@okta/okta-auth-js 7.12.0-rc1 → 7.12.0

package/CHANGELOG.md

@@ -8,6 +8,20 @@
   - A [`Cross-Origin-Opener-Policy`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cross-Origin-Opener-Policy) resilient method of acquiring tokens using via external IDPs.
   - See [documentation](https://github.com/okta/okta-auth-js?tab=readme-ov-file#tokengetwithidppopupoptions) for more detailed explanation
 
+- [#1584](https://github.com/okta/okta-auth-js/pull/1584) feat: adds `dpopOptions.allowBearerTokens` configuration
+
+# 7.11.3
+
+### Fixes
+
+- [#1583](https://github.com/okta/okta-auth-js/pull/1583) fix: corrects `@babel/runtime` version
+
+# 7.11.2
+
+### Fixes
+
+- [#1581](https://github.com/okta/okta-auth-js/pull/1581) fix: bumps `@babel/runtime` version
+
 # 7.11.1
 
 ### Fixes

package/README.md

@@ -415,6 +415,10 @@ const config = {
   // other configurations
   pkce: true,     // required
   dpop: true,
+  dpopOptions: {
+    // set to `true` to skip the validation to check the resulting token response includes `token_type: DPoP`
+    allowBearerTokens: false    // defaults to `false`, tokens are validated to include `token_type: DPoP`
+  }
 };
 
 const authClient = new OktaAuth(config);
@@ -575,6 +579,20 @@ Default value is `false`. Set to `true` to enable `DPoP` (Demonstrating Proof-of
 
 See Guide: [Enabling DPoP](#enabling-dpop)
 
+#### `dpopOptions`
+
+Default value:
+```javascript
+dpopOptions: {
+  allowBearerTokens: false
+}
+```
+
+See Guide: [Enabling DPoP](#enabling-dpop)
+
+#### `dpopOptions.allowBearerTokens`
+
+When `false`, dpop-enabled token requests are validated to contain `token_type: DPoP` and will throw otherwise. Set to `true` to skip this validation and allow `Bearer` tokens as a possible `token_type`. This can be useful during a migration, to avoid needing to update a web application simutaneously with Okta Org configurations. Defaults to `false`
 
 #### responseMode
 
@@ -1662,6 +1680,8 @@ const { tokens } = await promise;
 authClient.tokenManager.setTokens(tokens);
 ```
 
+> The `redirectUri` must be a registered callback route. See [Login redirect URIs](#login-redirect-uris)
+
 #### Tradeoffs
 1. Since [`window.postMessage`](https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage) can no longer be relied upon, the popup window's flow needs to end on the same origin as the application requesting tokens. After successful authentication, the popup window will be redirect to the provided `redirectUri`, which needs to call `authClient.handleIDPPopupRedirect()`. In Single Page Apps (with a router), it's recommended to host a dedicated route, but this logic can be performed on the main page as well.
 

package/cjs/http/OktaUserAgent.js

@@ -20,7 +20,7 @@ var _features = require("../features");
 class OktaUserAgent {
   constructor() {
     // add base sdk env
-    this.environments = [`okta-auth-js/${"7.12.0-rc1"}`];
+    this.environments = [`okta-auth-js/${"7.12.0"}`];
     this.maybeAddNodeEnvironment();
   }
   addEnvironment(env) {
@@ -32,7 +32,7 @@ class OktaUserAgent {
     };
   }
   getVersion() {
-    return "7.12.0-rc1";
+    return "7.12.0";
   }
   maybeAddNodeEnvironment() {
     if ((0, _features.isBrowser)() || !process || !process.versions) {

package/cjs/http/OktaUserAgent.js.map

@@ -1 +1 @@
-{"version":3,"file":"OktaUserAgent.js","names":["OktaUserAgent","constructor","environments","maybeAddNodeEnvironment","addEnvironment","env","push","getHttpHeader","join","getVersion","isBrowser","process","versions","node","version"],"sources":["../../../lib/http/OktaUserAgent.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n/* global SDK_VERSION */\n\nimport { isBrowser } from '../features';\nexport class OktaUserAgent {\n  environments: string[];\n\n  constructor() {\n    // add base sdk env\n    this.environments = [`okta-auth-js/${SDK_VERSION}`];\n    this.maybeAddNodeEnvironment();\n  }\n\n  addEnvironment(env: string) {\n    this.environments.push(env);\n  }\n\n  getHttpHeader() {\n    return { 'X-Okta-User-Agent-Extended': this.environments.join(' ') };\n  }\n\n  getVersion() {\n    return SDK_VERSION;\n  }\n\n  maybeAddNodeEnvironment() {\n    if (isBrowser() || !process || !process.versions) {\n      return;\n    }\n    const { node: version } = process.versions;\n    this.environments.push(`nodejs/${version}`);\n  }\n}\n"],"mappings":";;;AAeA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAGO,MAAMA,aAAa,CAAC;EAGzBC,WAAW,GAAG;IACZ;IACA,IAAI,CAACC,YAAY,GAAG,CAAE,gBAAa,YAAc,EAAC,CAAC;IACnD,IAAI,CAACC,uBAAuB,EAAE;EAChC;EAEAC,cAAc,CAACC,GAAW,EAAE;IAC1B,IAAI,CAACH,YAAY,CAACI,IAAI,CAACD,GAAG,CAAC;EAC7B;EAEAE,aAAa,GAAG;IACd,OAAO;MAAE,4BAA4B,EAAE,IAAI,CAACL,YAAY,CAACM,IAAI,CAAC,GAAG;IAAE,CAAC;EACtE;EAEAC,UAAU,GAAG;IACX;EACF;EAEAN,uBAAuB,GAAG;IACxB,IAAI,IAAAO,mBAAS,GAAE,IAAI,CAACC,OAAO,IAAI,CAACA,OAAO,CAACC,QAAQ,EAAE;MAChD;IACF;IACA,MAAM;MAAEC,IAAI,EAAEC;IAAQ,CAAC,GAAGH,OAAO,CAACC,QAAQ;IAC1C,IAAI,CAACV,YAAY,CAACI,IAAI,CAAE,UAASQ,OAAQ,EAAC,CAAC;EAC7C;AACF;AAAC"}
+{"version":3,"file":"OktaUserAgent.js","names":["OktaUserAgent","constructor","environments","maybeAddNodeEnvironment","addEnvironment","env","push","getHttpHeader","join","getVersion","isBrowser","process","versions","node","version"],"sources":["../../../lib/http/OktaUserAgent.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\n\n/* global SDK_VERSION */\n\nimport { isBrowser } from '../features';\nexport class OktaUserAgent {\n  environments: string[];\n\n  constructor() {\n    // add base sdk env\n    this.environments = [`okta-auth-js/${SDK_VERSION}`];\n    this.maybeAddNodeEnvironment();\n  }\n\n  addEnvironment(env: string) {\n    this.environments.push(env);\n  }\n\n  getHttpHeader() {\n    return { 'X-Okta-User-Agent-Extended': this.environments.join(' ') };\n  }\n\n  getVersion() {\n    return SDK_VERSION;\n  }\n\n  maybeAddNodeEnvironment() {\n    if (isBrowser() || !process || !process.versions) {\n      return;\n    }\n    const { node: version } = process.versions;\n    this.environments.push(`nodejs/${version}`);\n  }\n}\n"],"mappings":";;;AAeA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAGO,MAAMA,aAAa,CAAC;EAGzBC,WAAW,GAAG;IACZ;IACA,IAAI,CAACC,YAAY,GAAG,CAAE,gBAAa,QAAc,EAAC,CAAC;IACnD,IAAI,CAACC,uBAAuB,EAAE;EAChC;EAEAC,cAAc,CAACC,GAAW,EAAE;IAC1B,IAAI,CAACH,YAAY,CAACI,IAAI,CAACD,GAAG,CAAC;EAC7B;EAEAE,aAAa,GAAG;IACd,OAAO;MAAE,4BAA4B,EAAE,IAAI,CAACL,YAAY,CAACM,IAAI,CAAC,GAAG;IAAE,CAAC;EACtE;EAEAC,UAAU,GAAG;IACX;EACF;EAEAN,uBAAuB,GAAG;IACxB,IAAI,IAAAO,mBAAS,GAAE,IAAI,CAACC,OAAO,IAAI,CAACA,OAAO,CAACC,QAAQ,EAAE;MAChD;IACF;IACA,MAAM;MAAEC,IAAI,EAAEC;IAAQ,CAAC,GAAGH,OAAO,CAACC,QAAQ;IAC1C,IAAI,CAACV,YAAY,CAACI,IAAI,CAAE,UAASQ,OAAQ,EAAC,CAAC;EAC7C;AACF;AAAC"}

package/cjs/oidc/handleOAuthResponse.js

@@ -29,12 +29,6 @@ function validateResponse(res, oauthParams) {
   if (res.state !== oauthParams.state) {
     throw new _errors.AuthSdkError('OAuth flow response state doesn\'t match request state');
   }
-
-  // https://datatracker.ietf.org/doc/html/rfc9449#token-response
-  // "A token_type of DPoP MUST be included in the access token response to signal to the client"
-  if (oauthParams.dpop && res.token_type !== 'DPoP') {
-    throw new _errors.AuthSdkError('Unable to parse OAuth flow response: DPoP was configured but "token_type" was not DPoP');
-  }
 }
 async function handleOAuthResponse(sdk, tokenParams, res, urls) {
   const pkce = sdk.options.pkce !== false;
@@ -63,6 +57,19 @@ async function handleOAuthResponse(sdk, tokenParams, res, urls) {
 
   // Handling the result from implicit flow or PKCE token exchange
   validateResponse(res, tokenParams);
+  if (tokenParams.dpop) {
+    const {
+      allowBearerTokens
+    } = sdk.options?.dpopOptions ?? {
+      allowBearerTokens: false
+    };
+
+    // https://datatracker.ietf.org/doc/html/rfc9449#token-response
+    // "A token_type of DPoP MUST be included in the access token response to signal to the client"
+    if (!allowBearerTokens && res.token_type !== 'DPoP') {
+      throw new _errors.AuthSdkError('Unable to parse OAuth flow response: DPoP was configured but "token_type" was not DPoP');
+    }
+  }
   const tokenDict = {};
   const expiresIn = res.expires_in;
   const tokenType = res.token_type;

package/cjs/oidc/handleOAuthResponse.js.map

@@ -1 +1 @@
-{"version":3,"file":"handleOAuthResponse.js","names":["validateResponse","res","oauthParams","OAuthError","state","AuthSdkError","dpop","token_type","handleOAuthResponse","sdk","tokenParams","urls","pkce","options","code","interaction_code","token","exchangeCodeForTokens","Object","assign","authorizationCode","interactionCode","getDefaultTokenParams","getOAuthUrls","responseType","Array","isArray","scopes","scope","split","clone","clientId","tokenDict","expiresIn","expires_in","tokenType","accessToken","access_token","idToken","id_token","refreshToken","refresh_token","now","Math","floor","Date","accessJwt","decode","claims","payload","expiresAt","Number","authorizeUrl","userinfoUrl","dpopPairId","extraParams","tokenUrl","issuer","idJwt","idTokenObj","exp","iat","validationParams","nonce","acrValues","ignoreSignature","undefined","verifyToken","indexOf","tokens"],"sources":["../../../lib/oidc/handleOAuthResponse.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-non-null-assertion */\n\n/* eslint-disable complexity, max-statements */\n/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\nimport { clone } from '../util';\nimport {\n  getOAuthUrls,\n} from './util/oauth';\nimport { AuthSdkError, OAuthError } from '../errors';\nimport {\n  OktaAuthOAuthInterface,\n  TokenVerifyParams,\n  IDToken,\n  OAuthResponse,\n  TokenParams,\n  TokenResponse,\n  CustomUrls,\n  Tokens,\n} from './types';\nimport { verifyToken } from './verifyToken';\nimport { getDefaultTokenParams } from './util';\n\nfunction validateResponse(res: OAuthResponse, oauthParams: TokenParams) {\n  if (res['error'] && res['error_description']) {\n    throw new OAuthError(res['error'], res['error_description']);\n  }\n\n  if (res.state !== oauthParams.state) {\n    throw new AuthSdkError('OAuth flow response state doesn\\'t match request state');\n  }\n\n  // https://datatracker.ietf.org/doc/html/rfc9449#token-response\n  // \"A token_type of DPoP MUST be included in the access token response to signal to the client\"\n  if (oauthParams.dpop && res.token_type !== 'DPoP') {\n    throw new AuthSdkError('Unable to parse OAuth flow response: DPoP was configured but \"token_type\" was not DPoP');\n  }\n}\n\nexport async function handleOAuthResponse(\n  sdk: OktaAuthOAuthInterface,\n  tokenParams: TokenParams,\n  res: OAuthResponse,\n  urls?: CustomUrls\n): Promise<TokenResponse> {\n  const pkce = sdk.options.pkce !== false;\n\n  // The result contains an authorization_code and PKCE is enabled \n  // `exchangeCodeForTokens` will call /token then call `handleOauthResponse` recursively with the result\n  if (pkce && (res.code || res.interaction_code)) {\n    return sdk.token.exchangeCodeForTokens(Object.assign({}, tokenParams, {\n      authorizationCode: res.code,\n      interactionCode: res.interaction_code\n    }), urls);\n  }\n\n  tokenParams = tokenParams || getDefaultTokenParams(sdk);\n  urls = urls || getOAuthUrls(sdk, tokenParams);\n\n  let responseType = tokenParams.responseType || [];\n  if (!Array.isArray(responseType) && responseType !== 'none') {\n    responseType = [responseType];\n  }\n\n  let scopes;\n  if (res.scope) {\n    scopes = res.scope.split(' ');\n  } else {\n    scopes = clone(tokenParams.scopes);\n  }\n  const clientId = tokenParams.clientId || sdk.options.clientId;\n\n  // Handling the result from implicit flow or PKCE token exchange\n  validateResponse(res, tokenParams);\n\n  const tokenDict = {} as Tokens;\n  const expiresIn = res.expires_in;\n  const tokenType = res.token_type;\n  const accessToken = res.access_token;\n  const idToken = res.id_token;\n  const refreshToken = res.refresh_token;\n  const now = Math.floor(Date.now()/1000);\n\n  if (accessToken) {\n    const accessJwt = sdk.token.decode(accessToken);\n    tokenDict.accessToken = {\n      accessToken: accessToken,\n      claims: accessJwt.payload,\n      expiresAt: Number(expiresIn) + now,\n      tokenType: tokenType!,\n      scopes: scopes,\n      authorizeUrl: urls.authorizeUrl!,\n      userinfoUrl: urls.userinfoUrl!\n    };\n\n    if (tokenParams.dpopPairId) {\n      tokenDict.accessToken.dpopPairId = tokenParams.dpopPairId;\n    }\n\n    if (tokenParams.extraParams) {\n      tokenDict.accessToken.extraParams = tokenParams.extraParams;\n    }\n  }\n\n  if (refreshToken) {\n    tokenDict.refreshToken = {\n      refreshToken: refreshToken,\n      // should not be used, this is the accessToken expire time\n      // TODO: remove \"expiresAt\" in the next major version OKTA-407224\n      expiresAt: Number(expiresIn) + now, \n      scopes: scopes,\n      tokenUrl: urls.tokenUrl!,\n      authorizeUrl: urls.authorizeUrl!,\n      issuer: urls.issuer!,\n    };\n\n    if (tokenParams.dpopPairId) {\n      tokenDict.refreshToken.dpopPairId = tokenParams.dpopPairId;\n    }\n\n    if (tokenParams.extraParams) {\n      tokenDict.refreshToken.extraParams = tokenParams.extraParams;\n    }\n  }\n\n  if (idToken) {\n    const idJwt = sdk.token.decode(idToken);\n    const idTokenObj: IDToken = {\n      idToken: idToken,\n      claims: idJwt.payload,\n      expiresAt: idJwt.payload.exp! - idJwt.payload.iat! + now, // adjusting expiresAt to be in local time\n      scopes: scopes,\n      authorizeUrl: urls.authorizeUrl!,\n      issuer: urls.issuer!,\n      clientId: clientId!\n    };\n\n    if (tokenParams.extraParams) {\n      idTokenObj.extraParams = tokenParams.extraParams;\n    }\n\n    const validationParams: TokenVerifyParams = {\n      clientId: clientId!,\n      issuer: urls.issuer!,\n      nonce: tokenParams.nonce,\n      accessToken: accessToken,\n      acrValues: tokenParams.acrValues\n    };\n\n    if (tokenParams.ignoreSignature !== undefined) {\n      validationParams.ignoreSignature = tokenParams.ignoreSignature;\n    }\n\n    await verifyToken(sdk, idTokenObj, validationParams);\n    tokenDict.idToken = idTokenObj;\n  }\n\n  // Validate received tokens against requested response types \n  if (responseType.indexOf('token') !== -1 && !tokenDict.accessToken) {\n    // eslint-disable-next-line max-len\n    throw new AuthSdkError('Unable to parse OAuth flow response: response type \"token\" was requested but \"access_token\" was not returned.');\n  }\n  if (responseType.indexOf('id_token') !== -1 && !tokenDict.idToken) {\n    // eslint-disable-next-line max-len\n    throw new AuthSdkError('Unable to parse OAuth flow response: response type \"id_token\" was requested but \"id_token\" was not returned.');\n  }\n\n  return {\n    tokens: tokenDict,\n    state: res.state!,\n    code: res.code,\n    responseType\n  };\n  \n}"],"mappings":";;;AAeA;AACA;AAGA;AAWA;AACA;AA/BA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAmBA,SAASA,gBAAgB,CAACC,GAAkB,EAAEC,WAAwB,EAAE;EACtE,IAAID,GAAG,CAAC,OAAO,CAAC,IAAIA,GAAG,CAAC,mBAAmB,CAAC,EAAE;IAC5C,MAAM,IAAIE,kBAAU,CAACF,GAAG,CAAC,OAAO,CAAC,EAAEA,GAAG,CAAC,mBAAmB,CAAC,CAAC;EAC9D;EAEA,IAAIA,GAAG,CAACG,KAAK,KAAKF,WAAW,CAACE,KAAK,EAAE;IACnC,MAAM,IAAIC,oBAAY,CAAC,wDAAwD,CAAC;EAClF;;EAEA;EACA;EACA,IAAIH,WAAW,CAACI,IAAI,IAAIL,GAAG,CAACM,UAAU,KAAK,MAAM,EAAE;IACjD,MAAM,IAAIF,oBAAY,CAAC,wFAAwF,CAAC;EAClH;AACF;AAEO,eAAeG,mBAAmB,CACvCC,GAA2B,EAC3BC,WAAwB,EACxBT,GAAkB,EAClBU,IAAiB,EACO;EACxB,MAAMC,IAAI,GAAGH,GAAG,CAACI,OAAO,CAACD,IAAI,KAAK,KAAK;;EAEvC;EACA;EACA,IAAIA,IAAI,KAAKX,GAAG,CAACa,IAAI,IAAIb,GAAG,CAACc,gBAAgB,CAAC,EAAE;IAC9C,OAAON,GAAG,CAACO,KAAK,CAACC,qBAAqB,CAACC,MAAM,CAACC,MAAM,CAAC,CAAC,CAAC,EAAET,WAAW,EAAE;MACpEU,iBAAiB,EAAEnB,GAAG,CAACa,IAAI;MAC3BO,eAAe,EAAEpB,GAAG,CAACc;IACvB,CAAC,CAAC,EAAEJ,IAAI,CAAC;EACX;EAEAD,WAAW,GAAGA,WAAW,IAAI,IAAAY,4BAAqB,EAACb,GAAG,CAAC;EACvDE,IAAI,GAAGA,IAAI,IAAI,IAAAY,mBAAY,EAACd,GAAG,EAAEC,WAAW,CAAC;EAE7C,IAAIc,YAAY,GAAGd,WAAW,CAACc,YAAY,IAAI,EAAE;EACjD,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,YAAY,CAAC,IAAIA,YAAY,KAAK,MAAM,EAAE;IAC3DA,YAAY,GAAG,CAACA,YAAY,CAAC;EAC/B;EAEA,IAAIG,MAAM;EACV,IAAI1B,GAAG,CAAC2B,KAAK,EAAE;IACbD,MAAM,GAAG1B,GAAG,CAAC2B,KAAK,CAACC,KAAK,CAAC,GAAG,CAAC;EAC/B,CAAC,MAAM;IACLF,MAAM,GAAG,IAAAG,WAAK,EAACpB,WAAW,CAACiB,MAAM,CAAC;EACpC;EACA,MAAMI,QAAQ,GAAGrB,WAAW,CAACqB,QAAQ,IAAItB,GAAG,CAACI,OAAO,CAACkB,QAAQ;;EAE7D;EACA/B,gBAAgB,CAACC,GAAG,EAAES,WAAW,CAAC;EAElC,MAAMsB,SAAS,GAAG,CAAC,CAAW;EAC9B,MAAMC,SAAS,GAAGhC,GAAG,CAACiC,UAAU;EAChC,MAAMC,SAAS,GAAGlC,GAAG,CAACM,UAAU;EAChC,MAAM6B,WAAW,GAAGnC,GAAG,CAACoC,YAAY;EACpC,MAAMC,OAAO,GAAGrC,GAAG,CAACsC,QAAQ;EAC5B,MAAMC,YAAY,GAAGvC,GAAG,CAACwC,aAAa;EACtC,MAAMC,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACH,GAAG,EAAE,GAAC,IAAI,CAAC;EAEvC,IAAIN,WAAW,EAAE;IACf,MAAMU,SAAS,GAAGrC,GAAG,CAACO,KAAK,CAAC+B,MAAM,CAACX,WAAW,CAAC;IAC/CJ,SAAS,CAACI,WAAW,GAAG;MACtBA,WAAW,EAAEA,WAAW;MACxBY,MAAM,EAAEF,SAAS,CAACG,OAAO;MACzBC,SAAS,EAAEC,MAAM,CAAClB,SAAS,CAAC,GAAGS,GAAG;MAClCP,SAAS,EAAEA,SAAU;MACrBR,MAAM,EAAEA,MAAM;MACdyB,YAAY,EAAEzC,IAAI,CAACyC,YAAa;MAChCC,WAAW,EAAE1C,IAAI,CAAC0C;IACpB,CAAC;IAED,IAAI3C,WAAW,CAAC4C,UAAU,EAAE;MAC1BtB,SAAS,CAACI,WAAW,CAACkB,UAAU,GAAG5C,WAAW,CAAC4C,UAAU;IAC3D;IAEA,IAAI5C,WAAW,CAAC6C,WAAW,EAAE;MAC3BvB,SAAS,CAACI,WAAW,CAACmB,WAAW,GAAG7C,WAAW,CAAC6C,WAAW;IAC7D;EACF;EAEA,IAAIf,YAAY,EAAE;IAChBR,SAAS,CAACQ,YAAY,GAAG;MACvBA,YAAY,EAAEA,YAAY;MAC1B;MACA;MACAU,SAAS,EAAEC,MAAM,CAAClB,SAAS,CAAC,GAAGS,GAAG;MAClCf,MAAM,EAAEA,MAAM;MACd6B,QAAQ,EAAE7C,IAAI,CAAC6C,QAAS;MACxBJ,YAAY,EAAEzC,IAAI,CAACyC,YAAa;MAChCK,MAAM,EAAE9C,IAAI,CAAC8C;IACf,CAAC;IAED,IAAI/C,WAAW,CAAC4C,UAAU,EAAE;MAC1BtB,SAAS,CAACQ,YAAY,CAACc,UAAU,GAAG5C,WAAW,CAAC4C,UAAU;IAC5D;IAEA,IAAI5C,WAAW,CAAC6C,WAAW,EAAE;MAC3BvB,SAAS,CAACQ,YAAY,CAACe,WAAW,GAAG7C,WAAW,CAAC6C,WAAW;IAC9D;EACF;EAEA,IAAIjB,OAAO,EAAE;IACX,MAAMoB,KAAK,GAAGjD,GAAG,CAACO,KAAK,CAAC+B,MAAM,CAACT,OAAO,CAAC;IACvC,MAAMqB,UAAmB,GAAG;MAC1BrB,OAAO,EAAEA,OAAO;MAChBU,MAAM,EAAEU,KAAK,CAACT,OAAO;MACrBC,SAAS,EAAEQ,KAAK,CAACT,OAAO,CAACW,GAAG,GAAIF,KAAK,CAACT,OAAO,CAACY,GAAI,GAAGnB,GAAG;MAAE;MAC1Df,MAAM,EAAEA,MAAM;MACdyB,YAAY,EAAEzC,IAAI,CAACyC,YAAa;MAChCK,MAAM,EAAE9C,IAAI,CAAC8C,MAAO;MACpB1B,QAAQ,EAAEA;IACZ,CAAC;IAED,IAAIrB,WAAW,CAAC6C,WAAW,EAAE;MAC3BI,UAAU,CAACJ,WAAW,GAAG7C,WAAW,CAAC6C,WAAW;IAClD;IAEA,MAAMO,gBAAmC,GAAG;MAC1C/B,QAAQ,EAAEA,QAAS;MACnB0B,MAAM,EAAE9C,IAAI,CAAC8C,MAAO;MACpBM,KAAK,EAAErD,WAAW,CAACqD,KAAK;MACxB3B,WAAW,EAAEA,WAAW;MACxB4B,SAAS,EAAEtD,WAAW,CAACsD;IACzB,CAAC;IAED,IAAItD,WAAW,CAACuD,eAAe,KAAKC,SAAS,EAAE;MAC7CJ,gBAAgB,CAACG,eAAe,GAAGvD,WAAW,CAACuD,eAAe;IAChE;IAEA,MAAM,IAAAE,wBAAW,EAAC1D,GAAG,EAAEkD,UAAU,EAAEG,gBAAgB,CAAC;IACpD9B,SAAS,CAACM,OAAO,GAAGqB,UAAU;EAChC;;EAEA;EACA,IAAInC,YAAY,CAAC4C,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAACpC,SAAS,CAACI,WAAW,EAAE;IAClE;IACA,MAAM,IAAI/B,oBAAY,CAAC,+GAA+G,CAAC;EACzI;EACA,IAAImB,YAAY,CAAC4C,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAACpC,SAAS,CAACM,OAAO,EAAE;IACjE;IACA,MAAM,IAAIjC,oBAAY,CAAC,8GAA8G,CAAC;EACxI;EAEA,OAAO;IACLgE,MAAM,EAAErC,SAAS;IACjB5B,KAAK,EAAEH,GAAG,CAACG,KAAM;IACjBU,IAAI,EAAEb,GAAG,CAACa,IAAI;IACdU;EACF,CAAC;AAEH"}
+{"version":3,"file":"handleOAuthResponse.js","names":["validateResponse","res","oauthParams","OAuthError","state","AuthSdkError","handleOAuthResponse","sdk","tokenParams","urls","pkce","options","code","interaction_code","token","exchangeCodeForTokens","Object","assign","authorizationCode","interactionCode","getDefaultTokenParams","getOAuthUrls","responseType","Array","isArray","scopes","scope","split","clone","clientId","dpop","allowBearerTokens","dpopOptions","token_type","tokenDict","expiresIn","expires_in","tokenType","accessToken","access_token","idToken","id_token","refreshToken","refresh_token","now","Math","floor","Date","accessJwt","decode","claims","payload","expiresAt","Number","authorizeUrl","userinfoUrl","dpopPairId","extraParams","tokenUrl","issuer","idJwt","idTokenObj","exp","iat","validationParams","nonce","acrValues","ignoreSignature","undefined","verifyToken","indexOf","tokens"],"sources":["../../../lib/oidc/handleOAuthResponse.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-non-null-assertion */\n\n/* eslint-disable complexity, max-statements */\n/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n *\n */\nimport { clone } from '../util';\nimport {\n  getOAuthUrls,\n} from './util/oauth';\nimport { AuthSdkError, OAuthError } from '../errors';\nimport {\n  OktaAuthOAuthInterface,\n  TokenVerifyParams,\n  IDToken,\n  OAuthResponse,\n  TokenParams,\n  TokenResponse,\n  CustomUrls,\n  Tokens,\n} from './types';\nimport { verifyToken } from './verifyToken';\nimport { getDefaultTokenParams } from './util';\n\nfunction validateResponse(res: OAuthResponse, oauthParams: TokenParams) {\n  if (res['error'] && res['error_description']) {\n    throw new OAuthError(res['error'], res['error_description']);\n  }\n\n  if (res.state !== oauthParams.state) {\n    throw new AuthSdkError('OAuth flow response state doesn\\'t match request state');\n  }\n}\n\nexport async function handleOAuthResponse(\n  sdk: OktaAuthOAuthInterface,\n  tokenParams: TokenParams,\n  res: OAuthResponse,\n  urls?: CustomUrls\n): Promise<TokenResponse> {\n  const pkce = sdk.options.pkce !== false;\n\n  // The result contains an authorization_code and PKCE is enabled \n  // `exchangeCodeForTokens` will call /token then call `handleOauthResponse` recursively with the result\n  if (pkce && (res.code || res.interaction_code)) {\n    return sdk.token.exchangeCodeForTokens(Object.assign({}, tokenParams, {\n      authorizationCode: res.code,\n      interactionCode: res.interaction_code\n    }), urls);\n  }\n\n  tokenParams = tokenParams || getDefaultTokenParams(sdk);\n  urls = urls || getOAuthUrls(sdk, tokenParams);\n\n  let responseType = tokenParams.responseType || [];\n  if (!Array.isArray(responseType) && responseType !== 'none') {\n    responseType = [responseType];\n  }\n\n  let scopes;\n  if (res.scope) {\n    scopes = res.scope.split(' ');\n  } else {\n    scopes = clone(tokenParams.scopes);\n  }\n  const clientId = tokenParams.clientId || sdk.options.clientId;\n\n  // Handling the result from implicit flow or PKCE token exchange\n  validateResponse(res, tokenParams);\n\n  if (tokenParams.dpop) {\n    const { allowBearerTokens } = sdk.options?.dpopOptions ?? { allowBearerTokens: false };\n\n    // https://datatracker.ietf.org/doc/html/rfc9449#token-response\n    // \"A token_type of DPoP MUST be included in the access token response to signal to the client\"\n    if (!allowBearerTokens && res.token_type !== 'DPoP') {\n      throw new AuthSdkError('Unable to parse OAuth flow response: DPoP was configured but \"token_type\" was not DPoP');\n    }\n  }\n\n  const tokenDict = {} as Tokens;\n  const expiresIn = res.expires_in;\n  const tokenType = res.token_type;\n  const accessToken = res.access_token;\n  const idToken = res.id_token;\n  const refreshToken = res.refresh_token;\n  const now = Math.floor(Date.now()/1000);\n\n  if (accessToken) {\n    const accessJwt = sdk.token.decode(accessToken);\n    tokenDict.accessToken = {\n      accessToken: accessToken,\n      claims: accessJwt.payload,\n      expiresAt: Number(expiresIn) + now,\n      tokenType: tokenType!,\n      scopes: scopes,\n      authorizeUrl: urls.authorizeUrl!,\n      userinfoUrl: urls.userinfoUrl!\n    };\n\n    if (tokenParams.dpopPairId) {\n      tokenDict.accessToken.dpopPairId = tokenParams.dpopPairId;\n    }\n\n    if (tokenParams.extraParams) {\n      tokenDict.accessToken.extraParams = tokenParams.extraParams;\n    }\n  }\n\n  if (refreshToken) {\n    tokenDict.refreshToken = {\n      refreshToken: refreshToken,\n      // should not be used, this is the accessToken expire time\n      // TODO: remove \"expiresAt\" in the next major version OKTA-407224\n      expiresAt: Number(expiresIn) + now, \n      scopes: scopes,\n      tokenUrl: urls.tokenUrl!,\n      authorizeUrl: urls.authorizeUrl!,\n      issuer: urls.issuer!,\n    };\n\n    if (tokenParams.dpopPairId) {\n      tokenDict.refreshToken.dpopPairId = tokenParams.dpopPairId;\n    }\n\n    if (tokenParams.extraParams) {\n      tokenDict.refreshToken.extraParams = tokenParams.extraParams;\n    }\n  }\n\n  if (idToken) {\n    const idJwt = sdk.token.decode(idToken);\n    const idTokenObj: IDToken = {\n      idToken: idToken,\n      claims: idJwt.payload,\n      expiresAt: idJwt.payload.exp! - idJwt.payload.iat! + now, // adjusting expiresAt to be in local time\n      scopes: scopes,\n      authorizeUrl: urls.authorizeUrl!,\n      issuer: urls.issuer!,\n      clientId: clientId!\n    };\n\n    if (tokenParams.extraParams) {\n      idTokenObj.extraParams = tokenParams.extraParams;\n    }\n\n    const validationParams: TokenVerifyParams = {\n      clientId: clientId!,\n      issuer: urls.issuer!,\n      nonce: tokenParams.nonce,\n      accessToken: accessToken,\n      acrValues: tokenParams.acrValues\n    };\n\n    if (tokenParams.ignoreSignature !== undefined) {\n      validationParams.ignoreSignature = tokenParams.ignoreSignature;\n    }\n\n    await verifyToken(sdk, idTokenObj, validationParams);\n    tokenDict.idToken = idTokenObj;\n  }\n\n  // Validate received tokens against requested response types \n  if (responseType.indexOf('token') !== -1 && !tokenDict.accessToken) {\n    // eslint-disable-next-line max-len\n    throw new AuthSdkError('Unable to parse OAuth flow response: response type \"token\" was requested but \"access_token\" was not returned.');\n  }\n  if (responseType.indexOf('id_token') !== -1 && !tokenDict.idToken) {\n    // eslint-disable-next-line max-len\n    throw new AuthSdkError('Unable to parse OAuth flow response: response type \"id_token\" was requested but \"id_token\" was not returned.');\n  }\n\n  return {\n    tokens: tokenDict,\n    state: res.state!,\n    code: res.code,\n    responseType\n  };\n  \n}"],"mappings":";;;AAeA;AACA;AAGA;AAWA;AACA;AA/BA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAmBA,SAASA,gBAAgB,CAACC,GAAkB,EAAEC,WAAwB,EAAE;EACtE,IAAID,GAAG,CAAC,OAAO,CAAC,IAAIA,GAAG,CAAC,mBAAmB,CAAC,EAAE;IAC5C,MAAM,IAAIE,kBAAU,CAACF,GAAG,CAAC,OAAO,CAAC,EAAEA,GAAG,CAAC,mBAAmB,CAAC,CAAC;EAC9D;EAEA,IAAIA,GAAG,CAACG,KAAK,KAAKF,WAAW,CAACE,KAAK,EAAE;IACnC,MAAM,IAAIC,oBAAY,CAAC,wDAAwD,CAAC;EAClF;AACF;AAEO,eAAeC,mBAAmB,CACvCC,GAA2B,EAC3BC,WAAwB,EACxBP,GAAkB,EAClBQ,IAAiB,EACO;EACxB,MAAMC,IAAI,GAAGH,GAAG,CAACI,OAAO,CAACD,IAAI,KAAK,KAAK;;EAEvC;EACA;EACA,IAAIA,IAAI,KAAKT,GAAG,CAACW,IAAI,IAAIX,GAAG,CAACY,gBAAgB,CAAC,EAAE;IAC9C,OAAON,GAAG,CAACO,KAAK,CAACC,qBAAqB,CAACC,MAAM,CAACC,MAAM,CAAC,CAAC,CAAC,EAAET,WAAW,EAAE;MACpEU,iBAAiB,EAAEjB,GAAG,CAACW,IAAI;MAC3BO,eAAe,EAAElB,GAAG,CAACY;IACvB,CAAC,CAAC,EAAEJ,IAAI,CAAC;EACX;EAEAD,WAAW,GAAGA,WAAW,IAAI,IAAAY,4BAAqB,EAACb,GAAG,CAAC;EACvDE,IAAI,GAAGA,IAAI,IAAI,IAAAY,mBAAY,EAACd,GAAG,EAAEC,WAAW,CAAC;EAE7C,IAAIc,YAAY,GAAGd,WAAW,CAACc,YAAY,IAAI,EAAE;EACjD,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,YAAY,CAAC,IAAIA,YAAY,KAAK,MAAM,EAAE;IAC3DA,YAAY,GAAG,CAACA,YAAY,CAAC;EAC/B;EAEA,IAAIG,MAAM;EACV,IAAIxB,GAAG,CAACyB,KAAK,EAAE;IACbD,MAAM,GAAGxB,GAAG,CAACyB,KAAK,CAACC,KAAK,CAAC,GAAG,CAAC;EAC/B,CAAC,MAAM;IACLF,MAAM,GAAG,IAAAG,WAAK,EAACpB,WAAW,CAACiB,MAAM,CAAC;EACpC;EACA,MAAMI,QAAQ,GAAGrB,WAAW,CAACqB,QAAQ,IAAItB,GAAG,CAACI,OAAO,CAACkB,QAAQ;;EAE7D;EACA7B,gBAAgB,CAACC,GAAG,EAAEO,WAAW,CAAC;EAElC,IAAIA,WAAW,CAACsB,IAAI,EAAE;IACpB,MAAM;MAAEC;IAAkB,CAAC,GAAGxB,GAAG,CAACI,OAAO,EAAEqB,WAAW,IAAI;MAAED,iBAAiB,EAAE;IAAM,CAAC;;IAEtF;IACA;IACA,IAAI,CAACA,iBAAiB,IAAI9B,GAAG,CAACgC,UAAU,KAAK,MAAM,EAAE;MACnD,MAAM,IAAI5B,oBAAY,CAAC,wFAAwF,CAAC;IAClH;EACF;EAEA,MAAM6B,SAAS,GAAG,CAAC,CAAW;EAC9B,MAAMC,SAAS,GAAGlC,GAAG,CAACmC,UAAU;EAChC,MAAMC,SAAS,GAAGpC,GAAG,CAACgC,UAAU;EAChC,MAAMK,WAAW,GAAGrC,GAAG,CAACsC,YAAY;EACpC,MAAMC,OAAO,GAAGvC,GAAG,CAACwC,QAAQ;EAC5B,MAAMC,YAAY,GAAGzC,GAAG,CAAC0C,aAAa;EACtC,MAAMC,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACC,IAAI,CAACH,GAAG,EAAE,GAAC,IAAI,CAAC;EAEvC,IAAIN,WAAW,EAAE;IACf,MAAMU,SAAS,GAAGzC,GAAG,CAACO,KAAK,CAACmC,MAAM,CAACX,WAAW,CAAC;IAC/CJ,SAAS,CAACI,WAAW,GAAG;MACtBA,WAAW,EAAEA,WAAW;MACxBY,MAAM,EAAEF,SAAS,CAACG,OAAO;MACzBC,SAAS,EAAEC,MAAM,CAAClB,SAAS,CAAC,GAAGS,GAAG;MAClCP,SAAS,EAAEA,SAAU;MACrBZ,MAAM,EAAEA,MAAM;MACd6B,YAAY,EAAE7C,IAAI,CAAC6C,YAAa;MAChCC,WAAW,EAAE9C,IAAI,CAAC8C;IACpB,CAAC;IAED,IAAI/C,WAAW,CAACgD,UAAU,EAAE;MAC1BtB,SAAS,CAACI,WAAW,CAACkB,UAAU,GAAGhD,WAAW,CAACgD,UAAU;IAC3D;IAEA,IAAIhD,WAAW,CAACiD,WAAW,EAAE;MAC3BvB,SAAS,CAACI,WAAW,CAACmB,WAAW,GAAGjD,WAAW,CAACiD,WAAW;IAC7D;EACF;EAEA,IAAIf,YAAY,EAAE;IAChBR,SAAS,CAACQ,YAAY,GAAG;MACvBA,YAAY,EAAEA,YAAY;MAC1B;MACA;MACAU,SAAS,EAAEC,MAAM,CAAClB,SAAS,CAAC,GAAGS,GAAG;MAClCnB,MAAM,EAAEA,MAAM;MACdiC,QAAQ,EAAEjD,IAAI,CAACiD,QAAS;MACxBJ,YAAY,EAAE7C,IAAI,CAAC6C,YAAa;MAChCK,MAAM,EAAElD,IAAI,CAACkD;IACf,CAAC;IAED,IAAInD,WAAW,CAACgD,UAAU,EAAE;MAC1BtB,SAAS,CAACQ,YAAY,CAACc,UAAU,GAAGhD,WAAW,CAACgD,UAAU;IAC5D;IAEA,IAAIhD,WAAW,CAACiD,WAAW,EAAE;MAC3BvB,SAAS,CAACQ,YAAY,CAACe,WAAW,GAAGjD,WAAW,CAACiD,WAAW;IAC9D;EACF;EAEA,IAAIjB,OAAO,EAAE;IACX,MAAMoB,KAAK,GAAGrD,GAAG,CAACO,KAAK,CAACmC,MAAM,CAACT,OAAO,CAAC;IACvC,MAAMqB,UAAmB,GAAG;MAC1BrB,OAAO,EAAEA,OAAO;MAChBU,MAAM,EAAEU,KAAK,CAACT,OAAO;MACrBC,SAAS,EAAEQ,KAAK,CAACT,OAAO,CAACW,GAAG,GAAIF,KAAK,CAACT,OAAO,CAACY,GAAI,GAAGnB,GAAG;MAAE;MAC1DnB,MAAM,EAAEA,MAAM;MACd6B,YAAY,EAAE7C,IAAI,CAAC6C,YAAa;MAChCK,MAAM,EAAElD,IAAI,CAACkD,MAAO;MACpB9B,QAAQ,EAAEA;IACZ,CAAC;IAED,IAAIrB,WAAW,CAACiD,WAAW,EAAE;MAC3BI,UAAU,CAACJ,WAAW,GAAGjD,WAAW,CAACiD,WAAW;IAClD;IAEA,MAAMO,gBAAmC,GAAG;MAC1CnC,QAAQ,EAAEA,QAAS;MACnB8B,MAAM,EAAElD,IAAI,CAACkD,MAAO;MACpBM,KAAK,EAAEzD,WAAW,CAACyD,KAAK;MACxB3B,WAAW,EAAEA,WAAW;MACxB4B,SAAS,EAAE1D,WAAW,CAAC0D;IACzB,CAAC;IAED,IAAI1D,WAAW,CAAC2D,eAAe,KAAKC,SAAS,EAAE;MAC7CJ,gBAAgB,CAACG,eAAe,GAAG3D,WAAW,CAAC2D,eAAe;IAChE;IAEA,MAAM,IAAAE,wBAAW,EAAC9D,GAAG,EAAEsD,UAAU,EAAEG,gBAAgB,CAAC;IACpD9B,SAAS,CAACM,OAAO,GAAGqB,UAAU;EAChC;;EAEA;EACA,IAAIvC,YAAY,CAACgD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAACpC,SAAS,CAACI,WAAW,EAAE;IAClE;IACA,MAAM,IAAIjC,oBAAY,CAAC,+GAA+G,CAAC;EACzI;EACA,IAAIiB,YAAY,CAACgD,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAACpC,SAAS,CAACM,OAAO,EAAE;IACjE;IACA,MAAM,IAAInC,oBAAY,CAAC,8GAA8G,CAAC;EACxI;EAEA,OAAO;IACLkE,MAAM,EAAErC,SAAS;IACjB9B,KAAK,EAAEH,GAAG,CAACG,KAAM;IACjBQ,IAAI,EAAEX,GAAG,CAACW,IAAI;IACdU;EACF,CAAC;AAEH"}

package/cjs/oidc/options/OAuthOptionsConstructor.js

@@ -81,7 +81,10 @@ function createOAuthOptionsConstructor() {
       this.acrValues = options.acrValues;
       this.maxAge = options.maxAge;
       this.dpop = options.dpop === true; // dpop defaults to false
-
+      this.dpopOptions = {
+        allowBearerTokens: false,
+        ...options.dpopOptions
+      };
       this.tokenManager = options.tokenManager;
       this.postLogoutRedirectUri = options.postLogoutRedirectUri;
       this.restoreOriginalUri = options.restoreOriginalUri;

package/cjs/oidc/options/OAuthOptionsConstructor.js.map

@@ -1 +1 @@
-{"version":3,"file":"OAuthOptionsConstructor.js","names":["assertValidConfig","args","scopes","Array","isArray","AuthSdkError","issuer","isUrlRegex","RegExp","test","indexOf","createOAuthOptionsConstructor","HttpOptionsConstructor","createHttpOptionsConstructor","OAuthOptionsConstructor","constructor","options","removeTrailingSlash","tokenUrl","authorizeUrl","userinfoUrl","revokeUrl","logoutUrl","pkce","clientId","redirectUri","isBrowser","toAbsoluteUrl","window","location","origin","responseType","responseMode","state","ignoreSignature","codeChallenge","codeChallengeMethod","acrValues","maxAge","dpop","tokenManager","postLogoutRedirectUri","restoreOriginalUri","transactionManager","enableSharedStorage","clientSecret","setLocation","ignoreLifetime","maxClockSkew","DEFAULT_MAX_CLOCK_SKEW"],"sources":["../../../../lib/oidc/options/OAuthOptionsConstructor.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { DEFAULT_MAX_CLOCK_SKEW } from '../../constants';\nimport { removeTrailingSlash, toAbsoluteUrl } from '../../util/url';\nimport { isBrowser } from '../../features';\nimport { createHttpOptionsConstructor } from '../../http/options';\nimport {\n  OAuthResponseMode,\n  OAuthResponseType,\n  OktaAuthOAuthInterface,\n  OktaAuthOAuthOptions,\n  SetLocationFunction,\n  TokenManagerOptions,\n  TransactionManagerOptions\n} from '../types';\nimport { enableSharedStorage } from './node';\nimport AuthSdkError from '../../errors/AuthSdkError';\n\nfunction assertValidConfig(args) {\n  args = args || {};\n\n  var scopes = args.scopes;\n  if (scopes && !Array.isArray(scopes)) {\n    throw new AuthSdkError('scopes must be a array of strings. ' +\n      'Required usage: new OktaAuth({scopes: [\"openid\", \"email\"]})');\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n  var issuer = args.issuer!;\n  if (!issuer) {\n    throw new AuthSdkError('No issuer passed to constructor. ' + \n      'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com/oauth2/{authServerId}\"})');\n  }\n\n  var isUrlRegex = new RegExp('^http?s?://.+');\n  if (!isUrlRegex.test(issuer)) {\n    throw new AuthSdkError('Issuer must be a valid URL. ' + \n      'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com/oauth2/{authServerId}\"})');\n  }\n\n  if (issuer.indexOf('-admin.okta') !== -1) {\n    throw new AuthSdkError('Issuer URL passed to constructor contains \"-admin\" in subdomain. ' +\n      'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com})');\n  }\n}\n\nexport function createOAuthOptionsConstructor() {\n  const HttpOptionsConstructor = createHttpOptionsConstructor();\n  return class OAuthOptionsConstructor\n    extends HttpOptionsConstructor\n    implements Required<OktaAuthOAuthOptions>\n  {\n    // CustomUrls\n    issuer: string;\n    authorizeUrl: string;\n    userinfoUrl: string;\n    tokenUrl: string;\n    revokeUrl: string;\n    logoutUrl: string;\n    \n    // TokenParams\n    pkce: boolean;\n    clientId: string;\n    redirectUri: string;\n    responseType: OAuthResponseType | OAuthResponseType[];\n    responseMode: OAuthResponseMode;\n    state: string;\n    scopes: string[];\n    ignoreSignature: boolean;\n    codeChallenge: string;\n    codeChallengeMethod: string;\n    acrValues: string;\n    maxAge: string | number;\n    dpop: boolean;\n\n    // Additional options\n    tokenManager: TokenManagerOptions;\n    postLogoutRedirectUri: string;\n    restoreOriginalUri: (oktaAuth: OktaAuthOAuthInterface, originalUri?: string) => Promise<void>;\n    transactionManager: TransactionManagerOptions;\n\n    // For server-side web applications ONLY!\n    clientSecret: string;\n    setLocation: SetLocationFunction;\n\n    // Workaround for bad client time/clock\n    ignoreLifetime: boolean;\n    maxClockSkew: number;\n\n\n    // eslint-disable-next-line max-statements\n    constructor(options: any) {\n      super(options);\n      \n      assertValidConfig(options);\n      \n      this.issuer = removeTrailingSlash(options.issuer);\n      this.tokenUrl = removeTrailingSlash(options.tokenUrl);\n      this.authorizeUrl = removeTrailingSlash(options.authorizeUrl);\n      this.userinfoUrl = removeTrailingSlash(options.userinfoUrl);\n      this.revokeUrl = removeTrailingSlash(options.revokeUrl);\n      this.logoutUrl = removeTrailingSlash(options.logoutUrl);\n\n      this.pkce = options.pkce === false ? false : true; // PKCE defaults to true\n      this.clientId = options.clientId;\n      this.redirectUri = options.redirectUri;\n      if (isBrowser()) {\n        this.redirectUri = toAbsoluteUrl(options.redirectUri, window.location.origin); // allow relative URIs\n      }\n      this.responseType = options.responseType;\n      this.responseMode = options.responseMode;\n      this.state = options.state;\n      this.scopes = options.scopes;\n      // Give the developer the ability to disable token signature validation.\n      this.ignoreSignature = !!options.ignoreSignature;\n      this.codeChallenge = options.codeChallenge;\n      this.codeChallengeMethod = options.codeChallengeMethod;\n      this.acrValues = options.acrValues;\n      this.maxAge = options.maxAge;\n      this.dpop = options.dpop === true; // dpop defaults to false\n\n      this.tokenManager = options.tokenManager;\n      this.postLogoutRedirectUri = options.postLogoutRedirectUri;\n      this.restoreOriginalUri = options.restoreOriginalUri;\n      this.transactionManager = { enableSharedStorage, ...options.transactionManager };\n      \n      this.clientSecret = options.clientSecret;\n      this.setLocation = options.setLocation;\n      \n      // As some end user's devices can have their date \n      // and time incorrectly set, allow for the disabling\n      // of the jwt liftetime validation\n      this.ignoreLifetime = !!options.ignoreLifetime;\n\n      // Digital clocks will drift over time, so the server\n      // can misalign with the time reported by the browser.\n      // The maxClockSkew allows relaxing the time-based\n      // validation of tokens (in seconds, not milliseconds).\n      // It currently defaults to 300, because 5 min is the\n      // default maximum tolerance allowed by Kerberos.\n      // (https://technet.microsoft.com/en-us/library/cc976357.aspx)\n      if (!options.maxClockSkew && options.maxClockSkew !== 0) {\n        this.maxClockSkew = DEFAULT_MAX_CLOCK_SKEW;\n      } else {\n        this.maxClockSkew = options.maxClockSkew;\n      }\n\n    }\n  };\n}\n"],"mappings":";;;;AAYA;AACA;AACA;AACA;AAUA;AACA;AA1BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAkBA,SAASA,iBAAiB,CAACC,IAAI,EAAE;EAC/BA,IAAI,GAAGA,IAAI,IAAI,CAAC,CAAC;EAEjB,IAAIC,MAAM,GAAGD,IAAI,CAACC,MAAM;EACxB,IAAIA,MAAM,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;IACpC,MAAM,IAAIG,qBAAY,CAAC,qCAAqC,GAC1D,6DAA6D,CAAC;EAClE;;EAEA;EACA,IAAIC,MAAM,GAAGL,IAAI,CAACK,MAAO;EACzB,IAAI,CAACA,MAAM,EAAE;IACX,MAAM,IAAID,qBAAY,CAAC,mCAAmC,GACxD,8FAA8F,CAAC;EACnG;EAEA,IAAIE,UAAU,GAAG,IAAIC,MAAM,CAAC,eAAe,CAAC;EAC5C,IAAI,CAACD,UAAU,CAACE,IAAI,CAACH,MAAM,CAAC,EAAE;IAC5B,MAAM,IAAID,qBAAY,CAAC,8BAA8B,GACnD,8FAA8F,CAAC;EACnG;EAEA,IAAIC,MAAM,CAACI,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE;IACxC,MAAM,IAAIL,qBAAY,CAAC,mEAAmE,GACxF,uEAAuE,CAAC;EAC5E;AACF;AAEO,SAASM,6BAA6B,GAAG;EAC9C,MAAMC,sBAAsB,GAAG,IAAAC,qCAA4B,GAAE;EAC7D,OAAO,MAAMC,uBAAuB,SAC1BF,sBAAsB,CAEhC;IACE;;IAQA;;IAeA;;IAMA;;IAIA;;IAKA;IACAG,WAAW,CAACC,OAAY,EAAE;MACxB,KAAK,CAACA,OAAO,CAAC;MAEdhB,iBAAiB,CAACgB,OAAO,CAAC;MAE1B,IAAI,CAACV,MAAM,GAAG,IAAAW,wBAAmB,EAACD,OAAO,CAACV,MAAM,CAAC;MACjD,IAAI,CAACY,QAAQ,GAAG,IAAAD,wBAAmB,EAACD,OAAO,CAACE,QAAQ,CAAC;MACrD,IAAI,CAACC,YAAY,GAAG,IAAAF,wBAAmB,EAACD,OAAO,CAACG,YAAY,CAAC;MAC7D,IAAI,CAACC,WAAW,GAAG,IAAAH,wBAAmB,EAACD,OAAO,CAACI,WAAW,CAAC;MAC3D,IAAI,CAACC,SAAS,GAAG,IAAAJ,wBAAmB,EAACD,OAAO,CAACK,SAAS,CAAC;MACvD,IAAI,CAACC,SAAS,GAAG,IAAAL,wBAAmB,EAACD,OAAO,CAACM,SAAS,CAAC;MAEvD,IAAI,CAACC,IAAI,GAAGP,OAAO,CAACO,IAAI,KAAK,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC;MACnD,IAAI,CAACC,QAAQ,GAAGR,OAAO,CAACQ,QAAQ;MAChC,IAAI,CAACC,WAAW,GAAGT,OAAO,CAACS,WAAW;MACtC,IAAI,IAAAC,mBAAS,GAAE,EAAE;QACf,IAAI,CAACD,WAAW,GAAG,IAAAE,kBAAa,EAACX,OAAO,CAACS,WAAW,EAAEG,MAAM,CAACC,QAAQ,CAACC,MAAM,CAAC,CAAC,CAAC;MACjF;;MACA,IAAI,CAACC,YAAY,GAAGf,OAAO,CAACe,YAAY;MACxC,IAAI,CAACC,YAAY,GAAGhB,OAAO,CAACgB,YAAY;MACxC,IAAI,CAACC,KAAK,GAAGjB,OAAO,CAACiB,KAAK;MAC1B,IAAI,CAAC/B,MAAM,GAAGc,OAAO,CAACd,MAAM;MAC5B;MACA,IAAI,CAACgC,eAAe,GAAG,CAAC,CAAClB,OAAO,CAACkB,eAAe;MAChD,IAAI,CAACC,aAAa,GAAGnB,OAAO,CAACmB,aAAa;MAC1C,IAAI,CAACC,mBAAmB,GAAGpB,OAAO,CAACoB,mBAAmB;MACtD,IAAI,CAACC,SAAS,GAAGrB,OAAO,CAACqB,SAAS;MAClC,IAAI,CAACC,MAAM,GAAGtB,OAAO,CAACsB,MAAM;MAC5B,IAAI,CAACC,IAAI,GAAGvB,OAAO,CAACuB,IAAI,KAAK,IAAI,CAAC,CAAC;;MAEnC,IAAI,CAACC,YAAY,GAAGxB,OAAO,CAACwB,YAAY;MACxC,IAAI,CAACC,qBAAqB,GAAGzB,OAAO,CAACyB,qBAAqB;MAC1D,IAAI,CAACC,kBAAkB,GAAG1B,OAAO,CAAC0B,kBAAkB;MACpD,IAAI,CAACC,kBAAkB,GAAG;QAAEC,mBAAmB,EAAnBA,yBAAmB;QAAE,GAAG5B,OAAO,CAAC2B;MAAmB,CAAC;MAEhF,IAAI,CAACE,YAAY,GAAG7B,OAAO,CAAC6B,YAAY;MACxC,IAAI,CAACC,WAAW,GAAG9B,OAAO,CAAC8B,WAAW;;MAEtC;MACA;MACA;MACA,IAAI,CAACC,cAAc,GAAG,CAAC,CAAC/B,OAAO,CAAC+B,cAAc;;MAE9C;MACA;MACA;MACA;MACA;MACA;MACA;MACA,IAAI,CAAC/B,OAAO,CAACgC,YAAY,IAAIhC,OAAO,CAACgC,YAAY,KAAK,CAAC,EAAE;QACvD,IAAI,CAACA,YAAY,GAAGC,iCAAsB;MAC5C,CAAC,MAAM;QACL,IAAI,CAACD,YAAY,GAAGhC,OAAO,CAACgC,YAAY;MAC1C;IAEF;EACF,CAAC;AACH"}
+{"version":3,"file":"OAuthOptionsConstructor.js","names":["assertValidConfig","args","scopes","Array","isArray","AuthSdkError","issuer","isUrlRegex","RegExp","test","indexOf","createOAuthOptionsConstructor","HttpOptionsConstructor","createHttpOptionsConstructor","OAuthOptionsConstructor","constructor","options","removeTrailingSlash","tokenUrl","authorizeUrl","userinfoUrl","revokeUrl","logoutUrl","pkce","clientId","redirectUri","isBrowser","toAbsoluteUrl","window","location","origin","responseType","responseMode","state","ignoreSignature","codeChallenge","codeChallengeMethod","acrValues","maxAge","dpop","dpopOptions","allowBearerTokens","tokenManager","postLogoutRedirectUri","restoreOriginalUri","transactionManager","enableSharedStorage","clientSecret","setLocation","ignoreLifetime","maxClockSkew","DEFAULT_MAX_CLOCK_SKEW"],"sources":["../../../../lib/oidc/options/OAuthOptionsConstructor.ts"],"sourcesContent":["/*!\n * Copyright (c) 2015-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * \n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { DEFAULT_MAX_CLOCK_SKEW } from '../../constants';\nimport { removeTrailingSlash, toAbsoluteUrl } from '../../util/url';\nimport { isBrowser } from '../../features';\nimport { createHttpOptionsConstructor } from '../../http/options';\nimport {\n  OAuthResponseMode,\n  OAuthResponseType,\n  OktaAuthOAuthInterface,\n  OktaAuthOAuthOptions,\n  SetLocationFunction,\n  TokenManagerOptions,\n  TransactionManagerOptions,\n  DPoPOptions\n} from '../types';\nimport { enableSharedStorage } from './node';\nimport AuthSdkError from '../../errors/AuthSdkError';\n\nfunction assertValidConfig(args) {\n  args = args || {};\n\n  var scopes = args.scopes;\n  if (scopes && !Array.isArray(scopes)) {\n    throw new AuthSdkError('scopes must be a array of strings. ' +\n      'Required usage: new OktaAuth({scopes: [\"openid\", \"email\"]})');\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n  var issuer = args.issuer!;\n  if (!issuer) {\n    throw new AuthSdkError('No issuer passed to constructor. ' + \n      'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com/oauth2/{authServerId}\"})');\n  }\n\n  var isUrlRegex = new RegExp('^http?s?://.+');\n  if (!isUrlRegex.test(issuer)) {\n    throw new AuthSdkError('Issuer must be a valid URL. ' + \n      'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com/oauth2/{authServerId}\"})');\n  }\n\n  if (issuer.indexOf('-admin.okta') !== -1) {\n    throw new AuthSdkError('Issuer URL passed to constructor contains \"-admin\" in subdomain. ' +\n      'Required usage: new OktaAuth({issuer: \"https://{yourOktaDomain}.com})');\n  }\n}\n\nexport function createOAuthOptionsConstructor() {\n  const HttpOptionsConstructor = createHttpOptionsConstructor();\n  return class OAuthOptionsConstructor\n    extends HttpOptionsConstructor\n    implements Required<OktaAuthOAuthOptions>\n  {\n    // CustomUrls\n    issuer: string;\n    authorizeUrl: string;\n    userinfoUrl: string;\n    tokenUrl: string;\n    revokeUrl: string;\n    logoutUrl: string;\n    \n    // TokenParams\n    pkce: boolean;\n    clientId: string;\n    redirectUri: string;\n    responseType: OAuthResponseType | OAuthResponseType[];\n    responseMode: OAuthResponseMode;\n    state: string;\n    scopes: string[];\n    ignoreSignature: boolean;\n    codeChallenge: string;\n    codeChallengeMethod: string;\n    acrValues: string;\n    maxAge: string | number;\n    dpop: boolean;\n    dpopOptions: DPoPOptions;\n\n    // Additional options\n    tokenManager: TokenManagerOptions;\n    postLogoutRedirectUri: string;\n    restoreOriginalUri: (oktaAuth: OktaAuthOAuthInterface, originalUri?: string) => Promise<void>;\n    transactionManager: TransactionManagerOptions;\n\n    // For server-side web applications ONLY!\n    clientSecret: string;\n    setLocation: SetLocationFunction;\n\n    // Workaround for bad client time/clock\n    ignoreLifetime: boolean;\n    maxClockSkew: number;\n\n\n    // eslint-disable-next-line max-statements\n    constructor(options: any) {\n      super(options);\n      \n      assertValidConfig(options);\n      \n      this.issuer = removeTrailingSlash(options.issuer);\n      this.tokenUrl = removeTrailingSlash(options.tokenUrl);\n      this.authorizeUrl = removeTrailingSlash(options.authorizeUrl);\n      this.userinfoUrl = removeTrailingSlash(options.userinfoUrl);\n      this.revokeUrl = removeTrailingSlash(options.revokeUrl);\n      this.logoutUrl = removeTrailingSlash(options.logoutUrl);\n\n      this.pkce = options.pkce === false ? false : true; // PKCE defaults to true\n      this.clientId = options.clientId;\n      this.redirectUri = options.redirectUri;\n      if (isBrowser()) {\n        this.redirectUri = toAbsoluteUrl(options.redirectUri, window.location.origin); // allow relative URIs\n      }\n      this.responseType = options.responseType;\n      this.responseMode = options.responseMode;\n      this.state = options.state;\n      this.scopes = options.scopes;\n      // Give the developer the ability to disable token signature validation.\n      this.ignoreSignature = !!options.ignoreSignature;\n      this.codeChallenge = options.codeChallenge;\n      this.codeChallengeMethod = options.codeChallengeMethod;\n      this.acrValues = options.acrValues;\n      this.maxAge = options.maxAge;\n      this.dpop = options.dpop === true; // dpop defaults to false\n      this.dpopOptions = {\n        allowBearerTokens: false,\n        ...options.dpopOptions,\n      };\n\n      this.tokenManager = options.tokenManager;\n      this.postLogoutRedirectUri = options.postLogoutRedirectUri;\n      this.restoreOriginalUri = options.restoreOriginalUri;\n      this.transactionManager = { enableSharedStorage, ...options.transactionManager };\n      \n      this.clientSecret = options.clientSecret;\n      this.setLocation = options.setLocation;\n      \n      // As some end user's devices can have their date \n      // and time incorrectly set, allow for the disabling\n      // of the jwt liftetime validation\n      this.ignoreLifetime = !!options.ignoreLifetime;\n\n      // Digital clocks will drift over time, so the server\n      // can misalign with the time reported by the browser.\n      // The maxClockSkew allows relaxing the time-based\n      // validation of tokens (in seconds, not milliseconds).\n      // It currently defaults to 300, because 5 min is the\n      // default maximum tolerance allowed by Kerberos.\n      // (https://technet.microsoft.com/en-us/library/cc976357.aspx)\n      if (!options.maxClockSkew && options.maxClockSkew !== 0) {\n        this.maxClockSkew = DEFAULT_MAX_CLOCK_SKEW;\n      } else {\n        this.maxClockSkew = options.maxClockSkew;\n      }\n\n    }\n  };\n}\n"],"mappings":";;;;AAYA;AACA;AACA;AACA;AAWA;AACA;AA3BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAmBA,SAASA,iBAAiB,CAACC,IAAI,EAAE;EAC/BA,IAAI,GAAGA,IAAI,IAAI,CAAC,CAAC;EAEjB,IAAIC,MAAM,GAAGD,IAAI,CAACC,MAAM;EACxB,IAAIA,MAAM,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,MAAM,CAAC,EAAE;IACpC,MAAM,IAAIG,qBAAY,CAAC,qCAAqC,GAC1D,6DAA6D,CAAC;EAClE;;EAEA;EACA,IAAIC,MAAM,GAAGL,IAAI,CAACK,MAAO;EACzB,IAAI,CAACA,MAAM,EAAE;IACX,MAAM,IAAID,qBAAY,CAAC,mCAAmC,GACxD,8FAA8F,CAAC;EACnG;EAEA,IAAIE,UAAU,GAAG,IAAIC,MAAM,CAAC,eAAe,CAAC;EAC5C,IAAI,CAACD,UAAU,CAACE,IAAI,CAACH,MAAM,CAAC,EAAE;IAC5B,MAAM,IAAID,qBAAY,CAAC,8BAA8B,GACnD,8FAA8F,CAAC;EACnG;EAEA,IAAIC,MAAM,CAACI,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE;IACxC,MAAM,IAAIL,qBAAY,CAAC,mEAAmE,GACxF,uEAAuE,CAAC;EAC5E;AACF;AAEO,SAASM,6BAA6B,GAAG;EAC9C,MAAMC,sBAAsB,GAAG,IAAAC,qCAA4B,GAAE;EAC7D,OAAO,MAAMC,uBAAuB,SAC1BF,sBAAsB,CAEhC;IACE;;IAQA;;IAgBA;;IAMA;;IAIA;;IAKA;IACAG,WAAW,CAACC,OAAY,EAAE;MACxB,KAAK,CAACA,OAAO,CAAC;MAEdhB,iBAAiB,CAACgB,OAAO,CAAC;MAE1B,IAAI,CAACV,MAAM,GAAG,IAAAW,wBAAmB,EAACD,OAAO,CAACV,MAAM,CAAC;MACjD,IAAI,CAACY,QAAQ,GAAG,IAAAD,wBAAmB,EAACD,OAAO,CAACE,QAAQ,CAAC;MACrD,IAAI,CAACC,YAAY,GAAG,IAAAF,wBAAmB,EAACD,OAAO,CAACG,YAAY,CAAC;MAC7D,IAAI,CAACC,WAAW,GAAG,IAAAH,wBAAmB,EAACD,OAAO,CAACI,WAAW,CAAC;MAC3D,IAAI,CAACC,SAAS,GAAG,IAAAJ,wBAAmB,EAACD,OAAO,CAACK,SAAS,CAAC;MACvD,IAAI,CAACC,SAAS,GAAG,IAAAL,wBAAmB,EAACD,OAAO,CAACM,SAAS,CAAC;MAEvD,IAAI,CAACC,IAAI,GAAGP,OAAO,CAACO,IAAI,KAAK,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC;MACnD,IAAI,CAACC,QAAQ,GAAGR,OAAO,CAACQ,QAAQ;MAChC,IAAI,CAACC,WAAW,GAAGT,OAAO,CAACS,WAAW;MACtC,IAAI,IAAAC,mBAAS,GAAE,EAAE;QACf,IAAI,CAACD,WAAW,GAAG,IAAAE,kBAAa,EAACX,OAAO,CAACS,WAAW,EAAEG,MAAM,CAACC,QAAQ,CAACC,MAAM,CAAC,CAAC,CAAC;MACjF;;MACA,IAAI,CAACC,YAAY,GAAGf,OAAO,CAACe,YAAY;MACxC,IAAI,CAACC,YAAY,GAAGhB,OAAO,CAACgB,YAAY;MACxC,IAAI,CAACC,KAAK,GAAGjB,OAAO,CAACiB,KAAK;MAC1B,IAAI,CAAC/B,MAAM,GAAGc,OAAO,CAACd,MAAM;MAC5B;MACA,IAAI,CAACgC,eAAe,GAAG,CAAC,CAAClB,OAAO,CAACkB,eAAe;MAChD,IAAI,CAACC,aAAa,GAAGnB,OAAO,CAACmB,aAAa;MAC1C,IAAI,CAACC,mBAAmB,GAAGpB,OAAO,CAACoB,mBAAmB;MACtD,IAAI,CAACC,SAAS,GAAGrB,OAAO,CAACqB,SAAS;MAClC,IAAI,CAACC,MAAM,GAAGtB,OAAO,CAACsB,MAAM;MAC5B,IAAI,CAACC,IAAI,GAAGvB,OAAO,CAACuB,IAAI,KAAK,IAAI,CAAC,CAAC;MACnC,IAAI,CAACC,WAAW,GAAG;QACjBC,iBAAiB,EAAE,KAAK;QACxB,GAAGzB,OAAO,CAACwB;MACb,CAAC;MAED,IAAI,CAACE,YAAY,GAAG1B,OAAO,CAAC0B,YAAY;MACxC,IAAI,CAACC,qBAAqB,GAAG3B,OAAO,CAAC2B,qBAAqB;MAC1D,IAAI,CAACC,kBAAkB,GAAG5B,OAAO,CAAC4B,kBAAkB;MACpD,IAAI,CAACC,kBAAkB,GAAG;QAAEC,mBAAmB,EAAnBA,yBAAmB;QAAE,GAAG9B,OAAO,CAAC6B;MAAmB,CAAC;MAEhF,IAAI,CAACE,YAAY,GAAG/B,OAAO,CAAC+B,YAAY;MACxC,IAAI,CAACC,WAAW,GAAGhC,OAAO,CAACgC,WAAW;;MAEtC;MACA;MACA;MACA,IAAI,CAACC,cAAc,GAAG,CAAC,CAACjC,OAAO,CAACiC,cAAc;;MAE9C;MACA;MACA;MACA;MACA;MACA;MACA;MACA,IAAI,CAACjC,OAAO,CAACkC,YAAY,IAAIlC,OAAO,CAACkC,YAAY,KAAK,CAAC,EAAE;QACvD,IAAI,CAACA,YAAY,GAAGC,iCAAsB;MAC5C,CAAC,MAAM;QACL,IAAI,CAACD,YAAY,GAAGlC,OAAO,CAACkC,YAAY;MAC1C;IAEF;EACF,CAAC;AACH"}

package/cjs/oidc/types/options.js.map

@@ -1 +1 @@
-{"version":3,"file":"options.js","names":[],"sources":["../../../../lib/oidc/types/options.ts"],"sourcesContent":["/*!\n * Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { OktaAuthOptionsConstructor } from '../../base/types';\nimport { OktaAuthHttpOptions } from '../../http/types';\nimport { SimpleStorage } from '../../storage/types';\nimport { OktaAuthOAuthInterface, SetLocationFunction } from './api';\nimport { OAuthResponseMode, OAuthResponseType } from './proto';\nimport { Tokens } from './Token';\nimport { TransactionManagerOptions } from './Transaction';\n\nexport interface CustomUrls {\n  issuer?: string;\n  authorizeUrl?: string;\n  userinfoUrl?: string;\n  tokenUrl?: string;\n  revokeUrl?: string;\n  logoutUrl?: string;\n}\n\nexport interface TokenParams extends CustomUrls {\n  pkce?: boolean;\n  clientId?: string;\n  redirectUri?: string;\n  responseType?: OAuthResponseType | OAuthResponseType[] | 'none';\n  responseMode?: OAuthResponseMode;\n  state?: string;\n  nonce?: string;\n  scopes?: string[];\n  enrollAmrValues?: string | string[];\n  display?: string;\n  ignoreSignature?: boolean;\n  codeVerifier?: string;\n  authorizationCode?: string;\n  codeChallenge?: string;\n  codeChallengeMethod?: string;\n  interactionCode?: string;\n  idp?: string;\n  idpScope?: string | string[];\n  loginHint?: string;\n  maxAge?: string | number;\n  acrValues?: string;\n  prompt?: string;\n  sessionToken?: string;\n  timeout?: number;\n  extraParams?: { [propName: string]: string }; // custom authorize query params\n  // TODO: remove in the next major version\n  popupTitle?: string;\n  dpop?: boolean;\n  dpopPairId?: string;\n}\n\nexport interface TokenManagerOptions {\n  autoRenew?: boolean;\n  autoRemove?: boolean;\n  clearPendingRemoveTokens?: boolean;\n  secure?: boolean;\n  storage?: string | SimpleStorage;\n  storageKey?: string;\n  expireEarlySeconds?: number;\n  syncStorage?: boolean;\n}\n\nexport interface EnrollAuthenticatorOptions extends TokenParams {\n  enrollAmrValues: string | string[];\n  acrValues: string;\n}\n\nexport interface SigninWithRedirectOptions extends TokenParams {\n  originalUri?: string;\n}\n\nexport interface RenewTokensParams extends TokenParams {\n  tokens?: Tokens\n}\n\nexport interface OktaAuthOAuthOptions extends\n  OktaAuthHttpOptions,\n  CustomUrls,\n  Pick<TokenParams,\n    'issuer' |\n    'clientId' |\n    'redirectUri' |\n    'responseType' |\n    'responseMode' |\n    'scopes' |\n    'state' |\n    'pkce' |\n    'ignoreSignature' |\n    'codeChallenge' |\n    'codeChallengeMethod' |\n    'maxAge' |\n    'acrValues'\n  >\n{\n  ignoreLifetime?: boolean;\n  tokenManager?: TokenManagerOptions;\n  postLogoutRedirectUri?: string;\n  maxClockSkew?: number;\n  restoreOriginalUri?: (oktaAuth: OktaAuthOAuthInterface, originalUri?: string) => Promise<void>;\n  dpop?: boolean;\n\n  transactionManager?: TransactionManagerOptions;\n\n  // For server-side web applications ONLY!\n  clientSecret?: string;\n  setLocation?: SetLocationFunction;\n}\n\nexport type OktaAuthOauthOptionsConstructor = OktaAuthOptionsConstructor<OktaAuthOAuthOptions>;\n"],"mappings":""}
+{"version":3,"file":"options.js","names":[],"sources":["../../../../lib/oidc/types/options.ts"],"sourcesContent":["/*!\n * Copyright (c) 2021-present, Okta, Inc. and/or its affiliates. All rights reserved.\n * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the \"License.\")\n *\n * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0.\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT\n * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n *\n * See the License for the specific language governing permissions and limitations under the License.\n */\n\nimport { OktaAuthOptionsConstructor } from '../../base/types';\nimport { OktaAuthHttpOptions } from '../../http/types';\nimport { SimpleStorage } from '../../storage/types';\nimport { OktaAuthOAuthInterface, SetLocationFunction } from './api';\nimport { OAuthResponseMode, OAuthResponseType } from './proto';\nimport { Tokens } from './Token';\nimport { TransactionManagerOptions } from './Transaction';\n\nexport interface CustomUrls {\n  issuer?: string;\n  authorizeUrl?: string;\n  userinfoUrl?: string;\n  tokenUrl?: string;\n  revokeUrl?: string;\n  logoutUrl?: string;\n}\n\nexport interface TokenParams extends CustomUrls {\n  pkce?: boolean;\n  clientId?: string;\n  redirectUri?: string;\n  responseType?: OAuthResponseType | OAuthResponseType[] | 'none';\n  responseMode?: OAuthResponseMode;\n  state?: string;\n  nonce?: string;\n  scopes?: string[];\n  enrollAmrValues?: string | string[];\n  display?: string;\n  ignoreSignature?: boolean;\n  codeVerifier?: string;\n  authorizationCode?: string;\n  codeChallenge?: string;\n  codeChallengeMethod?: string;\n  interactionCode?: string;\n  idp?: string;\n  idpScope?: string | string[];\n  loginHint?: string;\n  maxAge?: string | number;\n  acrValues?: string;\n  prompt?: string;\n  sessionToken?: string;\n  timeout?: number;\n  extraParams?: { [propName: string]: string }; // custom authorize query params\n  // TODO: remove in the next major version\n  popupTitle?: string;\n  dpop?: boolean;\n  dpopPairId?: string;\n}\n\nexport interface TokenManagerOptions {\n  autoRenew?: boolean;\n  autoRemove?: boolean;\n  clearPendingRemoveTokens?: boolean;\n  secure?: boolean;\n  storage?: string | SimpleStorage;\n  storageKey?: string;\n  expireEarlySeconds?: number;\n  syncStorage?: boolean;\n}\n\nexport interface EnrollAuthenticatorOptions extends TokenParams {\n  enrollAmrValues: string | string[];\n  acrValues: string;\n}\n\nexport interface SigninWithRedirectOptions extends TokenParams {\n  originalUri?: string;\n}\n\nexport interface RenewTokensParams extends TokenParams {\n  tokens?: Tokens\n}\n\nexport interface DPoPOptions {\n  allowBearerTokens: boolean;\n}\n\nexport interface OktaAuthOAuthOptions extends\n  OktaAuthHttpOptions,\n  CustomUrls,\n  Pick<TokenParams,\n    'issuer' |\n    'clientId' |\n    'redirectUri' |\n    'responseType' |\n    'responseMode' |\n    'scopes' |\n    'state' |\n    'pkce' |\n    'ignoreSignature' |\n    'codeChallenge' |\n    'codeChallengeMethod' |\n    'maxAge' |\n    'acrValues'\n  >\n{\n  ignoreLifetime?: boolean;\n  tokenManager?: TokenManagerOptions;\n  postLogoutRedirectUri?: string;\n  maxClockSkew?: number;\n  restoreOriginalUri?: (oktaAuth: OktaAuthOAuthInterface, originalUri?: string) => Promise<void>;\n  dpop?: boolean;\n  dpopOptions?: DPoPOptions;\n\n  transactionManager?: TransactionManagerOptions;\n\n  // For server-side web applications ONLY!\n  clientSecret?: string;\n  setLocation?: SetLocationFunction;\n}\n\nexport type OktaAuthOauthOptionsConstructor = OktaAuthOptionsConstructor<OktaAuthOAuthOptions>;\n"],"mappings":""}

package/dist/okta-auth-js.authn.min.analyzer.html

@@ -3,7 +3,7 @@
   <head>
     <meta charset="UTF-8"/>
     <meta name="viewport" content="width=device-width, initial-scale=1"/>
-    <title>@okta/okta-auth-js [19 Mar 2025 at 20:42]</title>
+    <title>@okta/okta-auth-js [7 Apr 2025 at 17:19]</title>
     <link rel="shortcut icon" href="data:image/png;base64,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" type="image/x-icon" />
 
     <script>
@@ -31,7 +31,7 @@
   <body>
     <div id="app"></div>
     <script>
-      window.chartData = [{"label":"okta-auth-js.authn.min.js","isAsset":true,"statSize":521171,"parsedSize":239826,"gzipSize":54653,"groups":[{"label":"lib","path":"./lib","statSize":408384,"groups":[{"label":"authn","path":"./lib/authn","statSize":21012,"groups":[{"id":97,"label":"AuthnTransactionImpl.ts","path":"./lib/authn/AuthnTransactionImpl.ts","statSize":2549,"parsedSize":1410,"gzipSize":492},{"id":9859,"label":"api.ts","path":"./lib/authn/api.ts","statSize":2330,"parsedSize":1143,"gzipSize":457},{"id":8248,"label":"factory.ts","path":"./lib/authn/factory.ts","statSize":843,"parsedSize":453,"gzipSize":228},{"id":3398,"label":"index.ts","path":"./lib/authn/index.ts","statSize":1005,"parsedSize":569,"gzipSize":223},{"id":3164,"label":"mixin.ts","path":"./lib/authn/mixin.ts","statSize":5890,"parsedSize":2327,"gzipSize":910},{"id":2576,"label":"types.ts","path":"./lib/authn/types.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"label":"util","path":"./lib/authn/util","statSize":8382,"groups":[{"id":6693,"label":"flattenEmbedded.ts","path":"./lib/authn/util/flattenEmbedded.ts","statSize":942,"parsedSize":472,"gzipSize":312},{"id":8657,"label":"link2fn.ts","path":"./lib/authn/util/link2fn.ts","statSize":3027,"parsedSize":1386,"gzipSize":689},{"id":9265,"label":"links2fns.ts","path":"./lib/authn/util/links2fns.ts","statSize":760,"parsedSize":337,"gzipSize":246},{"id":3395,"label":"poll.ts","path":"./lib/authn/util/poll.ts","statSize":3282,"parsedSize":1353,"gzipSize":692},{"id":1349,"label":"stateToken.ts","path":"./lib/authn/util/stateToken.ts","statSize":371,"parsedSize":196,"gzipSize":139}],"parsedSize":3744,"gzipSize":1504}],"parsedSize":9658,"gzipSize":3019},{"label":"base","path":"./lib/base","statSize":4550,"groups":[{"id":9893,"label":"factory.ts","path":"./lib/base/factory.ts","statSize":2781,"parsedSize":1206,"gzipSize":598},{"id":3306,"label":"index.ts","path":"./lib/base/index.ts","statSize":1015,"parsedSize":569,"gzipSize":221},{"id":5093,"label":"options.ts","path":"./lib/base/options.ts","statSize":741,"parsedSize":251,"gzipSize":187},{"id":6429,"label":"types.ts","path":"./lib/base/types.ts","statSize":13,"parsedSize":12,"gzipSize":32}],"parsedSize":2038,"gzipSize":795},{"label":"browser","path":"./lib/browser","statSize":8821,"groups":[{"id":5407,"label":"browserStorage.ts","path":"./lib/browser/browserStorage.ts","statSize":6256,"parsedSize":3041,"gzipSize":1133},{"id":8719,"label":"fingerprint.ts","path":"./lib/browser/fingerprint.ts","statSize":2565,"parsedSize":1236,"gzipSize":660}],"parsedSize":4277,"gzipSize":1658},{"id":6244,"label":"clock.ts","path":"./lib/clock.ts","statSize":1050,"parsedSize":408,"gzipSize":254},{"id":1971,"label":"constants.ts","path":"./lib/constants.ts","statSize":2704,"parsedSize":1318,"gzipSize":474},{"label":"core","path":"./lib/core","statSize":39689,"groups":[{"id":1018,"label":"AuthStateManager.ts","path":"./lib/core/AuthStateManager.ts","statSize":9938,"parsedSize":4168,"gzipSize":1541},{"label":"ServiceManager","path":"./lib/core/ServiceManager","statSize":13371,"groups":[{"id":2204,"label":"browser.ts","path":"./lib/core/ServiceManager/browser.ts","statSize":13035,"parsedSize":5916,"gzipSize":2035},{"id":6599,"label":"index.ts","path":"./lib/core/ServiceManager/index.ts","statSize":336,"parsedSize":209,"gzipSize":179}],"parsedSize":6125,"gzipSize":2107},{"id":1578,"label":"factory.ts","path":"./lib/core/factory.ts","statSize":808,"parsedSize":283,"gzipSize":204},{"id":3961,"label":"index.ts","path":"./lib/core/index.ts","statSize":2433,"parsedSize":1289,"gzipSize":284},{"id":8386,"label":"mixin.ts","path":"./lib/core/mixin.ts","statSize":9288,"parsedSize":3582,"gzipSize":1256},{"id":9133,"label":"options.ts","path":"./lib/core/options.ts","statSize":2599,"parsedSize":982,"gzipSize":469},{"id":2647,"label":"storage.ts","path":"./lib/core/storage.ts","statSize":210,"parsedSize":122,"gzipSize":117},{"label":"types","path":"./lib/core/types","statSize":1042,"groups":[{"id":2293,"label":"AuthState.ts","path":"./lib/core/types/AuthState.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":5675,"label":"Service.ts","path":"./lib/core/types/Service.ts","statSize":1,"parsedSize":12,"gzipSize":32},{"id":6655,"label":"api.ts","path":"./lib/core/types/api.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":8553,"label":"index.ts","path":"./lib/core/types/index.ts","statSize":1015,"parsedSize":569,"gzipSize":223}],"parsedSize":605,"gzipSize":227}],"parsedSize":17156,"gzipSize":4470},{"label":"crypto","path":"./lib/crypto","statSize":5447,"groups":[{"id":7987,"label":"base64.ts","path":"./lib/crypto/base64.ts","statSize":1756,"parsedSize":945,"gzipSize":458},{"id":7594,"label":"browser.ts","path":"./lib/crypto/browser.ts","statSize":285,"parsedSize":189,"gzipSize":141},{"id":9718,"label":"index.ts","path":"./lib/crypto/index.ts","statSize":1711,"parsedSize":926,"gzipSize":251},{"id":5698,"label":"oidcHash.ts","path":"./lib/crypto/oidcHash.ts","statSize":519,"parsedSize":283,"gzipSize":230},{"id":6332,"label":"types.ts","path":"./lib/crypto/types.ts","statSize":1,"parsedSize":12,"gzipSize":32},{"id":3154,"label":"verifyToken.ts","path":"./lib/crypto/verifyToken.ts","statSize":839,"parsedSize":410,"gzipSize":296},{"id":1,"label":"webcrypto.ts","path":"./lib/crypto/webcrypto.ts","statSize":336,"parsedSize":209,"gzipSize":179}],"parsedSize":2974,"gzipSize":994},{"label":"errors","path":"./lib/errors","statSize":20151,"groups":[{"id":3983,"label":"AuthApiError.ts","path":"./lib/errors/AuthApiError.ts","statSize":3201,"parsedSize":1333,"gzipSize":541},{"id":6573,"label":"AuthPollStopError.ts","path":"./lib/errors/AuthPollStopError.ts","statSize":1983,"parsedSize":778,"gzipSize":411},{"id":9123,"label":"AuthSdkError.ts","path":"./lib/errors/AuthSdkError.ts","statSize":2979,"parsedSize":1224,"gzipSize":521},{"id":401,"label":"CustomError.ts","path":"./lib/errors/CustomError.ts","statSize":2214,"parsedSize":876,"gzipSize":443},{"id":2886,"label":"OAuthError.ts","path":"./lib/errors/OAuthError.ts","statSize":2868,"parsedSize":1139,"gzipSize":498},{"id":3114,"label":"WWWAuthError.ts","path":"./lib/errors/WWWAuthError.ts","statSize":4803,"parsedSize":2126,"gzipSize":899},{"id":5728,"label":"index.ts","path":"./lib/errors/index.ts","statSize":2102,"parsedSize":1096,"gzipSize":386},{"id":1243,"label":"types.ts","path":"./lib/errors/types.ts","statSize":1,"parsedSize":12,"gzipSize":32}],"parsedSize":8584,"gzipSize":1663},{"label":"exports","path":"./lib/exports","statSize":8211,"groups":[{"id":5140,"label":"authn.ts","path":"./lib/exports/authn.ts","statSize":3070,"parsedSize":1382,"gzipSize":625},{"label":"cdn","path":"./lib/exports/cdn","statSize":168,"groups":[{"id":593,"label":"authn.ts","path":"./lib/exports/cdn/authn.ts","statSize":168,"parsedSize":101,"gzipSize":105}],"parsedSize":101,"gzipSize":105},{"id":6736,"label":"common.ts","path":"./lib/exports/common.ts","statSize":4973,"parsedSize":2670,"gzipSize":612}],"parsedSize":4153,"gzipSize":1040},{"id":415,"label":"features.ts","path":"./lib/features.ts","statSize":2331,"parsedSize":1196,"gzipSize":519},{"label":"fetch","path":"./lib/fetch","statSize":4580,"groups":[{"id":4447,"label":"fetchRequest.ts","path":"./lib/fetch/fetchRequest.ts","statSize":4580,"parsedSize":2383,"gzipSize":1232}],"parsedSize":2383,"gzipSize":1232},{"label":"http","path":"./lib/http","statSize":21695,"groups":[{"id":287,"label":"OktaUserAgent.ts","path":"./lib/http/OktaUserAgent.ts","statSize":1534,"parsedSize":746,"gzipSize":387},{"id":2281,"label":"headers.ts","path":"./lib/http/headers.ts","statSize":248,"parsedSize":126,"gzipSize":102},{"id":4777,"label":"index.ts","path":"./lib/http/index.ts","statSize":2046,"parsedSize":1108,"gzipSize":266},{"id":3334,"label":"mixin.ts","path":"./lib/http/mixin.ts","statSize":3400,"parsedSize":1435,"gzipSize":712},{"id":4090,"label":"options.ts","path":"./lib/http/options.ts","statSize":3328,"parsedSize":1359,"gzipSize":555},{"id":5385,"label":"request.ts","path":"./lib/http/request.ts","statSize":11126,"parsedSize":5315,"gzipSize":2360},{"id":8958,"label":"types.ts","path":"./lib/http/types.ts","statSize":13,"parsedSize":12,"gzipSize":32}],"parsedSize":10101,"gzipSize":3453},{"label":"oidc","path":"./lib/oidc","statSize":209387,"groups":[{"id":3426,"label":"TokenManager.ts","path":"./lib/oidc/TokenManager.ts","statSize":18238,"parsedSize":8897,"gzipSize":2502},{"id":130,"label":"TransactionManager.ts","path":"./lib/oidc/TransactionManager.ts","statSize":3757,"parsedSize":1865,"gzipSize":650},{"id":1237,"label":"decodeToken.ts","path":"./lib/oidc/decodeToken.ts","statSize":495,"parsedSize":285,"gzipSize":227},{"id":7659,"label":"dpop.ts","path":"./lib/oidc/dpop.ts","statSize":15396,"parsedSize":6399,"gzipSize":1881},{"label":"endpoints","path":"./lib/oidc/endpoints","statSize":13088,"groups":[{"id":2206,"label":"authorize.ts","path":"./lib/oidc/endpoints/authorize.ts","statSize":3290,"parsedSize":1887,"gzipSize":873},{"id":2642,"label":"index.ts","path":"./lib/oidc/endpoints/index.ts","statSize":1036,"parsedSize":567,"gzipSize":220},{"id":9231,"label":"token.ts","path":"./lib/oidc/endpoints/token.ts","statSize":7327,"parsedSize":3313,"gzipSize":1352},{"id":52,"label":"well-known.ts","path":"./lib/oidc/endpoints/well-known.ts","statSize":1435,"parsedSize":662,"gzipSize":407}],"parsedSize":6429,"gzipSize":2351},{"id":9284,"label":"enrollAuthenticator.ts","path":"./lib/oidc/enrollAuthenticator.ts","statSize":673,"parsedSize":367,"gzipSize":241},{"id":8707,"label":"exchangeCodeForTokens.ts","path":"./lib/oidc/exchangeCodeForTokens.ts","statSize":4616,"parsedSize":1551,"gzipSize":835},{"label":"factory","path":"./lib/oidc/factory","statSize":4409,"groups":[{"id":3859,"label":"OktaAuthOAuth.ts","path":"./lib/oidc/factory/OktaAuthOAuth.ts","statSize":741,"parsedSize":253,"gzipSize":189},{"id":7203,"label":"api.ts","path":"./lib/oidc/factory/api.ts","statSize":2970,"parsedSize":1422,"gzipSize":621},{"id":7276,"label":"index.ts","path":"./lib/oidc/factory/index.ts","statSize":698,"parsedSize":389,"gzipSize":207}],"parsedSize":2064,"gzipSize":841},{"id":3253,"label":"getToken.ts","path":"./lib/oidc/getToken.ts","statSize":4284,"parsedSize":1913,"gzipSize":907},{"id":6844,"label":"getUserInfo.ts","path":"./lib/oidc/getUserInfo.ts","statSize":5112,"parsedSize":2329,"gzipSize":971},{"id":9770,"label":"getWithPopup.ts","path":"./lib/oidc/getWithPopup.ts","statSize":2092,"parsedSize":1189,"gzipSize":586},{"id":6803,"label":"getWithRedirect.ts","path":"./lib/oidc/getWithRedirect.ts","statSize":1997,"parsedSize":848,"gzipSize":515},{"id":7625,"label":"getWithoutPrompt.ts","path":"./lib/oidc/getWithoutPrompt.ts","statSize":577,"parsedSize":355,"gzipSize":276},{"id":8676,"label":"handleOAuthResponse.ts","path":"./lib/oidc/handleOAuthResponse.ts","statSize":6538,"parsedSize":2783,"gzipSize":1174},{"id":9443,"label":"index.ts","path":"./lib/oidc/index.ts","statSize":7202,"parsedSize":4036,"gzipSize":744},{"id":8113,"label":"introspect.ts","path":"./lib/oidc/introspect.ts","statSize":3381,"parsedSize":1413,"gzipSize":794},{"label":"mixin","path":"./lib/oidc/mixin","statSize":37253,"groups":[{"id":4449,"label":"browser.ts","path":"./lib/oidc/mixin/browser.ts","statSize":3456,"parsedSize":1411,"gzipSize":593},{"id":498,"label":"index.ts","path":"./lib/oidc/mixin/index.ts","statSize":33797,"parsedSize":13047,"gzipSize":3634}],"parsedSize":14458,"gzipSize":3909},{"label":"options","path":"./lib/oidc/options","statSize":9696,"groups":[{"id":3234,"label":"OAuthOptionsConstructor.ts","path":"./lib/oidc/options/OAuthOptionsConstructor.ts","statSize":9130,"parsedSize":4749,"gzipSize":1526},{"id":5577,"label":"browser.ts","path":"./lib/oidc/options/browser.ts","statSize":135,"parsedSize":81,"gzipSize":81},{"id":3775,"label":"index.ts","path":"./lib/oidc/options/index.ts","statSize":431,"parsedSize":209,"gzipSize":179}],"parsedSize":5039,"gzipSize":1619},{"id":9094,"label":"parseFromUrl.ts","path":"./lib/oidc/parseFromUrl.ts","statSize":4757,"parsedSize":2056,"gzipSize":911},{"id":2476,"label":"renewToken.ts","path":"./lib/oidc/renewToken.ts","statSize":3079,"parsedSize":1215,"gzipSize":650},{"id":6268,"label":"renewTokens.ts","path":"./lib/oidc/renewTokens.ts","statSize":3794,"parsedSize":1529,"gzipSize":743},{"id":781,"label":"renewTokensWithRefresh.ts","path":"./lib/oidc/renewTokensWithRefresh.ts","statSize":4649,"parsedSize":1898,"gzipSize":939},{"id":6466,"label":"revokeToken.ts","path":"./lib/oidc/revokeToken.ts","statSize":2575,"parsedSize":1052,"gzipSize":626},{"id":2333,"label":"storage.ts","path":"./lib/oidc/storage.ts","statSize":3550,"parsedSize":1510,"gzipSize":618},{"label":"types","path":"./lib/oidc/types","statSize":7004,"groups":[{"id":5842,"label":"JWT.ts","path":"./lib/oidc/types/JWT.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":6488,"label":"Token.ts","path":"./lib/oidc/types/Token.ts","statSize":766,"parsedSize":422,"gzipSize":214},{"id":7088,"label":"TokenManager.ts","path":"./lib/oidc/types/TokenManager.ts","statSize":587,"parsedSize":286,"gzipSize":170},{"id":4319,"label":"Transaction.ts","path":"./lib/oidc/types/Transaction.ts","statSize":1450,"parsedSize":564,"gzipSize":302},{"id":6593,"label":"TransactionManager.ts","path":"./lib/oidc/types/TransactionManager.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":7615,"label":"UserClaims.ts","path":"./lib/oidc/types/UserClaims.ts","statSize":1,"parsedSize":12,"gzipSize":32},{"id":2740,"label":"api.ts","path":"./lib/oidc/types/api.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":8665,"label":"endpoints.ts","path":"./lib/oidc/types/endpoints.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":8927,"label":"index.ts","path":"./lib/oidc/types/index.ts","statSize":4108,"parsedSize":2188,"gzipSize":356},{"id":8741,"label":"meta.ts","path":"./lib/oidc/types/meta.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":6370,"label":"options.ts","path":"./lib/oidc/types/options.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":9263,"label":"proto.ts","path":"./lib/oidc/types/proto.ts","statSize":1,"parsedSize":12,"gzipSize":32},{"id":195,"label":"storage.ts","path":"./lib/oidc/types/storage.ts","statSize":13,"parsedSize":12,"gzipSize":32}],"parsedSize":3568,"gzipSize":842},{"label":"util","path":"./lib/oidc/util","statSize":36487,"groups":[{"id":4970,"label":"browser.ts","path":"./lib/oidc/util/browser.ts","statSize":3853,"parsedSize":2046,"gzipSize":928},{"id":5078,"label":"defaultEnrollAuthenticatorParams.ts","path":"./lib/oidc/util/defaultEnrollAuthenticatorParams.ts","statSize":804,"parsedSize":382,"gzipSize":277},{"id":7756,"label":"defaultTokenParams.ts","path":"./lib/oidc/util/defaultTokenParams.ts","statSize":1222,"parsedSize":556,"gzipSize":360},{"id":8080,"label":"enrollAuthenticatorMeta.ts","path":"./lib/oidc/util/enrollAuthenticatorMeta.ts","statSize":591,"parsedSize":323,"gzipSize":208},{"id":9912,"label":"errors.ts","path":"./lib/oidc/util/errors.ts","statSize":1054,"parsedSize":501,"gzipSize":299},{"id":8785,"label":"index.ts","path":"./lib/oidc/util/index.ts","statSize":6588,"parsedSize":3271,"gzipSize":461},{"id":8221,"label":"loginRedirect.ts","path":"./lib/oidc/util/loginRedirect.ts","statSize":2394,"parsedSize":1074,"gzipSize":478},{"id":7599,"label":"oauth.ts","path":"./lib/oidc/util/oauth.ts","statSize":2473,"parsedSize":1262,"gzipSize":514},{"id":2865,"label":"oauthMeta.ts","path":"./lib/oidc/util/oauthMeta.ts","statSize":2024,"parsedSize":1116,"gzipSize":535},{"id":3611,"label":"pkce.ts","path":"./lib/oidc/util/pkce.ts","statSize":1259,"parsedSize":722,"gzipSize":453},{"id":6757,"label":"prepareEnrollAuthenticatorParams.ts","path":"./lib/oidc/util/prepareEnrollAuthenticatorParams.ts","statSize":1923,"parsedSize":1071,"gzipSize":518},{"id":6898,"label":"prepareTokenParams.ts","path":"./lib/oidc/util/prepareTokenParams.ts","statSize":6778,"parsedSize":3034,"gzipSize":1239},{"id":6635,"label":"refreshToken.ts","path":"./lib/oidc/util/refreshToken.ts","statSize":531,"parsedSize":263,"gzipSize":188},{"id":3327,"label":"sharedStorage.ts","path":"./lib/oidc/util/sharedStorage.ts","statSize":1657,"parsedSize":727,"gzipSize":315},{"id":1969,"label":"urlParams.ts","path":"./lib/oidc/util/urlParams.ts","statSize":807,"parsedSize":364,"gzipSize":257},{"id":6003,"label":"validateClaims.ts","path":"./lib/oidc/util/validateClaims.ts","statSize":1700,"parsedSize":976,"gzipSize":476},{"id":2482,"label":"validateToken.ts","path":"./lib/oidc/util/validateToken.ts","statSize":829,"parsedSize":569,"gzipSize":268}],"parsedSize":18257,"gzipSize":4908},{"id":1260,"label":"verifyToken.ts","path":"./lib/oidc/verifyToken.ts","statSize":4688,"parsedSize":1950,"gzipSize":932}],"parsedSize":95255,"gzipSize":21432},{"label":"services","path":"./lib/services","statSize":24602,"groups":[{"id":2282,"label":"AutoRenewService.ts","path":"./lib/services/AutoRenewService.ts","statSize":4939,"parsedSize":2388,"gzipSize":881},{"id":6748,"label":"LeaderElectionService.ts","path":"./lib/services/LeaderElectionService.ts","statSize":5685,"parsedSize":2393,"gzipSize":788},{"id":2546,"label":"RenewOnTabActivationService.ts","path":"./lib/services/RenewOnTabActivationService.ts","statSize":4455,"parsedSize":2152,"gzipSize":785},{"id":5550,"label":"SyncStorageService.ts","path":"./lib/services/SyncStorageService.ts","statSize":7891,"parsedSize":3907,"gzipSize":1150},{"id":2604,"label":"index.ts","path":"./lib/services/index.ts","statSize":1632,"parsedSize":749,"gzipSize":239}],"parsedSize":11589,"gzipSize":2332},{"label":"session","path":"./lib/session","statSize":6969,"groups":[{"id":3719,"label":"api.ts","path":"./lib/session/api.ts","statSize":1737,"parsedSize":1028,"gzipSize":472},{"id":2815,"label":"factory.ts","path":"./lib/session/factory.ts","statSize":418,"parsedSize":278,"gzipSize":172},{"id":8041,"label":"index.ts","path":"./lib/session/index.ts","statSize":1322,"parsedSize":749,"gzipSize":240},{"id":3980,"label":"mixin.ts","path":"./lib/session/mixin.ts","statSize":3479,"parsedSize":1356,"gzipSize":681},{"id":1249,"label":"types.ts","path":"./lib/session/types.ts","statSize":13,"parsedSize":12,"gzipSize":32}],"parsedSize":3423,"gzipSize":1266},{"label":"storage","path":"./lib/storage","statSize":16437,"groups":[{"id":5437,"label":"BaseStorageManager.ts","path":"./lib/storage/BaseStorageManager.ts","statSize":3442,"parsedSize":1567,"gzipSize":689},{"id":5763,"label":"SavedObject.ts","path":"./lib/storage/SavedObject.ts","statSize":2766,"parsedSize":1378,"gzipSize":517},{"id":9927,"label":"index.ts","path":"./lib/storage/index.ts","statSize":1852,"parsedSize":928,"gzipSize":251},{"id":265,"label":"mixin.ts","path":"./lib/storage/mixin.ts","statSize":2704,"parsedSize":1032,"gzipSize":532},{"label":"options","path":"./lib/storage/options","statSize":5660,"groups":[{"id":4863,"label":"StorageOptionsConstructor.ts","path":"./lib/storage/options/StorageOptionsConstructor.ts","statSize":3822,"parsedSize":1745,"gzipSize":768},{"id":8009,"label":"browser.ts","path":"./lib/storage/options/browser.ts","statSize":1838,"parsedSize":1031,"gzipSize":525}],"parsedSize":2776,"gzipSize":1137},{"id":5752,"label":"types.ts","path":"./lib/storage/types.ts","statSize":13,"parsedSize":12,"gzipSize":32}],"parsedSize":7693,"gzipSize":2272},{"label":"util","path":"./lib/util","statSize":10748,"groups":[{"id":3548,"label":"PromiseQueue.ts","path":"./lib/util/PromiseQueue.ts","statSize":2535,"parsedSize":1170,"gzipSize":597},{"id":146,"label":"console.ts","path":"./lib/util/console.ts","statSize":965,"parsedSize":501,"gzipSize":281},{"id":305,"label":"index.ts","path":"./lib/util/index.ts","statSize":2011,"parsedSize":1108,"gzipSize":267},{"id":8750,"label":"misc.ts","path":"./lib/util/misc.ts","statSize":883,"parsedSize":473,"gzipSize":338},{"id":3193,"label":"object.ts","path":"./lib/util/object.ts","statSize":2215,"parsedSize":1076,"gzipSize":513},{"id":4771,"label":"types.ts","path":"./lib/util/types.ts","statSize":636,"parsedSize":433,"gzipSize":183},{"id":6718,"label":"url.ts","path":"./lib/util/url.ts","statSize":1503,"parsedSize":829,"gzipSize":420}],"parsedSize":5590,"gzipSize":1934}],"parsedSize":187796,"gzipSize":40258},{"label":"node_modules","path":"./node_modules","statSize":112787,"groups":[{"label":"@babel/runtime","path":"./node_modules/@babel/runtime","statSize":28938,"groups":[{"label":"helpers","path":"./node_modules/@babel/runtime/helpers","statSize":28490,"groups":[{"id":3897,"label":"arrayLikeToArray.js","path":"./node_modules/@babel/runtime/helpers/arrayLikeToArray.js","statSize":309,"parsedSize":179,"gzipSize":151},{"id":5372,"label":"arrayWithHoles.js","path":"./node_modules/@babel/runtime/helpers/arrayWithHoles.js","statSize":183,"parsedSize":116,"gzipSize":99},{"id":3405,"label":"arrayWithoutHoles.js","path":"./node_modules/@babel/runtime/helpers/arrayWithoutHoles.js","statSize":264,"parsedSize":137,"gzipSize":120},{"id":6115,"label":"assertThisInitialized.js","path":"./node_modules/@babel/runtime/helpers/assertThisInitialized.js","statSize":295,"parsedSize":196,"gzipSize":153},{"id":7156,"label":"asyncToGenerator.js","path":"./node_modules/@babel/runtime/helpers/asyncToGenerator.js","statSize":879,"parsedSize":389,"gzipSize":244},{"id":6690,"label":"classCallCheck.js","path":"./node_modules/@babel/runtime/helpers/classCallCheck.js","statSize":273,"parsedSize":167,"gzipSize":140},{"id":3515,"label":"construct.js","path":"./node_modules/@babel/runtime/helpers/construct.js","statSize":902,"parsedSize":427,"gzipSize":228},{"id":9728,"label":"createClass.js","path":"./node_modules/@babel/runtime/helpers/createClass.js","statSize":750,"parsedSize":347,"gzipSize":230},{"id":8416,"label":"defineProperty.js","path":"./node_modules/@babel/runtime/helpers/defineProperty.js","statSize":365,"parsedSize":193,"gzipSize":153},{"id":1588,"label":"get.js","path":"./node_modules/@babel/runtime/helpers/get.js","statSize":830,"parsedSize":465,"gzipSize":246},{"id":3808,"label":"getPrototypeOf.js","path":"./node_modules/@babel/runtime/helpers/getPrototypeOf.js","statSize":429,"parsedSize":275,"gzipSize":151},{"id":1655,"label":"inherits.js","path":"./node_modules/@babel/runtime/helpers/inherits.js","statSize":658,"parsedSize":370,"gzipSize":252},{"id":4836,"label":"interopRequireDefault.js","path":"./node_modules/@babel/runtime/helpers/interopRequireDefault.js","statSize":224,"parsedSize":124,"gzipSize":98},{"id":6035,"label":"isNativeFunction.js","path":"./node_modules/@babel/runtime/helpers/isNativeFunction.js","statSize":217,"parsedSize":149,"gzipSize":130},{"id":9617,"label":"isNativeReflectConstruct.js","path":"./node_modules/@babel/runtime/helpers/isNativeReflectConstruct.js","statSize":475,"parsedSize":328,"gzipSize":203},{"id":9498,"label":"iterableToArray.js","path":"./node_modules/@babel/runtime/helpers/iterableToArray.js","statSize":273,"parsedSize":187,"gzipSize":150},{"id":8872,"label":"iterableToArrayLimit.js","path":"./node_modules/@babel/runtime/helpers/iterableToArrayLimit.js","statSize":705,"parsedSize":385,"gzipSize":270},{"id":2218,"label":"nonIterableRest.js","path":"./node_modules/@babel/runtime/helpers/nonIterableRest.js","statSize":308,"parsedSize":247,"gzipSize":194},{"id":5343,"label":"nonIterableSpread.js","path":"./node_modules/@babel/runtime/helpers/nonIterableSpread.js","statSize":307,"parsedSize":242,"gzipSize":192},{"id":215,"label":"objectWithoutProperties.js","path":"./node_modules/@babel/runtime/helpers/objectWithoutProperties.js","statSize":741,"parsedSize":332,"gzipSize":239},{"id":7071,"label":"objectWithoutPropertiesLoose.js","path":"./node_modules/@babel/runtime/helpers/objectWithoutPropertiesLoose.js","statSize":459,"parsedSize":207,"gzipSize":172},{"id":4993,"label":"possibleConstructorReturn.js","path":"./node_modules/@babel/runtime/helpers/possibleConstructorReturn.js","statSize":542,"parsedSize":286,"gzipSize":213},{"id":7061,"label":"regeneratorRuntime.js","path":"./node_modules/@babel/runtime/helpers/regeneratorRuntime.js","statSize":13835,"parsedSize":6632,"gzipSize":2420},{"id":6015,"label":"setPrototypeOf.js","path":"./node_modules/@babel/runtime/helpers/setPrototypeOf.js","statSize":421,"parsedSize":259,"gzipSize":147},{"id":7424,"label":"slicedToArray.js","path":"./node_modules/@babel/runtime/helpers/slicedToArray.js","statSize":517,"parsedSize":170,"gzipSize":140},{"id":1753,"label":"superPropBase.js","path":"./node_modules/@babel/runtime/helpers/superPropBase.js","statSize":367,"parsedSize":183,"gzipSize":153},{"id":861,"label":"toConsumableArray.js","path":"./node_modules/@babel/runtime/helpers/toConsumableArray.js","statSize":516,"parsedSize":164,"gzipSize":138},{"id":8698,"label":"typeof.js","path":"./node_modules/@babel/runtime/helpers/typeof.js","statSize":554,"parsedSize":368,"gzipSize":178},{"id":6116,"label":"unsupportedIterableToArray.js","path":"./node_modules/@babel/runtime/helpers/unsupportedIterableToArray.js","statSize":607,"parsedSize":377,"gzipSize":273},{"id":3496,"label":"wrapNativeSuper.js","path":"./node_modules/@babel/runtime/helpers/wrapNativeSuper.js","statSize":1285,"parsedSize":625,"gzipSize":351}],"parsedSize":14526,"gzipSize":4117},{"label":"regenerator","path":"./node_modules/@babel/runtime/regenerator","statSize":448,"groups":[{"id":4687,"label":"index.js","path":"./node_modules/@babel/runtime/regenerator/index.js","statSize":448,"parsedSize":181,"gzipSize":146}],"parsedSize":181,"gzipSize":146}],"parsedSize":14707,"gzipSize":4172},{"label":"broadcast-channel","path":"./node_modules/broadcast-channel","statSize":51008,"groups":[{"label":"dist/lib","path":"./node_modules/broadcast-channel/dist/lib","statSize":50454,"groups":[{"id":8991,"label":"broadcast-channel.js","path":"./node_modules/broadcast-channel/dist/lib/broadcast-channel.js","statSize":8004,"parsedSize":2739,"gzipSize":1104},{"id":8437,"label":"index.es5.js","path":"./node_modules/broadcast-channel/dist/lib/index.es5.js","statSize":559,"parsedSize":221,"gzipSize":155},{"id":5585,"label":"index.js","path":"./node_modules/broadcast-channel/dist/lib/index.js","statSize":1169,"parsedSize":724,"gzipSize":267},{"id":4781,"label":"leader-election-util.js","path":"./node_modules/broadcast-channel/dist/lib/leader-election-util.js","statSize":1725,"parsedSize":579,"gzipSize":343},{"id":683,"label":"leader-election-web-lock.js","path":"./node_modules/broadcast-channel/dist/lib/leader-election-web-lock.js","statSize":2905,"parsedSize":1421,"gzipSize":667},{"id":6550,"label":"leader-election.js","path":"./node_modules/broadcast-channel/dist/lib/leader-election.js","statSize":8953,"parsedSize":3260,"gzipSize":1108},{"id":4632,"label":"method-chooser.js","path":"./node_modules/broadcast-channel/dist/lib/method-chooser.js","statSize":2790,"parsedSize":669,"gzipSize":407},{"label":"methods","path":"./node_modules/broadcast-channel/dist/lib/methods","statSize":20543,"groups":[{"id":9122,"label":"indexed-db.js","path":"./node_modules/broadcast-channel/dist/lib/methods/indexed-db.js","statSize":11573,"parsedSize":4357,"gzipSize":1644},{"id":4924,"label":"localstorage.js","path":"./node_modules/broadcast-channel/dist/lib/methods/localstorage.js","statSize":5332,"parsedSize":2053,"gzipSize":1007},{"id":2026,"label":"native.js","path":"./node_modules/broadcast-channel/dist/lib/methods/native.js","statSize":1856,"parsedSize":1066,"gzipSize":569},{"id":1574,"label":"simulate.js","path":"./node_modules/broadcast-channel/dist/lib/methods/simulate.js","statSize":1782,"parsedSize":902,"gzipSize":443}],"parsedSize":8378,"gzipSize":2710},{"id":423,"label":"options.js","path":"./node_modules/broadcast-channel/dist/lib/options.js","statSize":1566,"parsedSize":737,"gzipSize":396},{"id":6202,"label":"util.js","path":"./node_modules/broadcast-channel/dist/lib/util.js","statSize":2240,"parsedSize":874,"gzipSize":444}],"parsedSize":19602,"gzipSize":5445},{"label":"node_modules/@babel/runtime/helpers","path":"./node_modules/broadcast-channel/node_modules/@babel/runtime/helpers","statSize":554,"groups":[{"id":3762,"label":"typeof.js","path":"./node_modules/broadcast-channel/node_modules/@babel/runtime/helpers/typeof.js","statSize":554,"parsedSize":368,"gzipSize":178}],"parsedSize":368,"gzipSize":178}],"parsedSize":19970,"gzipSize":5539},{"label":"cross-fetch/dist","path":"./node_modules/cross-fetch/dist","statSize":15491,"groups":[{"id":4098,"label":"browser-ponyfill.js","path":"./node_modules/cross-fetch/dist/browser-ponyfill.js","statSize":15491,"parsedSize":8241,"gzipSize":2804}],"parsedSize":8241,"gzipSize":2804},{"label":"js-cookie/dist","path":"./node_modules/js-cookie/dist","statSize":4150,"groups":[{"id":646,"label":"js.cookie.js","path":"./node_modules/js-cookie/dist/js.cookie.js","statSize":4150,"parsedSize":1426,"gzipSize":706}],"parsedSize":1426,"gzipSize":706},{"label":"oblivious-set/dist/es","path":"./node_modules/oblivious-set/dist/es","statSize":2061,"groups":[{"id":2151,"label":"index.js","path":"./node_modules/oblivious-set/dist/es/index.js","statSize":2061,"parsedSize":639,"gzipSize":346}],"parsedSize":639,"gzipSize":346},{"label":"p-cancelable","path":"./node_modules/p-cancelable","statSize":6424,"groups":[{"id":3615,"label":"index.js","path":"./node_modules/p-cancelable/index.js","statSize":6424,"parsedSize":3179,"gzipSize":1369}],"parsedSize":3179,"gzipSize":1369},{"label":"tiny-emitter","path":"./node_modules/tiny-emitter","statSize":1565,"groups":[{"id":4279,"label":"index.js","path":"./node_modules/tiny-emitter/index.js","statSize":1565,"parsedSize":586,"gzipSize":326}],"parsedSize":586,"gzipSize":326},{"label":"unload/dist/es","path":"./node_modules/unload/dist/es","statSize":3150,"groups":[{"id":4810,"label":"index.js + 2 modules (concatenated)","path":"./node_modules/unload/dist/es/index.js + 2 modules (concatenated)","statSize":3150,"parsedSize":1286,"gzipSize":527,"concatenated":true,"groups":[{"label":"node_modules/unload/dist/es","path":"./node_modules/unload/dist/es/index.js + 2 modules (concatenated)/node_modules/unload/dist/es","statSize":3150,"groups":[{"id":null,"label":"index.js","path":"./node_modules/unload/dist/es/index.js + 2 modules (concatenated)/node_modules/unload/dist/es/index.js","statSize":1227,"parsedSize":500,"gzipSize":205,"inaccurateSizes":true},{"id":null,"label":"node.js","path":"./node_modules/unload/dist/es/index.js + 2 modules (concatenated)/node_modules/unload/dist/es/node.js","statSize":695,"parsedSize":283,"gzipSize":116,"inaccurateSizes":true},{"id":null,"label":"browser.js","path":"./node_modules/unload/dist/es/index.js + 2 modules (concatenated)/node_modules/unload/dist/es/browser.js","statSize":1228,"parsedSize":501,"gzipSize":205,"inaccurateSizes":true}],"parsedSize":1286,"gzipSize":527,"inaccurateSizes":true}]}],"parsedSize":1286,"gzipSize":527}],"parsedSize":50034,"gzipSize":14063}]}];
+      window.chartData = [{"label":"okta-auth-js.authn.min.js","isAsset":true,"statSize":517788,"parsedSize":240765,"gzipSize":55138,"groups":[{"label":"lib","path":"./lib","statSize":409185,"groups":[{"label":"authn","path":"./lib/authn","statSize":21012,"groups":[{"id":97,"label":"AuthnTransactionImpl.ts","path":"./lib/authn/AuthnTransactionImpl.ts","statSize":2549,"parsedSize":1410,"gzipSize":492},{"id":9859,"label":"api.ts","path":"./lib/authn/api.ts","statSize":2330,"parsedSize":1143,"gzipSize":457},{"id":8248,"label":"factory.ts","path":"./lib/authn/factory.ts","statSize":843,"parsedSize":453,"gzipSize":228},{"id":3398,"label":"index.ts","path":"./lib/authn/index.ts","statSize":1005,"parsedSize":569,"gzipSize":223},{"id":3164,"label":"mixin.ts","path":"./lib/authn/mixin.ts","statSize":5890,"parsedSize":2327,"gzipSize":910},{"id":2576,"label":"types.ts","path":"./lib/authn/types.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"label":"util","path":"./lib/authn/util","statSize":8382,"groups":[{"id":6693,"label":"flattenEmbedded.ts","path":"./lib/authn/util/flattenEmbedded.ts","statSize":942,"parsedSize":472,"gzipSize":312},{"id":8657,"label":"link2fn.ts","path":"./lib/authn/util/link2fn.ts","statSize":3027,"parsedSize":1386,"gzipSize":689},{"id":9265,"label":"links2fns.ts","path":"./lib/authn/util/links2fns.ts","statSize":760,"parsedSize":337,"gzipSize":246},{"id":3395,"label":"poll.ts","path":"./lib/authn/util/poll.ts","statSize":3282,"parsedSize":1353,"gzipSize":692},{"id":1349,"label":"stateToken.ts","path":"./lib/authn/util/stateToken.ts","statSize":371,"parsedSize":196,"gzipSize":139}],"parsedSize":3744,"gzipSize":1504}],"parsedSize":9658,"gzipSize":3019},{"label":"base","path":"./lib/base","statSize":4550,"groups":[{"id":9893,"label":"factory.ts","path":"./lib/base/factory.ts","statSize":2781,"parsedSize":1206,"gzipSize":598},{"id":3306,"label":"index.ts","path":"./lib/base/index.ts","statSize":1015,"parsedSize":569,"gzipSize":221},{"id":5093,"label":"options.ts","path":"./lib/base/options.ts","statSize":741,"parsedSize":251,"gzipSize":187},{"id":6429,"label":"types.ts","path":"./lib/base/types.ts","statSize":13,"parsedSize":12,"gzipSize":32}],"parsedSize":2038,"gzipSize":795},{"label":"browser","path":"./lib/browser","statSize":8821,"groups":[{"id":5407,"label":"browserStorage.ts","path":"./lib/browser/browserStorage.ts","statSize":6256,"parsedSize":3041,"gzipSize":1133},{"id":8719,"label":"fingerprint.ts","path":"./lib/browser/fingerprint.ts","statSize":2565,"parsedSize":1236,"gzipSize":660}],"parsedSize":4277,"gzipSize":1658},{"id":6244,"label":"clock.ts","path":"./lib/clock.ts","statSize":1050,"parsedSize":408,"gzipSize":254},{"id":1971,"label":"constants.ts","path":"./lib/constants.ts","statSize":2704,"parsedSize":1318,"gzipSize":474},{"label":"core","path":"./lib/core","statSize":39689,"groups":[{"id":1018,"label":"AuthStateManager.ts","path":"./lib/core/AuthStateManager.ts","statSize":9938,"parsedSize":4168,"gzipSize":1541},{"label":"ServiceManager","path":"./lib/core/ServiceManager","statSize":13371,"groups":[{"id":2204,"label":"browser.ts","path":"./lib/core/ServiceManager/browser.ts","statSize":13035,"parsedSize":5916,"gzipSize":2035},{"id":6599,"label":"index.ts","path":"./lib/core/ServiceManager/index.ts","statSize":336,"parsedSize":209,"gzipSize":179}],"parsedSize":6125,"gzipSize":2107},{"id":1578,"label":"factory.ts","path":"./lib/core/factory.ts","statSize":808,"parsedSize":283,"gzipSize":204},{"id":3961,"label":"index.ts","path":"./lib/core/index.ts","statSize":2433,"parsedSize":1289,"gzipSize":284},{"id":8386,"label":"mixin.ts","path":"./lib/core/mixin.ts","statSize":9288,"parsedSize":3582,"gzipSize":1256},{"id":9133,"label":"options.ts","path":"./lib/core/options.ts","statSize":2599,"parsedSize":982,"gzipSize":469},{"id":2647,"label":"storage.ts","path":"./lib/core/storage.ts","statSize":210,"parsedSize":122,"gzipSize":117},{"label":"types","path":"./lib/core/types","statSize":1042,"groups":[{"id":2293,"label":"AuthState.ts","path":"./lib/core/types/AuthState.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":5675,"label":"Service.ts","path":"./lib/core/types/Service.ts","statSize":1,"parsedSize":12,"gzipSize":32},{"id":6655,"label":"api.ts","path":"./lib/core/types/api.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":8553,"label":"index.ts","path":"./lib/core/types/index.ts","statSize":1015,"parsedSize":569,"gzipSize":223}],"parsedSize":605,"gzipSize":227}],"parsedSize":17156,"gzipSize":4470},{"label":"crypto","path":"./lib/crypto","statSize":5447,"groups":[{"id":7987,"label":"base64.ts","path":"./lib/crypto/base64.ts","statSize":1756,"parsedSize":945,"gzipSize":458},{"id":7594,"label":"browser.ts","path":"./lib/crypto/browser.ts","statSize":285,"parsedSize":189,"gzipSize":141},{"id":9718,"label":"index.ts","path":"./lib/crypto/index.ts","statSize":1711,"parsedSize":926,"gzipSize":251},{"id":5698,"label":"oidcHash.ts","path":"./lib/crypto/oidcHash.ts","statSize":519,"parsedSize":283,"gzipSize":230},{"id":6332,"label":"types.ts","path":"./lib/crypto/types.ts","statSize":1,"parsedSize":12,"gzipSize":32},{"id":3154,"label":"verifyToken.ts","path":"./lib/crypto/verifyToken.ts","statSize":839,"parsedSize":410,"gzipSize":296},{"id":1,"label":"webcrypto.ts","path":"./lib/crypto/webcrypto.ts","statSize":336,"parsedSize":209,"gzipSize":179}],"parsedSize":2974,"gzipSize":994},{"label":"errors","path":"./lib/errors","statSize":20151,"groups":[{"id":3983,"label":"AuthApiError.ts","path":"./lib/errors/AuthApiError.ts","statSize":3201,"parsedSize":1333,"gzipSize":541},{"id":6573,"label":"AuthPollStopError.ts","path":"./lib/errors/AuthPollStopError.ts","statSize":1983,"parsedSize":778,"gzipSize":411},{"id":9123,"label":"AuthSdkError.ts","path":"./lib/errors/AuthSdkError.ts","statSize":2979,"parsedSize":1224,"gzipSize":521},{"id":401,"label":"CustomError.ts","path":"./lib/errors/CustomError.ts","statSize":2214,"parsedSize":876,"gzipSize":443},{"id":2886,"label":"OAuthError.ts","path":"./lib/errors/OAuthError.ts","statSize":2868,"parsedSize":1139,"gzipSize":498},{"id":3114,"label":"WWWAuthError.ts","path":"./lib/errors/WWWAuthError.ts","statSize":4803,"parsedSize":2126,"gzipSize":899},{"id":5728,"label":"index.ts","path":"./lib/errors/index.ts","statSize":2102,"parsedSize":1096,"gzipSize":386},{"id":1243,"label":"types.ts","path":"./lib/errors/types.ts","statSize":1,"parsedSize":12,"gzipSize":32}],"parsedSize":8584,"gzipSize":1663},{"label":"exports","path":"./lib/exports","statSize":8211,"groups":[{"id":5140,"label":"authn.ts","path":"./lib/exports/authn.ts","statSize":3070,"parsedSize":1382,"gzipSize":625},{"label":"cdn","path":"./lib/exports/cdn","statSize":168,"groups":[{"id":593,"label":"authn.ts","path":"./lib/exports/cdn/authn.ts","statSize":168,"parsedSize":101,"gzipSize":105}],"parsedSize":101,"gzipSize":105},{"id":6736,"label":"common.ts","path":"./lib/exports/common.ts","statSize":4973,"parsedSize":2670,"gzipSize":612}],"parsedSize":4153,"gzipSize":1040},{"id":415,"label":"features.ts","path":"./lib/features.ts","statSize":2331,"parsedSize":1196,"gzipSize":519},{"label":"fetch","path":"./lib/fetch","statSize":4580,"groups":[{"id":4447,"label":"fetchRequest.ts","path":"./lib/fetch/fetchRequest.ts","statSize":4580,"parsedSize":2383,"gzipSize":1232}],"parsedSize":2383,"gzipSize":1232},{"label":"http","path":"./lib/http","statSize":21695,"groups":[{"id":287,"label":"OktaUserAgent.ts","path":"./lib/http/OktaUserAgent.ts","statSize":1534,"parsedSize":738,"gzipSize":385},{"id":2281,"label":"headers.ts","path":"./lib/http/headers.ts","statSize":248,"parsedSize":126,"gzipSize":102},{"id":4777,"label":"index.ts","path":"./lib/http/index.ts","statSize":2046,"parsedSize":1108,"gzipSize":266},{"id":3334,"label":"mixin.ts","path":"./lib/http/mixin.ts","statSize":3400,"parsedSize":1435,"gzipSize":712},{"id":4090,"label":"options.ts","path":"./lib/http/options.ts","statSize":3328,"parsedSize":1359,"gzipSize":555},{"id":5385,"label":"request.ts","path":"./lib/http/request.ts","statSize":11126,"parsedSize":5315,"gzipSize":2360},{"id":8958,"label":"types.ts","path":"./lib/http/types.ts","statSize":13,"parsedSize":12,"gzipSize":32}],"parsedSize":10093,"gzipSize":3450},{"label":"oidc","path":"./lib/oidc","statSize":210188,"groups":[{"id":3426,"label":"TokenManager.ts","path":"./lib/oidc/TokenManager.ts","statSize":18238,"parsedSize":8897,"gzipSize":2502},{"id":130,"label":"TransactionManager.ts","path":"./lib/oidc/TransactionManager.ts","statSize":3757,"parsedSize":1865,"gzipSize":650},{"id":1237,"label":"decodeToken.ts","path":"./lib/oidc/decodeToken.ts","statSize":495,"parsedSize":285,"gzipSize":227},{"id":7659,"label":"dpop.ts","path":"./lib/oidc/dpop.ts","statSize":15396,"parsedSize":6399,"gzipSize":1881},{"label":"endpoints","path":"./lib/oidc/endpoints","statSize":13088,"groups":[{"id":2206,"label":"authorize.ts","path":"./lib/oidc/endpoints/authorize.ts","statSize":3290,"parsedSize":1887,"gzipSize":873},{"id":2642,"label":"index.ts","path":"./lib/oidc/endpoints/index.ts","statSize":1036,"parsedSize":567,"gzipSize":220},{"id":9231,"label":"token.ts","path":"./lib/oidc/endpoints/token.ts","statSize":7327,"parsedSize":3313,"gzipSize":1352},{"id":52,"label":"well-known.ts","path":"./lib/oidc/endpoints/well-known.ts","statSize":1435,"parsedSize":662,"gzipSize":407}],"parsedSize":6429,"gzipSize":2351},{"id":9284,"label":"enrollAuthenticator.ts","path":"./lib/oidc/enrollAuthenticator.ts","statSize":673,"parsedSize":367,"gzipSize":241},{"id":8707,"label":"exchangeCodeForTokens.ts","path":"./lib/oidc/exchangeCodeForTokens.ts","statSize":4616,"parsedSize":1551,"gzipSize":835},{"label":"factory","path":"./lib/oidc/factory","statSize":4409,"groups":[{"id":3859,"label":"OktaAuthOAuth.ts","path":"./lib/oidc/factory/OktaAuthOAuth.ts","statSize":741,"parsedSize":253,"gzipSize":189},{"id":7203,"label":"api.ts","path":"./lib/oidc/factory/api.ts","statSize":2970,"parsedSize":1422,"gzipSize":621},{"id":7276,"label":"index.ts","path":"./lib/oidc/factory/index.ts","statSize":698,"parsedSize":389,"gzipSize":207}],"parsedSize":2064,"gzipSize":841},{"id":3253,"label":"getToken.ts","path":"./lib/oidc/getToken.ts","statSize":4284,"parsedSize":1913,"gzipSize":907},{"id":6844,"label":"getUserInfo.ts","path":"./lib/oidc/getUserInfo.ts","statSize":5112,"parsedSize":2329,"gzipSize":971},{"id":9770,"label":"getWithPopup.ts","path":"./lib/oidc/getWithPopup.ts","statSize":2092,"parsedSize":1189,"gzipSize":586},{"id":6803,"label":"getWithRedirect.ts","path":"./lib/oidc/getWithRedirect.ts","statSize":1997,"parsedSize":848,"gzipSize":515},{"id":7625,"label":"getWithoutPrompt.ts","path":"./lib/oidc/getWithoutPrompt.ts","statSize":577,"parsedSize":355,"gzipSize":276},{"id":8676,"label":"handleOAuthResponse.ts","path":"./lib/oidc/handleOAuthResponse.ts","statSize":7129,"parsedSize":2955,"gzipSize":1242},{"id":9443,"label":"index.ts","path":"./lib/oidc/index.ts","statSize":7202,"parsedSize":4036,"gzipSize":744},{"id":8113,"label":"introspect.ts","path":"./lib/oidc/introspect.ts","statSize":3381,"parsedSize":1413,"gzipSize":794},{"label":"mixin","path":"./lib/oidc/mixin","statSize":37253,"groups":[{"id":4449,"label":"browser.ts","path":"./lib/oidc/mixin/browser.ts","statSize":3456,"parsedSize":1411,"gzipSize":593},{"id":498,"label":"index.ts","path":"./lib/oidc/mixin/index.ts","statSize":33797,"parsedSize":13047,"gzipSize":3634}],"parsedSize":14458,"gzipSize":3909},{"label":"options","path":"./lib/oidc/options","statSize":9906,"groups":[{"id":3234,"label":"OAuthOptionsConstructor.ts","path":"./lib/oidc/options/OAuthOptionsConstructor.ts","statSize":9340,"parsedSize":4859,"gzipSize":1556},{"id":5577,"label":"browser.ts","path":"./lib/oidc/options/browser.ts","statSize":135,"parsedSize":81,"gzipSize":81},{"id":3775,"label":"index.ts","path":"./lib/oidc/options/index.ts","statSize":431,"parsedSize":209,"gzipSize":179}],"parsedSize":5149,"gzipSize":1646},{"id":9094,"label":"parseFromUrl.ts","path":"./lib/oidc/parseFromUrl.ts","statSize":4757,"parsedSize":2056,"gzipSize":911},{"id":2476,"label":"renewToken.ts","path":"./lib/oidc/renewToken.ts","statSize":3079,"parsedSize":1215,"gzipSize":650},{"id":6268,"label":"renewTokens.ts","path":"./lib/oidc/renewTokens.ts","statSize":3794,"parsedSize":1529,"gzipSize":743},{"id":781,"label":"renewTokensWithRefresh.ts","path":"./lib/oidc/renewTokensWithRefresh.ts","statSize":4649,"parsedSize":1898,"gzipSize":939},{"id":6466,"label":"revokeToken.ts","path":"./lib/oidc/revokeToken.ts","statSize":2575,"parsedSize":1052,"gzipSize":626},{"id":2333,"label":"storage.ts","path":"./lib/oidc/storage.ts","statSize":3550,"parsedSize":1510,"gzipSize":618},{"label":"types","path":"./lib/oidc/types","statSize":7004,"groups":[{"id":5842,"label":"JWT.ts","path":"./lib/oidc/types/JWT.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":6488,"label":"Token.ts","path":"./lib/oidc/types/Token.ts","statSize":766,"parsedSize":422,"gzipSize":214},{"id":7088,"label":"TokenManager.ts","path":"./lib/oidc/types/TokenManager.ts","statSize":587,"parsedSize":286,"gzipSize":170},{"id":4319,"label":"Transaction.ts","path":"./lib/oidc/types/Transaction.ts","statSize":1450,"parsedSize":564,"gzipSize":302},{"id":6593,"label":"TransactionManager.ts","path":"./lib/oidc/types/TransactionManager.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":7615,"label":"UserClaims.ts","path":"./lib/oidc/types/UserClaims.ts","statSize":1,"parsedSize":12,"gzipSize":32},{"id":2740,"label":"api.ts","path":"./lib/oidc/types/api.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":8665,"label":"endpoints.ts","path":"./lib/oidc/types/endpoints.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":8927,"label":"index.ts","path":"./lib/oidc/types/index.ts","statSize":4108,"parsedSize":2188,"gzipSize":356},{"id":8741,"label":"meta.ts","path":"./lib/oidc/types/meta.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":6370,"label":"options.ts","path":"./lib/oidc/types/options.ts","statSize":13,"parsedSize":12,"gzipSize":32},{"id":9263,"label":"proto.ts","path":"./lib/oidc/types/proto.ts","statSize":1,"parsedSize":12,"gzipSize":32},{"id":195,"label":"storage.ts","path":"./lib/oidc/types/storage.ts","statSize":13,"parsedSize":12,"gzipSize":32}],"parsedSize":3568,"gzipSize":842},{"label":"util","path":"./lib/oidc/util","statSize":36487,"groups":[{"id":4970,"label":"browser.ts","path":"./lib/oidc/util/browser.ts","statSize":3853,"parsedSize":2046,"gzipSize":928},{"id":5078,"label":"defaultEnrollAuthenticatorParams.ts","path":"./lib/oidc/util/defaultEnrollAuthenticatorParams.ts","statSize":804,"parsedSize":382,"gzipSize":277},{"id":7756,"label":"defaultTokenParams.ts","path":"./lib/oidc/util/defaultTokenParams.ts","statSize":1222,"parsedSize":556,"gzipSize":360},{"id":8080,"label":"enrollAuthenticatorMeta.ts","path":"./lib/oidc/util/enrollAuthenticatorMeta.ts","statSize":591,"parsedSize":323,"gzipSize":208},{"id":9912,"label":"errors.ts","path":"./lib/oidc/util/errors.ts","statSize":1054,"parsedSize":501,"gzipSize":299},{"id":8785,"label":"index.ts","path":"./lib/oidc/util/index.ts","statSize":6588,"parsedSize":3271,"gzipSize":461},{"id":8221,"label":"loginRedirect.ts","path":"./lib/oidc/util/loginRedirect.ts","statSize":2394,"parsedSize":1074,"gzipSize":478},{"id":7599,"label":"oauth.ts","path":"./lib/oidc/util/oauth.ts","statSize":2473,"parsedSize":1262,"gzipSize":514},{"id":2865,"label":"oauthMeta.ts","path":"./lib/oidc/util/oauthMeta.ts","statSize":2024,"parsedSize":1116,"gzipSize":535},{"id":3611,"label":"pkce.ts","path":"./lib/oidc/util/pkce.ts","statSize":1259,"parsedSize":722,"gzipSize":453},{"id":6757,"label":"prepareEnrollAuthenticatorParams.ts","path":"./lib/oidc/util/prepareEnrollAuthenticatorParams.ts","statSize":1923,"parsedSize":1071,"gzipSize":518},{"id":6898,"label":"prepareTokenParams.ts","path":"./lib/oidc/util/prepareTokenParams.ts","statSize":6778,"parsedSize":3034,"gzipSize":1239},{"id":6635,"label":"refreshToken.ts","path":"./lib/oidc/util/refreshToken.ts","statSize":531,"parsedSize":263,"gzipSize":188},{"id":3327,"label":"sharedStorage.ts","path":"./lib/oidc/util/sharedStorage.ts","statSize":1657,"parsedSize":727,"gzipSize":315},{"id":1969,"label":"urlParams.ts","path":"./lib/oidc/util/urlParams.ts","statSize":807,"parsedSize":364,"gzipSize":257},{"id":6003,"label":"validateClaims.ts","path":"./lib/oidc/util/validateClaims.ts","statSize":1700,"parsedSize":976,"gzipSize":476},{"id":2482,"label":"validateToken.ts","path":"./lib/oidc/util/validateToken.ts","statSize":829,"parsedSize":569,"gzipSize":268}],"parsedSize":18257,"gzipSize":4908},{"id":1260,"label":"verifyToken.ts","path":"./lib/oidc/verifyToken.ts","statSize":4688,"parsedSize":1950,"gzipSize":932}],"parsedSize":95537,"gzipSize":21493},{"label":"services","path":"./lib/services","statSize":24602,"groups":[{"id":2282,"label":"AutoRenewService.ts","path":"./lib/services/AutoRenewService.ts","statSize":4939,"parsedSize":2388,"gzipSize":881},{"id":6748,"label":"LeaderElectionService.ts","path":"./lib/services/LeaderElectionService.ts","statSize":5685,"parsedSize":2393,"gzipSize":788},{"id":2546,"label":"RenewOnTabActivationService.ts","path":"./lib/services/RenewOnTabActivationService.ts","statSize":4455,"parsedSize":2152,"gzipSize":785},{"id":5550,"label":"SyncStorageService.ts","path":"./lib/services/SyncStorageService.ts","statSize":7891,"parsedSize":3907,"gzipSize":1150},{"id":2604,"label":"index.ts","path":"./lib/services/index.ts","statSize":1632,"parsedSize":749,"gzipSize":239}],"parsedSize":11589,"gzipSize":2332},{"label":"session","path":"./lib/session","statSize":6969,"groups":[{"id":3719,"label":"api.ts","path":"./lib/session/api.ts","statSize":1737,"parsedSize":1028,"gzipSize":472},{"id":2815,"label":"factory.ts","path":"./lib/session/factory.ts","statSize":418,"parsedSize":278,"gzipSize":172},{"id":8041,"label":"index.ts","path":"./lib/session/index.ts","statSize":1322,"parsedSize":749,"gzipSize":240},{"id":3980,"label":"mixin.ts","path":"./lib/session/mixin.ts","statSize":3479,"parsedSize":1356,"gzipSize":681},{"id":1249,"label":"types.ts","path":"./lib/session/types.ts","statSize":13,"parsedSize":12,"gzipSize":32}],"parsedSize":3423,"gzipSize":1266},{"label":"storage","path":"./lib/storage","statSize":16437,"groups":[{"id":5437,"label":"BaseStorageManager.ts","path":"./lib/storage/BaseStorageManager.ts","statSize":3442,"parsedSize":1567,"gzipSize":689},{"id":5763,"label":"SavedObject.ts","path":"./lib/storage/SavedObject.ts","statSize":2766,"parsedSize":1378,"gzipSize":517},{"id":9927,"label":"index.ts","path":"./lib/storage/index.ts","statSize":1852,"parsedSize":928,"gzipSize":251},{"id":265,"label":"mixin.ts","path":"./lib/storage/mixin.ts","statSize":2704,"parsedSize":1032,"gzipSize":532},{"label":"options","path":"./lib/storage/options","statSize":5660,"groups":[{"id":4863,"label":"StorageOptionsConstructor.ts","path":"./lib/storage/options/StorageOptionsConstructor.ts","statSize":3822,"parsedSize":1745,"gzipSize":768},{"id":8009,"label":"browser.ts","path":"./lib/storage/options/browser.ts","statSize":1838,"parsedSize":1031,"gzipSize":525}],"parsedSize":2776,"gzipSize":1137},{"id":5752,"label":"types.ts","path":"./lib/storage/types.ts","statSize":13,"parsedSize":12,"gzipSize":32}],"parsedSize":7693,"gzipSize":2272},{"label":"util","path":"./lib/util","statSize":10748,"groups":[{"id":3548,"label":"PromiseQueue.ts","path":"./lib/util/PromiseQueue.ts","statSize":2535,"parsedSize":1170,"gzipSize":597},{"id":146,"label":"console.ts","path":"./lib/util/console.ts","statSize":965,"parsedSize":501,"gzipSize":281},{"id":305,"label":"index.ts","path":"./lib/util/index.ts","statSize":2011,"parsedSize":1108,"gzipSize":267},{"id":8750,"label":"misc.ts","path":"./lib/util/misc.ts","statSize":883,"parsedSize":473,"gzipSize":338},{"id":3193,"label":"object.ts","path":"./lib/util/object.ts","statSize":2215,"parsedSize":1076,"gzipSize":513},{"id":4771,"label":"types.ts","path":"./lib/util/types.ts","statSize":636,"parsedSize":433,"gzipSize":183},{"id":6718,"label":"url.ts","path":"./lib/util/url.ts","statSize":1503,"parsedSize":829,"gzipSize":420}],"parsedSize":5590,"gzipSize":1934}],"parsedSize":188070,"gzipSize":40312},{"label":"node_modules","path":"./node_modules","statSize":108603,"groups":[{"label":"@babel/runtime","path":"./node_modules/@babel/runtime","statSize":25147,"groups":[{"label":"helpers","path":"./node_modules/@babel/runtime/helpers","statSize":24699,"groups":[{"id":3897,"label":"arrayLikeToArray.js","path":"./node_modules/@babel/runtime/helpers/arrayLikeToArray.js","statSize":268,"parsedSize":175,"gzipSize":147},{"id":5372,"label":"arrayWithHoles.js","path":"./node_modules/@babel/runtime/helpers/arrayWithHoles.js","statSize":177,"parsedSize":116,"gzipSize":99},{"id":3405,"label":"arrayWithoutHoles.js","path":"./node_modules/@babel/runtime/helpers/arrayWithoutHoles.js","statSize":258,"parsedSize":137,"gzipSize":120},{"id":6115,"label":"assertThisInitialized.js","path":"./node_modules/@babel/runtime/helpers/assertThisInitialized.js","statSize":276,"parsedSize":196,"gzipSize":153},{"id":7156,"label":"asyncToGenerator.js","path":"./node_modules/@babel/runtime/helpers/asyncToGenerator.js","statSize":701,"parsedSize":389,"gzipSize":244},{"id":6690,"label":"classCallCheck.js","path":"./node_modules/@babel/runtime/helpers/classCallCheck.js","statSize":229,"parsedSize":167,"gzipSize":140},{"id":3515,"label":"construct.js","path":"./node_modules/@babel/runtime/helpers/construct.js","statSize":475,"parsedSize":262,"gzipSize":197},{"id":9728,"label":"createClass.js","path":"./node_modules/@babel/runtime/helpers/createClass.js","statSize":583,"parsedSize":368,"gzipSize":242},{"id":8416,"label":"defineProperty.js","path":"./node_modules/@babel/runtime/helpers/defineProperty.js","statSize":362,"parsedSize":216,"gzipSize":169},{"id":1588,"label":"get.js","path":"./node_modules/@babel/runtime/helpers/get.js","statSize":583,"parsedSize":398,"gzipSize":240},{"id":3808,"label":"getPrototypeOf.js","path":"./node_modules/@babel/runtime/helpers/getPrototypeOf.js","statSize":412,"parsedSize":275,"gzipSize":151},{"id":1655,"label":"inherits.js","path":"./node_modules/@babel/runtime/helpers/inherits.js","statSize":536,"parsedSize":370,"gzipSize":252},{"id":4836,"label":"interopRequireDefault.js","path":"./node_modules/@babel/runtime/helpers/interopRequireDefault.js","statSize":214,"parsedSize":124,"gzipSize":98},{"id":6035,"label":"isNativeFunction.js","path":"./node_modules/@babel/runtime/helpers/isNativeFunction.js","statSize":280,"parsedSize":190,"gzipSize":152},{"id":9617,"label":"isNativeReflectConstruct.js","path":"./node_modules/@babel/runtime/helpers/isNativeReflectConstruct.js","statSize":476,"parsedSize":283,"gzipSize":170},{"id":9498,"label":"iterableToArray.js","path":"./node_modules/@babel/runtime/helpers/iterableToArray.js","statSize":260,"parsedSize":187,"gzipSize":150},{"id":8872,"label":"iterableToArrayLimit.js","path":"./node_modules/@babel/runtime/helpers/iterableToArrayLimit.js","statSize":790,"parsedSize":469,"gzipSize":311},{"id":2218,"label":"nonIterableRest.js","path":"./node_modules/@babel/runtime/helpers/nonIterableRest.js","statSize":308,"parsedSize":247,"gzipSize":194},{"id":5343,"label":"nonIterableSpread.js","path":"./node_modules/@babel/runtime/helpers/nonIterableSpread.js","statSize":307,"parsedSize":242,"gzipSize":192},{"id":215,"label":"objectWithoutProperties.js","path":"./node_modules/@babel/runtime/helpers/objectWithoutProperties.js","statSize":553,"parsedSize":320,"gzipSize":231},{"id":7071,"label":"objectWithoutPropertiesLoose.js","path":"./node_modules/@babel/runtime/helpers/objectWithoutPropertiesLoose.js","statSize":343,"parsedSize":214,"gzipSize":170},{"id":4993,"label":"possibleConstructorReturn.js","path":"./node_modules/@babel/runtime/helpers/possibleConstructorReturn.js","statSize":493,"parsedSize":285,"gzipSize":213},{"id":7061,"label":"regeneratorRuntime.js","path":"./node_modules/@babel/runtime/helpers/regeneratorRuntime.js","statSize":11029,"parsedSize":6671,"gzipSize":2479},{"id":6015,"label":"setPrototypeOf.js","path":"./node_modules/@babel/runtime/helpers/setPrototypeOf.js","statSize":400,"parsedSize":259,"gzipSize":147},{"id":7424,"label":"slicedToArray.js","path":"./node_modules/@babel/runtime/helpers/slicedToArray.js","statSize":509,"parsedSize":170,"gzipSize":140},{"id":1753,"label":"superPropBase.js","path":"./node_modules/@babel/runtime/helpers/superPropBase.js","statSize":287,"parsedSize":169,"gzipSize":144},{"id":861,"label":"toConsumableArray.js","path":"./node_modules/@babel/runtime/helpers/toConsumableArray.js","statSize":508,"parsedSize":164,"gzipSize":138},{"id":5036,"label":"toPrimitive.js","path":"./node_modules/@babel/runtime/helpers/toPrimitive.js","statSize":494,"parsedSize":351,"gzipSize":243},{"id":4062,"label":"toPropertyKey.js","path":"./node_modules/@babel/runtime/helpers/toPropertyKey.js","statSize":317,"parsedSize":171,"gzipSize":144},{"id":8698,"label":"typeof.js","path":"./node_modules/@babel/runtime/helpers/typeof.js","statSize":534,"parsedSize":368,"gzipSize":178},{"id":6116,"label":"unsupportedIterableToArray.js","path":"./node_modules/@babel/runtime/helpers/unsupportedIterableToArray.js","statSize":573,"parsedSize":363,"gzipSize":267},{"id":3496,"label":"wrapNativeSuper.js","path":"./node_modules/@babel/runtime/helpers/wrapNativeSuper.js","statSize":1164,"parsedSize":625,"gzipSize":351}],"parsedSize":14941,"gzipSize":4307},{"label":"regenerator","path":"./node_modules/@babel/runtime/regenerator","statSize":448,"groups":[{"id":4687,"label":"index.js","path":"./node_modules/@babel/runtime/regenerator/index.js","statSize":448,"parsedSize":181,"gzipSize":146}],"parsedSize":181,"gzipSize":146}],"parsedSize":15122,"gzipSize":4366},{"label":"broadcast-channel/dist/lib","path":"./node_modules/broadcast-channel/dist/lib","statSize":49419,"groups":[{"id":8991,"label":"broadcast-channel.js","path":"./node_modules/broadcast-channel/dist/lib/broadcast-channel.js","statSize":7213,"parsedSize":2719,"gzipSize":1090},{"id":8437,"label":"index.es5.js","path":"./node_modules/broadcast-channel/dist/lib/index.es5.js","statSize":559,"parsedSize":221,"gzipSize":155},{"id":5585,"label":"index.js","path":"./node_modules/broadcast-channel/dist/lib/index.js","statSize":1169,"parsedSize":724,"gzipSize":267},{"id":4781,"label":"leader-election-util.js","path":"./node_modules/broadcast-channel/dist/lib/leader-election-util.js","statSize":1724,"parsedSize":579,"gzipSize":343},{"id":683,"label":"leader-election-web-lock.js","path":"./node_modules/broadcast-channel/dist/lib/leader-election-web-lock.js","statSize":2882,"parsedSize":1417,"gzipSize":665},{"id":6550,"label":"leader-election.js","path":"./node_modules/broadcast-channel/dist/lib/leader-election.js","statSize":8955,"parsedSize":3266,"gzipSize":1111},{"id":4632,"label":"method-chooser.js","path":"./node_modules/broadcast-channel/dist/lib/method-chooser.js","statSize":2458,"parsedSize":669,"gzipSize":407},{"label":"methods","path":"./node_modules/broadcast-channel/dist/lib/methods","statSize":20779,"groups":[{"id":9122,"label":"indexed-db.js","path":"./node_modules/broadcast-channel/dist/lib/methods/indexed-db.js","statSize":11494,"parsedSize":4319,"gzipSize":1630},{"id":4924,"label":"localstorage.js","path":"./node_modules/broadcast-channel/dist/lib/methods/localstorage.js","statSize":5281,"parsedSize":2027,"gzipSize":996},{"id":2026,"label":"native.js","path":"./node_modules/broadcast-channel/dist/lib/methods/native.js","statSize":2045,"parsedSize":1158,"gzipSize":596},{"id":1574,"label":"simulate.js","path":"./node_modules/broadcast-channel/dist/lib/methods/simulate.js","statSize":1959,"parsedSize":867,"gzipSize":462}],"parsedSize":8371,"gzipSize":2771},{"id":423,"label":"options.js","path":"./node_modules/broadcast-channel/dist/lib/options.js","statSize":1566,"parsedSize":737,"gzipSize":396},{"id":6202,"label":"util.js","path":"./node_modules/broadcast-channel/dist/lib/util.js","statSize":2114,"parsedSize":827,"gzipSize":422}],"parsedSize":19530,"gzipSize":5494},{"label":"cross-fetch/dist","path":"./node_modules/cross-fetch/dist","statSize":15491,"groups":[{"id":4098,"label":"browser-ponyfill.js","path":"./node_modules/cross-fetch/dist/browser-ponyfill.js","statSize":15491,"parsedSize":8241,"gzipSize":2804}],"parsedSize":8241,"gzipSize":2804},{"label":"js-cookie/dist","path":"./node_modules/js-cookie/dist","statSize":4150,"groups":[{"id":646,"label":"js.cookie.js","path":"./node_modules/js-cookie/dist/js.cookie.js","statSize":4150,"parsedSize":1426,"gzipSize":706}],"parsedSize":1426,"gzipSize":706},{"label":"oblivious-set/dist/cjs/src","path":"./node_modules/oblivious-set/dist/cjs/src","statSize":3257,"groups":[{"id":7696,"label":"index.es5.js","path":"./node_modules/oblivious-set/dist/cjs/src/index.es5.js","statSize":1212,"parsedSize":757,"gzipSize":408},{"id":8546,"label":"index.js","path":"./node_modules/oblivious-set/dist/cjs/src/index.js","statSize":2045,"parsedSize":560,"gzipSize":353}],"parsedSize":1317,"gzipSize":650},{"label":"p-cancelable","path":"./node_modules/p-cancelable","statSize":6424,"groups":[{"id":3615,"label":"index.js","path":"./node_modules/p-cancelable/index.js","statSize":6424,"parsedSize":3179,"gzipSize":1369}],"parsedSize":3179,"gzipSize":1369},{"label":"tiny-emitter","path":"./node_modules/tiny-emitter","statSize":1565,"groups":[{"id":4279,"label":"index.js","path":"./node_modules/tiny-emitter/index.js","statSize":1565,"parsedSize":586,"gzipSize":326}],"parsedSize":586,"gzipSize":326},{"label":"unload/dist/es","path":"./node_modules/unload/dist/es","statSize":3150,"groups":[{"id":4810,"label":"index.js + 2 modules (concatenated)","path":"./node_modules/unload/dist/es/index.js + 2 modules (concatenated)","statSize":3150,"parsedSize":1286,"gzipSize":527,"concatenated":true,"groups":[{"label":"node_modules/unload/dist/es","path":"./node_modules/unload/dist/es/index.js + 2 modules (concatenated)/node_modules/unload/dist/es","statSize":3150,"groups":[{"id":null,"label":"index.js","path":"./node_modules/unload/dist/es/index.js + 2 modules (concatenated)/node_modules/unload/dist/es/index.js","statSize":1227,"parsedSize":500,"gzipSize":205,"inaccurateSizes":true},{"id":null,"label":"node.js","path":"./node_modules/unload/dist/es/index.js + 2 modules (concatenated)/node_modules/unload/dist/es/node.js","statSize":695,"parsedSize":283,"gzipSize":116,"inaccurateSizes":true},{"id":null,"label":"browser.js","path":"./node_modules/unload/dist/es/index.js + 2 modules (concatenated)/node_modules/unload/dist/es/browser.js","statSize":1228,"parsedSize":501,"gzipSize":205,"inaccurateSizes":true}],"parsedSize":1286,"gzipSize":527,"inaccurateSizes":true}]}],"parsedSize":1286,"gzipSize":527}],"parsedSize":50687,"gzipSize":14537}]}];
       window.defaultSizes = "stat";
     </script>
   </body>