@axa-fr/oidc-client 7.25.10-beta.1717 → 7.25.11

package/dist/index.js

@@ -1,4 +1,4 @@
-class j {
+class H {
   open(n) {
     window.location.href = n;
   }
@@ -17,7 +17,7 @@ class j {
   }
 }
 const le = 2e3, D = console;
-class Ce {
+class Ne {
   constructor(n, s, t, o = le, i = !0) {
     this._callback = n, this._client_id = s, this._url = t, this._interval = o || le, this._stopOnError = i;
     const r = t.indexOf("/", t.indexOf("//") + 2);
@@ -92,7 +92,7 @@ const k = {
     n[`oidc.jwk.${e}`] = JSON.stringify(g);
   }, l = () => JSON.parse(n[`oidc.jwk.${e}`]), d = async () => ({ nonce: n[`oidc.nonce.${e}`] }), u = async (g) => {
     n[`oidc.dpop_nonce.${e}`] = g;
-  }, _ = () => n[`oidc.dpop_nonce.${e}`], f = () => n[`oidc.${e}`] ? JSON.stringify({ tokens: JSON.parse(n[`oidc.${e}`]).tokens }) : null, h = {};
+  }, _ = () => n[`oidc.dpop_nonce.${e}`], f = () => n[`oidc.${e}`] ? JSON.stringify({ tokens: JSON.parse(n[`oidc.${e}`]).tokens }) : null, y = {};
   return {
     clearAsync: s,
     initAsync: t,
@@ -103,11 +103,11 @@ const k = {
     setNonceAsync: a,
     getNonceAsync: d,
     setLoginParams: (g) => {
-      h[e] = g, n[`oidc.login.${e}`] = JSON.stringify(g);
+      y[e] = g, n[`oidc.login.${e}`] = JSON.stringify(g);
     },
     getLoginParams: () => {
       const g = n[`oidc.login.${e}`];
-      return g ? (h[e] || (h[e] = JSON.parse(g)), h[e]) : (console.warn(
+      return g ? (y[e] || (y[e] = JSON.parse(g)), y[e]) : (console.warn(
         `storage[oidc.login.${e}] is empty, you should have an bad OIDC or code configuration somewhere.`
       ), null);
     },
@@ -125,29 +125,29 @@ const k = {
     getDemonstratingProofOfPossessionJwkAsync: l
   };
 };
-var F = /* @__PURE__ */ ((e) => (e.AutomaticBeforeTokenExpiration = "AutomaticBeforeTokensExpiration", e.AutomaticOnlyWhenFetchExecuted = "AutomaticOnlyWhenFetchExecuted", e))(F || {});
-const Ne = (e) => decodeURIComponent(
+var V = /* @__PURE__ */ ((e) => (e.AutomaticBeforeTokenExpiration = "AutomaticBeforeTokensExpiration", e.AutomaticOnlyWhenFetchExecuted = "AutomaticOnlyWhenFetchExecuted", e))(V || {});
+const xe = (e) => decodeURIComponent(
   Array.prototype.map.call(atob(e), (n) => "%" + ("00" + n.charCodeAt(0).toString(16)).slice(-2)).join("")
-), xe = (e) => JSON.parse(Ne(e.replaceAll(/-/g, "+").replaceAll(/_/g, "/"))), ue = (e) => {
+), We = (e) => JSON.parse(xe(e.replaceAll(/-/g, "+").replaceAll(/_/g, "/"))), ue = (e) => {
   try {
-    return e && We(e, ".") === 2 ? xe(e.split(".")[1]) : null;
+    return e && Le(e, ".") === 2 ? We(e.split(".")[1]) : null;
   } catch (n) {
     console.warn(n);
   }
   return null;
-}, We = (e, n) => e.split(n).length - 1, Q = {
+}, Le = (e, n) => e.split(n).length - 1, z = {
   access_token_or_id_token_invalid: "access_token_or_id_token_invalid",
   access_token_invalid: "access_token_invalid",
   id_token_invalid: "id_token_invalid"
 };
-function Le(e, n, s) {
+function De(e, n, s) {
   if (e.issuedAt) {
     if (typeof e.issuedAt == "string")
       return parseInt(e.issuedAt, 10);
   } else return n && n.iat ? n.iat : s && s.iat ? s.iat : (/* @__PURE__ */ new Date()).getTime() / 1e3;
   return e.issuedAt;
 }
-const oe = (e, n = null, s) => {
+const te = (e, n = null, s) => {
   if (!e)
     return null;
   let t;
@@ -156,9 +156,9 @@ const oe = (e, n = null, s) => {
   let i;
   n != null && "idToken" in n && !("idToken" in e) ? i = n.idToken : i = e.idToken;
   const r = e.idTokenPayload ? e.idTokenPayload : ue(i), a = r && r.exp ? r.exp : Number.MAX_VALUE, c = t && t.exp ? t.exp : e.issuedAt + o;
-  e.issuedAt = Le(e, t, r);
+  e.issuedAt = De(e, t, r);
   let l;
-  e.expiresAt ? l = e.expiresAt : s === Q.access_token_invalid ? l = c : s === Q.id_token_invalid ? l = a : l = a < c ? a : c;
+  e.expiresAt ? l = e.expiresAt : s === z.access_token_invalid ? l = c : s === z.id_token_invalid ? l = a : l = a < c ? a : c;
   const d = {
     ...e,
     idTokenPayload: r,
@@ -171,7 +171,7 @@ const oe = (e, n = null, s) => {
     return { ...d, refreshToken: u };
   }
   return d;
-}, ie = (e, n, s) => {
+}, oe = (e, n, s) => {
   if (!e)
     return null;
   if (!e.issued_at) {
@@ -186,7 +186,7 @@ const oe = (e, n = null, s) => {
     tokenType: e.token_type,
     issuedAt: e.issued_at
   };
-  return "refresh_token" in e && (t.refreshToken = e.refresh_token), e.accessTokenPayload !== void 0 && (t.accessTokenPayload = e.accessTokenPayload), e.idTokenPayload !== void 0 && (t.idTokenPayload = e.idTokenPayload), oe(t, n, s);
+  return "refresh_token" in e && (t.refreshToken = e.refresh_token), e.accessTokenPayload !== void 0 && (t.accessTokenPayload = e.accessTokenPayload), e.idTokenPayload !== void 0 && (t.idTokenPayload = e.idTokenPayload), te(t, n, s);
 }, K = (e, n) => {
   const s = (/* @__PURE__ */ new Date()).getTime() / 1e3, t = n - s;
   return Math.round(t - e);
@@ -198,11 +198,11 @@ const oe = (e, n = null, s) => {
     e.getTokens(),
     e.configuration.refresh_time_before_tokens_expiration_in_second
   ) && t > 0; ) {
-    if (e.configuration.token_automatic_renew_mode == F.AutomaticOnlyWhenFetchExecuted) {
+    if (e.configuration.token_automatic_renew_mode == V.AutomaticOnlyWhenFetchExecuted) {
       await e.renewTokensAsync({});
       break;
     } else
-      await Y({ milliseconds: n });
+      await ie({ milliseconds: n });
     t = t - 1;
   }
   return {
@@ -245,31 +245,21 @@ const oe = (e, n = null, s) => {
     setInterval: setInterval.bind(e),
     clearInterval: clearInterval.bind(e)
   };
-}(), X = "7.25.10-beta.1717";
-let fe = null, q;
-const Y = ({ milliseconds: e }) => new Promise((n) => U.setTimeout(n, e)), we = (e = "/") => {
+}(), q = "7.25.11";
+let fe = null, j;
+const ie = ({ milliseconds: e }) => new Promise((n) => U.setTimeout(n, e)), we = (e = "/") => {
   try {
-    q = new AbortController(), fetch(
+    j = new AbortController(), fetch(
       `${e}OidcKeepAliveServiceWorker.json?minSleepSeconds=150`,
-      { signal: q.signal }
+      { signal: j.signal }
     ).catch((t) => {
       console.log(t);
-    }), Y({ milliseconds: 150 * 1e3 }).then(we);
+    }), ie({ milliseconds: 150 * 1e3 }).then(we);
   } catch (n) {
     console.log(n);
   }
-}, De = () => {
-  q && q.abort();
-}, Re = (e = "/") => fetch(`${e}OidcKeepAliveServiceWorker.json`, {
-  headers: {
-    "oidc-vanilla": "true"
-  }
-}).then((n) => n.statusText === "oidc-service-worker").catch((n) => {
-  console.log(n);
-}), $e = (e) => async (n, s) => {
-  s(), await n.update();
-  const t = await n.unregister();
-  console.log(`Service worker unregistration ${t ? "successful" : "failed"}`), await Y({ milliseconds: 2e3 }), e.reload();
+}, Y = () => {
+  j && j.abort();
 }, Ae = (e) => {
   const n = sessionStorage.getItem(`oidc.tabId.${e}`);
   if (n)
@@ -287,24 +277,29 @@ const Y = ({ milliseconds: e }) => new Promise((n) => U.setTimeout(n, e)), we =
   const s = e.service_worker_relative_url;
   if (typeof window > "u" || typeof navigator > "u" || !navigator.serviceWorker || !s || e.service_worker_activate() === !1)
     return null;
-  const t = `${s}?v=${X}`, o = await navigator.serviceWorker.register(t, {
+  const t = `${s}?v=${q}`;
+  let o = null;
+  e.service_worker_register ? o = await e.service_worker_register(s) : o = await navigator.serviceWorker.register(t, {
     updateViaCache: "none"
-  });
-  o.addEventListener("updatefound", () => {
-    const y = o.installing;
-    y == null || y.addEventListener("statechange", () => {
-      y.state === "installed" && navigator.serviceWorker.controller && (console.log("New SW waiting – skipWaiting()"), y.postMessage({ type: "SKIP_WAITING" }));
+  }), o.addEventListener("updatefound", () => {
+    const h = o.installing;
+    Y(), h == null || h.addEventListener("statechange", () => {
+      h.state === "installed" && navigator.serviceWorker.controller && (Y(), console.log("New SW waiting – skipWaiting()"), h.postMessage({ type: "SKIP_WAITING" }));
     });
   }), navigator.serviceWorker.addEventListener("controllerchange", () => {
-    window.__swReloading || (window.__swReloading = !0, console.log("SW controller changed – reloading page"), window.location.reload());
-  }), await navigator.serviceWorker.ready, navigator.serviceWorker.controller || await O(o)({ type: "claim" });
-  const i = async (y) => O(o)({ type: "clear", data: { status: y }, configurationName: n }), r = async (y, E, S) => {
-    var B;
+    console.log("SW controller changed – reloading page"), Y(), window.location.reload();
+  });
+  try {
+    await navigator.serviceWorker.ready, navigator.serviceWorker.controller || await O(o)({ type: "claim" });
+  } catch (h) {
+    return console.warn(`Failed init ServiceWorker ${h.toString()}`), null;
+  }
+  const i = async (h) => O(o)({ type: "clear", data: { status: h }, configurationName: n }), r = async (h, b, S) => {
     const m = await O(o)({
       type: "init",
       data: {
-        oidcServerConfiguration: y,
-        where: E,
+        oidcServerConfiguration: h,
+        where: b,
         oidcConfiguration: {
           token_renew_mode: S.token_renew_mode,
           service_worker_convert_all_requests_to_cors: S.service_worker_convert_all_requests_to_cors
@@ -312,118 +307,112 @@ const Y = ({ milliseconds: e }) => new Promise((n) => U.setTimeout(n, e)), we =
       },
       configurationName: n
     }), x = m.version;
-    return x !== X ? (console.warn(
-      `Service worker ${x} version mismatch with js client version ${X}, unregistering and reloading`
-    ), await ((B = S.service_worker_update_require_callback) == null ? void 0 : B.call(S, o, De))) : console.log(`Service worker ${x} version match with js client version`), {
-      tokens: ie(m.tokens, null, S.token_renew_mode),
+    return x !== q && console.warn(
+      `Service worker ${x} version mismatch with js client version ${q}, unregistering and reloading`
+    ), {
+      tokens: oe(m.tokens, null, S.token_renew_mode),
       status: m.status
     };
-  }, a = (y = "/") => {
-    fe == null && (fe = "not_null", we(y));
-  }, c = (y) => O(o)({
+  }, a = (h = "/") => {
+    fe == null && (fe = "not_null", we(h));
+  }, c = (h) => O(o)({
     type: "setSessionState",
-    data: { sessionState: y },
+    data: { sessionState: h },
     configurationName: n
   }), l = async () => (await O(o)({
     type: "getSessionState",
     data: null,
     configurationName: n
-  })).sessionState, d = (y) => (sessionStorage[`oidc.nonce.${n}`] = y.nonce, O(o)({
+  })).sessionState, d = (h) => (sessionStorage[`oidc.nonce.${n}`] = h.nonce, O(o)({
     type: "setNonce",
-    data: { nonce: y },
+    data: { nonce: h },
     configurationName: n
-  })), u = async (y = !0) => {
+  })), u = async (h = !0) => {
     let S = (await O(o)({
       type: "getNonce",
       data: null,
       configurationName: n
     })).nonce;
-    return S || (S = sessionStorage[`oidc.nonce.${n}`], console.warn("nonce not found in service worker, using sessionStorage"), y && (await d(S), S = (await u(!1)).nonce)), { nonce: S };
-  }, _ = {}, f = (y) => {
-    _[n] = y, localStorage[`oidc.login.${n}`] = JSON.stringify(y);
-  }, h = () => {
-    const y = localStorage[`oidc.login.${n}`];
-    return _[n] || (_[n] = JSON.parse(y)), _[n];
-  }, p = async (y) => {
+    return S || (S = sessionStorage[`oidc.nonce.${n}`], console.warn("nonce not found in service worker, using sessionStorage"), h && (await d(S), S = (await u(!1)).nonce)), { nonce: S };
+  }, _ = {}, f = (h) => {
+    _[n] = h, localStorage[`oidc.login.${n}`] = JSON.stringify(h);
+  }, y = () => {
+    const h = localStorage[`oidc.login.${n}`];
+    return _[n] || (_[n] = JSON.parse(h)), _[n];
+  }, p = async (h) => {
     await O(o)({
       type: "setDemonstratingProofOfPossessionNonce",
-      data: { demonstratingProofOfPossessionNonce: y },
+      data: { demonstratingProofOfPossessionNonce: h },
       configurationName: n
     });
   }, w = async () => (await O(o)({
     type: "getDemonstratingProofOfPossessionNonce",
     data: null,
     configurationName: n
-  })).demonstratingProofOfPossessionNonce, v = async (y) => {
-    const E = JSON.stringify(y);
+  })).demonstratingProofOfPossessionNonce, v = async (h) => {
+    const b = JSON.stringify(h);
     await O(o)({
       type: "setDemonstratingProofOfPossessionJwk",
-      data: { demonstratingProofOfPossessionJwkJson: E },
+      data: { demonstratingProofOfPossessionJwkJson: b },
       configurationName: n
     });
   }, P = async () => {
-    const y = await O(o)({
+    const h = await O(o)({
       type: "getDemonstratingProofOfPossessionJwk",
       data: null,
       configurationName: n
     });
-    return y.demonstratingProofOfPossessionJwkJson ? JSON.parse(y.demonstratingProofOfPossessionJwkJson) : null;
-  }, A = async (y = !0) => {
+    return h.demonstratingProofOfPossessionJwkJson ? JSON.parse(h.demonstratingProofOfPossessionJwkJson) : null;
+  }, A = async (h = !0) => {
     let S = (await O(o)({
       type: "getState",
       data: null,
       configurationName: n
     })).state;
-    return S || (S = sessionStorage[`oidc.state.${n}`], console.warn("state not found in service worker, using sessionStorage"), y && (await T(S), S = await A(!1))), S;
-  }, T = async (y) => (sessionStorage[`oidc.state.${n}`] = y, O(o)({
+    return S || (S = sessionStorage[`oidc.state.${n}`], console.warn("state not found in service worker, using sessionStorage"), h && (await T(S), S = await A(!1))), S;
+  }, T = async (h) => (sessionStorage[`oidc.state.${n}`] = h, O(o)({
     type: "setState",
-    data: { state: y },
+    data: { state: h },
     configurationName: n
-  })), g = async (y = !0) => {
+  })), g = async (h = !0) => {
     let S = (await O(o)({
       type: "getCodeVerifier",
       data: null,
       configurationName: n
     })).codeVerifier;
-    if (!S && (S = sessionStorage[`oidc.code_verifier.${n}`], console.warn("codeVerifier not found in service worker, using sessionStorage"), y)) {
-      console.log("setCodeVerifierAsync", S), await b(S);
-      const m = await g(!1);
-      console.log("getCodeVerifierAsync", m), S = m.codeVerifier;
-    }
-    return S;
-  }, b = async (y) => (sessionStorage[`oidc.code_verifier.${n}`] = y, O(o)({
+    return S || (S = sessionStorage[`oidc.code_verifier.${n}`], console.warn("codeVerifier not found in service worker, using sessionStorage"), h && (await E(S), S = await g(!1))), S;
+  }, E = async (h) => (sessionStorage[`oidc.code_verifier.${n}`] = h, O(o)({
     type: "setCodeVerifier",
-    data: { codeVerifier: y },
+    data: { codeVerifier: h },
     configurationName: n
   }));
   return {
     clearAsync: i,
     initAsync: r,
     startKeepAliveServiceWorker: () => a(e.service_worker_keep_alive_path),
-    isServiceWorkerProxyActiveAsync: () => Re(e.service_worker_keep_alive_path),
     setSessionStateAsync: c,
     getSessionStateAsync: l,
     setNonceAsync: d,
     getNonceAsync: u,
     setLoginParams: f,
-    getLoginParams: h,
+    getLoginParams: y,
     getStateAsync: A,
     setStateAsync: T,
     getCodeVerifierAsync: g,
-    setCodeVerifierAsync: b,
+    setCodeVerifierAsync: E,
     setDemonstratingProofOfPossessionNonce: p,
     getDemonstratingProofOfPossessionNonce: w,
     setDemonstratingProofOfPossessionJwkAsync: v,
     getDemonstratingProofOfPossessionJwkAsync: P
   };
-}, R = {}, Ue = (e, n = window.sessionStorage, s) => {
+}, R = {}, Re = (e, n = window.sessionStorage, s) => {
   if (!R[e] && n) {
     const o = n.getItem(e);
     o && (R[e] = JSON.parse(o));
   }
   const t = 1e3 * s;
   return R[e] && R[e].timestamp + t > Date.now() ? R[e].result : null;
-}, Ke = (e, n, s = window.sessionStorage) => {
+}, $e = (e, n, s = window.sessionStorage) => {
   const t = Date.now();
   R[e] = { result: n, timestamp: t }, s && s.setItem(e, JSON.stringify({ result: n, timestamp: t }));
 };
@@ -433,7 +422,7 @@ function Se(e) {
 function Te(e) {
   return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+/g, "");
 }
-function Ve(e) {
+function Ue(e) {
   return encodeURIComponent(e).replace(/%([0-9A-F]{2})/g, function(s, t) {
     return String.fromCharCode(parseInt(t, 16));
   });
@@ -445,9 +434,9 @@ const re = (e) => {
   }), Te(n);
 };
 function de(e) {
-  return Te(Ve(e));
+  return Te(Ue(e));
 }
-const Fe = {
+const Ke = {
   importKeyAlgorithm: {
     name: "ECDSA",
     namedCurve: "P-256",
@@ -460,7 +449,7 @@ const Fe = {
   },
   digestAlgorithm: { name: "SHA-256" },
   jwtHeaderAlgorithm: "ES256"
-}, Me = (e) => async (n, s, t, o, i = "dpop+jwt") => {
+}, Fe = (e) => async (n, s, t, o, i = "dpop+jwt") => {
   switch (n = Object.assign({}, n), s.typ = i, s.alg = o.jwtHeaderAlgorithm, s.alg) {
     case "ES256":
       s.jwk = { kty: n.kty, crv: n.crv, x: n.x, y: n.y };
@@ -480,16 +469,16 @@ const Fe = {
     payload: de(JSON.stringify(t))
   }, a = o.importKeyAlgorithm, c = !0, l = ["sign"], d = await e.crypto.subtle.importKey("jwk", n, a, c, l), u = Se(`${r.protected}.${r.payload}`), _ = o.signAlgorithm, f = await e.crypto.subtle.sign(_, d, u);
   return r.signature = re(new Uint8Array(f)), `${r.protected}.${r.payload}.${r.signature}`;
-}, Je = { sign: Me }, Be = (e) => async (n) => {
+}, Ve = { sign: Fe }, Me = (e) => async (n) => {
   const s = n, t = !0, o = ["sign", "verify"], i = await e.crypto.subtle.generateKey(s, t, o);
   return await e.crypto.subtle.exportKey("jwk", i.privateKey);
-}, He = (e) => {
+}, Je = (e) => {
   const n = Object.assign({}, e);
   return delete n.d, n.key_ops = ["verify"], n;
-}, je = {
-  generate: Be,
-  neuter: He
-}, qe = (e) => async (n, s) => {
+}, Be = {
+  generate: Me,
+  neuter: Je
+}, He = (e) => async (n, s) => {
   let t;
   switch (n.kty) {
     case "EC":
@@ -503,77 +492,77 @@ const Fe = {
   }
   const o = await e.crypto.subtle.digest(s, Se(t));
   return re(new Uint8Array(o));
-}, Ge = { thumbprint: qe }, Ye = (e) => async (n) => await je.generate(e)(n), ve = (e) => (n) => async (s, t = "POST", o, i = {}) => {
+}, je = { thumbprint: He }, Ge = (e) => async (n) => await Be.generate(e)(n), ve = (e) => (n) => async (s, t = "POST", o, i = {}) => {
   const r = {
     // https://www.rfc-editor.org/rfc/rfc9449.html#name-concept
-    jti: btoa(Xe()),
+    jti: btoa(qe()),
     htm: t,
     htu: o,
     iat: Math.round(Date.now() / 1e3),
     ...i
-  }, a = await Ge.thumbprint(e)(
+  }, a = await je.thumbprint(e)(
     s,
     n.digestAlgorithm
   );
-  return await Je.sign(e)(
+  return await Ve.sign(e)(
     s,
     { kid: a },
     r,
     n
   );
-}, Xe = () => {
+}, qe = () => {
   const e = "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx", n = "0123456789abcdef";
   let s = 0, t = "";
   for (let o = 0; o < 36; o++)
     e[o] !== "-" && e[o] !== "4" && (s = Math.random() * 16 | 0), e[o] === "x" ? t += n[s] : e[o] === "y" ? (s &= 3, s |= 8, t += n[s]) : t += e[o];
   return t;
-}, be = () => {
+}, Ee = () => {
   const e = typeof window < "u" && !!window.crypto, n = e && !!window.crypto.subtle;
   return { hasCrypto: e, hasSubtleCrypto: n };
-}, Z = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789", ze = (e) => {
+}, Q = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789", Ye = (e) => {
   const n = [];
   for (let s = 0; s < e.byteLength; s += 1) {
-    const t = e[s] % Z.length;
-    n.push(Z[t]);
+    const t = e[s] % Q.length;
+    n.push(Q[t]);
   }
   return n.join("");
-}, ee = (e) => {
-  const n = new Uint8Array(e), { hasCrypto: s } = be();
+}, Z = (e) => {
+  const n = new Uint8Array(e), { hasCrypto: s } = Ee();
   if (s)
     window.crypto.getRandomValues(n);
   else
     for (let t = 0; t < e; t += 1)
-      n[t] = Math.random() * Z.length | 0;
-  return ze(n);
+      n[t] = Math.random() * Q.length | 0;
+  return Ye(n);
 };
-function Qe(e) {
+function Xe(e) {
   const n = new ArrayBuffer(e.length), s = new Uint8Array(n);
   for (let t = 0; t < e.length; t++)
     s[t] = e.charCodeAt(t);
   return s;
 }
-function Ee(e) {
+function be(e) {
   return new Promise((n, s) => {
-    crypto.subtle.digest("SHA-256", Qe(e)).then(
+    crypto.subtle.digest("SHA-256", Xe(e)).then(
       (t) => n(re(new Uint8Array(t))),
       (t) => s(t)
     );
   });
 }
-const Ze = (e) => {
+const ze = (e) => {
   if (e.length < 43 || e.length > 128)
     return Promise.reject(new Error("Invalid code length."));
-  const { hasSubtleCrypto: n } = be();
-  return n ? Ee(e) : Promise.reject(new Error("window.crypto.subtle is unavailable."));
-}, en = 60 * 60, nn = (e) => async (n, s = en, t = window.sessionStorage, o = 1e4) => {
-  const i = `${n}/.well-known/openid-configuration`, r = `oidc.server:${n}`, a = Ue(r, t, s);
+  const { hasSubtleCrypto: n } = Ee();
+  return n ? be(e) : Promise.reject(new Error("window.crypto.subtle is unavailable."));
+}, Qe = 60 * 60, Ze = (e) => async (n, s = Qe, t = window.sessionStorage, o = 1e4) => {
+  const i = `${n}/.well-known/openid-configuration`, r = `oidc.server:${n}`, a = Re(r, t, s);
   if (a)
-    return new te(a);
+    return new se(a);
   const c = await J(e)(i, {}, o);
   if (c.status !== 200)
     return null;
   const l = await c.json();
-  return Ke(r, l, t), new te(l);
+  return $e(r, l, t), new se(l);
 }, J = (e) => async (n, s = {}, t = 1e4, o = 0) => {
   let i;
   try {
@@ -588,10 +577,10 @@ const Ze = (e) => {
       throw console.error(r.message), r;
   }
   return i;
-}, ne = {
+}, ee = {
   refresh_token: "refresh_token",
   access_token: "access_token"
-}, he = (e) => async (n, s, t = ne.refresh_token, o, i = {}, r = 1e4) => {
+}, he = (e) => async (n, s, t = ee.refresh_token, o, i = {}, r = 1e4) => {
   const a = {
     token: s,
     token_type_hint: t,
@@ -618,13 +607,13 @@ const Ze = (e) => {
   )).status !== 200 ? { success: !1 } : {
     success: !0
   };
-}, sn = (e) => async (n, s, t, o, i = {}, r, a = 1e4) => {
-  for (const [f, h] of Object.entries(t))
-    s[f] === void 0 && (s[f] = h);
+}, en = (e) => async (n, s, t, o, i = {}, r, a = 1e4) => {
+  for (const [f, y] of Object.entries(t))
+    s[f] === void 0 && (s[f] = y);
   const c = [];
   for (const f in s) {
-    const h = encodeURIComponent(f), p = encodeURIComponent(s[f]);
-    c.push(`${h}=${p}`);
+    const y = encodeURIComponent(f), p = encodeURIComponent(s[f]);
+    c.push(`${y}=${p}`);
   }
   const l = c.join("&"), d = await J(e)(
     n,
@@ -651,19 +640,19 @@ const Ze = (e) => {
   )), {
     success: !0,
     status: d.status,
-    data: ie(u, o, r),
+    data: oe(u, o, r),
     demonstratingProofOfPossessionNonce: _
   };
-}, tn = (e, n) => async (s, t) => {
+}, nn = (e, n) => async (s, t) => {
   t = t ? { ...t } : {};
-  const o = ee(128), i = await Ze(o);
+  const o = Z(128), i = await ze(o);
   await e.setCodeVerifierAsync(o), await e.setStateAsync(t.state), t.code_challenge = i, t.code_challenge_method = "S256";
   let r = "";
   if (t)
     for (const [a, c] of Object.entries(t))
       r === "" ? r += "?" : r += "&", r += `${a}=${encodeURIComponent(c)}`;
   n.open(`${s}${r}`);
-}, G = "DPoP-Nonce", on = (e) => async (n, s, t, o, i = 1e4) => {
+}, G = "DPoP-Nonce", sn = (e) => async (n, s, t, o, i = 1e4) => {
   s = s ? { ...s } : {}, s.code_verifier = await e.getCodeVerifierAsync();
   const r = [];
   for (const u in s) {
@@ -693,7 +682,7 @@ const Ze = (e) => {
     success: !0,
     data: {
       state: s.state,
-      tokens: ie(d, null, o),
+      tokens: oe(d, null, o),
       demonstratingProofOfPossessionNonce: l
     }
   };
@@ -701,7 +690,7 @@ const Ze = (e) => {
 async function ye(e, n, s, t = null) {
   const o = (c) => {
     e.tokens = c;
-  }, { tokens: i, status: r } = await H(e)(
+  }, { tokens: i, status: r } = await B(e)(
     o,
     0,
     n,
@@ -744,7 +733,7 @@ const M = (e, n, s = null, t = null) => {
   TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID: "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID",
   LOGOUT_FROM_ANOTHER_TAB: "LOGOUT_FROM_ANOTHER_TAB",
   REQUIRE_SYNC_TOKENS: "REQUIRE_SYNC_TOKENS"
-}, rn = (e) => async (n, s, t, o = !1) => {
+}, tn = (e) => async (n, s, t, o = !1) => {
   const i = { nonce: null };
   if (!t)
     return { tokens: null, status: "NOT_CONNECTED", nonce: i };
@@ -766,19 +755,19 @@ const M = (e, n, s = null, t = null) => {
     if (!u || !_)
       return { tokens: null, status: "REQUIRE_SYNC_TOKENS", nonce: i };
     if (_.issuedAt !== t.issuedAt) {
-      const h = K(
+      const y = K(
         n.refresh_time_before_tokens_expiration_in_second,
         _.expiresAt
       ) > 0 ? "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID" : "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID", p = await c.getNonceAsync();
-      return { tokens: _, status: h, nonce: p };
+      return { tokens: _, status: y, nonce: p };
     }
     r = await c.getNonceAsync();
   } else {
     const u = I(s, n.storage ?? sessionStorage), _ = await u.initAsync();
     let { tokens: f } = _;
-    const { status: h } = _;
-    if (f && (f = oe(f, e.tokens, n.token_renew_mode)), f) {
-      if (h === "SESSIONS_LOST")
+    const { status: y } = _;
+    if (f && (f = te(f, e.tokens, n.token_renew_mode)), f) {
+      if (y === "SESSIONS_LOST")
         return { tokens: null, status: "SESSIONS_LOST", nonce: i };
       if (f.issuedAt !== t.issuedAt) {
         const w = K(
@@ -795,43 +784,43 @@ const M = (e, n, s = null, t = null) => {
     t.expiresAt
   ) > 0 ? "TOKENS_VALID" : "TOKENS_INVALID";
   return o ? { tokens: t, status: "FORCE_REFRESH", nonce: r } : { tokens: t, status: d, nonce: r };
-}, H = (e) => async (n, s = 0, t = !1, o = null, i = null) => {
+}, B = (e) => async (n, s = 0, t = !1, o = null, i = null) => {
   if (!navigator.onLine && document.hidden)
     return { tokens: e.tokens, status: "GIVE_UP" };
   let r = 6;
   for (; !navigator.onLine && r > 0; )
-    await Y({ milliseconds: 1e3 }), r--, e.publishEvent(k.refreshTokensAsync, {
+    await ie({ milliseconds: 1e3 }), r--, e.publishEvent(k.refreshTokensAsync, {
       message: `wait because navigator is offline try ${r}`
     });
   const a = document.hidden, c = a ? s : s + 1;
   if (s > 4)
     return a ? { tokens: e.tokens, status: "GIVE_UP" } : (n(null), e.publishEvent(k.refreshTokensAsync_error, { message: "refresh token" }), { tokens: null, status: "SESSION_LOST" });
   o || (o = {});
-  const l = e.configuration, d = (_, f = null, h = null) => ae(
+  const l = e.configuration, d = (_, f = null, y = null) => ae(
     e.configurationName,
     e.configuration,
     e.publishEvent.bind(e)
-  )(_, f, h), u = async () => {
+  )(_, f, y), u = async () => {
     try {
       let _;
       const f = await C(l, e.configurationName);
       f ? _ = f.getLoginParams() : _ = I(e.configurationName, l.storage).getLoginParams();
-      const h = await d({
+      const y = await d({
         ..._.extras,
         ...o,
         prompt: "none",
         scope: i
       });
-      return h ? h.error ? (n(null), e.publishEvent(k.refreshTokensAsync_error, {
+      return y ? y.error ? (n(null), e.publishEvent(k.refreshTokensAsync_error, {
         message: "refresh token silent"
-      }), { tokens: null, status: "SESSION_LOST" }) : (n(h.tokens), e.publishEvent(N.eventNames.token_renewed, {}), { tokens: h.tokens, status: "LOGGED" }) : (n(null), e.publishEvent(k.refreshTokensAsync_error, {
+      }), { tokens: null, status: "SESSION_LOST" }) : (n(y.tokens), e.publishEvent(N.eventNames.token_renewed, {}), { tokens: y.tokens, status: "LOGGED" }) : (n(null), e.publishEvent(k.refreshTokensAsync_error, {
         message: "refresh token silent not active"
       }), { tokens: null, status: "SESSION_LOST" });
     } catch (_) {
       return console.error(_), e.publishEvent(k.refreshTokensAsync_silent_error, {
         message: "exceptionSilent",
         exception: _.message
-      }), await H(e)(
+      }), await B(e)(
         n,
         c,
         t,
@@ -841,7 +830,7 @@ const M = (e, n, s = null, t = null) => {
     }
   };
   try {
-    const { status: _, tokens: f, nonce: h } = await rn(e)(
+    const { status: _, tokens: f, nonce: y } = await tn(e)(
       l,
       e.configurationName,
       e.tokens,
@@ -865,9 +854,9 @@ const M = (e, n, s = null, t = null) => {
           status: "session syncTokensAsync"
         }), { tokens: null, status: "LOGGED_OUT" };
       case W.REQUIRE_SYNC_TOKENS:
-        return l.token_automatic_renew_mode == F.AutomaticOnlyWhenFetchExecuted && W.FORCE_REFRESH !== _ ? (e.publishEvent(k.tokensInvalidAndWaitingActionsToRefresh, {}), { tokens: e.tokens, status: "GIVE_UP" }) : (e.publishEvent(k.refreshTokensAsync_begin, { tryNumber: s }), await u());
+        return l.token_automatic_renew_mode == V.AutomaticOnlyWhenFetchExecuted && W.FORCE_REFRESH !== _ ? (e.publishEvent(k.tokensInvalidAndWaitingActionsToRefresh, {}), { tokens: e.tokens, status: "GIVE_UP" }) : (e.publishEvent(k.refreshTokensAsync_begin, { tryNumber: s }), await u());
       default: {
-        if (l.token_automatic_renew_mode == F.AutomaticOnlyWhenFetchExecuted && W.FORCE_REFRESH !== _)
+        if (l.token_automatic_renew_mode == V.AutomaticOnlyWhenFetchExecuted && W.FORCE_REFRESH !== _)
           return e.publishEvent(k.tokensInvalidAndWaitingActionsToRefresh, {}), { tokens: e.tokens, status: "GIVE_UP" };
         if (e.publishEvent(k.refreshTokensAsync_begin, {
           refreshToken: f.refreshToken,
@@ -876,41 +865,41 @@ const M = (e, n, s = null, t = null) => {
         }), !f.refreshToken)
           return await u();
         const p = l.client_id, w = l.redirect_uri, v = l.authority, A = { ...l.token_request_extras ? l.token_request_extras : {} };
-        for (const [g, b] of Object.entries(o))
-          g.endsWith(":token_request") && (A[g.replace(":token_request", "")] = b);
+        for (const [g, E] of Object.entries(o))
+          g.endsWith(":token_request") && (A[g.replace(":token_request", "")] = E);
         return await (async () => {
           const g = {
             client_id: p,
             redirect_uri: w,
             grant_type: "refresh_token",
             refresh_token: f.refreshToken
-          }, b = await e.initAsync(
+          }, E = await e.initAsync(
             v,
             l.authority_configuration
-          ), y = document.hidden ? 1e4 : 3e4 * 10, E = b.tokenEndpoint, S = {};
+          ), h = document.hidden ? 1e4 : 3e4 * 10, b = E.tokenEndpoint, S = {};
           l.demonstrating_proof_of_possession && (S.DPoP = await e.generateDemonstrationOfProofOfPossessionAsync(
             f.accessToken,
-            E,
+            b,
             "POST"
           ));
-          const m = await sn(e.getFetch())(
-            E,
+          const m = await en(e.getFetch())(
+            b,
             g,
             A,
             f,
             S,
             l.token_renew_mode,
-            y
+            h
           );
           if (m.success) {
-            const { isValid: x, reason: B } = pe(
+            const { isValid: x, reason: Ce } = pe(
               m.data,
-              h.nonce,
-              b
+              y.nonce,
+              E
             );
             if (!x)
               return n(null), e.publishEvent(k.refreshTokensAsync_error, {
-                message: `refresh token return not valid tokens, reason: ${B}`
+                message: `refresh token return not valid tokens, reason: ${Ce}`
               }), { tokens: null, status: "SESSION_LOST" };
             if (n(m.data), m.demonstratingProofOfPossessionNonce) {
               const ce = await C(l, e.configurationName);
@@ -929,7 +918,7 @@ const M = (e, n, s = null, t = null) => {
               tokenResponse: m
             }), m.status >= 400 && m.status < 500 ? (n(null), e.publishEvent(k.refreshTokensAsync_error, {
               message: `session lost: ${m.status}`
-            }), { tokens: null, status: "SESSION_LOST" }) : await H(e)(
+            }), { tokens: null, status: "SESSION_LOST" }) : await B(e)(
               n,
               c,
               t,
@@ -943,9 +932,9 @@ const M = (e, n, s = null, t = null) => {
     return console.error(_), e.publishEvent(k.refreshTokensAsync_silent_error, {
       message: "exception",
       exception: _.message
-    }), new Promise((f, h) => {
+    }), new Promise((f, y) => {
       setTimeout(() => {
-        H(e)(n, c, t, o, i).then(f).catch(h);
+        B(e)(n, c, t, o, i).then(f).catch(y);
       }, 1e3);
     });
   }
@@ -961,7 +950,7 @@ const M = (e, n, s = null, t = null) => {
     const a = n.silent_login_uri + r, c = a.indexOf("/", a.indexOf("//") + 2), l = a.substring(0, c), d = document.createElement("iframe");
     return d.width = "0px", d.height = "0px", d.id = `${e}_oidc_iframe`, d.setAttribute("src", a), document.body.appendChild(d), new Promise((u, _) => {
       let f = !1;
-      const h = () => {
+      const y = () => {
         window.removeEventListener("message", p), d.remove(), f = !0;
       }, p = (w) => {
         if (w.origin === l && w.source === d.contentWindow) {
@@ -969,13 +958,13 @@ const M = (e, n, s = null, t = null) => {
           if (T && typeof T == "string" && !f) {
             if (T.startsWith(v)) {
               const g = JSON.parse(w.data.replace(v, ""));
-              s(k.silentLoginAsync_end, {}), u(g), h();
+              s(k.silentLoginAsync_end, {}), u(g), y();
             } else if (T.startsWith(P)) {
               const g = JSON.parse(w.data.replace(P, ""));
-              s(k.silentLoginAsync_error, g), u({ error: "oidc_" + g.error, tokens: null, sessionState: null }), h();
+              s(k.silentLoginAsync_error, g), u({ error: "oidc_" + g.error, tokens: null, sessionState: null }), y();
             } else if (T.startsWith(A)) {
               const g = JSON.parse(w.data.replace(A, ""));
-              s(k.silentLoginAsync_error, g), _(new Error(g.error)), h();
+              s(k.silentLoginAsync_error, g), _(new Error(g.error)), y();
             }
           }
         }
@@ -984,16 +973,16 @@ const M = (e, n, s = null, t = null) => {
         window.addEventListener("message", p);
         const w = n.silent_login_timeout;
         setTimeout(() => {
-          f || (h(), s(k.silentLoginAsync_error, { reason: "timeout" }), _(new Error("timeout")));
+          f || (y(), s(k.silentLoginAsync_error, { reason: "timeout" }), _(new Error("timeout")));
         }, w);
       } catch (w) {
-        h(), s(k.silentLoginAsync_error, w), _(w);
+        y(), s(k.silentLoginAsync_error, w), _(w);
       }
     });
   } catch (r) {
     throw s(k.silentLoginAsync_error, r), r;
   }
-}, an = (e, n, s, t, o) => (i = null, r = void 0) => {
+}, on = (e, n, s, t, o) => (i = null, r = void 0) => {
   i = { ...i };
   const a = (l, d, u) => ae(n, s, t.bind(o))(
     l,
@@ -1019,7 +1008,7 @@ const M = (e, n, s = null, t = null) => {
       return d;
     }
   })();
-}, cn = (e, n, s) => (t, o, i, r = !1) => {
+}, rn = (e, n, s) => (t, o, i, r = !1) => {
   const a = (c, l = void 0, d = void 0) => ae(e.configurationName, s, e.publishEvent.bind(e))(
     c,
     l,
@@ -1037,13 +1026,13 @@ const M = (e, n, s = null, t = null) => {
           prompt: "none",
           id_token_hint: _,
           scope: s.scope || "openid"
-        }).then((h) => {
-          if (h.error)
-            throw new Error(h.error);
-          const p = h.tokens.idTokenPayload;
+        }).then((y) => {
+          if (y.error)
+            throw new Error(y.error);
+          const p = y.tokens.idTokenPayload;
           if (f.sub === p.sub) {
-            const w = h.sessionState;
-            e.checkSessionIFrame.start(h.sessionState), f.sid === p.sid ? console.debug(
+            const w = y.sessionState;
+            e.checkSessionIFrame.start(y.sessionState), f.sid === p.sid ? console.debug(
               "SessionMonitor._callback: Same sub still logged in at OP, restarting check session iframe; session_state:",
               w
             ) : console.debug(
@@ -1055,16 +1044,16 @@ const M = (e, n, s = null, t = null) => {
               "SessionMonitor._callback: Different subject signed into OP:",
               p.sub
             );
-        }).catch(async (h) => {
+        }).catch(async (y) => {
           console.warn(
             "SessionMonitor._callback: Silent login failed, logging out other tabs:",
-            h
+            y
           );
           for (const [, p] of Object.entries(n))
             await p.logoutOtherTabAsync(s.client_id, f.sub);
         });
       };
-      e.checkSessionIFrame = new Ce(
+      e.checkSessionIFrame = new Ne(
         d,
         o,
         t
@@ -1076,7 +1065,7 @@ const M = (e, n, s = null, t = null) => {
     } else
       c(null);
   });
-}, ln = (e) => !!(e.os === "iOS" && e.osVersion.startsWith("12") || e.os === "Mac OS X" && e.osVersion.startsWith("10_15_6")), un = (e) => {
+}, an = (e) => !!(e.os === "iOS" && e.osVersion.startsWith("12") || e.os === "Mac OS X" && e.osVersion.startsWith("10_15_6")), cn = (e) => {
   const n = e.appVersion, s = e.userAgent, t = "-";
   let o = t;
   const i = [
@@ -1136,7 +1125,7 @@ const M = (e, n, s = null, t = null) => {
     osVersion: r
   };
 };
-function _n() {
+function ln() {
   const e = navigator.userAgent;
   let n, s = e.match(/(opera|chrome|safari|firefox|msie|trident(?=\/))\/?\s*(\d+)/i) || [];
   if (/trident/i.test(s[1]))
@@ -1154,13 +1143,13 @@ function _n() {
     version: s[1]
   };
 }
-const fn = () => {
-  const { name: e, version: n } = _n();
+const un = () => {
+  const { name: e, version: n } = ln();
   if (e === "chrome" && parseInt(n) <= 70 || e === "opera" && (!n || parseInt(n.split(".")[0]) < 80) || e === "ie")
     return !1;
-  const s = un(navigator);
-  return !ln(s);
-}, dn = async (e) => {
+  const s = cn(navigator);
+  return !an(s);
+}, _n = async (e) => {
   let n;
   if (e.tokens != null)
     return !1;
@@ -1205,7 +1194,7 @@ const fn = () => {
       });
       const o = I(e.configurationName, s.storage ?? sessionStorage), { tokens: i } = await o.initAsync();
       if (i) {
-        e.tokens = oe(i, null, s.token_renew_mode);
+        e.tokens = te(i, null, s.token_renew_mode);
         const r = o.getLoginParams();
         e.timeoutId = M(
           e,
@@ -1256,44 +1245,44 @@ const fn = () => {
     search: s,
     hash: t
   };
-}, En = (e) => {
+}, vn = (e) => {
   const n = Pe(e);
   let { path: s } = n;
   s.endsWith("/") && (s = s.slice(0, -1));
   let { hash: t } = n;
   return t === "#_=_" && (t = ""), t && (s += t), s;
-}, se = (e) => {
+}, ne = (e) => {
   const n = Pe(e), { search: s } = n;
-  return hn(s);
-}, hn = (e) => {
+  return fn(s);
+}, fn = (e) => {
   const n = {};
   let s, t, o;
   const i = e.split("&");
   for (t = 0, o = i.length; t < o; t++)
     s = i[t].split("="), n[decodeURIComponent(s[0])] = decodeURIComponent(s[1]);
   return n;
-}, yn = (e, n, s, t, o) => (i = void 0, r = null, a = !1, c = void 0) => {
+}, dn = (e, n, s, t, o) => (i = void 0, r = null, a = !1, c = void 0) => {
   const l = r;
   return r = { ...r }, (async () => {
     const u = i || o.getPath();
-    if ("state" in r || (r.state = ee(16)), s(k.loginAsync_begin, {}), r)
+    if ("state" in r || (r.state = Z(16)), s(k.loginAsync_begin, {}), r)
       for (const _ of Object.keys(r))
         _.endsWith(":token_request") && delete r[_];
     try {
       const _ = a ? n.silent_redirect_uri : n.redirect_uri;
       c || (c = n.scope);
       const f = n.extras ? { ...n.extras, ...r } : r;
-      f.nonce || (f.nonce = ee(12));
-      const h = { nonce: f.nonce }, p = await C(n, e), w = await t(
+      f.nonce || (f.nonce = Z(12));
+      const y = { nonce: f.nonce }, p = await C(n, e), w = await t(
         n.authority,
         n.authority_configuration
       );
       let v;
       if (p)
-        p.setLoginParams({ callbackPath: u, extras: l, scope: c }), await p.initAsync(w, "loginAsync", n), await p.setNonceAsync(h), p.startKeepAliveServiceWorker(), v = p;
+        p.setLoginParams({ callbackPath: u, extras: l, scope: c }), await p.initAsync(w, "loginAsync", n), await p.setNonceAsync(y), p.startKeepAliveServiceWorker(), v = p;
       else {
         const A = I(e, n.storage ?? sessionStorage);
-        A.setLoginParams({ callbackPath: u, extras: l, scope: c }), await A.setNonceAsync(h), v = A;
+        A.setLoginParams({ callbackPath: u, extras: l, scope: c }), await A.setNonceAsync(y), v = A;
       }
       const P = {
         client_id: n.client_id,
@@ -1302,7 +1291,7 @@ const fn = () => {
         response_type: "code",
         ...f
       };
-      await tn(v, o)(
+      await nn(v, o)(
         w.authorizationEndpoint,
         P
       );
@@ -1310,22 +1299,22 @@ const fn = () => {
       throw s(k.loginAsync_error, _), _;
     }
   })();
-}, gn = (e) => async (n = !1) => {
+}, hn = (e) => async (n = !1) => {
   try {
     e.publishEvent(k.loginCallbackAsync_begin, {});
     const s = e.configuration, t = s.client_id, o = n ? s.silent_redirect_uri : s.redirect_uri, i = s.authority, r = s.token_request_timeout, a = await e.initAsync(
       i,
       s.authority_configuration
-    ), c = e.location.getCurrentHref(), l = se(c), d = l.session_state, u = await C(s, e.configurationName);
-    let _, f, h, p;
+    ), c = e.location.getCurrentHref(), l = ne(c), d = l.session_state, u = await C(s, e.configurationName);
+    let _, f, y, p;
     if (u)
-      await u.initAsync(a, "loginCallbackAsync", s), await u.setSessionStateAsync(d), f = await u.getNonceAsync(), h = u.getLoginParams(), p = await u.getStateAsync(), u.startKeepAliveServiceWorker(), _ = u;
+      await u.initAsync(a, "loginCallbackAsync", s), await u.setSessionStateAsync(d), f = await u.getNonceAsync(), y = u.getLoginParams(), p = await u.getStateAsync(), u.startKeepAliveServiceWorker(), _ = u;
     else {
       const m = I(
         e.configurationName,
         s.storage ?? sessionStorage
       );
-      await m.setSessionStateAsync(d), f = await m.getNonceAsync(), h = m.getLoginParams(), p = await m.getStateAsync(), _ = m;
+      await m.setSessionStateAsync(d), f = await m.getNonceAsync(), y = m.getLoginParams(), p = await m.getStateAsync(), _ = m;
     }
     if (l.error || l.error_description)
       throw new Error(
@@ -1346,22 +1335,22 @@ const fn = () => {
     if (s.token_request_extras)
       for (const [m, x] of Object.entries(s.token_request_extras))
         v[m] = x;
-    if (h != null && h.extras)
-      for (const [m, x] of Object.entries(h.extras))
+    if (y != null && y.extras)
+      for (const [m, x] of Object.entries(y.extras))
         m.endsWith(":token_request") && (v[m.replace(":token_request", "")] = x);
     const P = a.tokenEndpoint, A = {};
     if (s.demonstrating_proof_of_possession)
       if (u)
         A.DPoP = `DPOP_SECURED_BY_OIDC_SERVICE_WORKER_${e.configurationName}`;
       else {
-        const m = await Ye(window)(
+        const m = await Ge(window)(
           s.demonstrating_proof_of_possession_configuration.generateKeyAlgorithm
         );
         await I(e.configurationName, s.storage).setDemonstratingProofOfPossessionJwkAsync(m), A.DPoP = await ve(window)(
           s.demonstrating_proof_of_possession_configuration
         )(m, "POST", P);
       }
-    const T = await on(_)(
+    const T = await sn(_)(
       P,
       { ...w, ...v },
       A,
@@ -1371,31 +1360,31 @@ const fn = () => {
     if (!T.success)
       throw new Error("Token request failed");
     let g;
-    const b = T.data.tokens, y = T.data.demonstratingProofOfPossessionNonce;
+    const E = T.data.tokens, h = T.data.demonstratingProofOfPossessionNonce;
     if (T.data.state !== v.state)
       throw new Error("state is not valid");
-    const { isValid: E, reason: S } = pe(
-      b,
+    const { isValid: b, reason: S } = pe(
+      E,
       f.nonce,
       a
     );
-    if (!E)
+    if (!b)
       throw new Error(`Tokens are not OpenID valid, reason: ${S}`);
     if (u) {
-      if (b.refreshToken && !b.refreshToken.includes("SECURED_BY_OIDC_SERVICE_WORKER"))
+      if (E.refreshToken && !E.refreshToken.includes("SECURED_BY_OIDC_SERVICE_WORKER"))
         throw new Error("Refresh token should be hidden by service worker");
-      if (y && (b != null && b.accessToken.includes("SECURED_BY_OIDC_SERVICE_WORKER")))
+      if (h && (E != null && E.accessToken.includes("SECURED_BY_OIDC_SERVICE_WORKER")))
         throw new Error(
           "Demonstration of proof of possession require Access token not hidden by service worker"
         );
     }
     if (u)
-      await u.initAsync(a, "syncTokensAsync", s), g = u.getLoginParams(), y && await u.setDemonstratingProofOfPossessionNonce(
-        y
+      await u.initAsync(a, "syncTokensAsync", s), g = u.getLoginParams(), h && await u.setDemonstratingProofOfPossessionNonce(
+        h
       );
     else {
       const m = I(e.configurationName, s.storage);
-      g = m.getLoginParams(), y && await m.setDemonstratingProofOfPossessionNonce(y);
+      g = m.getLoginParams(), h && await m.setDemonstratingProofOfPossessionNonce(h);
     }
     return await e.startCheckSessionAsync(
       a.checkSessionIframe,
@@ -1403,7 +1392,7 @@ const fn = () => {
       d,
       n
     ), e.publishEvent(k.loginCallbackAsync_end, {}), {
-      tokens: b,
+      tokens: E,
       state: "request.state",
       callbackPath: g.callbackPath,
       scope: l.scope,
@@ -1415,7 +1404,7 @@ const fn = () => {
 }, ge = {
   access_token: "access_token",
   refresh_token: "refresh_token"
-}, z = (e, n) => {
+}, X = (e, n) => {
   const s = {};
   if (e) {
     for (const [t, o] of Object.entries(e))
@@ -1426,7 +1415,7 @@ const fn = () => {
     return s;
   }
   return s;
-}, kn = (e) => {
+}, yn = (e) => {
   const n = {};
   if (e) {
     for (const [s, t] of Object.entries(e))
@@ -1434,11 +1423,11 @@ const fn = () => {
     return n;
   }
   return n;
-}, mn = (e) => async (n) => {
+}, gn = (e) => async (n) => {
   U.clearTimeout(e.timeoutId), e.timeoutId = null, e.checkSessionIFrame && e.checkSessionIFrame.stop();
   const s = await C(e.configuration, e.configurationName);
   s ? await s.clearAsync(n) : await I(e.configurationName, e.configuration.storage).clearAsync(n), e.tokens = null, e.userInfo = null;
-}, pn = (e, n, s, t, o) => async (i = void 0, r = null) => {
+}, kn = (e, n, s, t, o) => async (i = void 0, r = null) => {
   var v, P;
   const a = e.configuration, c = await e.initAsync(
     a.authority,
@@ -1454,25 +1443,25 @@ const fn = () => {
     if (A) {
       const T = [], g = e.tokens ? e.tokens.accessToken : null;
       if (g && a.logout_tokens_to_invalidate.includes(ge.access_token)) {
-        const y = z(r, ":revoke_access_token"), E = he(s)(
+        const h = X(r, ":revoke_access_token"), b = he(s)(
           A,
           g,
-          ne.access_token,
+          ee.access_token,
           a.client_id,
-          y
+          h
         );
-        T.push(E);
+        T.push(b);
       }
-      const b = e.tokens ? e.tokens.refreshToken : null;
-      if (b && a.logout_tokens_to_invalidate.includes(ge.refresh_token)) {
-        const y = z(r, ":revoke_refresh_token"), E = he(s)(
+      const E = e.tokens ? e.tokens.refreshToken : null;
+      if (E && a.logout_tokens_to_invalidate.includes(ge.refresh_token)) {
+        const h = X(r, ":revoke_refresh_token"), b = he(s)(
           A,
-          b,
-          ne.refresh_token,
+          E,
+          ee.refresh_token,
           a.client_id,
-          y
+          h
         );
-        T.push(E);
+        T.push(b);
       }
       T.length > 0 && await Promise.all(T);
     }
@@ -1485,10 +1474,10 @@ const fn = () => {
   await e.destroyAsync("LOGGED_OUT");
   for (const [, A] of Object.entries(n))
     A !== e ? await e.logoutSameTabAsync(e.configuration.client_id, f) : e.publishEvent(k.logout_from_same_tab, {});
-  const h = z(r, ":oidc");
-  if (h && h.no_reload === "true")
+  const y = X(r, ":oidc");
+  if (y && y.no_reload === "true")
     return;
-  const w = kn(r);
+  const w = yn(r);
   if (c.endSessionEndpoint) {
     "id_token_hint" in w || (w.id_token_hint = _), !("post_logout_redirect_uri" in w) && i !== null && (w.post_logout_redirect_uri = u);
     let A = "";
@@ -1512,19 +1501,19 @@ const fn = () => {
   }, d = await me(l), u = (f = d == null ? void 0 : d.tokens) == null ? void 0 : f.accessToken;
   if (c.has("Accept") || c.set("Accept", "application/json"), u) {
     if (n.configuration.demonstrating_proof_of_possession && s) {
-      const h = await n.generateDemonstrationOfProofOfPossessionAsync(
+      const y = await n.generateDemonstrationOfProofOfPossessionAsync(
         u,
         o.toString(),
         a.method
       );
-      c.set("Authorization", `DPoP ${u}`), c.set("DPoP", h);
+      c.set("Authorization", `DPoP ${u}`), c.set("DPoP", y);
     } else
       c.set("Authorization", `Bearer ${u}`);
     a.credentials || (a.credentials = "same-origin");
   }
   const _ = { ...a, headers: c };
   return await e(o, _, ...r);
-}, wn = (e) => async (n = !1, s = !1) => {
+}, mn = (e) => async (n = !1, s = !1) => {
   if (e.userInfo != null && !n)
     return e.userInfo;
   const t = e.configuration, i = (await e.initAsync(
@@ -1535,45 +1524,42 @@ const fn = () => {
     return l.status !== 200 ? null : l.json();
   })();
   return e.userInfo = a, a;
-}, An = () => fetch;
-class te {
+}, pn = () => fetch;
+class se {
   constructor(n) {
     this.authorizationEndpoint = n.authorization_endpoint, this.tokenEndpoint = n.token_endpoint, this.revocationEndpoint = n.revocation_endpoint, this.userInfoEndpoint = n.userinfo_endpoint, this.checkSessionIframe = n.check_session_iframe, this.issuer = n.issuer, this.endSessionEndpoint = n.end_session_endpoint;
   }
 }
-const L = {}, Sn = (e, n = new j()) => (s, t = "default") => (L[t] || (L[t] = new N(s, t, e, n)), L[t]), Tn = async (e) => {
+const L = {}, wn = (e, n = new H()) => (s, t = "default") => (L[t] || (L[t] = new N(s, t, e, n)), L[t]), An = async (e) => {
   const { parsedTokens: n, callbackPath: s, extras: t, scope: o } = await e.loginCallbackAsync();
   return e.timeoutId = M(e, n.expiresAt, t, o), { callbackPath: s };
-}, vn = (e) => Math.floor(Math.random() * e), V = class V {
-  constructor(n, s = "default", t, o = new j()) {
+}, Sn = (e) => Math.floor(Math.random() * e), F = class F {
+  constructor(n, s = "default", t, o = new H()) {
     this.initPromise = null, this.tryKeepExistingSessionPromise = null, this.loginPromise = null, this.loginCallbackPromise = null, this.loginCallbackWithAutoTokensRenewPromise = null, this.userInfoPromise = null, this.renewTokensPromise = null, this.logoutPromise = null;
     let i = n.silent_login_uri;
     n.silent_redirect_uri && !n.silent_login_uri && (i = `${n.silent_redirect_uri.replace("-callback", "").replace("callback", "")}-login`);
     let r = n.refresh_time_before_tokens_expiration_in_second ?? 120;
-    r > 60 && (r = r - Math.floor(Math.random() * 40)), this.location = o ?? new j();
-    const a = n.service_worker_update_require_callback ?? $e(this.location);
-    this.configuration = {
+    r > 60 && (r = r - Math.floor(Math.random() * 40)), this.location = o ?? new H(), this.configuration = {
       ...n,
       silent_login_uri: i,
-      token_automatic_renew_mode: n.token_automatic_renew_mode ?? F.AutomaticBeforeTokenExpiration,
+      token_automatic_renew_mode: n.token_automatic_renew_mode ?? V.AutomaticBeforeTokenExpiration,
       monitor_session: n.monitor_session ?? !1,
       refresh_time_before_tokens_expiration_in_second: r,
       silent_login_timeout: n.silent_login_timeout ?? 12e3,
-      token_renew_mode: n.token_renew_mode ?? Q.access_token_or_id_token_invalid,
+      token_renew_mode: n.token_renew_mode ?? z.access_token_or_id_token_invalid,
       demonstrating_proof_of_possession: n.demonstrating_proof_of_possession ?? !1,
       authority_timeout_wellknowurl_in_millisecond: n.authority_timeout_wellknowurl_in_millisecond ?? 1e4,
       logout_tokens_to_invalidate: n.logout_tokens_to_invalidate ?? [
         "access_token",
         "refresh_token"
       ],
-      service_worker_update_require_callback: a,
-      service_worker_activate: n.service_worker_activate ?? fn,
-      demonstrating_proof_of_possession_configuration: n.demonstrating_proof_of_possession_configuration ?? Fe,
+      service_worker_activate: n.service_worker_activate ?? un,
+      demonstrating_proof_of_possession_configuration: n.demonstrating_proof_of_possession_configuration ?? Ke,
       preload_user_info: n.preload_user_info ?? !1
-    }, this.getFetch = t ?? An, this.configurationName = s, this.tokens = null, this.userInfo = null, this.events = [], this.timeoutId = null, this.loginCallbackWithAutoTokensRenewAsync.bind(this), this.initAsync.bind(this), this.loginCallbackAsync.bind(this), this.subscribeEvents.bind(this), this.removeEventSubscription.bind(this), this.publishEvent.bind(this), this.destroyAsync.bind(this), this.logoutAsync.bind(this), this.renewTokensAsync.bind(this), this.initAsync(this.configuration.authority, this.configuration.authority_configuration);
+    }, this.getFetch = t ?? pn, this.configurationName = s, this.tokens = null, this.userInfo = null, this.events = [], this.timeoutId = null, this.loginCallbackWithAutoTokensRenewAsync.bind(this), this.initAsync.bind(this), this.loginCallbackAsync.bind(this), this.subscribeEvents.bind(this), this.removeEventSubscription.bind(this), this.publishEvent.bind(this), this.destroyAsync.bind(this), this.logoutAsync.bind(this), this.renewTokensAsync.bind(this), this.initAsync(this.configuration.authority, this.configuration.authority_configuration);
   }
   subscribeEvents(n) {
-    const s = vn(9999999999999).toString();
+    const s = Sn(9999999999999).toString();
     return this.events.push({ id: s, func: n }), s;
   }
   removeEventSubscription(n) {
@@ -1594,7 +1580,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
   }
   _silentLoginCallbackFromIFrame() {
     if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
-      const n = this.location, s = se(n.getCurrentHref());
+      const n = this.location, s = ne(n.getCurrentHref());
       window.parent.postMessage(
         `${this.configurationName}_oidc_tokens:${JSON.stringify({ tokens: this.tokens, sessionState: s.session_state })}`,
         n.getOrigin()
@@ -1603,7 +1589,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
   }
   _silentLoginErrorCallbackFromIFrame(n = null) {
     if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
-      const s = this.location, t = se(s.getCurrentHref());
+      const s = this.location, t = ne(s.getCurrentHref());
       t.error ? window.parent.postMessage(
         `${this.configurationName}_oidc_error:${JSON.stringify({ error: t.error })}`,
         s.getOrigin()
@@ -1625,7 +1611,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
       return this.initPromise;
     const t = async () => {
       if (s != null)
-        return new te({
+        return new se({
           authorization_endpoint: s.authorization_endpoint,
           end_session_endpoint: s.end_session_endpoint,
           revocation_endpoint: s.revocation_endpoint,
@@ -1635,7 +1621,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
           issuer: s.issuer
         });
       const i = await C(this.configuration, this.configurationName) ? window.sessionStorage : null;
-      return await nn(this.getFetch())(
+      return await Ze(this.getFetch())(
         n,
         this.configuration.authority_time_cache_wellknowurl_in_second ?? 60 * 60,
         i,
@@ -1647,12 +1633,12 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     });
   }
   async tryKeepExistingSessionAsync() {
-    return this.tryKeepExistingSessionPromise !== null ? this.tryKeepExistingSessionPromise : (this.tryKeepExistingSessionPromise = dn(this), this.tryKeepExistingSessionPromise.finally(() => {
+    return this.tryKeepExistingSessionPromise !== null ? this.tryKeepExistingSessionPromise : (this.tryKeepExistingSessionPromise = _n(this), this.tryKeepExistingSessionPromise.finally(() => {
       this.tryKeepExistingSessionPromise = null;
     }));
   }
   async startCheckSessionAsync(n, s, t, o = !1) {
-    await cn(this, L, this.configuration)(
+    await rn(this, L, this.configuration)(
       n,
       s,
       t,
@@ -1660,13 +1646,13 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     );
   }
   async loginAsync(n = void 0, s = null, t = !1, o = void 0, i = !1) {
-    return this.logoutPromise && await this.logoutPromise, this.loginPromise !== null ? this.loginPromise : (i ? this.loginPromise = an(
+    return this.logoutPromise && await this.logoutPromise, this.loginPromise !== null ? this.loginPromise : (i ? this.loginPromise = on(
       window,
       this.configurationName,
       this.configuration,
       this.publishEvent.bind(this),
       this
-    )(s, o) : this.loginPromise = yn(
+    )(s, o) : this.loginPromise = dn(
       this.configurationName,
       this.configuration,
       this.publishEvent.bind(this),
@@ -1680,8 +1666,8 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     if (this.loginCallbackPromise !== null)
       return this.loginCallbackPromise;
     const s = async () => {
-      const t = await gn(this)(n), o = t.tokens;
-      return this.tokens = o, await C(this.configuration, this.configurationName) || I(this.configurationName, this.configuration.storage).setTokens(o), this.publishEvent(V.eventNames.token_acquired, o), this.configuration.preload_user_info && await this.userInfoAsync(), {
+      const t = await hn(this)(n), o = t.tokens;
+      return this.tokens = o, await C(this.configuration, this.configurationName) || I(this.configurationName, this.configuration.storage).setTokens(o), this.publishEvent(F.eventNames.token_acquired, o), this.configuration.preload_user_info && await this.userInfoAsync(), {
         parsedTokens: o,
         state: t.state,
         callbackPath: t.callbackPath,
@@ -1695,7 +1681,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
   }
   async generateDemonstrationOfProofOfPossessionAsync(n, s, t, o = {}) {
     const i = this.configuration, r = {
-      ath: await Ee(n),
+      ath: await be(n),
       ...o
     };
     if (await C(i, this.configurationName))
@@ -1706,12 +1692,12 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     )(l, t, s, r);
   }
   loginCallbackWithAutoTokensRenewAsync() {
-    return this.loginCallbackWithAutoTokensRenewPromise !== null ? this.loginCallbackWithAutoTokensRenewPromise : (this.loginCallbackWithAutoTokensRenewPromise = Tn(this), this.loginCallbackWithAutoTokensRenewPromise.finally(() => {
+    return this.loginCallbackWithAutoTokensRenewPromise !== null ? this.loginCallbackWithAutoTokensRenewPromise : (this.loginCallbackWithAutoTokensRenewPromise = An(this), this.loginCallbackWithAutoTokensRenewPromise.finally(() => {
       this.loginCallbackWithAutoTokensRenewPromise = null;
     }));
   }
   userInfoAsync(n = !1, s = !1) {
-    return this.userInfoPromise !== null ? this.userInfoPromise : (this.userInfoPromise = wn(this)(n, s), this.userInfoPromise.finally(() => {
+    return this.userInfoPromise !== null ? this.userInfoPromise : (this.userInfoPromise = mn(this)(n, s), this.userInfoPromise.finally(() => {
       this.userInfoPromise = null;
     }));
   }
@@ -1724,7 +1710,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
       });
   }
   async destroyAsync(n) {
-    return await mn(this)(n);
+    return await gn(this)(n);
   }
   async logoutSameTabAsync(n, s) {
     this.configuration.monitor_session && this.configuration.client_id === n && s && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === s && (await this.destroyAsync("LOGGED_OUT"), this.publishEvent(k.logout_from_same_tab, { mmessage: "SessionMonitor", sub: s }));
@@ -1733,7 +1719,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     this.configuration.monitor_session && this.configuration.client_id === n && s && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === s && (await this.destroyAsync("LOGGED_OUT"), this.publishEvent(k.logout_from_another_tab, { message: "SessionMonitor", sub: s }));
   }
   async logoutAsync(n = void 0, s = null) {
-    return this.logoutPromise ? this.logoutPromise : (this.logoutPromise = pn(
+    return this.logoutPromise ? this.logoutPromise : (this.logoutPromise = kn(
       this,
       L,
       this.getFetch(),
@@ -1744,8 +1730,8 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     }));
   }
 };
-V.getOrCreate = (n, s) => (t, o = "default") => Sn(n, s)(t, o), V.eventNames = k;
-let N = V;
+F.getOrCreate = (n, s) => (t, o = "default") => wn(n, s)(t, o), F.eventNames = k;
+let N = F;
 const $ = class $ {
   constructor(n) {
     this._oidc = n;
@@ -1815,14 +1801,14 @@ const $ = class $ {
     return this._oidc.userInfo;
   }
 };
-$.getOrCreate = (n, s = new j()) => (t, o = "default") => new $(N.getOrCreate(n, s)(t, o)), $.eventNames = N.eventNames;
+$.getOrCreate = (n, s = new H()) => (t, o = "default") => new $(N.getOrCreate(n, s)(t, o)), $.eventNames = N.eventNames;
 let ke = $;
 export {
   ke as OidcClient,
-  j as OidcLocation,
-  F as TokenAutomaticRenewMode,
-  Q as TokenRenewMode,
-  An as getFetchDefault,
-  se as getParseQueryStringFromLocation,
-  En as getPath
+  H as OidcLocation,
+  V as TokenAutomaticRenewMode,
+  z as TokenRenewMode,
+  pn as getFetchDefault,
+  ne as getParseQueryStringFromLocation,
+  vn as getPath
 };