@sesamy/sesamy-js 1.124.0 → 1.125.0

package/dist/auth0-plugin.mjs

@@ -356,26 +356,26 @@ var a = n(r((function(e, n) {
 	constructor(t, n, r) {
 		super(t, n), this.mfa_token = r, Object.setPrototypeOf(this, e.prototype);
 	}
-}, te = class e extends l {
+}, g = class e extends l {
 	constructor(t, n) {
-		super("missing_refresh_token", `Missing Refresh Token (audience: '${_(t, ["default"])}', scope: '${_(n)}')`), this.audience = t, this.scope = n, Object.setPrototypeOf(this, e.prototype);
+		super("missing_refresh_token", `Missing Refresh Token (audience: '${v(t, ["default"])}', scope: '${v(n)}')`), this.audience = t, this.scope = n, Object.setPrototypeOf(this, e.prototype);
 	}
-}, g = class e extends l {
+}, _ = class e extends l {
 	constructor(t, n) {
-		super("missing_scopes", `Missing requested scopes after refresh (audience: '${_(t, ["default"])}', missing scope: '${_(n)}')`), this.audience = t, this.scope = n, Object.setPrototypeOf(this, e.prototype);
+		super("missing_scopes", `Missing requested scopes after refresh (audience: '${v(t, ["default"])}', missing scope: '${v(n)}')`), this.audience = t, this.scope = n, Object.setPrototypeOf(this, e.prototype);
 	}
-}, ne = class e extends l {
+}, te = class e extends l {
 	constructor(t) {
 		super("use_dpop_nonce", "Server rejected DPoP proof: wrong nonce"), this.newDpopNonce = t, Object.setPrototypeOf(this, e.prototype);
 	}
 };
-function _(e, t = []) {
+function v(e, t = []) {
 	return e && !t.includes(e) ? e : "";
 }
-var v = () => window.crypto, y = () => {
+var y = () => window.crypto, b = () => {
 	let e = "";
-	return Array.from(v().getRandomValues(new Uint8Array(43))).forEach(((t) => e += "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz-_~."[t % 66])), e;
-}, b = (e) => btoa(e), re = [
+	return Array.from(y().getRandomValues(new Uint8Array(43))).forEach(((t) => e += "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz-_~."[t % 66])), e;
+}, x = (e) => btoa(e), ne = [
 	{
 		key: "name",
 		type: ["string"]
@@ -388,13 +388,13 @@ var v = () => window.crypto, y = () => {
 		key: "env",
 		type: ["object"]
 	}
-], ie = (e) => Object.keys(e).reduce(((t, n) => {
-	let r = re.find(((e) => e.key === n));
+], re = (e) => Object.keys(e).reduce(((t, n) => {
+	let r = ne.find(((e) => e.key === n));
 	return r && r.type.includes(typeof e[n]) && (t[n] = e[n]), t;
-}), {}), x = (t) => {
+}), {}), S = (t) => {
 	var { clientId: n } = t, r = e(t, ["clientId"]);
 	return new URLSearchParams(((e) => Object.keys(e).filter(((t) => e[t] !== void 0)).reduce(((t, n) => Object.assign(Object.assign({}, t), { [n]: e[n] })), {}))(Object.assign({ client_id: n }, r))).toString();
-}, ae = async (e) => await v().subtle.digest({ name: "SHA-256" }, new TextEncoder().encode(e)), oe = (e) => ((e) => decodeURIComponent(atob(e).split("").map(((e) => "%" + ("00" + e.charCodeAt(0).toString(16)).slice(-2))).join("")))(e.replace(/_/g, "/").replace(/-/g, "+")), se = (e) => {
+}, ie = async (e) => await y().subtle.digest({ name: "SHA-256" }, new TextEncoder().encode(e)), ae = (e) => ((e) => decodeURIComponent(atob(e).split("").map(((e) => "%" + ("00" + e.charCodeAt(0).toString(16)).slice(-2))).join("")))(e.replace(/_/g, "/").replace(/-/g, "+")), oe = (e) => {
 	let t = new Uint8Array(e);
 	return ((e) => {
 		let t = {
@@ -404,109 +404,109 @@ var v = () => window.crypto, y = () => {
 		};
 		return e.replace(/[+/=]/g, ((e) => t[e]));
 	})(window.btoa(String.fromCharCode(...Array.from(t))));
-}, ce = new TextEncoder(), le = new TextDecoder();
-function S(e) {
-	return typeof e == "string" ? ce.encode(e) : le.decode(e);
+}, se = new TextEncoder(), ce = new TextDecoder();
+function C(e) {
+	return typeof e == "string" ? se.encode(e) : ce.decode(e);
 }
-function ue(e) {
-	if (typeof e.modulusLength != "number" || e.modulusLength < 2048) throw new fe(`${e.name} modulusLength must be at least 2048 bits`);
+function le(e) {
+	if (typeof e.modulusLength != "number" || e.modulusLength < 2048) throw new de(`${e.name} modulusLength must be at least 2048 bits`);
 }
-async function de(e, t, n) {
+async function ue(e, t, n) {
 	if (!1 === n.usages.includes("sign")) throw TypeError("private CryptoKey instances used for signing assertions must include \"sign\" in their \"usages\"");
-	let r = `${w(S(JSON.stringify(e)))}.${w(S(JSON.stringify(t)))}`;
-	return `${r}.${w(await crypto.subtle.sign(function(e) {
+	let r = `${T(C(JSON.stringify(e)))}.${T(C(JSON.stringify(t)))}`;
+	return `${r}.${T(await crypto.subtle.sign(function(e) {
 		switch (e.algorithm.name) {
 			case "ECDSA": return {
 				name: e.algorithm.name,
 				hash: "SHA-256"
 			};
-			case "RSA-PSS": return ue(e.algorithm), {
+			case "RSA-PSS": return le(e.algorithm), {
 				name: e.algorithm.name,
 				saltLength: 32
 			};
-			case "RSASSA-PKCS1-v1_5": return ue(e.algorithm), { name: e.algorithm.name };
+			case "RSASSA-PKCS1-v1_5": return le(e.algorithm), { name: e.algorithm.name };
 			case "Ed25519": return { name: e.algorithm.name };
 		}
-		throw new T();
-	}(n), n, S(r)))}`;
+		throw new E();
+	}(n), n, C(r)))}`;
 }
-var C;
-if (Uint8Array.prototype.toBase64) C = (e) => (e instanceof ArrayBuffer && (e = new Uint8Array(e)), e.toBase64({
+var w;
+if (Uint8Array.prototype.toBase64) w = (e) => (e instanceof ArrayBuffer && (e = new Uint8Array(e)), e.toBase64({
 	alphabet: "base64url",
 	omitPadding: !0
 }));
 else {
 	let e = 32768;
-	C = (t) => {
+	w = (t) => {
 		t instanceof ArrayBuffer && (t = new Uint8Array(t));
 		let n = [];
 		for (let r = 0; r < t.byteLength; r += e) n.push(String.fromCharCode.apply(null, t.subarray(r, r + e)));
 		return btoa(n.join("")).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
 	};
 }
-function w(e) {
-	return C(e);
+function T(e) {
+	return w(e);
 }
-var T = class extends Error {
+var E = class extends Error {
 	constructor(e) {
 		var t;
 		super(e ?? "operation not supported"), this.name = this.constructor.name, (t = Error.captureStackTrace) == null || t.call(Error, this, this.constructor);
 	}
-}, fe = class extends Error {
+}, de = class extends Error {
 	constructor(e) {
 		var t;
 		super(e), this.name = this.constructor.name, (t = Error.captureStackTrace) == null || t.call(Error, this, this.constructor);
 	}
 };
-function pe(e) {
+function fe(e) {
 	switch (e.algorithm.name) {
 		case "RSA-PSS": return function(e) {
 			if (e.algorithm.hash.name === "SHA-256") return "PS256";
-			throw new T("unsupported RsaHashedKeyAlgorithm hash name");
+			throw new E("unsupported RsaHashedKeyAlgorithm hash name");
 		}(e);
 		case "RSASSA-PKCS1-v1_5": return function(e) {
 			if (e.algorithm.hash.name === "SHA-256") return "RS256";
-			throw new T("unsupported RsaHashedKeyAlgorithm hash name");
+			throw new E("unsupported RsaHashedKeyAlgorithm hash name");
 		}(e);
 		case "ECDSA": return function(e) {
 			if (e.algorithm.namedCurve === "P-256") return "ES256";
-			throw new T("unsupported EcKeyAlgorithm namedCurve");
+			throw new E("unsupported EcKeyAlgorithm namedCurve");
 		}(e);
 		case "Ed25519": return "Ed25519";
-		default: throw new T("unsupported CryptoKey algorithm name");
+		default: throw new E("unsupported CryptoKey algorithm name");
 	}
 }
-function me(e) {
+function pe(e) {
 	return e instanceof CryptoKey;
 }
-function he(e) {
-	return me(e) && e.type === "public";
+function me(e) {
+	return pe(e) && e.type === "public";
 }
-async function ge(e, t, n, r, i, a) {
+async function he(e, t, n, r, i, a) {
 	let o = e?.privateKey, s = e?.publicKey;
-	if (!me(c = o) || c.type !== "private") throw TypeError("\"keypair.privateKey\" must be a private CryptoKey");
+	if (!pe(c = o) || c.type !== "private") throw TypeError("\"keypair.privateKey\" must be a private CryptoKey");
 	var c;
-	if (!he(s)) throw TypeError("\"keypair.publicKey\" must be a public CryptoKey");
+	if (!me(s)) throw TypeError("\"keypair.publicKey\" must be a public CryptoKey");
 	if (!0 !== s.extractable) throw TypeError("\"keypair.publicKey.extractable\" must be true");
 	if (typeof t != "string") throw TypeError("\"htu\" must be a string");
 	if (typeof n != "string") throw TypeError("\"htm\" must be a string");
 	if (r !== void 0 && typeof r != "string") throw TypeError("\"nonce\" must be a string or undefined");
 	if (i !== void 0 && typeof i != "string") throw TypeError("\"accessToken\" must be a string or undefined");
 	if (a !== void 0 && (typeof a != "object" || !a || Array.isArray(a))) throw TypeError("\"additional\" must be an object");
-	return de({
-		alg: pe(o),
+	return ue({
+		alg: fe(o),
 		typ: "dpop+jwt",
-		jwk: await _e(s)
+		jwk: await ge(s)
 	}, Object.assign(Object.assign({}, a), {
 		iat: Math.floor(Date.now() / 1e3),
 		jti: crypto.randomUUID(),
 		htm: n,
 		nonce: r,
 		htu: t,
-		ath: i ? w(await crypto.subtle.digest("SHA-256", S(i))) : void 0
+		ath: i ? T(await crypto.subtle.digest("SHA-256", C(i))) : void 0
 	}), o);
 }
-async function _e(e) {
+async function ge(e) {
 	let { kty: t, e: n, n: r, x: i, y: a, crv: o } = await crypto.subtle.exportKey("jwk", e);
 	return {
 		kty: t,
@@ -517,12 +517,12 @@ async function _e(e) {
 		y: a
 	};
 }
-var ve = [
+var _e = [
 	"authorization_code",
 	"refresh_token",
 	"urn:ietf:params:oauth:grant-type:token-exchange"
 ];
-function ye() {
+function ve() {
 	return async function(e, t) {
 		var n;
 		let r;
@@ -561,16 +561,16 @@ function ye() {
 			case "Ed25519":
 				r = { name: "Ed25519" };
 				break;
-			default: throw new T();
+			default: throw new E();
 		}
 		return crypto.subtle.generateKey(r, (n = t?.extractable) != null && n, ["sign", "verify"]);
 	}("ES256", { extractable: !1 });
 }
-function be(e) {
+function ye(e) {
 	return async function(e) {
-		if (!he(e)) throw TypeError("\"publicKey\" must be a public CryptoKey");
+		if (!me(e)) throw TypeError("\"publicKey\" must be a public CryptoKey");
 		if (!0 !== e.extractable) throw TypeError("\"publicKey.extractable\" must be true");
-		let t = await _e(e), n;
+		let t = await ge(e), n;
 		switch (t.kty) {
 			case "EC":
 				n = {
@@ -594,18 +594,18 @@ function be(e) {
 					n: t.n
 				};
 				break;
-			default: throw new T("unsupported JWK kty");
+			default: throw new E("unsupported JWK kty");
 		}
-		return w(await crypto.subtle.digest({ name: "SHA-256" }, S(JSON.stringify(n))));
+		return T(await crypto.subtle.digest({ name: "SHA-256" }, C(JSON.stringify(n))));
 	}(e.publicKey);
 }
-function xe({ keyPair: e, url: t, method: n, nonce: r, accessToken: i }) {
-	return ge(e, function(e) {
+function be({ keyPair: e, url: t, method: n, nonce: r, accessToken: i }) {
+	return he(e, function(e) {
 		let t = new URL(e);
 		return t.search = "", t.hash = "", t.href;
 	}(t), n, r, i);
 }
-var Se = async (e, t) => {
+var xe = async (e, t) => {
 	let n = await fetch(e, t);
 	return {
 		ok: n.ok,
@@ -613,16 +613,16 @@ var Se = async (e, t) => {
 		headers: (r = n.headers, [...r].reduce(((e, [t, n]) => (e[t] = n, e)), {}))
 	};
 	var r;
-}, Ce = async (e, t, n) => {
+}, Se = async (e, t, n) => {
 	let r = new AbortController(), i;
-	return t.signal = r.signal, Promise.race([Se(e, t), new Promise(((e, t) => {
+	return t.signal = r.signal, Promise.race([xe(e, t), new Promise(((e, t) => {
 		i = setTimeout((() => {
 			r.abort(), t(/* @__PURE__ */ Error("Timeout when executing 'fetch'"));
 		}), n);
 	}))]).finally((() => {
 		clearTimeout(i);
 	}));
-}, we = async (e, t, n, r, i, a, o, s) => {
+}, Ce = async (e, t, n, r, i, a, o, s) => {
 	return c = {
 		auth: {
 			audience: t,
@@ -640,8 +640,8 @@ var Se = async (e, t) => {
 		}, l.postMessage(c, [n.port2]);
 	}));
 	var c, l;
-}, Te = async (e, t, n, r, i, a, o = 1e4, s) => i ? we(e, t, n, r, o, i, a, s) : Ce(e, r, o);
-async function Ee(t, n, r, i, a, o, s, c, u, d) {
+}, we = async (e, t, n, r, i, a, o = 1e4, s) => i ? Ce(e, t, n, r, o, i, a, s) : Se(e, r, o);
+async function Te(t, n, r, i, a, o, s, c, u, d) {
 	if (u) {
 		let e = await u.generateProof({
 			url: t,
@@ -652,26 +652,26 @@ async function Ee(t, n, r, i, a, o, s, c, u, d) {
 	}
 	let f, p = null;
 	for (let e = 0; e < 3; e++) try {
-		f = await Te(t, r, i, a, o, s, n, c), p = null;
+		f = await we(t, r, i, a, o, s, n, c), p = null;
 		break;
 	} catch (e) {
 		p = e;
 	}
 	if (p) throw p;
-	let m = f.json, { error: h, error_description: g } = m, _ = e(m, ["error", "error_description"]), { headers: v, ok: y } = f, b;
-	if (u && (b = v["dpop-nonce"], b && await u.setNonce(b)), !y) {
-		let e = g || `HTTP error. Unable to fetch ${t}`;
-		if (h === "mfa_required") throw new ee(h, e, _.mfa_token);
-		if (h === "missing_refresh_token") throw new te(r, i);
+	let m = f.json, { error: h, error_description: _ } = m, v = e(m, ["error", "error_description"]), { headers: y, ok: b } = f, x;
+	if (u && (x = y["dpop-nonce"], x && await u.setNonce(x)), !b) {
+		let e = _ || `HTTP error. Unable to fetch ${t}`;
+		if (h === "mfa_required") throw new ee(h, e, v.mfa_token);
+		if (h === "missing_refresh_token") throw new g(r, i);
 		if (h === "use_dpop_nonce") {
-			if (!u || !b || d) throw new ne(b);
-			return Ee(t, n, r, i, a, o, s, c, u, !0);
+			if (!u || !x || d) throw new te(x);
+			return Te(t, n, r, i, a, o, s, c, u, !0);
 		}
 		throw new l(h || "request_error", e);
 	}
-	return _;
+	return v;
 }
-async function De(t, n) {
+async function Ee(t, n) {
 	var { baseUrl: r, timeout: i, audience: a, scope: o, auth0Client: c, useFormData: l, useMrrt: u, dpop: d } = t, f = e(t, [
 		"baseUrl",
 		"timeout",
@@ -685,24 +685,24 @@ async function De(t, n) {
 	let p = f.grant_type === "urn:ietf:params:oauth:grant-type:token-exchange", m = f.grant_type === "refresh_token" && u, h = Object.assign(Object.assign(Object.assign(Object.assign({}, f), p && a && { audience: a }), p && o && { scope: o }), m && {
 		audience: a,
 		scope: o
-	}), ee = l ? x(h) : JSON.stringify(h), te = (g = f.grant_type, ve.includes(g));
-	var g;
-	return await Ee(`${r}/oauth/token`, i, a || "default", o, {
+	}), ee = l ? S(h) : JSON.stringify(h), g = (_ = f.grant_type, _e.includes(_));
+	var _;
+	return await Te(`${r}/oauth/token`, i, a || "default", o, {
 		method: "POST",
 		body: ee,
 		headers: {
 			"Content-Type": l ? "application/x-www-form-urlencoded" : "application/json",
-			"Auth0-Client": btoa(JSON.stringify(ie(c || s)))
+			"Auth0-Client": btoa(JSON.stringify(re(c || s)))
 		}
-	}, n, l, u, te ? d : void 0);
+	}, n, l, u, g ? d : void 0);
 }
-var E = (...e) => {
+var D = (...e) => {
 	return (t = e.filter(Boolean).join(" ").trim().split(/\s+/), Array.from(new Set(t))).join(" ");
 	var t;
-}, D = (e, t, n) => {
+}, O = (e, t, n) => {
 	let r;
-	return n && (r = e[n]), r ||= e.default, E(r, t);
-}, O = class e {
+	return n && (r = e[n]), r ||= e.default, D(r, t);
+}, k = class e {
 	constructor(e, t = "@@auth0spajs@@", n) {
 		this.prefix = t, this.suffix = n, this.clientId = e.clientId, this.scope = e.scope, this.audience = e.audience;
 	}
@@ -731,7 +731,7 @@ var E = (...e) => {
 			clientId: i
 		});
 	}
-}, Oe = class {
+}, De = class {
 	set(e, t) {
 		localStorage.setItem(e, JSON.stringify(t));
 	}
@@ -749,7 +749,7 @@ var E = (...e) => {
 	allKeys() {
 		return Object.keys(window.localStorage).filter(((e) => e.startsWith("@@auth0spajs@@")));
 	}
-}, ke = class {
+}, Oe = class {
 	constructor() {
 		this.enclosedCache = function() {
 			let e = {};
@@ -768,7 +768,7 @@ var E = (...e) => {
 			};
 		}();
 	}
-}, Ae = class {
+}, ke = class {
 	constructor(e, t, n) {
 		this.cache = e, this.keyManifest = t, this.nowProvider = n || c;
 	}
@@ -817,7 +817,7 @@ var E = (...e) => {
 		};
 	}
 	async set(e) {
-		let t = new O({
+		let t = new k({
 			clientId: e.client_id,
 			scope: e.scope,
 			audience: e.audience
@@ -825,7 +825,7 @@ var E = (...e) => {
 		await this.cache.set(t.toKey(), n), await this.keyManifest?.add(t.toKey());
 	}
 	async remove(e, t, n) {
-		let r = new O({
+		let r = new k({
 			clientId: e,
 			scope: n,
 			audience: t
@@ -849,17 +849,17 @@ var E = (...e) => {
 		return this.keyManifest ? (await this.keyManifest.get())?.keys : this.cache.allKeys ? this.cache.allKeys() : void 0;
 	}
 	getIdTokenCacheKey(e) {
-		return new O({ clientId: e }, "@@auth0spajs@@", "@@user@@").toKey();
+		return new k({ clientId: e }, "@@auth0spajs@@", "@@user@@").toKey();
 	}
 	matchExistingCacheKey(e, t) {
 		return t.filter(((t) => {
-			let n = O.fromKey(t), r = new Set(n.scope && n.scope.split(" ")), i = e.scope?.split(" ") || [], a = n.scope && i.reduce(((e, t) => e && r.has(t)), !0);
+			let n = k.fromKey(t), r = new Set(n.scope && n.scope.split(" ")), i = e.scope?.split(" ") || [], a = n.scope && i.reduce(((e, t) => e && r.has(t)), !0);
 			return n.prefix === "@@auth0spajs@@" && n.clientId === e.clientId && n.audience === e.audience && a;
 		}))[0];
 	}
 	async getEntryWithRefreshToken(e, t) {
 		for (let n of t) {
-			let t = O.fromKey(n);
+			let t = k.fromKey(n);
 			if (t.prefix === "@@auth0spajs@@" && t.clientId === e.clientId) {
 				let t = await this.cache.get(n);
 				if (t?.body?.refresh_token) return this.modifiedCachedEntry(t, e);
@@ -876,7 +876,7 @@ var E = (...e) => {
 			}
 		}
 	}
-}, je = class {
+}, Ae = class {
 	constructor(e, t, n) {
 		this.storage = e, this.clientId = t, this.cookieDomain = n, this.storageKey = `a0.spajs.txs.${this.clientId}`;
 	}
@@ -892,21 +892,21 @@ var E = (...e) => {
 	remove() {
 		this.storage.remove(this.storageKey, { cookieDomain: this.cookieDomain });
 	}
-}, k = (e) => typeof e == "number", Me = /* @__PURE__ */ "iss.aud.exp.nbf.iat.jti.azp.nonce.auth_time.at_hash.c_hash.acr.amr.sub_jwk.cnf.sip_from_tag.sip_date.sip_callid.sip_cseq_num.sip_via_branch.orig.dest.mky.events.toe.txn.rph.sid.vot.vtm".split("."), Ne = (e) => {
+}, A = (e) => typeof e == "number", je = /* @__PURE__ */ "iss.aud.exp.nbf.iat.jti.azp.nonce.auth_time.at_hash.c_hash.acr.amr.sub_jwk.cnf.sip_from_tag.sip_date.sip_callid.sip_cseq_num.sip_via_branch.orig.dest.mky.events.toe.txn.rph.sid.vot.vtm".split("."), Me = (e) => {
 	if (!e.id_token) throw Error("ID token is required but missing");
 	let t = ((e) => {
 		let t = e.split("."), [n, r, i] = t;
 		if (t.length !== 3 || !n || !r || !i) throw Error("ID token could not be decoded");
-		let a = JSON.parse(oe(r)), o = { __raw: e }, s = {};
+		let a = JSON.parse(ae(r)), o = { __raw: e }, s = {};
 		return Object.keys(a).forEach(((e) => {
-			o[e] = a[e], Me.includes(e) || (s[e] = a[e]);
+			o[e] = a[e], je.includes(e) || (s[e] = a[e]);
 		})), {
 			encoded: {
 				header: n,
 				payload: r,
 				signature: i
 			},
-			header: JSON.parse(oe(n)),
+			header: JSON.parse(ae(n)),
 			claims: o,
 			user: s
 		};
@@ -927,16 +927,16 @@ var E = (...e) => {
 		if (!t.claims.nonce) throw Error("Nonce (nonce) claim must be a string present in the ID token");
 		if (t.claims.nonce !== e.nonce) throw Error(`Nonce (nonce) claim mismatch in the ID token; expected "${e.nonce}", found "${t.claims.nonce}"`);
 	}
-	if (e.max_age && !k(t.claims.auth_time)) throw Error("Authentication Time (auth_time) claim must be a number present in the ID token when Max Age (max_age) is specified");
-	if (t.claims.exp == null || !k(t.claims.exp)) throw Error("Expiration Time (exp) claim must be a number present in the ID token");
-	if (!k(t.claims.iat)) throw Error("Issued At (iat) claim must be a number present in the ID token");
+	if (e.max_age && !A(t.claims.auth_time)) throw Error("Authentication Time (auth_time) claim must be a number present in the ID token when Max Age (max_age) is specified");
+	if (t.claims.exp == null || !A(t.claims.exp)) throw Error("Expiration Time (exp) claim must be a number present in the ID token");
+	if (!A(t.claims.iat)) throw Error("Issued At (iat) claim must be a number present in the ID token");
 	let n = e.leeway || 60, r = new Date(e.now || Date.now()), i = /* @__PURE__ */ new Date(0);
 	if (i.setUTCSeconds(t.claims.exp + n), r > i) throw Error(`Expiration Time (exp) claim error in the ID token; current time (${r}) is after expiration time (${i})`);
-	if (t.claims.nbf != null && k(t.claims.nbf)) {
+	if (t.claims.nbf != null && A(t.claims.nbf)) {
 		let e = /* @__PURE__ */ new Date(0);
 		if (e.setUTCSeconds(t.claims.nbf - n), r < e) throw Error(`Not Before time (nbf) claim in the ID token indicates that this token can't be used just yet. Current time (${r}) is before ${e}`);
 	}
-	if (t.claims.auth_time != null && k(t.claims.auth_time)) {
+	if (t.claims.auth_time != null && A(t.claims.auth_time)) {
 		let i = /* @__PURE__ */ new Date(0);
 		if (i.setUTCSeconds(parseInt(t.claims.auth_time) + e.max_age + n), r > i) throw Error(`Authentication Time (auth_time) claim in the ID token indicates that too much time has passed since the last end-user authentication. Current time (${r}) is after last auth at ${i}`);
 	}
@@ -953,7 +953,7 @@ var E = (...e) => {
 		}
 	}
 	return t;
-}, A = r((function(e, n) {
+}, j = r((function(e, n) {
 	var r = t && t.__assign || function() {
 		return r = Object.assign || function(e) {
 			for (var t, n = 1, r = arguments.length; n < r; n++) for (var i in t = arguments[n]) Object.prototype.hasOwnProperty.call(t, i) && (e[i] = t[i]);
@@ -996,10 +996,10 @@ var E = (...e) => {
 		c(e, "", r(r({}, t), { expires: -1 }));
 	};
 }));
-n(A), A.encode, A.parse, A.getAll;
-var Pe = A.get, Fe = A.set, Ie = A.remove, j = {
+n(j), j.encode, j.parse, j.getAll;
+var Ne = j.get, Pe = j.set, Fe = j.remove, M = {
 	get(e) {
-		let t = Pe(e);
+		let t = Ne(e);
 		if (t !== void 0) return JSON.parse(t);
 	},
 	save(e, t, n) {
@@ -1007,25 +1007,25 @@ var Pe = A.get, Fe = A.set, Ie = A.remove, j = {
 		window.location.protocol === "https:" && (r = {
 			secure: !0,
 			sameSite: "none"
-		}), n != null && n.daysUntilExpire && (r.expires = n.daysUntilExpire), n != null && n.cookieDomain && (r.domain = n.cookieDomain), Fe(e, JSON.stringify(t), r);
+		}), n != null && n.daysUntilExpire && (r.expires = n.daysUntilExpire), n != null && n.cookieDomain && (r.domain = n.cookieDomain), Pe(e, JSON.stringify(t), r);
 	},
 	remove(e, t) {
 		let n = {};
-		t != null && t.cookieDomain && (n.domain = t.cookieDomain), Ie(e, n);
+		t != null && t.cookieDomain && (n.domain = t.cookieDomain), Fe(e, n);
 	}
-}, Le = {
+}, Ie = {
 	get(e) {
-		return j.get(e) || j.get(`_legacy_${e}`);
+		return M.get(e) || M.get(`_legacy_${e}`);
 	},
 	save(e, t, n) {
 		let r = {};
-		window.location.protocol === "https:" && (r = { secure: !0 }), n != null && n.daysUntilExpire && (r.expires = n.daysUntilExpire), n != null && n.cookieDomain && (r.domain = n.cookieDomain), Fe(`_legacy_${e}`, JSON.stringify(t), r), j.save(e, t, n);
+		window.location.protocol === "https:" && (r = { secure: !0 }), n != null && n.daysUntilExpire && (r.expires = n.daysUntilExpire), n != null && n.cookieDomain && (r.domain = n.cookieDomain), Pe(`_legacy_${e}`, JSON.stringify(t), r), M.save(e, t, n);
 	},
 	remove(e, t) {
 		let n = {};
-		t != null && t.cookieDomain && (n.domain = t.cookieDomain), Ie(e, n), j.remove(e, t), j.remove(`_legacy_${e}`, t);
+		t != null && t.cookieDomain && (n.domain = t.cookieDomain), Fe(e, n), M.remove(e, t), M.remove(`_legacy_${e}`, t);
 	}
-}, Re = {
+}, Le = {
 	get(e) {
 		if (typeof sessionStorage > "u") return;
 		let t = sessionStorage.getItem(e);
@@ -1037,11 +1037,11 @@ var Pe = A.get, Fe = A.set, Ie = A.remove, j = {
 	remove(e) {
 		sessionStorage.removeItem(e);
 	}
-}, M;
+}, N;
 (function(e) {
 	e.Code = "code", e.ConnectCode = "connect_code";
-})(M ||= {});
-function ze(e, t, n) {
+})(N ||= {});
+function Re(e, t, n) {
 	var r = t === void 0 ? null : t, i = function(e, t) {
 		var n = atob(e);
 		if (t) {
@@ -1052,12 +1052,12 @@ function ze(e, t, n) {
 	}(e, n !== void 0 && n), a = i.indexOf("\n", 10) + 1, o = i.substring(a) + (r ? "//# sourceMappingURL=" + r : ""), s = new Blob([o], { type: "application/javascript" });
 	return URL.createObjectURL(s);
 }
-var Be, Ve, He, Ue, We = (Be = "Lyogcm9sbHVwLXBsdWdpbi13ZWItd29ya2VyLWxvYWRlciAqLwohZnVuY3Rpb24oKXsidXNlIHN0cmljdCI7Y2xhc3MgZSBleHRlbmRzIEVycm9ye2NvbnN0cnVjdG9yKHQscil7c3VwZXIociksdGhpcy5lcnJvcj10LHRoaXMuZXJyb3JfZGVzY3JpcHRpb249cixPYmplY3Quc2V0UHJvdG90eXBlT2YodGhpcyxlLnByb3RvdHlwZSl9c3RhdGljIGZyb21QYXlsb2FkKHtlcnJvcjp0LGVycm9yX2Rlc2NyaXB0aW9uOnJ9KXtyZXR1cm4gbmV3IGUodCxyKX19Y2xhc3MgdCBleHRlbmRzIGV7Y29uc3RydWN0b3IoZSxzKXtzdXBlcigibWlzc2luZ19yZWZyZXNoX3Rva2VuIixgTWlzc2luZyBSZWZyZXNoIFRva2VuIChhdWRpZW5jZTogJyR7cihlLFsiZGVmYXVsdCJdKX0nLCBzY29wZTogJyR7cihzKX0nKWApLHRoaXMuYXVkaWVuY2U9ZSx0aGlzLnNjb3BlPXMsT2JqZWN0LnNldFByb3RvdHlwZU9mKHRoaXMsdC5wcm90b3R5cGUpfX1mdW5jdGlvbiByKGUsdD1bXSl7cmV0dXJuIGUmJiF0LmluY2x1ZGVzKGUpP2U6IiJ9ImZ1bmN0aW9uIj09dHlwZW9mIFN1cHByZXNzZWRFcnJvciYmU3VwcHJlc3NlZEVycm9yO2NvbnN0IHM9ZT0+e3ZhcntjbGllbnRJZDp0fT1lLHI9ZnVuY3Rpb24oZSx0KXt2YXIgcj17fTtmb3IodmFyIHMgaW4gZSlPYmplY3QucHJvdG90eXBlLmhhc093blByb3BlcnR5LmNhbGwoZSxzKSYmdC5pbmRleE9mKHMpPDAmJihyW3NdPWVbc10pO2lmKG51bGwhPWUmJiJmdW5jdGlvbiI9PXR5cGVvZiBPYmplY3QuZ2V0T3duUHJvcGVydHlTeW1ib2xzKXt2YXIgbz0wO2ZvcihzPU9iamVjdC5nZXRPd25Qcm9wZXJ0eVN5bWJvbHMoZSk7bzxzLmxlbmd0aDtvKyspdC5pbmRleE9mKHNbb10pPDAmJk9iamVjdC5wcm90b3R5cGUucHJvcGVydHlJc0VudW1lcmFibGUuY2FsbChlLHNbb10pJiYocltzW29dXT1lW3Nbb11dKX1yZXR1cm4gcn0oZSxbImNsaWVudElkIl0pO3JldHVybiBuZXcgVVJMU2VhcmNoUGFyYW1zKChlPT5PYmplY3Qua2V5cyhlKS5maWx0ZXIoKHQ9PnZvaWQgMCE9PWVbdF0pKS5yZWR1Y2UoKCh0LHIpPT5PYmplY3QuYXNzaWduKE9iamVjdC5hc3NpZ24oe30sdCkse1tyXTplW3JdfSkpLHt9KSkoT2JqZWN0LmFzc2lnbih7Y2xpZW50X2lkOnR9LHIpKSkudG9TdHJpbmcoKX07bGV0IG89e307Y29uc3Qgbj0oZSx0KT0+YCR7ZX18JHt0fWA7YWRkRXZlbnRMaXN0ZW5lcigibWVzc2FnZSIsKGFzeW5jKHtkYXRhOnt0aW1lb3V0OmUsYXV0aDpyLGZldGNoVXJsOmksZmV0Y2hPcHRpb25zOmMsdXNlRm9ybURhdGE6YSx1c2VNcnJ0OmZ9LHBvcnRzOltwXX0pPT57bGV0IGgsdSxsPXt9O2NvbnN0e2F1ZGllbmNlOmQsc2NvcGU6eX09cnx8e307dHJ5e2NvbnN0IHI9YT8oZT0+e2NvbnN0IHQ9bmV3IFVSTFNlYXJjaFBhcmFtcyhlKSxyPXt9O3JldHVybiB0LmZvckVhY2goKChlLHQpPT57clt0XT1lfSkpLHJ9KShjLmJvZHkpOkpTT04ucGFyc2UoYy5ib2R5KTtpZighci5yZWZyZXNoX3Rva2VuJiYicmVmcmVzaF90b2tlbiI9PT1yLmdyYW50X3R5cGUpe2lmKHU9KChlLHQpPT5vW24oZSx0KV0pKGQseSksIXUmJmYpe2NvbnN0IGU9by5sYXRlc3RfcmVmcmVzaF90b2tlbix0PSgoZSx0KT0+e2NvbnN0IHI9T2JqZWN0LmtleXMobykuZmluZCgocj0+e2lmKCJsYXRlc3RfcmVmcmVzaF90b2tlbiIhPT1yKXtjb25zdCBzPSgoZSx0KT0+dC5zdGFydHNXaXRoKGAke2V9fGApKSh0LHIpLG89ci5zcGxpdCgifCIpWzFdLnNwbGl0KCIgIiksbj1lLnNwbGl0KCIgIikuZXZlcnkoKGU9Pm8uaW5jbHVkZXMoZSkpKTtyZXR1cm4gcyYmbn19KSk7cmV0dXJuISFyfSkoeSxkKTtlJiYhdCYmKHU9ZSl9aWYoIXUpdGhyb3cgbmV3IHQoZCx5KTtjLmJvZHk9YT9zKE9iamVjdC5hc3NpZ24oT2JqZWN0LmFzc2lnbih7fSxyKSx7cmVmcmVzaF90b2tlbjp1fSkpOkpTT04uc3RyaW5naWZ5KE9iamVjdC5hc3NpZ24oT2JqZWN0LmFzc2lnbih7fSxyKSx7cmVmcmVzaF90b2tlbjp1fSkpfWxldCBqLGs7ImZ1bmN0aW9uIj09dHlwZW9mIEFib3J0Q29udHJvbGxlciYmKGo9bmV3IEFib3J0Q29udHJvbGxlcixjLnNpZ25hbD1qLnNpZ25hbCk7dHJ5e2s9YXdhaXQgUHJvbWlzZS5yYWNlKFsoXz1lLG5ldyBQcm9taXNlKChlPT5zZXRUaW1lb3V0KGUsXykpKSksZmV0Y2goaSxPYmplY3QuYXNzaWduKHt9LGMpKV0pfWNhdGNoKGUpe3JldHVybiB2b2lkIHAucG9zdE1lc3NhZ2Uoe2Vycm9yOmUubWVzc2FnZX0pfWlmKCFrKXJldHVybiBqJiZqLmFib3J0KCksdm9pZCBwLnBvc3RNZXNzYWdlKHtlcnJvcjoiVGltZW91dCB3aGVuIGV4ZWN1dGluZyAnZmV0Y2gnIn0pO2c9ay5oZWFkZXJzLGw9Wy4uLmddLnJlZHVjZSgoKGUsW3Qscl0pPT4oZVt0XT1yLGUpKSx7fSksaD1hd2FpdCBrLmpzb24oKSxoLnJlZnJlc2hfdG9rZW4/KGYmJihvLmxhdGVzdF9yZWZyZXNoX3Rva2VuPWgucmVmcmVzaF90b2tlbixPPXUsYj1oLnJlZnJlc2hfdG9rZW4sT2JqZWN0LmVudHJpZXMobykuZm9yRWFjaCgoKFtlLHRdKT0+e3Q9PT1PJiYob1tlXT1iKX0pKSksKChlLHQscik9PntvW24odCxyKV09ZX0pKGgucmVmcmVzaF90b2tlbixkLHkpLGRlbGV0ZSBoLnJlZnJlc2hfdG9rZW4pOigoZSx0KT0+e2RlbGV0ZSBvW24oZSx0KV19KShkLHkpLHAucG9zdE1lc3NhZ2Uoe29rOmsub2ssanNvbjpoLGhlYWRlcnM6bH0pfWNhdGNoKGUpe3AucG9zdE1lc3NhZ2Uoe29rOiExLGpzb246e2Vycm9yOmUuZXJyb3IsZXJyb3JfZGVzY3JpcHRpb246ZS5tZXNzYWdlfSxoZWFkZXJzOmx9KX12YXIgTyxiLGcsX30pKX0oKTsKCg==", Ve = null, He = !1, function(e) {
-	return Ue ||= ze(Be, Ve, He), new Worker(Ue, e);
-}), N = {}, Ge = async (e, t = 3) => {
+var ze, Be, Ve, He, Ue = (ze = "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", Be = null, Ve = !1, function(e) {
+	return He ||= Re(ze, Be, Ve), new Worker(He, e);
+}), P = {}, We = async (e, t = 3) => {
 	for (let n = 0; n < t; n++) if (await e()) return !0;
 	return !1;
-}, Ke = class {
+}, Ge = class {
 	constructor(e, t) {
 		this.cache = e, this.clientId = t, this.manifestKey = this.createManifestKeyFrom(this.clientId);
 	}
@@ -1081,19 +1081,19 @@ var Be, Ve, He, Ue, We = (Be = "Lyogcm9sbHVwLXBsdWdpbi13ZWItd29ya2VyLWxvYWRlciAq
 	createManifestKeyFrom(e) {
 		return `@@auth0spajs@@::${e}`;
 	}
-}, qe = {
-	memory: () => new ke().enclosedCache,
-	localstorage: () => new Oe()
-}, Je = (e) => qe[e], Ye = (t) => {
+}, Ke = {
+	memory: () => new Oe().enclosedCache,
+	localstorage: () => new De()
+}, qe = (e) => Ke[e], Je = (t) => {
 	let { openUrl: n, onRedirect: r } = t, i = e(t, ["openUrl", "onRedirect"]);
 	return Object.assign(Object.assign({}, i), { openUrl: !1 === n || n ? n : r });
-}, Xe = (e, t) => {
+}, Ye = (e, t) => {
 	let n = t?.split(" ") || [];
 	return (e?.split(" ") || []).every(((e) => n.includes(e)));
-}, P = {
+}, F = {
 	NONCE: "nonce",
 	KEYPAIR: "keypair"
-}, Ze = class {
+}, Xe = class {
 	constructor(e) {
 		this.clientId = e;
 	}
@@ -1103,7 +1103,7 @@ var Be, Ve, He, Ue, We = (Be = "Lyogcm9sbHVwLXBsdWdpbi13ZWItd29ya2VyLWxvYWRlciAq
 	createDbHandle() {
 		let e = window.indexedDB.open("auth0-spa-js", this.getVersion());
 		return new Promise(((t, n) => {
-			e.onupgradeneeded = () => Object.values(P).forEach(((t) => e.result.createObjectStore(t))), e.onerror = () => n(e.error), e.onsuccess = () => t(e.result);
+			e.onupgradeneeded = () => Object.values(F).forEach(((t) => e.result.createObjectStore(t))), e.onerror = () => n(e.error), e.onsuccess = () => t(e.result);
 		}));
 	}
 	async getDbHandle() {
@@ -1120,19 +1120,19 @@ var Be, Ve, He, Ue, We = (Be = "Lyogcm9sbHVwLXBsdWdpbi13ZWItd29ya2VyLWxvYWRlciAq
 		return `${this.clientId}::${t}`;
 	}
 	setNonce(e, t) {
-		return this.save(P.NONCE, this.buildKey(t), e);
+		return this.save(F.NONCE, this.buildKey(t), e);
 	}
 	setKeyPair(e) {
-		return this.save(P.KEYPAIR, this.buildKey(), e);
+		return this.save(F.KEYPAIR, this.buildKey(), e);
 	}
 	async save(e, t, n) {
 		await this.executeDbRequest(e, "readwrite", ((e) => e.put(n, t)));
 	}
 	findNonce(e) {
-		return this.find(P.NONCE, this.buildKey(e));
+		return this.find(F.NONCE, this.buildKey(e));
 	}
 	findKeyPair() {
-		return this.find(P.KEYPAIR, this.buildKey());
+		return this.find(F.KEYPAIR, this.buildKey());
 	}
 	find(e, t) {
 		return this.executeDbRequest(e, "readonly", ((e) => e.get(t)));
@@ -1144,14 +1144,14 @@ var Be, Ve, He, Ue, We = (Be = "Lyogcm9sbHVwLXBsdWdpbi13ZWItd29ya2VyLWxvYWRlciAq
 		return this.deleteBy(e, ((e) => typeof e == "string" && e.startsWith(`${t}::`)));
 	}
 	clearNonces() {
-		return this.deleteByClientId(P.NONCE, this.clientId);
+		return this.deleteByClientId(F.NONCE, this.clientId);
 	}
 	clearKeyPairs() {
-		return this.deleteByClientId(P.KEYPAIR, this.clientId);
+		return this.deleteByClientId(F.KEYPAIR, this.clientId);
 	}
-}, Qe = class {
+}, Ze = class {
 	constructor(e) {
-		this.storage = new Ze(e);
+		this.storage = new Xe(e);
 	}
 	getNonce(e) {
 		return this.storage.findNonce(e);
@@ -1161,23 +1161,23 @@ var Be, Ve, He, Ue, We = (Be = "Lyogcm9sbHVwLXBsdWdpbi13ZWItd29ya2VyLWxvYWRlciAq
 	}
 	async getOrGenerateKeyPair() {
 		let e = await this.storage.findKeyPair();
-		return e || (e = await ye(), await this.storage.setKeyPair(e)), e;
+		return e || (e = await ve(), await this.storage.setKeyPair(e)), e;
 	}
 	async generateProof(e) {
 		let t = await this.getOrGenerateKeyPair();
-		return xe(Object.assign({ keyPair: t }, e));
+		return be(Object.assign({ keyPair: t }, e));
 	}
 	async calculateThumbprint() {
-		return be(await this.getOrGenerateKeyPair());
+		return ye(await this.getOrGenerateKeyPair());
 	}
 	async clear() {
 		await Promise.all([this.storage.clearNonces(), this.storage.clearKeyPairs()]);
 	}
-}, F;
+}, I;
 (function(e) {
 	e.Bearer = "Bearer", e.DPoP = "DPoP";
-})(F ||= {});
-var $e = class {
+})(I ||= {});
+var Qe = class {
 	constructor(e, t) {
 		this.hooks = t, this.config = Object.assign(Object.assign({}, e), { fetch: e.fetch || (typeof window > "u" ? fetch : window.fetch.bind(window)) });
 	}
@@ -1202,7 +1202,7 @@ var $e = class {
 		let n = this.buildUrl(this.config.baseUrl, this.extractUrl(e)), r = e instanceof Request ? new Request(n, e) : n;
 		return new Request(r, t);
 	}
-	setAuthorizationHeader(e, t, n = F.Bearer) {
+	setAuthorizationHeader(e, t, n = I.Bearer) {
 		e.headers.set("authorization", `${n} ${t}`);
 	}
 	async setDpopProofHeader(e, t) {
@@ -1217,7 +1217,7 @@ var $e = class {
 	}
 	async prepareRequest(e, t) {
 		let n = await this.getAccessToken(t), r, i;
-		typeof n == "string" ? (r = this.config.dpopNonceId ? F.DPoP : F.Bearer, i = n) : (r = n.token_type, i = n.access_token), this.setAuthorizationHeader(e, i, r), r === F.DPoP && await this.setDpopProofHeader(e, i);
+		typeof n == "string" ? (r = this.config.dpopNonceId ? I.DPoP : I.Bearer, i = n) : (r = n.token_type, i = n.access_token), this.setAuthorizationHeader(e, i, r), r === I.DPoP && await this.setDpopProofHeader(e, i);
 	}
 	getHeader(e, t) {
 		return Array.isArray(e) ? new Headers(e).get(t) || "" : typeof e.get == "function" ? e.get(t) || "" : e[t] || "";
@@ -1230,7 +1230,7 @@ var $e = class {
 	async handleResponse(e, t) {
 		let n = this.getHeader(e.headers, "dpop-nonce");
 		if (n && await this.hooks.setDpopNonce(n), !this.hasUseDpopNonceError(e)) return e;
-		if (!n || !t.onUseDpopNonceError) throw new ne(n);
+		if (!n || !t.onUseDpopNonceError) throw new te(n);
 		return t.onUseDpopNonceError();
 	}
 	async internalFetchWithAuth(e, t, n, r) {
@@ -1243,7 +1243,7 @@ var $e = class {
 		let r = { onUseDpopNonceError: () => this.internalFetchWithAuth(e, t, Object.assign(Object.assign({}, r), { onUseDpopNonceError: void 0 }), n) };
 		return this.internalFetchWithAuth(e, t, r, n);
 	}
-}, et = class {
+}, $e = class {
 	constructor(e, t) {
 		this.myAccountFetcher = e, this.apiBase = t;
 	}
@@ -1268,7 +1268,7 @@ var $e = class {
 		try {
 			t = await e.text(), t = JSON.parse(t);
 		} catch (n) {
-			throw new tt({
+			throw new et({
 				type: "invalid_json",
 				status: e.status,
 				title: "Invalid JSON response",
@@ -1276,61 +1276,61 @@ var $e = class {
 			});
 		}
 		if (e.ok) return t;
-		throw new tt(t);
+		throw new et(t);
 	}
-}, tt = class e extends Error {
+}, et = class e extends Error {
 	constructor({ type: t, status: n, title: r, detail: i, validation_errors: a }) {
 		super(i), this.name = "MyAccountApiError", this.type = t, this.status = n, this.title = r, this.detail = i, this.validation_errors = a, Object.setPrototypeOf(this, e.prototype);
 	}
-}, I = new a(), nt = class {
+}, L = new a(), tt = class {
 	constructor(e) {
 		let t, n;
-		if (this.userCache = new ke().enclosedCache, this.activeLockKeys = /* @__PURE__ */ new Set(), this.defaultOptions = {
+		if (this.userCache = new Oe().enclosedCache, this.activeLockKeys = /* @__PURE__ */ new Set(), this.defaultOptions = {
 			authorizationParams: { scope: "openid profile email" },
 			useRefreshTokensFallback: !1,
 			useFormData: !0
 		}, this._releaseLockOnPageHide = async () => {
 			let e = Array.from(this.activeLockKeys);
-			for (let t of e) await I.releaseLock(t);
+			for (let t of e) await L.releaseLock(t);
 			this.activeLockKeys.clear(), window.removeEventListener("pagehide", this._releaseLockOnPageHide);
 		}, this.options = Object.assign(Object.assign(Object.assign({}, this.defaultOptions), e), { authorizationParams: Object.assign(Object.assign({}, this.defaultOptions.authorizationParams), e.authorizationParams) }), typeof window < "u" && (() => {
-			if (!v()) throw Error("For security reasons, `window.crypto` is required to run `auth0-spa-js`.");
-			if (v().subtle === void 0) throw Error("\n      auth0-spa-js must run on a secure origin. See https://github.com/auth0/auth0-spa-js/blob/main/FAQ.md#why-do-i-get-auth0-spa-js-must-run-on-a-secure-origin for more information.\n    ");
+			if (!y()) throw Error("For security reasons, `window.crypto` is required to run `auth0-spa-js`.");
+			if (y().subtle === void 0) throw Error("\n      auth0-spa-js must run on a secure origin. See https://github.com/auth0/auth0-spa-js/blob/main/FAQ.md#why-do-i-get-auth0-spa-js-must-run-on-a-secure-origin for more information.\n    ");
 		})(), e.cache && e.cacheLocation && console.warn("Both `cache` and `cacheLocation` options have been specified in the Auth0Client configuration; ignoring `cacheLocation` and using `cache`."), e.cache) n = e.cache;
 		else {
-			if (t = e.cacheLocation || "memory", !Je(t)) throw Error(`Invalid cache location "${t}"`);
-			n = Je(t)();
+			if (t = e.cacheLocation || "memory", !qe(t)) throw Error(`Invalid cache location "${t}"`);
+			n = qe(t)();
 		}
-		this.httpTimeoutMs = e.httpTimeoutInSeconds ? 1e3 * e.httpTimeoutInSeconds : 1e4, this.cookieStorage = !1 === e.legacySameSiteCookie ? j : Le, this.orgHintCookieName = `auth0.${this.options.clientId}.organization_hint`, this.isAuthenticatedCookieName = ((e) => `auth0.${e}.is.authenticated`)(this.options.clientId), this.sessionCheckExpiryDays = e.sessionCheckExpiryDays || 1;
-		let r = e.useCookiesForTransactions ? this.cookieStorage : Re;
+		this.httpTimeoutMs = e.httpTimeoutInSeconds ? 1e3 * e.httpTimeoutInSeconds : 1e4, this.cookieStorage = !1 === e.legacySameSiteCookie ? M : Ie, this.orgHintCookieName = `auth0.${this.options.clientId}.organization_hint`, this.isAuthenticatedCookieName = ((e) => `auth0.${e}.is.authenticated`)(this.options.clientId), this.sessionCheckExpiryDays = e.sessionCheckExpiryDays || 1;
+		let r = e.useCookiesForTransactions ? this.cookieStorage : Le;
 		var i;
 		this.scope = ((e, t, ...n) => {
-			if (typeof e != "object") return { default: E(t, e, ...n) };
-			let r = { default: E(t, ...n) };
+			if (typeof e != "object") return { default: D(t, e, ...n) };
+			let r = { default: D(t, ...n) };
 			return Object.keys(e).forEach(((i) => {
 				let a = e[i];
-				r[i] = E(t, a, ...n);
+				r[i] = D(t, a, ...n);
 			})), r;
-		})(this.options.authorizationParams.scope, "openid", this.options.useRefreshTokens ? "offline_access" : ""), this.transactionManager = new je(r, this.options.clientId, this.options.cookieDomain), this.nowProvider = this.options.nowProvider || c, this.cacheManager = new Ae(n, n.allKeys ? void 0 : new Ke(n, this.options.clientId), this.nowProvider), this.dpop = this.options.useDpop ? new Qe(this.options.clientId) : void 0, this.domainUrl = (i = this.options.domain, /^https?:\/\//.test(i) ? i : `https://${i}`), this.tokenIssuer = ((e, t) => e ? e.startsWith("https://") ? e : `https://${e}/` : `${t}/`)(this.options.issuer, this.domainUrl);
+		})(this.options.authorizationParams.scope, "openid", this.options.useRefreshTokens ? "offline_access" : ""), this.transactionManager = new Ae(r, this.options.clientId, this.options.cookieDomain), this.nowProvider = this.options.nowProvider || c, this.cacheManager = new ke(n, n.allKeys ? void 0 : new Ge(n, this.options.clientId), this.nowProvider), this.dpop = this.options.useDpop ? new Ze(this.options.clientId) : void 0, this.domainUrl = (i = this.options.domain, /^https?:\/\//.test(i) ? i : `https://${i}`), this.tokenIssuer = ((e, t) => e ? e.startsWith("https://") ? e : `https://${e}/` : `${t}/`)(this.options.issuer, this.domainUrl);
 		let a = `${this.domainUrl}/me/`;
-		this.myAccountApi = new et(this.createFetcher(Object.assign(Object.assign({}, this.options.useDpop && { dpopNonceId: "__auth0_my_account_api__" }), { getAccessToken: () => this.getTokenSilently({
+		this.myAccountApi = new $e(this.createFetcher(Object.assign(Object.assign({}, this.options.useDpop && { dpopNonceId: "__auth0_my_account_api__" }), { getAccessToken: () => this.getTokenSilently({
 			authorizationParams: {
 				scope: "create:me:connected_accounts",
 				audience: a
 			},
 			detailedResponse: !0
-		}) })), a), typeof window < "u" && window.Worker && this.options.useRefreshTokens && t === "memory" && (this.options.workerUrl ? this.worker = new Worker(this.options.workerUrl) : this.worker = new We());
+		}) })), a), typeof window < "u" && window.Worker && this.options.useRefreshTokens && t === "memory" && (this.options.workerUrl ? this.worker = new Worker(this.options.workerUrl) : this.worker = new Ue());
 	}
 	_url(e) {
 		let t = encodeURIComponent(btoa(JSON.stringify(this.options.auth0Client || s)));
 		return `${this.domainUrl}${e}&auth0Client=${t}`;
 	}
 	_authorizeUrl(e) {
-		return this._url(`/authorize?${x(e)}`);
+		return this._url(`/authorize?${S(e)}`);
 	}
 	async _verifyIdToken(e, t, n) {
 		let r = await this.nowProvider();
-		return Ne({
+		return Me({
 			iss: this.tokenIssuer,
 			aud: this.options.clientId,
 			id_token: e,
@@ -1349,8 +1349,8 @@ var $e = class {
 		}) : this.cookieStorage.remove(this.orgHintCookieName, { cookieDomain: this.options.cookieDomain });
 	}
 	async _prepareAuthorizeUrl(e, t, n) {
-		let r = b(y()), i = b(y()), a = y(), o = se(await ae(a)), s = await this.dpop?.calculateThumbprint(), c = ((e, t, n, r, i, a, o, s, c) => Object.assign(Object.assign(Object.assign({ client_id: e.clientId }, e.authorizationParams), n), {
-			scope: D(t, n.scope, n.audience),
+		let r = x(b()), i = x(b()), a = b(), o = oe(await ie(a)), s = await this.dpop?.calculateThumbprint(), c = ((e, t, n, r, i, a, o, s, c) => Object.assign(Object.assign(Object.assign({ client_id: e.clientId }, e.authorizationParams), n), {
+			scope: O(t, n.scope, n.audience),
 			response_type: "code",
 			response_mode: s || "query",
 			state: r,
@@ -1411,14 +1411,14 @@ var $e = class {
 		return (await this._getIdTokenFromCache())?.decodedToken?.claims;
 	}
 	async loginWithRedirect(t = {}) {
-		let n = Ye(t), { openUrl: r, fragment: i, appState: a } = n, o = e(n, [
+		let n = Je(t), { openUrl: r, fragment: i, appState: a } = n, o = e(n, [
 			"openUrl",
 			"fragment",
 			"appState"
 		]), s = o.authorizationParams?.organization || this.options.authorizationParams.organization, c = await this._prepareAuthorizeUrl(o.authorizationParams || {}), { url: l } = c, u = e(c, ["url"]);
 		this.transactionManager.create(Object.assign(Object.assign(Object.assign({}, u), {
 			appState: a,
-			response_type: M.Code
+			response_type: N.Code
 		}), s && { organization: s }));
 		let d = i ? `${l}#${i}` : l;
 		r ? await r(d) : window.location.assign(d);
@@ -1440,7 +1440,7 @@ var $e = class {
 				error_description: t.get("error_description") || void 0
 			};
 		})(t.join(""));
-		return n.response_type === M.ConnectCode ? this._handleConnectAccountRedirectCallback(r, n) : this._handleLoginRedirectCallback(r, n);
+		return n.response_type === N.ConnectCode ? this._handleConnectAccountRedirectCallback(r, n) : this._handleLoginRedirectCallback(r, n);
 	}
 	async _handleLoginRedirectCallback(e, t) {
 		let { code: n, state: r, error: i, error_description: a } = e;
@@ -1458,7 +1458,7 @@ var $e = class {
 			organization: o
 		}), {
 			appState: t.appState,
-			response_type: M.Code
+			response_type: N.Code
 		};
 	}
 	async _handleConnectAccountRedirectCallback(e, t) {
@@ -1474,7 +1474,7 @@ var $e = class {
 		});
 		return Object.assign(Object.assign({}, o), {
 			appState: t.appState,
-			response_type: M.ConnectCode
+			response_type: N.ConnectCode
 		});
 	}
 	async checkSession(e) {
@@ -1490,11 +1490,11 @@ var $e = class {
 		} catch {}
 	}
 	async getTokenSilently(e = {}) {
-		let t = Object.assign(Object.assign({ cacheMode: "on" }, e), { authorizationParams: Object.assign(Object.assign(Object.assign({}, this.options.authorizationParams), e.authorizationParams), { scope: D(this.scope, e.authorizationParams?.scope, e.authorizationParams?.audience || this.options.authorizationParams.audience) }) }), n = await ((e, t) => {
-			let n = N[t];
+		let t = Object.assign(Object.assign({ cacheMode: "on" }, e), { authorizationParams: Object.assign(Object.assign(Object.assign({}, this.options.authorizationParams), e.authorizationParams), { scope: O(this.scope, e.authorizationParams?.scope, e.authorizationParams?.audience || this.options.authorizationParams.audience) }) }), n = await ((e, t) => {
+			let n = P[t];
 			return n || (n = e().finally((() => {
-				delete N[t], n = null;
-			})), N[t] = n), n;
+				delete P[t], n = null;
+			})), P[t] = n), n;
 		})((() => this._getTokenSilently(t)), `${this.options.clientId}::${t.authorizationParams.audience}::${t.authorizationParams.scope}`);
 		return e.detailedResponse ? n : n?.access_token;
 	}
@@ -1512,7 +1512,7 @@ var $e = class {
 		if (n === "cache-only") return;
 		let i = (a = this.options.clientId, o = r.authorizationParams.audience || "default", `auth0.lock.getTokenSilently.${a}.${o}`);
 		var a, o;
-		if (!await Ge((() => I.acquireLock(i, 5e3)), 10)) throw new f();
+		if (!await We((() => L.acquireLock(i, 5e3)), 10)) throw new f();
 		this.activeLockKeys.add(i), this.activeLockKeys.size === 1 && window.addEventListener("pagehide", this._releaseLockOnPageHide);
 		try {
 			if (n !== "off") {
@@ -1530,12 +1530,12 @@ var $e = class {
 				access_token: i
 			}, a ? { scope: a } : null), { expires_in: o });
 		} finally {
-			await I.releaseLock(i), this.activeLockKeys.delete(i), this.activeLockKeys.size === 0 && window.removeEventListener("pagehide", this._releaseLockOnPageHide);
+			await L.releaseLock(i), this.activeLockKeys.delete(i), this.activeLockKeys.size === 0 && window.removeEventListener("pagehide", this._releaseLockOnPageHide);
 		}
 	}
 	async getTokenWithPopup(e = {}, t = {}) {
-		let n = Object.assign(Object.assign({}, e), { authorizationParams: Object.assign(Object.assign(Object.assign({}, this.options.authorizationParams), e.authorizationParams), { scope: D(this.scope, e.authorizationParams?.scope, e.authorizationParams?.audience || this.options.authorizationParams.audience) }) });
-		return t = Object.assign(Object.assign({}, o), t), await this.loginWithPopup(n, t), (await this.cacheManager.get(new O({
+		let n = Object.assign(Object.assign({}, e), { authorizationParams: Object.assign(Object.assign(Object.assign({}, this.options.authorizationParams), e.authorizationParams), { scope: O(this.scope, e.authorizationParams?.scope, e.authorizationParams?.audience || this.options.authorizationParams.audience) }) });
+		return t = Object.assign(Object.assign({}, o), t), await this.loginWithPopup(n, t), (await this.cacheManager.get(new k({
 			scope: n.authorizationParams.scope,
 			audience: n.authorizationParams.audience || "default",
 			clientId: this.options.clientId
@@ -1547,17 +1547,17 @@ var $e = class {
 	_buildLogoutUrl(t) {
 		t.clientId === null ? delete t.clientId : t.clientId = t.clientId || this.options.clientId;
 		let n = t.logoutParams || {}, { federated: r } = n, i = e(n, ["federated"]), a = r ? "&federated" : "";
-		return this._url(`/v2/logout?${x(Object.assign({ clientId: t.clientId }, i))}`) + a;
+		return this._url(`/v2/logout?${S(Object.assign({ clientId: t.clientId }, i))}`) + a;
 	}
 	async logout(t = {}) {
-		let n = Ye(t), { openUrl: r } = n, i = e(n, ["openUrl"]);
+		let n = Je(t), { openUrl: r } = n, i = e(n, ["openUrl"]);
 		t.clientId === null ? await this.cacheManager.clear() : await this.cacheManager.clear(t.clientId || this.options.clientId), this.cookieStorage.remove(this.orgHintCookieName, { cookieDomain: this.options.cookieDomain }), this.cookieStorage.remove(this.isAuthenticatedCookieName, { cookieDomain: this.options.cookieDomain }), this.userCache.remove("@@user@@"), await this.dpop?.clear();
 		let a = this._buildLogoutUrl(i);
 		r ? await r(a) : !1 !== r && window.location.assign(a);
 	}
 	async _getTokenFromIFrame(e) {
 		let t = `auth0.lock.getTokenFromIFrame.${this.options.clientId}`;
-		if (!await Ge((() => I.acquireLock(t, 5e3)), 10)) throw new f();
+		if (!await We((() => L.acquireLock(t, 5e3)), 10)) throw new f();
 		try {
 			let t = Object.assign(Object.assign({}, e.authorizationParams), { prompt: "none" }), n = this.cookieStorage.get(this.orgHintCookieName);
 			n && !t.organization && (t.organization = n);
@@ -1602,18 +1602,18 @@ var $e = class {
 		} catch (e) {
 			throw e.error === "login_required" && this.logout({ openUrl: !1 }), e;
 		} finally {
-			await I.releaseLock(t);
+			await L.releaseLock(t);
 		}
 	}
 	async _getTokenUsingRefreshToken(e) {
-		let t = await this.cacheManager.get(new O({
+		let t = await this.cacheManager.get(new k({
 			scope: e.authorizationParams.scope,
 			audience: e.authorizationParams.audience || "default",
 			clientId: this.options.clientId
 		}), void 0, this.options.useMrrt);
 		if (!(t && t.refresh_token || this.worker)) {
 			if (this.options.useRefreshTokensFallback) return await this._getTokenFromIFrame(e);
-			throw new te(e.authorizationParams.audience || "default", e.authorizationParams.scope);
+			throw new g(e.authorizationParams.audience || "default", e.authorizationParams.scope);
 		}
 		let n = e.authorizationParams.redirect_uri || this.options.authorizationParams.redirect_uri || window.location.origin, r = typeof e.timeoutInSeconds == "number" ? 1e3 * e.timeoutInSeconds : null, i = ((e, t, n, r) => {
 			if (e && n && r) {
@@ -1629,14 +1629,14 @@ var $e = class {
 				refresh_token: t && t.refresh_token,
 				redirect_uri: n
 			}), r && { timeout: r }), { scopesToRequest: i });
-			if (l.refresh_token && t != null && t.refresh_token && await this.cacheManager.updateEntry(t.refresh_token, l.refresh_token), this.options.useMrrt && (a = t?.audience, o = t?.scope, s = e.authorizationParams.audience, c = e.authorizationParams.scope, (a !== s || !Xe(c, o)) && !Xe(i, l.scope))) {
+			if (l.refresh_token && t != null && t.refresh_token && await this.cacheManager.updateEntry(t.refresh_token, l.refresh_token), this.options.useMrrt && (a = t?.audience, o = t?.scope, s = e.authorizationParams.audience, c = e.authorizationParams.scope, (a !== s || !Ye(c, o)) && !Ye(i, l.scope))) {
 				if (this.options.useRefreshTokensFallback) return await this._getTokenFromIFrame(e);
 				await this.cacheManager.remove(this.options.clientId, e.authorizationParams.audience, e.authorizationParams.scope);
 				let t = ((e, t) => {
 					let n = e?.split(" ") || [], r = t?.split(" ") || [];
 					return n.filter(((e) => r.indexOf(e) == -1)).join(",");
 				})(i, l.scope);
-				throw new g(e.authorizationParams.audience || "default", t);
+				throw new _(e.authorizationParams.audience || "default", t);
 			}
 			return Object.assign(Object.assign({}, l), {
 				scope: e.authorizationParams.scope,
@@ -1657,7 +1657,7 @@ var $e = class {
 		}), await this.cacheManager.setIdToken(this.options.clientId, t.id_token, t.decodedToken), await this.cacheManager.set(i);
 	}
 	async _getIdTokenFromCache() {
-		let e = this.options.authorizationParams.audience || "default", t = this.scope[e], n = await this.cacheManager.getIdToken(new O({
+		let e = this.options.authorizationParams.audience || "default", t = this.scope[e], n = await this.cacheManager.getIdToken(new k({
 			clientId: this.options.clientId,
 			audience: e,
 			scope: t
@@ -1665,7 +1665,7 @@ var $e = class {
 		return n && n.id_token === r?.id_token ? r : (this.userCache.set("@@user@@", n), n);
 	}
 	async _getEntryFromCache({ scope: e, audience: t, clientId: n, cacheMode: r }) {
-		let i = await this.cacheManager.get(new O({
+		let i = await this.cacheManager.get(new k({
 			scope: e,
 			audience: t,
 			clientId: n
@@ -1681,7 +1681,7 @@ var $e = class {
 	}
 	async _requestToken(e, t) {
 		var n;
-		let { nonceIn: r, organization: i, scopesToRequest: a } = t || {}, o = await De(Object.assign(Object.assign({
+		let { nonceIn: r, organization: i, scopesToRequest: a } = t || {}, o = await Ee(Object.assign(Object.assign({
 			baseUrl: this.domainUrl,
 			client_id: this.options.clientId,
 			auth0Client: this.options.auth0Client,
@@ -1708,7 +1708,7 @@ var $e = class {
 			grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
 			subject_token: e.subject_token,
 			subject_token_type: e.subject_token_type,
-			scope: D(this.scope, e.scope, e.audience || this.options.authorizationParams.audience),
+			scope: O(this.scope, e.scope, e.audience || this.options.authorizationParams.audience),
 			audience: e.audience || this.options.authorizationParams.audience,
 			organization: e.organization || this.options.authorizationParams.organization
 		});
@@ -1726,7 +1726,7 @@ var $e = class {
 		return this._assertDpop(this.dpop), this.dpop.generateProof(e);
 	}
 	createFetcher(e = {}) {
-		return new $e(e, {
+		return new Qe(e, {
 			isDpopEnabled: () => !!this.options.useDpop,
 			getAccessToken: (e) => this.getTokenSilently({
 				authorizationParams: {
@@ -1743,7 +1743,7 @@ var $e = class {
 	async connectAccountWithRedirect(e) {
 		let { openUrl: t, appState: n, connection: r, scopes: i, authorization_params: a, redirectUri: o = this.options.authorizationParams.redirect_uri || window.location.origin } = e;
 		if (!r) throw Error("connection is required");
-		let s = b(y()), c = y(), l = se(await ae(c)), { connect_uri: u, connect_params: d, auth_session: f } = await this.myAccountApi.connectAccount({
+		let s = x(b()), c = b(), l = oe(await ie(c)), { connect_uri: u, connect_params: d, auth_session: f } = await this.myAccountApi.connectAccount({
 			connection: r,
 			scopes: i,
 			redirect_uri: o,
@@ -1759,20 +1759,20 @@ var $e = class {
 			redirect_uri: o,
 			appState: n,
 			connection: r,
-			response_type: M.ConnectCode
+			response_type: N.ConnectCode
 		});
 		let p = new URL(u);
 		p.searchParams.set("ticket", d.ticket), t ? await t(p.toString()) : window.location.assign(p);
 	}
 };
-async function rt(e) {
-	let t = new nt(e);
+async function nt(e) {
+	let t = new tt(e);
 	return await t.checkSession(), t;
 }
 //#endregion
 //#region src/controllers/debug.ts
-var it = "sesamy-debug";
-function at(e) {
+var rt = "sesamy-debug";
+function it(e) {
 	if (typeof document > "u") return null;
 	let t = e + "=", n = document.cookie.split(";");
 	for (let e = 0; e < n.length; e++) {
@@ -1782,62 +1782,62 @@ function at(e) {
 	}
 	return null;
 }
-function ot() {
-	return at(it) === "true";
+function at() {
+	return it(rt) === "true";
 }
 //#endregion
 //#region src/controllers/logger.ts
-function L(e) {
-	ot() && console.log(e);
+function R(e) {
+	at() && console.log(e);
 }
 //#endregion
 //#region src/types/Events.ts
-var R = /* @__PURE__ */ function(e) {
+var z = /* @__PURE__ */ function(e) {
 	return e.AUTH_INITIALIZED = "sesamyJsAuthInitialized", e.READY = "sesamyJsReady", e.AUTHENTICATED = "sesamyJsAuthenticated", e.LOGOUT = "sesamyJsLogout", e.CLEAR_CACHE = "sesamyJsClearCache", e.USER_ATTRIBUTE_CHANGED = "sesamyUserAttributeChanged", e.PURCHASE = "sesamyJsPurchase", e.CONSENT_CHANGED = "sesamyJsConsentChanged", e;
 }({});
 //#endregion
 //#region src/events/ready.ts
-function st(e, t) {
+function ot(e, t) {
 	let n = new CustomEvent(e, {
 		detail: t,
 		bubbles: !0,
 		composed: !0
 	});
-	L(`Triggering event: ${e}`), dispatchEvent(n);
+	R(`Triggering event: ${e}`), dispatchEvent(n);
 }
-function z(e, t) {
-	typeof window > "u" || (e === R.READY && document.readyState === "loading" ? document.addEventListener("DOMContentLoaded", () => st(e, t), { once: !0 }) : st(e, t));
+function B(e, t) {
+	typeof window > "u" || (e === z.READY && document.readyState === "loading" ? document.addEventListener("DOMContentLoaded", () => ot(e, t), { once: !0 }) : ot(e, t));
 }
 //#endregion
 //#region src/constants.ts
-var ct = "sesamy.com", lt = "sesamy.dev";
+var st = "sesamy.com", ct = "sesamy.dev";
 //#endregion
 //#region src/services/config/index.ts
-function ut(e, t) {
-	return `${e}.${t === "dev" ? lt : ct}`;
+function lt(e, t) {
+	return `${e}.${t === "dev" ? ct : st}`;
 }
 //#endregion
 //#region src/utils/language.ts
-function dt() {
+function ut() {
 	let e = (document.documentElement.getAttribute("lang") ?? navigator.language ?? "en").split("-")[0]?.toLowerCase() ?? "en";
 	return e === "nn" && (e = "nb"), e;
 }
 //#endregion
 //#region ../../node_modules/.pnpm/detectincognitojs@1.6.2/node_modules/detectincognitojs/dist/detectIncognito.esm.js
-var B = {
+var V = {
 	d: (e, t) => {
-		for (var n in t) B.o(t, n) && !B.o(e, n) && Object.defineProperty(e, n, {
+		for (var n in t) V.o(t, n) && !V.o(e, n) && Object.defineProperty(e, n, {
 			enumerable: !0,
 			get: t[n]
 		});
 	},
 	o: (e, t) => Object.prototype.hasOwnProperty.call(e, t)
-}, V = {};
-B.d(V, {
-	A: () => ft,
-	k: () => W
+}, H = {};
+V.d(H, {
+	A: () => dt,
+	k: () => G
 });
-var H = function(e, t, n, r) {
+var U = function(e, t, n, r) {
 	return new (n ||= Promise)(function(i, a) {
 		function o(e) {
 			try {
@@ -1861,7 +1861,7 @@ var H = function(e, t, n, r) {
 		}
 		c((r = r.apply(e, t || [])).next());
 	});
-}, U = function(e, t) {
+}, W = function(e, t) {
 	var n, r, i, a, o = {
 		label: 0,
 		sent: function() {
@@ -1934,9 +1934,9 @@ var H = function(e, t, n, r) {
 		};
 	}
 };
-function W() {
-	return H(this, void 0, Promise, function() {
-		return U(this, function(e) {
+function G() {
+	return U(this, void 0, Promise, function() {
+		return W(this, function(e) {
 			switch (e.label) {
 				case 0: return [4, new Promise(function(e, t) {
 					var n = "Unknown", r = !1;
@@ -1956,9 +1956,9 @@ function W() {
 						return e;
 					}
 					function o() {
-						return H(this, void 0, void 0, function() {
+						return U(this, void 0, void 0, function() {
 							var e, t;
-							return U(this, function(n) {
+							return W(this, function(n) {
 								switch (n.label) {
 									case 0: return n.trys.push([
 										0,
@@ -1974,8 +1974,8 @@ function W() {
 						});
 					}
 					function s() {
-						return H(this, void 0, Promise, function() {
-							return U(this, function(e) {
+						return U(this, void 0, Promise, function() {
+							return W(this, function(e) {
 								switch (e.label) {
 									case 0: return typeof navigator.storage?.getDirectory == "function" ? [4, o()] : [3, 2];
 									case 1: return e.sent(), [3, 3];
@@ -2038,9 +2038,9 @@ function W() {
 						});
 					}
 					function u() {
-						return H(this, void 0, Promise, function() {
+						return U(this, void 0, Promise, function() {
 							var e, t, n;
-							return U(this, function(r) {
+							return W(this, function(r) {
 								switch (r.label) {
 									case 0:
 										if (typeof navigator.storage?.getDirectory != "function") return [3, 5];
@@ -2065,8 +2065,8 @@ function W() {
 						});
 					}
 					(function() {
-						return H(this, void 0, Promise, function() {
-							return U(this, function(e) {
+						return U(this, void 0, Promise, function() {
+							return W(this, function(e) {
 								switch (e.label) {
 									case 0: return a() !== 44 && a() !== 43 ? [3, 2] : (n = "Safari", [4, s()]);
 									case 1: return e.sent(), [3, 6];
@@ -2086,15 +2086,15 @@ function W() {
 		});
 	});
 }
-typeof window < "u" && (window.detectIncognito = W);
-var ft = W;
-V.A, V.k;
+typeof window < "u" && (window.detectIncognito = G);
+var dt = G;
+H.A, H.k;
 //#endregion
 //#region src/services/browser/detect-incognito.ts
-var pt = "sesamy_incognito_mode";
-function mt() {
+var ft = "sesamy_incognito_mode";
+function pt() {
 	try {
-		let e = sessionStorage.getItem(pt);
+		let e = sessionStorage.getItem(ft);
 		return e === null ? void 0 : e === "true";
 	} catch {
 		return;
@@ -2102,7 +2102,7 @@ function mt() {
 }
 //#endregion
 //#region src/utils/browser.ts
-function G() {
+function mt() {
 	return typeof window < "u";
 }
 //#endregion
@@ -2132,55 +2132,69 @@ function _t() {
 	return /android/i.test(navigator.userAgent);
 }
 //#endregion
+//#region src/services/auth/namespace.ts
+function vt(e) {
+	return e.vendorId || e.clientId || "";
+}
+function yt(e) {
+	return e ? `sesamy_is_authenticated_${e}` : "sesamy_is_authenticated";
+}
+function bt(e) {
+	if (typeof document > "u") return !1;
+	let t = yt(e);
+	try {
+		return document.cookie.split(";").some((e) => e.trim().startsWith(`${t}=true`));
+	} catch {
+		return !1;
+	}
+}
+function q(e, t) {
+	if (typeof document > "u" || typeof window > "u") return;
+	let n = yt(e);
+	try {
+		let e = t ? 720 * 60 * 60 : 0, r = window.location.protocol === "https:" ? "; Secure" : "";
+		document.cookie = `${n}=${t}; path=/; max-age=${e}; SameSite=Lax${r}`;
+	} catch {}
+}
+//#endregion
 //#region src/auth0-plugin.ts
-var q = "sesamyAccessToken", J = "sesamyRefreshToken", Y = "sesamySilentAuthThrottle", vt = "sesamy_is_authenticated", yt = 300 * 1e3, bt = 60, xt = [
+var J = "sesamyAccessToken", Y = "sesamyRefreshToken", X = "sesamySilentAuthThrottle", xt = 300 * 1e3, St = 60, Ct = [
 	"login_required",
 	"consent_required",
 	"interaction_required",
 	"access_denied"
-], St = ["timeout", "Timeout"], Ct = 64;
-function wt(e) {
+], wt = ["timeout", "Timeout"], Tt = 64;
+function Et(e) {
 	let t = e.split(".");
 	if (t.length !== 3) return null;
 	let n = t[1].replace(/-/g, "+").replace(/_/g, "/"), r = decodeURIComponent(atob(n).split("").map((e) => "%" + ("00" + e.charCodeAt(0).toString(16)).slice(-2)).join(""));
 	return JSON.parse(r);
 }
-function Tt() {
-	if (!G()) return !1;
+function Dt(e, t) {
+	if (!mt()) return !1;
 	try {
-		if (document.cookie.split(";").map((e) => e.trim()).some((e) => e.startsWith("sesamy_is_authenticated=true"))) return !0;
-		let e = Object.keys(localStorage).filter((e) => e.startsWith("@@auth0spajs@@"));
-		for (let t of e) try {
-			let e = JSON.parse(localStorage.getItem(t) || "{}");
-			if (e?.body?.access_token || e?.body?.refresh_token) return !0;
+		if (bt(e)) return !0;
+		let n = t ? `@@auth0spajs@@::${t}::` : "@@auth0spajs@@", r = Object.keys(localStorage).filter((e) => e.startsWith(n));
+		for (let e of r) try {
+			let t = JSON.parse(localStorage.getItem(e) || "{}");
+			if (t?.body?.access_token || t?.body?.refresh_token) return !0;
 		} catch {}
 		return !1;
 	} catch (e) {
-		return L(`Error checking session hint cookie: ${e.message}`), !1;
-	}
-}
-function X(e) {
-	if (G()) try {
-		let t = e ? 720 * 60 * 60 : 0, n = window.location.protocol === "https:" ? "; Secure" : "";
-		document.cookie = `${vt}=${e}; path=/; max-age=${t}; SameSite=Lax${n}`;
-	} catch (e) {
-		L(`Error setting session hint cookie: ${e.message}`);
+		return R(`Error checking session hint cookie: ${e.message}`), !1;
 	}
 }
-function Z() {
-	X(!1);
-}
-function Et(e, t) {
+function Ot(e, t) {
 	let n = e.message || "";
 	return t.some((t) => n.includes(t) || e.error === t);
 }
-function Dt(e) {
-	return Et(e, St);
+function kt(e) {
+	return Ot(e, wt);
 }
-function Ot(e) {
-	return Et(e, xt);
+function At(e) {
+	return Ot(e, Ct);
 }
-function kt(e) {
+function jt(e) {
 	try {
 		let t = new URL(e);
 		return t.hash = "", t.toString();
@@ -2188,59 +2202,59 @@ function kt(e) {
 		return e.split("#")[0];
 	}
 }
-function Q() {
+function Z() {
 	try {
-		let e = sessionStorage.getItem(Y);
+		let e = sessionStorage.getItem(X);
 		if (!e) return !1;
 		let { timestamp: t } = JSON.parse(e);
-		return Date.now() - t < yt;
+		return Date.now() - t < xt;
 	} catch {
-		return sessionStorage.removeItem(Y), !1;
+		return sessionStorage.removeItem(X), !1;
 	}
 }
-function At() {
+function Q() {
 	try {
-		sessionStorage.setItem(Y, JSON.stringify({ timestamp: Date.now() }));
+		sessionStorage.setItem(X, JSON.stringify({ timestamp: Date.now() }));
 	} catch {
-		L("Failed to set silent auth throttle in sessionStorage");
+		R("Failed to set silent auth throttle in sessionStorage");
 	}
 }
 function $() {
 	try {
-		sessionStorage.removeItem(Y);
+		sessionStorage.removeItem(X);
 	} catch {}
 }
-function jt(e) {
+function Mt(e) {
 	if (e.domains && e.domains.length > 0) {
 		let t = K(window.location.href);
 		if (t) {
-			for (let n of e.domains) if (K(`https://${n}`) === t) return L(`Found matching domain in domains array: ${n} for TLD: ${t}`), n;
-			L(`No matching domain found in domains array for TLD: ${t}`);
+			for (let n of e.domains) if (K(`https://${n}`) === t) return R(`Found matching domain in domains array: ${n} for TLD: ${t}`), n;
+			R(`No matching domain found in domains array for TLD: ${t}`);
 		}
 	}
-	if (e.domain) return L(`Using fallback domain property: ${e.domain}`), e.domain;
+	if (e.domain) return R(`Using fallback domain property: ${e.domain}`), e.domain;
 }
-function Mt() {
+function Nt() {
 	try {
 		let e = Object.keys(localStorage).filter((e) => e.startsWith("@@auth0spajs@@"));
 		for (let t of e) {
 			let e = JSON.parse(localStorage.getItem(t) || "{}"), n;
-			if (typeof e == "object" && (e.body && typeof e.body == "object" && "refresh_token" in e.body ? n = e.body.refresh_token : "refresh_token" in e && (n = e.refresh_token)), n && typeof n == "string" && n.length === Ct) return !0;
+			if (typeof e == "object" && (e.body && typeof e.body == "object" && "refresh_token" in e.body ? n = e.body.refresh_token : "refresh_token" in e && (n = e.refresh_token)), n && typeof n == "string" && n.length === Tt) return !0;
 		}
 	} catch (e) {
-		L(`Error checking for existing auth0 tokens: ${e.message}`);
+		R(`Error checking for existing auth0 tokens: ${e.message}`);
 	}
 	return !1;
 }
-function Nt() {
-	let e, t, n, r = !1, i = !1, a = !1, o = !1;
-	G() && window.addEventListener("pageshow", () => {
-		i = !1, a = !1;
+function Pt() {
+	let e, t, n, r = "", i = "", a = !1, o = !1, s = !1, c = !1;
+	mt() && window.addEventListener("pageshow", () => {
+		o = !1, s = !1;
 	});
-	async function s(e) {
+	async function l(e) {
 		if (!e) return null;
-		let t = localStorage.getItem(J);
-		if (!t) return L("No refresh token found in localstorage"), null;
+		let t = localStorage.getItem(Y);
+		if (!t) return R("No refresh token found in localstorage"), null;
 		let n = new URLSearchParams();
 		n.set("client_id", e.iss), n.set("refresh_token", t), n.set("grant_type", "refresh_token");
 		let r = new URL(e.iss);
@@ -2253,175 +2267,177 @@ function Nt() {
 			});
 			if (!e.ok) {
 				let t = await e.text().catch(() => "Unknown error");
-				throw L(`Token refresh failed with status ${e.status}: ${t}`), localStorage.removeItem(J), Error(`Renew token failed: ${e.status}`);
+				throw R(`Token refresh failed with status ${e.status}: ${t}`), localStorage.removeItem(Y), Error(`Renew token failed: ${e.status}`);
 			}
 			let t = await e.json();
-			if (!t.access_token) throw L("Token refresh response missing access_token"), Error("Invalid token response");
-			return t.refresh_token && localStorage.setItem(J, t.refresh_token), localStorage.setItem(q, t.access_token), t.access_token;
+			if (!t.access_token) throw R("Token refresh response missing access_token"), Error("Invalid token response");
+			return t.refresh_token && localStorage.setItem(Y, t.refresh_token), localStorage.setItem(J, t.access_token), t.access_token;
 		} catch (e) {
-			return L(`Token refresh error: ${e.message}`), localStorage.removeItem(J), localStorage.removeItem(q), await f.logout(), null;
+			return R(`Token refresh error: ${e.message}`), localStorage.removeItem(Y), localStorage.removeItem(J), await m.logout(), null;
 		}
 	}
-	async function c() {
-		let e = localStorage.getItem(q);
+	async function u() {
+		let e = localStorage.getItem(J);
 		if (!e) return null;
-		let t = wt(e), n = Date.now() / 1e3;
-		return !t || !t.exp || t.exp < n + bt ? await s(t) || (localStorage.removeItem(q), null) : e;
-	}
-	async function l() {
-		if (a) {
-			L("Silent redirect already in progress");
+		let t = Et(e);
+		if (t?.vendor_id && r && t.vendor_id !== r) return R("Ignoring local access token belonging to a different vendor"), null;
+		let n = Date.now() / 1e3;
+		return !t || !t.exp || t.exp < n + St ? await l(t) || (localStorage.removeItem(J), null) : e;
+	}
+	async function d() {
+		if (s) {
+			R("Silent redirect already in progress");
 			return;
 		}
-		L("Attempting prompt=none redirect to recover session"), a = !0;
+		R("Attempting prompt=none redirect to recover session"), s = !0;
 		try {
 			await e.loginWithRedirect({ authorizationParams: {
 				prompt: "none",
-				redirect_uri: kt(window.location.href),
+				redirect_uri: jt(window.location.href),
 				organization: t
 			} });
 		} catch (e) {
-			L(`Prompt=none redirect failed: ${e.message}`), a = !1;
+			R(`Prompt=none redirect failed: ${e.message}`), s = !1;
 		}
 	}
-	function u() {
+	function f() {
 		return n ? K(window.location.href) !== K(`https://${n}`) : !1;
 	}
-	function d(n) {
-		if (i) return L("Login already in progress"), null;
-		if (i = !0, setTimeout(() => {
-			i = !1;
-		}, 3e3), localStorage.removeItem(q), !e) throw Error("Auth0 client not initialized");
+	function p(n) {
+		if (o) return R("Login already in progress"), null;
+		if (o = !0, setTimeout(() => {
+			o = !1;
+		}, 3e3), localStorage.removeItem(J), !e) throw Error("Auth0 client not initialized");
 		let r = n?.authorizationParams || {};
 		return {
 			...n,
 			authorizationParams: {
 				organization: t,
-				redirect_uri: kt(window.location.href),
-				ui_locales: dt(),
-				incognito: mt(),
+				redirect_uri: jt(window.location.href),
+				ui_locales: ut(),
+				incognito: pt(),
 				...r
 			}
 		};
 	}
-	let f = {
-		async init(i) {
-			if (i.enabled === !1) return;
-			t = i.organization;
-			let a = jt(i);
-			n = a && !Mt() ? a : ut("token", i.environment), o = K(window.location.href) !== K(`https://${n}`);
-			let s = K(window.location.href), c = s ? `.${s}` : void 0, l = {
+	let m = {
+		async init(o) {
+			if (o.enabled === !1) return;
+			t = o.organization, r = vt(o), i = o.clientId;
+			let s = Mt(o);
+			n = s && !Nt() ? s : lt("token", o.environment), c = K(window.location.href) !== K(`https://${n}`);
+			let l = K(window.location.href), u = l ? `.${l}` : void 0, d = {
 				domain: n,
-				clientId: i.clientId,
+				clientId: o.clientId,
 				useCookiesForTransactions: !0,
 				legacySameSiteCookie: !1,
-				...c && { cookieDomain: c },
+				...u && { cookieDomain: u },
 				cacheLocation: "localstorage"
 			};
-			(o || i.useRefreshTokens) && (l.useRefreshTokens = !0), L(`Initializing auth0 client: ${JSON.stringify(l)}`), e = await rt(l);
-			let u = new URLSearchParams(window.location.search), d = u.get("code"), f = u.get("state"), p = u.get("error");
-			if (p) {
-				let e = u.get("error_description");
-				L(`Auth error in URL: ${p}${e ? ` - ${e}` : ""}`);
+			(c || o.useRefreshTokens) && (d.useRefreshTokens = !0), R(`Initializing auth0 client: ${JSON.stringify(d)}`), e = await nt(d);
+			let f = new URLSearchParams(window.location.search), p = f.get("code"), m = f.get("state"), h = f.get("error");
+			if (h) {
+				let e = f.get("error_description");
+				R(`Auth error in URL: ${h}${e ? ` - ${e}` : ""}`);
 				let t = new URL(location.href);
 				t.searchParams.delete("error"), t.searchParams.delete("error_description"), t.searchParams.delete("state"), window.history.replaceState({}, document.title, t.toString());
-				let n = Q();
-				if (xt.includes(p)) L("Silent redirect returned no-session - user is not authenticated"), Z();
-				else if (n) L(`Silent redirect returned ${p} - treating as unauthenticated`), Z();
+				let n = Z();
+				if (Ct.includes(h)) R("Silent redirect returned no-session - user is not authenticated"), q(r, !1);
+				else if (n) R(`Silent redirect returned ${h} - treating as unauthenticated`), q(r, !1);
 				else {
-					let t = e || `Authentication failed: ${p}`;
-					L(`Non-silent auth error, alerting user: ${t}`), setTimeout(() => {
+					let t = e || `Authentication failed: ${h}`;
+					R(`Non-silent auth error, alerting user: ${t}`), setTimeout(() => {
 						alert(t);
 					}, 0);
 				}
 			}
-			if (d) if (window.opener) L("Code found in URL, posting to opener"), window.opener.postMessage({
+			if (p) if (window.opener) R("Code found in URL, posting to opener"), window.opener.postMessage({
 				type: "authorization_response",
 				response: {
-					code: d,
-					state: f
+					code: p,
+					state: m
 				}
 			}, window.location.origin);
 			else {
-				L("Code found in URL, handling redirect");
-				let t = window.location.href, n = new URL(location.href), r = n.searchParams;
-				r.delete("code"), r.delete("state"), n.search = r.toString(), window.history.replaceState({}, document.title, n.toString()), L("Rewrote url to remove code and state");
+				R("Code found in URL, handling redirect");
+				let t = window.location.href, n = new URL(location.href), i = n.searchParams;
+				i.delete("code"), i.delete("state"), n.search = i.toString(), window.history.replaceState({}, document.title, n.toString()), R("Rewrote url to remove code and state");
 				try {
 					let n = await e.handleRedirectCallback(t);
-					L(`Login result: ${JSON.stringify(n)}`);
-					let r = await e.getUser();
-					if (!r) throw Error("No user found");
-					L(`User found ${JSON.stringify(r)}`), $(), X(!0), L(`Triggering AUTHENTICATED event with appState: ${JSON.stringify(n.appState)}`), z(R.AUTHENTICATED, {
-						...r,
+					R(`Login result: ${JSON.stringify(n)}`);
+					let i = await e.getUser();
+					if (!i) throw Error("No user found");
+					R(`User found ${JSON.stringify(i)}`), $(), q(r, !0), R(`Triggering AUTHENTICATED event with appState: ${JSON.stringify(n.appState)}`), B(z.AUTHENTICATED, {
+						...i,
 						appState: n.appState
 					});
 				} catch (e) {
-					L(`Error handling redirect: ${e.message}`), Q() ? (Z(), L("Silent redirect callback failed, cleared session hints")) : alert("There was an error logging in"), console.error(e);
+					R(`Error handling redirect: ${e.message}`), Z() ? (q(r, !1), R("Silent redirect callback failed, cleared session hints")) : alert("There was an error logging in"), console.error(e);
 				}
 			}
-			r = !0, z(R.AUTH_INITIALIZED, {});
+			a = !0, B(z.AUTH_INITIALIZED, {});
 		},
 		async isAuthenticated() {
-			if (!r) return !1;
-			if (await c()) return !0;
+			if (!a) return !1;
+			if (await u()) return !0;
 			if (!e) return !1;
 			let t = await e.isAuthenticated();
-			return t && X(!0), t;
+			return t && q(r, !0), t;
 		},
 		async getTokenSilently(t = !0, n = !1) {
-			if (!r) return null;
-			let i = await c();
-			if (i) return i;
-			if (!n && Q()) {
-				if (L("Silent auth is throttled due to recent failures, skipping request"), t) throw Error("Silent auth throttled");
+			if (!a) return null;
+			let o = await u();
+			if (o) return o;
+			if (!n && Z()) {
+				if (R("Silent auth is throttled due to recent failures, skipping request"), t) throw Error("Silent auth throttled");
 				return null;
 			}
 			try {
-				if (!e) return L("Auth client not initialized"), null;
-				let t = await e.getTokenSilently(), r = wt(t), i = Date.now() / 1e3;
-				return n && r?.exp && r.exp - i < 3600 + bt && (t = await e.getTokenSilently({ cacheMode: "off" })), $(), X(!0), t;
+				if (!e) return R("Auth client not initialized"), null;
+				let t = await e.getTokenSilently(), i = Et(t), a = Date.now() / 1e3;
+				return n && i?.exp && i.exp - a < 3600 + St && (t = await e.getTokenSilently({ cacheMode: "off" })), $(), q(r, !0), t;
 			} catch (n) {
-				let r = n;
-				if (L(`Failed to get token silently: ${r.message}`), Ot(r) && !o) {
-					if (L("Silent auth returned authoritative no-session - treating user as anonymous"), Z(), At(), t) throw n;
+				let a = n;
+				if (R(`Failed to get token silently: ${a.message}`), At(a) && !c) {
+					if (R("Silent auth returned authoritative no-session - treating user as anonymous"), q(r, !1), Q(), t) throw n;
 					return null;
 				}
-				if ((Dt(r) || Ot(r) && o) && Tt()) return L("Recoverable silent-auth failure with session hint - attempting prompt=none redirect"), At(), await l(), null;
-				if (At(), await e.isAuthenticated() && (r.message === "Invalid refresh token" || r.message.includes("Missing Refresh Token")) && await f.logout(), t) throw n;
+				if ((kt(a) || At(a) && c) && Dt(r, i)) return R("Recoverable silent-auth failure with session hint - attempting prompt=none redirect"), Q(), await d(), null;
+				if (Q(), await e.isAuthenticated() && (a.message === "Invalid refresh token" || a.message.includes("Missing Refresh Token")) && await m.logout(), t) throw n;
 				return null;
 			}
 		},
 		async getUser() {
-			return r ? await c() ? {
+			return a ? await u() ? {
 				sub: "local",
 				name: "Local User"
 			} : e ? await e.getUser() : null : null;
 		},
 		async login(e) {
-			return u() && (gt() || _t() || mt()) ? (L("Using popup login for cross-domain auth on Safari/Android/Incognito"), f.loginWithPopup(e)) : (L("Using redirect login"), f.loginWithRedirect(e));
+			return f() && (gt() || _t() || pt()) ? (R("Using popup login for cross-domain auth on Safari/Android/Incognito"), m.loginWithPopup(e)) : (R("Using redirect login"), m.loginWithRedirect(e));
 		},
 		async loginWithRedirect(t) {
-			let n = d(t);
+			let n = p(t);
 			if (n) return e.loginWithRedirect(n);
 		},
 		async loginWithPopup(t) {
-			let n = d(t);
+			let n = p(t);
 			if (!n) return;
-			await e.loginWithPopup(n, { timeoutInSeconds: 1800 }), $(), X(!0);
-			let r = await e.getUser();
-			if (!r) throw Error("No user found after popup login");
-			let i = new CustomEvent(R.AUTHENTICATED, {
+			await e.loginWithPopup(n, { timeoutInSeconds: 1800 }), $(), q(r, !0);
+			let i = await e.getUser();
+			if (!i) throw Error("No user found after popup login");
+			let a = new CustomEvent(z.AUTHENTICATED, {
 				detail: {
-					...r,
+					...i,
 					appState: t?.appState
 				},
 				composed: !0,
 				bubbles: !0
 			});
-			window.dispatchEvent(i) && window.location.reload();
+			window.dispatchEvent(a) && window.location.reload();
 		},
 		async logout(t = {}) {
-			if (r && (localStorage.removeItem(q), localStorage.removeItem(J), Z(), $(), z(R.LOGOUT, {}), e)) return L(`Logout with options: ${JSON.stringify(t)}`), e.logout({
+			if (a && (localStorage.removeItem(J), localStorage.removeItem(Y), q(r, !1), $(), B(z.LOGOUT, {}), e)) return R(`Logout with options: ${JSON.stringify(t)}`), e.logout({
 				...t,
 				logoutParams: {
 					returnTo: window.location.href,
@@ -2430,7 +2446,7 @@ function Nt() {
 			});
 		}
 	};
-	return f;
+	return m;
 }
 //#endregion
-export { q as ACCESS_TOKEN_KEY, J as REFRESH_TOKEN_KEY, vt as SESSION_HINT_COOKIE, Y as SILENT_AUTH_THROTTLE_KEY, Nt as createAuth0Plugin };
+export { J as ACCESS_TOKEN_KEY, Y as REFRESH_TOKEN_KEY, X as SILENT_AUTH_THROTTLE_KEY, Pt as createAuth0Plugin };