@authup/client-auth-console 1.0.0-beta.68 → 1.0.0-beta.69

package/dist/client/index.html

@@ -13,7 +13,7 @@
     <link rel="icon" type="image/svg+xml" href="/console/auth/assets/favicon-CEtVE1SK.svg" />
     <title>Authup</title>
     <!--preload-links-->
-  <script type="module" crossorigin src="/console/auth/assets/index-BdwUQS5d.js"></script>
+  <script type="module" crossorigin src="/console/auth/assets/index-UI54EPIA.js"></script>
   <link rel="stylesheet" crossorigin href="/console/auth/assets/index-CyF87xq2.css">
 </head>
 <body>

package/dist/server/server.js

@@ -5227,8 +5227,8 @@ var require_runtime_core_cjs_prod = /* @__PURE__ */ __commonJSMin(((exports) =>
 			const oldLength = c1.length;
 			const newLength = c2.length;
 			const commonLength = Math.min(oldLength, newLength);
-			let i;
-			for (i = 0; i < commonLength; i++) {
+			let i = 0;
+			for (; i < commonLength; i++) {
 				const nextChild = c2[i] = optimized ? cloneIfMounted(c2[i]) : normalizeVNode(c2[i]);
 				patch(c1[i], nextChild, container, null, parentComponent, parentSuspense, namespace, slotScopeIds, optimized);
 			}
@@ -19954,8 +19954,8 @@ var require_lib$2 = /* @__PURE__ */ __commonJSMin(((exports) => {
 			return this.finishNode(node, isBreak ? "BreakStatement" : "ContinueStatement");
 		}
 		verifyBreakContinue(node, isBreak) {
-			let i;
-			for (i = 0; i < this.state.labels.length; ++i) {
+			let i = 0;
+			for (; i < this.state.labels.length; ++i) {
 				const lab = this.state.labels[i];
 				if (node.label == null || lab.name === node.label.name) {
 					if (lab.kind != null && (isBreak || lab.kind === 1)) break;
@@ -22243,10 +22243,9 @@ var require_source_map_generator = /* @__PURE__ */ __commonJSMin(((exports) => {
 			next = "";
 			if (mapping.generatedLine !== previousGeneratedLine) {
 				previousGeneratedColumn = 0;
-				while (mapping.generatedLine !== previousGeneratedLine) {
-					next += ";";
-					previousGeneratedLine++;
-				}
+				var lineDelta = mapping.generatedLine - previousGeneratedLine;
+				next += lineDelta === 1 ? ";" : ";".repeat(lineDelta);
+				previousGeneratedLine = mapping.generatedLine;
 			} else if (i > 0) {
 				if (!util.compareByGeneratedPositionsInflated(mapping, mappings[i - 1])) continue;
 				next += ",";
@@ -22427,6 +22426,14 @@ var require_quick_sort = /* @__PURE__ */ __commonJSMin(((exports) => {
 		let template = SortTemplate.toString();
 		return new Function(`return ${template}`)()(comparator);
 	}
+	var isEvalAllowed = (function() {
+		try {
+			new Function("return 0")();
+			return true;
+		} catch {
+			return false;
+		}
+	})();
 	/**
 	* Sort the given array in-place with the given comparator function.
 	*
@@ -22437,7 +22444,7 @@ var require_quick_sort = /* @__PURE__ */ __commonJSMin(((exports) => {
 	*/
 	var sortCache = /* @__PURE__ */ new WeakMap();
 	exports.quickSort = function(ary, comparator, start = 0) {
-		let doQuickSort = sortCache.get(comparator);
+		let doQuickSort = isEvalAllowed ? sortCache.get(comparator) : SortTemplate(comparator);
 		if (doQuickSort === void 0) {
 			doQuickSort = cloneSort(comparator);
 			sortCache.set(comparator, doQuickSort);
@@ -22453,6 +22460,7 @@ var require_source_map_consumer = /* @__PURE__ */ __commonJSMin(((exports) => {
 	var ArraySet = require_array_set().ArraySet;
 	var base64VLQ = require_base64_vlq();
 	var quickSort = require_quick_sort().quickSort;
+	var MAX_SECTION_OFFSET_LINE = 1e7;
 	function SourceMapConsumer(aSourceMap, aSourceMapURL) {
 		var sourceMap = aSourceMap;
 		if (typeof aSourceMap === "string") sourceMap = util.parseSourceMapInput(aSourceMap);
@@ -22677,8 +22685,8 @@ var require_source_map_consumer = /* @__PURE__ */ __commonJSMin(((exports) => {
 		var relativeSource = aSource;
 		if (this.sourceRoot != null) relativeSource = util.relative(this.sourceRoot, relativeSource);
 		if (this._sources.has(relativeSource)) return this._sources.indexOf(relativeSource);
-		var i;
-		for (i = 0; i < this._absoluteSources.length; ++i) if (this._absoluteSources[i] == aSource) return i;
+		var i = 0;
+		for (; i < this._absoluteSources.length; ++i) if (this._absoluteSources[i] == aSource) return i;
 		return -1;
 	};
 	/**
@@ -23054,21 +23062,37 @@ var require_source_map_consumer = /* @__PURE__ */ __commonJSMin(((exports) => {
 			line: -1,
 			column: 0
 		};
+		var maxOffsetLine = 0;
 		this._sections = sections.map(function(s) {
 			if (s.url) throw new Error("Support for url field in sections not implemented.");
 			var offset = util.getArg(s, "offset");
 			var offsetLine = util.getArg(offset, "line");
 			var offsetColumn = util.getArg(offset, "column");
+			if (!isValidOffset(offsetLine) || !isValidOffset(offsetColumn)) throw new Error("Section offset line and column must be non-negative integers.");
+			if (offsetLine > MAX_SECTION_OFFSET_LINE) throw new Error("Section offset line must not exceed " + MAX_SECTION_OFFSET_LINE + ".");
 			if (offsetLine < lastOffset.line || offsetLine === lastOffset.line && offsetColumn < lastOffset.column) throw new Error("Section offsets must be ordered and non-overlapping.");
 			lastOffset = offset;
+			var consumer = new SourceMapConsumer(util.getArg(s, "map"), aSourceMapURL);
+			var totalOffsetLine = offsetLine + (consumer._maxOffsetLine || 0);
+			if (totalOffsetLine > MAX_SECTION_OFFSET_LINE) throw new Error("Section offset line must not exceed " + MAX_SECTION_OFFSET_LINE + ", including offsets of nested sections.");
+			if (totalOffsetLine > maxOffsetLine) maxOffsetLine = totalOffsetLine;
 			return {
 				generatedOffset: {
 					generatedLine: offsetLine + 1,
 					generatedColumn: offsetColumn + 1
 				},
-				consumer: new SourceMapConsumer(util.getArg(s, "map"), aSourceMapURL)
+				consumer
 			};
 		});
+		this._maxOffsetLine = maxOffsetLine;
+	}
+	/**
+	* Section offsets come from untrusted input and are used as line/column
+	* numbers, so only accept non-negative safe integers (rejects NaN, Infinity,
+	* strings, fractions, etc).
+	*/
+	function isValidOffset(aValue) {
+		return typeof aValue === "number" && aValue >= 0 && aValue <= 9007199254740991 && Math.floor(aValue) === aValue;
 	}
 	IndexedSourceMapConsumer.prototype = Object.create(SourceMapConsumer.prototype);
 	IndexedSourceMapConsumer.prototype.constructor = SourceMapConsumer;
@@ -23081,7 +23105,10 @@ var require_source_map_consumer = /* @__PURE__ */ __commonJSMin(((exports) => {
 	*/
 	Object.defineProperty(IndexedSourceMapConsumer.prototype, "sources", { get: function() {
 		var sources = [];
-		for (var i = 0; i < this._sections.length; i++) for (var j = 0; j < this._sections[i].consumer.sources.length; j++) sources.push(this._sections[i].consumer.sources[j]);
+		for (var i = 0; i < this._sections.length; i++) {
+			var sectionSources = this._sections[i].consumer.sources;
+			for (var j = 0; j < sectionSources.length; j++) sources.push(sectionSources[j]);
+		}
 		return sources;
 	} });
 	/**
@@ -23288,6 +23315,10 @@ var require_source_node = /* @__PURE__ */ __commonJSMin(((exports) => {
 				}
 			}
 			while (lastGeneratedLine < mapping.generatedLine) {
+				if (remainingLinesIndex >= remainingLines.length) {
+					lastGeneratedLine = mapping.generatedLine;
+					break;
+				}
 				node.add(shiftNextLine());
 				lastGeneratedLine++;
 			}
@@ -37045,6 +37076,17 @@ function _array(Class, element, params) {
 	});
 }
 // @__NO_SIDE_EFFECTS__
+function _custom(Class, fn, _params) {
+	const norm = normalizeParams(_params);
+	norm.abort ?? (norm.abort = true);
+	return new Class({
+		type: "custom",
+		check: "custom",
+		fn,
+		...norm
+	});
+}
+// @__NO_SIDE_EFFECTS__
 function _refine(Class, fn, _params) {
 	return new Class({
 		type: "custom",
@@ -38921,6 +38963,9 @@ var ZodCustom = /*@__PURE__*/ $constructor("ZodCustom", (inst, def) => {
 	ZodType.init(inst, def);
 	inst._zod.processJSONSchema = (ctx, json, params) => customProcessor(inst, ctx, json, params);
 });
+function custom(fn, _params) {
+	return /* @__PURE__ */ _custom(ZodCustom, fn ?? (() => true), _params);
+}
 function refine(fn, _params = {}) {
 	return /* @__PURE__ */ _refine(ZodCustom, fn, _params);
 }
@@ -39055,7 +39100,7 @@ function generateName(seed) {
 }
 //#endregion
 //#region ../../packages/kit/node_modules/nanoid/url-alphabet/index.js
-var urlAlphabet = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
+var urlAlphabet = "57X6y3wQZNzYjJB2L_10pxbackgroundhimselfUTF-8DEMOGRAPHICSVqvt4KW9";
 //#endregion
 //#region ../../packages/kit/node_modules/nanoid/index.js
 var GET_RANDOM_LIMIT = 65536;
@@ -39083,7 +39128,7 @@ function customRandom(alphabet, defaultSize, getRandom) {
 			let id = "";
 			while (true) {
 				let bytes = getRandom(size);
-				let i = size;
+				let i = size |= 0;
 				while (i--) {
 					id += alphabet[bytes[i] & mask];
 					if (id.length >= size) return id;
@@ -39091,10 +39136,10 @@ function customRandom(alphabet, defaultSize, getRandom) {
 			}
 		};
 	}
-	let step = Math.ceil(409.6 * defaultSize / safeByteCutoff);
 	return (size = defaultSize) => {
 		if (!size) return "";
 		let id = "";
+		let step = Math.ceil(409.6 * size / safeByteCutoff);
 		while (true) {
 			let bytes = getRandom(step);
 			let i = step;
@@ -50925,6 +50970,11 @@ var DatePolicyEvaluator = class {
 };
 //#endregion
 //#region ../../packages/access/src/policy/built-in/identity/data/validator.ts
+function isPermissionPolicyBinding(input) {
+	if (!input || typeof input !== "object") return false;
+	const { permission } = input;
+	return !!permission && typeof permission === "object" && typeof permission.name === "string";
+}
 var PolicyIdentityDataValidator = class extends Container {
 	initialize() {
 		super.initialize();
@@ -50932,6 +50982,7 @@ var PolicyIdentityDataValidator = class extends Container {
 		this.mount("id", createValidator(uuid()));
 		this.mount("clientId", createValidator(uuid().or(_null()).or(_undefined()).optional()));
 		this.mount("realmId", createValidator(uuid().or(_null()).or(_undefined()).optional()));
+		this.mount("grants", createValidator(array(custom((input) => isPermissionPolicyBinding(input))).optional()));
 		this.mount("realmName", createValidator(string().min(3).max(128).or(_null()).or(_undefined()).optional()));
 	}
 };
@@ -56548,7 +56599,7 @@ var Icon = (0, vue_exports.defineComponent)((props, { emit }) => {
 		flip: { type: String },
 		id: { type: String },
 		ariaHidden: {
-			type: Boolean,
+			type: [Boolean, String],
 			default: void 0
 		},
 		customise: { type: Function },
@@ -56924,6 +56975,10 @@ var Diagnostic = class Diagnostic extends Error {
 	*/
 	sources;
 	/**
+	* Structured information associated with this diagnostic code.
+	*/
+	data;
+	/**
 	* Alias for {@link Error.message}: the reason this diagnostic was raised.
 	*/
 	get why() {
@@ -56942,6 +56997,7 @@ var Diagnostic = class Diagnostic extends Error {
 		this.fix = init.fix;
 		this.docs = init.docs;
 		this.sources = init.sources;
+		this.data = init.data;
 		captureStackTrace?.(this, captureFrom);
 	}
 	/**
@@ -56955,6 +57011,7 @@ var Diagnostic = class Diagnostic extends Error {
 			docs: this.docs,
 			sources: this.sources,
 			cause: this.cause,
+			data: this.data,
 			stack: this.stack
 		};
 	}
@@ -56990,7 +57047,8 @@ function defineDiagnostics(options) {
 				fix: toValueWithArgs(def.fix, params),
 				docs,
 				cause: params.cause,
-				sources: params.sources
+				sources: params.sources,
+				data: toValueWithArgs(def.data, params)
 			}, handle);
 			for (const reporter of reporters) reporter(diagnostic, reporterOptions);
 			return diagnostic;
@@ -57000,9 +57058,9 @@ function defineDiagnostics(options) {
 	return result;
 }
 //#endregion
-//#region ../../node_modules/vue-router/dist/useApi-BPuI6ZR9.js
+//#region ../../node_modules/vue-router/dist/useApi-CUWMwLLw.js
 /*!
-* vue-router v5.3.1
+* vue-router v5.4.0
 * (c) 2026 Eduardo San Martin Morote
 * @license MIT
 */
@@ -57105,7 +57163,7 @@ function stringifyRoute(to) {
 /**
 * Runtime diagnostics catalog for Vue Router.
 *
-* Every entry has a stable `VUE_ROUTER_R####` code, a `why` that states the problem
+* Every entry has a stable `VUE_ROUTER_X####` code, a `why` that states the problem
 * (the diagnosis only, never the remedy) and a `fix` that states the remedy
 * (only, never the diagnosis). They are complementary: the reporter prints
 * both, so neither repeats the other. The diagnosis substrings asserted by the
@@ -57116,10 +57174,23 @@ function stringifyRoute(to) {
 * Codes are permanent: never rename or reuse one.
 * - `VUE_ROUTER_R0###` core runtime warnings
 * - `VUE_ROUTER_R1###` experimental data-loaders
+* - `VUE_ROUTER_D0###` deprecations
 */
 var diagnostics$1 = /*#__PURE__*/ defineDiagnostics({
 	reporters: [/*#__PURE__*/ createConsoleReporter()],
 	codes: {
+		VUE_ROUTER_R0122: {
+			why: (p) => `The optional path param "${p.param}" is being removed with ${p.value}.`,
+			fix: "Use null to remove an optional path param."
+		},
+		VUE_ROUTER_D0001: {
+			why: (p) => `Route "${p.name}" uses beforeEnter, which is deprecated in the experimental router.`,
+			fix: "Move the condition to the route meta field and check to.meta in router.beforeEach()."
+		},
+		VUE_ROUTER_D0002: {
+			why: (p) => `The query value of "${p.key}" is not an array (${p.value}). Non array query values are deprecated in the experimental router.`,
+			fix: (p) => `Wrap the value in an array: \`{ ${JSON.stringify(p.key)}: [${p.value}] }\`. Use undefined to remove the key.`
+		},
 		VUE_ROUTER_R0001: {
 			why: (p) => `Parent route "${p.name}" not found when adding child route`,
 			fix: "Add the parent route before its children, or check the parent name for typos.",
@@ -57238,6 +57309,14 @@ var diagnostics$1 = /*#__PURE__*/ defineDiagnostics({
 			fix: "Return a selector that matches an existing element, or guard against missing elements.",
 			docs: "https://router.vuejs.org/guide/advanced/scroll-behavior.html"
 		},
+		VUE_ROUTER_R0043: {
+			why: (p) => `Several active useScrollRestoration() calls use the key "${p.key}" with different "capture" or "restore" options. They overwrite each other's saved entry.`,
+			fix: "Give each call a different \"key\", or combine them if they are in the same component."
+		},
+		VUE_ROUTER_R0044: {
+			why: "No ScrollRestoration plugin is available to useScrollRestoration().",
+			fix: "Install ScrollRestoration on the app before calling useScrollRestoration()."
+		},
 		VUE_ROUTER_R0050: {
 			why: (p) => {
 				let to;
@@ -57389,6 +57468,13 @@ var routeLocationKey = Symbol(process.env.NODE_ENV !== "production" ? "route loc
 */
 var routerViewLocationKey = Symbol(process.env.NODE_ENV !== "production" ? "router view location" : "");
 /**
+* Callbacks called by the closest ancestor router-view once it displays a new
+* route. Used by `onRouteRendered()`.
+*
+* @internal
+*/
+var routerViewOnRouteRenderedKey = Symbol(process.env.NODE_ENV !== "production" ? "router view on route rendered" : "");
+/**
 * Returns the current route location. Equivalent to using `$route` inside
 * templates.
 */
@@ -57396,9 +57482,9 @@ function useRoute(_name) {
 	return (0, vue_exports.inject)(routeLocationKey);
 }
 //#endregion
-//#region ../../node_modules/vue-router/dist/devtools-CN5uWJaH.js
+//#region ../../node_modules/vue-router/dist/devtools-CxgSYwGp.js
 /*!
-* vue-router v5.3.1
+* vue-router v5.4.0
 * (c) 2026 Eduardo San Martin Morote
 * @license MIT
 */
@@ -57420,6 +57506,11 @@ var isBrowser = typeof document !== "undefined";
 * encoded everywhere because some browsers like FF encode it when directly
 * written while others don't. Safari and IE don't encode ``"<>{}``` in hash.
 */
+/**
+* NOTE: `replaceAll()` is not faster than `replace()` with a global RegExp.
+* Benchmarks do not show a clear benefit for these simple replacements:
+* https://github.com/mathiasbynens/string-prototype-replace-regexp-benchmark
+*/
 var HASH_RE$1 = /#/g;
 var AMPERSAND_RE$1 = /&/g;
 var SLASH_RE$1 = /\//g;
@@ -57763,6 +57854,12 @@ function getSavedScrollPosition(key) {
 	scrollPositions.delete(key);
 	return scroll;
 }
+function invalidateScrollPositions(position, replace = false) {
+	for (const key of scrollPositions.keys()) {
+		const entryPosition = parseInt(key, 10);
+		if (entryPosition === position || !replace && entryPosition > position) scrollPositions.delete(key);
+	}
+}
 /**
 * ScrollBehavior instance used by the router to compute and restore the scroll
 * position when navigating.
@@ -58029,7 +58126,7 @@ function addDevtools(app, router, matcher) {
 //#endregion
 //#region ../../node_modules/vue-router/dist/vue-router.js
 /*!
-* vue-router v5.3.1
+* vue-router v5.4.0
 * (c) 2026 Eduardo San Martin Morote
 * @license MIT
 */
@@ -58154,7 +58251,9 @@ function useHistoryStateNavigation(base) {
 		}
 	}
 	function replace(to, data) {
-		changeLocation(to, assign$2({}, history.state, buildState(historyState.value.back, to, historyState.value.forward, true), data, { position: historyState.value.position }), true);
+		const state = assign$2({}, history.state, buildState(historyState.value.back, to, historyState.value.forward, true), data, { position: historyState.value.position });
+		changeLocation(to, state, true);
+		invalidateScrollPositions(state.position, true);
 		currentLocation.value = to;
 	}
 	function push(to, data) {
@@ -58165,6 +58264,7 @@ function useHistoryStateNavigation(base) {
 		if (process.env.NODE_ENV !== "production" && !history.state) diagnostics$1.VUE_ROUTER_R0121();
 		changeLocation(currentState.current, currentState, true);
 		changeLocation(to, assign$2({}, buildState(currentLocation.value, to, null), { position: currentState.position + 1 }, data), false);
+		invalidateScrollPositions(currentState.position);
 		currentLocation.value = to;
 	}
 	return {
@@ -59048,7 +59148,11 @@ var RouterViewImpl = /*#__PURE__*/ (0, vue_exports.defineComponent)({
 		(0, vue_exports.provide)(viewDepthKey, (0, vue_exports.computed)(() => depth.value + 1));
 		(0, vue_exports.provide)(matchedRouteKey, matchedRouteRef);
 		(0, vue_exports.provide)(routerViewLocationKey, routeToDisplay);
+		const onRouteRenderedCallbacks = /* @__PURE__ */ new Set();
+		(0, vue_exports.provide)(routerViewOnRouteRenderedKey, onRouteRenderedCallbacks);
 		const viewRef = (0, vue_exports.ref)();
+		let settledRoute = START_LOCATION_NORMALIZED;
+		const { app } = (0, vue_exports.getCurrentInstance)().appContext;
 		(0, vue_exports.watch)(() => [
 			viewRef.value,
 			matchedRouteRef.value,
@@ -59077,8 +59181,16 @@ var RouterViewImpl = /*#__PURE__*/ (0, vue_exports.defineComponent)({
 			const onVnodeUnmounted = (vnode) => {
 				if (vnode.component.isUnmounted) matchedRoute.instances[currentName] = null;
 			};
+			const onVnodeSettled = (vnode) => (0, vue_exports.nextTick)(() => {
+				if (settledRoute === route || routeToDisplay.value !== route || vnode.el.getRootNode() !== app._container.getRootNode()) return;
+				const from = settledRoute;
+				settledRoute = route;
+				for (const callback of onRouteRenderedCallbacks) callback(route, from);
+			});
 			const component = (0, vue_exports.h)(ViewComponent, assign$2({}, routeProps, attrs, {
 				onVnodeUnmounted,
+				onVnodeMounted: onVnodeSettled,
+				onVnodeUpdated: onVnodeSettled,
 				ref: viewRef
 			}));
 			if ((process.env.NODE_ENV !== "production" || false) && isBrowser && component.ref) {
@@ -59123,7 +59235,7 @@ function warnDeprecatedUsage() {
 * @param options - {@link RouterOptions}
 */
 function createRouter(options) {
-	const matcher = createRouterMatcher(options.routes, options);
+	const matcher = options.matcher || createRouterMatcher(options.routes, options);
 	const parseQuery$1$1 = options.parseQuery || parseQuery$1;
 	const stringifyQuery$1$1 = options.stringifyQuery || stringifyQuery$1;
 	const routerHistory = options.history;
@@ -61148,7 +61260,6 @@ function useNavigatorLanguage(options = {}) {
 		language
 	};
 }
-Number.POSITIVE_INFINITY;
 /**
 * Shorthand for v-model binding, props + emit -> ref
 *
@@ -65130,7 +65241,7 @@ async function Ai(i, o) {
 		let w = null;
 		const A = n$1(() => {
 			const g = new _r("The operation was aborted.");
-			f(g), l.body && l.body instanceof me.Readable && l.body.destroy(g), !(!w || !w.body) && w.body.emit("error", g);
+			f(g), l.body && l.body instanceof me.Readable && l.body.destroy(g), w && w.body && w.body.emit("error", g);
 		}, "abort");
 		if (v && v.aborted) {
 			A();
@@ -69171,7 +69282,7 @@ Content-Type: ${R.type || "application/octet-stream"}\r
 			let B = null;
 			const I = u(() => {
 				const v = new AbortError("The operation was aborted.");
-				g(v), b.body && b.body instanceof Stream__default.Readable && b.body.destroy(v), !(!B || !B.body) && B.body.emit("error", v);
+				g(v), b.body && b.body instanceof Stream__default.Readable && b.body.destroy(v), B && B.body && B.body.emit("error", v);
 			}, "abort");
 			if (z && z.aborted) {
 				I();
@@ -86387,14 +86498,14 @@ var IdentityProviderAPI = class extends BaseAPI$1 {
 		return url;
 	}
 	async createLinkRequest(id) {
-		return (await this.client.post(`identity-providers/${id}/link-request`)).data;
+		return (await this.client.post(`identity-providers/${encodeURIComponent(id)}/link-request`)).data;
 	}
 	async completeLogin(id) {
-		return (await this.client.post(`identity-providers/${id}/login-complete`)).data;
+		return (await this.client.post(`identity-providers/${encodeURIComponent(id)}/login-complete`)).data;
 	}
 	async confirmLinkRequest(id, handle) {
 		const payload = { handle };
-		return (await this.client.post(`identity-providers/${id}/link-confirm`, payload)).data;
+		return (await this.client.post(`identity-providers/${encodeURIComponent(id)}/link-confirm`, payload)).data;
 	}
 	async getMany(record) {
 		return (await this.client.get(`identity-providers${buildQueryString(record)}`)).data;
@@ -87453,8 +87564,9 @@ var Client = class extends Client$1 {
 	async getJwks() {
 		return (await this.get("jwks")).data;
 	}
-	async getJwk(id) {
-		return (await this.get(`jwks/${id}`)).data;
+	async getJwk(id, realmId) {
+		const path = `jwks/${encodeURIComponent(id)}`;
+		return (await this.get(realmId ? `realms/${encodeURIComponent(realmId)}/${path}` : path)).data;
 	}
 	async getWellKnownOpenIDConfiguration() {
 		return (await this.get("/.well-known/openid-configuration")).data;
@@ -89896,6 +90008,11 @@ function installStore(app, options = {}) {
 	};
 	else cookieUnset = useCookies().remove;
 	const cookiePath = options.cookiePath || "/";
+	const cookieOptions = {
+		path: cookiePath,
+		sameSite: "lax",
+		...options.cookieSecure ?? (typeof window !== "undefined" && window.location?.protocol === "https:") ? { secure: true } : {}
+	};
 	/**
 	* Drop the copies written before the path was pinned.
 	*
@@ -89997,7 +90114,7 @@ function installStore(app, options = {}) {
 		storeDispatcher.on(StoreDispatcherEventName.ACCESS_TOKEN_EXPIRE_DATE_UPDATED, (input) => {
 			if (input) cookieSet(CookieName.ACCESS_TOKEN_EXPIRE_DATE, input, {
 				maxAge: maxAgeFn(),
-				path: cookiePath
+				...cookieOptions
 			});
 			else cookieUnset(CookieName.ACCESS_TOKEN_EXPIRE_DATE, { path: cookiePath });
 		});
@@ -90006,21 +90123,21 @@ function installStore(app, options = {}) {
 				const maxAge = maxAgeFn();
 				cookieSet(CookieName.ACCESS_TOKEN, input, {
 					maxAge,
-					path: cookiePath
+					...cookieOptions
 				});
 			} else cookieUnset(CookieName.ACCESS_TOKEN, { path: cookiePath });
 		});
 		storeDispatcher.on(StoreDispatcherEventName.REFRESH_TOKEN_UPDATED, (input) => {
-			if (input) cookieSet(CookieName.REFRESH_TOKEN, input, { path: cookiePath });
+			if (input) cookieSet(CookieName.REFRESH_TOKEN, input, cookieOptions);
 			else cookieUnset(CookieName.REFRESH_TOKEN, { path: cookiePath });
 		});
 		storeDispatcher.on(StoreDispatcherEventName.ID_TOKEN_UPDATED, (input) => {
-			if (input) cookieSet(CookieName.ID_TOKEN, input, { path: cookiePath });
+			if (input) cookieSet(CookieName.ID_TOKEN, input, cookieOptions);
 			else cookieUnset(CookieName.ID_TOKEN, { path: cookiePath });
 		});
 	}
 	storeDispatcher.on(StoreDispatcherEventName.REALM_MANAGEMENT_UPDATED, (input) => {
-		if (input) cookieSet(CookieName.REALM_MANAGEMENT, input, { path: cookiePath });
+		if (input) cookieSet(CookieName.REALM_MANAGEMENT, input, cookieOptions);
 		else cookieUnset(CookieName.REALM_MANAGEMENT, { path: cookiePath });
 	});
 	dropShadowingCookies();
@@ -142624,6 +142741,7 @@ function install(app, options) {
 		cookieGet: options.cookieGet,
 		cookieUnset: options.cookieUnset,
 		cookiePath: options.cookiePath,
+		cookieSecure: options.cookieSecure,
 		cookieSession: options.cookieSession,
 		preferences: options.preferences
 	});
@@ -144126,7 +144244,8 @@ var Authorize_vue_vue_type_script_lang_default = (0, vue_exports.defineComponent
 				return;
 			}
 			reauthRequired.value = true;
-			store.logout();
+			accountConfirmedLocal.value = false;
+			mfaSatisfiedLocal.value = false;
 		};
 		const accountConfirmedLocal = (0, vue_exports.ref)(false);
 		const mfaSatisfiedLocal = (0, vue_exports.ref)(false);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@authup/client-auth-console",
-    "version": "1.0.0-beta.68",
+    "version": "1.0.0-beta.69",
     "type": "module",
     "license": "AGPL-3.0-only",
     "description": "Authup's auth console: the SSR auth workflow UI (authorize, register, activate, password recovery, logout) rendered by server-core on the IdP origin.",
@@ -25,27 +25,27 @@
         "node": "^22.13.0 || ^23.5.0 || >=24.0.0"
     },
     "dependencies": {
-        "@authup/core-http-kit": "^1.0.0-beta.68"
+        "@authup/core-http-kit": "^1.0.0-beta.69"
     },
     "devDependencies": {
-        "@authup/client-web-kit": "^1.0.0-beta.68",
-        "@authup/client-web-kit-theme": "^1.0.0-beta.68",
-        "@authup/client-web-theme": "^1.0.0-beta.68",
-        "@authup/core-kit": "^1.0.0-beta.68",
-        "@authup/i18n": "^1.0.0-beta.68",
-        "@authup/kit": "^1.0.0-beta.68",
+        "@authup/client-web-kit": "^1.0.0-beta.69",
+        "@authup/client-web-kit-theme": "^1.0.0-beta.69",
+        "@authup/client-web-theme": "^1.0.0-beta.69",
+        "@authup/core-kit": "^1.0.0-beta.69",
+        "@authup/i18n": "^1.0.0-beta.69",
+        "@authup/kit": "^1.0.0-beta.69",
         "@fontsource/asap": "^5.3.0",
         "@fontsource/nunito": "^5.3.0",
         "@iconify-json/fa6-brands": "^1.2.0",
         "@iconify-json/fa6-solid": "^1.2.0",
-        "@iconify/vue": "^5.0.2",
+        "@iconify/vue": "^5.0.3",
         "@ilingo/validup": "^1.2.0",
         "@ilingo/validup-vue": "^1.2.0",
         "@ilingo/vue": "^6.1.0",
         "@nuxt/icon": "^2.5.1",
         "@tailwindcss/vite": "^4.3.3",
         "@validup/vue": "^2.0.1",
-        "@vitejs/plugin-vue": "^6.0.9",
+        "@vitejs/plugin-vue": "^6.0.10",
         "@vue/test-utils": "^2.5.1",
         "@vuecs/button": "^1.4.2",
         "@vuecs/core": "^3.6.0",
@@ -66,14 +66,14 @@
         "@vuecs/theme-tailwind": "^6.5.0",
         "@vuecs/timeago": "^2.2.1",
         "cross-env": "^10.1.0",
-        "happy-dom": "^20.14.5",
+        "happy-dom": "^20.14.6",
         "pinia": "^4.0.3",
         "tailwindcss": "^4.3.1",
-        "vite": "^8.3.0",
-        "vitest": "^4.0.14",
+        "vite": "^8.3.4",
+        "vitest": "^5.0.3",
         "vue": "^3.5.43",
-        "vue-router": "^5.3.1",
-        "vue-tsc": "^3.3.11"
+        "vue-router": "^5.4.0",
+        "vue-tsc": "^3.3.13"
     },
     "publishConfig": {
         "access": "public"