, dataToBeSavedJSON);\n  }\n\n  protected async setValue(\n    key: string,\n    attribute: keyof AuthClientConfig<T> | keyof OIDCDiscoveryApiResponse | keyof SessionData | keyof TemporaryStore,\n    value: TemporaryStoreValue,\n  ): Promise<void> {\n    const existingDataJSON: string = (await this._store.getData(key)) ?? null;\n    const existingData: PartialData<T> = existingDataJSON && JSON.parse(existingDataJSON);\n\n    const dataToBeSaved: PartialData<T> = {...existingData, [attribute]: value};\n    const dataToBeSavedJSON: string = JSON.stringify(dataToBeSaved);\n\n    await this._store.setData(key, dataToBeSavedJSON);\n  }\n\n  protected async removeValue(\n    key: string,\n    attribute: keyof AuthClientConfig<T> | keyof OIDCDiscoveryApiResponse | keyof SessionData | keyof TemporaryStore,\n  ): Promise<void> {\n    const existingDataJSON: string = (await this._store.getData(key)) ?? null;\n    const existingData: PartialData<T> = existingDataJSON && JSON.parse(existingDataJSON);\n\n    const dataToBeSaved: PartialData<T> = {...existingData};\n\n    delete dataToBeSaved[attribute as string];\n\n    const dataToBeSavedJSON: string = JSON.stringify(dataToBeSaved);\n\n    await this._store.setData(key, dataToBeSavedJSON);\n  }\n\n  protected _resolveKey(store: Stores | string, userID?: string): string {\n    return userID ? `${store}-${this._id}-${userID}` : `${store}-${this._id}`;\n  }\n\n  protected isLocalStorageAvailable(): boolean {\n    try {\n      const testValue: string = '__ASGARDEO_AUTH_CORE_LOCAL_STORAGE_TEST__';\n\n      localStorage.setItem(testValue, testValue);\n      localStorage.removeItem(testValue);\n\n      return true;\n    } catch (error) {\n      return false;\n    }\n  }\n\n  public async setConfigData(config: Partial<AuthClientConfig<T>>): Promise<void> {\n    await this.setDataInBulk(this._resolveKey(Stores.ConfigData), config);\n  }\n\n  public async setOIDCProviderMetaData(oidcProviderMetaData: Partial<OIDCDiscoveryApiResponse>): Promise<void> {\n    this.setDataInBulk(this._resolveKey(Stores.OIDCProviderMetaData), oidcProviderMetaData);\n  }\n\n  public async setTemporaryData(temporaryData: Partial<TemporaryStore>, userID?: string): Promise<void> {\n    this.setDataInBulk(this._resolveKey(Stores.TemporaryData, userID), temporaryData);\n  }\n\n  public async setSessionData(sessionData: Partial<SessionData>, userID?: string): Promise<void> {\n    this.setDataInBulk(this._resolveKey(Stores.SessionData, userID), sessionData);\n  }\n\n  public async setCustomData<K>(key: string, customData: Partial<K>, userID?: string): Promise<void> {\n    this.setDataInBulk(this._resolveKey(key, userID), customData);\n  }\n\n  public async getConfigData(): Promise<AuthClientConfig<T>> {\n    return JSON.parse((await this._store.getData(this._resolveKey(Stores.ConfigData))) ?? null);\n  }\n\n  public async getOIDCProviderMetaData(): Promise<OIDCDiscoveryApiResponse> {\n    return JSON.parse((await this._store.getData(this._resolveKey(Stores.OIDCProviderMetaData))) ?? null);\n  }\n\n  public async getTemporaryData(userID?: string): Promise<TemporaryStore> {\n    return JSON.parse((await this._store.getData(this._resolveKey(Stores.TemporaryData, userID))) ?? null);\n  }\n\n  public async getSessionData(userID?: string): Promise<SessionData> {\n    return JSON.parse((await this._store.getData(this._resolveKey(Stores.SessionData, userID))) ?? null);\n  }\n\n  public async getCustomData<K>(key: string, userID?: string): Promise<K> {\n    return JSON.parse((await this._store.getData(this._resolveKey(key, userID))) ?? null);\n  }\n\n  public setSessionStatus(status: string): void {\n    // Using local storage to store the session status as it is required to be available across tabs.\n    this.isLocalStorageAvailable() && localStorage.setItem(`${ASGARDEO_SESSION_ACTIVE}`, status);\n  }\n\n  public getSessionStatus(): string {\n    return this.isLocalStorageAvailable() ? localStorage.getItem(`${ASGARDEO_SESSION_ACTIVE}`) ?? '' : '';\n  }\n\n  public removeSessionStatus(): void {\n    this.isLocalStorageAvailable() && localStorage.removeItem(`${ASGARDEO_SESSION_ACTIVE}`);\n  }\n\n  public async removeConfigData(): Promise<void> {\n    await this._store.removeData(this._resolveKey(Stores.ConfigData));\n  }\n\n  public async removeOIDCProviderMetaData(): Promise<void> {\n    await this._store.removeData(this._resolveKey(Stores.OIDCProviderMetaData));\n  }\n\n  public async removeTemporaryData(userID?: string): Promise<void> {\n    await this._store.removeData(this._resolveKey(Stores.TemporaryData, userID));\n  }\n\n  public async removeSessionData(userID?: string): Promise<void> {\n    await this._store.removeData(this._resolveKey(Stores.SessionData, userID));\n  }\n\n  public async getConfigDataParameter(key: keyof AuthClientConfig<T>): Promise<TemporaryStoreValue> {\n    const data: string = await this._store.getData(this._resolveKey(Stores.ConfigData));\n\n    return data && JSON.parse(data)[key];\n  }\n\n  public async getOIDCProviderMetaDataParameter(key: keyof OIDCDiscoveryApiResponse): Promise<TemporaryStoreValue> {\n    const data: string = await this._store.getData(this._resolveKey(Stores.OIDCProviderMetaData));\n\n    return data && JSON.parse(data)[key];\n  }\n\n  public async getTemporaryDataParameter(key: keyof TemporaryStore, userID?: string): Promise<TemporaryStoreValue> {\n    const data: string = await this._store.getData(this._resolveKey(Stores.TemporaryData, userID));\n\n    return data && JSON.parse(data)[key];\n  }\n\n  public async getSessionDataParameter(key: keyof SessionData, userID?: string): Promise<TemporaryStoreValue> {\n    const data: string = await this._store.getData(this._resolveKey(Stores.SessionData, userID));\n\n    return data && JSON.parse(data)[key];\n  }\n\n  public async setConfigDataParameter(key: keyof AuthClientConfig<T>, value: TemporaryStoreValue): Promise<void> {\n    await this.setValue(this._resolveKey(Stores.ConfigData), key, value);\n  }\n\n  public async setOIDCProviderMetaDataParameter(\n    key: keyof OIDCDiscoveryApiResponse,\n    value: TemporaryStoreValue,\n  ): Promise<void> {\n    await this.setValue(this._resolveKey(Stores.OIDCProviderMetaData), key, value);\n  }\n\n  public async setTemporaryDataParameter(\n    key: keyof TemporaryStore,\n    value: TemporaryStoreValue,\n    userID?: string,\n  ): Promise<void> {\n    await this.setValue(this._resolveKey(Stores.TemporaryData, userID), key, value);\n  }\n\n  public async setSessionDataParameter(\n    key: keyof SessionData,\n    value: TemporaryStoreValue,\n    userID?: string,\n  ): Promise<void> {\n    await this.setValue(this._resolveKey(Stores.SessionData, userID), key, value);\n  }\n\n  public async removeConfigDataParameter(key: keyof AuthClientConfig<T>): Promise<void> {\n    await this.removeValue(this._resolveKey(Stores.ConfigData), key);\n  }\n\n  public async removeOIDCProviderMetaDataParameter(key: keyof OIDCDiscoveryApiResponse): Promise<void> {\n    await this.removeValue(this._resolveKey(Stores.OIDCProviderMetaData), key);\n  }\n\n  public async removeTemporaryDataParameter(key: keyof TemporaryStore, userID?: string): Promise<void> {\n    await this.removeValue(this._resolveKey(Stores.TemporaryData, userID), key);\n  }\n\n  public async removeSessionDataParameter(key: keyof SessionData, userID?: string): Promise<void> {\n    await this.removeValue(this._resolveKey(Stores.SessionData, userID), key);\n  }\n}\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n/**\n * Enum representing different OAuth response modes.\n */\nexport enum ResponseMode {\n  /**\n   * Response is returned as POST parameters in an HTML form.\n   */\n  FormPost = 'form_post',\n\n  /**\n   * Response is returned as query parameters in the URL.\n   */\n  Query = 'query',\n\n  /**\n   * Response is returned directly to the client.\n   */\n  Direct = 'direct',\n}\n", "/**\n * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {AuthenticationCore} from './core';\nimport {DataLayer} from './data';\nimport {\n  AuthClientConfig,\n  BasicUserInfo,\n  CustomGrantConfig,\n  FetchResponse,\n  GetAuthURLConfig,\n} from './models';\nimport {Crypto} from '../models/crypto';\nimport {TokenResponse} from '../models/token';\nimport {IdTokenPayload} from '../models/id-token';\nimport {OIDCEndpoints} from '../models/oidc-endpoints';\nimport {Store} from '../models/store';\nimport {ResponseMode} from '../models/oauth-response';\nimport ScopeConstants from '../constants/ScopeConstants';\nimport OIDCDiscoveryConstants from '../constants/OIDCDiscoveryConstants';\nimport OIDCRequestConstants from '../constants/OIDCRequestConstants';\nimport { IsomorphicCrypto } from '../IsomorphicCrypto';\n\n/**\n * Default configurations.\n */\nconst DefaultConfig: Partial<AuthClientConfig<unknown>> = {\n  clockTolerance: 300,\n  enablePKCE: true,\n  responseMode: ResponseMode.Query,\n  scope: [ScopeConstants.OPENID],\n  sendCookiesInRequests: true,\n  validateIDToken: true,\n  validateIDTokenIssuer: true,\n};\n\n/**\n * This class provides the necessary methods needed to implement authentication.\n */\nexport class AsgardeoAuthClient<T> {\n  private _dataLayer!: DataLayer<T>;\n  private _authenticationCore!: AuthenticationCore<T>;\n\n  private static _instanceID: number;\n  static _authenticationCore: any;\n\n  /**\n   * This is the constructor method that returns an instance of the .\n   *\n   * @param store - The store object.\n   *\n   * @example\n   * ```\n   * const _store: Store = new DataStore();\n   * const auth = new AsgardeoAuthClient<CustomClientConfig>(_store);\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#constructor}\n   *\n   * @preserve\n   */\n  public constructor() {}\n\n  /**\n   *\n   * This method initializes the SDK with the config data.\n   *\n   * @param config - The config object to initialize with.\n   *\n   * @example\n   * const config = \\{\n   *     signInRedirectURL: \"http://localhost:3000/sign-in\",\n   *     clientID: \"client ID\",\n   *     baseUrl: \"https://localhost:9443\"\n   * \\}\n   *\n   * await auth.initialize(config);\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#initialize}\n   *\n   * @preserve\n   */\n  public async initialize(\n    config: AuthClientConfig<T>,\n    store: Store,\n    cryptoUtils: Crypto,\n    instanceID?: number,\n  ): Promise<void> {\n    const clientId: string = config.clientID;\n\n    if (!AsgardeoAuthClient._instanceID) {\n      AsgardeoAuthClient._instanceID = 0;\n    } else {\n      AsgardeoAuthClient._instanceID += 1;\n    }\n\n    if (instanceID) {\n      AsgardeoAuthClient._instanceID = instanceID;\n    }\n\n    if (!clientId) {\n      this._dataLayer = new DataLayer<T>(`instance_${AsgardeoAuthClient._instanceID}`, store);\n    } else {\n      this._dataLayer = new DataLayer<T>(`instance_${AsgardeoAuthClient._instanceID}-${clientId}`, store);\n    }\n\n    this._authenticationCore = new AuthenticationCore(this._dataLayer, cryptoUtils);\n    AsgardeoAuthClient._authenticationCore = new AuthenticationCore(this._dataLayer, cryptoUtils);\n\n    await this._dataLayer.setConfigData({\n      ...DefaultConfig,\n      ...config,\n      scope: [\n        ...(DefaultConfig.scope ?? []),\n        ...(config.scope?.filter((scope: string) => !DefaultConfig?.scope?.includes(scope)) ?? []),\n      ],\n    });\n  }\n\n  /**\n   * This method returns the `DataLayer` object that allows you to access authentication data.\n   *\n   * @returns - The `DataLayer` object.\n   *\n   * @example\n   * ```\n   * const data = auth.getDataLayer();\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getDataLayer}\n   *\n   * @preserve\n   */\n  public getDataLayer(): DataLayer<T> {\n    return this._dataLayer;\n  }\n\n  /**\n   * This method returns the `instanceID` variable of the given instance.\n   *\n   * @returns - The `instanceID` number.\n   *\n   * @example\n   * ```\n   * const instanceId = auth.getInstanceID();\n   * ```\n   *\n   * @preserve\n   */\n  public getInstanceID(): number {\n    return AsgardeoAuthClient._instanceID;\n  }\n\n  /**\n   * This is an async method that returns a Promise that resolves with the authorization URL parameters.\n   *\n   * @param config - (Optional) A config object to force initialization and pass\n   * custom path parameters such as the `fidp` parameter.\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @returns - A promise that resolves with the authorization URL parameters.\n   *\n   * @example\n   * ```\n   * auth.getAuthorizationURLParams().then((params)=>{\n   *  // console.log(params);\n   * }).catch((error)=>{\n   *  // console.error(error);\n   * });\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getAuthorizationURLParams}\n   *\n   * @preserve\n   */\n  public async getAuthorizationURLParams(config?: GetAuthURLConfig, userID?: string): Promise<Map<string, string>> {\n    const authRequestConfig: GetAuthURLConfig = {...config};\n\n    delete authRequestConfig?.forceInit;\n\n    if (\n      await this._dataLayer.getTemporaryDataParameter(\n        OIDCDiscoveryConstants.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED,\n      )\n    ) {\n      return this._authenticationCore.getAuthorizationURLParams(authRequestConfig, userID);\n    }\n\n    return this._authenticationCore.getOIDCProviderMetaData(config?.forceInit as boolean).then(() => {\n      return this._authenticationCore.getAuthorizationURLParams(authRequestConfig, userID);\n    });\n  }\n\n  /**\n   * This is an async method that returns a Promise that resolves with the authorization URL.\n   *\n   * @param config - (Optional) A config object to force initialization and pass\n   * custom path parameters such as the fidp parameter.\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @returns - A promise that resolves with the authorization URL.\n   *\n   * @example\n   * ```\n   * auth.getAuthorizationURL().then((url)=>{\n   *  // console.log(url);\n   * }).catch((error)=>{\n   *  // console.error(error);\n   * });\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getAuthorizationURL}\n   *\n   * @preserve\n   */\n  public async getAuthorizationURL(config?: GetAuthURLConfig, userID?: string): Promise<string> {\n    const authRequestConfig: GetAuthURLConfig = {...config};\n\n    delete authRequestConfig?.forceInit;\n\n    if (\n      await this._dataLayer.getTemporaryDataParameter(\n        OIDCDiscoveryConstants.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED,\n      )\n    ) {\n      return this._authenticationCore.getAuthorizationURL(authRequestConfig, userID);\n    }\n\n    return this._authenticationCore.getOIDCProviderMetaData(config?.forceInit as boolean).then(() => {\n      return this._authenticationCore.getAuthorizationURL(authRequestConfig, userID);\n    });\n  }\n\n  /**\n   * This is an async method that sends a request to obtain the access token and returns a Promise\n   * that resolves with the token and other relevant data.\n   *\n   * @param authorizationCode - The authorization code.\n   * @param sessionState - The session state.\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @returns - A Promise that resolves with the token response.\n   *\n   * @example\n   * ```\n   * auth.requestAccessToken(authCode, sessionState).then((token)=>{\n   *  // console.log(token);\n   * }).catch((error)=>{\n   *  // console.error(error);\n   * });\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#requestAccessToken}\n   *\n   *\n   * @preserve\n   */\n  public async requestAccessToken(\n    authorizationCode: string,\n    sessionState: string,\n    state: string,\n    userID?: string,\n    tokenRequestConfig?: {\n      params: Record<string, unknown>;\n    },\n  ): Promise<TokenResponse> {\n    if (\n      await this._dataLayer.getTemporaryDataParameter(\n        OIDCDiscoveryConstants.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED,\n      )\n    ) {\n      return this._authenticationCore.requestAccessToken(\n        authorizationCode,\n        sessionState,\n        state,\n        userID,\n        tokenRequestConfig,\n      );\n    }\n\n    return this._authenticationCore.getOIDCProviderMetaData(false).then(() => {\n      return this._authenticationCore.requestAccessToken(\n        authorizationCode,\n        sessionState,\n        state,\n        userID,\n        tokenRequestConfig,\n      );\n    });\n  }\n\n  /**\n   * This method returns the sign-out URL.\n   *\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * **This doesn't clear the authentication data.**\n   *\n   * @returns - A Promise that resolves with the sign-out URL.\n   *\n   * @example\n   * ```\n   * const signOutUrl = await auth.getSignOutURL();\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getSignOutURL}\n   *\n   * @preserve\n   */\n  public async getSignOutURL(userID?: string): Promise<string> {\n    return this._authenticationCore.getSignOutURL(userID);\n  }\n\n  /**\n   * This method returns OIDC service endpoints that are fetched from the `.well-known` endpoint.\n   *\n   * @returns - A Promise that resolves with an object containing the OIDC service endpoints.\n   *\n   * @example\n   * ```\n   * const endpoints = await auth.getOIDCServiceEndpoints();\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getOIDCServiceEndpoints}\n   *\n   * @preserve\n   */\n  public async getOIDCServiceEndpoints(): Promise<Partial<OIDCEndpoints>> {\n    return this._authenticationCore.getOIDCServiceEndpoints();\n  }\n\n  /**\n   * This method decodes the payload of the ID token and returns it.\n   *\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @returns - A Promise that resolves with the decoded ID token payload.\n   *\n   * @example\n   * ```\n   * const decodedIdToken = await auth.getDecodedIDToken();\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getDecodedIDToken}\n   *\n   * @preserve\n   */\n  public async getDecodedIDToken(userID?: string): Promise<IdTokenPayload> {\n    return this._authenticationCore.getDecodedIDToken(userID);\n  }\n\n  /**\n   * This method returns the ID token.\n   *\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @returns - A Promise that resolves with the ID token.\n   *\n   * @example\n   * ```\n   * const idToken = await auth.getIDToken();\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getIDToken}\n   *\n   * @preserve\n   */\n  public async getIDToken(userID?: string): Promise<string> {\n    return this._authenticationCore.getIDToken(userID);\n  }\n\n  /**\n   * This method returns the basic user information obtained from the ID token.\n   *\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @returns - A Promise that resolves with an object containing the basic user information.\n   *\n   * @example\n   * ```\n   * const userInfo = await auth.getBasicUserInfo();\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getBasicUserInfo}\n   *\n   * @preserve\n   */\n  public async getBasicUserInfo(userID?: string): Promise<BasicUserInfo> {\n    return this._authenticationCore.getBasicUserInfo(userID);\n  }\n\n  /**\n   * This method returns the crypto helper object.\n   *\n   * @returns - A Promise that resolves with a IsomorphicCrypto object.\n   *\n   * @example\n   * ```\n   * const cryptoHelper = await auth.IsomorphicCrypto();\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getCryptoHelper}\n   *\n   * @preserve\n   */\n  public async getCryptoHelper(): Promise<IsomorphicCrypto> {\n    return this._authenticationCore.getCryptoHelper();\n  }\n\n  /**\n   * This method revokes the access token.\n   *\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * **This method also clears the authentication data.**\n   *\n   * @returns - A Promise that returns the response of the revoke-access-token request.\n   *\n   * @example\n   * ```\n   * auth.revokeAccessToken().then((response)=>{\n   *  // console.log(response);\n   * }).catch((error)=>{\n   *  // console.error(error);\n   * });\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#revokeAccessToken}\n   *\n   * @preserve\n   */\n  public revokeAccessToken(userID?: string): Promise<FetchResponse> {\n    return this._authenticationCore.revokeAccessToken(userID);\n  }\n\n  /**\n   * This method refreshes the access token and returns a Promise that resolves with the new access\n   * token and other relevant data.\n   *\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @returns - A Promise that resolves with the token response.\n   *\n   * @example\n   * ```\n   * auth.refreshAccessToken().then((response)=>{\n   *  // console.log(response);\n   * }).catch((error)=>{\n   *  // console.error(error);\n   * });\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#refreshAccessToken}\n   *\n   * @preserve\n   */\n  public refreshAccessToken(userID?: string): Promise<TokenResponse> {\n    return this._authenticationCore.refreshAccessToken(userID);\n  }\n\n  /**\n   * This method returns the access token.\n   *\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @returns - A Promise that resolves with the access token.\n   *\n   * @example\n   * ```\n   * const accessToken = await auth.getAccessToken();\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getAccessToken}\n   *\n   * @preserve\n   */\n  public async getAccessToken(userID?: string): Promise<string> {\n    return this._authenticationCore.getAccessToken(userID);\n  }\n\n  /**\n   * This method sends a custom-grant request and returns a Promise that resolves with the response\n   * depending on the config passed.\n   *\n   * @param config - A config object containing the custom grant configurations.\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @returns - A Promise that resolves with the response depending\n   * on your configurations.\n   *\n   * @example\n   * ```\n   * const config = {\n   *   attachToken: false,\n   *   data: {\n   *       client_id: \"{{clientID}}\",\n   *       grant_type: \"account_switch\",\n   *       scope: \"{{scope}}\",\n   *       token: \"{{token}}\",\n   *   },\n   *   id: \"account-switch\",\n   *   returnResponse: true,\n   *   returnsSession: true,\n   *   signInRequired: true\n   * }\n   *\n   * auth.requestCustomGrant(config).then((response)=>{\n   *  // console.log(response);\n   * }).catch((error)=>{\n   *  // console.error(error);\n   * });\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#requestCustomGrant}\n   *\n   * @preserve\n   */\n  public requestCustomGrant(config: CustomGrantConfig, userID?: string): Promise<TokenResponse | FetchResponse> {\n    return this._authenticationCore.requestCustomGrant(config, userID);\n  }\n\n  /**\n   * This method returns if the user is authenticated or not.\n   *\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @returns - A Promise that resolves with `true` if the user is authenticated, `false` otherwise.\n   *\n   * @example\n   * ```\n   * await auth.isAuthenticated();\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#isAuthenticated}\n   *\n   * @preserve\n   */\n  public async isAuthenticated(userID?: string): Promise<boolean> {\n    return this._authenticationCore.isAuthenticated(userID);\n  }\n\n  /**\n   * This method returns the PKCE code generated during the generation of the authentication URL.\n   *\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   * @param state - The state parameter that was passed in the authentication URL.\n   *\n   * @returns - A Promise that resolves with the PKCE code.\n   *\n   * @example\n   * ```\n   * const pkce = await getPKCECode();\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#getPKCECode}\n   *\n   * @preserve\n   */\n  public async getPKCECode(state: string, userID?: string): Promise<string> {\n    return this._authenticationCore.getPKCECode(state, userID);\n  }\n\n  /**\n   * This method sets the PKCE code to the data store.\n   *\n   * @param pkce - The PKCE code.\n   * @param state - The state parameter that was passed in the authentication URL.\n   * @param userID - (Optional) A unique ID of the user to be authenticated. This is useful in multi-user\n   * scenarios where each user should be uniquely identified.\n   *\n   * @example\n   * ```\n   * await auth.setPKCECode(\"pkce_code\")\n   * ```\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#setPKCECode}\n   *\n   * @preserve\n   */\n  public async setPKCECode(pkce: string, state: string, userID?: string): Promise<void> {\n    await this._authenticationCore.setPKCECode(pkce, state, userID);\n  }\n\n  /**\n   * This method returns if the sign-out is successful or not.\n   *\n   * @param signOutRedirectUrl - The URL to which the user has been redirected to after signing-out.\n   *\n   * **The server appends path parameters to the `signOutRedirectURL` and these path parameters\n   *  are required for this method to function.**\n   *\n   * @returns - `true` if successful, `false` otherwise.\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#isSignOutSuccessful}\n   *\n   * @preserve\n   */\n  public static isSignOutSuccessful(signOutRedirectURL: string): boolean {\n    const url: URL = new URL(signOutRedirectURL);\n    const stateParam: string | null = url.searchParams.get(OIDCRequestConstants.Params.STATE);\n    const error: boolean = Boolean(url.searchParams.get('error'));\n\n    return stateParam ? stateParam === OIDCRequestConstants.Params.SIGN_OUT_SUCCESS && !error : false;\n  }\n\n  /**\n   * This method returns if the sign-out has failed or not.\n   *\n   * @param signOutRedirectUrl - The URL to which the user has been redirected to after signing-out.\n   *\n   * **The server appends path parameters to the `signOutRedirectURL` and these path parameters\n   *  are required for this method to function.**\n   *\n   * @returns - `true` if successful, `false` otherwise.\n   *\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#didSignOutFail}\n   *\n   * @preserve\n   */\n  public static didSignOutFail(signOutRedirectURL: string): boolean {\n    const url: URL = new URL(signOutRedirectURL);\n    const stateParam: string | null = url.searchParams.get(OIDCRequestConstants.Params.STATE);\n    const error: boolean = Boolean(url.searchParams.get('error'));\n\n    return stateParam ? stateParam === OIDCRequestConstants.Params.SIGN_OUT_SUCCESS && error : false;\n  }\n\n  /**\n   * This method updates the configuration that was passed into the constructor when instantiating this class.\n   *\n   * @param config - A config object to update the SDK configurations with.\n   *\n   * @example\n   * ```\n   * const config = {\n   *     signInRedirectURL: \"http://localhost:3000/sign-in\",\n   *     clientID: \"client ID\",\n   *     baseUrl: \"https://localhost:9443\"\n   * }\n   *\n   * await auth.updateConfig(config);\n   * ```\n   * {@link https://github.com/asgardeo/asgardeo-auth-js-sdk/tree/master#updateConfig}\n   *\n   * @preserve\n   */\n  public async updateConfig(config: Partial<AuthClientConfig<T>>): Promise<void> {\n    await this._authenticationCore.updateConfig(config);\n  }\n\n  public static async clearUserSessionData(userID?: string): Promise<void> {\n    await this._authenticationCore.clearUserSessionData(userID);\n  }\n}\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n/**\n * Base class for all Asgardeo errors. This class extends the native Error class\n * and adds support for error codes and proper stack traces. Each error is prefixed\n * with a shield emoji and the SDK name for easy identification.\n *\n * @example\n * ```typescript\n * // Create a new error with a message and code\n * throw new AsgardeoError(\n *   \"Invalid authentication response\",\n *   \"AUTH_ERROR\"\n * );\n *\n * // Or with a specific SDK name\n * throw new AsgardeoError(\n *   \"Invalid authentication response\",\n *   \"AUTH_ERROR\",\n *   \"@asgardeo/react\"\n * );\n *\n * // The error message will be formatted as:\n * // \uD83D\uDEE1\uFE0F Asgardeo React: Invalid authentication response\n * //\n * // (code=\"AUTH_ERROR\")\n */\nexport default class AsgardeoError extends Error {\n  public readonly code: string;\n  public readonly origin: string;\n\n  private static resolveOrigin(origin: string): string {\n    if (!origin) {\n      return '@asgardeo/javascript';\n    }\n\n    return `@asgardeo/${origin}`;\n  }\n\n  constructor(message: string, code: string, origin: string) {\n    const _origin: string = AsgardeoError.resolveOrigin(origin);\n    const prefix: string = `\uD83D\uDEE1\uFE0F Asgardeo - ${_origin}:`;\n    const regex: RegExp = new RegExp(`\uD83D\uDEE1\uFE0F\\\\s*Asgardeo\\\\s*-\\\\s*${_origin}:`, 'i');\n    const sanitized: string = message.replace(regex, '');\n    const _message: string = `${prefix} ${sanitized.trim()}\\n\\n(code=\"${code}\")\\n`;\n\n    super(_message);\n\n    this.name = new.target.name;\n    this.code = code;\n    this.origin = _origin;\n\n    if (Error.captureStackTrace) {\n      Error.captureStackTrace(this, new.target);\n    }\n  }\n\n  public override toString(): string {\n    return `[${this.name}]\\nMessage: ${this.message}`;\n  }\n}\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport AsgardeoError from './AsgardeoError';\n\n/**\n * Base class for all API-related errors in Asgardeo. This class extends AsgardeoError\n * and adds support for HTTP status codes and status text.\n *\n * @example\n * ```typescript\n * throw new AsgardeoAPIError(\n *   \"Failed to fetch user data\",\n *   \"API_FETCH_ERROR\",\n *   404,\n *   \"Not Found\"\n * );\n * ```\n */\nexport default class AsgardeoAPIError extends AsgardeoError {\n  /**\n   * Creates an instance of AsgardeoAPIError.\n   *\n   * @param message - Human-readable description of the error\n   * @param code - A unique error code that identifies the error type\n   * @param statusCode - HTTP status code of the failed request\n   * @param statusText - HTTP status text of the failed request\n   * @param origin - Optional. The SDK origin (e.g. 'react', 'vue'). Defaults to generic 'Asgardeo'\n   * @constructor\n   */\n  constructor(\n    message: string,\n    code: string,\n    origin: string,\n    public readonly statusCode?: number,\n    public readonly statusText?: string,\n  ) {\n    super(message, code, origin);\n\n    Object.defineProperty(this, 'name', {\n      value: 'AsgardeoAPIError',\n      configurable: true,\n      writable: true,\n    });\n  }\n\n  /**\n   * Returns a string representation of the API error\n   * @returns Formatted error string with name, code, status, and message\n   */\n  public override toString(): string {\n    const status = this.statusCode ? ` (HTTP ${this.statusCode} - ${this.statusText})` : '';\n    return `[${this.name}] (code=\"${this.code}\")${status}\\nMessage: ${this.message}`;\n  }\n}\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {User} from '../../models/user';\nimport AsgardeoAPIError from '../../errors/AsgardeoAPIError';\n\n/**\n * Retrieves the user information from the specified OIDC userinfo endpoint.\n *\n * @param requestConfig - Request configuration object.\n * @returns A promise that resolves with the user information.\n * @throw\n *   const userInfo = await getUserInfo({\n *     url: \"https://api.asgardeo.io/t/<ORGANIZATION>/oauth2/userinfo\",\n *   });\n *   console.log(userInfo);\n * } catch (error) {\n *   if (error instanceof AsgardeoAPIError) {\n *     console.error('Failed to get user info:', error.message);\n *   }\n * }\n * ```\n */\nconst getUserInfo = async ({url, ...requestConfig}: Partial<Request>): Promise<User> => {\n  try {\n    new URL(url);\n  } catch (error) {\n    throw new AsgardeoAPIError(\n      'Invalid endpoint URL provided',\n      'getUserInfo-ValidationError-001',\n      'javascript',\n      400,\n      'Invalid Request',\n    );\n  }\n\n  const response: Response = await fetch(url, {\n    method: 'GET',\n    headers: {\n      'Content-Type': 'application/json',\n      Accept: 'application/json',\n    },\n    ...requestConfig,\n  });\n\n  if (!response.ok) {\n    const errorText = await response.text();\n\n    throw new AsgardeoAPIError(\n      `Failed to fetch user info: ${errorText}`,\n      'getUserInfo-ResponseError-001',\n      'javascript',\n      response.status,\n      response.statusText,\n    );\n  }\n\n  return await response.json() as User;\n};\n\nexport default getUserInfo;\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport AsgardeoError from './AsgardeoError';\n\n/**\n * Base class for all runtime errors in Asgardeo. This class extends AsgardeoError\n * and adds support for additional error details. Use this class for errors that occur\n * during runtime execution that are not related to API calls.\n *\n * @example\n * ```typescript\n * throw new AsgardeoRuntimeError(\n *   \"Failed to parse configuration\",\n *   \"CONFIG_PARSE_ERROR\",\n *   { invalidField: \"redirectUri\" }\n * );\n * ```\n */\nexport default class AsgardeoRuntimeError extends AsgardeoError {\n  /**\n   * Creates an instance of AsgardeoRuntimeError.\n   *\n   * @param message - Human-readable description of the error\n   * @param code - A unique error code that identifies the error type\n   * @param details - Additional details about the error that might be helpful for debugging\n   * @param origin - Optional. The SDK origin (e.g. 'react', 'vue'). Defaults to generic 'Asgardeo'\n   * @constructor\n   */\n  constructor(message: string, code: string, origin: string, public readonly details?: unknown) {\n    super(message, code, origin);\n\n    Object.defineProperty(this, 'name', {\n      value: 'AsgardeoRuntimeError',\n      configurable: true,\n      writable: true,\n    });\n  }\n\n  /**\n   * Returns a string representation of the runtime error\n   * @returns Formatted error string with name, code, details, and message\n   */\n  public  override toString(): string {\n    const details = this.details ? `\\nDetails: ${JSON.stringify(this.details, null, 2)}` : '';\n    return `[${this.name}] (code=\"${this.code}\")${details}\\nMessage: ${this.message}`;\n  }\n}\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nexport interface SchemaAttribute {\n  name: string;\n  type: string;\n  multiValued: boolean;\n  description?: string;\n  required?: boolean;\n  caseExact: boolean;\n  mutability: string;\n  returned: string;\n  uniqueness: string;\n  displayName?: string;\n  displayOrder?: string;\n  regEx?: string;\n  supportedByDefault?: string;\n  sharedProfileValueResolvingMethod?: string;\n  subAttributes?: SchemaAttribute[];\n}\n\n/**\n * Represents a SCIM2 schema definition\n */\nexport interface Schema {\n  /** Schema identifier */\n  id: string;\n  /** Schema name */\n  name: string;\n  /** Schema description */\n  description: string;\n  /** Schema attributes */\n  attributes: SchemaAttribute[];\n}\n\n/**\n * Well-known SCIM2 schema IDs\n */\nexport enum WellKnownSchemaIds {\n  /** Core Schema */\n  Core = 'urn:ietf:params:scim:schemas:core:2.0',\n  /** User Schema */\n  User = 'urn:ietf:params:scim:schemas:core:2.0:User',\n  /** Enterprise User Schema */\n  EnterpriseUser = 'urn:ietf:params:scim:schemas:extension:enterprise:2.0:User',\n  /** System User Schema */\n  SystemUser = 'urn:scim:wso2:schema',\n  /** Custom User Schema */\n  CustomUser = 'urn:scim:schemas:extension:custom:User',\n}\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport {AsgardeoClient, SignInOptions, SignOutOptions} from './models/client';\nimport {User} from './models/user';\nimport {Config} from './models/config';\n\n/**\n * Base class for implementing Asgardeo clients.\n * This class provides the core functionality for managing user authentication and sessions.\n *\n * @typeParam T - Configuration type that extends Config.\n */\nabstract class AsgardeoJavaScriptClient<T = Config> implements AsgardeoClient<T> {\n  /**\n   * Initializes the authentication client with provided configuration.\n   *\n   * @param config - SDK Client instance configuration options.\n   * @returns Promise resolving to boolean indicating success.\n   */\n  abstract initialize(config: T): Promise<boolean>;\n\n  /**\n   * Gets user information from the session.\n   *\n   * @returns User object containing user details.\n   */\n  abstract getUser(): Promise<User>;\n\n  /**\n   * Checks if the client is currently loading.\n   * This can be used to determine if the client is in the process of initializing or fetching user data.\n   *\n   * @returns Boolean indicating if the client is loading.\n   */\n  abstract isLoading(): boolean;\n\n  /**\n   * Checks if a user is signed in.\n   * FIXME: Check if this should return a boolean or a Promise<boolean>.\n   *\n   * @returns Promise resolving to boolean indicating sign-in status.\n   */\n  abstract isSignedIn(): Promise<boolean>;\n\n  /**\n   * Initiates the sign-in process for the user.\n   *\n   * @param options - Optional sign-in options like additional parameters to be sent in the authorize request, etc.\n   * @returns Promise resolving the user upon successful sign in.\n   */\n  abstract signIn(options?: SignInOptions): Promise<User>;\n\n  /**\n   * Signs out the currently signed-in user.\n   *\n   * @param options - Optional sign-out options like additional parameters to be sent in the sign-out request, etc.\n   * @param afterSignOut - Callback function to be executed after sign-out is complete.\n   * @returns A promise that resolves to true if sign-out is successful\n   */\n  abstract signOut(options?: SignOutOptions, afterSignOut?: (redirectUrl: string) => void): Promise<string>;\n\n  /**\n   * Signs out the currently signed-in user with an optional session ID.\n   *\n   * @param options - Optional sign-out options like additional parameters to be sent in the sign-out request, etc.\n   * @param sessionId - Optional session ID to be used for sign-out.\n   *                    This can be useful in scenarios where multiple sessions are managed.\n   * @param afterSignOut - Callback function to be executed after sign-out is complete.\n   * @returns A promise that resolves to true if sign-out is successful\n   */\n  abstract signOut(\n    options?: SignOutOptions,\n    sessionId?: string,\n    afterSignOut?: (redirectUrl: string) => void,\n  ): Promise<string>;\n}\n\nexport default AsgardeoJavaScriptClient;\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\nimport { RecursivePartial } from '../models/utility-types';\nimport {Theme, ThemeConfig} from './types';\n\nconst lightTheme: ThemeConfig = {\n  colors: {\n    primary: {\n      main: '#1a73e8',\n      contrastText: '#ffffff',\n    },\n    secondary: {\n      main: '#424242',\n      contrastText: '#ffffff',\n    },\n    background: {\n      surface: '#f5f5f5',\n      disabled: '#f0f0f0',\n      body: {\n        main: '#1a1a1a',\n      },\n    },\n    error: {\n      main: '#d32f2f',\n      contrastText: '#ffffff',\n    },\n    surface: '#f5f5f5',\n    text: {\n      primary: '#1a1a1a',\n      secondary: '#666666',\n    },\n    border: '#e0e0e0',\n  },\n  spacing: {\n    unit: 8,\n  },\n  borderRadius: {\n    small: '4px',\n    medium: '8px',\n    large: '16px',\n  },\n};\n\nconst darkTheme: ThemeConfig = {\n  colors: {\n    primary: {\n      main: '#1a73e8',\n      contrastText: '#ffffff',\n    },\n    secondary: {\n      main: '#424242',\n      contrastText: '#ffffff',\n    },\n    background: {\n      surface: '#121212',\n      disabled: '#1f1f1f',\n      body: {\n        main: '#ffffff',\n      },\n    },\n    error: {\n      main: '#d32f2f',\n      contrastText: '#ffffff',\n    },\n    surface: '#2d2d2d',\n    text: {\n      primary: '#ffffff',\n      secondary: '#b3b3b3',\n    },\n    border: '#404040',\n  },\n  spacing: {\n    unit: 8,\n  },\n  borderRadius: {\n    small: '4px',\n    medium: '8px',\n    large: '16px',\n  },\n};\n\nconst toCssVariables = (theme: RecursivePartial<ThemeConfig>): Record<string, string> => {\n  const cssVars: Record<string, string> = {};\n\n  // Colors\n  cssVars['--asgardeo-color-primary-main'] = theme.colors.primary.main;\n  cssVars['--asgardeo-color-primary-contrastText'] = theme.colors.primary.contrastText;\n  cssVars['--asgardeo-color-secondary-main'] = theme.colors.secondary.main;\n  cssVars['--asgardeo-color-secondary-contrastText'] = theme.colors.secondary.contrastText;\n  cssVars['--asgardeo-color-background-surface'] = theme.colors.background.surface;\n  cssVars['--asgardeo-color-background-disabled'] = theme.colors.background.disabled;\n  cssVars['--asgardeo-color-background-body-main'] = theme.colors.background.body.main;\n  cssVars['--asgardeo-color-error-main'] = theme.colors.error.main;\n  cssVars['--asgardeo-color-error-contrastText'] = theme.colors.error.contrastText;\n  cssVars['--asgardeo-color-surface'] = theme.colors.surface;\n  cssVars['--asgardeo-color-text-primary'] = theme.colors.text.primary;\n  cssVars['--asgardeo-color-text-secondary'] = theme.colors.text.secondary;\n  cssVars['--asgardeo-color-border'] = theme.colors.border;\n\n  // Spacing\n  cssVars['--asgardeo-spacing-unit'] = `${theme.spacing.unit}px`;\n\n  // Border Radius\n  cssVars['--asgardeo-border-radius-small'] = theme.borderRadius.small;\n  cssVars['--asgardeo-border-radius-medium'] = theme.borderRadius.medium;\n  cssVars['--asgardeo-border-radius-large'] = theme.borderRadius.large;\n\n  return cssVars;\n};\n\nconst createTheme = (config: RecursivePartial<ThemeConfig> = {}, isDark = false): Theme => {\n  const baseTheme = isDark ? darkTheme : lightTheme;\n  const mergedConfig = {\n    ...baseTheme,\n    ...config,\n    colors: {\n      ...baseTheme.colors,\n      ...config.colors,\n      secondary: {\n        ...baseTheme.colors.secondary,\n        ...(config.colors?.secondary || {}),\n      },\n    },\n    spacing: {\n      ...baseTheme.spacing,\n      ...config.spacing,\n    },\n    borderRadius: {\n      ...baseTheme.borderRadius,\n      ...config.borderRadius,\n    },\n  } as ThemeConfig;\n\n  return {\n    ...mergedConfig,\n    cssVariables: toCssVariables(mergedConfig),\n  };\n};\n\nexport default createTheme;\n", "/**\n * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).\n *\n * WSO2 LLC. licenses this file to you under the Apache License,\n * Version 2.0 (the \"License\"); you may not use this file except\n * in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing,\n * software distributed under the License is distributed on an\n * \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n * KIND, either express or implied. See the License for the\n * specific language governing permissions and limitations\n * under the License.\n */\n\n/**\n * Removes a trailing slash from a path string if it exists.\n *\n * @param path - The string path to process\n * @returns The path without a trailing slash\n *\n * @example\n * ```typescript\n * removeTrailingSlash('/path/to/something/') // returns '/path/to/something'\n * removeTrailingSlash('/path/to/something') // returns '/path/to/something'\n * ```\n */\nconst removeTrailingSlash = (path: string): string => (path.endsWith('/') ? path.slice(0, -1) : path);\n\nexport default removeTrailingSlash;\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACmCA,IAAM,gBAAgB;AAAA;AAAA;AAAA;AAAA,EAIpB,SAAS;AAAA;AAAA;AAAA;AAAA,IAIP,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMX,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA,MAMf,WAAW;AAAA,IACb;AAAA,EACF;AACF;AAEA,IAAO,wBAAQ;;;AC3Bf,IAAM,iCAAiC,CAAC,UAA0B;AAChE,QAAM,QAAgB,SAAS,MAAM,MAAM,UAAU,EAAE,CAAC,CAAC;AAEzD,SAAO,GAAG,sBAAc,QAAQ,YAAY,aAAa,GAAG,sBAAc,QAAQ,YAAY,SAAS,GAAG,KAAK;AACjH;AAEA,IAAO,yCAAQ;;;ACJf,IAAM,0CAA0C,CAAC,SAAiB,UAA2B;AAC3F,QAAM,QAAgB,SAAS,QAAQ,MAAM,sBAAc,QAAQ,YAAY,SAAS,EAAE,CAAC,CAAC;AAE5F,SAAO,QAAQ,GAAG,KAAK,YAAY,KAAK,KAAK,WAAW,KAAK;AAC/D;AAEA,IAAO,kDAAQ;;;ACvBR,IAAM,wBAAN,MAA4B;AAAA,EAKxB,YACH,MACA,MACA,SACF;AARF,wBAAO;AACP,wBAAO;AACP,wBAAO;AAOH,SAAK,UAAU;AACf,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,WAAO,eAAe,MAAM,WAAW,SAAS;AAAA,EACpD;AACJ;;;ACFA,IAAM,wCAAwC,CAAC,SAAyB,mBAA2B,QAAgB;AACjH,QAAM,MAAc,QAAQ;AAE5B,MAAI,CAAC,IAAK,QAAO;AAEjB,QAAM,SAAmB,IAAI,MAAM,gBAAgB;AAGnD,SAAO,OAAO,SAAS,IAAI,OAAO,OAAO,SAAS,CAAC,IAAI;AACzD;AAEA,IAAO,gDAAQ;;;ACEf,IAAM,+BAA+B,CAAC,YAAqD;AACzF,QAAM,kBAA2C,EAAC,GAAG,QAAO;AAE5D,QAAM,iBAAiB;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,iBAAe,QAAQ,WAAS;AAC9B,WAAO,gBAAgB,KAA6B;AAAA,EACtD,CAAC;AAED,QAAM,aAAsC,CAAC;AAE7C,SAAO,QAAQ,eAAe,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAM;AACxD,UAAM,gBAAgB,IACnB,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,MAAO,MAAM,IAAI,OAAO,KAAK,CAAC,EAAE,YAAY,IAAI,KAAK,MAAM,CAAC,CAAE,EACzE,KAAK,EAAE;AAEV,eAAW,aAAa,IAAI;AAAA,EAC9B,CAAC;AAED,SAAO;AACT;AAEA,IAAO,uCAAQ;;;AC/Cf,IAAM,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrB,QAAQ;AACV;AAEA,IAAO,yBAAQ;;;ACTf,IAAM,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7B,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,IAKT,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA,IAMf,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA,IAMhB,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA,IAMb,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,IAMR,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,IAMN,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,IAMZ,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAMP,UAAU;AAAA,EACZ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOP,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOX,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,QAKT,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA,QAMf,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,QAMP,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,QAMZ,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA,QAMb,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,QAMN,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA,QAMhB,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,QAMR,UAAU;AAAA,MACZ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOA,kCAAkC;AAAA,IACpC;AAAA,EACF;AACF;AAEA,IAAO,iCAAQ;;;AC5If,IAAM,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM7B,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA,IAKZ,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAMP,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA,IAMV,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAMP,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,IAMX,eAAe;AAAA,EACjB;AACF;AAEA,IAAO,iCAAQ;;;ACxCR,IAAM,uBAAN,MAA8B;AAAA,EAM5B,YAAY,WAAyB,cAAgC;AAL5E,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AAGN,SAAK,aAAa;AAClB,SAAK,UAAU,YAAY,MAAM,KAAK,WAAW,cAAc;AAC/D,SAAK,wBAAwB,YAAY,MAAM,KAAK,WAAW,wBAAwB;AACvF,SAAK,gBAAgB;AAAA,EACvB;AAAA,EAEA,MAAa,iBAAiB,UAAuE;AACnG,UAAM,uBAAiD,CAAC;AACxD,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAE9D,eAAW,aACT,OAAO,KAAK,WAAW,SAAS,EAAE,QAAQ,CAAC,iBAAyB;AAClE,YAAM,iBAAyB,aAAa,QAAQ,UAAU,CAAC,WAAmB,IAAI,OAAO,YAAY,CAAC,EAAE;AAE5G,2BAAqB,cAAc,IAAI,YAAY,YAAY,WAAW,UAAU,YAAY,IAAI;AAAA,IACtG,CAAC;AAEH,WAAO,EAAC,GAAG,UAAU,GAAG,qBAAoB;AAAA,EAC9C;AAAA,EAEA,MAAa,6BAAyE;AACpF,UAAM,uBAAiD,CAAC;AACxD,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAE9D,UAAM,oBAA8B;AAAA,MAClC,+BAAuB,QAAQ,YAAY,UAAU;AAAA,MACrD,+BAAuB,QAAQ,YAAY,UAAU;AAAA,MACrD,+BAAuB,QAAQ,YAAY,UAAU;AAAA,MACrD,+BAAuB,QAAQ,YAAY,UAAU;AAAA,MACrD,+BAAuB,QAAQ,YAAY,UAAU;AAAA,MACrD,+BAAuB,QAAQ,YAAY,UAAU;AAAA,MACrD,+BAAuB,QAAQ,YAAY,UAAU;AAAA,MACrD,+BAAuB,QAAQ,YAAY,UAAU;AAAA,IACvD;AAEA,UAAM,8BAAuC,WAAW,YACpD,kBAAkB,MAAM,CAAC,oBAA4B;AACnD,aAAO,WAAW,YACd,OAAO,KAAK,WAAW,SAAS,EAAE,KAAK,CAAC,iBAAyB;AAC/D,cAAM,iBAAyB,aAAa;AAAA,UAC1C;AAAA,UACA,CAAC,WAAmB,IAAI,OAAO,YAAY,CAAC;AAAA,QAC9C;AAEA,eAAO,mBAAmB;AAAA,MAC5B,CAAC,IACD;AAAA,IACN,CAAC,IACD;AAEJ,QAAI,CAAC,6BAA6B;AAChC,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAEF;AAAA,IACF;AAEA,eAAW,aACT,OAAO,KAAK,WAAW,SAAS,EAAE,QAAQ,CAAC,iBAAyB;AAClE,YAAM,iBAAyB,aAAa,QAAQ,UAAU,CAAC,WAAmB,IAAI,OAAO,YAAY,CAAC,EAAE;AAE5G,2BAAqB,cAAc,IAAI,YAAY,YAAY,WAAW,UAAU,YAAY,IAAI;AAAA,IACtG,CAAC;AAEH,WAAO,EAAC,GAAG,qBAAoB;AAAA,EACjC;AAAA,EAEA,MAAa,4BAAwE;AACnF,UAAM,uBAA0D,CAAC;AACjE,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAE9D,UAAM,UAAmB,WAAmB;AAE5C,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,eAAW,aACT,OAAO,KAAK,WAAW,SAAS,EAAE,QAAQ,CAAC,iBAAyB;AAClE,YAAM,iBAAyB,aAAa,QAAQ,UAAU,CAAC,WAAmB,IAAI,OAAO,YAAY,CAAC,EAAE;AAE5G,2BAAqB,cAAc,IAAI,YAAY,YAAY,WAAW,UAAU,YAAY,IAAI;AAAA,IACtG,CAAC;AAEH,UAAM,mBAA6C;AAAA,MACjD,CAAC,+BAAuB,QAAQ,YAAY,UACzC,aAAa,GAAG,GAAG,OAAO,GAAG,+BAAuB,UAAU,aAAa;AAAA,MAC9E,CAAC,+BAAuB,QAAQ,YAAY,UACzC,WAAW,GAAG,GAAG,OAAO,GAAG,+BAAuB,UAAU,WAAW;AAAA,MAC1E,CAAC,+BAAuB,QAAQ,YAAY,UACzC,MAAM,GAAG,GAAG,OAAO,GAAG,+BAAuB,UAAU,MAAM;AAAA,MAChE,CAAC,+BAAuB,QAAQ,YAAY,UAAU,IAAI,GAAG,GAAG,OAAO,GAAG,+BAAuB,UAAU,IAAI;AAAA,MAC/G,CAAC,+BAAuB,QAAQ,YAAY,UACzC,cAAc,GAAG,GAAG,OAAO,GAAG,+BAAuB,UAAU,cAAc;AAAA,MAChF,CAAC,+BAAuB,QAAQ,YAAY,UACzC,UAAU,GAAG,GAAG,OAAO,GAAG,+BAAuB,UAAU,UAAU;AAAA,MACxE,CAAC,+BAAuB,QAAQ,YAAY,UACzC,KAAK,GAAG,GAAG,OAAO,GAAG,+BAAuB,UAAU,KAAK;AAAA,MAC9D,CAAC,+BAAuB,QAAQ,YAAY,UACzC,QAAQ,GAAG,GAAG,OAAO,GAAG,+BAAuB,UAAU,QAAQ;AAAA,IACtE;AAEA,WAAO,EAAC,GAAG,kBAAkB,GAAG,qBAAoB;AAAA,EACtD;AAAA,EAEA,MAAa,gBAAgB,SAAmC;AAC9D,UAAM,gBAAoC,MAAM,KAAK,WAAW,wBAAwB,GAAG;AAC3F,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAE9D,QAAI,CAAC,gBAAgB,aAAa,KAAK,EAAE,WAAW,GAAG;AACrD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAEF;AAAA,IACF;AAEA,QAAI;AAEJ,QAAI;AACF,iBAAW,MAAM,MAAM,cAAc;AAAA,QACnC,aAAa,WAAW,wBAAwB,YAAY;AAAA,MAC9D,CAAC;AAAA,IACH,SAAS,OAAY;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,OAAO,CAAC,SAAS,IAAI;AAC3C,YAAM,IAAI;AAAA,QACR;AAAA,QACA,sDAAsD,SAAS,UAAU;AAAA,QACxE,MAAM,SAAS,KAAK;AAAA,MACvB;AAAA,IACF;AAEA,UAAM,UAA8B,MAAM,KAAK,sBAAsB,GAAG;AAExE,UAAM,EAAC,KAAI,IAA6B,MAAM,SAAS,KAAK;AAI5D,UAAM,MAAW,MAAM,KAAK,cAAc,oBAAoB,QAAQ,MAAM,GAAG,EAAE,CAAC,GAAG,IAAI;AAEzF,WAAO,KAAK,cAAc;AAAA,MACxB;AAAA,MACA;AAAA,OACC,MAAM,KAAK,QAAQ,GAAG;AAAA,MACvB,UAAU;AAAA,MACV,KAAK,cAAc,cAAc,OAAO,EAAE;AAAA,OACzC,MAAM,KAAK,QAAQ,GAAG;AAAA,OACtB,MAAM,KAAK,QAAQ,GAAG,yBAAyB;AAAA,IAClD;AAAA,EACF;AAAA,EAEO,yBAAyB,SAAwC;AACtE,UAAM,UAA0B,KAAK,cAAc,cAAc,OAAO;AACxE,UAAM,eAAuB,8CAAsC,OAAO;AAC1E,UAAM,WAAmB,UAAU,UAAU,KAAK;AAClD,UAAM,YAAoB,UAAU,YAAY,KAAK;AACrD,UAAM,aAAqB,UAAU,aAAa,KAAK;AACvD,UAAM,WACJ,aAAa,aAAa,GAAG,SAAS,IAAI,UAAU,KAAK,YAAY,YAAY,aAAa,aAAa;AAC7G,UAAM,cAAsB,QAAQ,sBAAsB;AAE1D,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,qCAA6B,OAAO;AAAA,IACzC;AAAA,EACF;AAAA,EAEA,MAAa,+BAA+B,MAAc,QAAkC;AAC1F,QAAI,QAAgB,uBAAe;AACnC,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAC9D,UAAM,cAA2B,MAAM,KAAK,WAAW,eAAe,MAAM;AAE5E,QAAI,WAAW,SAAS,WAAW,MAAM,SAAS,GAAG;AACnD,UAAI,CAAC,WAAW,MAAM,SAAS,uBAAe,MAAM,GAAG;AACrD,mBAAW,MAAM,KAAK,uBAAe,MAAM;AAAA,MAC7C;AACA,cAAQ,WAAW,MAAM,KAAK,GAAG;AAAA,IACnC;AAEA,WAAO,KACJ,QAAQ,+BAAuB,aAAa,OAAO,YAAY,YAAY,EAC3E;AAAA,MACC,+BAAuB,aAAa;AAAA,MACpC,KAAK,yBAAyB,YAAY,QAAQ,EAAE;AAAA,IACtD,EACC,QAAQ,+BAAuB,aAAa,OAAO,KAAK,EACxD,QAAQ,+BAAuB,aAAa,WAAW,WAAW,QAAQ,EAC1E,QAAQ,+BAAuB,aAAa,eAAe,WAAW,gBAAgB,EAAE;AAAA,EAC7F;AAAA,EAEA,MAAa,qBAAqB,QAAgC;AAChE,UAAM,KAAK,WAAW,oBAAoB,MAAM;AAChD,UAAM,KAAK,WAAW,kBAAkB,MAAM;AAAA,EAChD;AAAA,EAEA,MAAa,oBAAoB,UAAoB,QAAyC;AAC5F,QAAI,SAAS,WAAW,OAAO,CAAC,SAAS,IAAI;AAC3C,YAAM,IAAI;AAAA,QACR;AAAA,QACA,uDAAuD,SAAS,UAAU;AAAA,QACzE,MAAM,SAAS,KAAK;AAAA,MACvB;AAAA,IACF;AAGA,UAAM,iBAA0C,MAAM,SAAS,KAAK;AAEpE,mBAAe,cAAa,oBAAI,KAAK,GAAE,QAAQ;AAE/C,UAAM,yBAA8C,MAAM,KAAK,QAAQ,GAAG;AAE1E,QAAI,uBAAuB;AACzB,aAAO,KAAK,gBAAgB,eAAe,QAAQ,EAAE,KAAK,YAAY;AACpE,cAAM,KAAK,WAAW,eAAe,gBAAgB,MAAM;AAE3D,cAAM,gBAA+B;AAAA,UACnC,aAAa,eAAe;AAAA,UAC5B,WAAW,eAAe;AAAA,UAC1B,WAAW,eAAe;AAAA,UAC1B,SAAS,eAAe;AAAA,UACxB,cAAc,eAAe;AAAA,UAC7B,OAAO,eAAe;AAAA,UACtB,WAAW,eAAe;AAAA,QAC5B;AAEA,eAAO,QAAQ,QAAQ,aAAa;AAAA,MACtC,CAAC;AAAA,IACH,OAAO;AACL,YAAM,gBAA+B;AAAA,QACnC,aAAa,eAAe;AAAA,QAC5B,WAAW,eAAe;AAAA,QAC1B,WAAW,eAAe;AAAA,QAC1B,SAAS,eAAe;AAAA,QACxB,cAAc,eAAe;AAAA,QAC7B,OAAO,eAAe;AAAA,QACtB,WAAW,eAAe;AAAA,MAC5B;AAEA,YAAM,KAAK,WAAW,eAAe,gBAAgB,MAAM;AAE3D,aAAO,QAAQ,QAAQ,aAAa;AAAA,IACtC;AAAA,EACF;AACF;;;ACxQA,IAAM,yBAAyB,CAAC,cAAsC;AACpE,QAAM,OAAiB,CAAC;AAExB,SAAO,KAAK,SAAS,EAAE,QAAQ,CAAC,QAAgB;AAC9C,QAAI,IAAI,WAAW,sBAAc,QAAQ,YAAY,aAAa,GAAG;AACnE,WAAK,KAAK,GAAG;AAAA,IACf;AAAA,EACF,CAAC;AAED,QAAM,UAA8B,KAAK,KAAK,EAAE,IAAI;AACpD,QAAM,QAAgB,SAAS,SAAS,MAAM,sBAAc,QAAQ,YAAY,SAAS,EAAE,CAAC,KAAK,IAAI;AAErG,SAAO,GAAG,sBAAc,QAAQ,YAAY,aAAa,GAAG,sBAAc,QAAQ,YAAY,SAAS,GAAG,QAAQ,CAAC;AACrH;AAEA,IAAO,iCAAQ;;;AC5Bf,IAAM,uBAAuB;AAAA,EAC3B,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA,IAKN,oBAAoB;AAAA;AAAA;AAAA;AAAA,IAKpB,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA,IAMf,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAMP,kBAAkB;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS;AAAA;AAAA;AAAA;AAAA,IAIP,SAAS;AAAA;AAAA;AAAA;AAAA,MAIP,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMX,cAAc;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAO,+BAAQ;;;AClCf,IAAM,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrB,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAYnB,sBAAsB,CAAC,SAAS,SAAS,SAAS,OAAO;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMP,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMX,qBAAqB;AAAA,IACvB;AAAA,EACF;AACF;AAEA,IAAO,yBAAQ;;;ACvDR,IAAM,mBAAN,MAAgC;AAAA,EAG9B,YAAY,aAAwB;AAF3C,wBAAQ;AAGN,SAAK,eAAe;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,kBAA0B;AAC/B,WAAO,KAAK,aAAa,gBAAgB,KAAK,aAAa,oBAAoB,EAAE,CAAC;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASO,iBAAiB,UAA0B;AAChD,WAAO,KAAK,aAAa,gBAAgB,KAAK,aAAa,WAAW,QAAQ,CAAC;AAAA,EACjF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaO,oBAAoB,WAAmB,MAAoC;AAChF,UAAM,aAAqC,KAAK,MAAM,KAAK,aAAa,gBAAgB,SAAS,CAAC;AAElG,eAAW,OAAO,MAAM;AACtB,UAAI,WAAW,KAAK,MAAM,IAAI,KAAK;AACjC,eAAO;AAAA,MACT;AAAA,IACF;AAEA,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,qFACE,WAAW,KAAK,IAChB,wBACA,KAAK,IAAI,CAAC,QAAsB,IAAI,GAAG,EAAE,KAAK,IAAI;AAAA,IACtD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBO,eACL,SACA,KACA,UACA,QACA,UACA,gBACA,mBACkB;AAClB,WAAO,KAAK,aACT;AAAA,MACC;AAAA,MACA;AAAA,MACA,uBAAe,oBAAoB;AAAA,MACnC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EACC,KAAK,CAAC,aAAsB;AAC3B,UAAI,UAAU;AACZ,eAAO,QAAQ,QAAQ,IAAI;AAAA,MAC7B;AAEA,aAAO,QAAQ;AAAA,QACb,IAAI;AAAA,UACF;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWO,cAAc,SAAiC;AACpD,QAAI;AACF,YAAM,aAAqB,KAAK,aAAa,gBAAgB,QAAQ,MAAM,GAAG,EAAE,CAAC,CAAC;AAClF,YAAM,UAA0B,KAAK,MAAM,UAAU;AAErD,aAAO;AAAA,IACT,SAAS,OAAY;AACnB,YAAM,IAAI,sBAAsB,2BAA2B,6BAA6B,KAAK;AAAA,IAC/F;AAAA,EACF;AACF;;;ACvGO,IAAM,qBAAN,MAA4B;AAAA,EAQ1B,YAAY,WAAyB,aAAqB;AAPjE,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AAGN,SAAK,eAAe;AACpB,SAAK,gBAAgB,IAAI,iBAAiB,WAAW;AACrD,SAAK,wBAAwB,IAAI,qBAAqB,WAAW,KAAK,aAAa;AACnF,SAAK,aAAa;AAClB,SAAK,UAAU,YAAY,MAAM,KAAK,WAAW,cAAc;AAC/D,SAAK,wBAAwB,YAAY,MAAM,KAAK,WAAW,wBAAwB;AAAA,EACzF;AAAA,EAEA,MAAa,0BACX,QACA,QAC8B;AAC9B,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAE9D,UAAM,yBAA8C,oBAAI,IAAoB;AAE5E,2BAAuB,IAAI,iBAAiB,MAAM;AAClD,2BAAuB,IAAI,aAAa,WAAW,QAAQ;AAE3D,QAAI,QAAgB,uBAAe;AAEnC,QAAI,WAAW,SAAS,WAAW,MAAM,SAAS,GAAG;AACnD,UAAI,CAAC,WAAW,MAAM,SAAS,uBAAe,MAAM,GAAG;AACrD,mBAAW,MAAM,KAAK,uBAAe,MAAM;AAAA,MAC7C;AACA,cAAQ,WAAW,MAAM,KAAK,GAAG;AAAA,IACnC;AAEA,2BAAuB,IAAI,SAAS,KAAK;AACzC,2BAAuB,IAAI,gBAAgB,WAAW,iBAAiB;AAEvE,QAAI,WAAW,cAAc;AAC3B,6BAAuB,IAAI,iBAAiB,WAAW,YAAY;AAAA,IACrE;AAEA,UAAM,YAA4B,MAAM,KAAK,WAAW,iBAAiB,MAAM;AAC/E,UAAM,UAAkB,MAAM,+BAAuB,SAAS;AAE9D,QAAI,WAAW,YAAY;AACzB,YAAM,eAAuB,KAAK,eAAe,gBAAgB;AACjE,YAAM,gBAAwB,KAAK,eAAe,iBAAiB,YAAY;AAE/E,YAAM,KAAK,WAAW,0BAA0B,SAAS,cAAc,MAAM;AAC7E,6BAAuB,IAAI,yBAAyB,MAAM;AAC1D,6BAAuB,IAAI,kBAAkB,aAAa;AAAA,IAC5D;AAEA,QAAI,WAAW,QAAQ;AACrB,6BAAuB,IAAI,UAAU,WAAW,MAAM;AAAA,IACxD;AAEA,UAAM,eAAmD;AAEzD,QAAI,cAAc;AAChB,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,YAAY,GAAG;AACvD,YAAI,OAAO,MAAM,SAAS,MAAM,QAAQ,6BAAqB,OAAO,OAAO;AACzE,iCAAuB,IAAI,KAAK,MAAM,SAAS,CAAC;AAAA,QAClD;AAAA,MACF;AAAA,IACF;AAEA,2BAAuB;AAAA,MACrB,6BAAqB,OAAO;AAAA,MAC5B;AAAA,QACE;AAAA,QACA,eAAe,aAAa,6BAAqB,OAAO,KAAK,GAAG,SAAS,IAAI;AAAA,MAC/E;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,oBAAoB,QAAiC,QAAkC;AAClG,UAAM,oBAA6B,MAAM,KAAK,WAAW;AAAA,MACvD,+BAAuB,QAAQ,YAAY,UAAU;AAAA,IACvD;AAEA,QAAI,CAAC,qBAAqB,kBAAkB,KAAK,EAAE,WAAW,GAAG;AAC/D,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAEF;AAAA,IACF;AAEA,UAAM,mBAAwB,IAAI,IAAI,iBAAiB;AAEvD,UAAM,yBAA8C,MAAM,KAAK,0BAA0B,QAAQ,MAAM;AAEvG,eAAW,CAAC,KAAK,KAAK,KAAK,uBAAuB,QAAQ,GAAG;AAC3D,uBAAiB,aAAa,OAAO,KAAK,KAAK;AAAA,IACjD;AAEA,WAAO,iBAAiB,SAAS;AAAA,EACnC;AAAA,EAEA,MAAa,mBACX,mBACA,cACA,OACA,QACA,oBAGwB;AACxB,UAAM,iBAAqC,MAAM,KAAK,sBAAsB,GAAG;AAC/E,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAE9D,QAAI,CAAC,iBAAiB,cAAc,KAAK,EAAE,WAAW,GAAG;AACvD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAEF;AAAA,IACF;AAEA,oBACG,MAAM,KAAK,WAAW;AAAA,MACrB,6BAAqB,OAAO;AAAA,MAC5B;AAAA,MACA;AAAA,IACF;AAEF,UAAM,OAAwB,IAAI,gBAAgB;AAElD,SAAK,IAAI,aAAa,WAAW,QAAQ;AAEzC,QAAI,WAAW,gBAAgB,WAAW,aAAa,KAAK,EAAE,SAAS,GAAG;AACxE,WAAK,IAAI,iBAAiB,WAAW,YAAY;AAAA,IACnD;AAEA,UAAM,OAAe;AAErB,SAAK,IAAI,QAAQ,IAAI;AAErB,SAAK,IAAI,cAAc,oBAAoB;AAC3C,SAAK,IAAI,gBAAgB,WAAW,iBAAiB;AAErD,QAAI,oBAAoB,QAAQ;AAC9B,aAAO,QAAQ,mBAAmB,MAAM,EAAE,QAAQ,CAAC,CAAC,KAAK,KAAK,MAAqC;AACjG,aAAK,OAAO,KAAK,KAAe;AAAA,MAClC,CAAC;AAAA,IACH;AAEA,QAAI,WAAW,YAAY;AACzB,WAAK;AAAA,QACH;AAAA,QACA,GAAG,MAAM,KAAK,WAAW,0BAA0B,uCAA+B,KAAK,GAAG,MAAM,CAAC;AAAA,MACnG;AAEA,YAAM,KAAK,WAAW,6BAA6B,uCAA+B,KAAK,GAAG,MAAM;AAAA,IAClG;AAEA,QAAI;AAEJ,QAAI;AACF,sBAAgB,MAAM,MAAM,eAAe;AAAA,QACzC;AAAA,QACA,aAAa,WAAW,wBAAwB,YAAY;AAAA,QAC5D,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,SAAS,OAAY;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,CAAC,cAAc,IAAI;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,QACA,uCAAuC,cAAc,UAAU;AAAA,QAC9D,MAAM,cAAc,KAAK;AAAA,MAC5B;AAAA,IACF;AAEA,WAAO,MAAM,KAAK,sBAAsB,oBAAoB,eAAe,MAAM;AAAA,EACnF;AAAA,EAEA,MAAa,mBAAmB,QAAyC;AACvE,UAAM,iBAAqC,MAAM,KAAK,sBAAsB,GAAG;AAC/E,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAC9D,UAAM,cAA2B,MAAM,KAAK,WAAW,eAAe,MAAM;AAE5E,QAAI,CAAC,YAAY,eAAe;AAC9B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAEF;AAAA,IACF;AAEA,QAAI,CAAC,iBAAiB,cAAc,KAAK,EAAE,WAAW,GAAG;AACvD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAEF;AAAA,IACF;AAEA,UAAM,OAAiB,CAAC;AAExB,SAAK,KAAK,aAAa,WAAW,QAAQ,EAAE;AAC5C,SAAK,KAAK,iBAAiB,YAAY,aAAa,EAAE;AACtD,SAAK,KAAK,0BAA0B;AAEpC,QAAI,WAAW,gBAAgB,WAAW,aAAa,KAAK,EAAE,SAAS,GAAG;AACxE,WAAK,KAAK,iBAAiB,WAAW,YAAY,EAAE;AAAA,IACtD;AAEA,QAAI;AAEJ,QAAI;AACF,sBAAgB,MAAM,MAAM,eAAe;AAAA,QACzC,MAAM,KAAK,KAAK,GAAG;AAAA,QACnB,aAAa,WAAW,wBAAwB,YAAY;AAAA,QAC5D,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,SAAS,OAAY;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,CAAC,cAAc,IAAI;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,QACA,uCAAuC,cAAc,UAAU;AAAA,QAC9D,MAAM,cAAc,KAAK;AAAA,MAC5B;AAAA,IACF;AAEA,WAAO,KAAK,sBAAsB,oBAAoB,eAAe,MAAM;AAAA,EAC7E;AAAA,EAEA,MAAa,kBAAkB,QAAyC;AACtE,UAAM,uBAA2C,MAAM,KAAK,sBAAsB,GAAG;AACrF,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAE9D,QAAI,CAAC,uBAAuB,oBAAoB,KAAK,EAAE,WAAW,GAAG;AACnE,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAEF;AAAA,IACF;AAEA,UAAM,OAAiB,CAAC;AAExB,SAAK,KAAK,aAAa,WAAW,QAAQ,EAAE;AAC5C,SAAK,KAAK,UAAU,MAAM,KAAK,WAAW,eAAe,MAAM,GAAG,YAAY,EAAE;AAChF,SAAK,KAAK,8BAA8B;AAExC,QAAI,WAAW,gBAAgB,WAAW,aAAa,KAAK,EAAE,SAAS,GAAG;AACxE,WAAK,KAAK,iBAAiB,WAAW,YAAY,EAAE;AAAA,IACtD;AAEA,QAAI;AAEJ,QAAI;AACF,iBAAW,MAAM,MAAM,qBAAqB;AAAA,QAC1C,MAAM,KAAK,KAAK,GAAG;AAAA,QACnB,aAAa,WAAW,wBAAwB,YAAY;AAAA,QAC5D,SAAS;AAAA,UACP,QAAQ;AAAA,UACR,gBAAgB;AAAA,QAClB;AAAA,QACA,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,SAAS,OAAY;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,OAAO,CAAC,SAAS,IAAI;AAC3C,YAAM,IAAI;AAAA,QACR;AAAA,QACA,qEAAqE,SAAS,UAAU;AAAA,QACvF,MAAM,SAAS,KAAK;AAAA,MACvB;AAAA,IACF;AAEA,SAAK,sBAAsB,qBAAqB,MAAM;AAEtD,WAAO,QAAQ,QAAQ,QAAQ;AAAA,EACjC;AAAA,EAEA,MAAa,mBACX,mBACA,QACwC;AACxC,UAAM,uBAAiD,MAAM,KAAK,sBAAsB;AACxF,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAE9D,QAAI;AAEJ,QAAI,kBAAkB,iBAAiB,kBAAkB,cAAc,KAAK,EAAE,WAAW,GAAG;AAC1F,sBAAgB,kBAAkB;AAAA,IACpC,OAAO;AACL,sBAAgB,qBAAqB;AAAA,IACvC;AAEA,QAAI,CAAC,iBAAiB,cAAc,KAAK,EAAE,WAAW,GAAG;AACvD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAEF;AAAA,IACF;AAEA,UAAM,OAAiB,MAAM,QAAQ;AAAA,MACnC,OAAO,QAAQ,kBAAkB,IAAI,EAAE,IAAI,OAAO,CAAC,KAAK,KAAK,MAAiC;AAC5F,cAAM,WAAmB,MAAM,KAAK,sBAAsB;AAAA,UACxD;AAAA,UACA;AAAA,QACF;AAEA,eAAO,GAAG,GAAG,IAAI,QAAQ;AAAA,MAC3B,CAAC;AAAA,IACH;AAEA,QAAI,iBAAsC;AAAA,MACxC,QAAQ;AAAA,MACR,gBAAgB;AAAA,IAClB;AAEA,QAAI,kBAAkB,aAAa;AACjC,uBAAiB;AAAA,QACf,GAAG;AAAA,QACH,eAAe,WAAW,MAAM,KAAK,WAAW,eAAe,MAAM,GAAG,YAAY;AAAA,MACtF;AAAA,IACF;AAEA,UAAM,gBAAoC;AAAA,MACxC,MAAM,KAAK,KAAK,GAAG;AAAA,MACnB,aAAa,WAAW,wBAAwB,YAAY;AAAA,MAC5D,SAAS,IAAI,QAAQ,cAAc;AAAA,MACnC,QAAQ;AAAA,IACV;AAEA,QAAI;AAEJ,QAAI;AACF,iBAAW,MAAM,MAAM,eAAe,aAAa;AAAA,IACrD,SAAS,OAAY;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,OAAO,CAAC,SAAS,IAAI;AAC3C,YAAM,IAAI;AAAA,QACR;AAAA,QACA,mEAAmE,SAAS,UAAU;AAAA,QACrF,MAAM,SAAS,KAAK;AAAA,MACvB;AAAA,IACF;AAEA,QAAI,kBAAkB,gBAAgB;AACpC,aAAO,KAAK,sBAAsB,oBAAoB,UAAU,MAAM;AAAA,IACxE,OAAO;AACL,aAAO,QAAQ,QAAS,MAAM,SAAS,KAAK,CAAmC;AAAA,IACjF;AAAA,EACF;AAAA,EAEA,MAAa,iBAAiB,QAAyC;AACrE,UAAM,cAA2B,MAAM,KAAK,WAAW,eAAe,MAAM;AAC5E,UAAM,oBAA2C,KAAK,sBAAsB;AAAA,MAC1E,aAAa;AAAA,IACf;AAEA,QAAI,gBAA+B;AAAA,MACjC,eAAe,YAAY;AAAA,MAC3B,cAAc,YAAY;AAAA,IAC5B;AAEA,WAAO,KAAK,iBAAiB,EAAE,QAAQ,CAAC,QAAgB;AACtD,UAAI,kBAAkB,GAAG,MAAM,UAAa,kBAAkB,GAAG,MAAM,MAAM,kBAAkB,GAAG,MAAM,MAAM;AAC5G,eAAO,kBAAkB,GAAG;AAAA,MAC9B;AAAA,IACF,CAAC;AAED,oBAAgB,EAAC,GAAG,eAAe,GAAG,kBAAiB;AAEvD,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,kBAAkB,QAA0C;AACvE,UAAM,WAAmB,MAAM,KAAK,WAAW,eAAe,MAAM,GAAG;AACvE,UAAM,UAA0B,KAAK,cAAc,cAAc,OAAO;AAExE,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,kBAA6C;AACxD,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAa,WAAW,QAAkC;AACxD,YAAQ,MAAM,KAAK,WAAW,eAAe,MAAM,GAAG;AAAA,EACxD;AAAA,EAEA,MAAa,wBAAwB,WAAmC;AACtE,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAE9D,QACE,CAAC,aACA,MAAM,KAAK,WAAW;AAAA,MACrB,+BAAuB,QAAQ,YAAY;AAAA,IAC7C,GACA;AACA,aAAO,QAAQ,QAAQ;AAAA,IACzB;AAEA,UAAM,oBAA6B,WAAmB;AAEtD,QAAI,mBAAmB;AACrB,UAAI;AAEJ,UAAI;AACF,mBAAW,MAAM,MAAM,iBAAiB;AACxC,YAAI,SAAS,WAAW,OAAO,CAAC,SAAS,IAAI;AAC3C,gBAAM,IAAI,MAAM;AAAA,QAClB;AAAA,MACF,QAAQ;AACN,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,KAAK,WAAW;AAAA,QACpB,MAAM,KAAK,sBAAsB,iBAAiB,MAAM,SAAS,KAAK,CAAC;AAAA,MACzE;AACA,YAAM,KAAK,WAAW;AAAA,QACpB,+BAAuB,QAAQ,YAAY;AAAA,QAC3C;AAAA,MACF;AAEA,aAAO,QAAQ,QAAQ;AAAA,IACzB,WAAY,WAAmB,SAAS;AACtC,UAAI;AACF,cAAM,KAAK,WAAW,wBAAwB,MAAM,KAAK,sBAAsB,0BAA0B,CAAC;AAAA,MAC5G,SAAS,OAAY;AACnB,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,UACA,SAAS;AAAA,QACX;AAAA,MACF;AACA,YAAM,KAAK,WAAW;AAAA,QACpB,+BAAuB,QAAQ,YAAY;AAAA,QAC3C;AAAA,MACF;AAEA,aAAO,QAAQ,QAAQ;AAAA,IACzB,OAAO;AACL,YAAM,KAAK,WAAW,wBAAwB,MAAM,KAAK,sBAAsB,2BAA2B,CAAC;AAE3G,YAAM,KAAK,WAAW;AAAA,QACpB,+BAAuB,QAAQ,YAAY;AAAA,QAC3C;AAAA,MACF;AAEA,aAAO,QAAQ,QAAQ;AAAA,IACzB;AAAA,EACF;AAAA;AAAA,EAGA,MAAa,0BAA2D;AACtE,UAAM,uBAAiD,MAAM,KAAK,sBAAsB;AAExF,WAAO;AAAA,MACL,uBAAuB,qBAAqB,0BAA0B;AAAA,MACtE,oBAAoB,qBAAqB,wBAAwB;AAAA,MACjE,oBAAoB,qBAAqB,wBAAwB;AAAA,MACjE,uBAAuB,qBAAqB,0BAA0B;AAAA,MACtE,QAAQ,qBAAqB,UAAU;AAAA,MACvC,SAAS,qBAAqB,YAAY;AAAA,MAC1C,sBAAsB,qBAAqB,yBAAyB;AAAA,MACpE,oBAAoB,qBAAqB,uBAAuB;AAAA,MAChE,eAAe,qBAAqB,kBAAkB;AAAA,MACtD,kBAAkB,qBAAqB,qBAAqB;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAa,cAAc,QAAkC;AAC3D,UAAM,kBAAsC,MAAM,KAAK,sBAAsB,IAAI;AACjF,UAAM,aAAqC,MAAM,KAAK,QAAQ;AAE9D,QAAI,CAAC,kBAAkB,eAAe,KAAK,EAAE,WAAW,GAAG;AACzD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAEF;AAAA,IACF;AAEA,UAAM,cAAsB,YAAY,sBAAsB,YAAY;AAE1E,QAAI,CAAC,eAAe,YAAY,KAAK,EAAE,WAAW,GAAG;AACnD,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAEF;AAAA,IACF;AACA,UAAM,cAA+B,IAAI,gBAAgB;AAEzD,gBAAY,IAAI,4BAA4B,WAAW;AAEvD,QAAI,WAAW,4BAA4B;AACzC,YAAM,WAAmB,MAAM,KAAK,WAAW,eAAe,MAAM,IAAI;AAExE,UAAI,CAAC,WAAW,QAAQ,KAAK,EAAE,WAAW,GAAG;AAC3C,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,kBAAY,IAAI,iBAAiB,OAAO;AAAA,IAC1C,OAAO;AACL,kBAAY,IAAI,aAAa,WAAW,QAAQ;AAAA,IAClD;AAEA,gBAAY,IAAI,SAAS,6BAAqB,OAAO,gBAAgB;AAErE,WAAO,GAAG,cAAc,IAAI,YAAY,SAAS,CAAC;AAAA,EACpD;AAAA,EAEA,MAAa,qBAAqB,QAAgC;AAChE,UAAM,KAAK,sBAAsB,qBAAqB,MAAM;AAAA,EAC9D;AAAA,EAEA,MAAa,eAAe,QAAkC;AAC5D,YAAQ,MAAM,KAAK,WAAW,eAAe,MAAM,IAAI;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,aAAa,QAAkC;AAC1D,YAAQ,MAAM,KAAK,WAAW,eAAe,MAAM,IAAI;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,aAAa,QAAkC;AAC1D,YAAQ,MAAM,KAAK,WAAW,eAAe,MAAM,IAAI;AAAA,EACzD;AAAA,EAEA,MAAa,gBAAgB,QAAmC;AAC9D,UAAM,yBAAkC,QAAQ,MAAM,KAAK,eAAe,MAAM,CAAC;AAGjF,UAAM,YAAoB,MAAM,KAAK,aAAa,MAAM;AAGxD,UAAM,kBAA0B,MAAM,KAAK,aAAa,MAAM;AAG9D,QAAI,CAAC,iBAAiB;AACpB,aAAO;AAAA,IACT;AAGA,UAAM,YAAoB,SAAS,eAAe,IAAI;AACtD,UAAM,eAAsB,oBAAI,KAAK,GAAE,QAAQ;AAC/C,UAAM,qBAA8B,YAAY,YAAY;AAE5D,UAAM,kBAA2B,0BAA0B;AAE3D,WAAO;AAAA,EACT;AAAA,EAEA,MAAa,YAAY,OAAe,QAAkC;AACxE,WAAQ,MAAM,KAAK,WAAW,0BAA0B,uCAA+B,KAAK,GAAG,MAAM;AAAA,EACvG;AAAA,EAEA,MAAa,YAAY,MAAc,OAAe,QAAgC;AACpF,WAAO,MAAM,KAAK,WAAW,0BAA0B,uCAA+B,KAAK,GAAG,MAAM,MAAM;AAAA,EAC5G;AAAA,EAEA,MAAa,aAAa,QAAqD;AAC7E,UAAM,KAAK,WAAW,cAAc,MAAM;AAC1C,UAAM,KAAK,wBAAwB,IAAI;AAAA,EACzC;AACF;;;ACxoBO,IAAM,0BAAkC;AAExC,IAAM,YAAN,MAAmB;AAAA,EAGjB,YAAY,YAAoB,OAAc;AAFrD,wBAAU;AACV,wBAAU;AAER,SAAK,MAAM;AACX,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,MAAgB,cAAc,KAAa,MAAqC;AAC9E,UAAM,mBAA4B,MAAM,KAAK,OAAO,QAAQ,GAAG,KAAM;AACrE,UAAM,eAA+B,oBAAoB,KAAK,MAAM,gBAAgB;AAEpF,UAAM,gBAAgC,EAAC,GAAG,cAAc,GAAG,KAAI;AAC/D,UAAM,oBAA4B,KAAK,UAAU,aAAa;AAE9D,UAAM,KAAK,OAAO,QAAQ,KAAK,iBAAiB;AAAA,EAClD;AAAA,EAEA,MAAgB,SACd,KACA,WACA,OACe;AACf,UAAM,mBAA4B,MAAM,KAAK,OAAO,QAAQ,GAAG,KAAM;AACrE,UAAM,eAA+B,oBAAoB,KAAK,MAAM,gBAAgB;AAEpF,UAAM,gBAAgC,EAAC,GAAG,cAAc,CAAC,SAAS,GAAG,MAAK;AAC1E,UAAM,oBAA4B,KAAK,UAAU,aAAa;AAE9D,UAAM,KAAK,OAAO,QAAQ,KAAK,iBAAiB;AAAA,EAClD;AAAA,EAEA,MAAgB,YACd,KACA,WACe;AACf,UAAM,mBAA4B,MAAM,KAAK,OAAO,QAAQ,GAAG,KAAM;AACrE,UAAM,eAA+B,oBAAoB,KAAK,MAAM,gBAAgB;AAEpF,UAAM,gBAAgC,EAAC,GAAG,aAAY;AAEtD,WAAO,cAAc,SAAmB;AAExC,UAAM,oBAA4B,KAAK,UAAU,aAAa;AAE9D,UAAM,KAAK,OAAO,QAAQ,KAAK,iBAAiB;AAAA,EAClD;AAAA,EAEU,YAAY,OAAwB,QAAyB;AACrE,WAAO,SAAS,GAAG,KAAK,IAAI,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,KAAK,IAAI,KAAK,GAAG;AAAA,EACzE;AAAA,EAEU,0BAAmC;AAC3C,QAAI;AACF,YAAM,YAAoB;AAE1B,mBAAa,QAAQ,WAAW,SAAS;AACzC,mBAAa,WAAW,SAAS;AAEjC,aAAO;AAAA,IACT,SAAS,OAAO;AACd,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAa,cAAc,QAAqD;AAC9E,UAAM,KAAK,cAAc,KAAK,0CAA6B,GAAG,MAAM;AAAA,EACtE;AAAA,EAEA,MAAa,wBAAwB,sBAAwE;AAC3G,SAAK,cAAc,KAAK,gEAAuC,GAAG,oBAAoB;AAAA,EACxF;AAAA,EAEA,MAAa,iBAAiB,eAAwC,QAAgC;AACpG,SAAK,cAAc,KAAK,kDAAkC,MAAM,GAAG,aAAa;AAAA,EAClF;AAAA,EAEA,MAAa,eAAe,aAAmC,QAAgC;AAC7F,SAAK,cAAc,KAAK,8CAAgC,MAAM,GAAG,WAAW;AAAA,EAC9E;AAAA,EAEA,MAAa,cAAiB,KAAa,YAAwB,QAAgC;AACjG,SAAK,cAAc,KAAK,YAAY,KAAK,MAAM,GAAG,UAAU;AAAA,EAC9D;AAAA,EAEA,MAAa,gBAA8C;AACzD,WAAO,KAAK,MAAO,MAAM,KAAK,OAAO,QAAQ,KAAK,0CAA6B,CAAC,KAAM,IAAI;AAAA,EAC5F;AAAA,EAEA,MAAa,0BAA6D;AACxE,WAAO,KAAK,MAAO,MAAM,KAAK,OAAO,QAAQ,KAAK,gEAAuC,CAAC,KAAM,IAAI;AAAA,EACtG;AAAA,EAEA,MAAa,iBAAiB,QAA0C;AACtE,WAAO,KAAK,MAAO,MAAM,KAAK,OAAO,QAAQ,KAAK,kDAAkC,MAAM,CAAC,KAAM,IAAI;AAAA,EACvG;AAAA,EAEA,MAAa,eAAe,QAAuC;AACjE,WAAO,KAAK,MAAO,MAAM,KAAK,OAAO,QAAQ,KAAK,8CAAgC,MAAM,CAAC,KAAM,IAAI;AAAA,EACrG;AAAA,EAEA,MAAa,cAAiB,KAAa,QAA6B;AACtE,WAAO,KAAK,MAAO,MAAM,KAAK,OAAO,QAAQ,KAAK,YAAY,KAAK,MAAM,CAAC,KAAM,IAAI;AAAA,EACtF;AAAA,EAEO,iBAAiB,QAAsB;AAE5C,SAAK,wBAAwB,KAAK,aAAa,QAAQ,GAAG,uBAAuB,IAAI,MAAM;AAAA,EAC7F;AAAA,EAEO,mBAA2B;AAChC,WAAO,KAAK,wBAAwB,IAAI,aAAa,QAAQ,GAAG,uBAAuB,EAAE,KAAK,KAAK;AAAA,EACrG;AAAA,EAEO,sBAA4B;AACjC,SAAK,wBAAwB,KAAK,aAAa,WAAW,GAAG,uBAAuB,EAAE;AAAA,EACxF;AAAA,EAEA,MAAa,mBAAkC;AAC7C,UAAM,KAAK,OAAO,WAAW,KAAK,0CAA6B,CAAC;AAAA,EAClE;AAAA,EAEA,MAAa,6BAA4C;AACvD,UAAM,KAAK,OAAO,WAAW,KAAK,gEAAuC,CAAC;AAAA,EAC5E;AAAA,EAEA,MAAa,oBAAoB,QAAgC;AAC/D,UAAM,KAAK,OAAO,WAAW,KAAK,kDAAkC,MAAM,CAAC;AAAA,EAC7E;AAAA,EAEA,MAAa,kBAAkB,QAAgC;AAC7D,UAAM,KAAK,OAAO,WAAW,KAAK,8CAAgC,MAAM,CAAC;AAAA,EAC3E;AAAA,EAEA,MAAa,uBAAuB,KAA8D;AAChG,UAAM,OAAe,MAAM,KAAK,OAAO,QAAQ,KAAK,0CAA6B,CAAC;AAElF,WAAO,QAAQ,KAAK,MAAM,IAAI,EAAE,GAAG;AAAA,EACrC;AAAA,EAEA,MAAa,iCAAiC,KAAmE;AAC/G,UAAM,OAAe,MAAM,KAAK,OAAO,QAAQ,KAAK,gEAAuC,CAAC;AAE5F,WAAO,QAAQ,KAAK,MAAM,IAAI,EAAE,GAAG;AAAA,EACrC;AAAA,EAEA,MAAa,0BAA0B,KAA2B,QAA+C;AAC/G,UAAM,OAAe,MAAM,KAAK,OAAO,QAAQ,KAAK,kDAAkC,MAAM,CAAC;AAE7F,WAAO,QAAQ,KAAK,MAAM,IAAI,EAAE,GAAG;AAAA,EACrC;AAAA,EAEA,MAAa,wBAAwB,KAAwB,QAA+C;AAC1G,UAAM,OAAe,MAAM,KAAK,OAAO,QAAQ,KAAK,8CAAgC,MAAM,CAAC;AAE3F,WAAO,QAAQ,KAAK,MAAM,IAAI,EAAE,GAAG;AAAA,EACrC;AAAA,EAEA,MAAa,uBAAuB,KAAgC,OAA2C;AAC7G,UAAM,KAAK,SAAS,KAAK,0CAA6B,GAAG,KAAK,KAAK;AAAA,EACrE;AAAA,EAEA,MAAa,iCACX,KACA,OACe;AACf,UAAM,KAAK,SAAS,KAAK,gEAAuC,GAAG,KAAK,KAAK;AAAA,EAC/E;AAAA,EAEA,MAAa,0BACX,KACA,OACA,QACe;AACf,UAAM,KAAK,SAAS,KAAK,kDAAkC,MAAM,GAAG,KAAK,KAAK;AAAA,EAChF;AAAA,EAEA,MAAa,wBACX,KACA,OACA,QACe;AACf,UAAM,KAAK,SAAS,KAAK,8CAAgC,MAAM,GAAG,KAAK,KAAK;AAAA,EAC9E;AAAA,EAEA,MAAa,0BAA0B,KAA+C;AACpF,UAAM,KAAK,YAAY,KAAK,0CAA6B,GAAG,GAAG;AAAA,EACjE;AAAA,EAEA,MAAa,oCAAoC,KAAoD;AACnG,UAAM,KAAK,YAAY,KAAK,gEAAuC,GAAG,GAAG;AAAA,EAC3E;AAAA,EAEA,MAAa,6BAA6B,KAA2B,QAAgC;AACnG,UAAM,KAAK,YAAY,KAAK,kDAAkC,MAAM,GAAG,GAAG;AAAA,EAC5E;AAAA,EAEA,MAAa,2BAA2B,KAAwB,QAAgC;AAC9F,UAAM,KAAK,YAAY,KAAK,8CAAgC,MAAM,GAAG,GAAG;AAAA,EAC1E;AACF;;;AC/MO,IAAK,eAAL,kBAAKA,kBAAL;AAIL,EAAAA,cAAA,cAAW;AAKX,EAAAA,cAAA,WAAQ;AAKR,EAAAA,cAAA,YAAS;AAdC,SAAAA;AAAA,GAAA;;;ACoBZ,IAAM,gBAAoD;AAAA,EACxD,gBAAgB;AAAA,EAChB,YAAY;AAAA,EACZ;AAAA,EACA,OAAO,CAAC,uBAAe,MAAM;AAAA,EAC7B,uBAAuB;AAAA,EACvB,iBAAiB;AAAA,EACjB,uBAAuB;AACzB;AAKO,IAAM,sBAAN,MAAM,oBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsB1B,cAAc;AArBrB,wBAAQ;AACR,wBAAQ;AAAA,EAoBc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBtB,MAAa,WACX,QACA,OACA,aACA,YACe;AACf,UAAM,WAAmB,OAAO;AAEhC,QAAI,CAAC,oBAAmB,aAAa;AACnC,0BAAmB,cAAc;AAAA,IACnC,OAAO;AACL,0BAAmB,eAAe;AAAA,IACpC;AAEA,QAAI,YAAY;AACd,0BAAmB,cAAc;AAAA,IACnC;AAEA,QAAI,CAAC,UAAU;AACb,WAAK,aAAa,IAAI,UAAa,YAAY,oBAAmB,WAAW,IAAI,KAAK;AAAA,IACxF,OAAO;AACL,WAAK,aAAa,IAAI,UAAa,YAAY,oBAAmB,WAAW,IAAI,QAAQ,IAAI,KAAK;AAAA,IACpG;AAEA,SAAK,sBAAsB,IAAI,mBAAmB,KAAK,YAAY,WAAW;AAC9E,wBAAmB,sBAAsB,IAAI,mBAAmB,KAAK,YAAY,WAAW;AAE5F,UAAM,KAAK,WAAW,cAAc;AAAA,MAClC,GAAG;AAAA,MACH,GAAG;AAAA,MACH,OAAO;AAAA,QACL,GAAI,cAAc,SAAS,CAAC;AAAA,QAC5B,GAAI,OAAO,OAAO,OAAO,CAAC,UAAkB,CAAC,eAAe,OAAO,SAAS,KAAK,CAAC,KAAK,CAAC;AAAA,MAC1F;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBO,eAA6B;AAClC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcO,gBAAwB;AAC7B,WAAO,oBAAmB;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyBA,MAAa,0BAA0B,QAA2B,QAA+C;AAC/G,UAAM,oBAAsC,EAAC,GAAG,OAAM;AAEtD,WAAO,mBAAmB;AAE1B,QACE,MAAM,KAAK,WAAW;AAAA,MACpB,+BAAuB,QAAQ,YAAY;AAAA,IAC7C,GACA;AACA,aAAO,KAAK,oBAAoB,0BAA0B,mBAAmB,MAAM;AAAA,IACrF;AAEA,WAAO,KAAK,oBAAoB,wBAAwB,QAAQ,SAAoB,EAAE,KAAK,MAAM;AAC/F,aAAO,KAAK,oBAAoB,0BAA0B,mBAAmB,MAAM;AAAA,IACrF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyBA,MAAa,oBAAoB,QAA2B,QAAkC;AAC5F,UAAM,oBAAsC,EAAC,GAAG,OAAM;AAEtD,WAAO,mBAAmB;AAE1B,QACE,MAAM,KAAK,WAAW;AAAA,MACpB,+BAAuB,QAAQ,YAAY;AAAA,IAC7C,GACA;AACA,aAAO,KAAK,oBAAoB,oBAAoB,mBAAmB,MAAM;AAAA,IAC/E;AAEA,WAAO,KAAK,oBAAoB,wBAAwB,QAAQ,SAAoB,EAAE,KAAK,MAAM;AAC/F,aAAO,KAAK,oBAAoB,oBAAoB,mBAAmB,MAAM;AAAA,IAC/E,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2BA,MAAa,mBACX,mBACA,cACA,OACA,QACA,oBAGwB;AACxB,QACE,MAAM,KAAK,WAAW;AAAA,MACpB,+BAAuB,QAAQ,YAAY;AAAA,IAC7C,GACA;AACA,aAAO,KAAK,oBAAoB;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,KAAK,oBAAoB,wBAAwB,KAAK,EAAE,KAAK,MAAM;AACxE,aAAO,KAAK,oBAAoB;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBA,MAAa,cAAc,QAAkC;AAC3D,WAAO,KAAK,oBAAoB,cAAc,MAAM;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAa,0BAA2D;AACtE,WAAO,KAAK,oBAAoB,wBAAwB;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAa,kBAAkB,QAA0C;AACvE,WAAO,KAAK,oBAAoB,kBAAkB,MAAM;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAa,WAAW,QAAkC;AACxD,WAAO,KAAK,oBAAoB,WAAW,MAAM;AAAA,EACnD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAa,iBAAiB,QAAyC;AACrE,WAAO,KAAK,oBAAoB,iBAAiB,MAAM;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAa,kBAA6C;AACxD,WAAO,KAAK,oBAAoB,gBAAgB;AAAA,EAClD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyBO,kBAAkB,QAAyC;AAChE,WAAO,KAAK,oBAAoB,kBAAkB,MAAM;AAAA,EAC1D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBO,mBAAmB,QAAyC;AACjE,WAAO,KAAK,oBAAoB,mBAAmB,MAAM;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAa,eAAe,QAAkC;AAC5D,WAAO,KAAK,oBAAoB,eAAe,MAAM;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwCO,mBAAmB,QAA2B,QAAyD;AAC5G,WAAO,KAAK,oBAAoB,mBAAmB,QAAQ,MAAM;AAAA,EACnE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAa,gBAAgB,QAAmC;AAC9D,WAAO,KAAK,oBAAoB,gBAAgB,MAAM;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoBA,MAAa,YAAY,OAAe,QAAkC;AACxE,WAAO,KAAK,oBAAoB,YAAY,OAAO,MAAM;AAAA,EAC3D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAa,YAAY,MAAc,OAAe,QAAgC;AACpF,UAAM,KAAK,oBAAoB,YAAY,MAAM,OAAO,MAAM;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,OAAc,oBAAoB,oBAAqC;AACrE,UAAM,MAAW,IAAI,IAAI,kBAAkB;AAC3C,UAAM,aAA4B,IAAI,aAAa,IAAI,6BAAqB,OAAO,KAAK;AACxF,UAAM,QAAiB,QAAQ,IAAI,aAAa,IAAI,OAAO,CAAC;AAE5D,WAAO,aAAa,eAAe,6BAAqB,OAAO,oBAAoB,CAAC,QAAQ;AAAA,EAC9F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,OAAc,eAAe,oBAAqC;AAChE,UAAM,MAAW,IAAI,IAAI,kBAAkB;AAC3C,UAAM,aAA4B,IAAI,aAAa,IAAI,6BAAqB,OAAO,KAAK;AACxF,UAAM,QAAiB,QAAQ,IAAI,aAAa,IAAI,OAAO,CAAC;AAE5D,WAAO,aAAa,eAAe,6BAAqB,OAAO,oBAAoB,QAAQ;AAAA,EAC7F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAqBA,MAAa,aAAa,QAAqD;AAC7E,UAAM,KAAK,oBAAoB,aAAa,MAAM;AAAA,EACpD;AAAA,EAEA,aAAoB,qBAAqB,QAAgC;AACvE,UAAM,KAAK,oBAAoB,qBAAqB,MAAM;AAAA,EAC5D;AACF;AA/mBE,cAJW,qBAII;AACf,cALW,qBAKJ;AALF,IAAM,qBAAN;;;ACXP,IAAqB,gBAArB,MAAqB,uBAAsB,MAAM;AAAA,EAY/C,YAAY,SAAiB,MAAc,QAAgB;AACzD,UAAM,UAAkB,eAAc,cAAc,MAAM;AAC1D,UAAM,SAAiB,8BAAkB,OAAO;AAChD,UAAM,QAAgB,IAAI,OAAO,uCAA2B,OAAO,KAAK,GAAG;AAC3E,UAAM,YAAoB,QAAQ,QAAQ,OAAO,EAAE;AACnD,UAAM,WAAmB,GAAG,MAAM,IAAI,UAAU,KAAK,CAAC;AAAA;AAAA,SAAc,IAAI;AAAA;AAExE,UAAM,QAAQ;AAlBhB,wBAAgB;AAChB,wBAAgB;AAmBd,SAAK,OAAO,WAAW;AACvB,SAAK,OAAO;AACZ,SAAK,SAAS;AAEd,QAAI,MAAM,mBAAmB;AAC3B,YAAM,kBAAkB,MAAM,UAAU;AAAA,IAC1C;AAAA,EACF;AAAA,EAxBA,OAAe,cAAc,QAAwB;AACnD,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAEA,WAAO,aAAa,MAAM;AAAA,EAC5B;AAAA,EAoBgB,WAAmB;AACjC,WAAO,IAAI,KAAK,IAAI;AAAA,WAAe,KAAK,OAAO;AAAA,EACjD;AACF;;;AC1CA,IAAqB,mBAArB,cAA8C,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAW1D,YACE,SACA,MACA,QACgB,YACA,YAChB;AACA,UAAM,SAAS,MAAM,MAAM;AAHX;AACA;AAIhB,WAAO,eAAe,MAAM,QAAQ;AAAA,MAClC,OAAO;AAAA,MACP,cAAc;AAAA,MACd,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMgB,WAAmB;AACjC,UAAM,SAAS,KAAK,aAAa,UAAU,KAAK,UAAU,MAAM,KAAK,UAAU,MAAM;AACrF,WAAO,IAAI,KAAK,IAAI,YAAY,KAAK,IAAI,KAAK,MAAM;AAAA,WAAc,KAAK,OAAO;AAAA,EAChF;AACF;;;AC/BA,IAAM,cAAc,OAAO,EAAC,KAAK,GAAG,cAAa,MAAuC;AACtF,MAAI;AACF,QAAI,IAAI,GAAG;AAAA,EACb,SAAS,OAAO;AACd,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAqB,MAAM,MAAM,KAAK;AAAA,IAC1C,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,QAAQ;AAAA,IACV;AAAA,IACA,GAAG;AAAA,EACL,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,YAAY,MAAM,SAAS,KAAK;AAEtC,UAAM,IAAI;AAAA,MACR,8BAA8B,SAAS;AAAA,MACvC;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AAAA,EACF;AAEA,SAAO,MAAM,SAAS,KAAK;AAC7B;AAEA,IAAO,sBAAQ;;;ACzCf,IAAqB,uBAArB,cAAkD,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAU9D,YAAY,SAAiB,MAAc,QAAgC,SAAmB;AAC5F,UAAM,SAAS,MAAM,MAAM;AAD8C;AAGzE,WAAO,eAAe,MAAM,QAAQ;AAAA,MAClC,OAAO;AAAA,MACP,cAAc;AAAA,MACd,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMiB,WAAmB;AAClC,UAAM,UAAU,KAAK,UAAU;AAAA,WAAc,KAAK,UAAU,KAAK,SAAS,MAAM,CAAC,CAAC,KAAK;AACvF,WAAO,IAAI,KAAK,IAAI,YAAY,KAAK,IAAI,KAAK,OAAO;AAAA,WAAc,KAAK,OAAO;AAAA,EACjF;AACF;;;ACTO,IAAK,qBAAL,kBAAKC,wBAAL;AAEL,EAAAA,oBAAA,UAAO;AAEP,EAAAA,oBAAA,UAAO;AAEP,EAAAA,oBAAA,oBAAiB;AAEjB,EAAAA,oBAAA,gBAAa;AAEb,EAAAA,oBAAA,gBAAa;AAVH,SAAAA;AAAA,GAAA;;;ACzBZ,IAAe,2BAAf,MAAiF;AA+DjF;AAEA,IAAO,mCAAQ;;;ACxEf,IAAM,aAA0B;AAAA,EAC9B,QAAQ;AAAA,IACN,SAAS;AAAA,MACP,MAAM;AAAA,MACN,cAAc;AAAA,IAChB;AAAA,IACA,WAAW;AAAA,MACT,MAAM;AAAA,MACN,cAAc;AAAA,IAChB;AAAA,IACA,YAAY;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,MAAM;AAAA,QACJ,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,cAAc;AAAA,IAChB;AAAA,IACA,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AAAA,EACA,cAAc;AAAA,IACZ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,OAAO;AAAA,EACT;AACF;AAEA,IAAM,YAAyB;AAAA,EAC7B,QAAQ;AAAA,IACN,SAAS;AAAA,MACP,MAAM;AAAA,MACN,cAAc;AAAA,IAChB;AAAA,IACA,WAAW;AAAA,MACT,MAAM;AAAA,MACN,cAAc;AAAA,IAChB;AAAA,IACA,YAAY;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,MACV,MAAM;AAAA,QACJ,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,MAAM;AAAA,MACN,cAAc;AAAA,IAChB;AAAA,IACA,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA,QAAQ;AAAA,EACV;AAAA,EACA,SAAS;AAAA,IACP,MAAM;AAAA,EACR;AAAA,EACA,cAAc;AAAA,IACZ,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,OAAO;AAAA,EACT;AACF;AAEA,IAAM,iBAAiB,CAAC,UAAiE;AACvF,QAAM,UAAkC,CAAC;AAGzC,UAAQ,+BAA+B,IAAI,MAAM,OAAO,QAAQ;AAChE,UAAQ,uCAAuC,IAAI,MAAM,OAAO,QAAQ;AACxE,UAAQ,iCAAiC,IAAI,MAAM,OAAO,UAAU;AACpE,UAAQ,yCAAyC,IAAI,MAAM,OAAO,UAAU;AAC5E,UAAQ,qCAAqC,IAAI,MAAM,OAAO,WAAW;AACzE,UAAQ,sCAAsC,IAAI,MAAM,OAAO,WAAW;AAC1E,UAAQ,uCAAuC,IAAI,MAAM,OAAO,WAAW,KAAK;AAChF,UAAQ,6BAA6B,IAAI,MAAM,OAAO,MAAM;AAC5D,UAAQ,qCAAqC,IAAI,MAAM,OAAO,MAAM;AACpE,UAAQ,0BAA0B,IAAI,MAAM,OAAO;AACnD,UAAQ,+BAA+B,IAAI,MAAM,OAAO,KAAK;AAC7D,UAAQ,iCAAiC,IAAI,MAAM,OAAO,KAAK;AAC/D,UAAQ,yBAAyB,IAAI,MAAM,OAAO;AAGlD,UAAQ,yBAAyB,IAAI,GAAG,MAAM,QAAQ,IAAI;AAG1D,UAAQ,gCAAgC,IAAI,MAAM,aAAa;AAC/D,UAAQ,iCAAiC,IAAI,MAAM,aAAa;AAChE,UAAQ,gCAAgC,IAAI,MAAM,aAAa;AAE/D,SAAO;AACT;AAEA,IAAM,cAAc,CAAC,SAAwC,CAAC,GAAG,SAAS,UAAiB;AACzF,QAAM,YAAY,SAAS,YAAY;AACvC,QAAM,eAAe;AAAA,IACnB,GAAG;AAAA,IACH,GAAG;AAAA,IACH,QAAQ;AAAA,MACN,GAAG,UAAU;AAAA,MACb,GAAG,OAAO;AAAA,MACV,WAAW;AAAA,QACT,GAAG,UAAU,OAAO;AAAA,QACpB,GAAI,OAAO,QAAQ,aAAa,CAAC;AAAA,MACnC;AAAA,IACF;AAAA,IACA,SAAS;AAAA,MACP,GAAG,UAAU;AAAA,MACb,GAAG,OAAO;AAAA,IACZ;AAAA,IACA,cAAc;AAAA,MACZ,GAAG,UAAU;AAAA,MACb,GAAG,OAAO;AAAA,IACZ;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,cAAc,eAAe,YAAY;AAAA,EAC3C;AACF;AAEA,IAAO,sBAAQ;;;AC7Hf,IAAM,sBAAsB,CAAC,SAA0B,KAAK,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG,EAAE,IAAI;AAEhG,IAAO,8BAAQ;",
+  "names": ["ResponseMode", "WellKnownSchemaIds"]
+}

package/dist/constants/OIDCDiscoveryConstants.d.ts

@@ -0,0 +1,153 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * Constants related to OpenID Connect (OIDC) metadata and endpoints.
+ * This object contains all the standard OIDC endpoints and storage keys
+ * used throughout the application for authentication and authorization.
+ *
+ * @remarks
+ * The constants are organized into two main sections:
+ * 1. Endpoints - Contains all OIDC standard endpoint paths
+ * 2. Storage - Contains keys used for storing OIDC-related data
+ *
+ * @example
+ * ```typescript
+ * // Using an endpoint
+ * const authEndpoint = OIDCDiscoveryConstants.Endpoints.AUTHORIZATION;
+ *
+ * // Using a storage key
+ * const tokenKey = OIDCDiscoveryConstants.Storage.StorageKeys.Endpoints.TOKEN;
+ * ```
+ */
+declare const OIDCDiscoveryConstants: {
+    /**
+     * Collection of standard OIDC endpoint paths used for authentication flows.
+     * These endpoints are relative paths that should be appended to the base URL
+     * of your identity provider.
+     */
+    readonly Endpoints: {
+        /**
+         * Authorization endpoint for initiating the OAuth2/OIDC flow.
+         * This endpoint is used to request authorization and receive an authorization code.
+         */
+        readonly AUTHORIZATION: "/oauth2/authorize";
+        /**
+         * Session check iframe endpoint for session management.
+         * Used to monitor the user's session state through a hidden iframe.
+         */
+        readonly SESSION_IFRAME: "/oidc/checksession";
+        /**
+         * End session endpoint for logout functionality.
+         * Used to terminate the user's session and perform logout operations.
+         */
+        readonly END_SESSION: "/oidc/logout";
+        /**
+         * Token issuer endpoint.
+         * The endpoint that issues OAuth2/OIDC tokens.
+         */
+        readonly ISSUER: "/oauth2/token";
+        /**
+         * JSON Web Key Set endpoint for key validation.
+         * Provides the public keys used to verify token signatures.
+         */
+        readonly JWKS: "/oauth2/jwks";
+        /**
+         * Token revocation endpoint.
+         * Used to invalidate access or refresh tokens before they expire.
+         */
+        readonly REVOCATION: "/oauth2/revoke";
+        /**
+         * Token endpoint for obtaining access tokens.
+         * Used to exchange authorization codes for access tokens and refresh tokens.
+         */
+        readonly TOKEN: "/oauth2/token";
+        /**
+         * UserInfo endpoint for obtaining user claims.
+         * Provides authenticated user information when called with a valid access token.
+         */
+        readonly USERINFO: "/oauth2/userinfo";
+    };
+    /**
+     * Storage related constants used for maintaining OIDC state.
+     * These constants define the keys used to store OIDC-related data
+     * in the browser's storage mechanisms.
+     */
+    readonly Storage: {
+        /**
+         * Storage keys for various OIDC endpoints and configurations.
+         * These keys are used to store endpoint URLs and configuration
+         * states in the browser's storage.
+         */
+        readonly StorageKeys: {
+            /**
+             * Collection of storage keys for OIDC endpoints.
+             * These keys are used to store the discovered endpoint URLs
+             * from the OpenID Provider's configuration.
+             */
+            readonly Endpoints: {
+                /**
+                 * Storage key for the authorization endpoint URL.
+                 * Used to store the URL where authorization requests should be sent.
+                 */
+                readonly AUTHORIZATION: "authorization_endpoint";
+                /**
+                 * Storage key for the token endpoint URL.
+                 * Used to store the URL where token requests should be sent.
+                 */
+                readonly TOKEN: "token_endpoint";
+                /**
+                 * Storage key for the revocation endpoint URL.
+                 * Used to store the URL where token revocation requests should be sent.
+                 */
+                readonly REVOCATION: "revocation_endpoint";
+                /**
+                 * Storage key for the end session endpoint URL.
+                 * Used to store the URL where logout requests should be sent.
+                 */
+                readonly END_SESSION: "end_session_endpoint";
+                /**
+                 * Storage key for the JWKS URI endpoint URL.
+                 * Used to store the URL where JSON Web Key Sets can be retrieved.
+                 */
+                readonly JWKS: "jwks_uri";
+                /**
+                 * Storage key for the session check iframe URL.
+                 * Used to store the URL of the iframe used for session state monitoring.
+                 */
+                readonly SESSION_IFRAME: "check_session_iframe";
+                /**
+                 * Storage key for the issuer identifier URL.
+                 * Used to store the URL that identifies the OpenID Provider.
+                 */
+                readonly ISSUER: "issuer";
+                /**
+                 * Storage key for the userinfo endpoint URL.
+                 * Used to store the URL where user information can be retrieved.
+                 */
+                readonly USERINFO: "userinfo_endpoint";
+            };
+            /**
+             * Flag to track if OpenID Provider configuration is initiated.
+             * Used to determine if the OIDC discovery process has been started.
+             * This helps prevent duplicate initialization attempts.
+             */
+            readonly OPENID_PROVIDER_CONFIG_INITIATED: "op_config_initiated";
+        };
+    };
+};
+export default OIDCDiscoveryConstants;

package/dist/constants/OIDCRequestConstants.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Copyright (c) 2025, WSO2 LLC. (https://www.wso2.com).
+ *
+ * WSO2 LLC. licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied. See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+/**
+ * Constants representing standard OpenID Connect (OIDC) request and response parameters.
+ * These parameters are commonly used during authorization, token exchange, and logout flows.
+ */
+declare const OIDCRequestConstants: {
+    readonly Params: {
+        /**
+         * The authorization code returned from the authorization endpoint.
+         * Used in the authorization code flow.
+         */
+        readonly AUTHORIZATION_CODE: "code";
+        /**
+         * Session state parameter used for session management between the client and the OP.
+         */
+        readonly SESSION_STATE: "session_state";
+        /**
+         * State parameter used to maintain state between the request and the callback.
+         * Helps in preventing CSRF attacks.
+         */
+        readonly STATE: "state";
+        /**
+         * Indicates whether sign-out was successful during the end-session flow.
+         * May be returned by the OP after a logout request.
+         */
+        readonly SIGN_OUT_SUCCESS: "sign_out_success";
+    };
+    /**
+     * Sign-out related constants for managing the end-session flow in OIDC.
+     */
+    readonly SignOut: {
+        /**
+         * Storage-related constants for managing sign-out state.
+         */
+        readonly Storage: {
+            /**
+             * Collection of storage keys used in sign-out implementation
+             */
+            readonly StorageKeys: {
+                /**
+                 * Storage key for the sign-out URL.
+                 * Used to store the complete URL where the user should be redirected after
+                 * completing the OIDC logout process.
+                 */
+                readonly SIGN_OUT_URL: "sign_out_url";
+            };
+        };
+    };
+};
+export default OIDCRequestConstants;