@axa-fr/oidc-client 7.27.2 → 7.27.4

package/dist/index.js

@@ -1,2060 +1,1752 @@
-class ee {
-  open(n) {
-    window.location.href = n;
-  }
-  reload() {
-    window.location.reload();
-  }
-  getCurrentHref() {
-    return window.location.href;
-  }
-  getPath() {
-    const n = window.location;
-    return n.pathname + (n.search || "") + (n.hash || "");
-  }
-  getOrigin() {
-    return window.origin;
-  }
-}
-const Ae = 2e3, F = console;
-class Fe {
-  constructor(n, t, s, o = Ae, i = !0) {
-    this._callback = n, this._client_id = t, this._url = s, this._interval = o || Ae, this._stopOnError = i;
-    const r = s.indexOf("/", s.indexOf("//") + 2);
-    this._frame_origin = s.substring(0, r), this._frame = window.document.createElement("iframe"), this._frame.style.visibility = "hidden", this._frame.style.position = "absolute", this._frame.style.display = "none", this._frame.width = 0, this._frame.height = 0, this._frame.src = s;
-  }
-  load() {
-    return new Promise((n) => {
-      this._frame.onload = () => {
-        n();
-      }, window.document.body.appendChild(this._frame), this._boundMessageEvent = this._message.bind(this), window.addEventListener("message", this._boundMessageEvent, !1);
-    });
-  }
-  _message(n) {
-    n.origin === this._frame_origin && n.source === this._frame.contentWindow && (n.data === "error" ? (F.error("CheckSessionIFrame: error message from check session op iframe"), this._stopOnError && this.stop()) : n.data === "changed" ? (F.debug(n), F.debug("CheckSessionIFrame: changed message from check session op iframe"), this.stop(), this._callback()) : F.debug("CheckSessionIFrame: " + n.data + " message from check session op iframe"));
-  }
-  start(n) {
-    F.debug("CheckSessionIFrame.start :" + n), this.stop();
-    const t = () => {
-      this._frame.contentWindow.postMessage(
-        this._client_id + " " + n,
-        this._frame_origin
-      );
-    };
-    t(), this._timer = window.setInterval(t, this._interval);
-  }
-  stop() {
-    this._timer && (F.debug("CheckSessionIFrame.stop"), window.clearInterval(this._timer), this._timer = null);
-  }
-}
-const k = {
-  service_worker_not_supported_by_browser: "service_worker_not_supported_by_browser",
-  token_acquired: "token_acquired",
-  logout_from_another_tab: "logout_from_another_tab",
-  logout_from_same_tab: "logout_from_same_tab",
-  token_renewed: "token_renewed",
-  token_timer: "token_timer",
-  loginAsync_begin: "loginAsync_begin",
-  loginAsync_error: "loginAsync_error",
-  loginCallbackAsync_begin: "loginCallbackAsync_begin",
-  loginCallbackAsync_end: "loginCallbackAsync_end",
-  loginCallbackAsync_error: "loginCallbackAsync_error",
-  refreshTokensAsync_begin: "refreshTokensAsync_begin",
-  refreshTokensAsync: "refreshTokensAsync",
-  refreshTokensAsync_end: "refreshTokensAsync_end",
-  refreshTokensAsync_error: "refreshTokensAsync_error",
-  refreshTokensAsync_silent_error: "refreshTokensAsync_silent_error",
-  tryKeepExistingSessionAsync_begin: "tryKeepExistingSessionAsync_begin",
-  tryKeepExistingSessionAsync_end: "tryKeepExistingSessionAsync_end",
-  tryKeepExistingSessionAsync_error: "tryKeepExistingSessionAsync_error",
-  silentLoginAsync_begin: "silentLoginAsync_begin",
-  silentLoginAsync: "silentLoginAsync",
-  silentLoginAsync_end: "silentLoginAsync_end",
-  silentLoginAsync_error: "silentLoginAsync_error",
-  syncTokensAsync_begin: "syncTokensAsync_begin",
-  syncTokensAsync_lock_not_available: "syncTokensAsync_lock_not_available",
-  syncTokensAsync_end: "syncTokensAsync_end",
-  syncTokensAsync_error: "syncTokensAsync_error",
-  tokensInvalidAndWaitingActionsToRefresh: "tokensInvalidAndWaitingActionsToRefresh"
-}, x = (e, n = sessionStorage, t) => {
-  const s = t ?? n, o = (w) => (n[`oidc.${e}`] = JSON.stringify({ tokens: null, status: w }), delete n[`oidc.${e}.userInfo`], t && t !== n && (delete s[`oidc.login.${e}`], delete s[`oidc.state.${e}`], delete s[`oidc.code_verifier.${e}`], delete s[`oidc.nonce.${e}`]), Promise.resolve()), i = async () => {
-    if (!n[`oidc.${e}`])
-      return n[`oidc.${e}`] = JSON.stringify({ tokens: null, status: null }), { tokens: null, status: null };
-    const w = JSON.parse(n[`oidc.${e}`]);
-    return Promise.resolve({ tokens: w.tokens, status: w.status });
-  }, r = (w) => {
-    n[`oidc.${e}`] = JSON.stringify({ tokens: w });
-  }, a = async (w) => {
-    n[`oidc.session_state.${e}`] = w;
-  }, c = async () => n[`oidc.session_state.${e}`], f = (w) => {
-    s[`oidc.nonce.${e}`] = w.nonce;
-  }, u = (w) => {
-    n[`oidc.jwk.${e}`] = JSON.stringify(w);
-  }, l = () => JSON.parse(n[`oidc.jwk.${e}`]), h = async () => ({ nonce: s[`oidc.nonce.${e}`] }), _ = async (w) => {
-    n[`oidc.dpop_nonce.${e}`] = w;
-  }, m = () => n[`oidc.dpop_nonce.${e}`], p = () => n[`oidc.${e}`] ? JSON.stringify({ tokens: JSON.parse(n[`oidc.${e}`]).tokens }) : null, g = {};
-  return {
-    clearAsync: o,
-    initAsync: i,
-    setTokens: r,
-    getTokens: p,
-    setSessionStateAsync: a,
-    getSessionStateAsync: c,
-    setNonceAsync: f,
-    getNonceAsync: h,
-    setLoginParams: (w) => {
-      g[e] = w, s[`oidc.login.${e}`] = JSON.stringify(w);
-    },
-    getLoginParams: () => {
-      const w = s[`oidc.login.${e}`];
-      return w ? (g[e] || (g[e] = JSON.parse(w)), g[e]) : (console.warn(
-        `storage[oidc.login.${e}] is empty, you should have an bad OIDC or code configuration somewhere.`
-      ), null);
-    },
-    getStateAsync: async () => s[`oidc.state.${e}`],
-    setStateAsync: async (w) => {
-      s[`oidc.state.${e}`] = w;
-    },
-    getCodeVerifierAsync: async () => s[`oidc.code_verifier.${e}`],
-    setCodeVerifierAsync: async (w) => {
-      s[`oidc.code_verifier.${e}`] = w;
-    },
-    setDemonstratingProofOfPossessionNonce: _,
-    getDemonstratingProofOfPossessionNonce: m,
-    setDemonstratingProofOfPossessionJwkAsync: u,
-    getDemonstratingProofOfPossessionJwkAsync: l
-  };
-};
-var q = /* @__PURE__ */ ((e) => (e.AutomaticBeforeTokenExpiration = "AutomaticBeforeTokensExpiration", e.AutomaticOnlyWhenFetchExecuted = "AutomaticOnlyWhenFetchExecuted", e))(q || {});
-const Me = (e) => decodeURIComponent(
-  Array.prototype.map.call(atob(e), (n) => "%" + ("00" + n.charCodeAt(0).toString(16)).slice(-2)).join("")
-), Be = (e) => JSON.parse(Me(e.replaceAll(/-/g, "+").replaceAll(/_/g, "/"))), Se = (e) => {
-  try {
-    return e && Je(e, ".") === 2 ? Be(e.split(".")[1]) : null;
-  } catch (n) {
-    console.warn(n);
-  }
-  return null;
-}, Je = (e, n) => e.split(n).length - 1, re = {
-  access_token_or_id_token_invalid: "access_token_or_id_token_invalid",
-  access_token_invalid: "access_token_invalid",
-  id_token_invalid: "id_token_invalid"
+//#region src/location.ts
+var e = class {
+	open(e) {
+		window.location.href = e;
+	}
+	reload() {
+		window.location.reload();
+	}
+	getCurrentHref() {
+		return window.location.href;
+	}
+	getPath() {
+		let e = window.location;
+		return e.pathname + (e.search || "") + (e.hash || "");
+	}
+	getOrigin() {
+		return window.origin;
+	}
+}, t = 2e3, n = console, r = class {
+	constructor(e, n, r, i = t, a = !0) {
+		this._callback = e, this._client_id = n, this._url = r, this._interval = i || t, this._stopOnError = a;
+		let o = r.indexOf("/", r.indexOf("//") + 2);
+		this._frame_origin = r.substring(0, o), this._frame = window.document.createElement("iframe"), this._frame.style.visibility = "hidden", this._frame.style.position = "absolute", this._frame.style.display = "none", this._frame.width = 0, this._frame.height = 0, this._frame.src = r;
+	}
+	load() {
+		return new Promise((e) => {
+			this._frame.onload = () => {
+				e();
+			}, window.document.body.appendChild(this._frame), this._boundMessageEvent = this._message.bind(this), window.addEventListener("message", this._boundMessageEvent, !1);
+		});
+	}
+	_message(e) {
+		e.origin === this._frame_origin && e.source === this._frame.contentWindow && (e.data === "error" ? (n.error("CheckSessionIFrame: error message from check session op iframe"), this._stopOnError && this.stop()) : e.data === "changed" ? (n.debug(e), n.debug("CheckSessionIFrame: changed message from check session op iframe"), this.stop(), this._callback()) : n.debug("CheckSessionIFrame: " + e.data + " message from check session op iframe"));
+	}
+	start(e) {
+		n.debug("CheckSessionIFrame.start :" + e), this.stop();
+		let t = () => {
+			this._frame.contentWindow.postMessage(this._client_id + " " + e, this._frame_origin);
+		};
+		t(), this._timer = window.setInterval(t, this._interval);
+	}
+	stop() {
+		this._timer &&= (n.debug("CheckSessionIFrame.stop"), window.clearInterval(this._timer), null);
+	}
+}, i = {
+	service_worker_not_supported_by_browser: "service_worker_not_supported_by_browser",
+	token_acquired: "token_acquired",
+	logout_from_another_tab: "logout_from_another_tab",
+	logout_from_same_tab: "logout_from_same_tab",
+	token_renewed: "token_renewed",
+	token_timer: "token_timer",
+	loginAsync_begin: "loginAsync_begin",
+	loginAsync_error: "loginAsync_error",
+	loginCallbackAsync_begin: "loginCallbackAsync_begin",
+	loginCallbackAsync_end: "loginCallbackAsync_end",
+	loginCallbackAsync_error: "loginCallbackAsync_error",
+	refreshTokensAsync_begin: "refreshTokensAsync_begin",
+	refreshTokensAsync: "refreshTokensAsync",
+	refreshTokensAsync_end: "refreshTokensAsync_end",
+	refreshTokensAsync_error: "refreshTokensAsync_error",
+	refreshTokensAsync_silent_error: "refreshTokensAsync_silent_error",
+	tryKeepExistingSessionAsync_begin: "tryKeepExistingSessionAsync_begin",
+	tryKeepExistingSessionAsync_end: "tryKeepExistingSessionAsync_end",
+	tryKeepExistingSessionAsync_error: "tryKeepExistingSessionAsync_error",
+	silentLoginAsync_begin: "silentLoginAsync_begin",
+	silentLoginAsync: "silentLoginAsync",
+	silentLoginAsync_end: "silentLoginAsync_end",
+	silentLoginAsync_error: "silentLoginAsync_error",
+	syncTokensAsync_begin: "syncTokensAsync_begin",
+	syncTokensAsync_lock_not_available: "syncTokensAsync_lock_not_available",
+	syncTokensAsync_end: "syncTokensAsync_end",
+	syncTokensAsync_error: "syncTokensAsync_error",
+	tokensInvalidAndWaitingActionsToRefresh: "tokensInvalidAndWaitingActionsToRefresh"
+}, a = (e, t = sessionStorage, n) => {
+	let r = n ?? t, i = (i) => (t[`oidc.${e}`] = JSON.stringify({
+		tokens: null,
+		status: i
+	}), delete t[`oidc.${e}.userInfo`], n && n !== t && (delete r[`oidc.login.${e}`], delete r[`oidc.state.${e}`], delete r[`oidc.code_verifier.${e}`], delete r[`oidc.nonce.${e}`]), Promise.resolve()), a = async () => {
+		if (!t[`oidc.${e}`]) return t[`oidc.${e}`] = JSON.stringify({
+			tokens: null,
+			status: null
+		}), {
+			tokens: null,
+			status: null
+		};
+		let n = JSON.parse(t[`oidc.${e}`]);
+		return Promise.resolve({
+			tokens: n.tokens,
+			status: n.status
+		});
+	}, o = (n) => {
+		t[`oidc.${e}`] = JSON.stringify({ tokens: n });
+	}, s = async (n) => {
+		t[`oidc.session_state.${e}`] = n;
+	}, c = async () => t[`oidc.session_state.${e}`], l = (t) => {
+		r[`oidc.nonce.${e}`] = t.nonce;
+	}, u = (n) => {
+		t[`oidc.jwk.${e}`] = JSON.stringify(n);
+	}, d = () => JSON.parse(t[`oidc.jwk.${e}`]), f = async () => ({ nonce: r[`oidc.nonce.${e}`] }), p = async (n) => {
+		t[`oidc.dpop_nonce.${e}`] = n;
+	}, m = () => t[`oidc.dpop_nonce.${e}`], h = () => t[`oidc.${e}`] ? JSON.stringify({ tokens: JSON.parse(t[`oidc.${e}`]).tokens }) : null, g = {};
+	return {
+		clearAsync: i,
+		initAsync: a,
+		setTokens: o,
+		getTokens: h,
+		setSessionStateAsync: s,
+		getSessionStateAsync: c,
+		setNonceAsync: l,
+		getNonceAsync: f,
+		setLoginParams: (t) => {
+			g[e] = t, r[`oidc.login.${e}`] = JSON.stringify(t);
+		},
+		getLoginParams: () => {
+			let t = r[`oidc.login.${e}`];
+			return t ? (g[e] || (g[e] = JSON.parse(t)), g[e]) : (console.warn(`storage[oidc.login.${e}] is empty, you should have an bad OIDC or code configuration somewhere.`), null);
+		},
+		getStateAsync: async () => r[`oidc.state.${e}`],
+		setStateAsync: async (t) => {
+			r[`oidc.state.${e}`] = t;
+		},
+		getCodeVerifierAsync: async () => r[`oidc.code_verifier.${e}`],
+		setCodeVerifierAsync: async (t) => {
+			r[`oidc.code_verifier.${e}`] = t;
+		},
+		setDemonstratingProofOfPossessionNonce: p,
+		getDemonstratingProofOfPossessionNonce: m,
+		setDemonstratingProofOfPossessionJwkAsync: u,
+		getDemonstratingProofOfPossessionJwkAsync: d
+	};
+}, o = /* @__PURE__ */ function(e) {
+	return e.AutomaticBeforeTokenExpiration = "AutomaticBeforeTokensExpiration", e.AutomaticOnlyWhenFetchExecuted = "AutomaticOnlyWhenFetchExecuted", e;
+}({}), s = (e) => decodeURIComponent(Array.prototype.map.call(atob(e), (e) => "%" + ("00" + e.charCodeAt(0).toString(16)).slice(-2)).join("")), c = (e) => JSON.parse(s(e.replaceAll(/-/g, "+").replaceAll(/_/g, "/"))), l = (e) => {
+	try {
+		return e && u(e, ".") === 2 ? c(e.split(".")[1]) : null;
+	} catch (e) {
+		console.warn(e);
+	}
+	return null;
+}, u = (e, t) => e.split(t).length - 1, d = {
+	access_token_or_id_token_invalid: "access_token_or_id_token_invalid",
+	access_token_invalid: "access_token_invalid",
+	id_token_invalid: "id_token_invalid"
 };
-function He(e, n, t) {
-  if (e.issuedAt) {
-    if (typeof e.issuedAt == "string")
-      return parseInt(e.issuedAt, 10);
-  } else return n && n.iat ? n.iat : t && t.iat ? t.iat : (/* @__PURE__ */ new Date()).getTime() / 1e3;
-  return e.issuedAt;
+function f(e, t, n) {
+	return e.issuedAt ? typeof e.issuedAt == "string" ? parseInt(e.issuedAt, 10) : e.issuedAt : t && t.iat ? t.iat : n && n.iat ? n.iat : (/* @__PURE__ */ new Date()).getTime() / 1e3;
 }
-const de = (e, n = null, t) => {
-  if (!e)
-    return null;
-  let s;
-  const o = typeof e.expiresIn == "string" ? parseInt(e.expiresIn, 10) : e.expiresIn;
-  e.accessTokenPayload !== void 0 ? s = e.accessTokenPayload : s = Se(e.accessToken);
-  let i;
-  n != null && "idToken" in n && !("idToken" in e) ? i = n.idToken : i = e.idToken;
-  const r = e.idTokenPayload ? e.idTokenPayload : Se(i), a = r && r.exp ? r.exp : Number.MAX_VALUE, c = s && s.exp ? s.exp : e.issuedAt + o;
-  e.issuedAt = He(e, s, r);
-  let f;
-  e.expiresAt ? f = e.expiresAt : t === re.access_token_invalid ? f = c : t === re.id_token_invalid ? f = a : f = a < c ? a : c;
-  const u = {
-    ...e,
-    idTokenPayload: r,
-    accessTokenPayload: s,
-    expiresAt: f,
-    idToken: i
-  };
-  if (n != null && "refreshToken" in n && !("refreshToken" in e)) {
-    const l = n.refreshToken;
-    return { ...u, refreshToken: l };
-  }
-  return u;
-}, ge = (e, n, t) => {
-  if (!e)
-    return null;
-  if (!e.issued_at) {
-    const o = (/* @__PURE__ */ new Date()).getTime() / 1e3;
-    e.issued_at = o;
-  }
-  const s = {
-    accessToken: e.access_token,
-    expiresIn: e.expires_in,
-    idToken: e.id_token,
-    scope: e.scope,
-    tokenType: e.token_type,
-    issuedAt: e.issued_at
-  };
-  return "refresh_token" in e && (s.refreshToken = e.refresh_token), e.accessTokenPayload !== void 0 && (s.accessTokenPayload = e.accessTokenPayload), e.idTokenPayload !== void 0 && (s.idTokenPayload = e.idTokenPayload), de(s, n, t);
-}, G = (e, n) => {
-  const t = (/* @__PURE__ */ new Date()).getTime() / 1e3, s = n - t;
-  return Math.round(s - e);
-}, Ge = (e, n = 0) => e ? G(n, e.expiresAt) > 0 : !1, Ce = async (e, n = 200, t = 50) => {
-  let s = t, o = await e.syncTokensInfoAsync();
-  for (; [
-    P.REQUIRE_SYNC_TOKENS,
-    P.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID,
-    P.TOKENS_INVALID
-  ].includes(o) && s > 0; ) {
-    if (e.configuration.token_automatic_renew_mode == q.AutomaticOnlyWhenFetchExecuted) {
-      await e.renewTokensAsync({});
-      break;
-    } else
-      await Y({ milliseconds: n });
-    s = s - 1, o = await e.syncTokensInfoAsync();
-  }
-  return {
-    isTokensValid: Ge(e.getTokens()),
-    tokens: e.getTokens(),
-    numberWaited: s - t
-  };
-}, Ne = (e, n, t) => {
-  if (e.idTokenPayload) {
-    const s = e.idTokenPayload;
-    if (t.issuer !== s.iss)
-      return {
-        isValid: !1,
-        reason: `Issuer does not match (oidcServerConfiguration issuer) ${t.issuer} !== (idTokenPayload issuer) ${s.iss}`
-      };
-    const o = (/* @__PURE__ */ new Date()).getTime() / 1e3;
-    if (s.exp && s.exp < o)
-      return {
-        isValid: !1,
-        reason: `Token expired (idTokenPayload exp) ${s.exp} < (currentTimeUnixSecond) ${o}`
-      };
-    const i = 3600 * 24 * 7;
-    if (s.iat && s.iat + i < o)
-      return {
-        isValid: !1,
-        reason: `Token is used from too long time (idTokenPayload iat + timeInSevenDays) ${s.iat + i} < (currentTimeUnixSecond) ${o}`
-      };
-    if (s.nonce && s.nonce !== n)
-      return {
-        isValid: !1,
-        reason: `Nonce does not match (idTokenPayload nonce) ${s.nonce} !== (nonce) ${n}`
-      };
-  }
-  return { isValid: !0, reason: "" };
-}, R = (function() {
-  const e = typeof window > "u" ? global : window;
-  return {
-    setTimeout: setTimeout.bind(e),
-    clearTimeout: clearTimeout.bind(e),
-    setInterval: setInterval.bind(e),
-    clearInterval: clearInterval.bind(e)
-  };
-})(), se = "7.27.2";
-let Te = null, ne;
-const Y = ({ milliseconds: e }) => new Promise((n) => R.setTimeout(n, e)), xe = (e = "/") => {
-  try {
-    ne = new AbortController(), fetch(
-      `${e}OidcKeepAliveServiceWorker.json?minSleepSeconds=150`,
-      { signal: ne.signal }
-    ).catch((s) => {
-      console.log(s);
-    }), Y({ milliseconds: 150 * 1e3 }).then(
-      () => xe(e)
-    );
-  } catch (n) {
-    console.log(n);
-  }
-}, Q = () => {
-  ne && ne.abort();
-}, he = (e) => {
-  const n = `oidc.tabId.${e}`, t = sessionStorage.getItem(n);
-  if (t) return t;
-  const s = globalThis.crypto.randomUUID();
-  return sessionStorage.setItem(n, s), s;
-}, je = 5e3, qe = (e) => navigator.serviceWorker.controller ?? e.active ?? e.waiting ?? e.installing ?? null, I = (e, n) => (t) => {
-  const s = n?.timeoutMs ?? je;
-  return new Promise((o, i) => {
-    const r = qe(e);
-    if (!r) {
-      i(
-        new Error(
-          "Service worker target not available (controller/active/waiting/installing missing)"
-        )
-      );
-      return;
-    }
-    const a = new MessageChannel();
-    let c = null;
-    const f = () => {
-      try {
-        c != null && (R.clearTimeout(c), c = null), a.port1.onmessage = null, a.port1.close(), a.port2.close();
-      } catch (u) {
-        console.error(u);
-      }
-    };
-    c = R.setTimeout(() => {
-      f(), i(
-        new Error(`Service worker did not respond within ${s}ms (type=${t?.type})`)
-      );
-    }, s), a.port1.onmessage = (u) => {
-      f(), u?.data?.error ? i(u.data.error) : o(u.data);
-    };
-    try {
-      const u = t?.configurationName;
-      r.postMessage({ ...t, tabId: he(u ?? "default") }, [
-        a.port2
-      ]);
-    } catch (u) {
-      f(), i(u);
-    }
-  });
-}, Ye = async (e) => navigator.serviceWorker.controller ? navigator.serviceWorker.controller : new Promise((n) => {
-  let t = !1;
-  const s = () => {
-    t || (t = !0, navigator.serviceWorker.removeEventListener("controllerchange", s), n(navigator.serviceWorker.controller ?? null));
-  };
-  navigator.serviceWorker.addEventListener("controllerchange", s), R.setTimeout(() => {
-    t || (t = !0, navigator.serviceWorker.removeEventListener("controllerchange", s), n(navigator.serviceWorker.controller ?? null));
-  }, e);
-});
-let ve = !1, M = !1;
-const ye = "oidc.sw.controllerchange_reload_count", oe = 3, ae = () => {
-  try {
-    return parseInt(sessionStorage.getItem(ye) ?? "0", 10);
-  } catch {
-    return 0;
-  }
-}, Xe = () => {
-  const e = ae() + 1;
-  try {
-    sessionStorage.setItem(ye, String(e));
-  } catch {
-  }
-  return e;
-}, ze = () => {
-  try {
-    sessionStorage.removeItem(ye);
-  } catch {
-  }
-}, W = async (e, n) => {
-  const t = e.service_worker_relative_url;
-  if (typeof window > "u" || typeof navigator > "u" || !navigator.serviceWorker || !t || e.service_worker_activate() === !1)
-    return null;
-  const s = `${t}?v=${se}`;
-  let o = null;
-  e.service_worker_register ? o = await e.service_worker_register(t) : o = await navigator.serviceWorker.register(s, {
-    updateViaCache: "none"
-  });
-  const i = `oidc.sw.version_mismatch_reload.${n}`, r = async (d) => {
-    Q(), console.log("New SW waiting – SKIP_WAITING");
-    try {
-      await new Promise((N, S) => {
-        const b = new MessageChannel();
-        let K = null;
-        const U = () => {
-          try {
-            K != null && (R.clearTimeout(K), K = null), b.port1.onmessage = null, b.port1.close(), b.port2.close();
-          } catch (L) {
-            console.error(L);
-          }
-        };
-        K = R.setTimeout(() => {
-          U(), S(new Error("SKIP_WAITING did not respond within 8000ms"));
-        }, 8e3), b.port1.onmessage = (L) => {
-          U(), L?.data?.error ? S(L.data.error) : N();
-        };
-        try {
-          d.postMessage(
-            {
-              type: "SKIP_WAITING",
-              configurationName: n,
-              data: null,
-              tabId: he(n ?? "default")
-            },
-            [b.port2]
-          );
-        } catch (L) {
-          U(), S(L);
-        }
-      });
-    } catch (N) {
-      console.warn("SKIP_WAITING failed", N);
-    }
-  }, a = async () => {
-    const d = o.waiting;
-    d ? await r(d) : console.warn("sendSkipWaiting called but no waiting service worker found");
-  }, c = (d) => {
-    Q(), d.addEventListener("statechange", async () => {
-      if (d.state === "installed" && navigator.serviceWorker.controller) {
-        if (ae() >= oe) {
-          console.warn(
-            "SW trackInstallingWorker: skipping SKIP_WAITING because the reload budget is exhausted"
-          );
-          return;
-        }
-        await r(d);
-      }
-    });
-  };
-  o.addEventListener("updatefound", () => {
-    const d = o.installing;
-    d && c(d);
-  }), o.installing ? c(o.installing) : o.waiting && navigator.serviceWorker.controller && (ae() < oe ? a() : console.warn(
-    "SW: a waiting worker exists but reload budget is exhausted – skipping activation"
-  )), o.update().catch((d) => {
-    console.error(d);
-  });
-  try {
-    await navigator.serviceWorker.ready, navigator.serviceWorker.controller || (await I(o, { timeoutMs: 8e3 })({
-      type: "claim",
-      configurationName: n,
-      data: null
-    }), await Ye(2e3));
-  } catch (d) {
-    return console.warn(`Failed init ServiceWorker ${d?.toString?.() ?? String(d)}`), null;
-  }
-  ve || (ve = !0, navigator.serviceWorker.addEventListener("controllerchange", () => {
-    if (M)
-      return;
-    const d = Xe();
-    if (d > oe) {
-      console.warn(
-        `SW controllerchange: reload budget exhausted (${d - 1} reloads). Skipping reload to avoid infinite loop.`
-      );
-      return;
-    }
-    M = !0, console.log("SW controller changed – reloading page"), Q(), window.location.reload();
-  }));
-  const f = async (d) => I(o)({ type: "clear", data: { status: d }, configurationName: n }), u = async (d, N, S) => {
-    const b = await I(o)({
-      type: "init",
-      data: {
-        oidcServerConfiguration: d,
-        where: N,
-        oidcConfiguration: {
-          token_renew_mode: S.token_renew_mode,
-          service_worker_convert_all_requests_to_cors: S.service_worker_convert_all_requests_to_cors
-        }
-      },
-      configurationName: n
-    }), K = b.version;
-    if (K !== se) {
-      console.warn(
-        `Service worker ${K} version mismatch with js client version ${se}, unregistering and reloading`
-      );
-      const U = parseInt(sessionStorage.getItem(i) ?? "0", 10);
-      if (U < 3) {
-        if (sessionStorage.setItem(i, String(U + 1)), o.waiting)
-          return await a(), await Y({ milliseconds: 500 }), M || (M = !0, window.location.reload()), new Promise(() => {
-          });
-        {
-          Q();
-          try {
-            await o.update();
-          } catch (pe) {
-            console.error(pe);
-          }
-          const L = await o.unregister();
-          return console.log(`Service worker unregistering ${L}`), await Y({ milliseconds: 500 }), M || (M = !0, window.location.reload()), new Promise(() => {
-          });
-        }
-      } else
-        console.error(
-          `Service worker version mismatch persists after ${U} attempt(s). Continuing with mismatched version.`
-        );
-    } else
-      sessionStorage.removeItem(i), ze();
-    return {
-      tokens: ge(b.tokens, null, S.token_renew_mode),
-      status: b.status
-    };
-  }, l = (d = "/") => {
-    Te == null && (Te = "not_null", xe(d));
-  }, h = (d) => I(o)({
-    type: "setSessionState",
-    data: { sessionState: d },
-    configurationName: n
-  }), _ = async () => (await I(o)({
-    type: "getSessionState",
-    data: null,
-    configurationName: n
-  })).sessionState, m = (d) => (sessionStorage[`oidc.nonce.${n}`] = d.nonce, I(o)({
-    type: "setNonce",
-    data: { nonce: d },
-    configurationName: n
-  })), p = async (d = !0) => {
-    let S = (await I(o)({
-      type: "getNonce",
-      data: null,
-      configurationName: n
-    })).nonce;
-    return S || (S = sessionStorage[`oidc.nonce.${n}`], console.warn("nonce not found in service worker, using sessionStorage"), d && (await m(S), S = (await p(!1)).nonce)), { nonce: S };
-  }, g = {}, y = (d) => {
-    g[n] = d, localStorage[`oidc.login.${n}`] = JSON.stringify(d);
-  }, A = () => {
-    const d = localStorage[`oidc.login.${n}`];
-    return g[n] || (g[n] = JSON.parse(d)), g[n];
-  }, T = async (d) => {
-    await I(o)({
-      type: "setDemonstratingProofOfPossessionNonce",
-      data: { demonstratingProofOfPossessionNonce: d },
-      configurationName: n
-    });
-  }, O = async () => (await I(o)({
-    type: "getDemonstratingProofOfPossessionNonce",
-    data: null,
-    configurationName: n
-  })).demonstratingProofOfPossessionNonce, v = async (d) => {
-    const N = JSON.stringify(d);
-    await I(o)({
-      type: "setDemonstratingProofOfPossessionJwk",
-      data: { demonstratingProofOfPossessionJwkJson: N },
-      configurationName: n
-    });
-  }, C = async () => {
-    const d = await I(o)({
-      type: "getDemonstratingProofOfPossessionJwk",
-      data: null,
-      configurationName: n
-    });
-    return d.demonstratingProofOfPossessionJwkJson ? JSON.parse(d.demonstratingProofOfPossessionJwkJson) : null;
-  }, w = async (d = !0) => {
-    let S = (await I(o)({
-      type: "getState",
-      data: null,
-      configurationName: n
-    })).state;
-    return S || (S = sessionStorage[`oidc.state.${n}`], console.warn("state not found in service worker, using sessionStorage"), d && (await H(S), S = await w(!1))), S;
-  }, H = async (d) => (sessionStorage[`oidc.state.${n}`] = d, I(o)({
-    type: "setState",
-    data: { state: d },
-    configurationName: n
-  })), $ = async (d = !0) => {
-    let S = (await I(o)({
-      type: "getCodeVerifier",
-      data: null,
-      configurationName: n
-    })).codeVerifier;
-    return S || (S = sessionStorage[`oidc.code_verifier.${n}`], console.warn("codeVerifier not found in service worker, using sessionStorage"), d && (await E(S), S = await $(!1))), S;
-  }, E = async (d) => (sessionStorage[`oidc.code_verifier.${n}`] = d, I(o)({
-    type: "setCodeVerifier",
-    data: { codeVerifier: d },
-    configurationName: n
-  }));
-  return {
-    clearAsync: f,
-    initAsync: u,
-    startKeepAliveServiceWorker: () => l(e.service_worker_keep_alive_path),
-    setSessionStateAsync: h,
-    getSessionStateAsync: _,
-    setNonceAsync: m,
-    getNonceAsync: p,
-    setLoginParams: y,
-    getLoginParams: A,
-    getStateAsync: w,
-    setStateAsync: H,
-    getCodeVerifierAsync: $,
-    setCodeVerifierAsync: E,
-    setDemonstratingProofOfPossessionNonce: T,
-    getDemonstratingProofOfPossessionNonce: O,
-    setDemonstratingProofOfPossessionJwkAsync: v,
-    getDemonstratingProofOfPossessionJwkAsync: C
-  };
-}, B = {}, Qe = (e, n = window.sessionStorage, t) => {
-  if (!B[e] && n) {
-    const o = n.getItem(e);
-    o && (B[e] = JSON.parse(o));
-  }
-  const s = 1e3 * t;
-  return B[e] && B[e].timestamp + s > Date.now() ? B[e].result : null;
-}, Ze = (e, n, t = window.sessionStorage) => {
-  const s = Date.now();
-  B[e] = { result: n, timestamp: s }, t && t.setItem(e, JSON.stringify({ result: n, timestamp: s }));
+var p = (e, t = null, n) => {
+	if (!e) return null;
+	let r, i = typeof e.expiresIn == "string" ? parseInt(e.expiresIn, 10) : e.expiresIn;
+	r = e.accessTokenPayload === void 0 ? l(e.accessToken) : e.accessTokenPayload;
+	let a;
+	a = t != null && "idToken" in t && !("idToken" in e) ? t.idToken : e.idToken;
+	let o = e.idTokenPayload ? e.idTokenPayload : l(a), s = o && o.exp ? o.exp : Number.MAX_VALUE, c = r && r.exp ? r.exp : e.issuedAt + i;
+	e.issuedAt = f(e, r, o);
+	let u;
+	u = e.expiresAt ? e.expiresAt : n === d.access_token_invalid ? c : n === d.id_token_invalid || s < c ? s : c;
+	let p = {
+		...e,
+		idTokenPayload: o,
+		accessTokenPayload: r,
+		expiresAt: u,
+		idToken: a
+	};
+	if (t != null && "refreshToken" in t && !("refreshToken" in e)) {
+		let e = t.refreshToken;
+		return {
+			...p,
+			refreshToken: e
+		};
+	}
+	return p;
+}, m = (e, t, n) => {
+	if (!e) return null;
+	e.issued_at ||= (/* @__PURE__ */ new Date()).getTime() / 1e3;
+	let r = {
+		accessToken: e.access_token,
+		expiresIn: e.expires_in,
+		idToken: e.id_token,
+		scope: e.scope,
+		tokenType: e.token_type,
+		issuedAt: e.issued_at
+	};
+	return "refresh_token" in e && (r.refreshToken = e.refresh_token), e.accessTokenPayload !== void 0 && (r.accessTokenPayload = e.accessTokenPayload), e.idTokenPayload !== void 0 && (r.idTokenPayload = e.idTokenPayload), p(r, t, n);
+}, h = (e, t) => {
+	let n = t - (/* @__PURE__ */ new Date()).getTime() / 1e3;
+	return Math.round(n - e);
+}, g = (e, t = 0) => e ? h(t, e.expiresAt) > 0 : !1, _ = async (e, t = 200, n = 50) => {
+	let r = n, i = await e.syncTokensInfoAsync();
+	for (; [
+		G.REQUIRE_SYNC_TOKENS,
+		G.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID,
+		G.TOKENS_INVALID
+	].includes(i) && r > 0;) {
+		if (e.configuration.token_automatic_renew_mode == o.AutomaticOnlyWhenFetchExecuted) {
+			await e.renewTokensAsync({});
+			break;
+		} else await C({ milliseconds: t });
+		--r, i = await e.syncTokensInfoAsync();
+	}
+	return {
+		isTokensValid: g(e.getTokens()),
+		tokens: e.getTokens(),
+		numberWaited: r - n
+	};
+}, v = (e, t, n) => {
+	if (e.idTokenPayload) {
+		let r = e.idTokenPayload;
+		if (n.issuer !== r.iss) return {
+			isValid: !1,
+			reason: `Issuer does not match (oidcServerConfiguration issuer) ${n.issuer} !== (idTokenPayload issuer) ${r.iss}`
+		};
+		let i = (/* @__PURE__ */ new Date()).getTime() / 1e3;
+		if (r.exp && r.exp < i) return {
+			isValid: !1,
+			reason: `Token expired (idTokenPayload exp) ${r.exp} < (currentTimeUnixSecond) ${i}`
+		};
+		let a = 3600 * 24 * 7;
+		if (r.iat && r.iat + a < i) return {
+			isValid: !1,
+			reason: `Token is used from too long time (idTokenPayload iat + timeInSevenDays) ${r.iat + a} < (currentTimeUnixSecond) ${i}`
+		};
+		if (r.nonce && r.nonce !== t) return {
+			isValid: !1,
+			reason: `Nonce does not match (idTokenPayload nonce) ${r.nonce} !== (nonce) ${t}`
+		};
+	}
+	return {
+		isValid: !0,
+		reason: ""
+	};
+}, y = (function() {
+	let e = typeof window > "u" ? global : window;
+	return {
+		setTimeout: setTimeout.bind(e),
+		clearTimeout: clearTimeout.bind(e),
+		setInterval: setInterval.bind(e),
+		clearInterval: clearInterval.bind(e)
+	};
+})(), b = "7.27.4", x = null, S, C = ({ milliseconds: e }) => new Promise((t) => y.setTimeout(t, e)), w = (e = "/") => {
+	try {
+		S = new AbortController(), fetch(`${e}OidcKeepAliveServiceWorker.json?minSleepSeconds=150`, { signal: S.signal }).catch((e) => {
+			console.log(e);
+		}), C({ milliseconds: 150 * 1e3 }).then(() => w(e));
+	} catch (e) {
+		console.log(e);
+	}
+}, T = () => {
+	S && S.abort();
+}, E = (e) => {
+	let t = `oidc.tabId.${e}`, n = sessionStorage.getItem(t);
+	if (n) return n;
+	let r = globalThis.crypto.randomUUID();
+	return sessionStorage.setItem(t, r), r;
+}, D = 5e3, ee = (e) => navigator.serviceWorker.controller ?? e.active ?? e.waiting ?? e.installing ?? null, O = (e, t) => (n) => {
+	let r = t?.timeoutMs ?? D;
+	return new Promise((t, i) => {
+		let a = ee(e);
+		if (!a) {
+			i(/* @__PURE__ */ Error("Service worker target not available (controller/active/waiting/installing missing)"));
+			return;
+		}
+		let o = new MessageChannel(), s = null, c = () => {
+			try {
+				s != null && (y.clearTimeout(s), s = null), o.port1.onmessage = null, o.port1.close(), o.port2.close();
+			} catch (e) {
+				console.error(e);
+			}
+		};
+		s = y.setTimeout(() => {
+			c(), i(/* @__PURE__ */ Error(`Service worker did not respond within ${r}ms (type=${n?.type})`));
+		}, r), o.port1.onmessage = (e) => {
+			c(), e?.data?.error ? i(e.data.error) : t(e.data);
+		};
+		try {
+			let e = n?.configurationName;
+			a.postMessage({
+				...n,
+				tabId: E(e ?? "default")
+			}, [o.port2]);
+		} catch (e) {
+			c(), i(e);
+		}
+	});
+}, te = async (e) => navigator.serviceWorker.controller ? navigator.serviceWorker.controller : new Promise((t) => {
+	let n = !1, r = () => {
+		n || (n = !0, navigator.serviceWorker.removeEventListener("controllerchange", r), t(navigator.serviceWorker.controller ?? null));
+	};
+	navigator.serviceWorker.addEventListener("controllerchange", r), y.setTimeout(() => {
+		n || (n = !0, navigator.serviceWorker.removeEventListener("controllerchange", r), t(navigator.serviceWorker.controller ?? null));
+	}, e);
+}), ne = !1, k = !1, A = /* @__PURE__ */ new Map(), j = "oidc.sw.controllerchange_reload_count", M = 3, N = () => {
+	try {
+		return parseInt(sessionStorage.getItem(j) ?? "0", 10);
+	} catch {
+		return 0;
+	}
+}, re = () => {
+	let e = N() + 1;
+	try {
+		sessionStorage.setItem(j, String(e));
+	} catch {}
+	return e;
+}, ie = () => {
+	try {
+		sessionStorage.removeItem(j);
+	} catch {}
+}, P = async (e, t) => {
+	let n = e.service_worker_relative_url;
+	if (typeof window > "u" || typeof navigator > "u" || !navigator.serviceWorker || !n || e.service_worker_activate() === !1) return null;
+	let r = `${n}?v=${b}`, i = null;
+	e.service_worker_register ? (A.has(n) || A.set(n, e.service_worker_register(n)), i = await A.get(n)) : (A.has(r) || A.set(r, navigator.serviceWorker.register(r, { updateViaCache: "none" })), i = await A.get(r));
+	let a = `oidc.sw.version_mismatch_reload.${t}`, o = async (e) => {
+		T(), console.log("New SW waiting – SKIP_WAITING");
+		try {
+			await new Promise((n, r) => {
+				let i = new MessageChannel(), a = null, o = () => {
+					try {
+						a != null && (y.clearTimeout(a), a = null), i.port1.onmessage = null, i.port1.close(), i.port2.close();
+					} catch (e) {
+						console.error(e);
+					}
+				};
+				a = y.setTimeout(() => {
+					o(), r(/* @__PURE__ */ Error("SKIP_WAITING did not respond within 8000ms"));
+				}, 8e3), i.port1.onmessage = (e) => {
+					o(), e?.data?.error ? r(e.data.error) : n();
+				};
+				try {
+					e.postMessage({
+						type: "SKIP_WAITING",
+						configurationName: t,
+						data: null,
+						tabId: E(t ?? "default")
+					}, [i.port2]);
+				} catch (e) {
+					o(), r(e);
+				}
+			});
+		} catch (e) {
+			console.warn("SKIP_WAITING failed", e);
+		}
+	}, s = async () => {
+		let e = i.waiting;
+		e ? await o(e) : console.warn("sendSkipWaiting called but no waiting service worker found");
+	}, c = (e) => {
+		T(), e.addEventListener("statechange", async () => {
+			if (e.state === "installed" && navigator.serviceWorker.controller) {
+				if (N() >= M) {
+					console.warn("SW trackInstallingWorker: skipping SKIP_WAITING because the reload budget is exhausted");
+					return;
+				}
+				await o(e);
+			}
+		});
+	};
+	i.addEventListener("updatefound", () => {
+		let e = i.installing;
+		e && c(e);
+	}), i.installing ? c(i.installing) : i.waiting && navigator.serviceWorker.controller && (N() < M ? s() : console.warn("SW: a waiting worker exists but reload budget is exhausted – skipping activation")), i.update().catch((e) => {
+		console.error(e);
+	});
+	try {
+		await navigator.serviceWorker.ready, navigator.serviceWorker.controller || (await O(i, { timeoutMs: 8e3 })({
+			type: "claim",
+			configurationName: t,
+			data: null
+		}), await te(2e3));
+	} catch (e) {
+		return console.warn(`Failed init ServiceWorker ${e?.toString?.() ?? String(e)}`), null;
+	}
+	ne || (ne = !0, navigator.serviceWorker.addEventListener("controllerchange", () => {
+		if (k) return;
+		let e = re();
+		if (e > M) {
+			console.warn(`SW controllerchange: reload budget exhausted (${e - 1} reloads). Skipping reload to avoid infinite loop.`);
+			return;
+		}
+		k = !0, console.log("SW controller changed – reloading page"), T(), window.location.reload();
+	}));
+	let l = async (e) => O(i)({
+		type: "clear",
+		data: { status: e },
+		configurationName: t
+	}), u = async (e, n, r) => {
+		let o = await O(i)({
+			type: "init",
+			data: {
+				oidcServerConfiguration: e,
+				where: n,
+				oidcConfiguration: {
+					token_renew_mode: r.token_renew_mode,
+					service_worker_convert_all_requests_to_cors: r.service_worker_convert_all_requests_to_cors
+				}
+			},
+			configurationName: t
+		}), c = o.version;
+		if (c !== "7.27.4") {
+			console.warn(`Service worker ${c} version mismatch with js client version ${b}, unregistering and reloading`);
+			let e = parseInt(sessionStorage.getItem(a) ?? "0", 10);
+			if (e < 3) {
+				if (sessionStorage.setItem(a, String(e + 1)), i.waiting) return await s(), await C({ milliseconds: 500 }), k || (k = !0, window.location.reload()), new Promise(() => {});
+				{
+					T();
+					try {
+						await i.update();
+					} catch (e) {
+						console.error(e);
+					}
+					let e = await i.unregister();
+					return console.log(`Service worker unregistering ${e}`), await C({ milliseconds: 500 }), k || (k = !0, window.location.reload()), new Promise(() => {});
+				}
+			} else console.error(`Service worker version mismatch persists after ${e} attempt(s). Continuing with mismatched version.`);
+		} else sessionStorage.removeItem(a), ie();
+		return {
+			tokens: m(o.tokens, null, r.token_renew_mode),
+			status: o.status
+		};
+	}, d = (e = "/") => {
+		x ?? (x = "not_null", w(e));
+	}, f = (e) => O(i)({
+		type: "setSessionState",
+		data: { sessionState: e },
+		configurationName: t
+	}), p = async () => (await O(i)({
+		type: "getSessionState",
+		data: null,
+		configurationName: t
+	})).sessionState, h = (e) => (sessionStorage[`oidc.nonce.${t}`] = e.nonce, O(i)({
+		type: "setNonce",
+		data: { nonce: e },
+		configurationName: t
+	})), g = async (e = !0) => {
+		let n = (await O(i)({
+			type: "getNonce",
+			data: null,
+			configurationName: t
+		})).nonce;
+		return n || (n = sessionStorage[`oidc.nonce.${t}`], console.warn("nonce not found in service worker, using sessionStorage"), e && (await h(n), n = (await g(!1)).nonce)), { nonce: n };
+	}, _ = {}, v = (e) => {
+		_[t] = e, localStorage[`oidc.login.${t}`] = JSON.stringify(e);
+	}, S = () => {
+		let e = localStorage[`oidc.login.${t}`];
+		return _[t] || (_[t] = JSON.parse(e)), _[t];
+	}, D = async (e) => {
+		await O(i)({
+			type: "setDemonstratingProofOfPossessionNonce",
+			data: { demonstratingProofOfPossessionNonce: e },
+			configurationName: t
+		});
+	}, ee = async () => (await O(i)({
+		type: "getDemonstratingProofOfPossessionNonce",
+		data: null,
+		configurationName: t
+	})).demonstratingProofOfPossessionNonce, j = async (e) => {
+		let n = JSON.stringify(e);
+		await O(i)({
+			type: "setDemonstratingProofOfPossessionJwk",
+			data: { demonstratingProofOfPossessionJwkJson: n },
+			configurationName: t
+		});
+	}, P = async () => {
+		let e = await O(i)({
+			type: "getDemonstratingProofOfPossessionJwk",
+			data: null,
+			configurationName: t
+		});
+		return e.demonstratingProofOfPossessionJwkJson ? JSON.parse(e.demonstratingProofOfPossessionJwkJson) : null;
+	}, F = async (e = !0) => {
+		let n = (await O(i)({
+			type: "getState",
+			data: null,
+			configurationName: t
+		})).state;
+		return n || (n = sessionStorage[`oidc.state.${t}`], console.warn("state not found in service worker, using sessionStorage"), e && (await I(n), n = await F(!1))), n;
+	}, I = async (e) => (sessionStorage[`oidc.state.${t}`] = e, O(i)({
+		type: "setState",
+		data: { state: e },
+		configurationName: t
+	})), L = async (e = !0) => {
+		let n = (await O(i)({
+			type: "getCodeVerifier",
+			data: null,
+			configurationName: t
+		})).codeVerifier;
+		return n || (n = sessionStorage[`oidc.code_verifier.${t}`], console.warn("codeVerifier not found in service worker, using sessionStorage"), e && (await R(n), n = await L(!1))), n;
+	}, R = async (e) => (sessionStorage[`oidc.code_verifier.${t}`] = e, O(i)({
+		type: "setCodeVerifier",
+		data: { codeVerifier: e },
+		configurationName: t
+	}));
+	return {
+		clearAsync: l,
+		initAsync: u,
+		startKeepAliveServiceWorker: () => d(e.service_worker_keep_alive_path),
+		setSessionStateAsync: f,
+		getSessionStateAsync: p,
+		setNonceAsync: h,
+		getNonceAsync: g,
+		setLoginParams: v,
+		getLoginParams: S,
+		getStateAsync: F,
+		setStateAsync: I,
+		getCodeVerifierAsync: L,
+		setCodeVerifierAsync: R,
+		setDemonstratingProofOfPossessionNonce: D,
+		getDemonstratingProofOfPossessionNonce: ee,
+		setDemonstratingProofOfPossessionJwkAsync: j,
+		getDemonstratingProofOfPossessionJwkAsync: P
+	};
+}, F = {}, I = (e, t = window.sessionStorage, n) => {
+	if (!F[e] && t) {
+		let n = t.getItem(e);
+		n && (F[e] = JSON.parse(n));
+	}
+	let r = 1e3 * n;
+	return F[e] && F[e].timestamp + r > Date.now() ? F[e].result : null;
+}, L = (e, t, n = window.sessionStorage) => {
+	let r = Date.now();
+	F[e] = {
+		result: t,
+		timestamp: r
+	}, n && n.setItem(e, JSON.stringify({
+		result: t,
+		timestamp: r
+	}));
 };
-function We(e) {
-  return new TextEncoder().encode(e);
+//#endregion
+//#region src/jwt.ts
+function R(e) {
+	return new TextEncoder().encode(e);
 }
-function Le(e) {
-  return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+/g, "");
+function ae(e) {
+	return btoa(e).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+/g, "");
 }
-function en(e) {
-  return encodeURIComponent(e).replace(/%([0-9A-F]{2})/g, function(t, s) {
-    return String.fromCharCode(parseInt(s, 16));
-  });
+function oe(e) {
+	return encodeURIComponent(e).replace(/%([0-9A-F]{2})/g, function(e, t) {
+		return String.fromCharCode(parseInt(t, 16));
+	});
 }
-const ke = (e) => {
-  let n = "";
-  return e.forEach(function(t) {
-    n += String.fromCharCode(t);
-  }), Le(n);
+var z = (e) => {
+	let t = "";
+	return e.forEach(function(e) {
+		t += String.fromCharCode(e);
+	}), ae(t);
 };
-function Ee(e) {
-  return Le(en(e));
+function se(e) {
+	return ae(oe(e));
 }
-const nn = {
-  importKeyAlgorithm: {
-    name: "ECDSA",
-    namedCurve: "P-256",
-    hash: { name: "ES256" }
-  },
-  signAlgorithm: { name: "ECDSA", hash: { name: "SHA-256" } },
-  generateKeyAlgorithm: {
-    name: "ECDSA",
-    namedCurve: "P-256"
-  },
-  digestAlgorithm: { name: "SHA-256" },
-  jwtHeaderAlgorithm: "ES256"
-}, tn = (e) => async (n, t, s, o, i = "dpop+jwt") => {
-  switch (n = Object.assign({}, n), t.typ = i, t.alg = o.jwtHeaderAlgorithm, t.alg) {
-    case "ES256":
-      t.jwk = { kty: n.kty, crv: n.crv, x: n.x, y: n.y };
-      break;
-    case "RS256":
-      t.jwk = { kty: n.kty, n: n.n, e: n.e, kid: t.kid };
-      break;
-    default:
-      throw new Error("Unknown or not implemented JWS algorithm");
-  }
-  const r = {
-    // @ts-ignore
-    // JWT "headers" really means JWS "protected headers"
-    protected: Ee(JSON.stringify(t)),
-    // @ts-ignore
-    // JWT "claims" are really a JSON-defined JWS "payload"
-    payload: Ee(JSON.stringify(s))
-  }, a = o.importKeyAlgorithm, c = !0, f = ["sign"], u = await e.crypto.subtle.importKey("jwk", n, a, c, f), l = We(`${r.protected}.${r.payload}`), h = o.signAlgorithm, _ = await e.crypto.subtle.sign(h, u, l);
-  return r.signature = ke(new Uint8Array(_)), `${r.protected}.${r.payload}.${r.signature}`;
-}, sn = { sign: tn }, on = (e) => async (n) => {
-  const t = n, s = !0, o = ["sign", "verify"], i = await e.crypto.subtle.generateKey(t, s, o);
-  return await e.crypto.subtle.exportKey("jwk", i.privateKey);
-}, rn = (e) => {
-  const n = Object.assign({}, e);
-  return delete n.d, n.key_ops = ["verify"], n;
-}, an = {
-  generate: on,
-  neuter: rn
-}, cn = (e) => async (n, t) => {
-  let s;
-  switch (n.kty) {
-    case "EC":
-      s = '{"crv":"CRV","kty":"EC","x":"X","y":"Y"}'.replace("CRV", n.crv).replace("X", n.x).replace("Y", n.y);
-      break;
-    case "RSA":
-      s = '{"e":"E","kty":"RSA","n":"N"}'.replace("E", n.e).replace("N", n.n);
-      break;
-    default:
-      throw new Error("Unknown or not implemented JWK type");
-  }
-  const o = await e.crypto.subtle.digest(t, We(s));
-  return ke(new Uint8Array(o));
-}, ln = { thumbprint: cn }, un = (e) => async (n) => await an.generate(e)(n), De = (e) => (n) => async (t, s = "POST", o, i = {}) => {
-  const r = {
-    // https://www.rfc-editor.org/rfc/rfc9449.html#name-concept
-    jti: btoa(_n()),
-    htm: s,
-    htu: o,
-    iat: Math.round(Date.now() / 1e3),
-    ...i
-  }, a = await ln.thumbprint(e)(
-    t,
-    n.digestAlgorithm
-  );
-  return await sn.sign(e)(
-    t,
-    { kid: a },
-    r,
-    n
-  );
-}, _n = () => {
-  const e = "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx", n = "0123456789abcdef";
-  let t = 0, s = "";
-  for (let o = 0; o < 36; o++)
-    e[o] !== "-" && e[o] !== "4" && (t = Math.random() * 16 | 0), e[o] === "x" ? s += n[t] : e[o] === "y" ? (t &= 3, t |= 8, s += n[t]) : s += e[o];
-  return s;
-}, Re = () => {
-  const e = typeof window < "u" && !!window.crypto, n = e && !!window.crypto.subtle;
-  return { hasCrypto: e, hasSubtleCrypto: n };
-}, ce = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789", fn = (e) => {
-  const n = [];
-  for (let t = 0; t < e.byteLength; t += 1) {
-    const s = e[t] % ce.length;
-    n.push(ce[s]);
-  }
-  return n.join("");
-}, le = (e) => {
-  const n = new Uint8Array(e), { hasCrypto: t } = Re();
-  if (t)
-    window.crypto.getRandomValues(n);
-  else
-    for (let s = 0; s < e; s += 1)
-      n[s] = Math.random() * ce.length | 0;
-  return fn(n);
+var ce = {
+	importKeyAlgorithm: {
+		name: "ECDSA",
+		namedCurve: "P-256",
+		hash: { name: "ES256" }
+	},
+	signAlgorithm: {
+		name: "ECDSA",
+		hash: { name: "SHA-256" }
+	},
+	generateKeyAlgorithm: {
+		name: "ECDSA",
+		namedCurve: "P-256"
+	},
+	digestAlgorithm: { name: "SHA-256" },
+	jwtHeaderAlgorithm: "ES256"
+}, le = { sign: (e) => async (t, n, r, i, a = "dpop+jwt") => {
+	switch (t = Object.assign({}, t), n.typ = a, n.alg = i.jwtHeaderAlgorithm, n.alg) {
+		case "ES256":
+			n.jwk = {
+				kty: t.kty,
+				crv: t.crv,
+				x: t.x,
+				y: t.y
+			};
+			break;
+		case "RS256":
+			n.jwk = {
+				kty: t.kty,
+				n: t.n,
+				e: t.e,
+				kid: n.kid
+			};
+			break;
+		default: throw Error("Unknown or not implemented JWS algorithm");
+	}
+	let o = {
+		protected: se(JSON.stringify(n)),
+		payload: se(JSON.stringify(r))
+	}, s = i.importKeyAlgorithm, c = await e.crypto.subtle.importKey("jwk", t, s, !0, ["sign"]), l = R(`${o.protected}.${o.payload}`), u = i.signAlgorithm, d = await e.crypto.subtle.sign(u, c, l);
+	return o.signature = z(new Uint8Array(d)), `${o.protected}.${o.payload}.${o.signature}`;
+} }, ue = {
+	generate: (e) => async (t) => {
+		let n = t, r = await e.crypto.subtle.generateKey(n, !0, ["sign", "verify"]);
+		return await e.crypto.subtle.exportKey("jwk", r.privateKey);
+	},
+	neuter: (e) => {
+		let t = Object.assign({}, e);
+		return delete t.d, t.key_ops = ["verify"], t;
+	}
+}, de = { thumbprint: (e) => async (t, n) => {
+	let r;
+	switch (t.kty) {
+		case "EC":
+			r = "{\"crv\":\"CRV\",\"kty\":\"EC\",\"x\":\"X\",\"y\":\"Y\"}".replace("CRV", t.crv).replace("X", t.x).replace("Y", t.y);
+			break;
+		case "RSA":
+			r = "{\"e\":\"E\",\"kty\":\"RSA\",\"n\":\"N\"}".replace("E", t.e).replace("N", t.n);
+			break;
+		default: throw Error("Unknown or not implemented JWK type");
+	}
+	let i = await e.crypto.subtle.digest(n, R(r));
+	return z(new Uint8Array(i));
+} }, fe = (e) => async (t) => await ue.generate(e)(t), pe = (e) => (t) => async (n, r = "POST", i, a = {}) => {
+	let o = {
+		jti: btoa(me()),
+		htm: r,
+		htu: i,
+		iat: Math.round(Date.now() / 1e3),
+		...a
+	}, s = await de.thumbprint(e)(n, t.digestAlgorithm);
+	return await le.sign(e)(n, { kid: s }, o, t);
+}, me = () => {
+	let e = "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx", t = "0123456789abcdef", n = 0, r = "";
+	for (let i = 0; i < 36; i++) e[i] !== "-" && e[i] !== "4" && (n = Math.random() * 16 | 0), e[i] === "x" ? r += t[n] : e[i] === "y" ? (n &= 3, n |= 8, r += t[n]) : r += e[i];
+	return r;
+}, he = () => {
+	let e = typeof window < "u" && !!window.crypto;
+	return {
+		hasCrypto: e,
+		hasSubtleCrypto: e && !!window.crypto.subtle
+	};
+}, ge = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789", _e = (e) => {
+	let t = [];
+	for (let n = 0; n < e.byteLength; n += 1) {
+		let r = e[n] % 62;
+		t.push(ge[r]);
+	}
+	return t.join("");
+}, B = (e) => {
+	let t = new Uint8Array(e), { hasCrypto: n } = he();
+	if (n) window.crypto.getRandomValues(t);
+	else for (let n = 0; n < e; n += 1) t[n] = Math.random() * 62 | 0;
+	return _e(t);
 };
-function dn(e) {
-  const n = new ArrayBuffer(e.length), t = new Uint8Array(n);
-  for (let s = 0; s < e.length; s++)
-    t[s] = e.charCodeAt(s);
-  return t;
+function ve(e) {
+	let t = new ArrayBuffer(e.length), n = new Uint8Array(t);
+	for (let t = 0; t < e.length; t++) n[t] = e.charCodeAt(t);
+	return n;
 }
-function $e(e) {
-  return new Promise((n, t) => {
-    crypto.subtle.digest("SHA-256", dn(e)).then(
-      (s) => n(ke(new Uint8Array(s))),
-      (s) => t(s)
-    );
-  });
+function ye(e) {
+	return new Promise((t, n) => {
+		crypto.subtle.digest("SHA-256", ve(e)).then((e) => t(z(new Uint8Array(e))), (e) => n(e));
+	});
 }
-const gn = (e) => {
-  if (e.length < 43 || e.length > 128)
-    return Promise.reject(new Error("Invalid code length."));
-  const { hasSubtleCrypto: n } = Re();
-  return n ? $e(e) : Promise.reject(new Error("window.crypto.subtle is unavailable."));
-}, hn = 3600, yn = (e) => async (n, t = hn, s = window.sessionStorage, o = 1e4) => {
-  const i = `${n}/.well-known/openid-configuration`, r = `oidc.server:${n}`, a = Qe(r, s, t);
-  if (a)
-    return new fe(a);
-  const c = await z(e)(i, {}, o);
-  if (c.status !== 200)
-    return null;
-  const f = await c.json();
-  return Ze(r, f, s), new fe(f);
-}, z = (e) => async (n, t = {}, s = 1e4, o = 0) => {
-  let i;
-  try {
-    const r = new AbortController();
-    setTimeout(() => r.abort(), s), i = await e(n, { ...t, signal: r.signal });
-  } catch (r) {
-    if (r.name === "AbortError" || r.message === "Network request failed") {
-      if (o <= 1)
-        return await z(e)(n, t, s, o + 1);
-      throw r;
-    } else
-      throw console.error(r.message), r;
-  }
-  return i;
-}, ue = {
-  refresh_token: "refresh_token",
-  access_token: "access_token"
-}, Oe = (e) => async (n, t, s = ue.refresh_token, o, i = {}, r = 1e4) => {
-  const a = {
-    token: t,
-    token_type_hint: s,
-    client_id: o
-  };
-  for (const [l, h] of Object.entries(i))
-    a[l] === void 0 && (a[l] = h);
-  const c = [];
-  for (const l in a) {
-    const h = encodeURIComponent(l), _ = encodeURIComponent(a[l]);
-    c.push(`${h}=${_}`);
-  }
-  const f = c.join("&");
-  return (await z(e)(
-    n,
-    {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8"
-      },
-      body: f
-    },
-    r
-  )).status !== 200 ? { success: !1 } : {
-    success: !0
-  };
-}, kn = (e) => async (n, t, s, o, i = {}, r, a = 1e4) => {
-  for (const [_, m] of Object.entries(s))
-    t[_] === void 0 && (t[_] = m);
-  const c = [];
-  for (const _ in t) {
-    const m = encodeURIComponent(_), p = encodeURIComponent(t[_]);
-    c.push(`${m}=${p}`);
-  }
-  const f = c.join("&"), u = await z(e)(
-    n,
-    {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
-        ...i
-      },
-      body: f
-    },
-    a
-  );
-  if (u.status !== 200)
-    return {
-      success: !1,
-      status: u.status,
-      demonstratingProofOfPossessionNonce: null
-    };
-  const l = await u.json();
-  let h = null;
-  return u.headers.has(te) && (h = u.headers.get(
-    te
-  )), {
-    success: !0,
-    status: u.status,
-    data: ge(l, o, r),
-    demonstratingProofOfPossessionNonce: h
-  };
-}, mn = (e, n) => async (t, s) => {
-  s = s ? { ...s } : {};
-  const o = le(128), i = await gn(o);
-  await e.setCodeVerifierAsync(o), await e.setStateAsync(s.state), s.code_challenge = i, s.code_challenge_method = "S256";
-  let r = "";
-  if (s)
-    for (const [a, c] of Object.entries(s))
-      r === "" ? r += "?" : r += "&", r += `${a}=${encodeURIComponent(c)}`;
-  n.open(`${t}${r}`);
-}, te = "DPoP-Nonce", wn = (e) => async (n, t, s, o, i = 1e4) => {
-  t = t ? { ...t } : {}, t.code_verifier = await e.getCodeVerifierAsync();
-  const r = [];
-  for (const l in t) {
-    const h = encodeURIComponent(l), _ = encodeURIComponent(t[l]);
-    r.push(`${h}=${_}`);
-  }
-  const a = r.join("&"), c = await z(fetch)(
-    n,
-    {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
-        ...s
-      },
-      body: a
-    },
-    i
-  );
-  if (await Promise.all([e.setCodeVerifierAsync(null), e.setStateAsync(null)]), c.status !== 200)
-    return { success: !1, status: c.status };
-  let f = null;
-  c.headers.has(te) && (f = c.headers.get(
-    te
-  ));
-  const u = await c.json();
-  return {
-    success: !0,
-    data: {
-      state: t.state,
-      tokens: ge(u, null, o),
-      demonstratingProofOfPossessionNonce: f
-    }
-  };
+var be = (e) => {
+	if (e.length < 43 || e.length > 128) return Promise.reject(/* @__PURE__ */ Error("Invalid code length."));
+	let { hasSubtleCrypto: t } = he();
+	return t ? ye(e) : Promise.reject(/* @__PURE__ */ Error("window.crypto.subtle is unavailable."));
+}, xe = 3600, Se = (e) => async (t, n = xe, r = window.sessionStorage, i = 1e4) => {
+	let a = `${t}/.well-known/openid-configuration`, o = `oidc.server:${t}`, s = I(o, r, n);
+	if (s) return new Z(s);
+	let c = await V(e)(a, {}, i);
+	if (c.status !== 200) return null;
+	let l = await c.json();
+	return L(o, l, r), new Z(l);
+}, V = (e) => async (t, n = {}, r = 1e4, i = 0) => {
+	let a;
+	try {
+		let i = new AbortController();
+		setTimeout(() => i.abort(), r), a = await e(t, {
+			...n,
+			signal: i.signal
+		});
+	} catch (a) {
+		if (a.name === "AbortError" || a.message === "Network request failed") {
+			if (i <= 1) return await V(e)(t, n, r, i + 1);
+			throw a;
+		} else throw console.error(a.message), a;
+	}
+	return a;
+}, H = {
+	refresh_token: "refresh_token",
+	access_token: "access_token"
+}, Ce = (e) => async (t, n, r = H.refresh_token, i, a = {}, o = 1e4) => {
+	let s = {
+		token: n,
+		token_type_hint: r,
+		client_id: i
+	};
+	for (let [e, t] of Object.entries(a)) s[e] === void 0 && (s[e] = t);
+	let c = [];
+	for (let e in s) {
+		let t = encodeURIComponent(e), n = encodeURIComponent(s[e]);
+		c.push(`${t}=${n}`);
+	}
+	let l = c.join("&");
+	return (await V(e)(t, {
+		method: "POST",
+		headers: { "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8" },
+		body: l
+	}, o)).status === 200 ? { success: !0 } : { success: !1 };
+}, we = (e) => async (t, n, r, i, a = {}, o, s = 1e4) => {
+	for (let [e, t] of Object.entries(r)) n[e] === void 0 && (n[e] = t);
+	let c = [];
+	for (let e in n) {
+		let t = encodeURIComponent(e), r = encodeURIComponent(n[e]);
+		c.push(`${t}=${r}`);
+	}
+	let l = c.join("&"), u = await V(e)(t, {
+		method: "POST",
+		headers: {
+			"Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
+			...a
+		},
+		body: l
+	}, s);
+	if (u.status !== 200) return {
+		success: !1,
+		status: u.status,
+		demonstratingProofOfPossessionNonce: null
+	};
+	let d = await u.json(), f = null;
+	return u.headers.has(U) && (f = u.headers.get(U)), {
+		success: !0,
+		status: u.status,
+		data: m(d, i, o),
+		demonstratingProofOfPossessionNonce: f
+	};
+}, Te = (e, t) => async (n, r) => {
+	r = r ? { ...r } : {};
+	let i = B(128), a = await be(i);
+	await e.setCodeVerifierAsync(i), await e.setStateAsync(r.state), r.code_challenge = a, r.code_challenge_method = "S256";
+	let o = "";
+	if (r) for (let [e, t] of Object.entries(r)) o === "" ? o += "?" : o += "&", o += `${e}=${encodeURIComponent(t)}`;
+	t.open(`${n}${o}`);
+}, U = "DPoP-Nonce", Ee = (e) => async (t, n, r, i, a = 1e4) => {
+	n = n ? { ...n } : {}, n.code_verifier = await e.getCodeVerifierAsync();
+	let o = [];
+	for (let e in n) {
+		let t = encodeURIComponent(e), r = encodeURIComponent(n[e]);
+		o.push(`${t}=${r}`);
+	}
+	let s = o.join("&"), c = await V(fetch)(t, {
+		method: "POST",
+		headers: {
+			"Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",
+			...r
+		},
+		body: s
+	}, a);
+	if (await Promise.all([e.setCodeVerifierAsync(null), e.setStateAsync(null)]), c.status !== 200) return {
+		success: !1,
+		status: c.status
+	};
+	let l = null;
+	c.headers.has(U) && (l = c.headers.get(U));
+	let u = await c.json();
+	return {
+		success: !0,
+		data: {
+			state: n.state,
+			tokens: m(u, null, i),
+			demonstratingProofOfPossessionNonce: l
+		}
+	};
 };
-async function be(e, n, t, s = null) {
-  const o = (c) => {
-    e.tokens = c;
-  }, { tokens: i, status: r } = await Z(e)(
-    o,
-    0,
-    0,
-    n,
-    t,
-    s
-  );
-  return await W(e.configuration, e.configurationName) || x(
-    e.configurationName,
-    e.configuration.storage,
-    e.configuration.login_state_storage ?? e.configuration.storage
-  ).setTokens(e.tokens), e.tokens ? i : (await e.destroyAsync(r), null);
+//#endregion
+//#region src/renewTokens.ts
+async function De(e, t, n, r = null) {
+	let { tokens: i, status: o } = await q(e)((t) => {
+		e.tokens = t;
+	}, 0, 0, t, n, r);
+	return await P(e.configuration, e.configurationName) || a(e.configurationName, e.configuration.storage, e.configuration.login_state_storage ?? e.configuration.storage).setTokens(e.tokens), e.tokens ? i : (await e.destroyAsync(o), null);
 }
-async function Ke(e, n = !1, t = null, s = null) {
-  const o = e.configuration, i = `${o.client_id}_${e.configurationName}_${o.authority}`;
-  let r;
-  const a = await W(e.configuration, e.configurationName);
-  if (o?.storage === window?.sessionStorage && !a || !navigator.locks)
-    r = await be(e, n, t, s);
-  else {
-    let c = "retry";
-    for (; c === "retry"; )
-      c = await navigator.locks.request(
-        i,
-        { ifAvailable: !0 },
-        async (f) => f ? await be(e, n, t, s) : (e.publishEvent(D.eventNames.syncTokensAsync_lock_not_available, {
-          lock: "lock not available"
-        }), "retry")
-      );
-    r = c;
-  }
-  return r ? (e.timeoutId && (e.timeoutId = X(e, e.tokens.expiresAt, t, s)), e.tokens) : null;
+async function Oe(e, t = !1, n = null, r = null) {
+	let i = e.configuration, a = `${i.client_id}_${e.configurationName}_${i.authority}`, o, s = await P(e.configuration, e.configurationName);
+	if (i?.storage === window?.sessionStorage && !s || !navigator.locks) o = await De(e, t, n, r);
+	else {
+		let i = "retry";
+		for (; i === "retry";) i = await navigator.locks.request(a, { ifAvailable: !0 }, async (i) => i ? await De(e, t, n, r) : (e.publishEvent($.eventNames.syncTokensAsync_lock_not_available, { lock: "lock not available" }), "retry"));
+		o = i;
+	}
+	return o ? (e.timeoutId &&= W(e, e.tokens.expiresAt, n, r), e.tokens) : null;
 }
-const X = (e, n, t = null, s = null) => {
-  const o = e.configuration.refresh_time_before_tokens_expiration_in_second;
-  return e.timeoutId && R.clearTimeout(e.timeoutId), R.setTimeout(async () => {
-    const r = { timeLeft: G(o, n) };
-    e.publishEvent(D.eventNames.token_timer, r), await Ke(e, !1, t, s);
-  }, 1e3);
-}, P = {
-  FORCE_REFRESH: "FORCE_REFRESH",
-  SESSION_LOST: "SESSION_LOST",
-  NOT_CONNECTED: "NOT_CONNECTED",
-  TOKENS_VALID: "TOKENS_VALID",
-  TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID: "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID",
-  TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID: "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID",
-  LOGOUT_FROM_ANOTHER_TAB: "LOGOUT_FROM_ANOTHER_TAB",
-  REQUIRE_SYNC_TOKENS: "REQUIRE_SYNC_TOKENS",
-  TOKENS_INVALID: "TOKENS_INVALID"
-}, me = (e) => async (n, t, s, o = !1) => {
-  const i = { nonce: null };
-  if (!s)
-    return { tokens: null, status: P.NOT_CONNECTED, nonce: i };
-  let r = i;
-  const a = await e.initAsync(
-    n.authority,
-    n.authority_configuration
-  ), c = await W(n, t);
-  if (c) {
-    const { status: l, tokens: h } = await c.initAsync(
-      a,
-      "syncTokensAsync",
-      n
-    );
-    if (l === "LOGGED_OUT")
-      return {
-        tokens: null,
-        status: P.LOGOUT_FROM_ANOTHER_TAB,
-        nonce: i
-      };
-    if (l === "SESSIONS_LOST")
-      return { tokens: null, status: P.SESSION_LOST, nonce: i };
-    if (!l || !h)
-      return {
-        tokens: null,
-        status: P.REQUIRE_SYNC_TOKENS,
-        nonce: i
-      };
-    if (h.issuedAt !== s.issuedAt) {
-      const m = G(
-        n.refresh_time_before_tokens_expiration_in_second,
-        h.expiresAt
-      ) > 0 ? P.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID : P.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID, p = await c.getNonceAsync();
-      return { tokens: h, status: m, nonce: p };
-    }
-    r = await c.getNonceAsync();
-  } else {
-    const l = x(
-      t,
-      n.storage ?? sessionStorage,
-      n.login_state_storage ?? n.storage ?? sessionStorage
-    ), h = await l.initAsync();
-    let { tokens: _ } = h;
-    const { status: m } = h;
-    if (_ && (_ = de(_, e.tokens, n.token_renew_mode)), _) {
-      if (m === "SESSIONS_LOST")
-        return { tokens: null, status: P.SESSION_LOST, nonce: i };
-      if (_.issuedAt !== s.issuedAt) {
-        const g = G(
-          n.refresh_time_before_tokens_expiration_in_second,
-          _.expiresAt
-        ) > 0 ? P.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID : P.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID, y = await l.getNonceAsync();
-        return { tokens: _, status: g, nonce: y };
-      }
-    } else return {
-      tokens: null,
-      status: P.LOGOUT_FROM_ANOTHER_TAB,
-      nonce: i
-    };
-    r = await l.getNonceAsync();
-  }
-  const u = G(
-    n.refresh_time_before_tokens_expiration_in_second,
-    s.expiresAt
-  ) > 0 ? "TOKENS_VALID" : "TOKENS_INVALID";
-  return o ? { tokens: s, status: "FORCE_REFRESH", nonce: r } : { tokens: s, status: u, nonce: r };
-}, Z = (e) => async (n, t = 0, s = 0, o = !1, i = null, r = null) => {
-  if (!navigator.onLine && document.hidden)
-    return { tokens: e.tokens, status: "GIVE_UP" };
-  let a = 6;
-  const c = o ? 2 : 5, f = 5;
-  for (; !navigator.onLine && a > 0; )
-    await Y({ milliseconds: 1e3 }), a--, e.publishEvent(k.refreshTokensAsync, {
-      message: `wait because navigator is offline try ${a}`
-    });
-  const u = document.hidden, l = u ? t : t + 1, h = u ? s + 1 : s;
-  if (t >= c || s >= f)
-    return n(null), e.publishEvent(k.refreshTokensAsync_error, { message: "refresh token" }), { tokens: null, status: "SESSION_LOST" };
-  i || (i = {});
-  const _ = e.configuration, m = (g, y = null, A = null) => we(
-    e.configurationName,
-    e.configuration,
-    e.publishEvent.bind(e)
-  )(g, y, A), p = async () => {
-    try {
-      let g;
-      const y = await W(_, e.configurationName);
-      y ? g = y.getLoginParams() : g = x(
-        e.configurationName,
-        _.storage,
-        _.login_state_storage ?? _.storage
-      ).getLoginParams();
-      const A = {};
-      if (g && g.extras)
-        for (const [O, v] of Object.entries(g.extras))
-          v != null && (A[O] = v);
-      if (i)
-        for (const [O, v] of Object.entries(i))
-          v != null && (A[O] = v);
-      A.prompt = "none", r && (A.scope = r);
-      const T = await m(A);
-      return T ? T.error ? (n(null), e.publishEvent(k.refreshTokensAsync_error, {
-        message: "refresh token silent"
-      }), { tokens: null, status: "SESSION_LOST" }) : (n(T.tokens), e.publishEvent(D.eventNames.token_renewed, {}), { tokens: T.tokens, status: "LOGGED" }) : (n(null), e.publishEvent(k.refreshTokensAsync_error, {
-        message: "refresh token silent not active"
-      }), { tokens: null, status: "SESSION_LOST" });
-    } catch (g) {
-      return console.error(g), e.publishEvent(k.refreshTokensAsync_silent_error, {
-        message: "exceptionSilent",
-        exception: g.message
-      }), await Z(e)(
-        n,
-        l,
-        h,
-        o,
-        i,
-        r
-      );
-    }
-  };
-  try {
-    const { status: g, tokens: y, nonce: A } = await me(e)(
-      _,
-      e.configurationName,
-      e.tokens,
-      o
-    );
-    switch (g) {
-      case P.SESSION_LOST:
-        return n(null), e.publishEvent(k.refreshTokensAsync_error, {
-          message: "refresh token session lost"
-        }), { tokens: null, status: "SESSION_LOST" };
-      case P.NOT_CONNECTED:
-        return n(null), { tokens: null, status: null };
-      case P.TOKENS_VALID:
-        return n(y), { tokens: y, status: "LOGGED_IN" };
-      case P.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID:
-        return n(y), e.publishEvent(D.eventNames.token_renewed, {
-          reason: "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID"
-        }), { tokens: y, status: "LOGGED_IN" };
-      case P.LOGOUT_FROM_ANOTHER_TAB:
-        return n(null), e.publishEvent(k.logout_from_another_tab, {
-          status: "session syncTokensAsync"
-        }), { tokens: null, status: "LOGGED_OUT" };
-      case P.REQUIRE_SYNC_TOKENS:
-        return _.token_automatic_renew_mode == q.AutomaticOnlyWhenFetchExecuted && !o ? (e.publishEvent(k.tokensInvalidAndWaitingActionsToRefresh, {}), { tokens: e.tokens, status: "GIVE_UP" }) : (e.publishEvent(k.refreshTokensAsync_begin, { tryNumber: t }), await p());
-      default: {
-        if (_.token_automatic_renew_mode == q.AutomaticOnlyWhenFetchExecuted && P.FORCE_REFRESH !== g)
-          return e.publishEvent(k.tokensInvalidAndWaitingActionsToRefresh, {}), { tokens: e.tokens, status: "GIVE_UP" };
-        if (e.publishEvent(k.refreshTokensAsync_begin, {
-          refreshToken: y.refreshToken,
-          status: g,
-          tryNumber: t,
-          backgroundTry: s
-        }), !y.refreshToken)
-          return await p();
-        const T = _.client_id, O = _.redirect_uri, v = _.authority, w = { ..._.token_request_extras ? _.token_request_extras : {} };
-        for (const [$, E] of Object.entries(i))
-          $.endsWith(":token_request") && (w[$.replace(":token_request", "")] = E);
-        return await (async () => {
-          const $ = {
-            client_id: T,
-            redirect_uri: O,
-            grant_type: "refresh_token",
-            refresh_token: y.refreshToken
-          }, E = await e.initAsync(
-            v,
-            _.authority_configuration
-          ), d = document.hidden ? 1e4 : 3e4 * 10, N = E.tokenEndpoint, S = {};
-          _.demonstrating_proof_of_possession && (S.DPoP = await e.generateDemonstrationOfProofOfPossessionAsync(
-            y.accessToken,
-            N,
-            "POST"
-          ));
-          const b = await kn(e.getFetch())(
-            N,
-            $,
-            w,
-            y,
-            S,
-            _.token_renew_mode,
-            d
-          );
-          if (b.success) {
-            const { isValid: K, reason: U } = Ne(
-              b.data,
-              A.nonce,
-              E
-            );
-            if (!K)
-              return n(null), e.publishEvent(k.refreshTokensAsync_error, {
-                message: `refresh token return not valid tokens, reason: ${U}`
-              }), { tokens: null, status: "SESSION_LOST" };
-            if (n(b.data), b.demonstratingProofOfPossessionNonce) {
-              const L = await W(_, e.configurationName);
-              L ? await L.setDemonstratingProofOfPossessionNonce(
-                b.demonstratingProofOfPossessionNonce
-              ) : await x(
-                e.configurationName,
-                _.storage,
-                _.login_state_storage ?? _.storage
-              ).setDemonstratingProofOfPossessionNonce(
-                b.demonstratingProofOfPossessionNonce
-              );
-            }
-            return e.publishEvent(k.refreshTokensAsync_end, {
-              success: b.success
-            }), e.publishEvent(D.eventNames.token_renewed, { reason: "REFRESH_TOKEN" }), { tokens: b.data, status: "LOGGED_IN" };
-          } else
-            return e.publishEvent(k.refreshTokensAsync_silent_error, {
-              message: "bad request",
-              tokenResponse: b
-            }), b.status >= 400 && b.status < 500 ? (n(null), e.publishEvent(k.refreshTokensAsync_error, {
-              message: `session lost: ${b.status}`
-            }), { tokens: null, status: "SESSION_LOST" }) : await Z(e)(
-              n,
-              l,
-              h,
-              o,
-              i,
-              r
-            );
-        })();
-      }
-    }
-  } catch (g) {
-    return console.error(g), e.publishEvent(k.refreshTokensAsync_silent_error, {
-      message: "exception",
-      exception: g.message
-    }), new Promise((y, A) => {
-      setTimeout(() => {
-        Z(e)(
-          n,
-          l,
-          h,
-          o,
-          i,
-          r
-        ).then(y).catch(A);
-      }, 1e3);
-    });
-  }
-}, we = (e, n, t) => (s = null, o = null, i = null) => {
-  if (!n.silent_redirect_uri || !n.silent_login_uri)
-    return Promise.resolve(null);
-  try {
-    t(k.silentLoginAsync_begin, {});
-    let r = "";
-    if (o && (s == null && (s = {}), s.state = o), i != null && (s == null && (s = {}), s.scope = i), s != null)
-      for (const [l, h] of Object.entries(s))
-        h != null && (r === "" ? r = `?${encodeURIComponent(l)}=${encodeURIComponent(h)}` : r += `&${encodeURIComponent(l)}=${encodeURIComponent(h)}`);
-    const a = n.silent_login_uri + r, c = a.indexOf("/", a.indexOf("//") + 2), f = a.substring(0, c), u = document.createElement("iframe");
-    return u.width = "0px", u.height = "0px", u.id = `${e}_oidc_iframe`, u.setAttribute("src", a), u.style.display = "none", document.body.appendChild(u), new Promise((l, h) => {
-      let _ = !1;
-      const m = () => {
-        window.removeEventListener("message", p), u.remove(), _ = !0;
-      }, p = (g) => {
-        if (g.origin === f && g.source === u.contentWindow) {
-          const y = `${e}_oidc_tokens:`, A = `${e}_oidc_error:`, T = `${e}_oidc_exception:`, O = g.data;
-          if (O && typeof O == "string" && !_) {
-            if (O.startsWith(y)) {
-              const v = JSON.parse(g.data.replace(y, ""));
-              t(k.silentLoginAsync_end, {}), l(v), m();
-            } else if (O.startsWith(A)) {
-              const v = JSON.parse(g.data.replace(A, ""));
-              t(k.silentLoginAsync_error, v), l({ error: "oidc_" + v.error, tokens: null, sessionState: null }), m();
-            } else if (O.startsWith(T)) {
-              const v = JSON.parse(g.data.replace(T, ""));
-              t(k.silentLoginAsync_error, v), h(new Error(v.error)), m();
-            }
-          }
-        }
-      };
-      try {
-        window.addEventListener("message", p);
-        const g = n.silent_login_timeout;
-        setTimeout(() => {
-          _ || (m(), t(k.silentLoginAsync_error, { reason: "timeout" }), h(new Error("timeout")));
-        }, g);
-      } catch (g) {
-        m(), t(k.silentLoginAsync_error, g), h(g);
-      }
-    });
-  } catch (r) {
-    throw t(k.silentLoginAsync_error, r), r;
-  }
-}, pn = (e, n, t, s, o) => (i = null, r = void 0) => {
-  i = { ...i };
-  const a = (f, u, l) => we(n, t, s.bind(o))(
-    f,
-    u,
-    l
-  );
-  return (async () => {
-    o.timeoutId && R.clearTimeout(o.timeoutId);
-    let f;
-    i && "state" in i && (f = i.state, delete i.state);
-    try {
-      const u = t.extras ? { ...t.extras, ...i } : i, l = await a(
-        {
-          ...u,
-          prompt: "none"
-        },
-        f,
-        r
-      );
-      if (l)
-        return o.tokens = l.tokens, s(k.token_acquired, {}), o.timeoutId = X(o, o.tokens.expiresAt, i, r), {};
-    } catch (u) {
-      return u;
-    }
-  })();
-}, An = (e, n, t) => (s, o, i, r = !1) => {
-  const a = (c, f = void 0, u = void 0) => we(e.configurationName, t, e.publishEvent.bind(e))(
-    c,
-    f,
-    u
-  );
-  return new Promise((c, f) => {
-    if (t.silent_login_uri && t.silent_redirect_uri && t.monitor_session && s && i && !r) {
-      const u = () => {
-        e.checkSessionIFrame.stop();
-        const l = e.tokens;
-        if (l === null)
-          return;
-        const h = l.idToken, _ = l.idTokenPayload;
-        return a({
-          prompt: "none",
-          id_token_hint: h,
-          scope: t.scope || "openid"
-        }).then((m) => {
-          if (m.error)
-            throw new Error(m.error);
-          const p = m.tokens.idTokenPayload;
-          if (_.sub === p.sub) {
-            const g = m.sessionState;
-            e.checkSessionIFrame.start(m.sessionState), _.sid === p.sid ? console.debug(
-              "SessionMonitor._callback: Same sub still logged in at OP, restarting check session iframe; session_state:",
-              g
-            ) : console.debug(
-              "SessionMonitor._callback: Same sub still logged in at OP, session state has changed, restarting check session iframe; session_state:",
-              g
-            );
-          } else
-            console.debug(
-              "SessionMonitor._callback: Different subject signed into OP:",
-              p.sub
-            );
-        }).catch(async (m) => {
-          console.warn(
-            "SessionMonitor._callback: Silent login failed, logging out other tabs:",
-            m
-          );
-          for (const [, p] of Object.entries(n))
-            await p.logoutOtherTabAsync(t.client_id, _.sub);
-        });
-      };
-      e.checkSessionIFrame = new Fe(
-        u,
-        o,
-        s
-      ), e.checkSessionIFrame.load().then(() => {
-        e.checkSessionIFrame.start(i), c(e.checkSessionIFrame);
-      }).catch((l) => {
-        f(l);
-      });
-    } else
-      c(null);
-  });
-}, Sn = (e) => !!(e.os === "iOS" && e.osVersion.startsWith("12") || e.os === "Mac OS X" && e.osVersion.startsWith("10_15_6")), Tn = (e) => {
-  const n = e.appVersion, t = e.userAgent, s = "-";
-  let o = s;
-  const i = [
-    { s: "Windows 10", r: /(Windows 10.0|Windows NT 10.0)/ },
-    { s: "Windows 8.1", r: /(Windows 8.1|Windows NT 6.3)/ },
-    { s: "Windows 8", r: /(Windows 8|Windows NT 6.2)/ },
-    { s: "Windows 7", r: /(Windows 7|Windows NT 6.1)/ },
-    { s: "Windows Vista", r: /Windows NT 6.0/ },
-    { s: "Windows Server 2003", r: /Windows NT 5.2/ },
-    { s: "Windows XP", r: /(Windows NT 5.1|Windows XP)/ },
-    { s: "Windows 2000", r: /(Windows NT 5.0|Windows 2000)/ },
-    { s: "Windows ME", r: /(Win 9x 4.90|Windows ME)/ },
-    { s: "Windows 98", r: /(Windows 98|Win98)/ },
-    { s: "Windows 95", r: /(Windows 95|Win95|Windows_95)/ },
-    { s: "Windows NT 4.0", r: /(Windows NT 4.0|WinNT4.0|WinNT|Windows NT)/ },
-    { s: "Windows CE", r: /Windows CE/ },
-    { s: "Windows 3.11", r: /Win16/ },
-    { s: "Android", r: /Android/ },
-    { s: "Open BSD", r: /OpenBSD/ },
-    { s: "Sun OS", r: /SunOS/ },
-    { s: "Chrome OS", r: /CrOS/ },
-    { s: "Linux", r: /(Linux|X11(?!.*CrOS))/ },
-    { s: "iOS", r: /(iPhone|iPad|iPod)/ },
-    { s: "Mac OS X", r: /Mac OS X/ },
-    { s: "Mac OS", r: /(Mac OS|MacPPC|MacIntel|Mac_PowerPC|Macintosh)/ },
-    { s: "QNX", r: /QNX/ },
-    { s: "UNIX", r: /UNIX/ },
-    { s: "BeOS", r: /BeOS/ },
-    { s: "OS/2", r: /OS\/2/ },
-    {
-      s: "Search Bot",
-      r: /(nuhk|Googlebot|Yammybot|Openbot|Slurp|MSNBot|Ask Jeeves\/Teoma|ia_archiver)/
-    }
-  ];
-  for (const a in i) {
-    const c = i[a];
-    if (c.r.test(t)) {
-      o = c.s;
-      break;
-    }
-  }
-  let r = s;
-  switch (/Windows/.test(o) && (r = /Windows (.*)/.exec(o)[1], o = "Windows"), o) {
-    case "Mac OS":
-    case "Mac OS X":
-    case "Android":
-      r = /(?:Android|Mac OS|Mac OS X|MacPPC|MacIntel|Mac_PowerPC|Macintosh) ([._\d]+)/.exec(t)[1];
-      break;
-    case "iOS": {
-      const a = /OS (\d+)_(\d+)_?(\d+)?/.exec(n);
-      a != null && a.length > 2 && (r = a[1] + "." + a[2] + "." + (parseInt(a[3]) | 0));
-      break;
-    }
-  }
-  return {
-    os: o,
-    osVersion: r
-  };
+var W = (e, t, n = null, r = null) => {
+	let i = e.configuration.refresh_time_before_tokens_expiration_in_second;
+	return e.timeoutId && y.clearTimeout(e.timeoutId), y.setTimeout(async () => {
+		let a = { timeLeft: h(i, t) };
+		e.publishEvent($.eventNames.token_timer, a), await Oe(e, !1, n, r);
+	}, 1e3);
+}, G = {
+	FORCE_REFRESH: "FORCE_REFRESH",
+	SESSION_LOST: "SESSION_LOST",
+	NOT_CONNECTED: "NOT_CONNECTED",
+	TOKENS_VALID: "TOKENS_VALID",
+	TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID: "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID",
+	TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID: "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID",
+	LOGOUT_FROM_ANOTHER_TAB: "LOGOUT_FROM_ANOTHER_TAB",
+	REQUIRE_SYNC_TOKENS: "REQUIRE_SYNC_TOKENS",
+	TOKENS_INVALID: "TOKENS_INVALID"
+}, K = (e) => async (t, n, r, i = !1) => {
+	let o = { nonce: null };
+	if (!r) return {
+		tokens: null,
+		status: G.NOT_CONNECTED,
+		nonce: o
+	};
+	let s, c = await e.initAsync(t.authority, t.authority_configuration), l = await P(t, n);
+	if (l) {
+		let { status: e, tokens: n } = await l.initAsync(c, "syncTokensAsync", t);
+		if (e === "LOGGED_OUT") return {
+			tokens: null,
+			status: G.LOGOUT_FROM_ANOTHER_TAB,
+			nonce: o
+		};
+		if (e === "SESSIONS_LOST") return {
+			tokens: null,
+			status: G.SESSION_LOST,
+			nonce: o
+		};
+		if (!e || !n) return {
+			tokens: null,
+			status: G.REQUIRE_SYNC_TOKENS,
+			nonce: o
+		};
+		if (n.issuedAt !== r.issuedAt) return {
+			tokens: n,
+			status: h(t.refresh_time_before_tokens_expiration_in_second, n.expiresAt) > 0 ? G.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID : G.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID,
+			nonce: await l.getNonceAsync()
+		};
+		s = await l.getNonceAsync();
+	} else {
+		let i = a(n, t.storage ?? sessionStorage, t.login_state_storage ?? t.storage ?? sessionStorage), c = await i.initAsync(), { tokens: l } = c, { status: u } = c;
+		if (l &&= p(l, e.tokens, t.token_renew_mode), !l) return {
+			tokens: null,
+			status: G.LOGOUT_FROM_ANOTHER_TAB,
+			nonce: o
+		};
+		if (u === "SESSIONS_LOST") return {
+			tokens: null,
+			status: G.SESSION_LOST,
+			nonce: o
+		};
+		if (l.issuedAt !== r.issuedAt) {
+			let e = h(t.refresh_time_before_tokens_expiration_in_second, l.expiresAt) > 0 ? G.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID : G.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_INVALID, n = await i.getNonceAsync();
+			return {
+				tokens: l,
+				status: e,
+				nonce: n
+			};
+		}
+		s = await i.getNonceAsync();
+	}
+	let u = h(t.refresh_time_before_tokens_expiration_in_second, r.expiresAt) > 0 ? "TOKENS_VALID" : "TOKENS_INVALID";
+	return i ? {
+		tokens: r,
+		status: "FORCE_REFRESH",
+		nonce: s
+	} : {
+		tokens: r,
+		status: u,
+		nonce: s
+	};
+}, q = (e) => async (t, n = 0, r = 0, s = !1, c = null, l = null) => {
+	if (!navigator.onLine && document.hidden) return {
+		tokens: e.tokens,
+		status: "GIVE_UP"
+	};
+	let u = 6, d = s ? 2 : 5;
+	for (; !navigator.onLine && u > 0;) await C({ milliseconds: 1e3 }), u--, e.publishEvent(i.refreshTokensAsync, { message: `wait because navigator is offline try ${u}` });
+	let f = document.hidden, p = f ? n : n + 1, m = f ? r + 1 : r;
+	if (n >= d || r >= 5) return t(null), e.publishEvent(i.refreshTokensAsync_error, { message: "refresh token" }), {
+		tokens: null,
+		status: "SESSION_LOST"
+	};
+	c ||= {};
+	let h = e.configuration, g = (t, n = null, r = null) => J(e.configurationName, e.configuration, e.publishEvent.bind(e))(t, n, r), _ = async () => {
+		try {
+			let n, r = await P(h, e.configurationName);
+			n = r ? r.getLoginParams() : a(e.configurationName, h.storage, h.login_state_storage ?? h.storage).getLoginParams();
+			let o = {};
+			if (n && n.extras) for (let [e, t] of Object.entries(n.extras)) t != null && (o[e] = t);
+			if (c) for (let [e, t] of Object.entries(c)) t != null && (o[e] = t);
+			o.prompt = "none", l && (o.scope = l);
+			let s = await g(o);
+			return s ? s.error ? (t(null), e.publishEvent(i.refreshTokensAsync_error, { message: "refresh token silent" }), {
+				tokens: null,
+				status: "SESSION_LOST"
+			}) : (t(s.tokens), e.publishEvent($.eventNames.token_renewed, {}), {
+				tokens: s.tokens,
+				status: "LOGGED"
+			}) : (t(null), e.publishEvent(i.refreshTokensAsync_error, { message: "refresh token silent not active" }), {
+				tokens: null,
+				status: "SESSION_LOST"
+			});
+		} catch (n) {
+			return console.error(n), e.publishEvent(i.refreshTokensAsync_silent_error, {
+				message: "exceptionSilent",
+				exception: n.message
+			}), await q(e)(t, p, m, s, c, l);
+		}
+	};
+	try {
+		let { status: u, tokens: d, nonce: f } = await K(e)(h, e.configurationName, e.tokens, s);
+		switch (u) {
+			case G.SESSION_LOST: return t(null), e.publishEvent(i.refreshTokensAsync_error, { message: "refresh token session lost" }), {
+				tokens: null,
+				status: "SESSION_LOST"
+			};
+			case G.NOT_CONNECTED: return t(null), {
+				tokens: null,
+				status: null
+			};
+			case G.TOKENS_VALID: return t(d), {
+				tokens: d,
+				status: "LOGGED_IN"
+			};
+			case G.TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID: return t(d), e.publishEvent($.eventNames.token_renewed, { reason: "TOKEN_UPDATED_BY_ANOTHER_TAB_TOKENS_VALID" }), {
+				tokens: d,
+				status: "LOGGED_IN"
+			};
+			case G.LOGOUT_FROM_ANOTHER_TAB: return t(null), e.publishEvent(i.logout_from_another_tab, { status: "session syncTokensAsync" }), {
+				tokens: null,
+				status: "LOGGED_OUT"
+			};
+			case G.REQUIRE_SYNC_TOKENS: return h.token_automatic_renew_mode == o.AutomaticOnlyWhenFetchExecuted && !s ? (e.publishEvent(i.tokensInvalidAndWaitingActionsToRefresh, {}), {
+				tokens: e.tokens,
+				status: "GIVE_UP"
+			}) : (e.publishEvent(i.refreshTokensAsync_begin, { tryNumber: n }), await _());
+			default: {
+				if (h.token_automatic_renew_mode == o.AutomaticOnlyWhenFetchExecuted && G.FORCE_REFRESH !== u) return e.publishEvent(i.tokensInvalidAndWaitingActionsToRefresh, {}), {
+					tokens: e.tokens,
+					status: "GIVE_UP"
+				};
+				if (e.publishEvent(i.refreshTokensAsync_begin, {
+					refreshToken: d.refreshToken,
+					status: u,
+					tryNumber: n,
+					backgroundTry: r
+				}), !d.refreshToken) return await _();
+				let g = h.client_id, y = h.redirect_uri, b = h.authority, x = { ...h.token_request_extras ? h.token_request_extras : {} };
+				for (let [e, t] of Object.entries(c)) e.endsWith(":token_request") && (x[e.replace(":token_request", "")] = t);
+				return await (async () => {
+					let n = {
+						client_id: g,
+						redirect_uri: y,
+						grant_type: "refresh_token",
+						refresh_token: d.refreshToken
+					}, r = await e.initAsync(b, h.authority_configuration), o = document.hidden ? 1e4 : 3e4 * 10, u = r.tokenEndpoint, _ = {};
+					h.demonstrating_proof_of_possession && (_.DPoP = await e.generateDemonstrationOfProofOfPossessionAsync(d.accessToken, u, "POST"));
+					let S = await we(e.getFetch())(u, n, x, d, _, h.token_renew_mode, o);
+					if (S.success) {
+						let { isValid: n, reason: o } = v(S.data, f.nonce, r);
+						if (!n) return t(null), e.publishEvent(i.refreshTokensAsync_error, { message: `refresh token return not valid tokens, reason: ${o}` }), {
+							tokens: null,
+							status: "SESSION_LOST"
+						};
+						if (t(S.data), S.demonstratingProofOfPossessionNonce) {
+							let t = await P(h, e.configurationName);
+							t ? await t.setDemonstratingProofOfPossessionNonce(S.demonstratingProofOfPossessionNonce) : await a(e.configurationName, h.storage, h.login_state_storage ?? h.storage).setDemonstratingProofOfPossessionNonce(S.demonstratingProofOfPossessionNonce);
+						}
+						return e.publishEvent(i.refreshTokensAsync_end, { success: S.success }), e.publishEvent($.eventNames.token_renewed, { reason: "REFRESH_TOKEN" }), {
+							tokens: S.data,
+							status: "LOGGED_IN"
+						};
+					} else return e.publishEvent(i.refreshTokensAsync_silent_error, {
+						message: "bad request",
+						tokenResponse: S
+					}), S.status >= 400 && S.status < 500 ? (t(null), e.publishEvent(i.refreshTokensAsync_error, { message: `session lost: ${S.status}` }), {
+						tokens: null,
+						status: "SESSION_LOST"
+					}) : await q(e)(t, p, m, s, c, l);
+				})();
+			}
+		}
+	} catch (n) {
+		return console.error(n), e.publishEvent(i.refreshTokensAsync_silent_error, {
+			message: "exception",
+			exception: n.message
+		}), new Promise((n, r) => {
+			setTimeout(() => {
+				q(e)(t, p, m, s, c, l).then(n).catch(r);
+			}, 1e3);
+		});
+	}
+}, J = (e, t, n) => (r = null, a = null, o = null) => {
+	if (!t.silent_redirect_uri || !t.silent_login_uri) return Promise.resolve(null);
+	try {
+		n(i.silentLoginAsync_begin, {});
+		let s = "";
+		if (a && (r ??= {}, r.state = a), o != null && (r ??= {}, r.scope = o), r != null) for (let [e, t] of Object.entries(r)) t != null && (s === "" ? s = `?${encodeURIComponent(e)}=${encodeURIComponent(t)}` : s += `&${encodeURIComponent(e)}=${encodeURIComponent(t)}`);
+		let c = t.silent_login_uri + s, l = c.indexOf("/", c.indexOf("//") + 2), u = c.substring(0, l), d = document.createElement("iframe");
+		return d.width = "0px", d.height = "0px", d.id = `${e}_oidc_iframe`, d.setAttribute("src", c), d.style.display = "none", document.body.appendChild(d), new Promise((r, a) => {
+			let o = !1, s = () => {
+				window.removeEventListener("message", c), d.remove(), o = !0;
+			}, c = (t) => {
+				if (t.origin === u && t.source === d.contentWindow) {
+					let c = `${e}_oidc_tokens:`, l = `${e}_oidc_error:`, u = `${e}_oidc_exception:`, d = t.data;
+					if (d && typeof d == "string" && !o) {
+						if (d.startsWith(c)) {
+							let e = JSON.parse(t.data.replace(c, ""));
+							n(i.silentLoginAsync_end, {}), r(e), s();
+						} else if (d.startsWith(l)) {
+							let e = JSON.parse(t.data.replace(l, ""));
+							n(i.silentLoginAsync_error, e), r({
+								error: "oidc_" + e.error,
+								tokens: null,
+								sessionState: null
+							}), s();
+						} else if (d.startsWith(u)) {
+							let e = JSON.parse(t.data.replace(u, ""));
+							n(i.silentLoginAsync_error, e), a(Error(e.error)), s();
+						}
+					}
+				}
+			};
+			try {
+				window.addEventListener("message", c);
+				let e = t.silent_login_timeout;
+				setTimeout(() => {
+					o || (s(), n(i.silentLoginAsync_error, { reason: "timeout" }), a(/* @__PURE__ */ Error("timeout")));
+				}, e);
+			} catch (e) {
+				s(), n(i.silentLoginAsync_error, e), a(e);
+			}
+		});
+	} catch (e) {
+		throw n(i.silentLoginAsync_error, e), e;
+	}
+}, ke = (e, t, n, r, a) => (e = null, o = void 0) => {
+	e = { ...e };
+	let s = (e, i, o) => J(t, n, r.bind(a))(e, i, o);
+	return (async () => {
+		a.timeoutId && y.clearTimeout(a.timeoutId);
+		let t;
+		e && "state" in e && (t = e.state, delete e.state);
+		try {
+			let c = await s({
+				...n.extras ? {
+					...n.extras,
+					...e
+				} : e,
+				prompt: "none"
+			}, t, o);
+			if (c) return a.tokens = c.tokens, r(i.token_acquired, {}), a.timeoutId = W(a, a.tokens.expiresAt, e, o), {};
+		} catch (e) {
+			return e;
+		}
+	})();
+}, Ae = (e, t, n) => (i, a, o, s = !1) => {
+	let c = (t, r = void 0, i = void 0) => J(e.configurationName, n, e.publishEvent.bind(e))(t, r, i);
+	return new Promise((l, u) => {
+		n.silent_login_uri && n.silent_redirect_uri && n.monitor_session && i && o && !s ? (e.checkSessionIFrame = new r(() => {
+			e.checkSessionIFrame.stop();
+			let r = e.tokens;
+			if (r === null) return;
+			let i = r.idToken, a = r.idTokenPayload;
+			return c({
+				prompt: "none",
+				id_token_hint: i,
+				scope: n.scope || "openid"
+			}).then((t) => {
+				if (t.error) throw Error(t.error);
+				let n = t.tokens.idTokenPayload;
+				if (a.sub === n.sub) {
+					let r = t.sessionState;
+					e.checkSessionIFrame.start(t.sessionState), a.sid === n.sid ? console.debug("SessionMonitor._callback: Same sub still logged in at OP, restarting check session iframe; session_state:", r) : console.debug("SessionMonitor._callback: Same sub still logged in at OP, session state has changed, restarting check session iframe; session_state:", r);
+				} else console.debug("SessionMonitor._callback: Different subject signed into OP:", n.sub);
+			}).catch(async (e) => {
+				console.warn("SessionMonitor._callback: Silent login failed, logging out other tabs:", e);
+				for (let [, e] of Object.entries(t)) await e.logoutOtherTabAsync(n.client_id, a.sub);
+			});
+		}, a, i), e.checkSessionIFrame.load().then(() => {
+			e.checkSessionIFrame.start(o), l(e.checkSessionIFrame);
+		}).catch((e) => {
+			u(e);
+		})) : l(null);
+	});
+}, je = (e) => !!(e.os === "iOS" && e.osVersion.startsWith("12") || e.os === "Mac OS X" && e.osVersion.startsWith("10_15_6")), Me = (e) => {
+	let t = e.appVersion, n = e.userAgent, r = "-", i = [
+		{
+			s: "Windows 10",
+			r: /(Windows 10.0|Windows NT 10.0)/
+		},
+		{
+			s: "Windows 8.1",
+			r: /(Windows 8.1|Windows NT 6.3)/
+		},
+		{
+			s: "Windows 8",
+			r: /(Windows 8|Windows NT 6.2)/
+		},
+		{
+			s: "Windows 7",
+			r: /(Windows 7|Windows NT 6.1)/
+		},
+		{
+			s: "Windows Vista",
+			r: /Windows NT 6.0/
+		},
+		{
+			s: "Windows Server 2003",
+			r: /Windows NT 5.2/
+		},
+		{
+			s: "Windows XP",
+			r: /(Windows NT 5.1|Windows XP)/
+		},
+		{
+			s: "Windows 2000",
+			r: /(Windows NT 5.0|Windows 2000)/
+		},
+		{
+			s: "Windows ME",
+			r: /(Win 9x 4.90|Windows ME)/
+		},
+		{
+			s: "Windows 98",
+			r: /(Windows 98|Win98)/
+		},
+		{
+			s: "Windows 95",
+			r: /(Windows 95|Win95|Windows_95)/
+		},
+		{
+			s: "Windows NT 4.0",
+			r: /(Windows NT 4.0|WinNT4.0|WinNT|Windows NT)/
+		},
+		{
+			s: "Windows CE",
+			r: /Windows CE/
+		},
+		{
+			s: "Windows 3.11",
+			r: /Win16/
+		},
+		{
+			s: "Android",
+			r: /Android/
+		},
+		{
+			s: "Open BSD",
+			r: /OpenBSD/
+		},
+		{
+			s: "Sun OS",
+			r: /SunOS/
+		},
+		{
+			s: "Chrome OS",
+			r: /CrOS/
+		},
+		{
+			s: "Linux",
+			r: /(Linux|X11(?!.*CrOS))/
+		},
+		{
+			s: "iOS",
+			r: /(iPhone|iPad|iPod)/
+		},
+		{
+			s: "Mac OS X",
+			r: /Mac OS X/
+		},
+		{
+			s: "Mac OS",
+			r: /(Mac OS|MacPPC|MacIntel|Mac_PowerPC|Macintosh)/
+		},
+		{
+			s: "QNX",
+			r: /QNX/
+		},
+		{
+			s: "UNIX",
+			r: /UNIX/
+		},
+		{
+			s: "BeOS",
+			r: /BeOS/
+		},
+		{
+			s: "OS/2",
+			r: /OS\/2/
+		},
+		{
+			s: "Search Bot",
+			r: /(nuhk|Googlebot|Yammybot|Openbot|Slurp|MSNBot|Ask Jeeves\/Teoma|ia_archiver)/
+		}
+	];
+	for (let e in i) {
+		let t = i[e];
+		if (t.r.test(n)) {
+			r = t.s;
+			break;
+		}
+	}
+	let a = "-";
+	switch (/Windows/.test(r) && (a = /Windows (.*)/.exec(r)[1], r = "Windows"), r) {
+		case "Mac OS":
+		case "Mac OS X":
+		case "Android":
+			a = /(?:Android|Mac OS|Mac OS X|MacPPC|MacIntel|Mac_PowerPC|Macintosh) ([._\d]+)/.exec(n)[1];
+			break;
+		case "iOS": {
+			let e = /OS (\d+)_(\d+)_?(\d+)?/.exec(t);
+			e != null && e.length > 2 && (a = e[1] + "." + e[2] + "." + (parseInt(e[3]) | 0));
+			break;
+		}
+	}
+	return {
+		os: r,
+		osVersion: a
+	};
 };
-function vn() {
-  const e = navigator.userAgent;
-  let n, t = e.match(/(opera|chrome|safari|firefox|msie|trident(?=\/))\/?\s*(\d+)/i) || [];
-  if (/trident/i.test(t[1]))
-    return n = /\brv[ :]+(\d+)/g.exec(e) || [], { name: "ie", version: n[1] || "" };
-  if (t[1] === "Chrome" && (n = e.match(/\bOPR|Edge\/(\d+)/), n != null)) {
-    let s = n[1];
-    if (!s) {
-      const o = e.split(n[0] + "/");
-      o.length > 1 && (s = o[1]);
-    }
-    return { name: "opera", version: s };
-  }
-  return t = t[2] ? [t[1], t[2]] : [navigator.appName, navigator.appVersion, "-?"], (n = e.match(/version\/(\d+)/i)) != null && t.splice(1, 1, n[1]), {
-    name: t[0].toLowerCase(),
-    version: t[1]
-  };
+function Ne() {
+	let e = navigator.userAgent, t, n = e.match(/(opera|chrome|safari|firefox|msie|trident(?=\/))\/?\s*(\d+)/i) || [];
+	if (/trident/i.test(n[1])) return t = /\brv[ :]+(\d+)/g.exec(e) || [], {
+		name: "ie",
+		version: t[1] || ""
+	};
+	if (n[1] === "Chrome" && (t = e.match(/\bOPR|Edge\/(\d+)/), t != null)) {
+		let n = t[1];
+		if (!n) {
+			let r = e.split(t[0] + "/");
+			r.length > 1 && (n = r[1]);
+		}
+		return {
+			name: "opera",
+			version: n
+		};
+	}
+	return n = n[2] ? [n[1], n[2]] : [
+		navigator.appName,
+		navigator.appVersion,
+		"-?"
+	], (t = e.match(/version\/(\d+)/i)) != null && n.splice(1, 1, t[1]), {
+		name: n[0].toLowerCase(),
+		version: n[1]
+	};
 }
-const En = () => {
-  const { name: e, version: n } = vn();
-  if (e === "chrome" && parseInt(n) <= 70 || e === "opera" && (!n || parseInt(n.split(".")[0]) < 80) || e === "ie")
-    return !1;
-  const t = Tn(navigator);
-  return !Sn(t);
-}, On = async (e) => {
-  let n;
-  if (e.tokens != null)
-    return !1;
-  e.publishEvent(k.tryKeepExistingSessionAsync_begin, {});
-  try {
-    const t = e.configuration, s = await e.initAsync(
-      t.authority,
-      t.authority_configuration
-    );
-    if (n = await W(t, e.configurationName), n) {
-      const { tokens: o } = await n.initAsync(
-        s,
-        "tryKeepExistingSessionAsync",
-        t
-      );
-      if (o) {
-        n.startKeepAliveServiceWorker(), e.tokens = o;
-        const i = n.getLoginParams(e.configurationName);
-        e.timeoutId = X(
-          e,
-          e.tokens.expiresAt,
-          i.extras,
-          i.scope
-        );
-        const r = await n.getSessionStateAsync();
-        return await e.startCheckSessionAsync(
-          s.checkSessionIframe,
-          t.client_id,
-          r
-        ), t.preload_user_info && await e.userInfoAsync(), e.publishEvent(k.tryKeepExistingSessionAsync_end, {
-          success: !0,
-          message: "tokens inside ServiceWorker are valid"
-        }), !0;
-      }
-      e.publishEvent(k.tryKeepExistingSessionAsync_end, {
-        success: !1,
-        message: "no exiting session found"
-      });
-    } else {
-      t.service_worker_relative_url && e.publishEvent(k.service_worker_not_supported_by_browser, {
-        message: "service worker is not supported by this browser"
-      });
-      const o = x(
-        e.configurationName,
-        t.storage ?? sessionStorage,
-        t.login_state_storage ?? t.storage ?? sessionStorage
-      ), { tokens: i } = await o.initAsync();
-      if (i) {
-        e.tokens = de(i, null, t.token_renew_mode);
-        const r = o.getLoginParams();
-        e.timeoutId = X(
-          e,
-          e.tokens.expiresAt,
-          r.extras,
-          r.scope
-        );
-        const a = await o.getSessionStateAsync();
-        return await e.startCheckSessionAsync(
-          s.checkSessionIframe,
-          t.client_id,
-          a
-        ), t.preload_user_info && await e.userInfoAsync(), e.publishEvent(k.tryKeepExistingSessionAsync_end, {
-          success: !0,
-          message: "tokens inside storage are valid"
-        }), !0;
-      }
-    }
-    return e.publishEvent(k.tryKeepExistingSessionAsync_end, {
-      success: !1,
-      message: n ? "service worker sessions not retrieved" : "session storage sessions not retrieved"
-    }), !1;
-  } catch (t) {
-    return console.error(t), n && await n.clearAsync(), e.publishEvent(
-      k.tryKeepExistingSessionAsync_error,
-      "tokens inside ServiceWorker are invalid"
-    ), !1;
-  }
-}, Ue = (e) => {
-  const n = e.match(
-    // eslint-disable-next-line no-useless-escape
-    /^([a-z][\w-]+\:)\/\/(([^:\/?#]*)(?:\:([0-9]+))?)([\/]{0,1}[^?#]*)(\?[^#]*|)(#.*|)$/
-  );
-  if (!n)
-    throw new Error("Invalid URL");
-  let t = n[6], s = n[7];
-  if (s) {
-    const o = s.split("?");
-    o.length === 2 && (s = o[0], t = o[1]);
-  }
-  return t.startsWith("?") && (t = t.slice(1)), n && {
-    href: e,
-    protocol: n[1],
-    host: n[2],
-    hostname: n[3],
-    port: n[4],
-    path: n[5],
-    search: t,
-    hash: s
-  };
-}, Kn = (e) => {
-  const n = Ue(e);
-  let { path: t } = n;
-  t.endsWith("/") && (t = t.slice(0, -1));
-  let { hash: s } = n;
-  return s === "#_=_" && (s = ""), s && (t += s), t;
-}, _e = (e) => {
-  const n = Ue(e), { search: t } = n;
-  return bn(t);
-}, bn = (e) => {
-  const n = {};
-  let t, s, o;
-  const i = e.split("&");
-  for (s = 0, o = i.length; s < o; s++)
-    t = i[s].split("="), n[decodeURIComponent(t[0])] = decodeURIComponent(t[1]);
-  return n;
-}, Pn = (e, n, t, s, o) => (i = void 0, r = null, a = !1, c = void 0) => {
-  const f = r;
-  return r = { ...r }, (async () => {
-    const l = i || o.getPath();
-    if ("state" in r || (r.state = le(16)), t(k.loginAsync_begin, {}), r)
-      for (const h of Object.keys(r))
-        h.endsWith(":token_request") && delete r[h];
-    try {
-      const h = a ? n.silent_redirect_uri : n.redirect_uri;
-      c || (c = n.scope);
-      const _ = n.extras ? { ...n.extras, ...r } : r;
-      _.nonce || (_.nonce = le(12));
-      const m = { nonce: _.nonce }, p = await W(n, e), g = await s(
-        n.authority,
-        n.authority_configuration
-      );
-      let y;
-      if (p)
-        p.setLoginParams({ callbackPath: l, extras: f, scope: c }), await p.initAsync(g, "loginAsync", n), await p.setNonceAsync(m), p.startKeepAliveServiceWorker(), y = p;
-      else {
-        const T = x(
-          e,
-          n.storage ?? sessionStorage,
-          n.login_state_storage ?? n.storage ?? sessionStorage
-        );
-        T.setLoginParams({ callbackPath: l, extras: f, scope: c }), await T.setNonceAsync(m), y = T;
-      }
-      const A = {
-        client_id: n.client_id,
-        redirect_uri: h,
-        scope: c,
-        response_type: "code",
-        ..._
-      };
-      await mn(y, o)(
-        g.authorizationEndpoint,
-        A
-      );
-    } catch (h) {
-      throw t(k.loginAsync_error, h), h;
-    }
-  })();
-}, In = (e) => async (n = !1) => {
-  try {
-    e.publishEvent(k.loginCallbackAsync_begin, {});
-    const t = e.configuration, s = t.client_id, o = n ? t.silent_redirect_uri : t.redirect_uri, i = t.authority, r = t.token_request_timeout, a = await e.initAsync(
-      i,
-      t.authority_configuration
-    ), c = e.location.getCurrentHref(), f = _e(c), u = f.session_state, l = await W(t, e.configurationName);
-    let h, _, m, p;
-    if (l)
-      await l.initAsync(a, "loginCallbackAsync", t), await l.setSessionStateAsync(u), _ = await l.getNonceAsync(), m = l.getLoginParams(), p = await l.getStateAsync(), l.startKeepAliveServiceWorker(), h = l;
-    else {
-      const E = x(
-        e.configurationName,
-        t.storage ?? sessionStorage,
-        t.login_state_storage ?? t.storage ?? sessionStorage
-      );
-      await E.setSessionStateAsync(u), _ = await E.getNonceAsync(), m = E.getLoginParams(), p = await E.getStateAsync(), h = E;
-    }
-    if (f.error || f.error_description)
-      throw new Error(
-        `Error from OIDC server: ${f.error} - ${f.error_description}`
-      );
-    if (f.iss && f.iss !== a.issuer)
-      throw console.error(), new Error(
-        `Issuer not valid (expected: ${a.issuer}, received: ${f.iss})`
-      );
-    if (f.state && f.state !== p)
-      throw new Error(`State not valid (expected: ${p}, received: ${f.state})`);
-    const g = {
-      code: f.code,
-      grant_type: "authorization_code",
-      client_id: t.client_id,
-      redirect_uri: o
-    }, y = {};
-    if (t.token_request_extras)
-      for (const [E, d] of Object.entries(t.token_request_extras))
-        y[E] = d;
-    if (m?.extras)
-      for (const [E, d] of Object.entries(m.extras))
-        E.endsWith(":token_request") && (y[E.replace(":token_request", "")] = d);
-    const A = a.tokenEndpoint, T = {};
-    if (t.demonstrating_proof_of_possession)
-      if (l)
-        T.DPoP = `DPOP_SECURED_BY_OIDC_SERVICE_WORKER_${e.configurationName}`;
-      else {
-        const E = await un(window)(
-          t.demonstrating_proof_of_possession_configuration.generateKeyAlgorithm
-        );
-        await x(
-          e.configurationName,
-          t.storage,
-          t.login_state_storage ?? t.storage
-        ).setDemonstratingProofOfPossessionJwkAsync(E), T.DPoP = await De(window)(
-          t.demonstrating_proof_of_possession_configuration
-        )(E, "POST", A);
-      }
-    const O = await wn(h)(
-      A,
-      { ...g, ...y },
-      T,
-      e.configuration.token_renew_mode,
-      r
-    );
-    if (!O.success)
-      throw new Error("Token request failed");
-    let v;
-    const C = O.data.tokens, w = O.data.demonstratingProofOfPossessionNonce;
-    if (O.data.state !== y.state)
-      throw new Error("state is not valid");
-    const { isValid: H, reason: $ } = Ne(
-      C,
-      _.nonce,
-      a
-    );
-    if (!H)
-      throw new Error(`Tokens are not OpenID valid, reason: ${$}`);
-    if (l) {
-      if (C.refreshToken && !C.refreshToken.includes("SECURED_BY_OIDC_SERVICE_WORKER"))
-        throw new Error("Refresh token should be hidden by service worker");
-      if (w && C?.accessToken.includes("SECURED_BY_OIDC_SERVICE_WORKER"))
-        throw new Error(
-          "Demonstration of proof of possession require Access token not hidden by service worker"
-        );
-    }
-    if (l)
-      await l.initAsync(a, "syncTokensAsync", t), v = l.getLoginParams(), w && await l.setDemonstratingProofOfPossessionNonce(
-        w
-      );
-    else {
-      const E = x(
-        e.configurationName,
-        t.storage,
-        t.login_state_storage ?? t.storage
-      );
-      v = E.getLoginParams(), w && await E.setDemonstratingProofOfPossessionNonce(w);
-    }
-    return await e.startCheckSessionAsync(
-      a.checkSessionIframe,
-      s,
-      u,
-      n
-    ), e.publishEvent(k.loginCallbackAsync_end, {}), {
-      tokens: C,
-      state: "request.state",
-      callbackPath: v.callbackPath,
-      scope: f.scope,
-      extras: v.extras
-    };
-  } catch (t) {
-    throw console.error(t), e.publishEvent(k.loginCallbackAsync_error, t), t;
-  }
-}, Pe = {
-  access_token: "access_token",
-  refresh_token: "refresh_token"
-}, ie = (e, n) => {
-  const t = {};
-  if (e) {
-    for (const [s, o] of Object.entries(e))
-      if (s.endsWith(n)) {
-        const i = s.replace(n, "");
-        t[i] = o;
-      }
-    return t;
-  }
-  return t;
-}, Cn = (e) => {
-  const n = {};
-  if (e) {
-    for (const [t, s] of Object.entries(e))
-      t.includes(":") || (n[t] = s);
-    return n;
-  }
-  return n;
-}, Nn = (e) => async (n) => {
-  R.clearTimeout(e.timeoutId), e.timeoutId = null, e.checkSessionIFrame && e.checkSessionIFrame.stop();
-  const t = await W(e.configuration, e.configurationName);
-  t ? await t.clearAsync(n) : await x(
-    e.configurationName,
-    e.configuration.storage,
-    e.configuration.login_state_storage ?? e.configuration.storage
-  ).clearAsync(n), e.tokens = null, e.userInfo = null;
-}, xn = (e, n, t, s, o) => async (i = void 0, r = null) => {
-  const a = e.configuration, c = await e.initAsync(
-    a.authority,
-    a.authority_configuration
-  );
-  i && typeof i != "string" && (i = void 0, s.warn("callbackPathOrUrl path is not a string"));
-  const f = i ?? o.getPath();
-  let u = !1;
-  i && (u = i.includes("https://") || i.includes("http://"));
-  const l = u ? i : o.getOrigin() + f, h = e.tokens ? e.tokens.idToken : "";
-  try {
-    const y = c.revocationEndpoint;
-    if (y) {
-      const A = [], T = e.tokens ? e.tokens.accessToken : null;
-      if (T && a.logout_tokens_to_invalidate.includes(Pe.access_token)) {
-        const v = ie(r, ":revoke_access_token"), C = Oe(t)(
-          y,
-          T,
-          ue.access_token,
-          a.client_id,
-          v
-        );
-        A.push(C);
-      }
-      const O = e.tokens ? e.tokens.refreshToken : null;
-      if (O && a.logout_tokens_to_invalidate.includes(Pe.refresh_token)) {
-        const v = ie(r, ":revoke_refresh_token"), C = Oe(t)(
-          y,
-          O,
-          ue.refresh_token,
-          a.client_id,
-          v
-        );
-        A.push(C);
-      }
-      A.length > 0 && await Promise.all(A);
-    }
-  } catch (y) {
-    s.warn(
-      "logoutAsync: error when revoking tokens, if the error persist, you ay configure property logout_tokens_to_invalidate from configuration to avoid this error"
-    ), s.warn(y);
-  }
-  const _ = e.tokens?.idTokenPayload?.sub ?? null;
-  await e.destroyAsync("LOGGED_OUT");
-  for (const [, y] of Object.entries(n))
-    y !== e ? await e.logoutSameTabAsync(e.configuration.client_id, _) : e.publishEvent(k.logout_from_same_tab, {});
-  const m = ie(r, ":oidc");
-  if (m && m.no_reload === "true")
-    return;
-  const g = Cn(r);
-  if (c.endSessionEndpoint) {
-    "id_token_hint" in g || (g.id_token_hint = h), !("post_logout_redirect_uri" in g) && i !== null && (g.post_logout_redirect_uri = l);
-    let y = "";
-    for (const [A, T] of Object.entries(g))
-      T != null && (y === "" ? y += "?" : y += "&", y += `${A}=${encodeURIComponent(T)}`);
-    o.open(`${c.endSessionEndpoint}${y}`);
-  } else
-    o.reload();
-}, Ve = (e, n, t = !1) => async (...s) => {
-  const [o, i, ...r] = s, a = i ? { ...i } : { method: "GET" };
-  let c = new Headers();
-  a.headers && (c = a.headers instanceof Headers ? a.headers : new Headers(a.headers));
-  const f = {
-    getTokens: () => n.tokens,
-    configuration: {
-      token_automatic_renew_mode: n.configuration.token_automatic_renew_mode,
-      refresh_time_before_tokens_expiration_in_second: n.configuration.refresh_time_before_tokens_expiration_in_second
-    },
-    syncTokensInfoAsync: async () => {
-      const { status: _ } = await me(n)(
-        n.configuration,
-        n.configurationName,
-        n.tokens,
-        !1
-      );
-      return _;
-    },
-    renewTokensAsync: n.renewTokensAsync.bind(n)
-  }, l = (await Ce(f))?.tokens?.accessToken;
-  if (c.has("Accept") || c.set("Accept", "application/json"), l) {
-    if (n.configuration.demonstrating_proof_of_possession && t) {
-      const _ = await n.generateDemonstrationOfProofOfPossessionAsync(
-        l,
-        o.toString(),
-        a.method
-      );
-      c.set("Authorization", `DPoP ${l}`), c.set("DPoP", _);
-    } else
-      c.set("Authorization", `Bearer ${l}`);
-    a.credentials || (a.credentials = "same-origin");
-  }
-  const h = { ...a, headers: c };
-  return await e(o, h, ...r);
-}, Wn = (e) => async (n = !1, t = !1) => {
-  if (e.userInfo != null && !n)
-    return e.userInfo;
-  const s = !n && e.configuration.storage?.getItem(`oidc.${e.configurationName}.userInfo`);
-  if (s)
-    return e.userInfo = JSON.parse(s), e.userInfo;
-  const o = e.configuration, r = (await e.initAsync(
-    o.authority,
-    o.authority_configuration
-  )).userInfoEndpoint, c = await (async () => {
-    const u = await Ve(fetch, e, t)(r);
-    return u.status !== 200 ? null : u.json();
-  })();
-  return e.userInfo = c, c && e.configuration.storage?.setItem(
-    `oidc.${e.configurationName}.userInfo`,
-    JSON.stringify(c)
-  ), c;
-}, Ln = () => fetch;
-class fe {
-  constructor(n) {
-    this.authorizationEndpoint = n.authorization_endpoint, this.tokenEndpoint = n.token_endpoint, this.revocationEndpoint = n.revocation_endpoint, this.userInfoEndpoint = n.userinfo_endpoint, this.checkSessionIframe = n.check_session_iframe, this.issuer = n.issuer, this.endSessionEndpoint = n.end_session_endpoint;
-  }
-}
-const V = {}, Dn = (e, n = new ee()) => (t, s = "default") => (V[s] || (V[s] = new D(t, s, e, n)), V[s]), Rn = async (e) => {
-  const { parsedTokens: n, callbackPath: t, extras: s, scope: o } = await e.loginCallbackAsync();
-  return e.timeoutId = X(e, n.expiresAt, s, o), { callbackPath: t };
-}, $n = (e) => Math.floor(Math.random() * e), j = class j {
-  constructor(n, t = "default", s, o = new ee()) {
-    this.initPromise = null, this.tryKeepExistingSessionPromise = null, this.loginPromise = null, this.loginCallbackPromise = null, this.loginCallbackWithAutoTokensRenewPromise = null, this.userInfoPromise = null, this.renewTokensPromise = null, this.logoutPromise = null;
-    let i = n.silent_login_uri;
-    n.silent_redirect_uri && !n.silent_login_uri && (i = `${n.silent_redirect_uri.replace("-callback", "").replace("callback", "")}-login`);
-    let r = n.refresh_time_before_tokens_expiration_in_second ?? 120;
-    r > 60 && (r = r - Math.floor(Math.random() * 40)), this.location = o ?? new ee(), this.configuration = {
-      ...n,
-      silent_login_uri: i,
-      token_automatic_renew_mode: n.token_automatic_renew_mode ?? q.AutomaticBeforeTokenExpiration,
-      monitor_session: n.monitor_session ?? !1,
-      refresh_time_before_tokens_expiration_in_second: r,
-      silent_login_timeout: n.silent_login_timeout ?? 12e3,
-      token_renew_mode: n.token_renew_mode ?? re.access_token_or_id_token_invalid,
-      demonstrating_proof_of_possession: n.demonstrating_proof_of_possession ?? !1,
-      authority_timeout_wellknowurl_in_millisecond: n.authority_timeout_wellknowurl_in_millisecond ?? 1e4,
-      logout_tokens_to_invalidate: n.logout_tokens_to_invalidate ?? [
-        "access_token",
-        "refresh_token"
-      ],
-      service_worker_activate: n.service_worker_activate ?? En,
-      demonstrating_proof_of_possession_configuration: n.demonstrating_proof_of_possession_configuration ?? nn,
-      preload_user_info: n.preload_user_info ?? !1
-    }, this.getFetch = s ?? Ln, this.configurationName = t, this.tokens = null, this.userInfo = null, this.events = [], this.timeoutId = null, this.loginCallbackWithAutoTokensRenewAsync.bind(this), this.initAsync.bind(this), this.loginCallbackAsync.bind(this), this.subscribeEvents.bind(this), this.removeEventSubscription.bind(this), this.publishEvent.bind(this), this.destroyAsync.bind(this), this.logoutAsync.bind(this), this.renewTokensAsync.bind(this), this.initAsync(this.configuration.authority, this.configuration.authority_configuration);
-  }
-  subscribeEvents(n) {
-    const t = $n(9999999999999).toString();
-    return this.events.push({ id: t, func: n }), t;
-  }
-  removeEventSubscription(n) {
-    const t = this.events.filter((s) => s.id !== n);
-    this.events = t;
-  }
-  publishEvent(n, t) {
-    this.events.forEach((s) => {
-      s.func(n, t);
-    });
-  }
-  static get(n = "default") {
-    const t = typeof process > "u";
-    if (!Object.prototype.hasOwnProperty.call(V, n) && t)
-      throw Error(`OIDC library does seem initialized.
-Please checkout that you are using OIDC hook inside a <OidcProvider configurationName="${n}"></OidcProvider> component.`);
-    return V[n];
-  }
-  _silentLoginCallbackFromIFrame() {
-    if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
-      const n = this.location, t = _e(n.getCurrentHref());
-      window.parent.postMessage(
-        `${this.configurationName}_oidc_tokens:${JSON.stringify({ tokens: this.tokens, sessionState: t.session_state })}`,
-        n.getOrigin()
-      );
-    }
-  }
-  _silentLoginErrorCallbackFromIFrame(n = null) {
-    if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
-      const t = this.location, s = _e(t.getCurrentHref());
-      s.error ? window.parent.postMessage(
-        `${this.configurationName}_oidc_error:${JSON.stringify({ error: s.error })}`,
-        t.getOrigin()
-      ) : window.parent.postMessage(
-        `${this.configurationName}_oidc_exception:${JSON.stringify({ error: n == null ? "" : n.toString() })}`,
-        t.getOrigin()
-      );
-    }
-  }
-  async silentLoginCallbackAsync() {
-    try {
-      await this.loginCallbackAsync(!0), this._silentLoginCallbackFromIFrame();
-    } catch (n) {
-      console.error(n), this._silentLoginErrorCallbackFromIFrame(n);
-    }
-  }
-  async initAsync(n, t) {
-    if (this.initPromise !== null)
-      return this.initPromise;
-    const s = async () => {
-      if (t != null)
-        return new fe({
-          authorization_endpoint: t.authorization_endpoint,
-          end_session_endpoint: t.end_session_endpoint,
-          revocation_endpoint: t.revocation_endpoint,
-          token_endpoint: t.token_endpoint,
-          userinfo_endpoint: t.userinfo_endpoint,
-          check_session_iframe: t.check_session_iframe,
-          issuer: t.issuer
-        });
-      const i = await W(this.configuration, this.configurationName) ? this.configuration.storage || window.sessionStorage : this.configuration.storage;
-      return await yn(this.getFetch())(
-        n,
-        this.configuration.authority_time_cache_wellknowurl_in_second ?? 3600,
-        i,
-        this.configuration.authority_timeout_wellknowurl_in_millisecond
-      );
-    };
-    return this.initPromise = s(), this.initPromise.finally(() => {
-      this.initPromise = null;
-    });
-  }
-  async tryKeepExistingSessionAsync() {
-    return this.tryKeepExistingSessionPromise !== null ? this.tryKeepExistingSessionPromise : (this.tryKeepExistingSessionPromise = On(this), this.tryKeepExistingSessionPromise.finally(() => {
-      this.tryKeepExistingSessionPromise = null;
-    }));
-  }
-  async startCheckSessionAsync(n, t, s, o = !1) {
-    await An(this, V, this.configuration)(
-      n,
-      t,
-      s,
-      o
-    );
-  }
-  async loginAsync(n = void 0, t = null, s = !1, o = void 0, i = !1) {
-    return this.logoutPromise && await this.logoutPromise, this.loginPromise !== null ? this.loginPromise : (i ? this.loginPromise = pn(
-      window,
-      this.configurationName,
-      this.configuration,
-      this.publishEvent.bind(this),
-      this
-    )(t, o) : this.loginPromise = Pn(
-      this.configurationName,
-      this.configuration,
-      this.publishEvent.bind(this),
-      this.initAsync.bind(this),
-      this.location
-    )(n, t, s, o), this.loginPromise.finally(() => {
-      this.loginPromise = null;
-    }));
-  }
-  async loginCallbackAsync(n = !1) {
-    if (this.loginCallbackPromise !== null)
-      return this.loginCallbackPromise;
-    const t = async () => {
-      const s = await In(this)(n), o = s.tokens;
-      return this.tokens = o, await W(this.configuration, this.configurationName) || x(
-        this.configurationName,
-        this.configuration.storage,
-        this.configuration.login_state_storage ?? this.configuration.storage
-      ).setTokens(o), this.publishEvent(j.eventNames.token_acquired, o), this.configuration.preload_user_info && await this.userInfoAsync(), {
-        parsedTokens: o,
-        state: s.state,
-        callbackPath: s.callbackPath,
-        scope: s.scope,
-        extras: s.extras
-      };
-    };
-    return this.loginCallbackPromise = t(), this.loginCallbackPromise.finally(() => {
-      this.loginCallbackPromise = null;
-    });
-  }
-  async generateDemonstrationOfProofOfPossessionAsync(n, t, s, o = {}) {
-    const i = this.configuration, r = {
-      ath: await $e(n),
-      ...o
-    };
-    if (await W(i, this.configurationName))
-      return `DPOP_SECURED_BY_OIDC_SERVICE_WORKER_${this.configurationName}#tabId=${he(this.configurationName)}`;
-    const c = x(
-      this.configurationName,
-      i.storage,
-      i.login_state_storage ?? i.storage
-    ), f = await c.getDemonstratingProofOfPossessionJwkAsync(), u = c.getDemonstratingProofOfPossessionNonce();
-    return u && (r.nonce = u), await De(window)(
-      i.demonstrating_proof_of_possession_configuration
-    )(f, s, t, r);
-  }
-  loginCallbackWithAutoTokensRenewAsync() {
-    return this.loginCallbackWithAutoTokensRenewPromise !== null ? this.loginCallbackWithAutoTokensRenewPromise : (this.loginCallbackWithAutoTokensRenewPromise = Rn(this), this.loginCallbackWithAutoTokensRenewPromise.finally(() => {
-      this.loginCallbackWithAutoTokensRenewPromise = null;
-    }));
-  }
-  userInfoAsync(n = !1, t = !1) {
-    return this.userInfoPromise !== null ? this.userInfoPromise : (this.userInfoPromise = Wn(this)(n, t), this.userInfoPromise.finally(() => {
-      this.userInfoPromise = null;
-    }));
-  }
-  async renewTokensAsync(n = null, t = null) {
-    if (this.renewTokensPromise !== null)
-      return this.renewTokensPromise;
-    if (this.timeoutId)
-      return R.clearTimeout(this.timeoutId), this.renewTokensPromise = Ke(this, !0, n, t), this.renewTokensPromise.finally(() => {
-        this.renewTokensPromise = null;
-      });
-  }
-  async destroyAsync(n) {
-    return await Nn(this)(n);
-  }
-  async logoutSameTabAsync(n, t) {
-    this.configuration.monitor_session && this.configuration.client_id === n && t && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === t && (await this.destroyAsync("LOGGED_OUT"), this.publishEvent(k.logout_from_same_tab, { mmessage: "SessionMonitor", sub: t }));
-  }
-  async logoutOtherTabAsync(n, t) {
-    this.configuration.monitor_session && this.configuration.client_id === n && t && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === t && (await this.destroyAsync("LOGGED_OUT"), this.publishEvent(k.logout_from_another_tab, { message: "SessionMonitor", sub: t }));
-  }
-  async logoutAsync(n = void 0, t = null) {
-    return this.logoutPromise ? this.logoutPromise : (this.logoutPromise = xn(
-      this,
-      V,
-      this.getFetch(),
-      console,
-      this.location
-    )(n, t), this.logoutPromise.finally(() => {
-      this.logoutPromise = null;
-    }));
-  }
-};
-j.getOrCreate = (n, t) => (s, o = "default") => Dn(n, t)(s, o), j.eventNames = k;
-let D = j;
-const J = class J {
-  constructor(n) {
-    this._oidc = n;
-  }
-  subscribeEvents(n) {
-    return this._oidc.subscribeEvents(n);
-  }
-  removeEventSubscription(n) {
-    this._oidc.removeEventSubscription(n);
-  }
-  publishEvent(n, t) {
-    this._oidc.publishEvent(n, t);
-  }
-  static get(n = "default") {
-    return new J(D.get(n));
-  }
-  tryKeepExistingSessionAsync() {
-    return this._oidc.tryKeepExistingSessionAsync();
-  }
-  loginAsync(n = void 0, t = null, s = !1, o = void 0, i = !1) {
-    return this._oidc.loginAsync(n, t, s, o, i);
-  }
-  logoutAsync(n = void 0, t = null) {
-    return this._oidc.logoutAsync(n, t);
-  }
-  silentLoginCallbackAsync() {
-    return this._oidc.silentLoginCallbackAsync();
-  }
-  renewTokensAsync(n = null, t = null) {
-    return this._oidc.renewTokensAsync(n, t);
-  }
-  loginCallbackAsync() {
-    return this._oidc.loginCallbackWithAutoTokensRenewAsync();
-  }
-  get tokens() {
-    return this._oidc.tokens;
-  }
-  get configuration() {
-    return this._oidc.configuration;
-  }
-  async generateDemonstrationOfProofOfPossessionAsync(n, t, s, o = {}) {
-    return this._oidc.generateDemonstrationOfProofOfPossessionAsync(
-      n,
-      t,
-      s,
-      o
-    );
-  }
-  async getValidTokenAsync(n = 200, t = 50) {
-    const s = this._oidc, o = {
-      getTokens: () => s.tokens,
-      configuration: {
-        token_automatic_renew_mode: s.configuration.token_automatic_renew_mode,
-        refresh_time_before_tokens_expiration_in_second: s.configuration.refresh_time_before_tokens_expiration_in_second
-      },
-      syncTokensInfoAsync: async () => {
-        const { status: i } = await me(s)(
-          s.configuration,
-          s.configurationName,
-          s.tokens,
-          !1
-        );
-        return i;
-      },
-      renewTokensAsync: s.renewTokensAsync.bind(s)
-    };
-    return Ce(o, n, t);
-  }
-  fetchWithTokens(n, t = !1) {
-    return Ve(n, this._oidc, t);
-  }
-  async userInfoAsync(n = !1, t = !1) {
-    return this._oidc.userInfoAsync(n, t);
-  }
-  userInfo() {
-    return this._oidc.userInfo;
-  }
-};
-J.getOrCreate = (n, t = new ee()) => (s, o = "default") => new J(D.getOrCreate(n, t)(s, o)), J.eventNames = D.eventNames;
-let Ie = J;
-export {
-  Ie as OidcClient,
-  ee as OidcLocation,
-  q as TokenAutomaticRenewMode,
-  re as TokenRenewMode,
-  Ln as getFetchDefault,
-  _e as getParseQueryStringFromLocation,
-  Kn as getPath
+var Pe = () => {
+	let { name: e, version: t } = Ne();
+	return e === "chrome" && parseInt(t) <= 70 || e === "opera" && (!t || parseInt(t.split(".")[0]) < 80) || e === "ie" ? !1 : !je(Me(navigator));
+}, Fe = async (e) => {
+	let t;
+	if (e.tokens != null) return !1;
+	e.publishEvent(i.tryKeepExistingSessionAsync_begin, {});
+	try {
+		let n = e.configuration, r = await e.initAsync(n.authority, n.authority_configuration);
+		if (t = await P(n, e.configurationName), t) {
+			let { tokens: a } = await t.initAsync(r, "tryKeepExistingSessionAsync", n);
+			if (a) {
+				t.startKeepAliveServiceWorker(), e.tokens = a;
+				let o = t.getLoginParams(e.configurationName);
+				e.timeoutId = W(e, e.tokens.expiresAt, o.extras, o.scope);
+				let s = await t.getSessionStateAsync();
+				return await e.startCheckSessionAsync(r.checkSessionIframe, n.client_id, s), n.preload_user_info && await e.userInfoAsync(), e.publishEvent(i.tryKeepExistingSessionAsync_end, {
+					success: !0,
+					message: "tokens inside ServiceWorker are valid"
+				}), !0;
+			}
+			e.publishEvent(i.tryKeepExistingSessionAsync_end, {
+				success: !1,
+				message: "no exiting session found"
+			});
+		} else {
+			n.service_worker_relative_url && e.publishEvent(i.service_worker_not_supported_by_browser, { message: "service worker is not supported by this browser" });
+			let t = a(e.configurationName, n.storage ?? sessionStorage, n.login_state_storage ?? n.storage ?? sessionStorage), { tokens: o } = await t.initAsync();
+			if (o) {
+				e.tokens = p(o, null, n.token_renew_mode);
+				let a = t.getLoginParams();
+				e.timeoutId = W(e, e.tokens.expiresAt, a.extras, a.scope);
+				let s = await t.getSessionStateAsync();
+				return await e.startCheckSessionAsync(r.checkSessionIframe, n.client_id, s), n.preload_user_info && await e.userInfoAsync(), e.publishEvent(i.tryKeepExistingSessionAsync_end, {
+					success: !0,
+					message: "tokens inside storage are valid"
+				}), !0;
+			}
+		}
+		return e.publishEvent(i.tryKeepExistingSessionAsync_end, {
+			success: !1,
+			message: t ? "service worker sessions not retrieved" : "session storage sessions not retrieved"
+		}), !1;
+	} catch (n) {
+		return console.error(n), t && await t.clearAsync(), e.publishEvent(i.tryKeepExistingSessionAsync_error, "tokens inside ServiceWorker are invalid"), !1;
+	}
+}, Ie = (e) => {
+	let t = e.match(/^([a-z][\w-]+\:)\/\/(([^:\/?#]*)(?:\:([0-9]+))?)([\/]{0,1}[^?#]*)(\?[^#]*|)(#.*|)$/);
+	if (!t) throw Error("Invalid URL");
+	let n = t[6], r = t[7];
+	if (r) {
+		let e = r.split("?");
+		e.length === 2 && (r = e[0], n = e[1]);
+	}
+	return n.startsWith("?") && (n = n.slice(1)), t && {
+		href: e,
+		protocol: t[1],
+		host: t[2],
+		hostname: t[3],
+		port: t[4],
+		path: t[5],
+		search: n,
+		hash: r
+	};
+}, Le = (e) => {
+	let t = Ie(e), { path: n } = t;
+	n.endsWith("/") && (n = n.slice(0, -1));
+	let { hash: r } = t;
+	return r === "#_=_" && (r = ""), r && (n += r), n;
+}, Y = (e) => {
+	let { search: t } = Ie(e);
+	return Re(t);
+}, Re = (e) => {
+	let t = {}, n, r, i, a = e.split("&");
+	for (r = 0, i = a.length; r < i; r++) n = a[r].split("="), t[decodeURIComponent(n[0])] = decodeURIComponent(n[1]);
+	return t;
+}, ze = (e, t, n, r, o) => (s = void 0, c = null, l = !1, u = void 0) => {
+	let d = c;
+	return c = { ...c }, (async () => {
+		let f = s || o.getPath();
+		if ("state" in c || (c.state = B(16)), n(i.loginAsync_begin, {}), c) for (let e of Object.keys(c)) e.endsWith(":token_request") && delete c[e];
+		try {
+			let n = l ? t.silent_redirect_uri : t.redirect_uri;
+			u ||= t.scope;
+			let i = t.extras ? {
+				...t.extras,
+				...c
+			} : c;
+			i.nonce ||= B(12);
+			let s = { nonce: i.nonce }, p = await P(t, e), m = await r(t.authority, t.authority_configuration), h;
+			if (p) p.setLoginParams({
+				callbackPath: f,
+				extras: d,
+				scope: u
+			}), await p.initAsync(m, "loginAsync", t), await p.setNonceAsync(s), p.startKeepAliveServiceWorker(), h = p;
+			else {
+				let n = a(e, t.storage ?? sessionStorage, t.login_state_storage ?? t.storage ?? sessionStorage);
+				n.setLoginParams({
+					callbackPath: f,
+					extras: d,
+					scope: u
+				}), await n.setNonceAsync(s), h = n;
+			}
+			let g = {
+				client_id: t.client_id,
+				redirect_uri: n,
+				scope: u,
+				response_type: "code",
+				...i
+			};
+			await Te(h, o)(m.authorizationEndpoint, g);
+		} catch (e) {
+			throw n(i.loginAsync_error, e), e;
+		}
+	})();
+}, Be = (e) => async (t = !1) => {
+	try {
+		e.publishEvent(i.loginCallbackAsync_begin, {});
+		let n = e.configuration, r = n.client_id, o = t ? n.silent_redirect_uri : n.redirect_uri, s = n.authority, c = n.token_request_timeout, l = await e.initAsync(s, n.authority_configuration), u = Y(e.location.getCurrentHref()), d = u.session_state, f = await P(n, e.configurationName), p, m, h, g;
+		if (f) await f.initAsync(l, "loginCallbackAsync", n), await f.setSessionStateAsync(d), m = await f.getNonceAsync(), h = f.getLoginParams(), g = await f.getStateAsync(), f.startKeepAliveServiceWorker(), p = f;
+		else {
+			let t = a(e.configurationName, n.storage ?? sessionStorage, n.login_state_storage ?? n.storage ?? sessionStorage);
+			await t.setSessionStateAsync(d), m = await t.getNonceAsync(), h = t.getLoginParams(), g = await t.getStateAsync(), p = t;
+		}
+		if (u.error || u.error_description) throw Error(`Error from OIDC server: ${u.error} - ${u.error_description}`);
+		if (u.iss && u.iss !== l.issuer) throw console.error(), Error(`Issuer not valid (expected: ${l.issuer}, received: ${u.iss})`);
+		if (u.state && u.state !== g) throw Error(`State not valid (expected: ${g}, received: ${u.state})`);
+		let _ = {
+			code: u.code,
+			grant_type: "authorization_code",
+			client_id: n.client_id,
+			redirect_uri: o
+		}, y = {};
+		if (n.token_request_extras) for (let [e, t] of Object.entries(n.token_request_extras)) y[e] = t;
+		if (h?.extras) for (let [e, t] of Object.entries(h.extras)) e.endsWith(":token_request") && (y[e.replace(":token_request", "")] = t);
+		let b = l.tokenEndpoint, x = {};
+		if (n.demonstrating_proof_of_possession) if (f) x.DPoP = `DPOP_SECURED_BY_OIDC_SERVICE_WORKER_${e.configurationName}`;
+		else {
+			let t = await fe(window)(n.demonstrating_proof_of_possession_configuration.generateKeyAlgorithm);
+			await a(e.configurationName, n.storage, n.login_state_storage ?? n.storage).setDemonstratingProofOfPossessionJwkAsync(t), x.DPoP = await pe(window)(n.demonstrating_proof_of_possession_configuration)(t, "POST", b);
+		}
+		let S = await Ee(p)(b, {
+			..._,
+			...y
+		}, x, e.configuration.token_renew_mode, c);
+		if (!S.success) throw Error("Token request failed");
+		let C, w = S.data.tokens, T = S.data.demonstratingProofOfPossessionNonce;
+		if (S.data.state !== y.state) throw Error("state is not valid");
+		let { isValid: E, reason: D } = v(w, m.nonce, l);
+		if (!E) throw Error(`Tokens are not OpenID valid, reason: ${D}`);
+		if (f) {
+			if (w.refreshToken && !w.refreshToken.includes("SECURED_BY_OIDC_SERVICE_WORKER")) throw Error("Refresh token should be hidden by service worker");
+			if (T && w?.accessToken.includes("SECURED_BY_OIDC_SERVICE_WORKER")) throw Error("Demonstration of proof of possession require Access token not hidden by service worker");
+		}
+		if (f) await f.initAsync(l, "syncTokensAsync", n), C = f.getLoginParams(), T && await f.setDemonstratingProofOfPossessionNonce(T);
+		else {
+			let t = a(e.configurationName, n.storage, n.login_state_storage ?? n.storage);
+			C = t.getLoginParams(), T && await t.setDemonstratingProofOfPossessionNonce(T);
+		}
+		return await e.startCheckSessionAsync(l.checkSessionIframe, r, d, t), e.publishEvent(i.loginCallbackAsync_end, {}), {
+			tokens: w,
+			state: "request.state",
+			callbackPath: C.callbackPath,
+			scope: u.scope,
+			extras: C.extras
+		};
+	} catch (t) {
+		throw console.error(t), e.publishEvent(i.loginCallbackAsync_error, t), t;
+	}
+}, Ve = {
+	access_token: "access_token",
+	refresh_token: "refresh_token"
+}, X = (e, t) => {
+	let n = {};
+	if (e) {
+		for (let [r, i] of Object.entries(e)) if (r.endsWith(t)) {
+			let e = r.replace(t, "");
+			n[e] = i;
+		}
+		return n;
+	}
+	return n;
+}, He = (e) => {
+	let t = {};
+	if (e) {
+		for (let [n, r] of Object.entries(e)) n.includes(":") || (t[n] = r);
+		return t;
+	}
+	return t;
+}, Ue = (e) => async (t) => {
+	y.clearTimeout(e.timeoutId), e.timeoutId = null, e.checkSessionIFrame && e.checkSessionIFrame.stop();
+	let n = await P(e.configuration, e.configurationName);
+	n ? await n.clearAsync(t) : await a(e.configurationName, e.configuration.storage, e.configuration.login_state_storage ?? e.configuration.storage).clearAsync(t), e.tokens = null, e.userInfo = null;
+}, We = (e, t, n, r, a) => async (o = void 0, s = null) => {
+	let c = e.configuration, l = await e.initAsync(c.authority, c.authority_configuration);
+	o && typeof o != "string" && (o = void 0, r.warn("callbackPathOrUrl path is not a string"));
+	let u = o ?? a.getPath(), d = !1;
+	o && (d = o.includes("https://") || o.includes("http://"));
+	let f = d ? o : a.getOrigin() + u, p = e.tokens ? e.tokens.idToken : "";
+	try {
+		let t = l.revocationEndpoint;
+		if (t) {
+			let r = [], i = e.tokens ? e.tokens.accessToken : null;
+			if (i && c.logout_tokens_to_invalidate.includes(Ve.access_token)) {
+				let e = X(s, ":revoke_access_token"), a = Ce(n)(t, i, H.access_token, c.client_id, e);
+				r.push(a);
+			}
+			let a = e.tokens ? e.tokens.refreshToken : null;
+			if (a && c.logout_tokens_to_invalidate.includes(Ve.refresh_token)) {
+				let e = X(s, ":revoke_refresh_token"), i = Ce(n)(t, a, H.refresh_token, c.client_id, e);
+				r.push(i);
+			}
+			r.length > 0 && await Promise.all(r);
+		}
+	} catch (e) {
+		r.warn("logoutAsync: error when revoking tokens, if the error persist, you ay configure property logout_tokens_to_invalidate from configuration to avoid this error"), r.warn(e);
+	}
+	let m = e.tokens?.idTokenPayload?.sub ?? null;
+	await e.destroyAsync("LOGGED_OUT");
+	for (let [, n] of Object.entries(t)) n === e ? e.publishEvent(i.logout_from_same_tab, {}) : await e.logoutSameTabAsync(e.configuration.client_id, m);
+	let h = X(s, ":oidc");
+	if (h && h.no_reload === "true") return;
+	let g = He(s);
+	if (l.endSessionEndpoint) {
+		"id_token_hint" in g || (g.id_token_hint = p), !("post_logout_redirect_uri" in g) && o !== null && (g.post_logout_redirect_uri = f);
+		let e = "";
+		for (let [t, n] of Object.entries(g)) n != null && (e === "" ? e += "?" : e += "&", e += `${t}=${encodeURIComponent(n)}`);
+		a.open(`${l.endSessionEndpoint}${e}`);
+	} else a.reload();
+}, Ge = (e, t, n = !1) => async (...r) => {
+	let [i, a, ...o] = r, s = a ? { ...a } : { method: "GET" }, c = new Headers();
+	s.headers && (c = s.headers instanceof Headers ? s.headers : new Headers(s.headers));
+	let l = (await _({
+		getTokens: () => t.tokens,
+		configuration: {
+			token_automatic_renew_mode: t.configuration.token_automatic_renew_mode,
+			refresh_time_before_tokens_expiration_in_second: t.configuration.refresh_time_before_tokens_expiration_in_second
+		},
+		syncTokensInfoAsync: async () => {
+			let { status: e } = await K(t)(t.configuration, t.configurationName, t.tokens, !1);
+			return e;
+		},
+		renewTokensAsync: t.renewTokensAsync.bind(t)
+	}))?.tokens?.accessToken;
+	if (c.has("Accept") || c.set("Accept", "application/json"), l) {
+		if (t.configuration.demonstrating_proof_of_possession && n) {
+			let e = await t.generateDemonstrationOfProofOfPossessionAsync(l, i.toString(), s.method);
+			c.set("Authorization", `DPoP ${l}`), c.set("DPoP", e);
+		} else c.set("Authorization", `Bearer ${l}`);
+		s.credentials ||= "same-origin";
+	}
+	return await e(i, {
+		...s,
+		headers: c
+	}, ...o);
+}, Ke = (e) => async (t = !1, n = !1) => {
+	if (e.userInfo != null && !t) return e.userInfo;
+	let r = !t && e.configuration.storage?.getItem(`oidc.${e.configurationName}.userInfo`);
+	if (r) return e.userInfo = JSON.parse(r), e.userInfo;
+	let i = e.configuration, a = (await e.initAsync(i.authority, i.authority_configuration)).userInfoEndpoint, o = await (async () => {
+		let t = await Ge(fetch, e, n)(a);
+		return t.status === 200 ? t.json() : null;
+	})();
+	return e.userInfo = o, o && e.configuration.storage?.setItem(`oidc.${e.configurationName}.userInfo`, JSON.stringify(o)), o;
+}, qe = () => fetch, Z = class {
+	constructor(e) {
+		this.authorizationEndpoint = e.authorization_endpoint, this.tokenEndpoint = e.token_endpoint, this.revocationEndpoint = e.revocation_endpoint, this.userInfoEndpoint = e.userinfo_endpoint, this.checkSessionIframe = e.check_session_iframe, this.issuer = e.issuer, this.endSessionEndpoint = e.end_session_endpoint;
+	}
+}, Q = {}, Je = (t, n = new e()) => (e, r = "default") => (Q[r] || (Q[r] = new $(e, r, t, n)), Q[r]), Ye = async (e) => {
+	let { parsedTokens: t, callbackPath: n, extras: r, scope: i } = await e.loginCallbackAsync();
+	return e.timeoutId = W(e, t.expiresAt, r, i), { callbackPath: n };
+}, Xe = (e) => Math.floor(Math.random() * e), $ = class t {
+	constructor(t, n = "default", r, i = new e()) {
+		this.initPromise = null, this.tryKeepExistingSessionPromise = null, this.loginPromise = null, this.loginCallbackPromise = null, this.loginCallbackWithAutoTokensRenewPromise = null, this.userInfoPromise = null, this.renewTokensPromise = null, this.logoutPromise = null;
+		let a = t.silent_login_uri;
+		t.silent_redirect_uri && !t.silent_login_uri && (a = `${t.silent_redirect_uri.replace("-callback", "").replace("callback", "")}-login`);
+		let s = t.refresh_time_before_tokens_expiration_in_second ?? 120;
+		s > 60 && (s -= Math.floor(Math.random() * 40)), this.location = i ?? new e(), this.configuration = {
+			...t,
+			silent_login_uri: a,
+			token_automatic_renew_mode: t.token_automatic_renew_mode ?? o.AutomaticBeforeTokenExpiration,
+			monitor_session: t.monitor_session ?? !1,
+			refresh_time_before_tokens_expiration_in_second: s,
+			silent_login_timeout: t.silent_login_timeout ?? 12e3,
+			token_renew_mode: t.token_renew_mode ?? d.access_token_or_id_token_invalid,
+			demonstrating_proof_of_possession: t.demonstrating_proof_of_possession ?? !1,
+			authority_timeout_wellknowurl_in_millisecond: t.authority_timeout_wellknowurl_in_millisecond ?? 1e4,
+			logout_tokens_to_invalidate: t.logout_tokens_to_invalidate ?? ["access_token", "refresh_token"],
+			service_worker_activate: t.service_worker_activate ?? Pe,
+			demonstrating_proof_of_possession_configuration: t.demonstrating_proof_of_possession_configuration ?? ce,
+			preload_user_info: t.preload_user_info ?? !1
+		}, this.getFetch = r ?? qe, this.configurationName = n, this.tokens = null, this.userInfo = null, this.events = [], this.timeoutId = null, this.loginCallbackWithAutoTokensRenewAsync.bind(this), this.initAsync.bind(this), this.loginCallbackAsync.bind(this), this.subscribeEvents.bind(this), this.removeEventSubscription.bind(this), this.publishEvent.bind(this), this.destroyAsync.bind(this), this.logoutAsync.bind(this), this.renewTokensAsync.bind(this), this.initAsync(this.configuration.authority, this.configuration.authority_configuration);
+	}
+	subscribeEvents(e) {
+		let t = Xe(9999999999999).toString();
+		return this.events.push({
+			id: t,
+			func: e
+		}), t;
+	}
+	removeEventSubscription(e) {
+		let t = this.events.filter((t) => t.id !== e);
+		this.events = t;
+	}
+	publishEvent(e, t) {
+		this.events.forEach((n) => {
+			n.func(e, t);
+		});
+	}
+	static {
+		this.getOrCreate = (e, t) => (n, r = "default") => Je(e, t)(n, r);
+	}
+	static get(e = "default") {
+		let t = typeof process > "u";
+		if (!Object.prototype.hasOwnProperty.call(Q, e) && t) throw Error(`OIDC library does seem initialized.
+Please checkout that you are using OIDC hook inside a <OidcProvider configurationName="${e}"></OidcProvider> component.`);
+		return Q[e];
+	}
+	static {
+		this.eventNames = i;
+	}
+	_silentLoginCallbackFromIFrame() {
+		if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
+			let e = this.location, t = Y(e.getCurrentHref());
+			window.parent.postMessage(`${this.configurationName}_oidc_tokens:${JSON.stringify({
+				tokens: this.tokens,
+				sessionState: t.session_state
+			})}`, e.getOrigin());
+		}
+	}
+	_silentLoginErrorCallbackFromIFrame(e = null) {
+		if (this.configuration.silent_redirect_uri && this.configuration.silent_login_uri) {
+			let t = this.location, n = Y(t.getCurrentHref());
+			n.error ? window.parent.postMessage(`${this.configurationName}_oidc_error:${JSON.stringify({ error: n.error })}`, t.getOrigin()) : window.parent.postMessage(`${this.configurationName}_oidc_exception:${JSON.stringify({ error: e == null ? "" : e.toString() })}`, t.getOrigin());
+		}
+	}
+	async silentLoginCallbackAsync() {
+		try {
+			await this.loginCallbackAsync(!0), this._silentLoginCallbackFromIFrame();
+		} catch (e) {
+			console.error(e), this._silentLoginErrorCallbackFromIFrame(e);
+		}
+	}
+	async initAsync(e, t) {
+		if (this.initPromise !== null) return this.initPromise;
+		let n = async () => {
+			if (t != null) return new Z({
+				authorization_endpoint: t.authorization_endpoint,
+				end_session_endpoint: t.end_session_endpoint,
+				revocation_endpoint: t.revocation_endpoint,
+				token_endpoint: t.token_endpoint,
+				userinfo_endpoint: t.userinfo_endpoint,
+				check_session_iframe: t.check_session_iframe,
+				issuer: t.issuer
+			});
+			let n = await P(this.configuration, this.configurationName) ? this.configuration.storage || window.sessionStorage : this.configuration.storage;
+			return await Se(this.getFetch())(e, this.configuration.authority_time_cache_wellknowurl_in_second ?? 3600, n, this.configuration.authority_timeout_wellknowurl_in_millisecond);
+		};
+		return this.initPromise = n(), this.initPromise.finally(() => {
+			this.initPromise = null;
+		});
+	}
+	async tryKeepExistingSessionAsync() {
+		return this.tryKeepExistingSessionPromise === null ? (this.tryKeepExistingSessionPromise = Fe(this), this.tryKeepExistingSessionPromise.finally(() => {
+			this.tryKeepExistingSessionPromise = null;
+		})) : this.tryKeepExistingSessionPromise;
+	}
+	async startCheckSessionAsync(e, t, n, r = !1) {
+		await Ae(this, Q, this.configuration)(e, t, n, r);
+	}
+	async loginAsync(e = void 0, t = null, n = !1, r = void 0, i = !1) {
+		return this.logoutPromise && await this.logoutPromise, this.loginPromise === null ? (i ? this.loginPromise = ke(window, this.configurationName, this.configuration, this.publishEvent.bind(this), this)(t, r) : this.loginPromise = ze(this.configurationName, this.configuration, this.publishEvent.bind(this), this.initAsync.bind(this), this.location)(e, t, n, r), this.loginPromise.finally(() => {
+			this.loginPromise = null;
+		})) : this.loginPromise;
+	}
+	async loginCallbackAsync(e = !1) {
+		if (this.loginCallbackPromise !== null) return this.loginCallbackPromise;
+		let n = async () => {
+			let n = await Be(this)(e), r = n.tokens;
+			return this.tokens = r, await P(this.configuration, this.configurationName) || a(this.configurationName, this.configuration.storage, this.configuration.login_state_storage ?? this.configuration.storage).setTokens(r), this.publishEvent(t.eventNames.token_acquired, r), this.configuration.preload_user_info && await this.userInfoAsync(), {
+				parsedTokens: r,
+				state: n.state,
+				callbackPath: n.callbackPath,
+				scope: n.scope,
+				extras: n.extras
+			};
+		};
+		return this.loginCallbackPromise = n(), this.loginCallbackPromise.finally(() => {
+			this.loginCallbackPromise = null;
+		});
+	}
+	async generateDemonstrationOfProofOfPossessionAsync(e, t, n, r = {}) {
+		let i = this.configuration, o = {
+			ath: await ye(e),
+			...r
+		};
+		if (await P(i, this.configurationName)) return `DPOP_SECURED_BY_OIDC_SERVICE_WORKER_${this.configurationName}#tabId=${E(this.configurationName)}`;
+		let s = a(this.configurationName, i.storage, i.login_state_storage ?? i.storage), c = await s.getDemonstratingProofOfPossessionJwkAsync(), l = s.getDemonstratingProofOfPossessionNonce();
+		return l && (o.nonce = l), await pe(window)(i.demonstrating_proof_of_possession_configuration)(c, n, t, o);
+	}
+	loginCallbackWithAutoTokensRenewAsync() {
+		return this.loginCallbackWithAutoTokensRenewPromise === null ? (this.loginCallbackWithAutoTokensRenewPromise = Ye(this), this.loginCallbackWithAutoTokensRenewPromise.finally(() => {
+			this.loginCallbackWithAutoTokensRenewPromise = null;
+		})) : this.loginCallbackWithAutoTokensRenewPromise;
+	}
+	userInfoAsync(e = !1, t = !1) {
+		return this.userInfoPromise === null ? (this.userInfoPromise = Ke(this)(e, t), this.userInfoPromise.finally(() => {
+			this.userInfoPromise = null;
+		})) : this.userInfoPromise;
+	}
+	async renewTokensAsync(e = null, t = null) {
+		if (this.renewTokensPromise !== null) return this.renewTokensPromise;
+		if (this.timeoutId) return y.clearTimeout(this.timeoutId), this.renewTokensPromise = Oe(this, !0, e, t), this.renewTokensPromise.finally(() => {
+			this.renewTokensPromise = null;
+		});
+	}
+	async destroyAsync(e) {
+		return await Ue(this)(e);
+	}
+	async logoutSameTabAsync(e, t) {
+		this.configuration.monitor_session && this.configuration.client_id === e && t && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === t && (await this.destroyAsync("LOGGED_OUT"), this.publishEvent(i.logout_from_same_tab, {
+			mmessage: "SessionMonitor",
+			sub: t
+		}));
+	}
+	async logoutOtherTabAsync(e, t) {
+		this.configuration.monitor_session && this.configuration.client_id === e && t && this.tokens && this.tokens.idTokenPayload && this.tokens.idTokenPayload.sub === t && (await this.destroyAsync("LOGGED_OUT"), this.publishEvent(i.logout_from_another_tab, {
+			message: "SessionMonitor",
+			sub: t
+		}));
+	}
+	async logoutAsync(e = void 0, t = null) {
+		return this.logoutPromise ? this.logoutPromise : (this.logoutPromise = We(this, Q, this.getFetch(), console, this.location)(e, t), this.logoutPromise.finally(() => {
+			this.logoutPromise = null;
+		}));
+	}
+}, Ze = class t {
+	constructor(e) {
+		this._oidc = e;
+	}
+	subscribeEvents(e) {
+		return this._oidc.subscribeEvents(e);
+	}
+	removeEventSubscription(e) {
+		this._oidc.removeEventSubscription(e);
+	}
+	publishEvent(e, t) {
+		this._oidc.publishEvent(e, t);
+	}
+	static {
+		this.getOrCreate = (n, r = new e()) => (e, i = "default") => new t($.getOrCreate(n, r)(e, i));
+	}
+	static get(e = "default") {
+		return new t($.get(e));
+	}
+	static {
+		this.eventNames = $.eventNames;
+	}
+	tryKeepExistingSessionAsync() {
+		return this._oidc.tryKeepExistingSessionAsync();
+	}
+	loginAsync(e = void 0, t = null, n = !1, r = void 0, i = !1) {
+		return this._oidc.loginAsync(e, t, n, r, i);
+	}
+	logoutAsync(e = void 0, t = null) {
+		return this._oidc.logoutAsync(e, t);
+	}
+	silentLoginCallbackAsync() {
+		return this._oidc.silentLoginCallbackAsync();
+	}
+	renewTokensAsync(e = null, t = null) {
+		return this._oidc.renewTokensAsync(e, t);
+	}
+	loginCallbackAsync() {
+		return this._oidc.loginCallbackWithAutoTokensRenewAsync();
+	}
+	get tokens() {
+		return this._oidc.tokens;
+	}
+	get configuration() {
+		return this._oidc.configuration;
+	}
+	async generateDemonstrationOfProofOfPossessionAsync(e, t, n, r = {}) {
+		return this._oidc.generateDemonstrationOfProofOfPossessionAsync(e, t, n, r);
+	}
+	async getValidTokenAsync(e = 200, t = 50) {
+		let n = this._oidc;
+		return _({
+			getTokens: () => n.tokens,
+			configuration: {
+				token_automatic_renew_mode: n.configuration.token_automatic_renew_mode,
+				refresh_time_before_tokens_expiration_in_second: n.configuration.refresh_time_before_tokens_expiration_in_second
+			},
+			syncTokensInfoAsync: async () => {
+				let { status: e } = await K(n)(n.configuration, n.configurationName, n.tokens, !1);
+				return e;
+			},
+			renewTokensAsync: n.renewTokensAsync.bind(n)
+		}, e, t);
+	}
+	fetchWithTokens(e, t = !1) {
+		return Ge(e, this._oidc, t);
+	}
+	async userInfoAsync(e = !1, t = !1) {
+		return this._oidc.userInfoAsync(e, t);
+	}
+	userInfo() {
+		return this._oidc.userInfo;
+	}
 };
+//#endregion
+export { Ze as OidcClient, e as OidcLocation, o as TokenAutomaticRenewMode, d as TokenRenewMode, qe as getFetchDefault, Y as getParseQueryStringFromLocation, Le as getPath };