@axa-fr/oidc-client 7.26.8 → 7.27.0

package/dist/index.js

@@ -47,7 +47,7 @@ class $e {
     this._timer && (K.debug("CheckSessionIFrame.stop"), window.clearInterval(this._timer), this._timer = null);
   }
 }
-const w = {
+const k = {
   service_worker_not_supported_by_browser: "service_worker_not_supported_by_browser",
   token_acquired: "token_acquired",
   logout_from_another_tab: "logout_from_another_tab",
@@ -76,53 +76,53 @@ const w = {
   syncTokensAsync_end: "syncTokensAsync_end",
   syncTokensAsync_error: "syncTokensAsync_error",
   tokensInvalidAndWaitingActionsToRefresh: "tokensInvalidAndWaitingActionsToRefresh"
-}, N = (e, n = sessionStorage) => {
-  const t = (y) => (n[`oidc.${e}`] = JSON.stringify({ tokens: null, status: y }), delete n[`oidc.${e}.userInfo`], Promise.resolve()), s = async () => {
+}, C = (e, n = sessionStorage, t) => {
+  const s = t ?? n, o = (w) => (n[`oidc.${e}`] = JSON.stringify({ tokens: null, status: w }), delete n[`oidc.${e}.userInfo`], t && t !== n && (delete s[`oidc.login.${e}`], delete s[`oidc.state.${e}`], delete s[`oidc.code_verifier.${e}`], delete s[`oidc.nonce.${e}`]), Promise.resolve()), i = async () => {
     if (!n[`oidc.${e}`])
       return n[`oidc.${e}`] = JSON.stringify({ tokens: null, status: null }), { tokens: null, status: null };
-    const y = JSON.parse(n[`oidc.${e}`]);
-    return Promise.resolve({ tokens: y.tokens, status: y.status });
-  }, o = (y) => {
-    n[`oidc.${e}`] = JSON.stringify({ tokens: y });
-  }, i = async (y) => {
-    n[`oidc.session_state.${e}`] = y;
-  }, r = async () => n[`oidc.session_state.${e}`], a = (y) => {
-    n[`oidc.nonce.${e}`] = y.nonce;
-  }, c = (y) => {
-    n[`oidc.jwk.${e}`] = JSON.stringify(y);
-  }, _ = () => JSON.parse(n[`oidc.jwk.${e}`]), u = async () => ({ nonce: n[`oidc.nonce.${e}`] }), l = async (y) => {
-    n[`oidc.dpop_nonce.${e}`] = y;
-  }, h = () => n[`oidc.dpop_nonce.${e}`], f = () => n[`oidc.${e}`] ? JSON.stringify({ tokens: JSON.parse(n[`oidc.${e}`]).tokens }) : null, m = {};
+    const w = JSON.parse(n[`oidc.${e}`]);
+    return Promise.resolve({ tokens: w.tokens, status: w.status });
+  }, r = (w) => {
+    n[`oidc.${e}`] = JSON.stringify({ tokens: w });
+  }, a = async (w) => {
+    n[`oidc.session_state.${e}`] = w;
+  }, c = async () => n[`oidc.session_state.${e}`], f = (w) => {
+    s[`oidc.nonce.${e}`] = w.nonce;
+  }, u = (w) => {
+    n[`oidc.jwk.${e}`] = JSON.stringify(w);
+  }, l = () => JSON.parse(n[`oidc.jwk.${e}`]), h = async () => ({ nonce: s[`oidc.nonce.${e}`] }), _ = async (w) => {
+    n[`oidc.dpop_nonce.${e}`] = w;
+  }, m = () => n[`oidc.dpop_nonce.${e}`], p = () => n[`oidc.${e}`] ? JSON.stringify({ tokens: JSON.parse(n[`oidc.${e}`]).tokens }) : null, g = {};
   return {
-    clearAsync: t,
-    initAsync: s,
-    setTokens: o,
-    getTokens: f,
-    setSessionStateAsync: i,
-    getSessionStateAsync: r,
-    setNonceAsync: a,
-    getNonceAsync: u,
-    setLoginParams: (y) => {
-      m[e] = y, n[`oidc.login.${e}`] = JSON.stringify(y);
+    clearAsync: o,
+    initAsync: i,
+    setTokens: r,
+    getTokens: p,
+    setSessionStateAsync: a,
+    getSessionStateAsync: c,
+    setNonceAsync: f,
+    getNonceAsync: h,
+    setLoginParams: (w) => {
+      g[e] = w, s[`oidc.login.${e}`] = JSON.stringify(w);
     },
     getLoginParams: () => {
-      const y = n[`oidc.login.${e}`];
-      return y ? (m[e] || (m[e] = JSON.parse(y)), m[e]) : (console.warn(
+      const w = s[`oidc.login.${e}`];
+      return w ? (g[e] || (g[e] = JSON.parse(w)), g[e]) : (console.warn(
         `storage[oidc.login.${e}] is empty, you should have an bad OIDC or code configuration somewhere.`
       ), null);
     },
-    getStateAsync: async () => n[`oidc.state.${e}`],
-    setStateAsync: async (y) => {
-      n[`oidc.state.${e}`] = y;
+    getStateAsync: async () => s[`oidc.state.${e}`],
+    setStateAsync: async (w) => {
+      s[`oidc.state.${e}`] = w;
     },
-    getCodeVerifierAsync: async () => n[`oidc.code_verifier.${e}`],
-    setCodeVerifierAsync: async (y) => {
-      n[`oidc.code_verifier.${e}`] = y;
+    getCodeVerifierAsync: async () => s[`oidc.code_verifier.${e}`],
+    setCodeVerifierAsync: async (w) => {
+      s[`oidc.code_verifier.${e}`] = w;
     },
-    setDemonstratingProofOfPossessionNonce: l,
-    getDemonstratingProofOfPossessionNonce: h,
-    setDemonstratingProofOfPossessionJwkAsync: c,
-    getDemonstratingProofOfPossessionJwkAsync: _
+    setDemonstratingProofOfPossessionNonce: _,
+    getDemonstratingProofOfPossessionNonce: m,
+    setDemonstratingProofOfPossessionJwkAsync: u,
+    getDemonstratingProofOfPossessionJwkAsync: l
   };
 };
 var H = /* @__PURE__ */ ((e) => (e.AutomaticBeforeTokenExpiration = "AutomaticBeforeTokensExpiration", e.AutomaticOnlyWhenFetchExecuted = "AutomaticOnlyWhenFetchExecuted", e))(H || {});
@@ -157,13 +157,13 @@ const ue = (e, n = null, t) => {
   n != null && "idToken" in n && !("idToken" in e) ? i = n.idToken : i = e.idToken;
   const r = e.idTokenPayload ? e.idTokenPayload : ke(i), a = r && r.exp ? r.exp : Number.MAX_VALUE, c = s && s.exp ? s.exp : e.issuedAt + o;
   e.issuedAt = Ve(e, s, r);
-  let _;
-  e.expiresAt ? _ = e.expiresAt : t === oe.access_token_invalid ? _ = c : t === oe.id_token_invalid ? _ = a : _ = a < c ? a : c;
+  let f;
+  e.expiresAt ? f = e.expiresAt : t === oe.access_token_invalid ? f = c : t === oe.id_token_invalid ? f = a : f = a < c ? a : c;
   const u = {
     ...e,
     idTokenPayload: r,
     accessTokenPayload: s,
-    expiresAt: _,
+    expiresAt: f,
     idToken: i
   };
   if (n != null && "refreshToken" in n && !("refreshToken" in e)) {
@@ -193,9 +193,9 @@ const ue = (e, n = null, t) => {
 }, Fe = (e, n = 0) => e ? B(n, e.expiresAt) > 0 : !1, ve = async (e, n = 200, t = 50) => {
   let s = t, o = await e.syncTokensInfoAsync();
   for (; [
-    O.REQUIRE_SYNC_TOKENS,
-    O.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID,
-    O.TOKENS_INVALID
+    b.REQUIRE_SYNC_TOKENS,
+    b.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID,
+    b.TOKENS_INVALID
   ].includes(o) && s > 0; ) {
     if (e.configuration.token_automatic_renew_mode == H.AutomaticOnlyWhenFetchExecuted) {
       await e.renewTokensAsync({});
@@ -244,7 +244,7 @@ const ue = (e, n = null, t) => {
     setInterval: setInterval.bind(e),
     clearInterval: clearInterval.bind(e)
   };
-})(), te = "7.26.8";
+})(), te = "7.27.0";
 let me = null, Z;
 const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe = (e = "/") => {
   try {
@@ -266,7 +266,7 @@ const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe =
   if (t) return t;
   const s = globalThis.crypto.randomUUID();
   return sessionStorage.setItem(n, s), s;
-}, Me = 5e3, Be = (e) => navigator.serviceWorker.controller ?? e.active ?? e.waiting ?? e.installing ?? null, P = (e, n) => (t) => {
+}, Me = 5e3, Be = (e) => navigator.serviceWorker.controller ?? e.active ?? e.waiting ?? e.installing ?? null, I = (e, n) => (t) => {
   const s = n?.timeoutMs ?? Me;
   return new Promise((o, i) => {
     const r = Be(e);
@@ -280,7 +280,7 @@ const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe =
     }
     const a = new MessageChannel();
     let c = null;
-    const _ = () => {
+    const f = () => {
       try {
         c != null && ($.clearTimeout(c), c = null), a.port1.onmessage = null, a.port1.close(), a.port2.close();
       } catch (u) {
@@ -288,11 +288,11 @@ const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe =
       }
     };
     c = $.setTimeout(() => {
-      _(), i(
+      f(), i(
         new Error(`Service worker did not respond within ${s}ms (type=${t?.type})`)
       );
     }, s), a.port1.onmessage = (u) => {
-      _(), u?.data?.error ? i(u.data.error) : o(u.data);
+      f(), u?.data?.error ? i(u.data.error) : o(u.data);
     };
     try {
       const u = t?.configurationName;
@@ -300,7 +300,7 @@ const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe =
         a.port2
       ]);
     } catch (u) {
-      _(), i(u);
+      f(), i(u);
     }
   });
 }, Je = async (e) => navigator.serviceWorker.controller ? navigator.serviceWorker.controller : new Promise((n) => {
@@ -311,7 +311,7 @@ const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe =
   navigator.serviceWorker.addEventListener("controllerchange", s), $.setTimeout(() => {
     t || (t = !0, navigator.serviceWorker.removeEventListener("controllerchange", s), n(navigator.serviceWorker.controller ?? null));
   }, e);
-}), C = async (e, n) => {
+}), x = async (e, n) => {
   const t = e.service_worker_relative_url;
   if (typeof window > "u" || typeof navigator > "u" || !navigator.serviceWorker || !t || e.service_worker_activate() === !1)
     return null;
@@ -323,7 +323,7 @@ const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe =
   const i = `oidc.sw.version_mismatch_reload.${n}`, r = async () => {
     X(), console.log("New SW waiting – SKIP_WAITING");
     try {
-      await P(o, { timeoutMs: 8e3 })({
+      await I(o, { timeoutMs: 8e3 })({
         type: "SKIP_WAITING",
         configurationName: n,
         data: null
@@ -355,7 +355,7 @@ const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe =
     console.log("SW controller changed – reloading page"), X(), window.location.reload();
   });
   try {
-    await navigator.serviceWorker.ready, navigator.serviceWorker.controller || (await P(o, { timeoutMs: 8e3 })({
+    await navigator.serviceWorker.ready, navigator.serviceWorker.controller || (await I(o, { timeoutMs: 8e3 })({
       type: "claim",
       configurationName: n,
       data: null
@@ -363,19 +363,19 @@ const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe =
   } catch (d) {
     return console.warn(`Failed init ServiceWorker ${d?.toString?.() ?? String(d)}`), null;
   }
-  const _ = async (d) => P(o)({ type: "clear", data: { status: d }, configurationName: n }), u = async (d, D, v) => {
-    const b = await P(o)({
+  const f = async (d) => I(o)({ type: "clear", data: { status: d }, configurationName: n }), u = async (d, D, E) => {
+    const P = await I(o)({
       type: "init",
       data: {
         oidcServerConfiguration: d,
         where: D,
         oidcConfiguration: {
-          token_renew_mode: v.token_renew_mode,
-          service_worker_convert_all_requests_to_cors: v.service_worker_convert_all_requests_to_cors
+          token_renew_mode: E.token_renew_mode,
+          service_worker_convert_all_requests_to_cors: E.service_worker_convert_all_requests_to_cors
         }
       },
       configurationName: n
-    }), q = b.version;
+    }), q = P.version;
     if (q !== te) {
       console.warn(
         `Service worker ${q} version mismatch with js client version ${te}, unregistering and reloading`
@@ -388,8 +388,8 @@ const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe =
           X();
           try {
             await o.update();
-          } catch (ge) {
-            console.error(ge);
+          } catch (he) {
+            console.error(he);
           }
           const Y = await o.unregister();
           console.log(`Service worker unregistering ${Y}`), await ne({ milliseconds: 2e3 }), window.location.reload();
@@ -401,100 +401,100 @@ const ne = ({ milliseconds: e }) => new Promise((n) => $.setTimeout(n, e)), Oe =
     } else
       sessionStorage.removeItem(i);
     return {
-      tokens: _e(b.tokens, null, v.token_renew_mode),
-      status: b.status
+      tokens: _e(P.tokens, null, E.token_renew_mode),
+      status: P.status
     };
   }, l = (d = "/") => {
     me == null && (me = "not_null", Oe(d));
-  }, h = (d) => P(o)({
+  }, h = (d) => I(o)({
     type: "setSessionState",
     data: { sessionState: d },
     configurationName: n
-  }), f = async () => (await P(o)({
+  }), _ = async () => (await I(o)({
     type: "getSessionState",
     data: null,
     configurationName: n
-  })).sessionState, m = (d) => (sessionStorage[`oidc.nonce.${n}`] = d.nonce, P(o)({
+  })).sessionState, m = (d) => (sessionStorage[`oidc.nonce.${n}`] = d.nonce, I(o)({
     type: "setNonce",
     data: { nonce: d },
     configurationName: n
   })), p = async (d = !0) => {
-    let v = (await P(o)({
+    let E = (await I(o)({
       type: "getNonce",
       data: null,
       configurationName: n
     })).nonce;
-    return v || (v = sessionStorage[`oidc.nonce.${n}`], console.warn("nonce not found in service worker, using sessionStorage"), d && (await m(v), v = (await p(!1)).nonce)), { nonce: v };
-  }, g = {}, k = (d) => {
+    return E || (E = sessionStorage[`oidc.nonce.${n}`], console.warn("nonce not found in service worker, using sessionStorage"), d && (await m(E), E = (await p(!1)).nonce)), { nonce: E };
+  }, g = {}, y = (d) => {
     g[n] = d, localStorage[`oidc.login.${n}`] = JSON.stringify(d);
   }, A = () => {
     const d = localStorage[`oidc.login.${n}`];
     return g[n] || (g[n] = JSON.parse(d)), g[n];
   }, S = async (d) => {
-    await P(o)({
+    await I(o)({
       type: "setDemonstratingProofOfPossessionNonce",
       data: { demonstratingProofOfPossessionNonce: d },
       configurationName: n
     });
-  }, E = async () => (await P(o)({
+  }, O = async () => (await I(o)({
     type: "getDemonstratingProofOfPossessionNonce",
     data: null,
     configurationName: n
-  })).demonstratingProofOfPossessionNonce, y = async (d) => {
+  })).demonstratingProofOfPossessionNonce, T = async (d) => {
     const D = JSON.stringify(d);
-    await P(o)({
+    await I(o)({
       type: "setDemonstratingProofOfPossessionJwk",
       data: { demonstratingProofOfPossessionJwkJson: D },
       configurationName: n
     });
-  }, I = async () => {
-    const d = await P(o)({
+  }, N = async () => {
+    const d = await I(o)({
       type: "getDemonstratingProofOfPossessionJwk",
       data: null,
       configurationName: n
     });
     return d.demonstratingProofOfPossessionJwkJson ? JSON.parse(d.demonstratingProofOfPossessionJwkJson) : null;
-  }, x = async (d = !0) => {
-    let v = (await P(o)({
+  }, w = async (d = !0) => {
+    let E = (await I(o)({
       type: "getState",
       data: null,
       configurationName: n
     })).state;
-    return v || (v = sessionStorage[`oidc.state.${n}`], console.warn("state not found in service worker, using sessionStorage"), d && (await F(v), v = await x(!1))), v;
-  }, F = async (d) => (sessionStorage[`oidc.state.${n}`] = d, P(o)({
+    return E || (E = sessionStorage[`oidc.state.${n}`], console.warn("state not found in service worker, using sessionStorage"), d && (await F(E), E = await w(!1))), E;
+  }, F = async (d) => (sessionStorage[`oidc.state.${n}`] = d, I(o)({
     type: "setState",
     data: { state: d },
     configurationName: n
   })), L = async (d = !0) => {
-    let v = (await P(o)({
+    let E = (await I(o)({
       type: "getCodeVerifier",
       data: null,
       configurationName: n
     })).codeVerifier;
-    return v || (v = sessionStorage[`oidc.code_verifier.${n}`], console.warn("codeVerifier not found in service worker, using sessionStorage"), d && (await T(v), v = await L(!1))), v;
-  }, T = async (d) => (sessionStorage[`oidc.code_verifier.${n}`] = d, P(o)({
+    return E || (E = sessionStorage[`oidc.code_verifier.${n}`], console.warn("codeVerifier not found in service worker, using sessionStorage"), d && (await v(E), E = await L(!1))), E;
+  }, v = async (d) => (sessionStorage[`oidc.code_verifier.${n}`] = d, I(o)({
     type: "setCodeVerifier",
     data: { codeVerifier: d },
     configurationName: n
   }));
   return {
-    clearAsync: _,
+    clearAsync: f,
     initAsync: u,
     startKeepAliveServiceWorker: () => l(e.service_worker_keep_alive_path),
     setSessionStateAsync: h,
-    getSessionStateAsync: f,
+    getSessionStateAsync: _,
     setNonceAsync: m,
     getNonceAsync: p,
-    setLoginParams: k,
+    setLoginParams: y,
     getLoginParams: A,
-    getStateAsync: x,
+    getStateAsync: w,
     setStateAsync: F,
     getCodeVerifierAsync: L,
-    setCodeVerifierAsync: T,
+    setCodeVerifierAsync: v,
     setDemonstratingProofOfPossessionNonce: S,
-    getDemonstratingProofOfPossessionNonce: E,
-    setDemonstratingProofOfPossessionJwkAsync: y,
-    getDemonstratingProofOfPossessionJwkAsync: I
+    getDemonstratingProofOfPossessionNonce: O,
+    setDemonstratingProofOfPossessionJwkAsync: T,
+    getDemonstratingProofOfPossessionJwkAsync: N
   };
 }, U = {}, He = (e, n = window.sessionStorage, t) => {
   if (!U[e] && n) {
@@ -558,8 +558,8 @@ const qe = {
     // @ts-ignore
     // JWT "claims" are really a JSON-defined JWS "payload"
     payload: we(JSON.stringify(s))
-  }, a = o.importKeyAlgorithm, c = !0, _ = ["sign"], u = await e.crypto.subtle.importKey("jwk", n, a, c, _), l = Pe(`${r.protected}.${r.payload}`), h = o.signAlgorithm, f = await e.crypto.subtle.sign(h, u, l);
-  return r.signature = fe(new Uint8Array(f)), `${r.protected}.${r.payload}.${r.signature}`;
+  }, a = o.importKeyAlgorithm, c = !0, f = ["sign"], u = await e.crypto.subtle.importKey("jwk", n, a, c, f), l = Pe(`${r.protected}.${r.payload}`), h = o.signAlgorithm, _ = await e.crypto.subtle.sign(h, u, l);
+  return r.signature = fe(new Uint8Array(_)), `${r.protected}.${r.payload}.${r.signature}`;
 }, Xe = { sign: Ye }, ze = (e) => async (n) => {
   const t = n, s = !0, o = ["sign", "verify"], i = await e.crypto.subtle.generateKey(t, s, o);
   return await e.crypto.subtle.exportKey("jwk", i.privateKey);
@@ -652,8 +652,8 @@ const an = (e) => {
   const c = await j(e)(i, {}, o);
   if (c.status !== 200)
     return null;
-  const _ = await c.json();
-  return Ge(r, _, s), new le(_);
+  const f = await c.json();
+  return Ge(r, f, s), new le(f);
 }, j = (e) => async (n, t = {}, s = 1e4, o = 0) => {
   let i;
   try {
@@ -681,10 +681,10 @@ const an = (e) => {
     a[l] === void 0 && (a[l] = h);
   const c = [];
   for (const l in a) {
-    const h = encodeURIComponent(l), f = encodeURIComponent(a[l]);
-    c.push(`${h}=${f}`);
+    const h = encodeURIComponent(l), _ = encodeURIComponent(a[l]);
+    c.push(`${h}=${_}`);
   }
-  const _ = c.join("&");
+  const f = c.join("&");
   return (await j(e)(
     n,
     {
@@ -692,21 +692,21 @@ const an = (e) => {
       headers: {
         "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8"
       },
-      body: _
+      body: f
     },
     r
   )).status !== 200 ? { success: !1 } : {
     success: !0
   };
 }, un = (e) => async (n, t, s, o, i = {}, r, a = 1e4) => {
-  for (const [f, m] of Object.entries(s))
-    t[f] === void 0 && (t[f] = m);
+  for (const [_, m] of Object.entries(s))
+    t[_] === void 0 && (t[_] = m);
   const c = [];
-  for (const f in t) {
-    const m = encodeURIComponent(f), p = encodeURIComponent(t[f]);
+  for (const _ in t) {
+    const m = encodeURIComponent(_), p = encodeURIComponent(t[_]);
     c.push(`${m}=${p}`);
   }
-  const _ = c.join("&"), u = await j(e)(
+  const f = c.join("&"), u = await j(e)(
     n,
     {
       method: "POST",
@@ -714,7 +714,7 @@ const an = (e) => {
         "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
         ...i
       },
-      body: _
+      body: f
     },
     a
   );
@@ -747,8 +747,8 @@ const an = (e) => {
   t = t ? { ...t } : {}, t.code_verifier = await e.getCodeVerifierAsync();
   const r = [];
   for (const l in t) {
-    const h = encodeURIComponent(l), f = encodeURIComponent(t[l]);
-    r.push(`${h}=${f}`);
+    const h = encodeURIComponent(l), _ = encodeURIComponent(t[l]);
+    r.push(`${h}=${_}`);
   }
   const a = r.join("&"), c = await j(fetch)(
     n,
@@ -764,8 +764,8 @@ const an = (e) => {
   );
   if (await Promise.all([e.setCodeVerifierAsync(null), e.setStateAsync(null)]), c.status !== 200)
     return { success: !1, status: c.status };
-  let _ = null;
-  c.headers.has(ee) && (_ = c.headers.get(
+  let f = null;
+  c.headers.has(ee) && (f = c.headers.get(
     ee
   ));
   const u = await c.json();
@@ -774,7 +774,7 @@ const an = (e) => {
     data: {
       state: t.state,
       tokens: _e(u, null, o),
-      demonstratingProofOfPossessionNonce: _
+      demonstratingProofOfPossessionNonce: f
     }
   };
 };
@@ -789,12 +789,16 @@ async function Ae(e, n, t, s = null) {
     t,
     s
   );
-  return await C(e.configuration, e.configurationName) || N(e.configurationName, e.configuration.storage).setTokens(e.tokens), e.tokens ? i : (await e.destroyAsync(r), null);
+  return await x(e.configuration, e.configurationName) || C(
+    e.configurationName,
+    e.configuration.storage,
+    e.configuration.login_state_storage ?? e.configuration.storage
+  ).setTokens(e.tokens), e.tokens ? i : (await e.destroyAsync(r), null);
 }
 async function We(e, n = !1, t = null, s = null) {
   const o = e.configuration, i = `${o.client_id}_${e.configurationName}_${o.authority}`;
   let r;
-  const a = await C(e.configuration, e.configurationName);
+  const a = await x(e.configuration, e.configurationName);
   if (o?.storage === window?.sessionStorage && !a || !navigator.locks)
     r = await Ae(e, n, t, s);
   else {
@@ -803,7 +807,7 @@ async function We(e, n = !1, t = null, s = null) {
       c = await navigator.locks.request(
         i,
         { ifAvailable: !0 },
-        async (_) => _ ? await Ae(e, n, t, s) : (e.publishEvent(W.eventNames.syncTokensAsync_lock_not_available, {
+        async (f) => f ? await Ae(e, n, t, s) : (e.publishEvent(W.eventNames.syncTokensAsync_lock_not_available, {
           lock: "lock not available"
         }), "retry")
       );
@@ -817,7 +821,7 @@ const G = (e, n, t = null, s = null) => {
     const r = { timeLeft: B(o, n) };
     e.publishEvent(W.eventNames.token_timer, r), await We(e, !1, t, s);
   }, 1e3);
-}, O = {
+}, b = {
   FORCE_REFRESH: "FORCE_REFRESH",
   SESSION_LOST: "SESSION_LOST",
   NOT_CONNECTED: "NOT_CONNECTED",
@@ -830,12 +834,12 @@ const G = (e, n, t = null, s = null) => {
 }, de = (e) => async (n, t, s, o = !1) => {
   const i = { nonce: null };
   if (!s)
-    return { tokens: null, status: O.NOT_CONNECTED, nonce: i };
+    return { tokens: null, status: b.NOT_CONNECTED, nonce: i };
   let r = i;
   const a = await e.initAsync(
     n.authority,
     n.authority_configuration
-  ), c = await C(n, t);
+  ), c = await x(n, t);
   if (c) {
     const { status: l, tokens: h } = await c.initAsync(
       a,
@@ -845,42 +849,46 @@ const G = (e, n, t = null, s = null) => {
     if (l === "LOGGED_OUT")
       return {
         tokens: null,
-        status: O.LOGOUT_FROM_ANOTHER_TAB,
+        status: b.LOGOUT_FROM_ANOTHER_TAB,
         nonce: i
       };
     if (l === "SESSIONS_LOST")
-      return { tokens: null, status: O.SESSION_LOST, nonce: i };
+      return { tokens: null, status: b.SESSION_LOST, nonce: i };
     if (!l || !h)
       return {
         tokens: null,
-        status: O.REQUIRE_SYNC_TOKENS,
+        status: b.REQUIRE_SYNC_TOKENS,
         nonce: i
       };
     if (h.issuedAt !== s.issuedAt) {
       const m = B(
         n.refresh_time_before_tokens_expiration_in_second,
         h.expiresAt
-      ) > 0 ? O.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID : O.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID, p = await c.getNonceAsync();
+      ) > 0 ? b.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID : b.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID, p = await c.getNonceAsync();
       return { tokens: h, status: m, nonce: p };
     }
     r = await c.getNonceAsync();
   } else {
-    const l = N(t, n.storage ?? sessionStorage), h = await l.initAsync();
-    let { tokens: f } = h;
+    const l = C(
+      t,
+      n.storage ?? sessionStorage,
+      n.login_state_storage ?? n.storage ?? sessionStorage
+    ), h = await l.initAsync();
+    let { tokens: _ } = h;
     const { status: m } = h;
-    if (f && (f = ue(f, e.tokens, n.token_renew_mode)), f) {
+    if (_ && (_ = ue(_, e.tokens, n.token_renew_mode)), _) {
       if (m === "SESSIONS_LOST")
-        return { tokens: null, status: O.SESSION_LOST, nonce: i };
-      if (f.issuedAt !== s.issuedAt) {
+        return { tokens: null, status: b.SESSION_LOST, nonce: i };
+      if (_.issuedAt !== s.issuedAt) {
         const g = B(
           n.refresh_time_before_tokens_expiration_in_second,
-          f.expiresAt
-        ) > 0 ? O.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID : O.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID, k = await l.getNonceAsync();
-        return { tokens: f, status: g, nonce: k };
+          _.expiresAt
+        ) > 0 ? b.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID : b.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID, y = await l.getNonceAsync();
+        return { tokens: _, status: g, nonce: y };
       }
     } else return {
       tokens: null,
-      status: O.LOGOUT_FROM_ANOTHER_TAB,
+      status: b.LOGOUT_FROM_ANOTHER_TAB,
       nonce: i
     };
     r = await l.getNonceAsync();
@@ -894,40 +902,44 @@ const G = (e, n, t = null, s = null) => {
   if (!navigator.onLine && document.hidden)
     return { tokens: e.tokens, status: "GIVE_UP" };
   let a = 6;
-  const c = o ? 2 : 5, _ = 5;
+  const c = o ? 2 : 5, f = 5;
   for (; !navigator.onLine && a > 0; )
-    await ne({ milliseconds: 1e3 }), a--, e.publishEvent(w.refreshTokensAsync, {
+    await ne({ milliseconds: 1e3 }), a--, e.publishEvent(k.refreshTokensAsync, {
       message: `wait because navigator is offline try ${a}`
     });
   const u = document.hidden, l = u ? t : t + 1, h = u ? s + 1 : s;
-  if (t >= c || s >= _)
-    return n(null), e.publishEvent(w.refreshTokensAsync_error, { message: "refresh token" }), { tokens: null, status: "SESSION_LOST" };
+  if (t >= c || s >= f)
+    return n(null), e.publishEvent(k.refreshTokensAsync_error, { message: "refresh token" }), { tokens: null, status: "SESSION_LOST" };
   i || (i = {});
-  const f = e.configuration, m = (g, k = null, A = null) => he(
+  const _ = e.configuration, m = (g, y = null, A = null) => ge(
     e.configurationName,
     e.configuration,
     e.publishEvent.bind(e)
-  )(g, k, A), p = async () => {
+  )(g, y, A), p = async () => {
     try {
       let g;
-      const k = await C(f, e.configurationName);
-      k ? g = k.getLoginParams() : g = N(e.configurationName, f.storage).getLoginParams();
+      const y = await x(_, e.configurationName);
+      y ? g = y.getLoginParams() : g = C(
+        e.configurationName,
+        _.storage,
+        _.login_state_storage ?? _.storage
+      ).getLoginParams();
       const A = {};
       if (g && g.extras)
-        for (const [E, y] of Object.entries(g.extras))
-          y != null && (A[E] = y);
+        for (const [O, T] of Object.entries(g.extras))
+          T != null && (A[O] = T);
       if (i)
-        for (const [E, y] of Object.entries(i))
-          y != null && (A[E] = y);
+        for (const [O, T] of Object.entries(i))
+          T != null && (A[O] = T);
       A.prompt = "none", r && (A.scope = r);
       const S = await m(A);
-      return S ? S.error ? (n(null), e.publishEvent(w.refreshTokensAsync_error, {
+      return S ? S.error ? (n(null), e.publishEvent(k.refreshTokensAsync_error, {
         message: "refresh token silent"
-      }), { tokens: null, status: "SESSION_LOST" }) : (n(S.tokens), e.publishEvent(W.eventNames.token_renewed, {}), { tokens: S.tokens, status: "LOGGED" }) : (n(null), e.publishEvent(w.refreshTokensAsync_error, {
+      }), { tokens: null, status: "SESSION_LOST" }) : (n(S.tokens), e.publishEvent(W.eventNames.token_renewed, {}), { tokens: S.tokens, status: "LOGGED" }) : (n(null), e.publishEvent(k.refreshTokensAsync_error, {
         message: "refresh token silent not active"
       }), { tokens: null, status: "SESSION_LOST" });
     } catch (g) {
-      return console.error(g), e.publishEvent(w.refreshTokensAsync_silent_error, {
+      return console.error(g), e.publishEvent(k.refreshTokensAsync_silent_error, {
         message: "exceptionSilent",
         exception: g.message
       }), await z(e)(
@@ -941,95 +953,99 @@ const G = (e, n, t = null, s = null) => {
     }
   };
   try {
-    const { status: g, tokens: k, nonce: A } = await de(e)(
-      f,
+    const { status: g, tokens: y, nonce: A } = await de(e)(
+      _,
       e.configurationName,
       e.tokens,
       o
     );
     switch (g) {
-      case O.SESSION_LOST:
-        return n(null), e.publishEvent(w.refreshTokensAsync_error, {
+      case b.SESSION_LOST:
+        return n(null), e.publishEvent(k.refreshTokensAsync_error, {
           message: "refresh token session lost"
         }), { tokens: null, status: "SESSION_LOST" };
-      case O.NOT_CONNECTED:
+      case b.NOT_CONNECTED:
         return n(null), { tokens: null, status: null };
-      case O.TOKENS_VALID:
-        return n(k), { tokens: k, status: "LOGGED_IN" };
-      case O.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID:
-        return n(k), e.publishEvent(W.eventNames.token_renewed, {
+      case b.TOKENS_VALID:
+        return n(y), { tokens: y, status: "LOGGED_IN" };
+      case b.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID:
+        return n(y), e.publishEvent(W.eventNames.token_renewed, {
           reason: "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID"
-        }), { tokens: k, status: "LOGGED_IN" };
-      case O.LOGOUT_FROM_ANOTHER_TAB:
-        return n(null), e.publishEvent(w.logout_from_another_tab, {
+        }), { tokens: y, status: "LOGGED_IN" };
+      case b.LOGOUT_FROM_ANOTHER_TAB:
+        return n(null), e.publishEvent(k.logout_from_another_tab, {
           status: "session syncTokensAsync"
         }), { tokens: null, status: "LOGGED_OUT" };
-      case O.REQUIRE_SYNC_TOKENS:
-        return f.token_automatic_renew_mode == H.AutomaticOnlyWhenFetchExecuted && !o ? (e.publishEvent(w.tokensInvalidAndWaitingActionsToRefresh, {}), { tokens: e.tokens, status: "GIVE_UP" }) : (e.publishEvent(w.refreshTokensAsync_begin, { tryNumber: t }), await p());
+      case b.REQUIRE_SYNC_TOKENS:
+        return _.token_automatic_renew_mode == H.AutomaticOnlyWhenFetchExecuted && !o ? (e.publishEvent(k.tokensInvalidAndWaitingActionsToRefresh, {}), { tokens: e.tokens, status: "GIVE_UP" }) : (e.publishEvent(k.refreshTokensAsync_begin, { tryNumber: t }), await p());
       default: {
-        if (f.token_automatic_renew_mode == H.AutomaticOnlyWhenFetchExecuted && O.FORCE_REFRESH !== g)
-          return e.publishEvent(w.tokensInvalidAndWaitingActionsToRefresh, {}), { tokens: e.tokens, status: "GIVE_UP" };
-        if (e.publishEvent(w.refreshTokensAsync_begin, {
-          refreshToken: k.refreshToken,
+        if (_.token_automatic_renew_mode == H.AutomaticOnlyWhenFetchExecuted && b.FORCE_REFRESH !== g)
+          return e.publishEvent(k.tokensInvalidAndWaitingActionsToRefresh, {}), { tokens: e.tokens, status: "GIVE_UP" };
+        if (e.publishEvent(k.refreshTokensAsync_begin, {
+          refreshToken: y.refreshToken,
           status: g,
           tryNumber: t,
           backgroundTry: s
-        }), !k.refreshToken)
+        }), !y.refreshToken)
           return await p();
-        const S = f.client_id, E = f.redirect_uri, y = f.authority, x = { ...f.token_request_extras ? f.token_request_extras : {} };
-        for (const [L, T] of Object.entries(i))
-          L.endsWith(":token_request") && (x[L.replace(":token_request", "")] = T);
+        const S = _.client_id, O = _.redirect_uri, T = _.authority, w = { ..._.token_request_extras ? _.token_request_extras : {} };
+        for (const [L, v] of Object.entries(i))
+          L.endsWith(":token_request") && (w[L.replace(":token_request", "")] = v);
         return await (async () => {
           const L = {
             client_id: S,
-            redirect_uri: E,
+            redirect_uri: O,
             grant_type: "refresh_token",
-            refresh_token: k.refreshToken
-          }, T = await e.initAsync(
-            y,
-            f.authority_configuration
-          ), d = document.hidden ? 1e4 : 3e4 * 10, D = T.tokenEndpoint, v = {};
-          f.demonstrating_proof_of_possession && (v.DPoP = await e.generateDemonstrationOfProofOfPossessionAsync(
-            k.accessToken,
+            refresh_token: y.refreshToken
+          }, v = await e.initAsync(
+            T,
+            _.authority_configuration
+          ), d = document.hidden ? 1e4 : 3e4 * 10, D = v.tokenEndpoint, E = {};
+          _.demonstrating_proof_of_possession && (E.DPoP = await e.generateDemonstrationOfProofOfPossessionAsync(
+            y.accessToken,
             D,
             "POST"
           ));
-          const b = await un(e.getFetch())(
+          const P = await un(e.getFetch())(
             D,
             L,
-            x,
-            k,
-            v,
-            f.token_renew_mode,
+            w,
+            y,
+            E,
+            _.token_renew_mode,
             d
           );
-          if (b.success) {
+          if (P.success) {
             const { isValid: q, reason: M } = Ee(
-              b.data,
+              P.data,
               A.nonce,
-              T
+              v
             );
             if (!q)
-              return n(null), e.publishEvent(w.refreshTokensAsync_error, {
+              return n(null), e.publishEvent(k.refreshTokensAsync_error, {
                 message: `refresh token return not valid tokens, reason: ${M}`
               }), { tokens: null, status: "SESSION_LOST" };
-            if (n(b.data), b.demonstratingProofOfPossessionNonce) {
-              const Y = await C(f, e.configurationName);
+            if (n(P.data), P.demonstratingProofOfPossessionNonce) {
+              const Y = await x(_, e.configurationName);
               Y ? await Y.setDemonstratingProofOfPossessionNonce(
-                b.demonstratingProofOfPossessionNonce
-              ) : await N(e.configurationName, f.storage).setDemonstratingProofOfPossessionNonce(
-                b.demonstratingProofOfPossessionNonce
+                P.demonstratingProofOfPossessionNonce
+              ) : await C(
+                e.configurationName,
+                _.storage,
+                _.login_state_storage ?? _.storage
+              ).setDemonstratingProofOfPossessionNonce(
+                P.demonstratingProofOfPossessionNonce
               );
             }
-            return e.publishEvent(w.refreshTokensAsync_end, {
-              success: b.success
-            }), e.publishEvent(W.eventNames.token_renewed, { reason: "REFRESH_TOKEN" }), { tokens: b.data, status: "LOGGED_IN" };
+            return e.publishEvent(k.refreshTokensAsync_end, {
+              success: P.success
+            }), e.publishEvent(W.eventNames.token_renewed, { reason: "REFRESH_TOKEN" }), { tokens: P.data, status: "LOGGED_IN" };
           } else
-            return e.publishEvent(w.refreshTokensAsync_silent_error, {
+            return e.publishEvent(k.refreshTokensAsync_silent_error, {
               message: "bad request",
-              tokenResponse: b
-            }), b.status >= 400 && b.status < 500 ? (n(null), e.publishEvent(w.refreshTokensAsync_error, {
-              message: `session lost: ${b.status}`
+              tokenResponse: P
+            }), P.status >= 400 && P.status < 500 ? (n(null), e.publishEvent(k.refreshTokensAsync_error, {
+              message: `session lost: ${P.status}`
             }), { tokens: null, status: "SESSION_LOST" }) : await z(e)(
               n,
               l,
@@ -1042,10 +1058,10 @@ const G = (e, n, t = null, s = null) => {
       }
     }
   } catch (g) {
-    return console.error(g), e.publishEvent(w.refreshTokensAsync_silent_error, {
+    return console.error(g), e.publishEvent(k.refreshTokensAsync_silent_error, {
       message: "exception",
       exception: g.message
-    }), new Promise((k, A) => {
+    }), new Promise((y, A) => {
       setTimeout(() => {
         z(e)(
           n,
@@ -1054,37 +1070,37 @@ const G = (e, n, t = null, s = null) => {
           o,
           i,
           r
-        ).then(k).catch(A);
+        ).then(y).catch(A);
       }, 1e3);
     });
   }
-}, he = (e, n, t) => (s = null, o = null, i = null) => {
+}, ge = (e, n, t) => (s = null, o = null, i = null) => {
   if (!n.silent_redirect_uri || !n.silent_login_uri)
     return Promise.resolve(null);
   try {
-    t(w.silentLoginAsync_begin, {});
+    t(k.silentLoginAsync_begin, {});
     let r = "";
     if (o && (s == null && (s = {}), s.state = o), i != null && (s == null && (s = {}), s.scope = i), s != null)
       for (const [l, h] of Object.entries(s))
         h != null && (r === "" ? r = `?${encodeURIComponent(l)}=${encodeURIComponent(h)}` : r += `&${encodeURIComponent(l)}=${encodeURIComponent(h)}`);
-    const a = n.silent_login_uri + r, c = a.indexOf("/", a.indexOf("//") + 2), _ = a.substring(0, c), u = document.createElement("iframe");
+    const a = n.silent_login_uri + r, c = a.indexOf("/", a.indexOf("//") + 2), f = a.substring(0, c), u = document.createElement("iframe");
     return u.width = "0px", u.height = "0px", u.id = `${e}_oidc_iframe`, u.setAttribute("src", a), u.style.display = "none", document.body.appendChild(u), new Promise((l, h) => {
-      let f = !1;
+      let _ = !1;
       const m = () => {
-        window.removeEventListener("message", p), u.remove(), f = !0;
+        window.removeEventListener("message", p), u.remove(), _ = !0;
       }, p = (g) => {
-        if (g.origin === _ && g.source === u.contentWindow) {
-          const k = `${e}_oidc_tokens:`, A = `${e}_oidc_error:`, S = `${e}_oidc_exception:`, E = g.data;
-          if (E && typeof E == "string" && !f) {
-            if (E.startsWith(k)) {
-              const y = JSON.parse(g.data.replace(k, ""));
-              t(w.silentLoginAsync_end, {}), l(y), m();
-            } else if (E.startsWith(A)) {
-              const y = JSON.parse(g.data.replace(A, ""));
-              t(w.silentLoginAsync_error, y), l({ error: "oidc_" + y.error, tokens: null, sessionState: null }), m();
-            } else if (E.startsWith(S)) {
-              const y = JSON.parse(g.data.replace(S, ""));
-              t(w.silentLoginAsync_error, y), h(new Error(y.error)), m();
+        if (g.origin === f && g.source === u.contentWindow) {
+          const y = `${e}_oidc_tokens:`, A = `${e}_oidc_error:`, S = `${e}_oidc_exception:`, O = g.data;
+          if (O && typeof O == "string" && !_) {
+            if (O.startsWith(y)) {
+              const T = JSON.parse(g.data.replace(y, ""));
+              t(k.silentLoginAsync_end, {}), l(T), m();
+            } else if (O.startsWith(A)) {
+              const T = JSON.parse(g.data.replace(A, ""));
+              t(k.silentLoginAsync_error, T), l({ error: "oidc_" + T.error, tokens: null, sessionState: null }), m();
+            } else if (O.startsWith(S)) {
+              const T = JSON.parse(g.data.replace(S, ""));
+              t(k.silentLoginAsync_error, T), h(new Error(T.error)), m();
             }
           }
         }
@@ -1093,55 +1109,55 @@ const G = (e, n, t = null, s = null) => {
         window.addEventListener("message", p);
         const g = n.silent_login_timeout;
         setTimeout(() => {
-          f || (m(), t(w.silentLoginAsync_error, { reason: "timeout" }), h(new Error("timeout")));
+          _ || (m(), t(k.silentLoginAsync_error, { reason: "timeout" }), h(new Error("timeout")));
         }, g);
       } catch (g) {
-        m(), t(w.silentLoginAsync_error, g), h(g);
+        m(), t(k.silentLoginAsync_error, g), h(g);
       }
     });
   } catch (r) {
-    throw t(w.silentLoginAsync_error, r), r;
+    throw t(k.silentLoginAsync_error, r), r;
   }
 }, dn = (e, n, t, s, o) => (i = null, r = void 0) => {
   i = { ...i };
-  const a = (_, u, l) => he(n, t, s.bind(o))(
-    _,
+  const a = (f, u, l) => ge(n, t, s.bind(o))(
+    f,
     u,
     l
   );
   return (async () => {
     o.timeoutId && $.clearTimeout(o.timeoutId);
-    let _;
-    i && "state" in i && (_ = i.state, delete i.state);
+    let f;
+    i && "state" in i && (f = i.state, delete i.state);
     try {
       const u = t.extras ? { ...t.extras, ...i } : i, l = await a(
         {
           ...u,
           prompt: "none"
         },
-        _,
+        f,
         r
       );
       if (l)
-        return o.tokens = l.tokens, s(w.token_acquired, {}), o.timeoutId = G(o, o.tokens.expiresAt, i, r), {};
+        return o.tokens = l.tokens, s(k.token_acquired, {}), o.timeoutId = G(o, o.tokens.expiresAt, i, r), {};
     } catch (u) {
       return u;
     }
   })();
-}, hn = (e, n, t) => (s, o, i, r = !1) => {
-  const a = (c, _ = void 0, u = void 0) => he(e.configurationName, t, e.publishEvent.bind(e))(
+}, gn = (e, n, t) => (s, o, i, r = !1) => {
+  const a = (c, f = void 0, u = void 0) => ge(e.configurationName, t, e.publishEvent.bind(e))(
     c,
-    _,
+    f,
     u
   );
-  return new Promise((c, _) => {
+  return new Promise((c, f) => {
     if (t.silent_login_uri && t.silent_redirect_uri && t.monitor_session && s && i && !r) {
       const u = () => {
         e.checkSessionIFrame.stop();
         const l = e.tokens;
         if (l === null)
           return;
-        const h = l.idToken, f = l.idTokenPayload;
+        const h = l.idToken, _ = l.idTokenPayload;
         return a({
           prompt: "none",
           id_token_hint: h,
@@ -1150,9 +1166,9 @@ const G = (e, n, t = null, s = null) => {
           if (m.error)
             throw new Error(m.error);
           const p = m.tokens.idTokenPayload;
-          if (f.sub === p.sub) {
+          if (_.sub === p.sub) {
             const g = m.sessionState;
-            e.checkSessionIFrame.start(m.sessionState), f.sid === p.sid ? console.debug(
+            e.checkSessionIFrame.start(m.sessionState), _.sid === p.sid ? console.debug(
               "SessionMonitor._callback: Same sub still logged in at OP, restarting check session iframe; session_state:",
               g
             ) : console.debug(
@@ -1170,7 +1186,7 @@ const G = (e, n, t = null, s = null) => {
             m
           );
           for (const [, p] of Object.entries(n))
-            await p.logoutOtherTabAsync(t.client_id, f.sub);
+            await p.logoutOtherTabAsync(t.client_id, _.sub);
         });
       };
       e.checkSessionIFrame = new $e(
@@ -1180,12 +1196,12 @@ const G = (e, n, t = null, s = null) => {
       ), e.checkSessionIFrame.load().then(() => {
         e.checkSessionIFrame.start(i), c(e.checkSessionIFrame);
       }).catch((l) => {
-        _(l);
+        f(l);
       });
     } else
       c(null);
   });
-}, gn = (e) => !!(e.os === "iOS" && e.osVersion.startsWith("12") || e.os === "Mac OS X" && e.osVersion.startsWith("10_15_6")), yn = (e) => {
+}, hn = (e) => !!(e.os === "iOS" && e.osVersion.startsWith("12") || e.os === "Mac OS X" && e.osVersion.startsWith("10_15_6")), yn = (e) => {
   const n = e.appVersion, t = e.userAgent, s = "-";
   let o = s;
   const i = [
@@ -1268,18 +1284,18 @@ const mn = () => {
   if (e === "chrome" && parseInt(n) <= 70 || e === "opera" && (!n || parseInt(n.split(".")[0]) < 80) || e === "ie")
     return !1;
   const t = yn(navigator);
-  return !gn(t);
+  return !hn(t);
 }, wn = async (e) => {
   let n;
   if (e.tokens != null)
     return !1;
-  e.publishEvent(w.tryKeepExistingSessionAsync_begin, {});
+  e.publishEvent(k.tryKeepExistingSessionAsync_begin, {});
   try {
     const t = e.configuration, s = await e.initAsync(
       t.authority,
       t.authority_configuration
     );
-    if (n = await C(t, e.configurationName), n) {
+    if (n = await x(t, e.configurationName), n) {
       const { tokens: o } = await n.initAsync(
         s,
         "tryKeepExistingSessionAsync",
@@ -1299,20 +1315,24 @@ const mn = () => {
           s.checkSessionIframe,
           t.client_id,
           r
-        ), t.preload_user_info && await e.userInfoAsync(), e.publishEvent(w.tryKeepExistingSessionAsync_end, {
+        ), t.preload_user_info && await e.userInfoAsync(), e.publishEvent(k.tryKeepExistingSessionAsync_end, {
           success: !0,
           message: "tokens inside ServiceWorker are valid"
         }), !0;
       }
-      e.publishEvent(w.tryKeepExistingSessionAsync_end, {
+      e.publishEvent(k.tryKeepExistingSessionAsync_end, {
         success: !1,
         message: "no exiting session found"
       });
     } else {
-      t.service_worker_relative_url && e.publishEvent(w.service_worker_not_supported_by_browser, {
+      t.service_worker_relative_url && e.publishEvent(k.service_worker_not_supported_by_browser, {
         message: "service worker is not supported by this browser"
       });
-      const o = N(e.configurationName, t.storage ?? sessionStorage), { tokens: i } = await o.initAsync();
+      const o = C(
+        e.configurationName,
+        t.storage ?? sessionStorage,
+        t.login_state_storage ?? t.storage ?? sessionStorage
+      ), { tokens: i } = await o.initAsync();
       if (i) {
         e.tokens = ue(i, null, t.token_renew_mode);
         const r = o.getLoginParams();
@@ -1327,19 +1347,19 @@ const mn = () => {
           s.checkSessionIframe,
           t.client_id,
           a
-        ), t.preload_user_info && await e.userInfoAsync(), e.publishEvent(w.tryKeepExistingSessionAsync_end, {
+        ), t.preload_user_info && await e.userInfoAsync(), e.publishEvent(k.tryKeepExistingSessionAsync_end, {
           success: !0,
           message: "tokens inside storage are valid"
         }), !0;
       }
     }
-    return e.publishEvent(w.tryKeepExistingSessionAsync_end, {
+    return e.publishEvent(k.tryKeepExistingSessionAsync_end, {
       success: !1,
       message: n ? "service worker sessions not retrieved" : "session storage sessions not retrieved"
     }), !1;
   } catch (t) {
     return console.error(t), n && await n.clearAsync(), e.publishEvent(
-      w.tryKeepExistingSessionAsync_error,
+      k.tryKeepExistingSessionAsync_error,
       "tokens inside ServiceWorker are invalid"
     ), !1;
   }
@@ -1382,144 +1402,157 @@ const mn = () => {
     t = i[s].split("="), n[decodeURIComponent(t[0])] = decodeURIComponent(t[1]);
   return n;
 }, An = (e, n, t, s, o) => (i = void 0, r = null, a = !1, c = void 0) => {
-  const _ = r;
+  const f = r;
   return r = { ...r }, (async () => {
     const l = i || o.getPath();
-    if ("state" in r || (r.state = re(16)), t(w.loginAsync_begin, {}), r)
+    if ("state" in r || (r.state = re(16)), t(k.loginAsync_begin, {}), r)
       for (const h of Object.keys(r))
         h.endsWith(":token_request") && delete r[h];
     try {
       const h = a ? n.silent_redirect_uri : n.redirect_uri;
       c || (c = n.scope);
-      const f = n.extras ? { ...n.extras, ...r } : r;
-      f.nonce || (f.nonce = re(12));
-      const m = { nonce: f.nonce }, p = await C(n, e), g = await s(
+      const _ = n.extras ? { ...n.extras, ...r } : r;
+      _.nonce || (_.nonce = re(12));
+      const m = { nonce: _.nonce }, p = await x(n, e), g = await s(
         n.authority,
         n.authority_configuration
       );
-      let k;
+      let y;
       if (p)
-        p.setLoginParams({ callbackPath: l, extras: _, scope: c }), await p.initAsync(g, "loginAsync", n), await p.setNonceAsync(m), p.startKeepAliveServiceWorker(), k = p;
+        p.setLoginParams({ callbackPath: l, extras: f, scope: c }), await p.initAsync(g, "loginAsync", n), await p.setNonceAsync(m), p.startKeepAliveServiceWorker(), y = p;
       else {
-        const S = N(e, n.storage ?? sessionStorage);
-        S.setLoginParams({ callbackPath: l, extras: _, scope: c }), await S.setNonceAsync(m), k = S;
+        const S = C(
+          e,
+          n.storage ?? sessionStorage,
+          n.login_state_storage ?? n.storage ?? sessionStorage
+        );
+        S.setLoginParams({ callbackPath: l, extras: f, scope: c }), await S.setNonceAsync(m), y = S;
       }
       const A = {
         client_id: n.client_id,
         redirect_uri: h,
         scope: c,
         response_type: "code",
-        ...f
+        ..._
       };
-      await _n(k, o)(
+      await _n(y, o)(
         g.authorizationEndpoint,
         A
       );
     } catch (h) {
-      throw t(w.loginAsync_error, h), h;
+      throw t(k.loginAsync_error, h), h;
     }
   })();
 }, Sn = (e) => async (n = !1) => {
   try {
-    e.publishEvent(w.loginCallbackAsync_begin, {});
+    e.publishEvent(k.loginCallbackAsync_begin, {});
     const t = e.configuration, s = t.client_id, o = n ? t.silent_redirect_uri : t.redirect_uri, i = t.authority, r = t.token_request_timeout, a = await e.initAsync(
       i,
       t.authority_configuration
-    ), c = e.location.getCurrentHref(), _ = ce(c), u = _.session_state, l = await C(t, e.configurationName);
-    let h, f, m, p;
+    ), c = e.location.getCurrentHref(), f = ce(c), u = f.session_state, l = await x(t, e.configurationName);
+    let h, _, m, p;
     if (l)
-      await l.initAsync(a, "loginCallbackAsync", t), await l.setSessionStateAsync(u), f = await l.getNonceAsync(), m = l.getLoginParams(), p = await l.getStateAsync(), l.startKeepAliveServiceWorker(), h = l;
+      await l.initAsync(a, "loginCallbackAsync", t), await l.setSessionStateAsync(u), _ = await l.getNonceAsync(), m = l.getLoginParams(), p = await l.getStateAsync(), l.startKeepAliveServiceWorker(), h = l;
     else {
-      const T = N(
+      const v = C(
         e.configurationName,
-        t.storage ?? sessionStorage
+        t.storage ?? sessionStorage,
+        t.login_state_storage ?? t.storage ?? sessionStorage
       );
-      await T.setSessionStateAsync(u), f = await T.getNonceAsync(), m = T.getLoginParams(), p = await T.getStateAsync(), h = T;
+      await v.setSessionStateAsync(u), _ = await v.getNonceAsync(), m = v.getLoginParams(), p = await v.getStateAsync(), h = v;
     }
-    if (_.error || _.error_description)
+    if (f.error || f.error_description)
       throw new Error(
-        `Error from OIDC server: ${_.error} - ${_.error_description}`
+        `Error from OIDC server: ${f.error} - ${f.error_description}`
       );
-    if (_.iss && _.iss !== a.issuer)
+    if (f.iss && f.iss !== a.issuer)
       throw console.error(), new Error(
-        `Issuer not valid (expected: ${a.issuer}, received: ${_.iss})`
+        `Issuer not valid (expected: ${a.issuer}, received: ${f.iss})`
       );
-    if (_.state && _.state !== p)
-      throw new Error(`State not valid (expected: ${p}, received: ${_.state})`);
+    if (f.state && f.state !== p)
+      throw new Error(`State not valid (expected: ${p}, received: ${f.state})`);
     const g = {
-      code: _.code,
+      code: f.code,
       grant_type: "authorization_code",
       client_id: t.client_id,
       redirect_uri: o
-    }, k = {};
+    }, y = {};
     if (t.token_request_extras)
-      for (const [T, d] of Object.entries(t.token_request_extras))
-        k[T] = d;
+      for (const [v, d] of Object.entries(t.token_request_extras))
+        y[v] = d;
     if (m?.extras)
-      for (const [T, d] of Object.entries(m.extras))
-        T.endsWith(":token_request") && (k[T.replace(":token_request", "")] = d);
+      for (const [v, d] of Object.entries(m.extras))
+        v.endsWith(":token_request") && (y[v.replace(":token_request", "")] = d);
     const A = a.tokenEndpoint, S = {};
     if (t.demonstrating_proof_of_possession)
       if (l)
         S.DPoP = `DPOP_SECURED_BY_OIDC_SERVICE_WORKER_${e.configurationName}`;
       else {
-        const T = await tn(window)(
+        const v = await tn(window)(
           t.demonstrating_proof_of_possession_configuration.generateKeyAlgorithm
         );
-        await N(e.configurationName, t.storage).setDemonstratingProofOfPossessionJwkAsync(T), S.DPoP = await Ne(window)(
+        await C(
+          e.configurationName,
+          t.storage,
+          t.login_state_storage ?? t.storage
+        ).setDemonstratingProofOfPossessionJwkAsync(v), S.DPoP = await Ne(window)(
           t.demonstrating_proof_of_possession_configuration
-        )(T, "POST", A);
+        )(v, "POST", A);
       }
-    const E = await fn(h)(
+    const O = await fn(h)(
       A,
-      { ...g, ...k },
+      { ...g, ...y },
       S,
       e.configuration.token_renew_mode,
       r
     );
-    if (!E.success)
+    if (!O.success)
       throw new Error("Token request failed");
-    let y;
-    const I = E.data.tokens, x = E.data.demonstratingProofOfPossessionNonce;
-    if (E.data.state !== k.state)
+    let T;
+    const N = O.data.tokens, w = O.data.demonstratingProofOfPossessionNonce;
+    if (O.data.state !== y.state)
       throw new Error("state is not valid");
     const { isValid: F, reason: L } = Ee(
-      I,
-      f.nonce,
+      N,
+      _.nonce,
       a
     );
     if (!F)
       throw new Error(`Tokens are not OpenID valid, reason: ${L}`);
     if (l) {
-      if (I.refreshToken && !I.refreshToken.includes("SECURED_BY_OIDC_SERVICE_WORKER"))
+      if (N.refreshToken && !N.refreshToken.includes("SECURED_BY_OIDC_SERVICE_WORKER"))
         throw new Error("Refresh token should be hidden by service worker");
-      if (x && I?.accessToken.includes("SECURED_BY_OIDC_SERVICE_WORKER"))
+      if (w && N?.accessToken.includes("SECURED_BY_OIDC_SERVICE_WORKER"))
         throw new Error(
           "Demonstration of proof of possession require Access token not hidden by service worker"
         );
     }
     if (l)
-      await l.initAsync(a, "syncTokensAsync", t), y = l.getLoginParams(), x && await l.setDemonstratingProofOfPossessionNonce(
-        x
+      await l.initAsync(a, "syncTokensAsync", t), T = l.getLoginParams(), w && await l.setDemonstratingProofOfPossessionNonce(
+        w
       );
     else {
-      const T = N(e.configurationName, t.storage);
-      y = T.getLoginParams(), x && await T.setDemonstratingProofOfPossessionNonce(x);
+      const v = C(
+        e.configurationName,
+        t.storage,
+        t.login_state_storage ?? t.storage
+      );
+      T = v.getLoginParams(), w && await v.setDemonstratingProofOfPossessionNonce(w);
     }
     return await e.startCheckSessionAsync(
       a.checkSessionIframe,
       s,
       u,
       n
-    ), e.publishEvent(w.loginCallbackAsync_end, {}), {
-      tokens: I,
+    ), e.publishEvent(k.loginCallbackAsync_end, {}), {
+      tokens: N,
       state: "request.state",
-      callbackPath: y.callbackPath,
-      scope: _.scope,
-      extras: y.extras
+      callbackPath: T.callbackPath,
+      scope: f.scope,
+      extras: T.extras
     };
   } catch (t) {
-    throw console.error(t), e.publishEvent(w.loginCallbackAsync_error, t), t;
+    throw console.error(t), e.publishEvent(k.loginCallbackAsync_error, t), t;
   }
 }, Se = {
   access_token: "access_token",
@@ -1545,95 +1578,99 @@ const mn = () => {
   return n;
 }, vn = (e) => async (n) => {
   $.clearTimeout(e.timeoutId), e.timeoutId = null, e.checkSessionIFrame && e.checkSessionIFrame.stop();
-  const t = await C(e.configuration, e.configurationName);
-  t ? await t.clearAsync(n) : await N(e.configurationName, e.configuration.storage).clearAsync(n), e.tokens = null, e.userInfo = null;
+  const t = await x(e.configuration, e.configurationName);
+  t ? await t.clearAsync(n) : await C(
+    e.configurationName,
+    e.configuration.storage,
+    e.configuration.login_state_storage ?? e.configuration.storage
+  ).clearAsync(n), e.tokens = null, e.userInfo = null;
 }, En = (e, n, t, s, o) => async (i = void 0, r = null) => {
   const a = e.configuration, c = await e.initAsync(
     a.authority,
     a.authority_configuration
   );
   i && typeof i != "string" && (i = void 0, s.warn("callbackPathOrUrl path is not a string"));
-  const _ = i ?? o.getPath();
+  const f = i ?? o.getPath();
   let u = !1;
   i && (u = i.includes("https://") || i.includes("http://"));
-  const l = u ? i : o.getOrigin() + _, h = e.tokens ? e.tokens.idToken : "";
+  const l = u ? i : o.getOrigin() + f, h = e.tokens ? e.tokens.idToken : "";
   try {
-    const k = c.revocationEndpoint;
-    if (k) {
+    const y = c.revocationEndpoint;
+    if (y) {
       const A = [], S = e.tokens ? e.tokens.accessToken : null;
       if (S && a.logout_tokens_to_invalidate.includes(Se.access_token)) {
-        const y = se(r, ":revoke_access_token"), I = pe(t)(
-          k,
+        const T = se(r, ":revoke_access_token"), N = pe(t)(
+          y,
           S,
           ae.access_token,
           a.client_id,
-          y
+          T
         );
-        A.push(I);
+        A.push(N);
       }
-      const E = e.tokens ? e.tokens.refreshToken : null;
-      if (E && a.logout_tokens_to_invalidate.includes(Se.refresh_token)) {
-        const y = se(r, ":revoke_refresh_token"), I = pe(t)(
-          k,
-          E,
+      const O = e.tokens ? e.tokens.refreshToken : null;
+      if (O && a.logout_tokens_to_invalidate.includes(Se.refresh_token)) {
+        const T = se(r, ":revoke_refresh_token"), N = pe(t)(
+          y,
+          O,
           ae.refresh_token,
           a.client_id,
-          y
+          T
         );
-        A.push(I);
+        A.push(N);
       }
       A.length > 0 && await Promise.all(A);
     }
-  } catch (k) {
+  } catch (y) {
     s.warn(
       "logoutAsync: error when revoking tokens, if the error persist, you ay configure property logout_tokens_to_invalidate from configuration to avoid this error"
-    ), s.warn(k);
+    ), s.warn(y);
   }
-  const f = e.tokens?.idTokenPayload?.sub ?? null;
+  const _ = e.tokens?.idTokenPayload?.sub ?? null;
   await e.destroyAsync("LOGGED_OUT");
-  for (const [, k] of Object.entries(n))
-    k !== e ? await e.logoutSameTabAsync(e.configuration.client_id, f) : e.publishEvent(w.logout_from_same_tab, {});
+  for (const [, y] of Object.entries(n))
+    y !== e ? await e.logoutSameTabAsync(e.configuration.client_id, _) : e.publishEvent(k.logout_from_same_tab, {});
   const m = se(r, ":oidc");
   if (m && m.no_reload === "true")
     return;
   const g = Tn(r);
   if (c.endSessionEndpoint) {
     "id_token_hint" in g || (g.id_token_hint = h), !("post_logout_redirect_uri" in g) && i !== null && (g.post_logout_redirect_uri = l);
-    let k = "";
+    let y = "";
     for (const [A, S] of Object.entries(g))
-      S != null && (k === "" ? k += "?" : k += "&", k += `${A}=${encodeURIComponent(S)}`);
-    o.open(`${c.endSessionEndpoint}${k}`);
+      S != null && (y === "" ? y += "?" : y += "&", y += `${A}=${encodeURIComponent(S)}`);
+    o.open(`${c.endSessionEndpoint}${y}`);
   } else
     o.reload();
 }, De = (e, n, t = !1) => async (...s) => {
   const [o, i, ...r] = s, a = i ? { ...i } : { method: "GET" };
   let c = new Headers();
   a.headers && (c = a.headers instanceof Headers ? a.headers : new Headers(a.headers));
-  const _ = {
+  const f = {
     getTokens: () => n.tokens,
     configuration: {
       token_automatic_renew_mode: n.configuration.token_automatic_renew_mode,
       refresh_time_before_tokens_expiration_in_second: n.configuration.refresh_time_before_tokens_expiration_in_second
     },
     syncTokensInfoAsync: async () => {
-      const { status: f } = await de(n)(
+      const { status: _ } = await de(n)(
         n.configuration,
         n.configurationName,
         n.tokens,
         !1
       );
-      return f;
+      return _;
     },
     renewTokensAsync: n.renewTokensAsync.bind(n)
-  }, l = (await ve(_))?.tokens?.accessToken;
+  }, l = (await ve(f))?.tokens?.accessToken;
   if (c.has("Accept") || c.set("Accept", "application/json"), l) {
     if (n.configuration.demonstrating_proof_of_possession && t) {
-      const f = await n.generateDemonstrationOfProofOfPossessionAsync(
+      const _ = await n.generateDemonstrationOfProofOfPossessionAsync(
         l,
         o.toString(),
         a.method
       );
-      c.set("Authorization", `DPoP ${l}`), c.set("DPoP", f);
+      c.set("Authorization", `DPoP ${l}`), c.set("DPoP", _);
     } else
       c.set("Authorization", `Bearer ${l}`);
     a.credentials || (a.credentials = "same-origin");
@@ -1753,7 +1790,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
           check_session_iframe: t.check_session_iframe,
           issuer: t.issuer
         });
-      const i = await C(this.configuration, this.configurationName) ? this.configuration.storage || window.sessionStorage : this.configuration.storage;
+      const i = await x(this.configuration, this.configurationName) ? this.configuration.storage || window.sessionStorage : this.configuration.storage;
       return await ln(this.getFetch())(
         n,
         this.configuration.authority_time_cache_wellknowurl_in_second ?? 3600,
@@ -1771,7 +1808,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     }));
   }
   async startCheckSessionAsync(n, t, s, o = !1) {
-    await hn(this, R, this.configuration)(
+    await gn(this, R, this.configuration)(
       n,
       t,
       s,
@@ -1800,7 +1837,11 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
       return this.loginCallbackPromise;
     const t = async () => {
       const s = await Sn(this)(n), o = s.tokens;
-      return this.tokens = o, await C(this.configuration, this.configurationName) || N(this.configurationName, this.configuration.storage).setTokens(o), this.publishEvent(J.eventNames.token_acquired, o), this.configuration.preload_user_info && await this.userInfoAsync(), {
+      return this.tokens = o, await x(this.configuration, this.configurationName) || C(
+        this.configurationName,
+        this.configuration.storage,
+        this.configuration.login_state_storage ?? this.configuration.storage
+      ).setTokens(o), this.publishEvent(J.eventNames.token_acquired, o), this.configuration.preload_user_info && await this.userInfoAsync(), {
         parsedTokens: o,
         state: s.state,
         callbackPath: s.callbackPath,
@@ -1817,12 +1858,16 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
       ath: await xe(n),
       ...o
     };
-    if (await C(i, this.configurationName))
+    if (await x(i, this.configurationName))
       return `DPOP_SECURED_BY_OIDC_SERVICE_WORKER_${this.configurationName}#tabId=${be(this.configurationName)}`;
-    const c = N(this.configurationName, i.storage), _ = await c.getDemonstratingProofOfPossessionJwkAsync(), u = c.getDemonstratingProofOfPossessionNonce();
+    const c = C(
+      this.configurationName,
+      i.storage,
+      i.login_state_storage ?? i.storage
+    ), f = await c.getDemonstratingProofOfPossessionJwkAsync(), u = c.getDemonstratingProofOfPossessionNonce();
     return u && (r.nonce = u), await Ne(window)(
       i.demonstrating_proof_of_possession_configuration
-    )(_, s, t, r);
+    )(f, s, t, r);
   }
   loginCallbackWithAutoTokensRenewAsync() {
     return this.loginCallbackWithAutoTokensRenewPromise !== null ? this.loginCallbackWithAutoTokensRenewPromise : (this.loginCallbackWithAutoTokensRenewPromise = In(this), this.loginCallbackWithAutoTokensRenewPromise.finally(() => {
@@ -1846,10 +1891,10 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     return await vn(this)(n);
   }
   async logoutSameTabAsync(n, t) {
-    this.configuration.monitor_session && this.configuration.client_id === n && t && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === t && (await this.destroyAsync("LOGGED_OUT"), this.publishEvent(w.logout_from_same_tab, { mmessage: "SessionMonitor", sub: t }));
+    this.configuration.monitor_session && this.configuration.client_id === n && t && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === t && (await this.destroyAsync("LOGGED_OUT"), this.publishEvent(k.logout_from_same_tab, { mmessage: "SessionMonitor", sub: t }));
   }
   async logoutOtherTabAsync(n, t) {
-    this.configuration.monitor_session && this.configuration.client_id === n && t && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === t && (await this.destroyAsync("LOGGED_OUT"), this.publishEvent(w.logout_from_another_tab, { message: "SessionMonitor", sub: t }));
+    this.configuration.monitor_session && this.configuration.client_id === n && t && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === t && (await this.destroyAsync("LOGGED_OUT"), this.publishEvent(k.logout_from_another_tab, { message: "SessionMonitor", sub: t }));
   }
   async logoutAsync(n = void 0, t = null) {
     return this.logoutPromise ? this.logoutPromise : (this.logoutPromise = En(
@@ -1863,7 +1908,7 @@ Please checkout that you are using OIDC hook inside a <OidcProvider configuratio
     }));
   }
 };
-J.getOrCreate = (n, t) => (s, o = "default") => Pn(n, t)(s, o), J.eventNames = w;
+J.getOrCreate = (n, t) => (s, o = "default") => Pn(n, t)(s, o), J.eventNames = k;
 let W = J;
 const V = class V {
   constructor(n) {