@authme/util 2.8.44 → 2.8.46

package/index.esm.js

@@ -23,8 +23,10 @@ import 'core-js/modules/es.typed-array.to-locale-string.js';
 import 'core-js/modules/es.typed-array.to-reversed.js';
 import 'core-js/modules/es.typed-array.to-sorted.js';
 import 'core-js/modules/es.typed-array.with.js';
-import 'core-js/modules/esnext.uint8-array.to-base64.js';
-import 'core-js/modules/esnext.uint8-array.to-hex.js';
+import 'core-js/modules/es.uint8-array.set-from-base64.js';
+import 'core-js/modules/es.uint8-array.set-from-hex.js';
+import 'core-js/modules/es.uint8-array.to-base64.js';
+import 'core-js/modules/es.uint8-array.to-hex.js';
 import 'core-js/modules/web.atob.js';
 import 'core-js/modules/web.dom-collections.iterator.js';
 import 'core-js/modules/web.dom-exception.constructor.js';
@@ -33,12 +35,12 @@ import 'core-js/modules/web.dom-exception.to-string-tag.js';
 import 'core-js/modules/es.array.push.js';
 import 'core-js/modules/es.error.cause.js';
 import 'core-js/modules/es.array.includes.js';
+import 'core-js/modules/es.iterator.constructor.js';
+import 'core-js/modules/es.iterator.for-each.js';
+import 'core-js/modules/es.json.parse.js';
 import 'core-js/modules/es.json.stringify.js';
 import 'core-js/modules/es.string.search.js';
 import 'core-js/modules/es.typed-array.uint32-array.js';
-import 'core-js/modules/esnext.iterator.constructor.js';
-import 'core-js/modules/esnext.iterator.for-each.js';
-import 'core-js/modules/esnext.json.parse.js';
 import 'core-js/modules/web.url-search-params.js';
 import 'core-js/modules/web.url-search-params.delete.js';
 import 'core-js/modules/web.url-search-params.has.js';
@@ -47,13 +49,13 @@ import require$$0 from 'stream';
 import require$$2 from 'events';
 import require$$0$1 from 'buffer';
 import require$$1 from 'util';
+import 'core-js/modules/es.iterator.map.js';
 import 'core-js/modules/es.parse-int.js';
-import 'core-js/modules/esnext.iterator.map.js';
 import 'core-js/modules/es.array.sort.js';
 import 'core-js/modules/es.global-this.js';
+import 'core-js/modules/es.iterator.filter.js';
 import 'core-js/modules/es.number.to-fixed.js';
 import 'core-js/modules/es.string.includes.js';
-import 'core-js/modules/esnext.iterator.filter.js';
 import 'core-js/modules/es.string.starts-with.js';
 import 'core-js/modules/es.string.trim.js';
 
@@ -325,10 +327,66 @@ const verificationErrorMessages = code => {
   }
 };
 
-function e(e){this.message=e;}e.prototype=new Error,e.prototype.name="InvalidCharacterError";var r="undefined"!=typeof window&&window.atob&&window.atob.bind(window)||function(r){var t=String(r).replace(/=+$/,"");if(t.length%4==1)throw new e("'atob' failed: The string to be decoded is not correctly encoded.");for(var n,o,a=0,i=0,c="";o=t.charAt(i++);~o&&(n=a%4?64*n+o:o,a++%4)?c+=String.fromCharCode(255&n>>(-2*a&6)):0)o="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(o);return c};function t(e){var t=e.replace(/-/g,"+").replace(/_/g,"/");switch(t.length%4){case 0:break;case 2:t+="==";break;case 3:t+="=";break;default:throw "Illegal base64url string!"}try{return function(e){return decodeURIComponent(r(e).replace(/(.)/g,(function(e,r){var t=r.charCodeAt(0).toString(16).toUpperCase();return t.length<2&&(t="0"+t),"%"+t})))}(t)}catch(e){return r(t)}}function n(e){this.message=e;}function o(e,r){if("string"!=typeof e)throw new n("Invalid token specified");var o=true===(r=r||{}).header?0:1;try{return JSON.parse(t(e.split(".")[o]))}catch(e){throw new n("Invalid token specified: "+e.message)}}n.prototype=new Error,n.prototype.name="InvalidTokenError";
+class InvalidTokenError extends Error {
+}
+InvalidTokenError.prototype.name = "InvalidTokenError";
+function b64DecodeUnicode(str) {
+    return decodeURIComponent(atob(str).replace(/(.)/g, (m, p) => {
+        let code = p.charCodeAt(0).toString(16).toUpperCase();
+        if (code.length < 2) {
+            code = "0" + code;
+        }
+        return "%" + code;
+    }));
+}
+function base64UrlDecode(str) {
+    let output = str.replace(/-/g, "+").replace(/_/g, "/");
+    switch (output.length % 4) {
+        case 0:
+            break;
+        case 2:
+            output += "==";
+            break;
+        case 3:
+            output += "=";
+            break;
+        default:
+            throw new Error("base64 string is not of the correct length");
+    }
+    try {
+        return b64DecodeUnicode(output);
+    }
+    catch (err) {
+        return atob(output);
+    }
+}
+function jwtDecode(token, options) {
+    if (typeof token !== "string") {
+        throw new InvalidTokenError("Invalid token specified: must be a string");
+    }
+    options || (options = {});
+    const pos = options.header === true ? 0 : 1;
+    const part = token.split(".")[pos];
+    if (typeof part !== "string") {
+        throw new InvalidTokenError(`Invalid token specified: missing part #${pos + 1}`);
+    }
+    let decoded;
+    try {
+        decoded = base64UrlDecode(part);
+    }
+    catch (e) {
+        throw new InvalidTokenError(`Invalid token specified: invalid base64 for part #${pos + 1} (${e.message})`);
+    }
+    try {
+        return JSON.parse(decoded);
+    }
+    catch (e) {
+        throw new InvalidTokenError(`Invalid token specified: invalid json for part #${pos + 1} (${e.message})`);
+    }
+}
 
 function decodeToken(token) {
-  const decoded = o(token);
+  const decoded = jwtDecode(token);
   const {
     exp,
     iat
@@ -654,7 +712,7 @@ function getDefaultExportFromCjs (x) {
 
 var FileSaver_min = {exports: {}};
 
-(function (module, exports) {
+(function (module, exports$1) {
 	(function(a,b){b();})(commonjsGlobal,function(){function b(a,b){return "undefined"==typeof b?b={autoBom:false}:"object"!=typeof b&&(console.warn("Deprecated: Expected third argument to be a object"),b={autoBom:!b}),b.autoBom&&/^\s*(?:text\/\S*|application\/xml|\S*\/\S*\+xml)\s*;.*charset\s*=\s*utf-8/i.test(a.type)?new Blob(["\uFEFF",a],{type:a.type}):a}function c(a,b,c){var d=new XMLHttpRequest;d.open("GET",a),d.responseType="blob",d.onload=function(){g(d.response,b,c);},d.onerror=function(){console.error("could not download file");},d.send();}function d(a){var b=new XMLHttpRequest;b.open("HEAD",a,false);try{b.send();}catch(a){}return 200<=b.status&&299>=b.status}function e(a){try{a.dispatchEvent(new MouseEvent("click"));}catch(c){var b=document.createEvent("MouseEvents");b.initMouseEvent("click",true,true,window,0,0,0,80,20,false,false,false,false,0,null),a.dispatchEvent(b);}}var f="object"==typeof window&&window.window===window?window:"object"==typeof self&&self.self===self?self:"object"==typeof commonjsGlobal&&commonjsGlobal.global===commonjsGlobal?commonjsGlobal:void 0,a=f.navigator&&/Macintosh/.test(navigator.userAgent)&&/AppleWebKit/.test(navigator.userAgent)&&!/Safari/.test(navigator.userAgent),g=f.saveAs||("object"!=typeof window||window!==f?function(){}:"download"in HTMLAnchorElement.prototype&&!a?function(b,g,h){var i=f.URL||f.webkitURL,j=document.createElement("a");g=g||b.name||"download",j.download=g,j.rel="noopener","string"==typeof b?(j.href=b,j.origin===location.origin?e(j):d(j.href)?c(b,g,h):e(j,j.target="_blank")):(j.href=i.createObjectURL(b),setTimeout(function(){i.revokeObjectURL(j.href);},4E4),setTimeout(function(){e(j);},0));}:"msSaveOrOpenBlob"in navigator?function(f,g,h){if(g=g||f.name||"download","string"!=typeof f)navigator.msSaveOrOpenBlob(b(f,h),g);else if(d(f))c(f,g,h);else {var i=document.createElement("a");i.href=f,i.target="_blank",setTimeout(function(){e(i);});}}:function(b,d,e,g){if(g=g||open("","_blank"),g&&(g.document.title=g.document.body.innerText="downloading..."),"string"==typeof b)return c(b,d,e);var h="application/octet-stream"===b.type,i=/constructor/i.test(f.HTMLElement)||f.safari,j=/CriOS\/[\d]+/.test(navigator.userAgent);if((j||h&&i||a)&&"undefined"!=typeof FileReader){var k=new FileReader;k.onloadend=function(){var a=k.result;a=j?a:a.replace(/^data:[^;]*;/,"data:attachment/file;"),g?g.location.href=a:location=a,g=null;},k.readAsDataURL(b);}else {var l=f.URL||f.webkitURL,m=l.createObjectURL(b);g?g.location=m:location.href=m,g=null,setTimeout(function(){l.revokeObjectURL(m);},4E4);}});f.saveAs=g.saveAs=g,(module.exports=g);});
 
 	
@@ -747,16 +805,16 @@ function requireStream () {
 	return stream$1;
 }
 
-var safeBuffer$1 = {exports: {}};
+var safeBuffer = {exports: {}};
 
 /* eslint-disable node/no-deprecated-api */
 
-var hasRequiredSafeBuffer$1;
+var hasRequiredSafeBuffer;
 
-function requireSafeBuffer$1 () {
-	if (hasRequiredSafeBuffer$1) return safeBuffer$1.exports;
-	hasRequiredSafeBuffer$1 = 1;
-	(function (module, exports) {
+function requireSafeBuffer () {
+	if (hasRequiredSafeBuffer) return safeBuffer.exports;
+	hasRequiredSafeBuffer = 1;
+	(function (module, exports$1) {
 		var buffer = require$$0$1;
 		var Buffer = buffer.Buffer;
 
@@ -770,8 +828,8 @@ function requireSafeBuffer$1 () {
 		  module.exports = buffer;
 		} else {
 		  // Copy properties from require('buffer')
-		  copyProps(buffer, exports);
-		  exports.Buffer = SafeBuffer;
+		  copyProps(buffer, exports$1);
+		  exports$1.Buffer = SafeBuffer;
 		}
 
 		function SafeBuffer (arg, encodingOrOffset, length) {
@@ -818,8 +876,8 @@ function requireSafeBuffer$1 () {
 		  }
 		  return buffer.SlowBuffer(size)
 		}; 
-	} (safeBuffer$1, safeBuffer$1.exports));
-	return safeBuffer$1.exports;
+	} (safeBuffer, safeBuffer.exports));
+	return safeBuffer.exports;
 }
 
 var util = {};
@@ -1006,7 +1064,7 @@ function requireBufferList () {
 
 		function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } }
 
-		var Buffer = requireSafeBuffer$1().Buffer;
+		var Buffer = requireSafeBuffer().Buffer;
 		var util = require$$1;
 
 		function copyBuffer(src, target, offset) {
@@ -1244,7 +1302,7 @@ function require_stream_writable () {
 
 	/*<replacement>*/
 
-	var Buffer = requireSafeBuffer$1().Buffer;
+	var Buffer = requireSafeBuffer().Buffer;
 	var OurUint8Array = (typeof commonjsGlobal !== 'undefined' ? commonjsGlobal : typeof window !== 'undefined' ? window : typeof self !== 'undefined' ? self : {}).Uint8Array || function () {};
 	function _uint8ArrayToBuffer(chunk) {
 	  return Buffer.from(chunk);
@@ -1965,81 +2023,6 @@ function require_stream_duplex () {
 
 var string_decoder = {};
 
-var safeBuffer = {exports: {}};
-
-/* eslint-disable node/no-deprecated-api */
-
-var hasRequiredSafeBuffer;
-
-function requireSafeBuffer () {
-	if (hasRequiredSafeBuffer) return safeBuffer.exports;
-	hasRequiredSafeBuffer = 1;
-	(function (module, exports) {
-		var buffer = require$$0$1;
-		var Buffer = buffer.Buffer;
-
-		// alternative to using Object.keys for old browsers
-		function copyProps (src, dst) {
-		  for (var key in src) {
-		    dst[key] = src[key];
-		  }
-		}
-		if (Buffer.from && Buffer.alloc && Buffer.allocUnsafe && Buffer.allocUnsafeSlow) {
-		  module.exports = buffer;
-		} else {
-		  // Copy properties from require('buffer')
-		  copyProps(buffer, exports);
-		  exports.Buffer = SafeBuffer;
-		}
-
-		function SafeBuffer (arg, encodingOrOffset, length) {
-		  return Buffer(arg, encodingOrOffset, length)
-		}
-
-		// Copy static methods from Buffer
-		copyProps(Buffer, SafeBuffer);
-
-		SafeBuffer.from = function (arg, encodingOrOffset, length) {
-		  if (typeof arg === 'number') {
-		    throw new TypeError('Argument must not be a number')
-		  }
-		  return Buffer(arg, encodingOrOffset, length)
-		};
-
-		SafeBuffer.alloc = function (size, fill, encoding) {
-		  if (typeof size !== 'number') {
-		    throw new TypeError('Argument must be a number')
-		  }
-		  var buf = Buffer(size);
-		  if (fill !== undefined) {
-		    if (typeof encoding === 'string') {
-		      buf.fill(fill, encoding);
-		    } else {
-		      buf.fill(fill);
-		    }
-		  } else {
-		    buf.fill(0);
-		  }
-		  return buf
-		};
-
-		SafeBuffer.allocUnsafe = function (size) {
-		  if (typeof size !== 'number') {
-		    throw new TypeError('Argument must be a number')
-		  }
-		  return Buffer(size)
-		};
-
-		SafeBuffer.allocUnsafeSlow = function (size) {
-		  if (typeof size !== 'number') {
-		    throw new TypeError('Argument must be a number')
-		  }
-		  return buffer.SlowBuffer(size)
-		}; 
-	} (safeBuffer, safeBuffer.exports));
-	return safeBuffer.exports;
-}
-
 var hasRequiredString_decoder;
 
 function requireString_decoder () {
@@ -2359,7 +2342,7 @@ function require_stream_readable () {
 
 	/*<replacement>*/
 
-	var Buffer = requireSafeBuffer$1().Buffer;
+	var Buffer = requireSafeBuffer().Buffer;
 	var OurUint8Array = (typeof commonjsGlobal !== 'undefined' ? commonjsGlobal : typeof window !== 'undefined' ? window : typeof self !== 'undefined' ? self : {}).Uint8Array || function () {};
 	function _uint8ArrayToBuffer(chunk) {
 	  return Buffer.from(chunk);
@@ -3521,25 +3504,25 @@ var hasRequiredReadable;
 function requireReadable () {
 	if (hasRequiredReadable) return readable.exports;
 	hasRequiredReadable = 1;
-	(function (module, exports) {
+	(function (module, exports$1) {
 		var Stream = require$$0;
 		if (process.env.READABLE_STREAM === 'disable' && Stream) {
 		  module.exports = Stream;
-		  exports = module.exports = Stream.Readable;
-		  exports.Readable = Stream.Readable;
-		  exports.Writable = Stream.Writable;
-		  exports.Duplex = Stream.Duplex;
-		  exports.Transform = Stream.Transform;
-		  exports.PassThrough = Stream.PassThrough;
-		  exports.Stream = Stream;
+		  exports$1 = module.exports = Stream.Readable;
+		  exports$1.Readable = Stream.Readable;
+		  exports$1.Writable = Stream.Writable;
+		  exports$1.Duplex = Stream.Duplex;
+		  exports$1.Transform = Stream.Transform;
+		  exports$1.PassThrough = Stream.PassThrough;
+		  exports$1.Stream = Stream;
 		} else {
-		  exports = module.exports = require_stream_readable();
-		  exports.Stream = Stream || exports;
-		  exports.Readable = exports;
-		  exports.Writable = require_stream_writable();
-		  exports.Duplex = require_stream_duplex();
-		  exports.Transform = require_stream_transform();
-		  exports.PassThrough = require_stream_passthrough();
+		  exports$1 = module.exports = require_stream_readable();
+		  exports$1.Stream = Stream || exports$1;
+		  exports$1.Readable = exports$1;
+		  exports$1.Writable = require_stream_writable();
+		  exports$1.Duplex = require_stream_duplex();
+		  exports$1.Transform = require_stream_transform();
+		  exports$1.PassThrough = require_stream_passthrough();
 		} 
 	} (readable, readable.exports));
 	return readable.exports;
@@ -4351,7 +4334,7 @@ var hasRequiredUtils;
 function requireUtils () {
 	if (hasRequiredUtils) return utils$q;
 	hasRequiredUtils = 1;
-	(function (exports) {
+	(function (exports$1) {
 
 		var support = support$4;
 		var base64 = requireBase64();
@@ -4390,8 +4373,8 @@ function requireUtils () {
 		 * @param {String} type the mime type of the blob.
 		 * @return {Blob} the created blob.
 		 */
-		exports.newBlob = function(part, type) {
-		    exports.checkSupport("blob");
+		exports$1.newBlob = function(part, type) {
+		    exports$1.checkSupport("blob");
 
 		    try {
 		        // Blob constructor
@@ -4526,7 +4509,7 @@ function requireUtils () {
 		    // This code is inspired by http://jsperf.com/arraybuffer-to-string-apply-performance/2
 		    // TODO : we now have workers that split the work. Do we still need that ?
 		    var chunk = 65536,
-		        type = exports.getTypeOf(array),
+		        type = exports$1.getTypeOf(array),
 		        canUseApply = true;
 		    if (type === "uint8array") {
 		        canUseApply = arrayToStringHelper.applyCanBeUsed.uint8array;
@@ -4549,7 +4532,7 @@ function requireUtils () {
 		    return arrayToStringHelper.stringifyByChar(array);
 		}
 
-		exports.applyFromCharCode = arrayLikeToString;
+		exports$1.applyFromCharCode = arrayLikeToString;
 
 
 		/**
@@ -4655,7 +4638,7 @@ function requireUtils () {
 		 * @param {String|Array|ArrayBuffer|Uint8Array|Buffer} input the input to convert.
 		 * @throws {Error} an Error if the browser doesn't support the requested output type.
 		 */
-		exports.transformTo = function(outputType, input) {
+		exports$1.transformTo = function(outputType, input) {
 		    if (!input) {
 		        // undefined, null, etc
 		        // an empty string won't harm.
@@ -4664,8 +4647,8 @@ function requireUtils () {
 		    if (!outputType) {
 		        return input;
 		    }
-		    exports.checkSupport(outputType);
-		    var inputType = exports.getTypeOf(input);
+		    exports$1.checkSupport(outputType);
+		    var inputType = exports$1.getTypeOf(input);
 		    var result = transform[inputType][outputType](input);
 		    return result;
 		};
@@ -4678,7 +4661,7 @@ function requireUtils () {
 		 * @param {string} path A path with / or \ separators
 		 * @returns {string} The path with all relative path components resolved.
 		 */
-		exports.resolve = function(path) {
+		exports$1.resolve = function(path) {
 		    var parts = path.split("/");
 		    var result = [];
 		    for (var index = 0; index < parts.length; index++) {
@@ -4701,7 +4684,7 @@ function requireUtils () {
 		 * @param {Object} input the input to identify.
 		 * @return {String} the (lowercase) type of the input.
 		 */
-		exports.getTypeOf = function(input) {
+		exports$1.getTypeOf = function(input) {
 		    if (typeof input === "string") {
 		        return "string";
 		    }
@@ -4724,22 +4707,22 @@ function requireUtils () {
 		 * @param {String} type the type to check.
 		 * @throws {Error} an Error if the browser doesn't support the requested type.
 		 */
-		exports.checkSupport = function(type) {
+		exports$1.checkSupport = function(type) {
 		    var supported = support[type.toLowerCase()];
 		    if (!supported) {
 		        throw new Error(type + " is not supported by this platform");
 		    }
 		};
 
-		exports.MAX_VALUE_16BITS = 65535;
-		exports.MAX_VALUE_32BITS = -1; // well, "\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF" is parsed as -1
+		exports$1.MAX_VALUE_16BITS = 65535;
+		exports$1.MAX_VALUE_32BITS = -1; // well, "\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF" is parsed as -1
 
 		/**
 		 * Prettify a string read as binary.
 		 * @param {string} str the string to prettify.
 		 * @return {string} a pretty string.
 		 */
-		exports.pretty = function(str) {
+		exports$1.pretty = function(str) {
 		    var res = "",
 		        code, i;
 		    for (i = 0; i < (str || "").length; i++) {
@@ -4754,7 +4737,7 @@ function requireUtils () {
 		 * @param {Function} callback the function to call asynchronously.
 		 * @param {Array} args the arguments to give to the callback.
 		 */
-		exports.delay = function(callback, args, self) {
+		exports$1.delay = function(callback, args, self) {
 		    setImmediate(function () {
 		        callback.apply(self || null, args || []);
 		    });
@@ -4766,7 +4749,7 @@ function requireUtils () {
 		 * @param {Function} ctor the constructor to augment
 		 * @param {Function} superCtor the parent constructor to use
 		 */
-		exports.inherits = function (ctor, superCtor) {
+		exports$1.inherits = function (ctor, superCtor) {
 		    var Obj = function() {};
 		    Obj.prototype = superCtor.prototype;
 		    ctor.prototype = new Obj();
@@ -4778,7 +4761,7 @@ function requireUtils () {
 		 * @param {...Object} var_args All objects to merge.
 		 * @return {Object} a new object with the data of the others.
 		 */
-		exports.extend = function() {
+		exports$1.extend = function() {
 		    var result = {}, i, attr;
 		    for (i = 0; i < arguments.length; i++) { // arguments is not enumerable in some browsers
 		        for (attr in arguments[i]) {
@@ -4799,7 +4782,7 @@ function requireUtils () {
 		 * @param {Boolean} isBase64 true if the string content is encoded with base64.
 		 * @return {Promise} a promise in a format usable by JSZip.
 		 */
-		exports.prepareContent = function(name, inputData, isBinary, isOptimizedBinaryString, isBase64) {
+		exports$1.prepareContent = function(name, inputData, isBinary, isOptimizedBinaryString, isBase64) {
 
 		    // if inputData is already a promise, this flatten it.
 		    var promise = external.Promise.resolve(inputData).then(function(data) {
@@ -4825,7 +4808,7 @@ function requireUtils () {
 		    });
 
 		    return promise.then(function(data) {
-		        var dataType = exports.getTypeOf(data);
+		        var dataType = exports$1.getTypeOf(data);
 
 		        if (!dataType) {
 		            return external.Promise.reject(
@@ -4835,7 +4818,7 @@ function requireUtils () {
 		        }
 		        // special case : it's way easier to work with Uint8Array than with ArrayBuffer
 		        if (dataType === "arraybuffer") {
-		            data = exports.transformTo("uint8array", data);
+		            data = exports$1.transformTo("uint8array", data);
 		        } else if (dataType === "string") {
 		            if (isBase64) {
 		                data = base64.decode(data);
@@ -5118,7 +5101,7 @@ GenericWorker$b.prototype = {
 
 var GenericWorker_1 = GenericWorker$b;
 
-(function (exports) {
+(function (exports$1) {
 
 	var utils = requireUtils();
 	var support = support$4;
@@ -5286,7 +5269,7 @@ var GenericWorker_1 = GenericWorker$b;
 	 * @param {String} str the string to encode
 	 * @return {Array|Uint8Array|Buffer} the UTF-8 encoded string.
 	 */
-	exports.utf8encode = function utf8encode(str) {
+	exports$1.utf8encode = function utf8encode(str) {
 	    if (support.nodebuffer) {
 	        return nodejsUtils.newBufferFrom(str, "utf-8");
 	    }
@@ -5301,7 +5284,7 @@ var GenericWorker_1 = GenericWorker$b;
 	 * @param {Array|Uint8Array|Buffer} buf the data de decode
 	 * @return {String} the decoded string.
 	 */
-	exports.utf8decode = function utf8decode(buf) {
+	exports$1.utf8decode = function utf8decode(buf) {
 	    if (support.nodebuffer) {
 	        return utils.transformTo("nodebuffer", buf).toString("utf-8");
 	    }
@@ -5355,7 +5338,7 @@ var GenericWorker_1 = GenericWorker$b;
 	    }
 
 	    this.push({
-	        data : exports.utf8decode(usableData),
+	        data : exports$1.utf8decode(usableData),
 	        meta : chunk.meta
 	    });
 	};
@@ -5366,13 +5349,13 @@ var GenericWorker_1 = GenericWorker$b;
 	Utf8DecodeWorker.prototype.flush = function () {
 	    if(this.leftOver && this.leftOver.length) {
 	        this.push({
-	            data : exports.utf8decode(this.leftOver),
+	            data : exports$1.utf8decode(this.leftOver),
 	            meta : {}
 	        });
 	        this.leftOver = null;
 	    }
 	};
-	exports.Utf8DecodeWorker = Utf8DecodeWorker;
+	exports$1.Utf8DecodeWorker = Utf8DecodeWorker;
 
 	/**
 	 * A worker to endcode string chunks into utf8 encoded binary chunks.
@@ -5388,11 +5371,11 @@ var GenericWorker_1 = GenericWorker$b;
 	 */
 	Utf8EncodeWorker.prototype.processChunk = function (chunk) {
 	    this.push({
-	        data : exports.utf8encode(chunk.data),
+	        data : exports$1.utf8encode(chunk.data),
 	        meta : chunk.meta
 	    });
 	};
-	exports.Utf8EncodeWorker = Utf8EncodeWorker; 
+	exports$1.Utf8EncodeWorker = Utf8EncodeWorker; 
 } (utf8$5));
 
 var GenericWorker$a = GenericWorker_1;
@@ -6150,7 +6133,7 @@ var flate = {};
 
 var common = {};
 
-(function (exports) {
+(function (exports$1) {
 
 
 	var TYPED_OK =  (typeof Uint8Array !== 'undefined') &&
@@ -6161,7 +6144,7 @@ var common = {};
 	  return Object.prototype.hasOwnProperty.call(obj, key);
 	}
 
-	exports.assign = function (obj /*from1, from2, from3, ...*/) {
+	exports$1.assign = function (obj /*from1, from2, from3, ...*/) {
 	  var sources = Array.prototype.slice.call(arguments, 1);
 	  while (sources.length) {
 	    var source = sources.shift();
@@ -6183,7 +6166,7 @@ var common = {};
 
 
 	// reduce buffer size, avoiding mem copy
-	exports.shrinkBuf = function (buf, size) {
+	exports$1.shrinkBuf = function (buf, size) {
 	  if (buf.length === size) { return buf; }
 	  if (buf.subarray) { return buf.subarray(0, size); }
 	  buf.length = size;
@@ -6240,21 +6223,21 @@ var common = {};
 
 	// Enable/Disable typed arrays use, for testing
 	//
-	exports.setTyped = function (on) {
+	exports$1.setTyped = function (on) {
 	  if (on) {
-	    exports.Buf8  = Uint8Array;
-	    exports.Buf16 = Uint16Array;
-	    exports.Buf32 = Int32Array;
-	    exports.assign(exports, fnTyped);
+	    exports$1.Buf8  = Uint8Array;
+	    exports$1.Buf16 = Uint16Array;
+	    exports$1.Buf32 = Int32Array;
+	    exports$1.assign(exports$1, fnTyped);
 	  } else {
-	    exports.Buf8  = Array;
-	    exports.Buf16 = Array;
-	    exports.Buf32 = Array;
-	    exports.assign(exports, fnUntyped);
+	    exports$1.Buf8  = Array;
+	    exports$1.Buf16 = Array;
+	    exports$1.Buf32 = Array;
+	    exports$1.assign(exports$1, fnUntyped);
 	  }
 	};
 
-	exports.setTyped(TYPED_OK); 
+	exports$1.setTyped(TYPED_OK); 
 } (common));
 
 var deflate$4 = {};
@@ -15617,7 +15600,7 @@ const uiThemeSmallButton = (dom, buttonStyle) => {
 
 var lottie$1 = {exports: {}};
 
-(function (module, exports) {
+(function (module, exports$1) {
 	(typeof document !== "undefined") && (typeof navigator !== "undefined") && (function (global, factory) {
 	  module.exports = factory() ;
 	})(commonjsGlobal, (function () {
@@ -20044,7 +20027,7 @@ var lottie$1 = {exports: {}};
 
 	  // this adds bodymovin to the window object for backwards compatibility
 	  try {
-	    if (!(('object' === "undefined" ? "undefined" : _typeof$3(exports)) === 'object' && 'object' !== 'undefined') && !(typeof undefined === 'function' && undefined.amd) // eslint-disable-line no-undef
+	    if (!(('object' === "undefined" ? "undefined" : _typeof$3(exports$1)) === 'object' && 'object' !== 'undefined') && !(typeof undefined === 'function' && undefined.amd) // eslint-disable-line no-undef
 	    ) {
 	      window.bodymovin = lottie;
 	    }
@@ -34517,6 +34500,43 @@ window.ononline = () => {
   });
 };
 
+/**
+ * 將 API 回傳的主題配置與預設值進行深層合併。
+ * - 不會修改 themeConfigDefault
+ * - 巢狀物件會逐一屬性合併（API 只需提供要覆寫的屬性）
+ * - 自動過濾 null / undefined 值，避免覆蓋預設值
+ */
+function mergeThemeConfig(apiConfig) {
+  const result = {};
+  for (const key of Object.keys(themeConfigDefault)) {
+    const defaultVal = themeConfigDefault[key];
+    const apiVal = apiConfig == null ? void 0 : apiConfig[key];
+    if (defaultVal != null && typeof defaultVal === 'object' && !Array.isArray(defaultVal)) {
+      // 巢狀物件：逐一屬性合併，過濾 null/undefined
+      const merged = Object.assign({}, defaultVal);
+      if (apiVal != null && typeof apiVal === 'object') {
+        for (const [k, v] of Object.entries(apiVal)) {
+          if (v != null) {
+            merged[k] = v;
+          }
+        }
+      }
+      result[key] = merged;
+    } else {
+      // 純值：API 有提供且非 null/undefined 才覆寫
+      result[key] = apiVal != null ? apiVal : defaultVal;
+    }
+  }
+  // 保留 API 回傳但預設值沒有的新屬性
+  if (apiConfig != null && typeof apiConfig === 'object') {
+    for (const key of Object.keys(apiConfig)) {
+      if (!(key in result) && apiConfig[key] != null) {
+        result[key] = apiConfig[key];
+      }
+    }
+  }
+  return result;
+}
 const themeConfigDefault = {
   isFraudAnimationLoadingPageEnabled: true,
   isStatementEnabled: true,
@@ -34878,7 +34898,7 @@ const themeConfigDefault = {
 };
 
 var name = "authme/sdk";
-var version$1 = "2.8.44";
+var version$1 = "2.8.46";
 var packageInfo = {
 	name: name,
 	version: version$1};
@@ -34888,4 +34908,4 @@ const version = packageInfo.version;
 (_window$_Symbol$for = (_window = window)[_Symbol$for = Symbol.for('authme-sdk')]) != null ? _window$_Symbol$for : _window[_Symbol$for] = {};
 window[Symbol.for('authme-sdk')][packageInfo.name] = version;
 
-export { AuthmeError, DEVICE_TYPE, ErrorCode, Icon, RGBToLottieColor, RUN_FUNCTION_NAME, STORAGE_KEY, Storage, TIME_UNIT, UintArrayToBlob, asyncOnLineShowErrorMessage, asyncShowErrorMessage, asyncShowPopup, backgroundRequest, checkOnlineStatus, clearCanvas, colorStringToRGB, colorToRGB, combineResult, cropByRatio, dataURItoBlob, debugLog, debugTools, decodeToken, dropMenu, fontWeight, getCanvasSize, getCssVariable, getDeviceInfo, getImageData, getSystemInfo, hexToRGB, hideElement, hideErrorMessage, hidePopup, isIphone14proOrProMax, isMobile, isMobileOrTablet$1 as isMobileOrTablet, osVersion, requestCamera, resize, retryPromiseWithCondition, showElement, showErrorMessage, showErrorMessageEventName, showPopup, splitResult, startLoadingSDK, startSpinner, stopLoadingSDK, stopSpinner, switchCamera, themeConfigDefault, uiThemeButton, uiThemeDirection, uiThemeHint, uiThemeSmallButton, uiThemeText, uploadModal, useState, verificationErrorMessages, version, videoConstraintsFactory, waitTime };
+export { AuthmeError, DEVICE_TYPE, ErrorCode, Icon, RGBToLottieColor, RUN_FUNCTION_NAME, STORAGE_KEY, Storage, TIME_UNIT, UintArrayToBlob, asyncOnLineShowErrorMessage, asyncShowErrorMessage, asyncShowPopup, backgroundRequest, checkOnlineStatus, clearCanvas, colorStringToRGB, colorToRGB, combineResult, cropByRatio, dataURItoBlob, debugLog, debugTools, decodeToken, dropMenu, fontWeight, getCanvasSize, getCssVariable, getDeviceInfo, getImageData, getSystemInfo, hexToRGB, hideElement, hideErrorMessage, hidePopup, isIphone14proOrProMax, isMobile, isMobileOrTablet$1 as isMobileOrTablet, mergeThemeConfig, osVersion, requestCamera, resize, retryPromiseWithCondition, showElement, showErrorMessage, showErrorMessageEventName, showPopup, splitResult, startLoadingSDK, startSpinner, stopLoadingSDK, stopSpinner, switchCamera, themeConfigDefault, uiThemeButton, uiThemeDirection, uiThemeHint, uiThemeSmallButton, uiThemeText, uploadModal, useState, verificationErrorMessages, version, videoConstraintsFactory, waitTime };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authme/util",
-  "version": "2.8.44",
+  "version": "2.8.46",
   "peerDependencies": {
     "core-js": "^3.6.0"
   },
@@ -9,5 +9,5 @@
   },
   "module": "./index.esm.js",
   "main": "./index.cjs.js",
-  "types": "./index.esm.d.ts"
+  "types": "./index.d.ts"
 }