@axa-fr/oidc-client 7.19.5 → 7.20.0-alpha.1393

package/dist/index.js

@@ -64,11 +64,11 @@ const p = {
     n[`oidc.${e}`] = JSON.stringify({ tokens: y });
   }, r = async (y) => {
     n[`oidc.session_state.${e}`] = y;
-  }, i = async () => n[`oidc.session_state.${e}`], c = (y) => {
+  }, i = async () => n[`oidc.session_state.${e}`], l = (y) => {
     n[`oidc.nonce.${e}`] = y.nonce;
   }, a = (y) => {
     n[`oidc.jwk.${e}`] = JSON.stringify(y);
-  }, d = () => JSON.parse(n[`oidc.jwk.${e}`]), f = async () => ({ nonce: n[`oidc.nonce.${e}`] }), l = async (y) => {
+  }, _ = () => JSON.parse(n[`oidc.jwk.${e}`]), f = async () => ({ nonce: n[`oidc.nonce.${e}`] }), c = async (y) => {
     n[`oidc.dpop_nonce.${e}`] = y;
   }, u = () => n[`oidc.dpop_nonce.${e}`], h = () => n[`oidc.${e}`] ? JSON.stringify({ tokens: JSON.parse(n[`oidc.${e}`]).tokens }) : null;
   let g = {};
@@ -79,7 +79,7 @@ const p = {
     getTokens: h,
     setSessionStateAsync: r,
     getSessionStateAsync: i,
-    setNonceAsync: c,
+    setNonceAsync: l,
     getNonceAsync: f,
     setLoginParams: (y) => {
       g[e] = y, n[`oidc.login.${e}`] = JSON.stringify(y);
@@ -96,10 +96,10 @@ const p = {
     setCodeVerifierAsync: async (y) => {
       n[`oidc.code_verifier.${e}`] = y;
     },
-    setDemonstratingProofOfPossessionNonce: l,
+    setDemonstratingProofOfPossessionNonce: c,
     getDemonstratingProofOfPossessionNonce: u,
     setDemonstratingProofOfPossessionJwkAsync: a,
-    getDemonstratingProofOfPossessionJwkAsync: d
+    getDemonstratingProofOfPossessionJwkAsync: _
   };
 }, be = (e) => decodeURIComponent(Array.prototype.map.call(atob(e), (n) => "%" + ("00" + n.charCodeAt(0).toString(16)).slice(-2)).join("")), Pe = (e) => JSON.parse(be(e.replaceAll(/-/g, "+").replaceAll(/_/g, "/"))), ae = (e) => {
   try {
@@ -129,14 +129,14 @@ const X = (e, n = null, s) => {
   e.accessTokenPayload !== void 0 ? t = e.accessTokenPayload : t = ae(e.accessToken);
   let r;
   n != null && "idToken" in n && !("idToken" in e) ? r = n.idToken : r = e.idToken;
-  const i = e.idTokenPayload ? e.idTokenPayload : ae(r), c = i && i.exp ? i.exp : Number.MAX_VALUE, a = t && t.exp ? t.exp : e.issuedAt + o;
+  const i = e.idTokenPayload ? e.idTokenPayload : ae(r), l = i && i.exp ? i.exp : Number.MAX_VALUE, a = t && t.exp ? t.exp : e.issuedAt + o;
   e.issuedAt = Ee(e, t, i);
-  let d;
-  e.expiresAt ? d = e.expiresAt : s === Q.access_token_invalid ? d = a : s === Q.id_token_invalid ? d = c : d = c < a ? c : a;
-  const f = { ...e, idTokenPayload: i, accessTokenPayload: t, expiresAt: d, idToken: r };
+  let _;
+  e.expiresAt ? _ = e.expiresAt : s === Q.access_token_invalid ? _ = a : s === Q.id_token_invalid ? _ = l : _ = l < a ? l : a;
+  const f = { ...e, idTokenPayload: i, accessTokenPayload: t, expiresAt: _, idToken: r };
   if (n != null && "refreshToken" in n && !("refreshToken" in e)) {
-    const l = n.refreshToken;
-    return { ...f, refreshToken: l };
+    const c = n.refreshToken;
+    return { ...f, refreshToken: c };
   }
   return f;
 }, oe = (e, n, s) => {
@@ -186,57 +186,57 @@ const X = (e, n = null, s) => {
   return { isValid: !0, reason: "" };
 }, J = function() {
   const e = function() {
-    let a, d;
+    let a, _;
     const f = (function() {
       const u = {}, h = {
-        setTimeout: function(m, _, w) {
-          u[_] = setTimeout(function() {
-            m.postMessage(_), u[_] = null;
+        setTimeout: function(m, d, w) {
+          u[d] = setTimeout(function() {
+            m.postMessage(d), u[d] = null;
           }, w);
         },
-        setInterval: function(m, _, w) {
-          u[_] = setInterval(function() {
-            m.postMessage(_);
+        setInterval: function(m, d, w) {
+          u[d] = setInterval(function() {
+            m.postMessage(d);
           }, w);
         },
-        clearTimeout: function(m, _) {
-          clearTimeout(u[_]), u[_] = null;
+        clearTimeout: function(m, d) {
+          clearTimeout(u[d]), u[d] = null;
         },
-        clearInterval: function(m, _) {
-          clearInterval(u[_]), u[_] = null;
+        clearInterval: function(m, d) {
+          clearInterval(u[d]), u[d] = null;
         }
       };
-      function g(m, _) {
-        const w = _.data[0], A = _.data[1], v = _.data[2];
+      function g(m, d) {
+        const w = d.data[0], A = d.data[1], v = d.data[2];
         h[w] && h[w](m, A, v);
       }
       this.onmessage = function(m) {
         g(self, m);
       }, this.onconnect = function(m) {
-        const _ = m.ports[0];
-        _.onmessage = function(w) {
-          g(_, w);
+        const d = m.ports[0];
+        d.onmessage = function(w) {
+          g(d, w);
         };
       };
     }).toString();
     try {
       const u = new Blob(["(", f, ")()"], { type: "application/javascript" });
-      d = URL.createObjectURL(u);
+      _ = URL.createObjectURL(u);
     } catch {
       return null;
     }
-    const l = typeof process > "u";
+    const c = typeof process > "u";
     try {
       if (SharedWorker)
-        return a = new SharedWorker(d), a.port;
+        return a = new SharedWorker(_), a.port;
     } catch {
-      l && console.warn("SharedWorker not available");
+      c && console.warn("SharedWorker not available");
     }
     try {
       if (Worker)
-        return a = new Worker(d), a;
+        return a = new Worker(_), a;
     } catch {
-      l && console.warn("Worker not available");
+      c && console.warn("Worker not available");
     }
     return null;
   }();
@@ -256,35 +256,35 @@ const X = (e, n = null, s) => {
     };
   }(), s = {}, t = {};
   e.onmessage = function(a) {
-    const d = a.data, f = s[d];
+    const _ = a.data, f = s[_];
     if (f) {
-      f(), s[d] = null;
+      f(), s[_] = null;
       return;
     }
-    const l = t[d];
-    l && l();
+    const c = t[_];
+    c && c();
   };
-  function o(a, d) {
+  function o(a, _) {
     const f = n();
-    return e.postMessage(["setTimeout", f, d]), s[f] = a, f;
+    return e.postMessage(["setTimeout", f, _]), s[f] = a, f;
   }
   function r(a) {
     e.postMessage(["clearTimeout", a]), s[a] = null;
   }
-  function i(a, d) {
+  function i(a, _) {
     const f = n();
-    return e.postMessage(["setInterval", f, d]), t[f] = a, f;
+    return e.postMessage(["setInterval", f, _]), t[f] = a, f;
   }
-  function c(a) {
+  function l(a) {
     e.postMessage(["clearInterval", a]), t[a] = null;
   }
   return {
     setTimeout: o,
     clearTimeout: r,
     setInterval: i,
-    clearInterval: c
+    clearInterval: l
   };
-}(), ce = "7.19.5";
+}(), ce = "7.20.0-alpha.1393";
 let le = null, q;
 const U = ({ milliseconds: e }) => new Promise((n) => J.setTimeout(n, e)), ge = (e = "/") => {
   try {
@@ -338,26 +338,26 @@ const U = ({ milliseconds: e }) => new Promise((n) => J.setTimeout(n, e)), ge =
     return L !== ce && (console.warn(`Service worker ${L} version mismatch with js client version ${ce}, unregistering and reloading`), await E.service_worker_update_require_callback(t, Ce)), { tokens: oe(b.tokens, null, E.token_renew_mode), status: b.status };
   }, i = (k = "/") => {
     le == null && (le = "not_null", ge(k));
-  }, c = (k) => O(t)({ type: "setSessionState", data: { sessionState: k }, configurationName: n }), a = async () => (await O(t)({ type: "getSessionState", data: null, configurationName: n })).sessionState, d = (k) => (sessionStorage[`oidc.nonce.${n}`] = k.nonce, O(t)({ type: "setNonce", data: { nonce: k }, configurationName: n })), f = async () => {
+  }, l = (k) => O(t)({ type: "setSessionState", data: { sessionState: k }, configurationName: n }), a = async () => (await O(t)({ type: "getSessionState", data: null, configurationName: n })).sessionState, _ = (k) => (sessionStorage[`oidc.nonce.${n}`] = k.nonce, O(t)({ type: "setNonce", data: { nonce: k }, configurationName: n })), f = async () => {
     let S = (await O(t)({ type: "getNonce", data: null, configurationName: n })).nonce;
     return S || (S = sessionStorage[`oidc.nonce.${n}`], console.warn("nonce not found in service worker, using sessionStorage")), { nonce: S };
   };
-  let l = {};
+  let c = {};
   return {
     clearAsync: o,
     initAsync: r,
     startKeepAliveServiceWorker: () => i(e.service_worker_keep_alive_path),
     isServiceWorkerProxyActiveAsync: () => Ne(e.service_worker_keep_alive_path),
-    setSessionStateAsync: c,
+    setSessionStateAsync: l,
     getSessionStateAsync: a,
-    setNonceAsync: d,
+    setNonceAsync: _,
     getNonceAsync: f,
     setLoginParams: (k) => {
-      l[n] = k, localStorage[`oidc.login.${n}`] = JSON.stringify(k);
+      c[n] = k, localStorage[`oidc.login.${n}`] = JSON.stringify(k);
     },
     getLoginParams: () => {
       const k = localStorage[`oidc.login.${n}`];
-      return l[n] || (l[n] = JSON.parse(k)), l[n];
+      return c[n] || (c[n] = JSON.parse(k)), c[n];
     },
     getStateAsync: async () => {
       let S = (await O(t)({ type: "getState", data: null, configurationName: n })).state;
@@ -444,7 +444,7 @@ const $e = {
     // @ts-ignore
     // JWT "claims" are really a JSON-defined JWS "payload"
     payload: ue(JSON.stringify(t))
-  }, c = o.importKeyAlgorithm, a = !0, d = ["sign"], f = await e.crypto.subtle.importKey("jwk", n, c, a, d), l = ke(`${i.protected}.${i.payload}`), u = o.signAlgorithm, h = await e.crypto.subtle.sign(u, f, l);
+  }, l = o.importKeyAlgorithm, a = !0, _ = ["sign"], f = await e.crypto.subtle.importKey("jwk", n, l, a, _), c = ke(`${i.protected}.${i.payload}`), u = o.signAlgorithm, h = await e.crypto.subtle.sign(u, f, c);
   return i.signature = re(new Uint8Array(h)), `${i.protected}.${i.payload}.${i.signature}`;
 };
 var Ke = { sign: Re };
@@ -481,8 +481,8 @@ const Be = (e) => async (n) => await Me.generate(e)(n), pe = (e) => (n) => async
     htu: o,
     iat: Math.round(Date.now() / 1e3),
     ...r
-  }, c = await Je.thumbprint(e)(s, n.digestAlgorithm);
-  return await Ke.sign(e)(s, { kid: c }, i, n);
+  }, l = await Je.thumbprint(e)(s, n.digestAlgorithm);
+  return await Ke.sign(e)(s, { kid: l }, i, n);
 }, je = () => {
   const e = "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx", n = "0123456789abcdef";
   let s = 0, t = "";
@@ -525,14 +525,14 @@ const Ge = (e) => {
   const { hasSubtleCrypto: n } = we();
   return n ? Ae(e) : Promise.reject(new Error("window.crypto.subtle is unavailable."));
 }, Ye = 60 * 60, Xe = (e) => async (n, s = Ye, t = window.sessionStorage, o = 1e4) => {
-  const r = `${n}/.well-known/openid-configuration`, i = `oidc.server:${n}`, c = We(i, t, s);
-  if (c)
-    return new te(c);
+  const r = `${n}/.well-known/openid-configuration`, i = `oidc.server:${n}`, l = We(i, t, s);
+  if (l)
+    return new te(l);
   const a = await B(e)(r, {}, o);
   if (a.status !== 200)
     return null;
-  const d = await a.json();
-  return Le(i, d, t), new te(d);
+  const _ = await a.json();
+  return Le(i, _, t), new te(_);
 }, B = (e) => async (n, s = {}, t = 1e4, o = 0) => {
   let r;
   try {
@@ -551,29 +551,29 @@ const Ge = (e) => {
   refresh_token: "refresh_token",
   access_token: "access_token"
 }, fe = (e) => async (n, s, t = se.refresh_token, o, r = {}, i = 1e4) => {
-  const c = {
+  const l = {
     token: s,
     token_type_hint: t,
     client_id: o
   };
-  for (const [l, u] of Object.entries(r))
-    c[l] === void 0 && (c[l] = u);
+  for (const [c, u] of Object.entries(r))
+    l[c] === void 0 && (l[c] = u);
   const a = [];
-  for (const l in c) {
-    const u = encodeURIComponent(l), h = encodeURIComponent(c[l]);
+  for (const c in l) {
+    const u = encodeURIComponent(c), h = encodeURIComponent(l[c]);
     a.push(`${u}=${h}`);
   }
-  const d = a.join("&");
+  const _ = a.join("&");
   return (await B(e)(n, {
     method: "POST",
     headers: {
       "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8"
     },
-    body: d
+    body: _
   }, i)).status !== 200 ? { success: !1 } : {
     success: !0
   };
-}, ze = (e) => async (n, s, t, o, r = {}, i, c = 1e4) => {
+}, ze = (e) => async (n, s, t, o, r = {}, i, l = 1e4) => {
   for (const [h, g] of Object.entries(t))
     s[h] === void 0 && (s[h] = g);
   const a = [];
@@ -581,26 +581,26 @@ const Ge = (e) => {
     const g = encodeURIComponent(h), m = encodeURIComponent(s[h]);
     a.push(`${g}=${m}`);
   }
-  const d = a.join("&"), f = await B(e)(n, {
+  const _ = a.join("&"), f = await B(e)(n, {
     method: "POST",
     headers: {
       "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
       ...r
     },
-    body: d
-  }, c);
+    body: _
+  }, l);
   if (f.status !== 200)
     return {
       success: !1,
       status: f.status,
       demonstratingProofOfPossessionNonce: null
     };
-  const l = await f.json();
+  const c = await f.json();
   let u = null;
   return f.headers.has(H) && (u = f.headers.get(H)), {
     success: !0,
     status: f.status,
-    data: oe(l, o, i),
+    data: oe(c, o, i),
     demonstratingProofOfPossessionNonce: u
   };
 }, Qe = (e, n) => async (s, t) => {
@@ -609,41 +609,41 @@ const Ge = (e) => {
   await e.setCodeVerifierAsync(o), await e.setStateAsync(t.state), t.code_challenge = r, t.code_challenge_method = "S256";
   let i = "";
   if (t)
-    for (const [c, a] of Object.entries(t))
-      i === "" ? i += "?" : i += "&", i += `${c}=${encodeURIComponent(a)}`;
+    for (const [l, a] of Object.entries(t))
+      i === "" ? i += "?" : i += "&", i += `${l}=${encodeURIComponent(a)}`;
   n.open(`${s}${i}`);
 }, H = "DPoP-Nonce", Ze = (e) => async (n, s, t, o, r = 1e4) => {
   s = s ? { ...s } : {}, s.code_verifier = await e.getCodeVerifierAsync();
   const i = [];
-  for (const l in s) {
-    const u = encodeURIComponent(l), h = encodeURIComponent(s[l]);
+  for (const c in s) {
+    const u = encodeURIComponent(c), h = encodeURIComponent(s[c]);
     i.push(`${u}=${h}`);
   }
-  const c = i.join("&"), a = await B(fetch)(n, {
+  const l = i.join("&"), a = await B(fetch)(n, {
     method: "POST",
     headers: {
       "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
       ...t
     },
-    body: c
+    body: l
   }, r);
   if (await Promise.all([e.setCodeVerifierAsync(null), e.setStateAsync(null)]), a.status !== 200)
     return { success: !1, status: a.status };
-  let d = null;
-  a.headers.has(H) && (d = a.headers.get(H));
+  let _ = null;
+  a.headers.has(H) && (_ = a.headers.get(H));
   const f = await a.json();
   return {
     success: !0,
     data: {
       state: s.state,
       tokens: oe(f, null, o),
-      demonstratingProofOfPossessionNonce: d
+      demonstratingProofOfPossessionNonce: _
     }
   };
 };
 async function _e(e, n, s) {
-  const t = (c) => {
-    e.tokens = c;
+  const t = (l) => {
+    e.tokens = l;
   }, { tokens: o, status: r } = await j(e)(0, n, s, t);
   return await C(e.configuration, e.configurationName) || await I(e.configurationName, e.configuration.storage).setTokens(e.tokens), e.tokens ? o : (await e.destroyAsync(r), null);
 }
@@ -662,7 +662,7 @@ async function Se(e, n = !1, s = null) {
   const t = e.configuration, o = `${t.client_id}_${e.configurationName}_${t.authority}`;
   let r;
   const i = await C(e.configuration, e.configurationName);
-  return (t == null ? void 0 : t.storage) === (window == null ? void 0 : window.sessionStorage) && !i ? r = await _e(e, n, s) : r = await navigator.locks.request(o, { ifAvailable: !0 }, async (c) => c ? await _e(e, n, s) : (e.publishEvent(N.eventNames.syncTokensAsync_lock_not_available, { lock: "lock not available" }), await en(e, t))), r ? (e.timeoutId && (e.timeoutId = F(e, e.tokens.expiresAt, s)), e.tokens) : null;
+  return (t == null ? void 0 : t.storage) === (window == null ? void 0 : window.sessionStorage) && !i ? r = await _e(e, n, s) : r = await navigator.locks.request(o, { ifAvailable: !0 }, async (l) => l ? await _e(e, n, s) : (e.publishEvent(N.eventNames.syncTokensAsync_lock_not_available, { lock: "lock not available" }), await en(e, t))), r ? (e.timeoutId && (e.timeoutId = F(e, e.tokens.expiresAt, s)), e.tokens) : null;
 }
 const F = (e, n, s = null) => {
   const t = e.configuration.refresh_time_before_tokens_expiration_in_second;
@@ -682,14 +682,14 @@ const F = (e, n, s = null) => {
   if (!t)
     return { tokens: null, status: "NOT_CONNECTED", nonce: r };
   let i = r;
-  const c = await e.initAsync(n.authority, n.authority_configuration), a = await C(n, s);
+  const l = await e.initAsync(n.authority, n.authority_configuration), a = await C(n, s);
   if (a) {
-    const { status: l, tokens: u } = await a.initAsync(c, "syncTokensAsync", n);
-    if (l === "LOGGED_OUT")
+    const { status: c, tokens: u } = await a.initAsync(l, "syncTokensAsync", n);
+    if (c === "LOGGED_OUT")
       return { tokens: null, status: "LOGOUT_FROM_ANOTHER_TAB", nonce: r };
-    if (l === "SESSIONS_LOST")
+    if (c === "SESSIONS_LOST")
       return { tokens: null, status: "SESSIONS_LOST", nonce: r };
-    if (!l || !u)
+    if (!c || !u)
       return { tokens: null, status: "REQUIRE_SYNC_TOKENS", nonce: r };
     if (u.issuedAt !== t.issuedAt) {
       const g = V(n.refresh_time_before_tokens_expiration_in_second, u.expiresAt) > 0 ? "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID" : "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID", m = await a.getNonceAsync();
@@ -697,18 +697,18 @@ const F = (e, n, s = null) => {
     }
     i = await a.getNonceAsync();
   } else {
-    const l = I(s, n.storage ?? sessionStorage);
-    let { tokens: u, status: h } = await l.initAsync();
+    const c = I(s, n.storage ?? sessionStorage);
+    let { tokens: u, status: h } = await c.initAsync();
     if (u && (u = X(u, e.tokens, n.token_renew_mode)), u) {
       if (h === "SESSIONS_LOST")
         return { tokens: null, status: "SESSIONS_LOST", nonce: r };
       if (u.issuedAt !== t.issuedAt) {
-        const m = V(n.refresh_time_before_tokens_expiration_in_second, u.expiresAt) > 0 ? "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID" : "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID", _ = await l.getNonceAsync();
-        return { tokens: u, status: m, nonce: _ };
+        const m = V(n.refresh_time_before_tokens_expiration_in_second, u.expiresAt) > 0 ? "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID" : "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID", d = await c.getNonceAsync();
+        return { tokens: u, status: m, nonce: d };
       }
     } else
       return { tokens: null, status: "LOGOUT_FROM_ANOTHER_TAB", nonce: r };
-    i = await l.getNonceAsync();
+    i = await c.getNonceAsync();
   }
   const f = V(n.refresh_time_before_tokens_expiration_in_second, t.expiresAt) > 0 ? "TOKENS_VALID" : "TOKENS_INVALID";
   return o ? { tokens: t, status: "FORCE_REFRESH", nonce: i } : { tokens: t, status: f, nonce: i };
@@ -718,28 +718,28 @@ const F = (e, n, s = null) => {
   let r = 6;
   for (; !navigator.onLine && r > 0; )
     await U({ milliseconds: 1e3 }), r--, e.publishEvent(p.refreshTokensAsync, { message: `wait because navigator is offline try ${r}` });
-  const i = document.hidden, c = n + 1;
+  const i = document.hidden, l = n + 1;
   t || (t = {});
-  const a = e.configuration, d = (l, u = null, h = null) => ie(e.configurationName, e.configuration, e.publishEvent.bind(e))(l, u, h), f = async () => {
+  const a = e.configuration, _ = (c, u = null, h = null) => ie(e.configurationName, e.configuration, e.publishEvent.bind(e))(c, u, h), f = async () => {
     try {
-      let l;
+      let c;
       const u = await C(a, e.configurationName);
-      u ? l = u.getLoginParams() : l = I(e.configurationName, a.storage).getLoginParams();
-      const h = await d({
-        ...l.extras,
+      u ? c = u.getLoginParams() : c = I(e.configurationName, a.storage).getLoginParams();
+      const h = await _({
+        ...c.extras,
         ...t,
         prompt: "none"
       });
       return h ? h.error ? (o(null), e.publishEvent(p.refreshTokensAsync_error, { message: "refresh token silent" }), { tokens: null, status: "SESSION_LOST" }) : (o(h.tokens), e.publishEvent(N.eventNames.token_renewed, {}), { tokens: h.tokens, status: "LOGGED" }) : (o(null), e.publishEvent(p.refreshTokensAsync_error, { message: "refresh token silent not active" }), { tokens: null, status: "SESSION_LOST" });
-    } catch (l) {
-      return console.error(l), e.publishEvent(p.refreshTokensAsync_silent_error, { message: "exceptionSilent", exception: l.message }), await j(e)(c, s, t, o);
+    } catch (c) {
+      return console.error(c), e.publishEvent(p.refreshTokensAsync_silent_error, { message: "exceptionSilent", exception: c.message }), await j(e)(l, s, t, o);
     }
   };
   if (n > 4)
     return i ? { tokens: e.tokens, status: "GIVE_UP" } : (o(null), e.publishEvent(p.refreshTokensAsync_error, { message: "refresh token" }), { tokens: null, status: "SESSION_LOST" });
   try {
-    const { status: l, tokens: u, nonce: h } = await nn(e)(a, e.configurationName, e.tokens, s);
-    switch (l) {
+    const { status: c, tokens: u, nonce: h } = await nn(e)(a, e.configurationName, e.tokens, s);
+    switch (c) {
       case $.SESSION_LOST:
         return o(null), e.publishEvent(p.refreshTokensAsync_error, { message: "refresh token session lost" }), { tokens: null, status: "SESSION_LOST" };
       case $.NOT_CONNECTED:
@@ -753,9 +753,9 @@ const F = (e, n, s = null) => {
       case $.REQUIRE_SYNC_TOKENS:
         return e.publishEvent(p.refreshTokensAsync_begin, { tryNumber: n }), await f();
       default: {
-        if (e.publishEvent(p.refreshTokensAsync_begin, { refreshToken: u.refreshToken, status: l, tryNumber: n }), !u.refreshToken)
+        if (e.publishEvent(p.refreshTokensAsync_begin, { refreshToken: u.refreshToken, status: c, tryNumber: n }), !u.refreshToken)
           return await f();
-        const g = a.client_id, m = a.redirect_uri, _ = a.authority, A = { ...a.token_request_extras ? a.token_request_extras : {} };
+        const g = a.client_id, m = a.redirect_uri, d = a.authority, A = { ...a.token_request_extras ? a.token_request_extras : {} };
         for (const [T, y] of Object.entries(t))
           T.endsWith(":token_request") && (A[T.replace(":token_request", "")] = y);
         return await (async () => {
@@ -764,7 +764,7 @@ const F = (e, n, s = null) => {
             redirect_uri: m,
             grant_type: "refresh_token",
             refresh_token: u.refreshToken
-          }, y = await e.initAsync(_, a.authority_configuration), k = document.hidden ? 1e4 : 3e4 * 10, S = y.tokenEndpoint, E = {};
+          }, y = await e.initAsync(d, a.authority_configuration), k = document.hidden ? 1e4 : 3e4 * 10, S = y.tokenEndpoint, E = {};
           a.demonstrating_proof_of_possession && (E.DPoP = await e.generateDemonstrationOfProofOfPossessionAsync(u.accessToken, S, "POST"));
           const b = await ze(e.getFetch())(
             S,
@@ -788,12 +788,12 @@ const F = (e, n, s = null) => {
             return e.publishEvent(p.refreshTokensAsync_silent_error, {
               message: "bad request",
               tokenResponse: b
-            }), b.status >= 400 && b.status < 500 ? (o(null), e.publishEvent(p.refreshTokensAsync_error, { message: `session lost: ${b.status}` }), { tokens: null, status: "SESSION_LOST" }) : await j(e)(c, s, t, o);
+            }), b.status >= 400 && b.status < 500 ? (o(null), e.publishEvent(p.refreshTokensAsync_error, { message: `session lost: ${b.status}` }), { tokens: null, status: "SESSION_LOST" }) : await j(e)(l, s, t, o);
         })();
       }
     }
-  } catch (l) {
-    return console.error(l), e.publishEvent(p.refreshTokensAsync_silent_error, { message: "exception", exception: l.message }), j(e)(c, s, t, o);
+  } catch (c) {
+    return console.error(c), e.publishEvent(p.refreshTokensAsync_silent_error, { message: "exception", exception: c.message }), j(e)(l, s, t, o);
   }
 }, ie = (e, n, s) => (t = null, o = null, r = null) => {
   if (!n.silent_redirect_uri || !n.silent_login_uri)
@@ -802,25 +802,25 @@ const F = (e, n, s = null) => {
     s(p.silentLoginAsync_begin, {});
     let i = "";
     if (o && (t == null && (t = {}), t.state = o), r && (t == null && (t = {}), t.scope = r), t != null)
-      for (const [l, u] of Object.entries(t))
-        i === "" ? i = `?${encodeURIComponent(l)}=${encodeURIComponent(u)}` : i += `&${encodeURIComponent(l)}=${encodeURIComponent(u)}`;
-    const c = n.silent_login_uri + i, a = c.indexOf("/", c.indexOf("//") + 2), d = c.substring(0, a), f = document.createElement("iframe");
-    return f.width = "0px", f.height = "0px", f.id = `${e}_oidc_iframe`, f.setAttribute("src", c), document.body.appendChild(f), new Promise((l, u) => {
+      for (const [c, u] of Object.entries(t))
+        i === "" ? i = `?${encodeURIComponent(c)}=${encodeURIComponent(u)}` : i += `&${encodeURIComponent(c)}=${encodeURIComponent(u)}`;
+    const l = n.silent_login_uri + i, a = l.indexOf("/", l.indexOf("//") + 2), _ = l.substring(0, a), f = document.createElement("iframe");
+    return f.width = "0px", f.height = "0px", f.id = `${e}_oidc_iframe`, f.setAttribute("src", l), document.body.appendChild(f), new Promise((c, u) => {
       let h = !1;
       const g = () => {
         window.removeEventListener("message", m), f.remove(), h = !0;
-      }, m = (_) => {
-        if (_.origin === d && _.source === f.contentWindow) {
-          const w = `${e}_oidc_tokens:`, A = `${e}_oidc_error:`, v = `${e}_oidc_exception:`, T = _.data;
+      }, m = (d) => {
+        if (d.origin === _ && d.source === f.contentWindow) {
+          const w = `${e}_oidc_tokens:`, A = `${e}_oidc_error:`, v = `${e}_oidc_exception:`, T = d.data;
           if (T && typeof T == "string" && !h) {
             if (T.startsWith(w)) {
-              const y = JSON.parse(_.data.replace(w, ""));
-              s(p.silentLoginAsync_end, {}), l(y), g();
+              const y = JSON.parse(d.data.replace(w, ""));
+              s(p.silentLoginAsync_end, {}), c(y), g();
             } else if (T.startsWith(A)) {
-              const y = JSON.parse(_.data.replace(A, ""));
-              s(p.silentLoginAsync_error, y), l({ error: "oidc_" + y.error, tokens: null, sessionState: null }), g();
+              const y = JSON.parse(d.data.replace(A, ""));
+              s(p.silentLoginAsync_error, y), c({ error: "oidc_" + y.error, tokens: null, sessionState: null }), g();
             } else if (T.startsWith(v)) {
-              const y = JSON.parse(_.data.replace(v, ""));
+              const y = JSON.parse(d.data.replace(v, ""));
               s(p.silentLoginAsync_error, y), u(new Error(y.error)), g();
             }
           }
@@ -828,12 +828,12 @@ const F = (e, n, s = null) => {
       };
       try {
         window.addEventListener("message", m);
-        const _ = n.silent_login_timeout;
+        const d = n.silent_login_timeout;
         setTimeout(() => {
           h || (g(), s(p.silentLoginAsync_error, { reason: "timeout" }), u(new Error("timeout")));
-        }, _);
-      } catch (_) {
-        g(), s(p.silentLoginAsync_error, _), u(_);
+        }, d);
+      } catch (d) {
+        g(), s(p.silentLoginAsync_error, d), u(d);
       }
     });
   } catch (i) {
@@ -841,33 +841,33 @@ const F = (e, n, s = null) => {
   }
 }, sn = (e, n, s, t, o) => (r = null, i = void 0) => {
   r = { ...r };
-  const c = (d, f, l) => ie(n, s, t.bind(o))(d, f, l);
+  const l = (_, f, c) => ie(n, s, t.bind(o))(_, f, c);
   return (async () => {
     o.timeoutId && J.clearTimeout(o.timeoutId);
-    let d;
-    r && "state" in r && (d = r.state, delete r.state);
+    let _;
+    r && "state" in r && (_ = r.state, delete r.state);
     try {
-      const f = s.extras ? { ...s.extras, ...r } : r, l = await c({
+      const f = s.extras ? { ...s.extras, ...r } : r, c = await l({
         ...f,
         prompt: "none"
-      }, d, i);
-      if (l)
-        return o.tokens = l.tokens, t(p.token_aquired, {}), o.timeoutId = F(o, o.tokens.expiresAt, r), {};
+      }, _, i);
+      if (c)
+        return o.tokens = c.tokens, t(p.token_aquired, {}), o.timeoutId = F(o, o.tokens.expiresAt, r), {};
     } catch (f) {
       return f;
     }
   })();
 }, tn = (e, n, s) => (t, o, r, i = !1) => {
-  const c = (a, d = void 0, f = void 0) => ie(e.configurationName, s, e.publishEvent.bind(e))(a, d, f);
-  return new Promise((a, d) => {
+  const l = (a, _ = void 0, f = void 0) => ie(e.configurationName, s, e.publishEvent.bind(e))(a, _, f);
+  return new Promise((a, _) => {
     if (s.silent_login_uri && s.silent_redirect_uri && s.monitor_session && t && r && !i) {
       const f = () => {
         e.checkSessionIFrame.stop();
-        const l = e.tokens;
-        if (l === null)
+        const c = e.tokens;
+        if (c === null)
           return;
-        const u = l.idToken, h = l.idTokenPayload;
-        return c({
+        const u = c.idToken, h = c.idTokenPayload;
+        return l({
           prompt: "none",
           id_token_hint: u,
           scope: s.scope || "openid"
@@ -876,20 +876,20 @@ const F = (e, n, s = null) => {
             throw new Error(g.error);
           const m = g.tokens.idTokenPayload;
           if (h.sub === m.sub) {
-            const _ = g.sessionState;
-            e.checkSessionIFrame.start(g.sessionState), h.sid === m.sid ? console.debug("SessionMonitor._callback: Same sub still logged in at OP, restarting check session iframe; session_state:", _) : console.debug("SessionMonitor._callback: Same sub still logged in at OP, session state has changed, restarting check session iframe; session_state:", _);
+            const d = g.sessionState;
+            e.checkSessionIFrame.start(g.sessionState), h.sid === m.sid ? console.debug("SessionMonitor._callback: Same sub still logged in at OP, restarting check session iframe; session_state:", d) : console.debug("SessionMonitor._callback: Same sub still logged in at OP, session state has changed, restarting check session iframe; session_state:", d);
           } else
             console.debug("SessionMonitor._callback: Different subject signed into OP:", m.sub);
         }).catch(async (g) => {
           console.warn("SessionMonitor._callback: Silent login failed, logging out other tabs:", g);
-          for (const [m, _] of Object.entries(n))
-            await _.logoutOtherTabAsync(s.client_id, h.sub);
+          for (const [m, d] of Object.entries(n))
+            await d.logoutOtherTabAsync(s.client_id, h.sub);
         });
       };
       e.checkSessionIFrame = new Te(f, o, t), e.checkSessionIFrame.load().then(() => {
         e.checkSessionIFrame.start(r), a(e.checkSessionIFrame);
-      }).catch((l) => {
-        d(l);
+      }).catch((c) => {
+        _(c);
       });
     } else
       a(null);
@@ -932,25 +932,25 @@ const F = (e, n, s = null) => {
   for (t = 0, o = r.length; t < o; t++)
     s = r[t].split("="), n[decodeURIComponent(s[0])] = decodeURIComponent(s[1]);
   return n;
-}, rn = (e, n, s, t, o) => (r = void 0, i = null, c = !1, a = void 0) => {
-  const d = i;
+}, rn = (e, n, s, t, o) => (r = void 0, i = null, l = !1, a = void 0) => {
+  const _ = i;
   return i = { ...i }, (async () => {
-    const l = r || o.getPath();
+    const c = r || o.getPath();
     if ("state" in i || (i.state = ne(16)), s(p.loginAsync_begin, {}), i)
       for (const u of Object.keys(i))
         u.endsWith(":token_request") && delete i[u];
     try {
-      const u = c ? n.silent_redirect_uri : n.redirect_uri;
+      const u = l ? n.silent_redirect_uri : n.redirect_uri;
       a || (a = n.scope);
       const h = n.extras ? { ...n.extras, ...i } : i;
       h.nonce || (h.nonce = ne(12));
-      const g = { nonce: h.nonce }, m = await C(n, e), _ = await t(n.authority, n.authority_configuration);
+      const g = { nonce: h.nonce }, m = await C(n, e), d = await t(n.authority, n.authority_configuration);
       let w;
       if (m)
-        m.setLoginParams({ callbackPath: l, extras: d }), await m.initAsync(_, "loginAsync", n), await m.setNonceAsync(g), m.startKeepAliveServiceWorker(), w = m;
+        m.setLoginParams({ callbackPath: c, extras: _ }), await m.initAsync(d, "loginAsync", n), await m.setNonceAsync(g), m.startKeepAliveServiceWorker(), w = m;
       else {
         const v = I(e, n.storage ?? sessionStorage);
-        v.setLoginParams({ callbackPath: l, extras: d }), await v.setNonceAsync(g), w = v;
+        v.setLoginParams({ callbackPath: c, extras: _ }), await v.setNonceAsync(g), w = v;
       }
       const A = {
         client_id: n.client_id,
@@ -959,7 +959,7 @@ const F = (e, n, s = null) => {
         response_type: "code",
         ...h
       };
-      await Qe(w, o)(_.authorizationEndpoint, A);
+      await Qe(w, o)(d.authorizationEndpoint, A);
     } catch (u) {
       throw s(p.loginAsync_error, u), u;
     }
@@ -967,23 +967,23 @@ const F = (e, n, s = null) => {
 }, an = (e) => async (n = !1) => {
   try {
     e.publishEvent(p.loginCallbackAsync_begin, {});
-    const s = e.configuration, t = s.client_id, o = n ? s.silent_redirect_uri : s.redirect_uri, r = s.authority, i = s.token_request_timeout, c = await e.initAsync(r, s.authority_configuration), a = e.location.getCurrentHref(), f = G(a).session_state, l = await C(s, e.configurationName);
+    const s = e.configuration, t = s.client_id, o = n ? s.silent_redirect_uri : s.redirect_uri, r = s.authority, i = s.token_request_timeout, l = await e.initAsync(r, s.authority_configuration), a = e.location.getCurrentHref(), f = G(a).session_state, c = await C(s, e.configurationName);
     let u, h, g, m;
-    if (l)
-      await l.initAsync(c, "loginCallbackAsync", s), await l.setSessionStateAsync(f), h = await l.getNonceAsync(), g = l.getLoginParams(), m = await l.getStateAsync(), l.startKeepAliveServiceWorker(), u = l;
+    if (c)
+      await c.initAsync(l, "loginCallbackAsync", s), await c.setSessionStateAsync(f), h = await c.getNonceAsync(), g = c.getLoginParams(), m = await c.getStateAsync(), c.startKeepAliveServiceWorker(), u = c;
     else {
       const P = I(e.configurationName, s.storage ?? sessionStorage);
       await P.setSessionStateAsync(f), h = await P.getNonceAsync(), g = P.getLoginParams(), m = await P.getStateAsync(), u = P;
     }
-    const _ = G(a);
-    if (_.error || _.error_description)
-      throw new Error(`Error from OIDC server: ${_.error} - ${_.error_description}`);
-    if (_.iss && _.iss !== c.issuer)
-      throw console.error(), new Error(`Issuer not valid (expected: ${c.issuer}, received: ${_.iss})`);
-    if (_.state && _.state !== m)
-      throw new Error(`State not valid (expected: ${m}, received: ${_.state})`);
+    const d = G(a);
+    if (d.error || d.error_description)
+      throw new Error(`Error from OIDC server: ${d.error} - ${d.error_description}`);
+    if (d.iss && d.iss !== l.issuer)
+      throw console.error(), new Error(`Issuer not valid (expected: ${l.issuer}, received: ${d.iss})`);
+    if (d.state && d.state !== m)
+      throw new Error(`State not valid (expected: ${m}, received: ${d.state})`);
     const w = {
-      code: _.code,
+      code: d.code,
       grant_type: "authorization_code",
       client_id: s.client_id,
       redirect_uri: o
@@ -994,9 +994,9 @@ const F = (e, n, s = null) => {
     if (g && g.extras)
       for (const [P, W] of Object.entries(g.extras))
         P.endsWith(":token_request") && (A[P.replace(":token_request", "")] = W);
-    const v = c.tokenEndpoint, T = {};
+    const v = l.tokenEndpoint, T = {};
     if (s.demonstrating_proof_of_possession)
-      if (l)
+      if (c)
         T.DPoP = `DPOP_SECURED_BY_OIDC_SERVICE_WORKER_${e.configurationName}`;
       else {
         const P = await Be(window)(s.demonstrating_proof_of_possession_configuration.generateKeyAlgorithm);
@@ -1015,22 +1015,22 @@ const F = (e, n, s = null) => {
     const S = y.data.tokens, E = y.data.demonstratingProofOfPossessionNonce;
     if (y.data.state !== A.state)
       throw new Error("state is not valid");
-    const { isValid: b, reason: L } = ye(S, h.nonce, c);
+    const { isValid: b, reason: L } = ye(S, h.nonce, l);
     if (!b)
       throw new Error(`Tokens are not OpenID valid, reason: ${L}`);
-    if (l) {
+    if (c) {
       if (S.refreshToken && !S.refreshToken.includes("SECURED_BY_OIDC_SERVICE_WORKER"))
         throw new Error("Refresh token should be hidden by service worker");
       if (E && S.accessToken && S.accessToken.includes("SECURED_BY_OIDC_SERVICE_WORKER"))
         throw new Error("Demonstration of proof of possession require Access token not hidden by service worker");
     }
-    if (l)
-      await l.initAsync(o, "syncTokensAsync", s), k = l.getLoginParams(), E && await l.setDemonstratingProofOfPossessionNonce(E);
+    if (c)
+      await c.initAsync(o, "syncTokensAsync", s), k = c.getLoginParams(), E && await c.setDemonstratingProofOfPossessionNonce(E);
     else {
       const P = I(e.configurationName, s.storage);
       k = P.getLoginParams(), E && await P.setDemonstratingProofOfPossessionNonce(E);
     }
-    return await e.startCheckSessionAsync(c.checkSessionIframe, t, f, n), e.publishEvent(p.loginCallbackAsync_end, {}), {
+    return await e.startCheckSessionAsync(l.checkSessionIframe, t, f, n), e.publishEvent(p.loginCallbackAsync_end, {}), {
       tokens: S,
       state: "request.state",
       callbackPath: k.callbackPath
@@ -1065,33 +1065,33 @@ const F = (e, n, s = null) => {
   const s = await C(e.configuration, e.configurationName);
   s ? await s.clearAsync(n) : await I(e.configurationName, e.configuration.storage).clearAsync(n), e.tokens = null, e.userInfo = null;
 }, un = (e, n, s, t, o) => async (r = void 0, i = null) => {
-  const c = e.configuration, a = await e.initAsync(c.authority, c.authority_configuration);
+  const l = e.configuration, a = await e.initAsync(l.authority, l.authority_configuration);
   r && typeof r != "string" && (r = void 0, t.warn("callbackPathOrUrl path is not a string"));
-  const d = r ?? o.getPath();
+  const _ = r ?? o.getPath();
   let f = !1;
   r && (f = r.includes("https://") || r.includes("http://"));
-  const l = f ? r : o.getOrigin() + d, u = e.tokens ? e.tokens.idToken : "";
+  const c = f ? r : o.getOrigin() + _, u = e.tokens ? e.tokens.idToken : "";
   try {
     const w = a.revocationEndpoint;
     if (w) {
       const A = [], v = e.tokens ? e.tokens.accessToken : null;
-      if (v && c.logout_tokens_to_invalidate.includes(de.access_token)) {
+      if (v && l.logout_tokens_to_invalidate.includes(de.access_token)) {
         const y = z(i, ":revoke_access_token"), k = fe(s)(
           w,
           v,
           se.access_token,
-          c.client_id,
+          l.client_id,
           y
         );
         A.push(k);
       }
       const T = e.tokens ? e.tokens.refreshToken : null;
-      if (T && c.logout_tokens_to_invalidate.includes(de.refresh_token)) {
+      if (T && l.logout_tokens_to_invalidate.includes(de.refresh_token)) {
         const y = z(i, ":revoke_refresh_token"), k = fe(s)(
           w,
           T,
           se.refresh_token,
-          c.client_id,
+          l.client_id,
           y
         );
         A.push(k);
@@ -1108,11 +1108,11 @@ const F = (e, n, s = null) => {
   const g = z(i, ":oidc");
   if (g && g.no_reload === "true")
     return;
-  const _ = cn(i);
+  const d = cn(i);
   if (a.endSessionEndpoint) {
-    "id_token_hint" in _ || (_.id_token_hint = u), !("post_logout_redirect_uri" in _) && r !== null && (_.post_logout_redirect_uri = l);
+    "id_token_hint" in d || (d.id_token_hint = u), !("post_logout_redirect_uri" in d) && r !== null && (d.post_logout_redirect_uri = c);
     let w = "";
-    for (const [A, v] of Object.entries(_))
+    for (const [A, v] of Object.entries(d))
       v != null && (w === "" ? w += "?" : w += "&", w += `${A}=${encodeURIComponent(v)}`);
     o.open(`${a.endSessionEndpoint}${w}`);
   } else
@@ -1127,15 +1127,15 @@ const F = (e, n, s = null) => {
   const s = e.tokens.accessToken;
   if (!s)
     return null;
-  const t = e.configuration, r = (await e.initAsync(t.authority, t.authority_configuration)).userInfoEndpoint, c = await (async (a) => {
-    const d = await fetch(r, {
+  const t = e.configuration, r = (await e.initAsync(t.authority, t.authority_configuration)).userInfoEndpoint, l = await (async (a) => {
+    const _ = await fetch(r, {
       headers: {
         authorization: `Bearer ${a}`
       }
     });
-    return d.status !== 200 ? null : d.json();
+    return _.status !== 200 ? null : _.json();
   })(s);
-  return e.userInfo = c, c;
+  return e.userInfo = l, l;
 };
 class Y {
   open(n) {
@@ -1187,8 +1187,8 @@ const _n = (e) => !!(e.os === "iOS" && e.osVersion.startsWith("12") || e.os ===
     { s: "OS/2", r: /OS\/2/ },
     { s: "Search Bot", r: /(nuhk|Googlebot|Yammybot|Openbot|Slurp|MSNBot|Ask Jeeves\/Teoma|ia_archiver)/ }
   ];
-  for (const c in r) {
-    const a = r[c];
+  for (const l in r) {
+    const a = r[l];
     if (a.r.test(s)) {
       o = a.s;
       break;
@@ -1202,8 +1202,8 @@ const _n = (e) => !!(e.os === "iOS" && e.osVersion.startsWith("12") || e.os ===
       i = /(?:Android|Mac OS|Mac OS X|MacPPC|MacIntel|Mac_PowerPC|Macintosh) ([._\d]+)/.exec(s)[1];
       break;
     case "iOS": {
-      const c = /OS (\d+)_(\d+)_?(\d+)?/.exec(n);
-      c != null && c.length > 2 && (i = c[1] + "." + c[2] + "." + (parseInt(c[3]) | 0));
+      const l = /OS (\d+)_(\d+)_?(\d+)?/.exec(n);
+      l != null && l.length > 2 && (i = l[1] + "." + l[2] + "." + (parseInt(l[3]) | 0));
       break;
     }
   }
@@ -1268,8 +1268,8 @@ const yn = () => {
         e.tokens = X(r, null, s.token_renew_mode);
         const i = o.getLoginParams();
         e.timeoutId = F(e, e.tokens.expiresAt, i.extras);
-        const c = await o.getSessionStateAsync();
-        return await e.startCheckSessionAsync(t.check_session_iframe, s.client_id, c), e.publishEvent(p.tryKeepExistingSessionAsync_end, {
+        const l = await o.getSessionStateAsync();
+        return await e.startCheckSessionAsync(t.check_session_iframe, s.client_id, l), e.publishEvent(p.tryKeepExistingSessionAsync_end, {
           success: !0,
           message: "tokens inside storage are valid"
         }), !0;
@@ -1298,7 +1298,7 @@ const x = {}, mn = (e, n = new Y()) => (s, t = "default") => (x[t] || (x[t] = ne
     n.silent_redirect_uri && !n.silent_login_uri && (r = `${n.silent_redirect_uri.replace("-callback", "").replace("callback", "")}-login`);
     let i = n.refresh_time_before_tokens_expiration_in_second ?? 120;
     i > 60 && (i = i - Math.floor(Math.random() * 40)), this.location = o ?? new Y();
-    const c = n.service_worker_update_require_callback ?? xe(this.location);
+    const l = n.service_worker_update_require_callback ?? xe(this.location);
     this.configuration = {
       ...n,
       silent_login_uri: r,
@@ -1309,7 +1309,7 @@ const x = {}, mn = (e, n = new Y()) => (s, t = "default") => (x[t] || (x[t] = ne
       demonstrating_proof_of_possession: n.demonstrating_proof_of_possession ?? !1,
       authority_timeout_wellknowurl_in_millisecond: n.authority_timeout_wellknowurl_in_millisecond ?? 1e4,
       logout_tokens_to_invalidate: n.logout_tokens_to_invalidate ?? ["access_token", "refresh_token"],
-      service_worker_update_require_callback: c,
+      service_worker_update_require_callback: l,
       service_worker_activate: n.service_worker_activate ?? yn,
       demonstrating_proof_of_possession_configuration: n.demonstrating_proof_of_possession_configuration ?? $e
     }, this.getFetch = t ?? kn, this.configurationName = s, this.tokens = null, this.userInfo = null, this.events = [], this.timeoutId = null, this.loginCallbackWithAutoTokensRenewAsync.bind(this), this.initAsync.bind(this), this.loginCallbackAsync.bind(this), this.subscribeEvents.bind(this), this.removeEventSubscription.bind(this), this.publishEvent.bind(this), this.destroyAsync.bind(this), this.logoutAsync.bind(this), this.renewTokensAsync.bind(this), this.initAsync(this.configuration.authority, this.configuration.authority_configuration);
@@ -1390,14 +1390,17 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     };
     return this.loginCallbackPromise = s(), this.loginCallbackPromise.then((t) => (this.loginCallbackPromise = null, t));
   }
-  async generateDemonstrationOfProofOfPossessionAsync(n, s, t) {
-    const o = this.configuration, r = { ath: await Ae(n) }, i = await C(o, this.configurationName);
-    let c;
-    if (i)
+  async generateDemonstrationOfProofOfPossessionAsync(n, s, t, o = {}) {
+    const r = this.configuration, i = {
+      ath: await Ae(n),
+      ...o
+    }, l = await C(r, this.configurationName);
+    let a;
+    if (l)
       return `DPOP_SECURED_BY_OIDC_SERVICE_WORKER_${this.configurationName}`;
-    const a = I(this.configurationName, o.storage);
-    let d = await a.getDemonstratingProofOfPossessionJwkAsync();
-    return c = await a.getDemonstratingProofOfPossessionNonce(), c && (r.nonce = c), await pe(window)(o.demonstrating_proof_of_possession_configuration)(d, t, s, r);
+    const _ = I(this.configurationName, r.storage);
+    let f = await _.getDemonstratingProofOfPossessionJwkAsync();
+    return a = await _.getDemonstratingProofOfPossessionNonce(), a && (i.nonce = a), await pe(window)(r.demonstrating_proof_of_possession_configuration)(f, t, s, i);
   }
   loginCallbackWithAutoTokensRenewAsync() {
     return this.loginCallbackWithAutoTokensRenewPromise !== null ? this.loginCallbackWithAutoTokensRenewPromise : (this.loginCallbackWithAutoTokensRenewPromise = pn(this), this.loginCallbackWithAutoTokensRenewPromise.then((n) => (this.loginCallbackWithAutoTokensRenewPromise = null, n)));
@@ -1429,19 +1432,19 @@ let N = M;
 const An = (e, n) => async (...s) => {
   var u;
   const [t, o, ...r] = s, i = o ? { ...o } : { method: "GET" };
-  let c = new Headers();
-  i.headers && (c = i.headers instanceof Headers ? i.headers : new Headers(i.headers));
-  const a = n, d = await a.getValidTokenAsync(), f = (u = d == null ? void 0 : d.tokens) == null ? void 0 : u.accessToken;
-  if (c.has("Accept") || c.set("Accept", "application/json"), f) {
+  let l = new Headers();
+  i.headers && (l = i.headers instanceof Headers ? i.headers : new Headers(i.headers));
+  const a = n, _ = await a.getValidTokenAsync(), f = (u = _ == null ? void 0 : _.tokens) == null ? void 0 : u.accessToken;
+  if (l.has("Accept") || l.set("Accept", "application/json"), f) {
     if (a.configuration.demonstrating_proof_of_possession) {
       const h = await a.generateDemonstrationOfProofOfPossessionAsync(f, t.toString(), i.method);
-      c.set("Authorization", `PoP ${f}`), c.set("DPoP", h);
+      l.set("Authorization", `PoP ${f}`), l.set("DPoP", h);
     } else
-      c.set("Authorization", `Bearer ${f}`);
+      l.set("Authorization", `Bearer ${f}`);
     i.credentials || (i.credentials = "same-origin");
   }
-  const l = { ...i, headers: c };
-  return await e(t, l, ...r);
+  const c = { ...i, headers: l };
+  return await e(t, c, ...r);
 }, K = class K {
   constructor(n) {
     this._oidc = n;
@@ -1482,8 +1485,8 @@ const An = (e, n) => async (...s) => {
   get configuration() {
     return this._oidc.configuration;
   }
-  async generateDemonstrationOfProofOfPossessionAsync(n, s, t) {
-    return this._oidc.generateDemonstrationOfProofOfPossessionAsync(n, s, t);
+  async generateDemonstrationOfProofOfPossessionAsync(n, s, t, o = {}) {
+    return this._oidc.generateDemonstrationOfProofOfPossessionAsync(n, s, t, o);
   }
   async getValidTokenAsync(n = 200, s = 50) {
     return Ie(this._oidc, n, s);