@nsshunt/stsoauth2plugin 1.0.11 → 1.0.13

package/dist/stsoauth2plugin.umd.js

@@ -1,2 +1,2136 @@
-(function(l,O){typeof exports=="object"&&typeof module<"u"?O(exports,require("vue"),require("debug"),require("node:worker_threads"),require("@nsshunt/stsutils"),require("@nsshunt/stsvueutils"),require("pinia"),require("@nsshunt/stspublisherserver"),require("node:https"),require("colors"),require("axios"),require("@nsshunt/stsinstrumentation")):typeof define=="function"&&define.amd?define(["exports","vue","debug","node:worker_threads","@nsshunt/stsutils","@nsshunt/stsvueutils","pinia","@nsshunt/stspublisherserver","node:https","colors","axios","@nsshunt/stsinstrumentation"],O):(l=typeof globalThis<"u"?globalThis:l||self,O(l["@nsshunt/stsoauth2plugin"]={},l.vue,l.debug,l.worker_threads,l.stsutils,l.stsvueutils,l.pinia,l.stspublisherserver,l.https,null,l.axios,l.stsinstrumentation))})(this,function(l,O,y,te,G,re,qe,Ye,at,kt,Be,ct){var se,ie,Qe,Ke,ae,We,K,x,Ve,W,ye,j,fe,V,q,ce,ge,Se,pe,z,Ae,Ie,Y,Ne,ve,we,B,X,ke,F,Z,u,ee,Q,le,he,Pe,Ue,De,$,Me,Le,be,Te,He,de,Ce;"use strict";var vt=Object.defineProperty;var wt=(l,O,y)=>O in l?vt(l,O,{enumerable:!0,configurable:!0,writable:!0,value:y}):l[O]=y;var M=(l,O,y)=>(wt(l,typeof O!="symbol"?O+"":O,y),y),st=(l,O,y)=>{if(!O.has(l))throw TypeError("Cannot "+y)};var t=(l,O,y)=>(st(l,O,"read from private field"),y?y.call(l):O.get(l)),h=(l,O,y)=>{if(O.has(l))throw TypeError("Cannot add the same private member more than once");O instanceof WeakSet?O.add(l):O.set(l,y)},D=(l,O,y,te)=>(st(l,O,"write to private field"),te?te.call(l,y):O.set(l,y),y),it=(l,O,y,te)=>({set _(G){D(l,O,G,y)},get _(){return t(l,O,te)}});function lt(e){const r=Object.create(null,{[Symbol.toStringTag]:{value:"Module"}});if(e){for(const n in e)if(n!=="default"){const o=Object.getOwnPropertyDescriptor(e,n);Object.defineProperty(r,n,o.get?o:{enumerable:!0,get:()=>e[n]})}}return r.default=e,Object.freeze(r)}const ht=lt(te),Ee=Symbol(),L=Object.prototype.toString.call(typeof process<"u"?process:0)==="[object process]";var ne=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function ut(e){if(e.__esModule)return e;var r=e.default;if(typeof r=="function"){var n=function o(){if(this instanceof o){var a=[null];a.push.apply(a,arguments);var i=Function.bind.apply(r,a);return new i}return r.apply(this,arguments)};n.prototype=r.prototype}else n={};return Object.defineProperty(n,"__esModule",{value:!0}),Object.keys(e).forEach(function(o){var a=Object.getOwnPropertyDescriptor(e,o);Object.defineProperty(n,o,a.get?a:{enumerable:!0,get:function(){return e[o]}})}),n}var $e={},Et={get exports(){return $e},set exports(e){$e=e}};function ft(e){throw new Error('Could not dynamically require "'+e+'". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.')}var _e={},gt={get exports(){return _e},set exports(e){_e=e}};const pt=ut(Object.freeze(Object.defineProperty({__proto__:null,default:{}},Symbol.toStringTag,{value:"Module"})));var Je;function je(){return Je||(Je=1,function(e,r){(function(n,o){e.exports=o()})(ne,function(){var n=n||function(o,a){var i;if(typeof window<"u"&&window.crypto&&(i=window.crypto),typeof self<"u"&&self.crypto&&(i=self.crypto),typeof globalThis<"u"&&globalThis.crypto&&(i=globalThis.crypto),!i&&typeof window<"u"&&window.msCrypto&&(i=window.msCrypto),!i&&typeof ne<"u"&&ne.crypto&&(i=ne.crypto),!i&&typeof ft=="function")try{i=pt}catch{}var p=function(){if(i){if(typeof i.getRandomValues=="function")try{return i.getRandomValues(new Uint32Array(1))[0]}catch{}if(typeof i.randomBytes=="function")try{return i.randomBytes(4).readInt32LE()}catch{}}throw new Error("Native crypto module could not be used to get secure random number.")},S=Object.create||function(){function s(){}return function(c){var f;return s.prototype=c,f=new s,s.prototype=null,f}}(),m={},I=m.lib={},k=I.Base=function(){return{extend:function(s){var c=S(this);return s&&c.mixIn(s),(!c.hasOwnProperty("init")||this.init===c.init)&&(c.init=function(){c.$super.init.apply(this,arguments)}),c.init.prototype=c,c.$super=this,c},create:function(){var s=this.extend();return s.init.apply(s,arguments),s},init:function(){},mixIn:function(s){for(var c in s)s.hasOwnProperty(c)&&(this[c]=s[c]);s.hasOwnProperty("toString")&&(this.toString=s.toString)},clone:function(){return this.init.prototype.extend(this)}}}(),d=I.WordArray=k.extend({init:function(s,c){s=this.words=s||[],c!=a?this.sigBytes=c:this.sigBytes=s.length*4},toString:function(s){return(s||g).stringify(this)},concat:function(s){var c=this.words,f=s.words,T=this.sigBytes,N=s.sigBytes;if(this.clamp(),T%4)for(var U=0;U<N;U++){var b=f[U>>>2]>>>24-U%4*8&255;c[T+U>>>2]|=b<<24-(T+U)%4*8}else for(var H=0;H<N;H+=4)c[T+H>>>2]=f[H>>>2];return this.sigBytes+=N,this},clamp:function(){var s=this.words,c=this.sigBytes;s[c>>>2]&=4294967295<<32-c%4*8,s.length=o.ceil(c/4)},clone:function(){var s=k.clone.call(this);return s.words=this.words.slice(0),s},random:function(s){for(var c=[],f=0;f<s;f+=4)c.push(p());return new d.init(c,s)}}),A=m.enc={},g=A.Hex={stringify:function(s){for(var c=s.words,f=s.sigBytes,T=[],N=0;N<f;N++){var U=c[N>>>2]>>>24-N%4*8&255;T.push((U>>>4).toString(16)),T.push((U&15).toString(16))}return T.join("")},parse:function(s){for(var c=s.length,f=[],T=0;T<c;T+=2)f[T>>>3]|=parseInt(s.substr(T,2),16)<<24-T%8*4;return new d.init(f,c/2)}},P=A.Latin1={stringify:function(s){for(var c=s.words,f=s.sigBytes,T=[],N=0;N<f;N++){var U=c[N>>>2]>>>24-N%4*8&255;T.push(String.fromCharCode(U))}return T.join("")},parse:function(s){for(var c=s.length,f=[],T=0;T<c;T++)f[T>>>2]|=(s.charCodeAt(T)&255)<<24-T%4*8;return new d.init(f,c)}},E=A.Utf8={stringify:function(s){try{return decodeURIComponent(escape(P.stringify(s)))}catch{throw new Error("Malformed UTF-8 data")}},parse:function(s){return P.parse(unescape(encodeURIComponent(s)))}},_=I.BufferedBlockAlgorithm=k.extend({reset:function(){this._data=new d.init,this._nDataBytes=0},_append:function(s){typeof s=="string"&&(s=E.parse(s)),this._data.concat(s),this._nDataBytes+=s.sigBytes},_process:function(s){var c,f=this._data,T=f.words,N=f.sigBytes,U=this.blockSize,b=U*4,H=N/b;s?H=o.ceil(H):H=o.max((H|0)-this._minBufferSize,0);var ue=H*U,J=o.min(ue*4,N);if(ue){for(var Oe=0;Oe<ue;Oe+=U)this._doProcessBlock(T,Oe);c=T.splice(0,ue),f.sigBytes-=J}return new d.init(c,J)},clone:function(){var s=k.clone.call(this);return s._data=this._data.clone(),s},_minBufferSize:0});I.Hasher=_.extend({cfg:k.extend(),init:function(s){this.cfg=this.cfg.extend(s),this.reset()},reset:function(){_.reset.call(this),this._doReset()},update:function(s){return this._append(s),this._process(),this},finalize:function(s){s&&this._append(s);var c=this._doFinalize();return c},blockSize:16,_createHelper:function(s){return function(c,f){return new s.init(f).finalize(c)}},_createHmacHelper:function(s){return function(c,f){return new C.HMAC.init(s,f).finalize(c)}}});var C=m.algo={};return m}(Math);return n})}(gt)),_e}(function(e,r){(function(n,o){e.exports=o(je())})(ne,function(n){return function(o){var a=n,i=a.lib,p=i.WordArray,S=i.Hasher,m=a.algo,I=[],k=[];(function(){function g(C){for(var s=o.sqrt(C),c=2;c<=s;c++)if(!(C%c))return!1;return!0}function P(C){return(C-(C|0))*4294967296|0}for(var E=2,_=0;_<64;)g(E)&&(_<8&&(I[_]=P(o.pow(E,1/2))),k[_]=P(o.pow(E,1/3)),_++),E++})();var d=[],A=m.SHA256=S.extend({_doReset:function(){this._hash=new p.init(I.slice(0))},_doProcessBlock:function(g,P){for(var E=this._hash.words,_=E[0],C=E[1],s=E[2],c=E[3],f=E[4],T=E[5],N=E[6],U=E[7],b=0;b<64;b++){if(b<16)d[b]=g[P+b]|0;else{var H=d[b-15],ue=(H<<25|H>>>7)^(H<<14|H>>>18)^H>>>3,J=d[b-2],Oe=(J<<15|J>>>17)^(J<<13|J>>>19)^J>>>10;d[b]=ue+d[b-7]+Oe+d[b-16]}var yt=f&T^~f&N,St=_&C^_&s^C&s,At=(_<<30|_>>>2)^(_<<19|_>>>13)^(_<<10|_>>>22),It=(f<<26|f>>>6)^(f<<21|f>>>11)^(f<<7|f>>>25),ot=U+It+yt+k[b]+d[b],Nt=At+St;U=N,N=T,T=f,f=c+ot|0,c=s,s=C,C=_,_=ot+Nt|0}E[0]=E[0]+_|0,E[1]=E[1]+C|0,E[2]=E[2]+s|0,E[3]=E[3]+c|0,E[4]=E[4]+f|0,E[5]=E[5]+T|0,E[6]=E[6]+N|0,E[7]=E[7]+U|0},_doFinalize:function(){var g=this._data,P=g.words,E=this._nDataBytes*8,_=g.sigBytes*8;return P[_>>>5]|=128<<24-_%32,P[(_+64>>>9<<4)+14]=o.floor(E/4294967296),P[(_+64>>>9<<4)+15]=E,g.sigBytes=P.length*4,this._process(),this._hash},clone:function(){var g=S.clone.call(this);return g._hash=this._hash.clone(),g}});a.SHA256=S._createHelper(A),a.HmacSHA256=S._createHmacHelper(A)}(Math),n.SHA256})})(Et);var Fe={},Tt={get exports(){return Fe},set exports(e){Fe=e}};(function(e,r){(function(n,o){e.exports=o(je())})(ne,function(n){return function(){var o=n,a=o.lib,i=a.WordArray,p=o.enc;p.Base64={stringify:function(m){var I=m.words,k=m.sigBytes,d=this._map;m.clamp();for(var A=[],g=0;g<k;g+=3)for(var P=I[g>>>2]>>>24-g%4*8&255,E=I[g+1>>>2]>>>24-(g+1)%4*8&255,_=I[g+2>>>2]>>>24-(g+2)%4*8&255,C=P<<16|E<<8|_,s=0;s<4&&g+s*.75<k;s++)A.push(d.charAt(C>>>6*(3-s)&63));var c=d.charAt(64);if(c)for(;A.length%4;)A.push(c);return A.join("")},parse:function(m){var I=m.length,k=this._map,d=this._reverseMap;if(!d){d=this._reverseMap=[];for(var A=0;A<k.length;A++)d[k.charCodeAt(A)]=A}var g=k.charAt(64);if(g){var P=m.indexOf(g);P!==-1&&(I=P)}return S(m,I,d)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="};function S(m,I,k){for(var d=[],A=0,g=0;g<I;g++)if(g%4){var P=k[m.charCodeAt(g-1)]<<g%4*2,E=k[m.charCodeAt(g)]>>>6-g%4*2,_=P|E;d[A>>>2]|=_<<24-A%4*8,A++}return i.create(d,A)}}(),n.enc.Base64})})(Tt);class Xe{constructor(){h(this,se,void 0);M(this,"DigestMessage",async function(r){const n=$e(r);return Fe.stringify(n)});M(this,"CreateRandomString",(r=43)=>{const n=Array.from(t(this,se).getRandomValues(new Uint8Array(r)));return btoa(String.fromCharCode(...n))});try{D(this,se,crypto)}catch{D(this,se,require("crypto"))}}}se=new WeakMap;class Ze{constructor(){M(this,"DecodeQueryParams",r=>{const n={};return Object.keys(r).filter(o=>typeof r[o]<"u").map(o=>{n[decodeURIComponent(o)]=decodeURIComponent(r[o])}),n});M(this,"CreateQueryParams",r=>Object.keys(r).filter(n=>typeof r[n]<"u").map(n=>Array.isArray(r[n])?encodeURIComponent(n)+"="+encodeURIComponent(r[n].join(" ")):encodeURIComponent(n)+"="+encodeURIComponent(r[n])).join("&"));M(this,"_GetQueryParams",r=>{let n={};const o=r.split("?");if(o.length==2){const a=o[1].split("&"),i={};let p;a.forEach(function(S){p=S.split("="),p.length==2&&(i[p[0]]=p[1])}),n=this.DecodeQueryParams(i)}return n});M(this,"GetQueryParams",()=>this._GetQueryParams(window.location.href))}}var Ge=(e=>(e.CODE="code",e.ID_TOKEN="id_token",e.TOKEN="token",e))(Ge||{}),ze=(e=>(e.QUERY="query",e.FRAGMENT="fragment",e.FORM_POST="form_post",e))(ze||{}),Re=(e=>(e.CLIENT_CREDENTIALS="client_credentials",e.AUTHORIZATION_CODE="authorization_code",e.REFRESH_TOKEN="refresh_token",e))(Re||{}),R=(e=>(e.RESTORE_SESSION="RestoreSession",e.AUTHORIZE="Authorize",e.HANDLE_REDIRECT="HandleRedirect",e.LOGOUT="Logout",e.AUTHENTICATE_EVENT="AuthenticateEvent",e.ERROR="Error",e.LOG="__LOG",e.UPDATE_INSTRUMENT="__UPDATE_INSTRUMENT",e.ID_TOKEN="__ID_TOKEN",e.ACCESS_TOKEN="__ACCESS_TOKEN",e.COOKIES="__COOKIES",e.EXECUTE_REFRESH_TOKEN="__EXECUTE_REFRESH_TOKEN",e))(R||{});function xe(e){this.message=e}xe.prototype=new Error,xe.prototype.name="InvalidCharacterError";var et=typeof window<"u"&&window.atob&&window.atob.bind(window)||function(e){var r=String(e).replace(/=+$/,"");if(r.length%4==1)throw new xe("'atob' failed: The string to be decoded is not correctly encoded.");for(var n,o,a=0,i=0,p="";o=r.charAt(i++);~o&&(n=a%4?64*n+o:o,a++%4)?p+=String.fromCharCode(255&n>>(-2*a&6)):0)o="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(o);return p};function dt(e){var r=e.replace(/-/g,"+").replace(/_/g,"/");switch(r.length%4){case 0:break;case 2:r+="==";break;case 3:r+="=";break;default:throw"Illegal base64url string!"}try{return function(n){return decodeURIComponent(et(n).replace(/(.)/g,function(o,a){var i=a.charCodeAt(0).toString(16).toUpperCase();return i.length<2&&(i="0"+i),"%"+i}))}(r)}catch{return et(r)}}function me(e){this.message=e}function tt(e,r){if(typeof e!="string")throw new me("Invalid token specified");var n=(r=r||{}).header===!0?0:1;try{return JSON.parse(dt(e.split(".")[n]))}catch(o){throw new me("Invalid token specified: "+o.message)}}me.prototype=new Error,me.prototype.name="InvalidTokenError";const rt=qe.defineStore("__sts__STSOauth2Store",{state:()=>({id_token:null,error:null}),actions:{UpdateIdToken(e){this.id_token=e},UpdateError(e){this.error?this.error.message=e:this.error={message:e}}},getters:{LoggedIn:e=>!(typeof e.id_token>"u"||e.id_token===null),UserDetails:e=>{if(e.id_token){const r=e.id_token;return tt(r)}else return null}}});let w;L?w=y(`proc:${process.pid}:stsoauth2manager.ts`):w=y("proc:0:stsoauth2manager.ts");class nt{constructor(r,n){h(this,ie,null);h(this,Qe,new Xe);h(this,Ke,new Ze);h(this,ae,"authorize_options.stsmda.com.au");h(this,We,"session.stsmda.com.au");h(this,K,null);h(this,x,void 0);h(this,Ve,{});h(this,W,void 0);h(this,ye,0);h(this,j,{});h(this,fe,1e4);h(this,V,void 0);h(this,q,void 0);h(this,ce,!1);h(this,ge,100);h(this,Se,50);h(this,pe,r=>{const n=r;if(w(`STSOAuth2Manager:#ProcessMessageResponse: message data = [${JSON.stringify(n)}]`.yellow),n.messageId===-1)switch(n.command){case R.AUTHENTICATE_EVENT:t(this,ve).call(this,n.payload);break;case R.ERROR:t(this,Ne).call(this,n.payload);break;case R.LOG:t(this,Ae).call(this,n.payload);break;case R.UPDATE_INSTRUMENT:t(this,Ie).call(this,n.payload.instrumentName,n.payload.telemetry);break;default:throw new Error(`ProcessMessageResponse command [${n.command}] not valid.`)}else{const o=t(this,j)[n.messageId];if(o)o(n);else throw new Error(`Message: [${n.messageId}] does not exists in callBacks.`)}});h(this,z,r=>(r.messageId=it(this,ye)._++,new Promise((n,o)=>{const a=setTimeout(()=>{delete t(this,j)[r.messageId],o(`Message: [${r.messageId}] timeout error after: [${t(this,fe)}] ms.`)},t(this,fe));t(this,j)[r.messageId]=i=>{clearTimeout(a),delete t(this,j)[r.messageId],w(`STSOAuth2Manager:#PostMessage: resolve callback response= [${JSON.stringify(i)}]`.yellow),n(i)},w(`STSOAuth2Manager:#PostMessage: posting message = [${JSON.stringify(r)}]`.yellow),t(this,W).postMessage(r)})));h(this,Ae,r=>{t(this,K)&&t(this,K).LogEx(r),w(r)});h(this,Ie,(r,n)=>{t(this,K)&&t(this,K).UpdateInstrument(r,n)});h(this,Y,()=>rt(t(this,x).pinia));h(this,Ne,r=>{L||(t(this,Y).call(this).UpdateError({message:r}),setTimeout(()=>{t(this,ie).replace("/error")},0))});h(this,ve,r=>{L||(t(this,x).authenticateEvent&&t(this,x).authenticateEvent(r),t(this,Y).call(this).UpdateIdToken(r))});h(this,we,(r,n)=>{w("STSOAuth2Manager:#SetupRoute".gray),n.beforeEach(async(o,a,i)=>{const p=r.config.globalProperties.$sts[Ee];if(w(`beforeEach: from: [${a.path}], to: [${o.path}]`.gray),t(this,Y).call(this).LoggedIn===!1){if(console.log("Not logged in"),o.path.localeCompare("/authorize")===0){console.log("to = /authorize"),i();return}else if(o.path.localeCompare("/consent")===0&&t(this,Y).call(this).id_token){i();return}if(o.path.localeCompare("/logout")===0){i();return}if(o.path.localeCompare("/error")===0){i();return}if(o.path.localeCompare("/config")===0){i();return}if(o.path.localeCompare("/redirected")===0){i();return}const S=o.query;if(S[G.OAuth2ParameterType.CODE]||S[G.OAuth2ParameterType.ERROR]){w(`STSOAuth2Manager:#SetupRoute:Processing redirect: [${JSON.stringify(S)}]`.magenta);const I=await p.HandleRedirect(S);if(w(`STSOAuth2Manager:#SetupRoute:Redirect result: [${I}]`.magenta),I){i({path:"/",replace:!0});return}else{i({path:"/error",replace:!0});return}}w("STSOAuth2Manager:#SetupRoute:Restoring session");const m=await p.RestoreSession();if(w(`STSOAuth2Manager:#SetupRoute:Session restored: [${m}]`),m!==!0){w("STSOAuth2Manager:#SetupRoute:Session not restored - need to authorize"),p.Authorize(),i();return}else{i("/");return}}else{if(o.path.localeCompare("/consent")===0){i("/");return}if(o.path.localeCompare("/authorize")===0){i("/");return}if(o.path.localeCompare("/logout")===0){i("/");return}i()}})});M(this,"GetAccessToken",async()=>(await t(this,z).call(this,{command:R.ACCESS_TOKEN})).payload);M(this,"ExecuteRefreshToken",async(r=0)=>{if(t(this,ce)===!0){if(r>t(this,ge))throw new Error(`STSOAuth2Manager:ExecuteRefreshToken:maxSemaphoreRetries: [${t(this,ge)}] exceeded.`);return await G.Sleep(t(this,Se)),w(`STSOAuth2Manager:ExecuteRefreshToken:locked by operationSemaphore, retry count: [${r}]`.cyan),await this.ExecuteRefreshToken(r+1)}else{D(this,ce,!0);const n=await t(this,z).call(this,{command:R.EXECUTE_REFRESH_TOKEN});return D(this,ce,!1),n.payload}});M(this,"GetCookies",async()=>(await t(this,z).call(this,{command:R.COOKIES})).payload);M(this,"RestoreSession",async()=>{try{w(`STSOAuth2Manager:RestoreSession:postMessage: [${R.RESTORE_SESSION}]`);const r=await t(this,z).call(this,{command:R.RESTORE_SESSION});return w(`STSOAuth2Manager:RestoreSession:response: [${JSON.stringify(r.payload)}]`),r.payload}catch(r){return console.log(`RestoreSession Error: ${r}`),!1}});M(this,"Authorize",async()=>{try{const r=await t(this,z).call(this,{command:R.AUTHORIZE});t(this,q).set(t(this,ae),r.payload.authorizeOptions);const n=r.payload.url;if(!L)window.location.replace(n);else return r.payload.authorizeOptionsClientCopy}catch(r){console.log(`Authorize Error: ${r}`)}return{}});M(this,"HandleRedirect",async r=>{try{w("STSOAuth2Manager:HandleRedirect".magenta);let n=null;if(r[G.OAuth2ParameterType.CODE]){const o=t(this,q).get(t(this,ae));t(this,q).remove(t(this,ae)),w("STSOAuth2Manager:HandleRedirect: sending HANDLE_REDIRECT command".magenta),n=await t(this,z).call(this,{command:R.HANDLE_REDIRECT,payload:{queryVars:r,authorizeOptions:o}})}else n=await t(this,z).call(this,{command:R.HANDLE_REDIRECT,payload:r});return w(`STSOAuth2Manager:HandleRedirect: HANDLE_REDIRECT response: [${JSON.stringify(n)}]`.magenta),n.payload}catch(n){return console.log(`HandleRedirect Error: ${n}`),!1}});M(this,"Logout",async()=>{try{return(await t(this,z).call(this,{command:R.LOGOUT})).payload}catch(r){return console.log(`Logout Error: ${r}`),!1}});M(this,"InvokeExternalAPI",async()=>{try{return(await t(this,z).call(this,{command:R.LOGOUT})).payload}catch(r){return console.log(`InvokeExternalAPI Error: ${r}`),null}});M(this,"LoggedIn",()=>{try{return t(this,Y).call(this).LoggedIn}catch{return!1}});if(D(this,x,n),!L){if(r.config.globalProperties.$sts[Ye.STSInstrumentControllerPluginKey]){const a=r.config.globalProperties.$sts[Ye.STSInstrumentControllerPluginKey];D(this,K,a.PrimaryPublishInstrumentController)}D(this,ie,r.config.globalProperties.$router)}if(L?D(this,q,new re.ClientStorageFactory({clientStorageType:re.ClientStorageType.MEMORY_STORAGE,usePrefix:!1}).GetStorage()):D(this,q,new re.ClientStorageFactory({clientStorageType:re.ClientStorageType.SESSION_STORAGE,usePrefix:!1}).GetStorage()),t(this,x).workerFactory)D(this,V,t(this,x).workerFactory());else throw new Error("STSOAuth2Manager:constructor: Cannot init STSOAuth2Manager - this.#options.workerFactory not specified");L||(t(this,V).onmessage=a=>{console.log(`this.#worker.onmessage = [${a}]`)},t(this,V).onerror=function(a){console.log(`this.#worker.onerror = [${JSON.stringify(a)}]`)});let o;if(L){const{port1:a,port2:i}=new ht.MessageChannel;D(this,W,a),o={workerPort:i,options:t(this,x).workerOptions},t(this,V).postMessage(o,[i]),t(this,W).on("message",p=>{t(this,pe).call(this,p)}).unref()}else{const{port1:a,port2:i}=new MessageChannel;D(this,W,a),o={workerPort:i,options:t(this,x).workerOptions},t(this,V).postMessage(o,[i]),t(this,W).onmessage=p=>{t(this,pe).call(this,p.data)},t(this,we).call(this,r,t(this,ie))}}}ie=new WeakMap,Qe=new WeakMap,Ke=new WeakMap,ae=new WeakMap,We=new WeakMap,K=new WeakMap,x=new WeakMap,Ve=new WeakMap,W=new WeakMap,ye=new WeakMap,j=new WeakMap,fe=new WeakMap,V=new WeakMap,q=new WeakMap,ce=new WeakMap,ge=new WeakMap,Se=new WeakMap,pe=new WeakMap,z=new WeakMap,Ae=new WeakMap,Ie=new WeakMap,Y=new WeakMap,Ne=new WeakMap,ve=new WeakMap,we=new WeakMap;var oe;(function(e){e[e.ACCEPTED=202]="ACCEPTED",e[e.BAD_GATEWAY=502]="BAD_GATEWAY",e[e.BAD_REQUEST=400]="BAD_REQUEST",e[e.CONFLICT=409]="CONFLICT",e[e.CONTINUE=100]="CONTINUE",e[e.CREATED=201]="CREATED",e[e.EXPECTATION_FAILED=417]="EXPECTATION_FAILED",e[e.FAILED_DEPENDENCY=424]="FAILED_DEPENDENCY",e[e.FORBIDDEN=403]="FORBIDDEN",e[e.GATEWAY_TIMEOUT=504]="GATEWAY_TIMEOUT",e[e.GONE=410]="GONE",e[e.HTTP_VERSION_NOT_SUPPORTED=505]="HTTP_VERSION_NOT_SUPPORTED",e[e.IM_A_TEAPOT=418]="IM_A_TEAPOT",e[e.INSUFFICIENT_SPACE_ON_RESOURCE=419]="INSUFFICIENT_SPACE_ON_RESOURCE",e[e.INSUFFICIENT_STORAGE=507]="INSUFFICIENT_STORAGE",e[e.INTERNAL_SERVER_ERROR=500]="INTERNAL_SERVER_ERROR",e[e.LENGTH_REQUIRED=411]="LENGTH_REQUIRED",e[e.LOCKED=423]="LOCKED",e[e.METHOD_FAILURE=420]="METHOD_FAILURE",e[e.METHOD_NOT_ALLOWED=405]="METHOD_NOT_ALLOWED",e[e.MOVED_PERMANENTLY=301]="MOVED_PERMANENTLY",e[e.MOVED_TEMPORARILY=302]="MOVED_TEMPORARILY",e[e.MULTI_STATUS=207]="MULTI_STATUS",e[e.MULTIPLE_CHOICES=300]="MULTIPLE_CHOICES",e[e.NETWORK_AUTHENTICATION_REQUIRED=511]="NETWORK_AUTHENTICATION_REQUIRED",e[e.NO_CONTENT=204]="NO_CONTENT",e[e.NON_AUTHORITATIVE_INFORMATION=203]="NON_AUTHORITATIVE_INFORMATION",e[e.NOT_ACCEPTABLE=406]="NOT_ACCEPTABLE",e[e.NOT_FOUND=404]="NOT_FOUND",e[e.NOT_IMPLEMENTED=501]="NOT_IMPLEMENTED",e[e.NOT_MODIFIED=304]="NOT_MODIFIED",e[e.OK=200]="OK",e[e.PARTIAL_CONTENT=206]="PARTIAL_CONTENT",e[e.PAYMENT_REQUIRED=402]="PAYMENT_REQUIRED",e[e.PERMANENT_REDIRECT=308]="PERMANENT_REDIRECT",e[e.PRECONDITION_FAILED=412]="PRECONDITION_FAILED",e[e.PRECONDITION_REQUIRED=428]="PRECONDITION_REQUIRED",e[e.PROCESSING=102]="PROCESSING",e[e.PROXY_AUTHENTICATION_REQUIRED=407]="PROXY_AUTHENTICATION_REQUIRED",e[e.REQUEST_HEADER_FIELDS_TOO_LARGE=431]="REQUEST_HEADER_FIELDS_TOO_LARGE",e[e.REQUEST_TIMEOUT=408]="REQUEST_TIMEOUT",e[e.REQUEST_TOO_LONG=413]="REQUEST_TOO_LONG",e[e.REQUEST_URI_TOO_LONG=414]="REQUEST_URI_TOO_LONG",e[e.REQUESTED_RANGE_NOT_SATISFIABLE=416]="REQUESTED_RANGE_NOT_SATISFIABLE",e[e.RESET_CONTENT=205]="RESET_CONTENT",e[e.SEE_OTHER=303]="SEE_OTHER",e[e.SERVICE_UNAVAILABLE=503]="SERVICE_UNAVAILABLE",e[e.SWITCHING_PROTOCOLS=101]="SWITCHING_PROTOCOLS",e[e.TEMPORARY_REDIRECT=307]="TEMPORARY_REDIRECT",e[e.TOO_MANY_REQUESTS=429]="TOO_MANY_REQUESTS",e[e.UNAUTHORIZED=401]="UNAUTHORIZED",e[e.UNAVAILABLE_FOR_LEGAL_REASONS=451]="UNAVAILABLE_FOR_LEGAL_REASONS",e[e.UNPROCESSABLE_ENTITY=422]="UNPROCESSABLE_ENTITY",e[e.UNSUPPORTED_MEDIA_TYPE=415]="UNSUPPORTED_MEDIA_TYPE",e[e.USE_PROXY=305]="USE_PROXY",e[e.MISDIRECTED_REQUEST=421]="MISDIRECTED_REQUEST"})(oe||(oe={}));let v;L?v=y(`proc:${process.pid}:stsoauth2worker.ts`):v=y("proc:0:stsoauth2worker.ts");class Ot{constructor(r,n){h(this,B,void 0);h(this,X,new Xe);h(this,ke,new Ze);h(this,F,"session.stsmda.com.au");h(this,Z,void 0);h(this,u,void 0);h(this,ee,null);h(this,Q,r=>{const n={messageId:-1,command:R.AUTHENTICATE_EVENT};t(this,$).call(this,n,r)});h(this,le,r=>{const n={messageId:-1,command:R.ERROR};t(this,$).call(this,n,r)});h(this,he,r=>{const n={messageId:-1,command:R.LOG};t(this,$).call(this,n,r)});h(this,Pe,()=>{const r=t(this,B).get(t(this,F));return r?r.tokenResponse.access_token:null});h(this,Ue,()=>{if(L){const r=t(this,B).get(t(this,F));return r?r.brokerCookie:null}else return null});h(this,De,(r,n)=>{const o={messageId:-1,command:R.UPDATE_INSTRUMENT};t(this,$).call(this,o,{instrumentName:r,telemetry:n})});M(this,"SetupListener",()=>{t(this,Z).onmessage=async r=>{const n=r.data;switch(v(`STSOAuth2Worker:SetupListener:onmessage: [${n.command}]`),n.command){case R.RESTORE_SESSION:t(this,$).call(this,n,await t(this,Me).call(this));break;case R.AUTHORIZE:t(this,$).call(this,n,await t(this,Le).call(this));break;case R.HANDLE_REDIRECT:t(this,$).call(this,n,await t(this,be).call(this,n.payload));break;case R.LOGOUT:t(this,$).call(this,n,await t(this,Ce).call(this));break;case R.ACCESS_TOKEN:t(this,$).call(this,n,await t(this,Pe).call(this));break;case R.EXECUTE_REFRESH_TOKEN:t(this,$).call(this,n,await t(this,de).call(this));break;case R.COOKIES:t(this,$).call(this,n,await t(this,Ue).call(this));break;default:throw new Error(`Command: [${n.command}'] not found.`)}}});h(this,$,async(r,n)=>{const o={messageId:r.messageId,command:r.command,payload:n};t(this,Z).postMessage(o)});h(this,Me,async()=>{let r=null;const n=t(this,B).get(t(this,F));if(n)r=n.tokenResponse,console.log("Session restored from client storage."),t(this,he).call(this,"Session restored from client storage.");else{const o=`${t(this,u).brokerendpoint}:${t(this,u).brokerport}${t(this,u).brokerapiroot}/session`;console.log("RestoreSession"),console.log(o),t(this,he).call(this,"RestoreSession."),t(this,he).call(this,o);try{const a={method:"post",url:o,data:{[G.OAuth2ParameterType.CLIENT_ID]:t(this,u).client_id,[G.OAuth2ParameterType.SCOPE]:t(this,u).scope,[G.OAuth2ParameterType.REDIRECT_URI]:t(this,u).redirect_uri,[G.OAuth2ParameterType.AUDIENCE]:t(this,u).audience},withCredentials:!0,timeout:t(this,u).timeout};v(`#RestoreSession:session request detail: [${JSON.stringify(a)}]`.magenta),L&&(a.httpsAgent=t(this,ee));const i=await Be(a);if(i.data.status===oe.OK)if(r=i.data.detail,r){const p={tokenResponse:r};L&&(p.brokerCookie=i.headers["set-cookie"]),t(this,B).set(t(this,F),p),console.log("Session restored from server side cookie.")}else console.log("Could not restore previous session. No restoredSessionData available."),console.log(JSON.stringify(i.data));else console.log("Could not restore previous session:-"),console.log(JSON.stringify(i.data))}catch(a){console.log("Could not restore previous session (error state):-"),console.log(a),console.log(JSON.stringify(a))}}return r!==null?(t(this,Q).call(this,r.id_token),console.log("Refreshing tokens ..."),await t(this,de).call(this)):(t(this,Q).call(this,null),!1)});h(this,Le,async()=>{console.log("Authorize ...");const r=t(this,u).client_id,n=t(this,X).CreateRandomString(),o=[Ge.CODE],a=t(this,u).redirect_uri,i=ze.QUERY,p=t(this,u).scope,S=t(this,X).CreateRandomString(),m=t(this,X).CreateRandomString(),I=await t(this,X).DigestMessage(m),d={client_id:r,nonce:n,response_type:o,redirect_uri:a,response_mode:i,scope:p,state:S,code_challenge:I,code_challenge_method:"S256"},A={...d},g=`${t(this,u).authorizeendpoint}:${t(this,u).authorizeport}${t(this,u).authorizeapiroot}${t(this,u).authorizeapi}?${t(this,ke).CreateQueryParams(d)}`;return console.log(g),d.code_verifier=m,console.log(`Authorize:authorizeOptions: [${JSON.stringify(d)}]`),{url:g,authorizeOptions:d,authorizeOptionsClientCopy:A}});h(this,be,async r=>{const n=r.queryVars,o=r.authorizeOptions;if(v("#HandleRedirect: HandleRedirect".magenta),v(`#HandleRedirect: HandleRedirect:Query Vars: [${JSON.stringify(n)}]`.magenta),n[G.OAuth2ParameterType.CODE]){const a=n;console.log(`authorizeOptions from transaction state: [${JSON.stringify(o)}]`);const i=a.state,p=o.state;return p.localeCompare(i)===0?(console.log("redirected state (from queryVars) matched previously saved transaction authorizeOptions state"),await t(this,He).call(this,o,a)):(console.log("redirected state (from queryVars) did NOT match previously saved transaction authorizeOptions state"),console.log(`authorizeOptionsState: [${p}]`),console.log(`redirectState: [${i}]`),t(this,le).call(this,{message:"State un-matched"}),!1)}else return n[G.OAuth2ParameterType.ERROR]?(t(this,le).call(this,{message:"State un-matched"}),!1):(t(this,le).call(this,{message:"State un-matched"}),!1)});h(this,Te,async r=>{v("#GetTokenFromBroker".magenta),t(this,B).remove(t(this,F));const n=`${t(this,u).brokerendpoint}:${t(this,u).brokerport}${t(this,u).brokerapiroot}/token`;try{const o={method:"post",url:n,data:r,withCredentials:!0,timeout:t(this,u).timeout};v(`#GetTokenFromBroker: request config: [${JSON.stringify(o)}]`.magenta),L&&(o.httpsAgent=t(this,ee)),v("#GetTokenFromBroker: axios API call".magenta);const a=await Be(o);if(v(`#GetTokenFromBroker: axios API call result: [${a.status}]`.magenta),a.status===oe.OK){v("#GetTokenFromBroker: storing tokens".magenta);const i=a.data;t(this,Q).call(this,i.id_token);const p={tokenResponse:i};return L&&(p.brokerCookie=a.headers["set-cookie"]),t(this,B).set(t(this,F),p),!0}else return a.status===oe.UNAUTHORIZED?(v(`#GetTokenFromBroker: NOT storing tokens, status: [${a.status}]`.magenta),t(this,Q).call(this,null),!1):(v(`#GetTokenFromBroker: NOT storing tokens (general error 1), status: [${a.status}]`.magenta),t(this,Q).call(this,null),console.log("Could not obtain access_token from token end-point:-"),console.log(JSON.stringify(a.data)),!1)}catch(o){return v(`#GetTokenFromBroker: NOT storing tokens (general error 2), status: [${o}]`.red),t(this,Q).call(this,null),!1}});h(this,He,async(r,n)=>{console.log("#GetToken"),console.log(n),t(this,B).remove(t(this,F));const o={client_id:t(this,u).client_id,scope:t(this,u).scope,code:n.code,redirect_uri:t(this,u).redirect_uri,grant_type:Re.AUTHORIZATION_CODE,code_verifier:r.code_verifier};return await t(this,Te).call(this,o)});h(this,de,async()=>{v("STSOAuth2Worker:#RefreshToken:start".cyan);const r=t(this,B).get(t(this,F));if(r){v(`STSOAuth2Worker:#RefreshToken:sessionData: [${JSON.stringify(r)}]`.cyan);const n=r.tokenResponse,o={client_id:t(this,u).client_id,scope:t(this,u).scope,refresh_token:n.refresh_token,grant_type:Re.REFRESH_TOKEN};return await t(this,Te).call(this,o)}else return v("STSOAuth2Worker:#RefreshToken:sessionData not found within clientSessionStore".red),!1});h(this,Ce,async()=>{console.log("Logout");const r=`${t(this,u).brokerendpoint}:${t(this,u).brokerport}${t(this,u).brokerapiroot}/logout`;console.log(r);const n=t(this,B).get(t(this,F));if(n){const a=n.tokenResponse.refresh_token;console.log(a);const i=tt(a);console.log(i);const p=i.sts_session;console.log(p),t(this,B).remove(t(this,F)),t(this,Q).call(this,null);try{const S={method:"post",url:r,data:{sessionId:p},withCredentials:!0,timeout:t(this,u).timeout};v(`#Logout: request config: [${S}]`.magenta),L&&(S.httpsAgent=t(this,ee));const m=await Be(S);return m.data.status===oe.OK?!0:(console.log("Error during logout (1: server side)"),console.log(JSON.stringify(m.data)),!1)}catch(S){return console.log("Error during logout (2: server side)"),console.log(S),console.log(JSON.stringify(S)),!1}}else return console.log("Error during logout. Could not restore session from session storage."),!1});y.enable("proc:*"),D(this,u,n),v(`STSOAuth2Worker:constructor:#options: [${JSON.stringify(t(this,u))}]`),D(this,B,new re.ClientStorageFactory({clientStorageType:re.ClientStorageType.MEMORY_STORAGE,usePrefix:!1}).GetStorage()),D(this,Z,r),v(`STSOAuth2Worker:constructor:#oauthWorkerPort: [${JSON.stringify(t(this,Z))}]`),L&&t(this,u).agentOptions&&D(this,ee,new at.Agent({keepAlive:t(this,u).agentOptions.keepAlive,maxSockets:t(this,u).agentOptions.maxSockets,maxTotalSockets:t(this,u).agentOptions.maxTotalSockets,maxFreeSockets:t(this,u).agentOptions.maxFreeSockets,timeout:t(this,u).timeout,rejectUnauthorized:t(this,u).agentOptions.rejectUnauthorized})),this.SetupListener(),t(this,De).call(this,ct.Gauge.LOGGER,{LogMessage:"STSOauth2 Plugin - Successfully Loaded"})}}B=new WeakMap,X=new WeakMap,ke=new WeakMap,F=new WeakMap,Z=new WeakMap,u=new WeakMap,ee=new WeakMap,Q=new WeakMap,le=new WeakMap,he=new WeakMap,Pe=new WeakMap,Ue=new WeakMap,De=new WeakMap,$=new WeakMap,Me=new WeakMap,Le=new WeakMap,be=new WeakMap,Te=new WeakMap,He=new WeakMap,de=new WeakMap,Ce=new WeakMap;const _t=qe.defineStore("__sts__TestStore",{state:()=>({count:0}),actions:{UpdateCount(){this.count++}},getters:{CountXX:e=>e.count*2}}),Rt=()=>O.inject(Ee),mt={install:(e,r)=>{const n=new nt(e,r);e.config.globalProperties.$sts||(e.config.globalProperties.$sts={}),e.config.globalProperties.$sts[Ee]=n,e.provide(Ee,n)}};l.AuthorizeOptionsResponseMode=ze,l.AuthorizeOptionsResponseType=Ge,l.IOauth2ListenerCommand=R,l.OAuthGrantTypes=Re,l.STSOAuth2Manager=nt,l.STSOAuth2ManagerPlugin=mt,l.STSOAuth2ManagerPluginKey=Ee,l.STSOAuth2Worker=Ot,l.STSOauth2Store=rt,l.TestStore=_t,l.useSTSOAuth2ManagerPlugin=Rt,Object.defineProperty(l,Symbol.toStringTag,{value:"Module"})});
+(function(global2, factory) {
+  typeof exports === "object" && typeof module !== "undefined" ? factory(exports, require("vue"), require("debug"), require("node:worker_threads"), require("@nsshunt/stsutils"), require("@nsshunt/stsvueutils"), require("pinia"), require("@nsshunt/stspublisherserver"), require("node:https"), require("colors"), require("axios"), require("@nsshunt/stsinstrumentation")) : typeof define === "function" && define.amd ? define(["exports", "vue", "debug", "node:worker_threads", "@nsshunt/stsutils", "@nsshunt/stsvueutils", "pinia", "@nsshunt/stspublisherserver", "node:https", "colors", "axios", "@nsshunt/stsinstrumentation"], factory) : (global2 = typeof globalThis !== "undefined" ? globalThis : global2 || self, factory(global2["@nsshunt/stsoauth2plugin"] = {}, global2.vue, global2.debug, global2.worker_threads, global2.stsutils, global2.stsvueutils, global2.pinia, global2.stspublisherserver, global2.https, null, global2.axios, global2.stsinstrumentation));
+})(this, function(exports2, vue, Debug, wt, stsutils, stsvueutils, pinia, stspublisherserver, https, colors, axios, stsinstrumentation) {
+  var _crypto, _router, _cUtils, _qParams, _STORAGE_AUTHORIZE_OPTIONS_KEY, _STORAGE_SESSION_KEY, _aic, _options, _messages, _oauth2ManagerPort, _messageId, _messageHandlers, _messageTimeout, _worker, _transactionStore, _operationSemaphore, _maxSemaphoreRetries, _semaphoreRetrySleep, _ProcessMessageResponse, _PostMessage, _HandleLogEvent, _HandleUpdateInstrumentEvent, _GetStore, _HandleErrorEvent, _HandleAuthenticateEvent, _SetupRoute, _clientSessionStore, _cUtils2, _qParams2, _STORAGE_SESSION_KEY2, _oauthWorkerPort, _options2, _httpsAgent, _HandleAuthenticateEvent2, _HandleErrorEvent2, _LogMessage, _GetAccessToken, _GetCookies, _UpdateInstrument, _ProcessCommand, _RestoreSession, _Authorize, _HandleRedirect, _GetTokenFromBroker, _GetToken, _RefreshToken, _Logout;
+  "use strict";var __defProp = Object.defineProperty;
+var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
+var __publicField = (obj, key, value) => {
+  __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
+  return value;
+};
+var __accessCheck = (obj, member, msg) => {
+  if (!member.has(obj))
+    throw TypeError("Cannot " + msg);
+};
+var __privateGet = (obj, member, getter) => {
+  __accessCheck(obj, member, "read from private field");
+  return getter ? getter.call(obj) : member.get(obj);
+};
+var __privateAdd = (obj, member, value) => {
+  if (member.has(obj))
+    throw TypeError("Cannot add the same private member more than once");
+  member instanceof WeakSet ? member.add(obj) : member.set(obj, value);
+};
+var __privateSet = (obj, member, value, setter) => {
+  __accessCheck(obj, member, "write to private field");
+  setter ? setter.call(obj, value) : member.set(obj, value);
+  return value;
+};
+var __privateWrapper = (obj, member, setter, getter) => ({
+  set _(value) {
+    __privateSet(obj, member, value, setter);
+  },
+  get _() {
+    return __privateGet(obj, member, getter);
+  }
+});
+
+  function _interopNamespaceDefault(e2) {
+    const n2 = Object.create(null, { [Symbol.toStringTag]: { value: "Module" } });
+    if (e2) {
+      for (const k in e2) {
+        if (k !== "default") {
+          const d = Object.getOwnPropertyDescriptor(e2, k);
+          Object.defineProperty(n2, k, d.get ? d : {
+            enumerable: true,
+            get: () => e2[k]
+          });
+        }
+      }
+    }
+    n2.default = e2;
+    return Object.freeze(n2);
+  }
+  const wt__namespace = /* @__PURE__ */ _interopNamespaceDefault(wt);
+  const STSOAuth2ManagerPluginKey = Symbol();
+  const isNode = Object.prototype.toString.call(typeof process !== "undefined" ? process : 0) === "[object process]";
+  var commonjsGlobal = typeof globalThis !== "undefined" ? globalThis : typeof window !== "undefined" ? window : typeof global !== "undefined" ? global : typeof self !== "undefined" ? self : {};
+  function getAugmentedNamespace(n2) {
+    if (n2.__esModule)
+      return n2;
+    var f = n2.default;
+    if (typeof f == "function") {
+      var a = function a2() {
+        if (this instanceof a2) {
+          var args = [null];
+          args.push.apply(args, arguments);
+          var Ctor = Function.bind.apply(f, args);
+          return new Ctor();
+        }
+        return f.apply(this, arguments);
+      };
+      a.prototype = f.prototype;
+    } else
+      a = {};
+    Object.defineProperty(a, "__esModule", { value: true });
+    Object.keys(n2).forEach(function(k) {
+      var d = Object.getOwnPropertyDescriptor(n2, k);
+      Object.defineProperty(a, k, d.get ? d : {
+        enumerable: true,
+        get: function() {
+          return n2[k];
+        }
+      });
+    });
+    return a;
+  }
+  var sha256Exports = {};
+  var sha256 = {
+    get exports() {
+      return sha256Exports;
+    },
+    set exports(v) {
+      sha256Exports = v;
+    }
+  };
+  function commonjsRequire(path) {
+    throw new Error('Could not dynamically require "' + path + '". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.');
+  }
+  var coreExports = {};
+  var core = {
+    get exports() {
+      return coreExports;
+    },
+    set exports(v) {
+      coreExports = v;
+    }
+  };
+  const __viteBrowserExternal = {};
+  const __viteBrowserExternal$1 = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+    __proto__: null,
+    default: __viteBrowserExternal
+  }, Symbol.toStringTag, { value: "Module" }));
+  const require$$0 = /* @__PURE__ */ getAugmentedNamespace(__viteBrowserExternal$1);
+  var hasRequiredCore;
+  function requireCore() {
+    if (hasRequiredCore)
+      return coreExports;
+    hasRequiredCore = 1;
+    (function(module2, exports3) {
+      (function(root, factory) {
+        {
+          module2.exports = factory();
+        }
+      })(commonjsGlobal, function() {
+        var CryptoJS = CryptoJS || function(Math2, undefined$1) {
+          var crypto2;
+          if (typeof window !== "undefined" && window.crypto) {
+            crypto2 = window.crypto;
+          }
+          if (typeof self !== "undefined" && self.crypto) {
+            crypto2 = self.crypto;
+          }
+          if (typeof globalThis !== "undefined" && globalThis.crypto) {
+            crypto2 = globalThis.crypto;
+          }
+          if (!crypto2 && typeof window !== "undefined" && window.msCrypto) {
+            crypto2 = window.msCrypto;
+          }
+          if (!crypto2 && typeof commonjsGlobal !== "undefined" && commonjsGlobal.crypto) {
+            crypto2 = commonjsGlobal.crypto;
+          }
+          if (!crypto2 && typeof commonjsRequire === "function") {
+            try {
+              crypto2 = require$$0;
+            } catch (err) {
+            }
+          }
+          var cryptoSecureRandomInt = function() {
+            if (crypto2) {
+              if (typeof crypto2.getRandomValues === "function") {
+                try {
+                  return crypto2.getRandomValues(new Uint32Array(1))[0];
+                } catch (err) {
+                }
+              }
+              if (typeof crypto2.randomBytes === "function") {
+                try {
+                  return crypto2.randomBytes(4).readInt32LE();
+                } catch (err) {
+                }
+              }
+            }
+            throw new Error("Native crypto module could not be used to get secure random number.");
+          };
+          var create = Object.create || function() {
+            function F() {
+            }
+            return function(obj) {
+              var subtype;
+              F.prototype = obj;
+              subtype = new F();
+              F.prototype = null;
+              return subtype;
+            };
+          }();
+          var C = {};
+          var C_lib = C.lib = {};
+          var Base = C_lib.Base = function() {
+            return {
+              /**
+               * Creates a new object that inherits from this object.
+               *
+               * @param {Object} overrides Properties to copy into the new object.
+               *
+               * @return {Object} The new object.
+               *
+               * @static
+               *
+               * @example
+               *
+               *     var MyType = CryptoJS.lib.Base.extend({
+               *         field: 'value',
+               *
+               *         method: function () {
+               *         }
+               *     });
+               */
+              extend: function(overrides) {
+                var subtype = create(this);
+                if (overrides) {
+                  subtype.mixIn(overrides);
+                }
+                if (!subtype.hasOwnProperty("init") || this.init === subtype.init) {
+                  subtype.init = function() {
+                    subtype.$super.init.apply(this, arguments);
+                  };
+                }
+                subtype.init.prototype = subtype;
+                subtype.$super = this;
+                return subtype;
+              },
+              /**
+               * Extends this object and runs the init method.
+               * Arguments to create() will be passed to init().
+               *
+               * @return {Object} The new object.
+               *
+               * @static
+               *
+               * @example
+               *
+               *     var instance = MyType.create();
+               */
+              create: function() {
+                var instance = this.extend();
+                instance.init.apply(instance, arguments);
+                return instance;
+              },
+              /**
+               * Initializes a newly created object.
+               * Override this method to add some logic when your objects are created.
+               *
+               * @example
+               *
+               *     var MyType = CryptoJS.lib.Base.extend({
+               *         init: function () {
+               *             // ...
+               *         }
+               *     });
+               */
+              init: function() {
+              },
+              /**
+               * Copies properties into this object.
+               *
+               * @param {Object} properties The properties to mix in.
+               *
+               * @example
+               *
+               *     MyType.mixIn({
+               *         field: 'value'
+               *     });
+               */
+              mixIn: function(properties) {
+                for (var propertyName in properties) {
+                  if (properties.hasOwnProperty(propertyName)) {
+                    this[propertyName] = properties[propertyName];
+                  }
+                }
+                if (properties.hasOwnProperty("toString")) {
+                  this.toString = properties.toString;
+                }
+              },
+              /**
+               * Creates a copy of this object.
+               *
+               * @return {Object} The clone.
+               *
+               * @example
+               *
+               *     var clone = instance.clone();
+               */
+              clone: function() {
+                return this.init.prototype.extend(this);
+              }
+            };
+          }();
+          var WordArray = C_lib.WordArray = Base.extend({
+            /**
+             * Initializes a newly created word array.
+             *
+             * @param {Array} words (Optional) An array of 32-bit words.
+             * @param {number} sigBytes (Optional) The number of significant bytes in the words.
+             *
+             * @example
+             *
+             *     var wordArray = CryptoJS.lib.WordArray.create();
+             *     var wordArray = CryptoJS.lib.WordArray.create([0x00010203, 0x04050607]);
+             *     var wordArray = CryptoJS.lib.WordArray.create([0x00010203, 0x04050607], 6);
+             */
+            init: function(words, sigBytes) {
+              words = this.words = words || [];
+              if (sigBytes != undefined$1) {
+                this.sigBytes = sigBytes;
+              } else {
+                this.sigBytes = words.length * 4;
+              }
+            },
+            /**
+             * Converts this word array to a string.
+             *
+             * @param {Encoder} encoder (Optional) The encoding strategy to use. Default: CryptoJS.enc.Hex
+             *
+             * @return {string} The stringified word array.
+             *
+             * @example
+             *
+             *     var string = wordArray + '';
+             *     var string = wordArray.toString();
+             *     var string = wordArray.toString(CryptoJS.enc.Utf8);
+             */
+            toString: function(encoder) {
+              return (encoder || Hex).stringify(this);
+            },
+            /**
+             * Concatenates a word array to this word array.
+             *
+             * @param {WordArray} wordArray The word array to append.
+             *
+             * @return {WordArray} This word array.
+             *
+             * @example
+             *
+             *     wordArray1.concat(wordArray2);
+             */
+            concat: function(wordArray) {
+              var thisWords = this.words;
+              var thatWords = wordArray.words;
+              var thisSigBytes = this.sigBytes;
+              var thatSigBytes = wordArray.sigBytes;
+              this.clamp();
+              if (thisSigBytes % 4) {
+                for (var i = 0; i < thatSigBytes; i++) {
+                  var thatByte = thatWords[i >>> 2] >>> 24 - i % 4 * 8 & 255;
+                  thisWords[thisSigBytes + i >>> 2] |= thatByte << 24 - (thisSigBytes + i) % 4 * 8;
+                }
+              } else {
+                for (var j = 0; j < thatSigBytes; j += 4) {
+                  thisWords[thisSigBytes + j >>> 2] = thatWords[j >>> 2];
+                }
+              }
+              this.sigBytes += thatSigBytes;
+              return this;
+            },
+            /**
+             * Removes insignificant bits.
+             *
+             * @example
+             *
+             *     wordArray.clamp();
+             */
+            clamp: function() {
+              var words = this.words;
+              var sigBytes = this.sigBytes;
+              words[sigBytes >>> 2] &= 4294967295 << 32 - sigBytes % 4 * 8;
+              words.length = Math2.ceil(sigBytes / 4);
+            },
+            /**
+             * Creates a copy of this word array.
+             *
+             * @return {WordArray} The clone.
+             *
+             * @example
+             *
+             *     var clone = wordArray.clone();
+             */
+            clone: function() {
+              var clone = Base.clone.call(this);
+              clone.words = this.words.slice(0);
+              return clone;
+            },
+            /**
+             * Creates a word array filled with random bytes.
+             *
+             * @param {number} nBytes The number of random bytes to generate.
+             *
+             * @return {WordArray} The random word array.
+             *
+             * @static
+             *
+             * @example
+             *
+             *     var wordArray = CryptoJS.lib.WordArray.random(16);
+             */
+            random: function(nBytes) {
+              var words = [];
+              for (var i = 0; i < nBytes; i += 4) {
+                words.push(cryptoSecureRandomInt());
+              }
+              return new WordArray.init(words, nBytes);
+            }
+          });
+          var C_enc = C.enc = {};
+          var Hex = C_enc.Hex = {
+            /**
+             * Converts a word array to a hex string.
+             *
+             * @param {WordArray} wordArray The word array.
+             *
+             * @return {string} The hex string.
+             *
+             * @static
+             *
+             * @example
+             *
+             *     var hexString = CryptoJS.enc.Hex.stringify(wordArray);
+             */
+            stringify: function(wordArray) {
+              var words = wordArray.words;
+              var sigBytes = wordArray.sigBytes;
+              var hexChars = [];
+              for (var i = 0; i < sigBytes; i++) {
+                var bite = words[i >>> 2] >>> 24 - i % 4 * 8 & 255;
+                hexChars.push((bite >>> 4).toString(16));
+                hexChars.push((bite & 15).toString(16));
+              }
+              return hexChars.join("");
+            },
+            /**
+             * Converts a hex string to a word array.
+             *
+             * @param {string} hexStr The hex string.
+             *
+             * @return {WordArray} The word array.
+             *
+             * @static
+             *
+             * @example
+             *
+             *     var wordArray = CryptoJS.enc.Hex.parse(hexString);
+             */
+            parse: function(hexStr) {
+              var hexStrLength = hexStr.length;
+              var words = [];
+              for (var i = 0; i < hexStrLength; i += 2) {
+                words[i >>> 3] |= parseInt(hexStr.substr(i, 2), 16) << 24 - i % 8 * 4;
+              }
+              return new WordArray.init(words, hexStrLength / 2);
+            }
+          };
+          var Latin1 = C_enc.Latin1 = {
+            /**
+             * Converts a word array to a Latin1 string.
+             *
+             * @param {WordArray} wordArray The word array.
+             *
+             * @return {string} The Latin1 string.
+             *
+             * @static
+             *
+             * @example
+             *
+             *     var latin1String = CryptoJS.enc.Latin1.stringify(wordArray);
+             */
+            stringify: function(wordArray) {
+              var words = wordArray.words;
+              var sigBytes = wordArray.sigBytes;
+              var latin1Chars = [];
+              for (var i = 0; i < sigBytes; i++) {
+                var bite = words[i >>> 2] >>> 24 - i % 4 * 8 & 255;
+                latin1Chars.push(String.fromCharCode(bite));
+              }
+              return latin1Chars.join("");
+            },
+            /**
+             * Converts a Latin1 string to a word array.
+             *
+             * @param {string} latin1Str The Latin1 string.
+             *
+             * @return {WordArray} The word array.
+             *
+             * @static
+             *
+             * @example
+             *
+             *     var wordArray = CryptoJS.enc.Latin1.parse(latin1String);
+             */
+            parse: function(latin1Str) {
+              var latin1StrLength = latin1Str.length;
+              var words = [];
+              for (var i = 0; i < latin1StrLength; i++) {
+                words[i >>> 2] |= (latin1Str.charCodeAt(i) & 255) << 24 - i % 4 * 8;
+              }
+              return new WordArray.init(words, latin1StrLength);
+            }
+          };
+          var Utf8 = C_enc.Utf8 = {
+            /**
+             * Converts a word array to a UTF-8 string.
+             *
+             * @param {WordArray} wordArray The word array.
+             *
+             * @return {string} The UTF-8 string.
+             *
+             * @static
+             *
+             * @example
+             *
+             *     var utf8String = CryptoJS.enc.Utf8.stringify(wordArray);
+             */
+            stringify: function(wordArray) {
+              try {
+                return decodeURIComponent(escape(Latin1.stringify(wordArray)));
+              } catch (e2) {
+                throw new Error("Malformed UTF-8 data");
+              }
+            },
+            /**
+             * Converts a UTF-8 string to a word array.
+             *
+             * @param {string} utf8Str The UTF-8 string.
+             *
+             * @return {WordArray} The word array.
+             *
+             * @static
+             *
+             * @example
+             *
+             *     var wordArray = CryptoJS.enc.Utf8.parse(utf8String);
+             */
+            parse: function(utf8Str) {
+              return Latin1.parse(unescape(encodeURIComponent(utf8Str)));
+            }
+          };
+          var BufferedBlockAlgorithm = C_lib.BufferedBlockAlgorithm = Base.extend({
+            /**
+             * Resets this block algorithm's data buffer to its initial state.
+             *
+             * @example
+             *
+             *     bufferedBlockAlgorithm.reset();
+             */
+            reset: function() {
+              this._data = new WordArray.init();
+              this._nDataBytes = 0;
+            },
+            /**
+             * Adds new data to this block algorithm's buffer.
+             *
+             * @param {WordArray|string} data The data to append. Strings are converted to a WordArray using UTF-8.
+             *
+             * @example
+             *
+             *     bufferedBlockAlgorithm._append('data');
+             *     bufferedBlockAlgorithm._append(wordArray);
+             */
+            _append: function(data) {
+              if (typeof data == "string") {
+                data = Utf8.parse(data);
+              }
+              this._data.concat(data);
+              this._nDataBytes += data.sigBytes;
+            },
+            /**
+             * Processes available data blocks.
+             *
+             * This method invokes _doProcessBlock(offset), which must be implemented by a concrete subtype.
+             *
+             * @param {boolean} doFlush Whether all blocks and partial blocks should be processed.
+             *
+             * @return {WordArray} The processed data.
+             *
+             * @example
+             *
+             *     var processedData = bufferedBlockAlgorithm._process();
+             *     var processedData = bufferedBlockAlgorithm._process(!!'flush');
+             */
+            _process: function(doFlush) {
+              var processedWords;
+              var data = this._data;
+              var dataWords = data.words;
+              var dataSigBytes = data.sigBytes;
+              var blockSize = this.blockSize;
+              var blockSizeBytes = blockSize * 4;
+              var nBlocksReady = dataSigBytes / blockSizeBytes;
+              if (doFlush) {
+                nBlocksReady = Math2.ceil(nBlocksReady);
+              } else {
+                nBlocksReady = Math2.max((nBlocksReady | 0) - this._minBufferSize, 0);
+              }
+              var nWordsReady = nBlocksReady * blockSize;
+              var nBytesReady = Math2.min(nWordsReady * 4, dataSigBytes);
+              if (nWordsReady) {
+                for (var offset = 0; offset < nWordsReady; offset += blockSize) {
+                  this._doProcessBlock(dataWords, offset);
+                }
+                processedWords = dataWords.splice(0, nWordsReady);
+                data.sigBytes -= nBytesReady;
+              }
+              return new WordArray.init(processedWords, nBytesReady);
+            },
+            /**
+             * Creates a copy of this object.
+             *
+             * @return {Object} The clone.
+             *
+             * @example
+             *
+             *     var clone = bufferedBlockAlgorithm.clone();
+             */
+            clone: function() {
+              var clone = Base.clone.call(this);
+              clone._data = this._data.clone();
+              return clone;
+            },
+            _minBufferSize: 0
+          });
+          C_lib.Hasher = BufferedBlockAlgorithm.extend({
+            /**
+             * Configuration options.
+             */
+            cfg: Base.extend(),
+            /**
+             * Initializes a newly created hasher.
+             *
+             * @param {Object} cfg (Optional) The configuration options to use for this hash computation.
+             *
+             * @example
+             *
+             *     var hasher = CryptoJS.algo.SHA256.create();
+             */
+            init: function(cfg) {
+              this.cfg = this.cfg.extend(cfg);
+              this.reset();
+            },
+            /**
+             * Resets this hasher to its initial state.
+             *
+             * @example
+             *
+             *     hasher.reset();
+             */
+            reset: function() {
+              BufferedBlockAlgorithm.reset.call(this);
+              this._doReset();
+            },
+            /**
+             * Updates this hasher with a message.
+             *
+             * @param {WordArray|string} messageUpdate The message to append.
+             *
+             * @return {Hasher} This hasher.
+             *
+             * @example
+             *
+             *     hasher.update('message');
+             *     hasher.update(wordArray);
+             */
+            update: function(messageUpdate) {
+              this._append(messageUpdate);
+              this._process();
+              return this;
+            },
+            /**
+             * Finalizes the hash computation.
+             * Note that the finalize operation is effectively a destructive, read-once operation.
+             *
+             * @param {WordArray|string} messageUpdate (Optional) A final message update.
+             *
+             * @return {WordArray} The hash.
+             *
+             * @example
+             *
+             *     var hash = hasher.finalize();
+             *     var hash = hasher.finalize('message');
+             *     var hash = hasher.finalize(wordArray);
+             */
+            finalize: function(messageUpdate) {
+              if (messageUpdate) {
+                this._append(messageUpdate);
+              }
+              var hash = this._doFinalize();
+              return hash;
+            },
+            blockSize: 512 / 32,
+            /**
+             * Creates a shortcut function to a hasher's object interface.
+             *
+             * @param {Hasher} hasher The hasher to create a helper for.
+             *
+             * @return {Function} The shortcut function.
+             *
+             * @static
+             *
+             * @example
+             *
+             *     var SHA256 = CryptoJS.lib.Hasher._createHelper(CryptoJS.algo.SHA256);
+             */
+            _createHelper: function(hasher) {
+              return function(message, cfg) {
+                return new hasher.init(cfg).finalize(message);
+              };
+            },
+            /**
+             * Creates a shortcut function to the HMAC's object interface.
+             *
+             * @param {Hasher} hasher The hasher to use in this HMAC helper.
+             *
+             * @return {Function} The shortcut function.
+             *
+             * @static
+             *
+             * @example
+             *
+             *     var HmacSHA256 = CryptoJS.lib.Hasher._createHmacHelper(CryptoJS.algo.SHA256);
+             */
+            _createHmacHelper: function(hasher) {
+              return function(message, key) {
+                return new C_algo.HMAC.init(hasher, key).finalize(message);
+              };
+            }
+          });
+          var C_algo = C.algo = {};
+          return C;
+        }(Math);
+        return CryptoJS;
+      });
+    })(core);
+    return coreExports;
+  }
+  (function(module2, exports3) {
+    (function(root, factory) {
+      {
+        module2.exports = factory(requireCore());
+      }
+    })(commonjsGlobal, function(CryptoJS) {
+      (function(Math2) {
+        var C = CryptoJS;
+        var C_lib = C.lib;
+        var WordArray = C_lib.WordArray;
+        var Hasher = C_lib.Hasher;
+        var C_algo = C.algo;
+        var H = [];
+        var K = [];
+        (function() {
+          function isPrime(n3) {
+            var sqrtN = Math2.sqrt(n3);
+            for (var factor = 2; factor <= sqrtN; factor++) {
+              if (!(n3 % factor)) {
+                return false;
+              }
+            }
+            return true;
+          }
+          function getFractionalBits(n3) {
+            return (n3 - (n3 | 0)) * 4294967296 | 0;
+          }
+          var n2 = 2;
+          var nPrime = 0;
+          while (nPrime < 64) {
+            if (isPrime(n2)) {
+              if (nPrime < 8) {
+                H[nPrime] = getFractionalBits(Math2.pow(n2, 1 / 2));
+              }
+              K[nPrime] = getFractionalBits(Math2.pow(n2, 1 / 3));
+              nPrime++;
+            }
+            n2++;
+          }
+        })();
+        var W = [];
+        var SHA256 = C_algo.SHA256 = Hasher.extend({
+          _doReset: function() {
+            this._hash = new WordArray.init(H.slice(0));
+          },
+          _doProcessBlock: function(M, offset) {
+            var H2 = this._hash.words;
+            var a = H2[0];
+            var b = H2[1];
+            var c = H2[2];
+            var d = H2[3];
+            var e2 = H2[4];
+            var f = H2[5];
+            var g = H2[6];
+            var h = H2[7];
+            for (var i = 0; i < 64; i++) {
+              if (i < 16) {
+                W[i] = M[offset + i] | 0;
+              } else {
+                var gamma0x = W[i - 15];
+                var gamma0 = (gamma0x << 25 | gamma0x >>> 7) ^ (gamma0x << 14 | gamma0x >>> 18) ^ gamma0x >>> 3;
+                var gamma1x = W[i - 2];
+                var gamma1 = (gamma1x << 15 | gamma1x >>> 17) ^ (gamma1x << 13 | gamma1x >>> 19) ^ gamma1x >>> 10;
+                W[i] = gamma0 + W[i - 7] + gamma1 + W[i - 16];
+              }
+              var ch = e2 & f ^ ~e2 & g;
+              var maj = a & b ^ a & c ^ b & c;
+              var sigma0 = (a << 30 | a >>> 2) ^ (a << 19 | a >>> 13) ^ (a << 10 | a >>> 22);
+              var sigma1 = (e2 << 26 | e2 >>> 6) ^ (e2 << 21 | e2 >>> 11) ^ (e2 << 7 | e2 >>> 25);
+              var t1 = h + sigma1 + ch + K[i] + W[i];
+              var t2 = sigma0 + maj;
+              h = g;
+              g = f;
+              f = e2;
+              e2 = d + t1 | 0;
+              d = c;
+              c = b;
+              b = a;
+              a = t1 + t2 | 0;
+            }
+            H2[0] = H2[0] + a | 0;
+            H2[1] = H2[1] + b | 0;
+            H2[2] = H2[2] + c | 0;
+            H2[3] = H2[3] + d | 0;
+            H2[4] = H2[4] + e2 | 0;
+            H2[5] = H2[5] + f | 0;
+            H2[6] = H2[6] + g | 0;
+            H2[7] = H2[7] + h | 0;
+          },
+          _doFinalize: function() {
+            var data = this._data;
+            var dataWords = data.words;
+            var nBitsTotal = this._nDataBytes * 8;
+            var nBitsLeft = data.sigBytes * 8;
+            dataWords[nBitsLeft >>> 5] |= 128 << 24 - nBitsLeft % 32;
+            dataWords[(nBitsLeft + 64 >>> 9 << 4) + 14] = Math2.floor(nBitsTotal / 4294967296);
+            dataWords[(nBitsLeft + 64 >>> 9 << 4) + 15] = nBitsTotal;
+            data.sigBytes = dataWords.length * 4;
+            this._process();
+            return this._hash;
+          },
+          clone: function() {
+            var clone = Hasher.clone.call(this);
+            clone._hash = this._hash.clone();
+            return clone;
+          }
+        });
+        C.SHA256 = Hasher._createHelper(SHA256);
+        C.HmacSHA256 = Hasher._createHmacHelper(SHA256);
+      })(Math);
+      return CryptoJS.SHA256;
+    });
+  })(sha256);
+  var encBase64Exports = {};
+  var encBase64 = {
+    get exports() {
+      return encBase64Exports;
+    },
+    set exports(v) {
+      encBase64Exports = v;
+    }
+  };
+  (function(module2, exports3) {
+    (function(root, factory) {
+      {
+        module2.exports = factory(requireCore());
+      }
+    })(commonjsGlobal, function(CryptoJS) {
+      (function() {
+        var C = CryptoJS;
+        var C_lib = C.lib;
+        var WordArray = C_lib.WordArray;
+        var C_enc = C.enc;
+        C_enc.Base64 = {
+          /**
+           * Converts a word array to a Base64 string.
+           *
+           * @param {WordArray} wordArray The word array.
+           *
+           * @return {string} The Base64 string.
+           *
+           * @static
+           *
+           * @example
+           *
+           *     var base64String = CryptoJS.enc.Base64.stringify(wordArray);
+           */
+          stringify: function(wordArray) {
+            var words = wordArray.words;
+            var sigBytes = wordArray.sigBytes;
+            var map = this._map;
+            wordArray.clamp();
+            var base64Chars = [];
+            for (var i = 0; i < sigBytes; i += 3) {
+              var byte1 = words[i >>> 2] >>> 24 - i % 4 * 8 & 255;
+              var byte2 = words[i + 1 >>> 2] >>> 24 - (i + 1) % 4 * 8 & 255;
+              var byte3 = words[i + 2 >>> 2] >>> 24 - (i + 2) % 4 * 8 & 255;
+              var triplet = byte1 << 16 | byte2 << 8 | byte3;
+              for (var j = 0; j < 4 && i + j * 0.75 < sigBytes; j++) {
+                base64Chars.push(map.charAt(triplet >>> 6 * (3 - j) & 63));
+              }
+            }
+            var paddingChar = map.charAt(64);
+            if (paddingChar) {
+              while (base64Chars.length % 4) {
+                base64Chars.push(paddingChar);
+              }
+            }
+            return base64Chars.join("");
+          },
+          /**
+           * Converts a Base64 string to a word array.
+           *
+           * @param {string} base64Str The Base64 string.
+           *
+           * @return {WordArray} The word array.
+           *
+           * @static
+           *
+           * @example
+           *
+           *     var wordArray = CryptoJS.enc.Base64.parse(base64String);
+           */
+          parse: function(base64Str) {
+            var base64StrLength = base64Str.length;
+            var map = this._map;
+            var reverseMap = this._reverseMap;
+            if (!reverseMap) {
+              reverseMap = this._reverseMap = [];
+              for (var j = 0; j < map.length; j++) {
+                reverseMap[map.charCodeAt(j)] = j;
+              }
+            }
+            var paddingChar = map.charAt(64);
+            if (paddingChar) {
+              var paddingIndex = base64Str.indexOf(paddingChar);
+              if (paddingIndex !== -1) {
+                base64StrLength = paddingIndex;
+              }
+            }
+            return parseLoop(base64Str, base64StrLength, reverseMap);
+          },
+          _map: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="
+        };
+        function parseLoop(base64Str, base64StrLength, reverseMap) {
+          var words = [];
+          var nBytes = 0;
+          for (var i = 0; i < base64StrLength; i++) {
+            if (i % 4) {
+              var bits1 = reverseMap[base64Str.charCodeAt(i - 1)] << i % 4 * 2;
+              var bits2 = reverseMap[base64Str.charCodeAt(i)] >>> 6 - i % 4 * 2;
+              var bitsCombined = bits1 | bits2;
+              words[nBytes >>> 2] |= bitsCombined << 24 - nBytes % 4 * 8;
+              nBytes++;
+            }
+          }
+          return WordArray.create(words, nBytes);
+        }
+      })();
+      return CryptoJS.enc.Base64;
+    });
+  })(encBase64);
+  class CryptoUtils {
+    constructor() {
+      __privateAdd(this, _crypto, void 0);
+      __publicField(this, "DigestMessage", async function(message) {
+        const hashDigest = sha256Exports(message);
+        return encBase64Exports.stringify(hashDigest);
+      });
+      __publicField(this, "CreateRandomString", (size = 43) => {
+        const randomValues = Array.from(__privateGet(this, _crypto).getRandomValues(new Uint8Array(size)));
+        const b64 = btoa(String.fromCharCode(...randomValues));
+        return b64;
+      });
+      try {
+        __privateSet(this, _crypto, crypto);
+      } catch {
+        __privateSet(this, _crypto, require("crypto"));
+      }
+    }
+  }
+  _crypto = new WeakMap();
+  class QueryParams {
+    constructor() {
+      __publicField(this, "DecodeQueryParams", (params) => {
+        const retObj = {};
+        Object.keys(params).filter((k) => typeof params[k] !== "undefined").map((k) => {
+          retObj[decodeURIComponent(k)] = decodeURIComponent(params[k]);
+        });
+        return retObj;
+      });
+      __publicField(this, "CreateQueryParams", (params) => {
+        return Object.keys(params).filter((k) => typeof params[k] !== "undefined").map((k) => {
+          if (Array.isArray(params[k])) {
+            return encodeURIComponent(k) + "=" + encodeURIComponent(params[k].join(" "));
+          } else {
+            return encodeURIComponent(k) + "=" + encodeURIComponent(params[k]);
+          }
+        }).join("&");
+      });
+      __publicField(this, "_GetQueryParams", (param) => {
+        let retVal = {};
+        const uri = param.split("?");
+        if (uri.length == 2) {
+          const vars = uri[1].split("&");
+          const getVars = {};
+          let tmp;
+          vars.forEach(function(v) {
+            tmp = v.split("=");
+            if (tmp.length == 2)
+              getVars[tmp[0]] = tmp[1];
+          });
+          retVal = this.DecodeQueryParams(getVars);
+        }
+        return retVal;
+      });
+      __publicField(this, "GetQueryParams", () => {
+        return this._GetQueryParams(window.location.href);
+      });
+    }
+  }
+  var AuthorizeOptionsResponseType = /* @__PURE__ */ ((AuthorizeOptionsResponseType2) => {
+    AuthorizeOptionsResponseType2["CODE"] = "code";
+    AuthorizeOptionsResponseType2["ID_TOKEN"] = "id_token";
+    AuthorizeOptionsResponseType2["TOKEN"] = "token";
+    return AuthorizeOptionsResponseType2;
+  })(AuthorizeOptionsResponseType || {});
+  var AuthorizeOptionsResponseMode = /* @__PURE__ */ ((AuthorizeOptionsResponseMode2) => {
+    AuthorizeOptionsResponseMode2["QUERY"] = "query";
+    AuthorizeOptionsResponseMode2["FRAGMENT"] = "fragment";
+    AuthorizeOptionsResponseMode2["FORM_POST"] = "form_post";
+    return AuthorizeOptionsResponseMode2;
+  })(AuthorizeOptionsResponseMode || {});
+  var OAuthGrantTypes = /* @__PURE__ */ ((OAuthGrantTypes2) => {
+    OAuthGrantTypes2["CLIENT_CREDENTIALS"] = "client_credentials";
+    OAuthGrantTypes2["AUTHORIZATION_CODE"] = "authorization_code";
+    OAuthGrantTypes2["REFRESH_TOKEN"] = "refresh_token";
+    return OAuthGrantTypes2;
+  })(OAuthGrantTypes || {});
+  var IOauth2ListenerCommand = /* @__PURE__ */ ((IOauth2ListenerCommand2) => {
+    IOauth2ListenerCommand2["RESTORE_SESSION"] = "RestoreSession";
+    IOauth2ListenerCommand2["AUTHORIZE"] = "Authorize";
+    IOauth2ListenerCommand2["HANDLE_REDIRECT"] = "HandleRedirect";
+    IOauth2ListenerCommand2["LOGOUT"] = "Logout";
+    IOauth2ListenerCommand2["AUTHENTICATE_EVENT"] = "AuthenticateEvent";
+    IOauth2ListenerCommand2["ERROR"] = "Error";
+    IOauth2ListenerCommand2["LOG"] = "__LOG";
+    IOauth2ListenerCommand2["UPDATE_INSTRUMENT"] = "__UPDATE_INSTRUMENT";
+    IOauth2ListenerCommand2["ID_TOKEN"] = "__ID_TOKEN";
+    IOauth2ListenerCommand2["ACCESS_TOKEN"] = "__ACCESS_TOKEN";
+    IOauth2ListenerCommand2["COOKIES"] = "__COOKIES";
+    IOauth2ListenerCommand2["EXECUTE_REFRESH_TOKEN"] = "__EXECUTE_REFRESH_TOKEN";
+    return IOauth2ListenerCommand2;
+  })(IOauth2ListenerCommand || {});
+  function e(e2) {
+    this.message = e2;
+  }
+  e.prototype = new Error(), e.prototype.name = "InvalidCharacterError";
+  var r = "undefined" != typeof window && window.atob && window.atob.bind(window) || function(r2) {
+    var t2 = String(r2).replace(/=+$/, "");
+    if (t2.length % 4 == 1)
+      throw new e("'atob' failed: The string to be decoded is not correctly encoded.");
+    for (var n2, o2, a = 0, i = 0, c = ""; o2 = t2.charAt(i++); ~o2 && (n2 = a % 4 ? 64 * n2 + o2 : o2, a++ % 4) ? c += String.fromCharCode(255 & n2 >> (-2 * a & 6)) : 0)
+      o2 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".indexOf(o2);
+    return c;
+  };
+  function t(e2) {
+    var t2 = e2.replace(/-/g, "+").replace(/_/g, "/");
+    switch (t2.length % 4) {
+      case 0:
+        break;
+      case 2:
+        t2 += "==";
+        break;
+      case 3:
+        t2 += "=";
+        break;
+      default:
+        throw "Illegal base64url string!";
+    }
+    try {
+      return function(e3) {
+        return decodeURIComponent(r(e3).replace(/(.)/g, function(e4, r2) {
+          var t3 = r2.charCodeAt(0).toString(16).toUpperCase();
+          return t3.length < 2 && (t3 = "0" + t3), "%" + t3;
+        }));
+      }(t2);
+    } catch (e3) {
+      return r(t2);
+    }
+  }
+  function n(e2) {
+    this.message = e2;
+  }
+  function o(e2, r2) {
+    if ("string" != typeof e2)
+      throw new n("Invalid token specified");
+    var o2 = true === (r2 = r2 || {}).header ? 0 : 1;
+    try {
+      return JSON.parse(t(e2.split(".")[o2]));
+    } catch (e3) {
+      throw new n("Invalid token specified: " + e3.message);
+    }
+  }
+  n.prototype = new Error(), n.prototype.name = "InvalidTokenError";
+  const STSOauth2Store = pinia.defineStore("__sts__STSOauth2Store", {
+    state: () => {
+      return {
+        id_token: null,
+        error: null
+      };
+    },
+    actions: {
+      UpdateIdToken(id_token) {
+        this.id_token = id_token;
+      },
+      UpdateError(error) {
+        if (this.error) {
+          this.error.message = error;
+        } else {
+          this.error = {
+            message: error
+          };
+        }
+      }
+    },
+    getters: {
+      LoggedIn: (state) => {
+        if (typeof state.id_token === "undefined") {
+          return false;
+        }
+        if (state.id_token === null) {
+          return false;
+        }
+        return true;
+      },
+      UserDetails: (state) => {
+        if (state.id_token) {
+          const id_token = state.id_token;
+          const decodedIdToken = o(id_token);
+          return decodedIdToken;
+        } else {
+          return null;
+        }
+      }
+    }
+    /*
+    persist: {
+    	storage: globalThis.sessionStorage
+    }
+    */
+  });
+  let debug$1;
+  if (isNode) {
+    debug$1 = Debug(`proc:${process.pid}:stsoauth2manager.ts`);
+  } else {
+    debug$1 = Debug(`proc:0:stsoauth2manager.ts`);
+  }
+  class STSOAuth2Manager {
+    // ms
+    constructor(app, options) {
+      // eslint-disable-next-line  @typescript-eslint/no-explicit-any
+      __privateAdd(this, _router, null);
+      __privateAdd(this, _cUtils, new CryptoUtils());
+      __privateAdd(this, _qParams, new QueryParams());
+      __privateAdd(this, _STORAGE_AUTHORIZE_OPTIONS_KEY, "authorize_options.stsmda.com.au");
+      __privateAdd(this, _STORAGE_SESSION_KEY, "session.stsmda.com.au");
+      __privateAdd(this, _aic, null);
+      __privateAdd(this, _options, void 0);
+      __privateAdd(this, _messages, {});
+      __privateAdd(this, _oauth2ManagerPort, void 0);
+      __privateAdd(this, _messageId, 0);
+      // eslint-disable-next-line  @typescript-eslint/no-explicit-any
+      __privateAdd(this, _messageHandlers, {});
+      // keyed by messageId
+      __privateAdd(this, _messageTimeout, 1e4);
+      __privateAdd(this, _worker, void 0);
+      __privateAdd(this, _transactionStore, void 0);
+      // Transient transaction data used to establish a session via OAuth2 authorize handshake
+      __privateAdd(this, _operationSemaphore, false);
+      __privateAdd(this, _maxSemaphoreRetries, 100);
+      // 100 retries, i.e. allow 100 x 50 = 5000ms to unblock
+      __privateAdd(this, _semaphoreRetrySleep, 50);
+      __privateAdd(this, _ProcessMessageResponse, (data) => {
+        const messageResponse = data;
+        debug$1(`STSOAuth2Manager:#ProcessMessageResponse: message data = [${JSON.stringify(messageResponse)}]`.yellow);
+        if (messageResponse.messageId === -1) {
+          switch (messageResponse.command) {
+            case IOauth2ListenerCommand.AUTHENTICATE_EVENT:
+              __privateGet(this, _HandleAuthenticateEvent).call(this, messageResponse.payload);
+              break;
+            case IOauth2ListenerCommand.ERROR:
+              __privateGet(this, _HandleErrorEvent).call(this, messageResponse.payload);
+              break;
+            case IOauth2ListenerCommand.LOG:
+              __privateGet(this, _HandleLogEvent).call(this, messageResponse.payload);
+              break;
+            case IOauth2ListenerCommand.UPDATE_INSTRUMENT:
+              __privateGet(this, _HandleUpdateInstrumentEvent).call(this, messageResponse.payload.instrumentName, messageResponse.payload.telemetry);
+              break;
+            default:
+              throw new Error(`ProcessMessageResponse command [${messageResponse.command}] not valid.`);
+          }
+        } else {
+          const callBack = __privateGet(this, _messageHandlers)[messageResponse.messageId];
+          if (callBack) {
+            callBack(messageResponse);
+          } else {
+            throw new Error(`Message: [${messageResponse.messageId}] does not exists in callBacks.`);
+          }
+        }
+      });
+      __privateAdd(this, _PostMessage, (message) => {
+        message.messageId = __privateWrapper(this, _messageId)._++;
+        return new Promise((resolve, reject) => {
+          const timeout = setTimeout(() => {
+            delete __privateGet(this, _messageHandlers)[message.messageId];
+            reject(`Message: [${message.messageId}] timeout error after: [${__privateGet(this, _messageTimeout)}] ms.`);
+          }, __privateGet(this, _messageTimeout));
+          __privateGet(this, _messageHandlers)[message.messageId] = (response) => {
+            clearTimeout(timeout);
+            delete __privateGet(this, _messageHandlers)[message.messageId];
+            debug$1(`STSOAuth2Manager:#PostMessage: resolve callback response= [${JSON.stringify(response)}]`.yellow);
+            resolve(response);
+          };
+          debug$1(`STSOAuth2Manager:#PostMessage: posting message = [${JSON.stringify(message)}]`.yellow);
+          __privateGet(this, _oauth2ManagerPort).postMessage(message);
+        });
+      });
+      __privateAdd(this, _HandleLogEvent, (message) => {
+        if (__privateGet(this, _aic)) {
+          __privateGet(this, _aic).LogEx(message);
+        }
+        debug$1(message);
+      });
+      // UpdateInstrument = (instrumentName: Gauge, telemetry: InstrumentBaseTelemetry): void => {
+      __privateAdd(this, _HandleUpdateInstrumentEvent, (instrumentName, telemetry) => {
+        if (__privateGet(this, _aic)) {
+          __privateGet(this, _aic).UpdateInstrument(instrumentName, telemetry);
+        }
+      });
+      __privateAdd(this, _GetStore, () => {
+        return STSOauth2Store(__privateGet(this, _options).pinia);
+      });
+      // Will come from message channel
+      __privateAdd(this, _HandleErrorEvent, (error) => {
+        if (isNode)
+          ;
+        else {
+          __privateGet(this, _GetStore).call(this).UpdateError({
+            // Authorize applications store
+            message: error
+          });
+          setTimeout(() => {
+            __privateGet(this, _router).replace("/error");
+          }, 0);
+        }
+      });
+      __privateAdd(this, _HandleAuthenticateEvent, (id_token) => {
+        if (isNode)
+          ;
+        else {
+          if (__privateGet(this, _options).authenticateEvent) {
+            __privateGet(this, _options).authenticateEvent(id_token);
+          }
+          __privateGet(this, _GetStore).call(this).UpdateIdToken(id_token);
+        }
+      });
+      __privateAdd(this, _SetupRoute, (app, router) => {
+        debug$1(`STSOAuth2Manager:#SetupRoute`.gray);
+        router.beforeEach(async (to, from, next) => {
+          const oAuth2Manager = app.config.globalProperties.$sts[STSOAuth2ManagerPluginKey];
+          debug$1(`beforeEach: from: [${from.path}], to: [${to.path}]`.gray);
+          if (__privateGet(this, _GetStore).call(this).LoggedIn === false) {
+            console.log(`Not logged in`);
+            if (to.path.localeCompare("/authorize") === 0) {
+              console.log(`to = /authorize`);
+              next();
+              return;
+            } else if (to.path.localeCompare("/consent") === 0) {
+              if (__privateGet(this, _GetStore).call(this).id_token) {
+                next();
+                return;
+              }
+            }
+            if (to.path.localeCompare("/logout") === 0) {
+              next();
+              return;
+            }
+            if (to.path.localeCompare("/error") === 0) {
+              next();
+              return;
+            }
+            if (to.path.localeCompare("/config") === 0) {
+              next();
+              return;
+            }
+            if (to.path.localeCompare("/redirected") === 0) {
+              next();
+              return;
+            }
+            const str = to.query;
+            if (str[stsutils.OAuth2ParameterType.CODE] || str[stsutils.OAuth2ParameterType.ERROR]) {
+              debug$1(`STSOAuth2Manager:#SetupRoute:Processing redirect: [${JSON.stringify(str)}]`.magenta);
+              const retVal = await oAuth2Manager.HandleRedirect(str);
+              debug$1(`STSOAuth2Manager:#SetupRoute:Redirect result: [${retVal}]`.magenta);
+              if (retVal) {
+                next({
+                  path: "/",
+                  replace: true
+                });
+                return;
+              } else {
+                next({
+                  path: "/error",
+                  replace: true
+                });
+                return;
+              }
+            }
+            debug$1(`STSOAuth2Manager:#SetupRoute:Restoring session`);
+            const sessionRestored = await oAuth2Manager.RestoreSession();
+            debug$1(`STSOAuth2Manager:#SetupRoute:Session restored: [${sessionRestored}]`);
+            if (sessionRestored !== true) {
+              debug$1(`STSOAuth2Manager:#SetupRoute:Session not restored - need to authorize`);
+              oAuth2Manager.Authorize();
+              next();
+              return;
+            } else {
+              next("/");
+              return;
+            }
+          } else {
+            if (to.path.localeCompare("/consent") === 0) {
+              next("/");
+              return;
+            }
+            if (to.path.localeCompare("/authorize") === 0) {
+              next("/");
+              return;
+            }
+            if (to.path.localeCompare("/logout") === 0) {
+              next("/");
+              return;
+            }
+            next();
+          }
+        });
+      });
+      //@@ this needs to be re-implemented so that access_token never leaves the auth worker
+      __publicField(this, "GetAccessToken", async () => {
+        const response = await __privateGet(this, _PostMessage).call(this, { command: IOauth2ListenerCommand.ACCESS_TOKEN });
+        return response.payload;
+      });
+      // Update operation protected using operationSemaphore. This may occur when using workers and/or multiple async fetch operations.
+      __publicField(this, "ExecuteRefreshToken", async (retryCount = 0) => {
+        if (__privateGet(this, _operationSemaphore) === true) {
+          if (retryCount > __privateGet(this, _maxSemaphoreRetries)) {
+            throw new Error(`STSOAuth2Manager:ExecuteRefreshToken:maxSemaphoreRetries: [${__privateGet(this, _maxSemaphoreRetries)}] exceeded.`);
+          }
+          await stsutils.Sleep(__privateGet(this, _semaphoreRetrySleep));
+          debug$1(`STSOAuth2Manager:ExecuteRefreshToken:locked by operationSemaphore, retry count: [${retryCount}]`.cyan);
+          return await this.ExecuteRefreshToken(retryCount + 1);
+        } else {
+          __privateSet(this, _operationSemaphore, true);
+          const response = await __privateGet(this, _PostMessage).call(this, { command: IOauth2ListenerCommand.EXECUTE_REFRESH_TOKEN });
+          __privateSet(this, _operationSemaphore, false);
+          return response.payload;
+        }
+      });
+      // eslint-disable-next-line  @typescript-eslint/no-explicit-any
+      __publicField(this, "GetCookies", async () => {
+        const response = await __privateGet(this, _PostMessage).call(this, { command: IOauth2ListenerCommand.COOKIES });
+        return response.payload;
+      });
+      __publicField(this, "RestoreSession", async () => {
+        try {
+          debug$1(`STSOAuth2Manager:RestoreSession:postMessage: [${IOauth2ListenerCommand.RESTORE_SESSION}]`);
+          const response = await __privateGet(this, _PostMessage).call(this, { command: IOauth2ListenerCommand.RESTORE_SESSION });
+          debug$1(`STSOAuth2Manager:RestoreSession:response: [${JSON.stringify(response.payload)}]`);
+          return response.payload;
+        } catch (error) {
+          console.log(`RestoreSession Error: ${error}`);
+          return false;
+        }
+      });
+      __publicField(this, "Authorize", async () => {
+        try {
+          const response = await __privateGet(this, _PostMessage).call(this, { command: IOauth2ListenerCommand.AUTHORIZE });
+          __privateGet(this, _transactionStore).set(__privateGet(this, _STORAGE_AUTHORIZE_OPTIONS_KEY), response.payload.authorizeOptions);
+          const url = response.payload.url;
+          if (!isNode) {
+            window.location.replace(url);
+          } else {
+            return response.payload.authorizeOptionsClientCopy;
+          }
+        } catch (error) {
+          console.log(`Authorize Error: ${error}`);
+        }
+        return {};
+      });
+      __publicField(this, "HandleRedirect", async (queryVars) => {
+        try {
+          debug$1(`STSOAuth2Manager:HandleRedirect`.magenta);
+          let response = null;
+          if (queryVars[stsutils.OAuth2ParameterType.CODE]) {
+            const authorizeOptions = __privateGet(this, _transactionStore).get(__privateGet(this, _STORAGE_AUTHORIZE_OPTIONS_KEY));
+            __privateGet(this, _transactionStore).remove(__privateGet(this, _STORAGE_AUTHORIZE_OPTIONS_KEY));
+            debug$1(`STSOAuth2Manager:HandleRedirect: sending HANDLE_REDIRECT command`.magenta);
+            response = await __privateGet(this, _PostMessage).call(this, { command: IOauth2ListenerCommand.HANDLE_REDIRECT, payload: {
+              queryVars,
+              authorizeOptions
+            } });
+          } else {
+            response = await __privateGet(this, _PostMessage).call(this, { command: IOauth2ListenerCommand.HANDLE_REDIRECT, payload: queryVars });
+          }
+          debug$1(`STSOAuth2Manager:HandleRedirect: HANDLE_REDIRECT response: [${JSON.stringify(response)}]`.magenta);
+          return response.payload;
+        } catch (error) {
+          console.log(`HandleRedirect Error: ${error}`);
+          return false;
+        }
+      });
+      __publicField(this, "Logout", async () => {
+        try {
+          const response = await __privateGet(this, _PostMessage).call(this, { command: IOauth2ListenerCommand.LOGOUT });
+          return response.payload;
+        } catch (error) {
+          console.log(`Logout Error: ${error}`);
+          return false;
+        }
+      });
+      // eslint-disable-next-line  @typescript-eslint/no-explicit-any
+      __publicField(this, "InvokeExternalAPI", async () => {
+        try {
+          const response = await __privateGet(this, _PostMessage).call(this, { command: IOauth2ListenerCommand.LOGOUT });
+          return response.payload;
+        } catch (error) {
+          console.log(`InvokeExternalAPI Error: ${error}`);
+          return null;
+        }
+      });
+      __publicField(this, "LoggedIn", () => {
+        try {
+          return __privateGet(this, _GetStore).call(this).LoggedIn;
+        } catch (error) {
+          return false;
+        }
+      });
+      __privateSet(this, _options, options);
+      if (!isNode) {
+        if (app.config.globalProperties.$sts[stspublisherserver.STSInstrumentControllerPluginKey]) {
+          const STSInstrumentController = app.config.globalProperties.$sts[stspublisherserver.STSInstrumentControllerPluginKey];
+          __privateSet(this, _aic, STSInstrumentController.PrimaryPublishInstrumentController);
+        }
+        __privateSet(this, _router, app.config.globalProperties.$router);
+      }
+      if (isNode) {
+        __privateSet(this, _transactionStore, new stsvueutils.ClientStorageFactory({ clientStorageType: stsvueutils.ClientStorageType.MEMORY_STORAGE, usePrefix: false }).GetStorage());
+      } else {
+        __privateSet(this, _transactionStore, new stsvueutils.ClientStorageFactory({ clientStorageType: stsvueutils.ClientStorageType.SESSION_STORAGE, usePrefix: false }).GetStorage());
+      }
+      if (__privateGet(this, _options).workerFactory) {
+        __privateSet(this, _worker, __privateGet(this, _options).workerFactory());
+      } else {
+        throw new Error(`STSOAuth2Manager:constructor: Cannot init STSOAuth2Manager - this.#options.workerFactory not specified`);
+      }
+      if (!isNode) {
+        __privateGet(this, _worker).onmessage = (data) => {
+          console.log(`this.#worker.onmessage = [${data}]`);
+        };
+        __privateGet(this, _worker).onerror = function(error) {
+          console.log(`this.#worker.onerror = [${JSON.stringify(error)}]`);
+        };
+      }
+      let workerMessage;
+      if (isNode) {
+        const {
+          port1: oauth2ManagerPort,
+          // this process port
+          port2: oauth2WorkerPort
+          // worker port
+        } = new wt__namespace.MessageChannel();
+        __privateSet(this, _oauth2ManagerPort, oauth2ManagerPort);
+        workerMessage = {
+          workerPort: oauth2WorkerPort,
+          options: __privateGet(this, _options).workerOptions
+        };
+        __privateGet(this, _worker).postMessage(workerMessage, [oauth2WorkerPort]);
+        __privateGet(this, _oauth2ManagerPort).on("message", (payload) => {
+          __privateGet(this, _ProcessMessageResponse).call(this, payload);
+        }).unref();
+      } else {
+        const {
+          port1: oauth2ManagerPort,
+          // this process port
+          port2: oauth2WorkerPort
+          // worker port
+        } = new MessageChannel();
+        __privateSet(this, _oauth2ManagerPort, oauth2ManagerPort);
+        workerMessage = {
+          workerPort: oauth2WorkerPort,
+          options: __privateGet(this, _options).workerOptions
+        };
+        __privateGet(this, _worker).postMessage(workerMessage, [oauth2WorkerPort]);
+        __privateGet(this, _oauth2ManagerPort).onmessage = (data) => {
+          __privateGet(this, _ProcessMessageResponse).call(this, data.data);
+        };
+        __privateGet(this, _SetupRoute).call(this, app, __privateGet(this, _router));
+      }
+    }
+    /*
+    GetIDToken = async (): Promise<string> => {
+    	try {
+    		const response: IOauth2ListenerMessageResponse = await this.#PostMessage({ command: IOauth2ListenerCommand.ID_TOKEN });
+    		return response.payload;
+    	} catch (error) {
+    		console.log(`Logout Error: ${error}`); // red
+    		return null;
+    	}
+    }
+    */
+  }
+  _router = new WeakMap();
+  _cUtils = new WeakMap();
+  _qParams = new WeakMap();
+  _STORAGE_AUTHORIZE_OPTIONS_KEY = new WeakMap();
+  _STORAGE_SESSION_KEY = new WeakMap();
+  _aic = new WeakMap();
+  _options = new WeakMap();
+  _messages = new WeakMap();
+  _oauth2ManagerPort = new WeakMap();
+  _messageId = new WeakMap();
+  _messageHandlers = new WeakMap();
+  _messageTimeout = new WeakMap();
+  _worker = new WeakMap();
+  _transactionStore = new WeakMap();
+  _operationSemaphore = new WeakMap();
+  _maxSemaphoreRetries = new WeakMap();
+  _semaphoreRetrySleep = new WeakMap();
+  _ProcessMessageResponse = new WeakMap();
+  _PostMessage = new WeakMap();
+  _HandleLogEvent = new WeakMap();
+  _HandleUpdateInstrumentEvent = new WeakMap();
+  _GetStore = new WeakMap();
+  _HandleErrorEvent = new WeakMap();
+  _HandleAuthenticateEvent = new WeakMap();
+  _SetupRoute = new WeakMap();
+  var StatusCodes;
+  (function(StatusCodes2) {
+    StatusCodes2[StatusCodes2["ACCEPTED"] = 202] = "ACCEPTED";
+    StatusCodes2[StatusCodes2["BAD_GATEWAY"] = 502] = "BAD_GATEWAY";
+    StatusCodes2[StatusCodes2["BAD_REQUEST"] = 400] = "BAD_REQUEST";
+    StatusCodes2[StatusCodes2["CONFLICT"] = 409] = "CONFLICT";
+    StatusCodes2[StatusCodes2["CONTINUE"] = 100] = "CONTINUE";
+    StatusCodes2[StatusCodes2["CREATED"] = 201] = "CREATED";
+    StatusCodes2[StatusCodes2["EXPECTATION_FAILED"] = 417] = "EXPECTATION_FAILED";
+    StatusCodes2[StatusCodes2["FAILED_DEPENDENCY"] = 424] = "FAILED_DEPENDENCY";
+    StatusCodes2[StatusCodes2["FORBIDDEN"] = 403] = "FORBIDDEN";
+    StatusCodes2[StatusCodes2["GATEWAY_TIMEOUT"] = 504] = "GATEWAY_TIMEOUT";
+    StatusCodes2[StatusCodes2["GONE"] = 410] = "GONE";
+    StatusCodes2[StatusCodes2["HTTP_VERSION_NOT_SUPPORTED"] = 505] = "HTTP_VERSION_NOT_SUPPORTED";
+    StatusCodes2[StatusCodes2["IM_A_TEAPOT"] = 418] = "IM_A_TEAPOT";
+    StatusCodes2[StatusCodes2["INSUFFICIENT_SPACE_ON_RESOURCE"] = 419] = "INSUFFICIENT_SPACE_ON_RESOURCE";
+    StatusCodes2[StatusCodes2["INSUFFICIENT_STORAGE"] = 507] = "INSUFFICIENT_STORAGE";
+    StatusCodes2[StatusCodes2["INTERNAL_SERVER_ERROR"] = 500] = "INTERNAL_SERVER_ERROR";
+    StatusCodes2[StatusCodes2["LENGTH_REQUIRED"] = 411] = "LENGTH_REQUIRED";
+    StatusCodes2[StatusCodes2["LOCKED"] = 423] = "LOCKED";
+    StatusCodes2[StatusCodes2["METHOD_FAILURE"] = 420] = "METHOD_FAILURE";
+    StatusCodes2[StatusCodes2["METHOD_NOT_ALLOWED"] = 405] = "METHOD_NOT_ALLOWED";
+    StatusCodes2[StatusCodes2["MOVED_PERMANENTLY"] = 301] = "MOVED_PERMANENTLY";
+    StatusCodes2[StatusCodes2["MOVED_TEMPORARILY"] = 302] = "MOVED_TEMPORARILY";
+    StatusCodes2[StatusCodes2["MULTI_STATUS"] = 207] = "MULTI_STATUS";
+    StatusCodes2[StatusCodes2["MULTIPLE_CHOICES"] = 300] = "MULTIPLE_CHOICES";
+    StatusCodes2[StatusCodes2["NETWORK_AUTHENTICATION_REQUIRED"] = 511] = "NETWORK_AUTHENTICATION_REQUIRED";
+    StatusCodes2[StatusCodes2["NO_CONTENT"] = 204] = "NO_CONTENT";
+    StatusCodes2[StatusCodes2["NON_AUTHORITATIVE_INFORMATION"] = 203] = "NON_AUTHORITATIVE_INFORMATION";
+    StatusCodes2[StatusCodes2["NOT_ACCEPTABLE"] = 406] = "NOT_ACCEPTABLE";
+    StatusCodes2[StatusCodes2["NOT_FOUND"] = 404] = "NOT_FOUND";
+    StatusCodes2[StatusCodes2["NOT_IMPLEMENTED"] = 501] = "NOT_IMPLEMENTED";
+    StatusCodes2[StatusCodes2["NOT_MODIFIED"] = 304] = "NOT_MODIFIED";
+    StatusCodes2[StatusCodes2["OK"] = 200] = "OK";
+    StatusCodes2[StatusCodes2["PARTIAL_CONTENT"] = 206] = "PARTIAL_CONTENT";
+    StatusCodes2[StatusCodes2["PAYMENT_REQUIRED"] = 402] = "PAYMENT_REQUIRED";
+    StatusCodes2[StatusCodes2["PERMANENT_REDIRECT"] = 308] = "PERMANENT_REDIRECT";
+    StatusCodes2[StatusCodes2["PRECONDITION_FAILED"] = 412] = "PRECONDITION_FAILED";
+    StatusCodes2[StatusCodes2["PRECONDITION_REQUIRED"] = 428] = "PRECONDITION_REQUIRED";
+    StatusCodes2[StatusCodes2["PROCESSING"] = 102] = "PROCESSING";
+    StatusCodes2[StatusCodes2["PROXY_AUTHENTICATION_REQUIRED"] = 407] = "PROXY_AUTHENTICATION_REQUIRED";
+    StatusCodes2[StatusCodes2["REQUEST_HEADER_FIELDS_TOO_LARGE"] = 431] = "REQUEST_HEADER_FIELDS_TOO_LARGE";
+    StatusCodes2[StatusCodes2["REQUEST_TIMEOUT"] = 408] = "REQUEST_TIMEOUT";
+    StatusCodes2[StatusCodes2["REQUEST_TOO_LONG"] = 413] = "REQUEST_TOO_LONG";
+    StatusCodes2[StatusCodes2["REQUEST_URI_TOO_LONG"] = 414] = "REQUEST_URI_TOO_LONG";
+    StatusCodes2[StatusCodes2["REQUESTED_RANGE_NOT_SATISFIABLE"] = 416] = "REQUESTED_RANGE_NOT_SATISFIABLE";
+    StatusCodes2[StatusCodes2["RESET_CONTENT"] = 205] = "RESET_CONTENT";
+    StatusCodes2[StatusCodes2["SEE_OTHER"] = 303] = "SEE_OTHER";
+    StatusCodes2[StatusCodes2["SERVICE_UNAVAILABLE"] = 503] = "SERVICE_UNAVAILABLE";
+    StatusCodes2[StatusCodes2["SWITCHING_PROTOCOLS"] = 101] = "SWITCHING_PROTOCOLS";
+    StatusCodes2[StatusCodes2["TEMPORARY_REDIRECT"] = 307] = "TEMPORARY_REDIRECT";
+    StatusCodes2[StatusCodes2["TOO_MANY_REQUESTS"] = 429] = "TOO_MANY_REQUESTS";
+    StatusCodes2[StatusCodes2["UNAUTHORIZED"] = 401] = "UNAUTHORIZED";
+    StatusCodes2[StatusCodes2["UNAVAILABLE_FOR_LEGAL_REASONS"] = 451] = "UNAVAILABLE_FOR_LEGAL_REASONS";
+    StatusCodes2[StatusCodes2["UNPROCESSABLE_ENTITY"] = 422] = "UNPROCESSABLE_ENTITY";
+    StatusCodes2[StatusCodes2["UNSUPPORTED_MEDIA_TYPE"] = 415] = "UNSUPPORTED_MEDIA_TYPE";
+    StatusCodes2[StatusCodes2["USE_PROXY"] = 305] = "USE_PROXY";
+    StatusCodes2[StatusCodes2["MISDIRECTED_REQUEST"] = 421] = "MISDIRECTED_REQUEST";
+  })(StatusCodes || (StatusCodes = {}));
+  let debug;
+  if (isNode) {
+    debug = Debug(`proc:${process.pid}:stsoauth2worker.ts`);
+  } else {
+    debug = Debug(`proc:0:stsoauth2worker.ts`);
+  }
+  class STSOAuth2Worker {
+    constructor(workerPort, options) {
+      //#storageManager = null;
+      __privateAdd(this, _clientSessionStore, void 0);
+      __privateAdd(this, _cUtils2, new CryptoUtils());
+      __privateAdd(this, _qParams2, new QueryParams());
+      __privateAdd(this, _STORAGE_SESSION_KEY2, "session.stsmda.com.au");
+      //@@#aic = null;
+      __privateAdd(this, _oauthWorkerPort, void 0);
+      __privateAdd(this, _options2, void 0);
+      __privateAdd(this, _httpsAgent, null);
+      // Attempt to restore a previous session using the STSBroker
+      /*
+          { parameterType: OAuth2ParameterType.CLIENT_ID, errorType: authErrorType.CLIENT_ID_MISMATCH },
+          { parameterType: OAuth2ParameterType.SCOPE, errorType: authErrorType.SCOPE_MISMATCH }
+          { parameterType: OAuth2ParameterType.REDIRECT_URI, errorType: authErrorType.REDIRECT_URI_MISMATCH },
+          { parameterType: OAuth2ParameterType.AUDIENCE, errorType: authErrorType.SCOPE_MISMATCH }
+      
+          Successful Response
+          {
+              "access_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Ik5HVEZ2ZEstZnl0aEV1Q...",
+              "token_type": "Bearer",
+              "expires_in": 3599,
+              "scope": "https%3A%2F%2Fgraph.microsoft.com%2Fmail.read",
+              "refresh_token": "AwABAAAAvPM1KaPlrEqdFSBzjqfTGAMxZGUTdM0t4B4...",
+              "id_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJub25lIn0.eyJhdWQiOiIyZDRkMTFhMi1mODE0LTQ2YTctOD...",
+          }
+      
+          Error Response
+          {
+              "error": "invalid_scope",
+              "error_description": "AADSTS70011: The provided value for the input parameter 'scope' is not valid. The scope https://foo.microsoft.com/mail.read is not valid.\r\nTrace ID: 255d1aef-8c98-452f-ac51-23d051240864\r\nCorrelation ID: fb3d2015-bc17-4bb9-bb85-30c5cf1aaaa7\r\nTimestamp: 2016-01-09 02:02:12Z",
+              "error_codes": [
+                  70011
+              ],
+              "timestamp": "2016-01-09 02:02:12Z",
+          }
+        
+          */
+      __privateAdd(this, _HandleAuthenticateEvent2, (id_token) => {
+        const message = {
+          messageId: -1,
+          // un-solicited message
+          command: IOauth2ListenerCommand.AUTHENTICATE_EVENT
+        };
+        __privateGet(this, _ProcessCommand).call(this, message, id_token);
+      });
+      // eslint-disable-next-line  @typescript-eslint/no-explicit-any
+      __privateAdd(this, _HandleErrorEvent2, (error) => {
+        const message = {
+          messageId: -1,
+          // un-solicited message
+          command: IOauth2ListenerCommand.ERROR
+        };
+        __privateGet(this, _ProcessCommand).call(this, message, error);
+      });
+      __privateAdd(this, _LogMessage, (messageToSend) => {
+        const message = {
+          messageId: -1,
+          // un-solicited message
+          command: IOauth2ListenerCommand.LOG
+        };
+        __privateGet(this, _ProcessCommand).call(this, message, messageToSend);
+      });
+      __privateAdd(this, _GetAccessToken, () => {
+        const sessionData = __privateGet(this, _clientSessionStore).get(__privateGet(this, _STORAGE_SESSION_KEY2));
+        if (sessionData) {
+          const tokens = sessionData.tokenResponse;
+          return tokens.access_token;
+        } else {
+          return null;
+        }
+      });
+      // eslint-disable-next-line  @typescript-eslint/no-explicit-any
+      __privateAdd(this, _GetCookies, () => {
+        if (isNode) {
+          const sessionData = __privateGet(this, _clientSessionStore).get(__privateGet(this, _STORAGE_SESSION_KEY2));
+          if (sessionData) {
+            return sessionData.brokerCookie;
+          } else {
+            return null;
+          }
+        } else {
+          return null;
+        }
+      });
+      __privateAdd(this, _UpdateInstrument, (instrumentName, telemetry) => {
+        const message = {
+          messageId: -1,
+          // un-solicited message
+          command: IOauth2ListenerCommand.UPDATE_INSTRUMENT
+        };
+        __privateGet(this, _ProcessCommand).call(this, message, {
+          instrumentName,
+          telemetry
+        });
+      });
+      __publicField(this, "SetupListener", () => {
+        __privateGet(this, _oauthWorkerPort).onmessage = async (data) => {
+          const auth2ListenerMessage = data.data;
+          debug(`STSOAuth2Worker:SetupListener:onmessage: [${auth2ListenerMessage.command}]`);
+          switch (auth2ListenerMessage.command) {
+            case IOauth2ListenerCommand.RESTORE_SESSION:
+              __privateGet(this, _ProcessCommand).call(this, auth2ListenerMessage, await __privateGet(this, _RestoreSession).call(this));
+              break;
+            case IOauth2ListenerCommand.AUTHORIZE:
+              __privateGet(this, _ProcessCommand).call(this, auth2ListenerMessage, await __privateGet(this, _Authorize).call(this));
+              break;
+            case IOauth2ListenerCommand.HANDLE_REDIRECT:
+              __privateGet(this, _ProcessCommand).call(this, auth2ListenerMessage, await __privateGet(this, _HandleRedirect).call(this, auth2ListenerMessage.payload));
+              break;
+            case IOauth2ListenerCommand.LOGOUT:
+              __privateGet(this, _ProcessCommand).call(this, auth2ListenerMessage, await __privateGet(this, _Logout).call(this));
+              break;
+            case IOauth2ListenerCommand.ACCESS_TOKEN:
+              __privateGet(this, _ProcessCommand).call(this, auth2ListenerMessage, await __privateGet(this, _GetAccessToken).call(this));
+              break;
+            case IOauth2ListenerCommand.EXECUTE_REFRESH_TOKEN:
+              __privateGet(this, _ProcessCommand).call(this, auth2ListenerMessage, await __privateGet(this, _RefreshToken).call(this));
+              break;
+            case IOauth2ListenerCommand.COOKIES:
+              __privateGet(this, _ProcessCommand).call(this, auth2ListenerMessage, await __privateGet(this, _GetCookies).call(this));
+              break;
+            default:
+              throw new Error(`Command: [${auth2ListenerMessage.command}'] not found.`);
+          }
+        };
+      });
+      /*
+      #GetIDToken = async(): Promise<string> => {
+      	return '-- ID Token --';
+      }
+      */
+      // eslint-disable-next-line  @typescript-eslint/no-explicit-any
+      __privateAdd(this, _ProcessCommand, async (auth2ListenerMessage, response) => {
+        const messageResponse = {
+          messageId: auth2ListenerMessage.messageId,
+          command: auth2ListenerMessage.command,
+          payload: response
+        };
+        __privateGet(this, _oauthWorkerPort).postMessage(messageResponse);
+      });
+      __privateAdd(this, _RestoreSession, async () => {
+        let restoredSessionData = null;
+        const sessionData = __privateGet(this, _clientSessionStore).get(__privateGet(this, _STORAGE_SESSION_KEY2));
+        if (sessionData) {
+          restoredSessionData = sessionData.tokenResponse;
+          console.log("Session restored from client storage.");
+          __privateGet(this, _LogMessage).call(this, "Session restored from client storage.");
+        } else {
+          const url = `${__privateGet(this, _options2).brokerendpoint}:${__privateGet(this, _options2).brokerport}${__privateGet(this, _options2).brokerapiroot}/session`;
+          console.log("RestoreSession");
+          console.log(url);
+          __privateGet(this, _LogMessage).call(this, "RestoreSession.");
+          __privateGet(this, _LogMessage).call(this, url);
+          try {
+            const rConfig = {
+              method: "post",
+              url,
+              data: {
+                [stsutils.OAuth2ParameterType.CLIENT_ID]: __privateGet(this, _options2).client_id,
+                [stsutils.OAuth2ParameterType.SCOPE]: __privateGet(this, _options2).scope,
+                [stsutils.OAuth2ParameterType.REDIRECT_URI]: __privateGet(this, _options2).redirect_uri,
+                [stsutils.OAuth2ParameterType.AUDIENCE]: __privateGet(this, _options2).audience
+              },
+              withCredentials: true,
+              // Ensure cookies are passed to the service
+              timeout: __privateGet(this, _options2).timeout
+            };
+            debug(`#RestoreSession:session request detail: [${JSON.stringify(rConfig)}]`.magenta);
+            if (isNode) {
+              rConfig.httpsAgent = __privateGet(this, _httpsAgent);
+            }
+            const retVal = await axios(rConfig);
+            if (retVal.data.status === StatusCodes.OK) {
+              restoredSessionData = retVal.data.detail;
+              if (restoredSessionData) {
+                const newSessionData = {
+                  tokenResponse: restoredSessionData
+                };
+                if (isNode) {
+                  newSessionData.brokerCookie = retVal.headers["set-cookie"];
+                }
+                __privateGet(this, _clientSessionStore).set(__privateGet(this, _STORAGE_SESSION_KEY2), newSessionData);
+                console.log("Session restored from server side cookie.");
+              } else {
+                console.log(`Could not restore previous session. No restoredSessionData available.`);
+                console.log(JSON.stringify(retVal.data));
+              }
+            } else {
+              console.log("Could not restore previous session:-");
+              console.log(JSON.stringify(retVal.data));
+            }
+          } catch (error) {
+            console.log("Could not restore previous session (error state):-");
+            console.log(error);
+            console.log(JSON.stringify(error));
+          }
+        }
+        if (restoredSessionData !== null) {
+          __privateGet(this, _HandleAuthenticateEvent2).call(this, restoredSessionData.id_token);
+          console.log("Refreshing tokens ...");
+          return await __privateGet(this, _RefreshToken).call(this);
+        } else {
+          __privateGet(this, _HandleAuthenticateEvent2).call(this, null);
+          return false;
+        }
+      });
+      __privateAdd(this, _Authorize, async () => {
+        console.log("Authorize ...");
+        const client_id = __privateGet(this, _options2).client_id;
+        const nonce = __privateGet(this, _cUtils2).CreateRandomString();
+        const response_type = [AuthorizeOptionsResponseType.CODE];
+        const redirect_uri = __privateGet(this, _options2).redirect_uri;
+        const response_mode = AuthorizeOptionsResponseMode.QUERY;
+        const scope = __privateGet(this, _options2).scope;
+        const state = __privateGet(this, _cUtils2).CreateRandomString();
+        const code_verifier = __privateGet(this, _cUtils2).CreateRandomString();
+        const code_challenge = await __privateGet(this, _cUtils2).DigestMessage(code_verifier);
+        const code_challenge_method = "S256";
+        const authorizeOptions = {
+          client_id,
+          nonce,
+          response_type,
+          redirect_uri,
+          response_mode,
+          scope,
+          state,
+          code_challenge,
+          code_challenge_method
+        };
+        const authorizeOptionsClientCopy = { ...authorizeOptions };
+        const url = `${__privateGet(this, _options2).authorizeendpoint}:${__privateGet(this, _options2).authorizeport}${__privateGet(this, _options2).authorizeapiroot}${__privateGet(this, _options2).authorizeapi}?${__privateGet(this, _qParams2).CreateQueryParams(authorizeOptions)}`;
+        console.log(url);
+        authorizeOptions.code_verifier = code_verifier;
+        console.log(`Authorize:authorizeOptions: [${JSON.stringify(authorizeOptions)}]`);
+        return {
+          url,
+          authorizeOptions,
+          authorizeOptionsClientCopy
+        };
+      });
+      // eslint-disable-next-line  @typescript-eslint/no-explicit-any
+      __privateAdd(this, _HandleRedirect, async (payload) => {
+        const queryVars = payload.queryVars;
+        const authorizeOptions = payload.authorizeOptions;
+        debug(`#HandleRedirect: HandleRedirect`.magenta);
+        debug(`#HandleRedirect: HandleRedirect:Query Vars: [${JSON.stringify(queryVars)}]`.magenta);
+        if (queryVars[stsutils.OAuth2ParameterType.CODE]) {
+          const response = queryVars;
+          console.log(`authorizeOptions from transaction state: [${JSON.stringify(authorizeOptions)}]`);
+          const redirectState = response.state;
+          const authorizeOptionsState = authorizeOptions.state;
+          if (authorizeOptionsState.localeCompare(redirectState) === 0) {
+            console.log("redirected state (from queryVars) matched previously saved transaction authorizeOptions state");
+            return await __privateGet(this, _GetToken).call(this, authorizeOptions, response);
+          } else {
+            console.log("redirected state (from queryVars) did NOT match previously saved transaction authorizeOptions state");
+            console.log(`authorizeOptionsState: [${authorizeOptionsState}]`);
+            console.log(`redirectState: [${redirectState}]`);
+            __privateGet(this, _HandleErrorEvent2).call(this, { message: "State un-matched" });
+            return false;
+          }
+        } else if (queryVars[stsutils.OAuth2ParameterType.ERROR]) {
+          __privateGet(this, _HandleErrorEvent2).call(this, { message: "State un-matched" });
+          return false;
+        } else {
+          __privateGet(this, _HandleErrorEvent2).call(this, { message: "State un-matched" });
+          return false;
+        }
+      });
+      /*
+          client_id=6731de76-14a6-49ae-97bc-6eba6914391e
+          &scope=https%3A%2F%2Fgraph.microsoft.com%2Fmail.read
+          &code=OAAABAAAAiL9Kn2Z27UubvWFPbm0gLWQJVzCTE9UkP3pSx1aXxUjq3n8b2JRLk4OxVXr...
+          &redirect_uri=http%3A%2F%2Flocalhost%2Fmyapp%2F
+          &grant_type=authorization_code
+          &code_verifier=ThisIsntRandomButItNeedsToBe43CharactersLong 
+          &client_secret=JqQX2PNo9bpM0uEihUPzyrh    // NOTE: Only required for web apps. This secret needs to be URL-Encoded.
+      
+          Successful Response
+          {
+              "access_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Ik5HVEZ2ZEstZnl0aEV1Q...",
+              "token_type": "Bearer",
+              "expires_in": 3599,
+              "scope": "https%3A%2F%2Fgraph.microsoft.com%2Fmail.read",
+              "refresh_token": "AwABAAAAvPM1KaPlrEqdFSBzjqfTGAMxZGUTdM0t4B4...",
+              "id_token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJub25lIn0.eyJhdWQiOiIyZDRkMTFhMi1mODE0LTQ2YTctOD...",
+          }
+          */
+      // Get access_token, refresh_token and id_token using OAuth2 Authorization Code Flow
+      __privateAdd(this, _GetTokenFromBroker, async (authorizationCodeFlowParameters) => {
+        debug(`#GetTokenFromBroker`.magenta);
+        __privateGet(this, _clientSessionStore).remove(__privateGet(this, _STORAGE_SESSION_KEY2));
+        const url = `${__privateGet(this, _options2).brokerendpoint}:${__privateGet(this, _options2).brokerport}${__privateGet(this, _options2).brokerapiroot}/token`;
+        try {
+          const rConfig = {
+            method: "post",
+            url,
+            data: authorizationCodeFlowParameters,
+            withCredentials: true,
+            // Ensure cookies are passed to the service
+            timeout: __privateGet(this, _options2).timeout
+          };
+          debug(`#GetTokenFromBroker: request config: [${JSON.stringify(rConfig)}]`.magenta);
+          if (isNode) {
+            rConfig.httpsAgent = __privateGet(this, _httpsAgent);
+          }
+          debug(`#GetTokenFromBroker: axios API call`.magenta);
+          const retVal = await axios(rConfig);
+          debug(`#GetTokenFromBroker: axios API call result: [${retVal.status}]`.magenta);
+          if (retVal.status === StatusCodes.OK) {
+            debug(`#GetTokenFromBroker: storing tokens`.magenta);
+            const tokenResponse = retVal.data;
+            __privateGet(this, _HandleAuthenticateEvent2).call(this, tokenResponse.id_token);
+            const newSessionData = {
+              tokenResponse
+            };
+            if (isNode) {
+              newSessionData.brokerCookie = retVal.headers["set-cookie"];
+            }
+            __privateGet(this, _clientSessionStore).set(__privateGet(this, _STORAGE_SESSION_KEY2), newSessionData);
+            return true;
+          } else if (retVal.status === StatusCodes.UNAUTHORIZED) {
+            debug(`#GetTokenFromBroker: NOT storing tokens, status: [${retVal.status}]`.magenta);
+            __privateGet(this, _HandleAuthenticateEvent2).call(this, null);
+            return false;
+          } else {
+            debug(`#GetTokenFromBroker: NOT storing tokens (general error 1), status: [${retVal.status}]`.magenta);
+            __privateGet(this, _HandleAuthenticateEvent2).call(this, null);
+            console.log("Could not obtain access_token from token end-point:-");
+            console.log(JSON.stringify(retVal.data));
+            return false;
+          }
+        } catch (error) {
+          debug(`#GetTokenFromBroker: NOT storing tokens (general error 2), status: [${error}]`.red);
+          __privateGet(this, _HandleAuthenticateEvent2).call(this, null);
+          return false;
+        }
+      });
+      // Get access_token, refresh_token and id_token using OAuth2 Authorization Code Flow
+      __privateAdd(this, _GetToken, async (authorizeOptions, authorizeResponse) => {
+        console.log("#GetToken");
+        console.log(authorizeResponse);
+        __privateGet(this, _clientSessionStore).remove(__privateGet(this, _STORAGE_SESSION_KEY2));
+        const authorizationCodeFlowParameters = {
+          client_id: __privateGet(this, _options2).client_id,
+          scope: __privateGet(this, _options2).scope,
+          code: authorizeResponse.code,
+          redirect_uri: __privateGet(this, _options2).redirect_uri,
+          grant_type: OAuthGrantTypes.AUTHORIZATION_CODE,
+          code_verifier: authorizeOptions.code_verifier
+        };
+        return await __privateGet(this, _GetTokenFromBroker).call(this, authorizationCodeFlowParameters);
+      });
+      /*
+      	// Line breaks for legibility only
+      
+      POST /{tenant}/oauth2/v2.0/token HTTP/1.1
+      Host: https://login.microsoftonline.com
+      Content-Type: application/x-www-form-urlencoded
+      
+      client_id=535fb089-9ff3-47b6-9bfb-4f1264799865
+      &scope=https%3A%2F%2Fgraph.microsoft.com%2Fmail.read
+      &refresh_token=OAAABAAAAiL9Kn2Z27UubvWFPbm0gLWQJVzCTE9UkP3pSx1aXxUjq...
+      &grant_type=refresh_token
+      &client_secret=sampleCredentia1s    // NOTE: Only required for web apps. This secret needs to be URL-Encoded
+      
+      Error Response
+      {
+      	"error": "invalid_scope",
+      	"error_description": "AADSTS70011: The provided value for the input parameter 'scope' is not valid. The scope https://foo.microsoft.com/mail.read is not valid.\r\nTrace ID: 255d1aef-8c98-452f-ac51-23d051240864\r\nCorrelation ID: fb3d2015-bc17-4bb9-bb85-30c5cf1aaaa7\r\nTimestamp: 2016-01-09 02:02:12Z",
+      	"error_codes": [
+      	  70011
+      	],
+      	"timestamp": "2016-01-09 02:02:12Z",
+      	"trace_id": "255d1aef-8c98-452f-ac51-23d051240864",
+      	"correlation_id": "fb3d2015-bc17-4bb9-bb85-30c5cf1aaaa7"
+        }
+      */
+      __privateAdd(this, _RefreshToken, async () => {
+        debug(`STSOAuth2Worker:#RefreshToken:start`.cyan);
+        const sessionData = __privateGet(this, _clientSessionStore).get(__privateGet(this, _STORAGE_SESSION_KEY2));
+        if (sessionData) {
+          debug(`STSOAuth2Worker:#RefreshToken:sessionData: [${JSON.stringify(sessionData)}]`.cyan);
+          const currentSessionData = sessionData.tokenResponse;
+          const refreshFlowParameters = {
+            client_id: __privateGet(this, _options2).client_id,
+            scope: __privateGet(this, _options2).scope,
+            refresh_token: currentSessionData.refresh_token,
+            grant_type: OAuthGrantTypes.REFRESH_TOKEN
+          };
+          return await __privateGet(this, _GetTokenFromBroker).call(this, refreshFlowParameters);
+        } else {
+          debug(`STSOAuth2Worker:#RefreshToken:sessionData not found within clientSessionStore`.red);
+          return false;
+        }
+      });
+      // call broker to logout
+      // broker to logout of server
+      // delete cookie
+      // clear session storage
+      // clear all state from $store
+      __privateAdd(this, _Logout, async () => {
+        console.log("Logout");
+        const url = `${__privateGet(this, _options2).brokerendpoint}:${__privateGet(this, _options2).brokerport}${__privateGet(this, _options2).brokerapiroot}/logout`;
+        console.log(url);
+        const sessionData = __privateGet(this, _clientSessionStore).get(__privateGet(this, _STORAGE_SESSION_KEY2));
+        if (sessionData) {
+          const currentSessionData = sessionData.tokenResponse;
+          const refresh_token = currentSessionData.refresh_token;
+          console.log(refresh_token);
+          const decodedRefreshToken = o(refresh_token);
+          console.log(decodedRefreshToken);
+          const sessionId = decodedRefreshToken.sts_session;
+          console.log(sessionId);
+          __privateGet(this, _clientSessionStore).remove(__privateGet(this, _STORAGE_SESSION_KEY2));
+          __privateGet(this, _HandleAuthenticateEvent2).call(this, null);
+          try {
+            const rConfig = {
+              method: "post",
+              url,
+              data: {
+                sessionId
+              },
+              withCredentials: true,
+              // Ensure cookies are passed to the service
+              timeout: __privateGet(this, _options2).timeout
+            };
+            debug(`#Logout: request config: [${rConfig}]`.magenta);
+            if (isNode) {
+              rConfig.httpsAgent = __privateGet(this, _httpsAgent);
+            }
+            const retVal = await axios(rConfig);
+            if (retVal.data.status === StatusCodes.OK) {
+              return true;
+            } else {
+              console.log("Error during logout (1: server side)");
+              console.log(JSON.stringify(retVal.data));
+              return false;
+            }
+          } catch (error) {
+            console.log("Error during logout (2: server side)");
+            console.log(error);
+            console.log(JSON.stringify(error));
+            return false;
+          }
+        } else {
+          console.log("Error during logout. Could not restore session from session storage.");
+          return false;
+        }
+      });
+      Debug.enable("proc:*");
+      __privateSet(this, _options2, options);
+      debug(`STSOAuth2Worker:constructor:#options: [${JSON.stringify(__privateGet(this, _options2))}]`);
+      __privateSet(this, _clientSessionStore, new stsvueutils.ClientStorageFactory({ clientStorageType: stsvueutils.ClientStorageType.MEMORY_STORAGE, usePrefix: false }).GetStorage());
+      __privateSet(this, _oauthWorkerPort, workerPort);
+      debug(`STSOAuth2Worker:constructor:#oauthWorkerPort: [${JSON.stringify(__privateGet(this, _oauthWorkerPort))}]`);
+      if (isNode && __privateGet(this, _options2).agentOptions) {
+        __privateSet(this, _httpsAgent, new https.Agent({
+          keepAlive: __privateGet(this, _options2).agentOptions.keepAlive,
+          maxSockets: __privateGet(this, _options2).agentOptions.maxSockets,
+          maxTotalSockets: __privateGet(this, _options2).agentOptions.maxTotalSockets,
+          maxFreeSockets: __privateGet(this, _options2).agentOptions.maxFreeSockets,
+          timeout: __privateGet(this, _options2).timeout,
+          rejectUnauthorized: __privateGet(this, _options2).agentOptions.rejectUnauthorized
+          // Allows self-signed certificates if non-production
+        }));
+      }
+      this.SetupListener();
+      __privateGet(this, _UpdateInstrument).call(this, stsinstrumentation.Gauge.LOGGER, {
+        LogMessage: `STSOauth2 Plugin - Successfully Loaded`
+      });
+    }
+  }
+  _clientSessionStore = new WeakMap();
+  _cUtils2 = new WeakMap();
+  _qParams2 = new WeakMap();
+  _STORAGE_SESSION_KEY2 = new WeakMap();
+  _oauthWorkerPort = new WeakMap();
+  _options2 = new WeakMap();
+  _httpsAgent = new WeakMap();
+  _HandleAuthenticateEvent2 = new WeakMap();
+  _HandleErrorEvent2 = new WeakMap();
+  _LogMessage = new WeakMap();
+  _GetAccessToken = new WeakMap();
+  _GetCookies = new WeakMap();
+  _UpdateInstrument = new WeakMap();
+  _ProcessCommand = new WeakMap();
+  _RestoreSession = new WeakMap();
+  _Authorize = new WeakMap();
+  _HandleRedirect = new WeakMap();
+  _GetTokenFromBroker = new WeakMap();
+  _GetToken = new WeakMap();
+  _RefreshToken = new WeakMap();
+  _Logout = new WeakMap();
+  const TestStore = pinia.defineStore("__sts__TestStore", {
+    state: () => {
+      return {
+        count: 0
+      };
+    },
+    actions: {
+      UpdateCount() {
+        this.count++;
+      }
+    },
+    getters: {
+      CountXX: (state) => {
+        return state.count * 2;
+      }
+    }
+    /*
+    persist: {
+    	storage: globalThis.sessionStorage
+    }
+    */
+  });
+  const useSTSOAuth2ManagerPlugin = () => vue.inject(STSOAuth2ManagerPluginKey);
+  const STSOAuth2ManagerPlugin = {
+    install: (app, options) => {
+      const om = new STSOAuth2Manager(app, options);
+      if (!app.config.globalProperties.$sts) {
+        app.config.globalProperties.$sts = {};
+      }
+      app.config.globalProperties.$sts[STSOAuth2ManagerPluginKey] = om;
+      app.provide(STSOAuth2ManagerPluginKey, om);
+    }
+  };
+  exports2.AuthorizeOptionsResponseMode = AuthorizeOptionsResponseMode;
+  exports2.AuthorizeOptionsResponseType = AuthorizeOptionsResponseType;
+  exports2.IOauth2ListenerCommand = IOauth2ListenerCommand;
+  exports2.OAuthGrantTypes = OAuthGrantTypes;
+  exports2.STSOAuth2Manager = STSOAuth2Manager;
+  exports2.STSOAuth2ManagerPlugin = STSOAuth2ManagerPlugin;
+  exports2.STSOAuth2ManagerPluginKey = STSOAuth2ManagerPluginKey;
+  exports2.STSOAuth2Worker = STSOAuth2Worker;
+  exports2.STSOauth2Store = STSOauth2Store;
+  exports2.TestStore = TestStore;
+  exports2.useSTSOAuth2ManagerPlugin = useSTSOAuth2ManagerPlugin;
+  Object.defineProperty(exports2, Symbol.toStringTag, { value: "Module" });
+});
 //# sourceMappingURL=stsoauth2plugin.umd.js.map