@smg-automotive/auth 5.0.6 → 5.0.7

package/dist/cjs/index.js

@@ -19,15 +19,15 @@ PERFORMANCE OF THIS SOFTWARE.
 /* global Reflect, Promise */
 
 
-var __assign$2 = function() {
-    __assign$2 = Object.assign || function __assign(t) {
+var __assign = function() {
+    __assign = Object.assign || function __assign(t) {
         for (var s, i = 1, n = arguments.length; i < n; i++) {
             s = arguments[i];
             for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p)) t[p] = s[p];
         }
         return t;
     };
-    return __assign$2.apply(this, arguments);
+    return __assign.apply(this, arguments);
 };
 
 function __awaiter(thisArg, _arguments, P, generator) {
@@ -68,11 +68,9 @@ function __generator(thisArg, body) {
     }
 }
 
-var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};
-
 var dist$1 = {};
 
-var cookie$1 = {};
+var cookie = {};
 
 /*!
  * cookie
@@ -81,615 +79,648 @@ var cookie$1 = {};
  * MIT Licensed
  */
 
-/**
- * Module exports.
- * @public
- */
-
-cookie$1.parse = parse$2;
-cookie$1.serialize = serialize$1;
-
-/**
- * Module variables.
- * @private
- */
-
-var decode$1 = decodeURIComponent;
-var encode = encodeURIComponent;
-
-/**
- * RegExp to match field-content in RFC 7230 sec 3.2
- *
- * field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ]
- * field-vchar   = VCHAR / obs-text
- * obs-text      = %x80-FF
- */
-
-var fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/;
-
-/**
- * Parse a cookie header.
- *
- * Parse the given cookie header string into an object
- * The object has the various cookies as keys(names) => values
- *
- * @param {string} str
- * @param {object} [options]
- * @return {object}
- * @public
- */
-
-function parse$2(str, options) {
-  if (typeof str !== 'string') {
-    throw new TypeError('argument str must be a string');
-  }
-
-  var obj = {};
-  var opt = options || {};
-  var pairs = str.split(';');
-  var dec = opt.decode || decode$1;
-
-  for (var i = 0; i < pairs.length; i++) {
-    var pair = pairs[i];
-    var index = pair.indexOf('=');
-
-    // skip things that don't look like key=value
-    if (index < 0) {
-      continue;
-    }
-
-    var key = pair.substring(0, index).trim();
-
-    // only assign once
-    if (undefined == obj[key]) {
-      var val = pair.substring(index + 1, pair.length).trim();
-
-      // quoted values
-      if (val[0] === '"') {
-        val = val.slice(1, -1);
-      }
-
-      obj[key] = tryDecode(val, dec);
-    }
-  }
-
-  return obj;
+var hasRequiredCookie;
+
+function requireCookie () {
+	if (hasRequiredCookie) return cookie;
+	hasRequiredCookie = 1;
+
+	/**
+	 * Module exports.
+	 * @public
+	 */
+
+	cookie.parse = parse;
+	cookie.serialize = serialize;
+
+	/**
+	 * Module variables.
+	 * @private
+	 */
+
+	var decode = decodeURIComponent;
+	var encode = encodeURIComponent;
+
+	/**
+	 * RegExp to match field-content in RFC 7230 sec 3.2
+	 *
+	 * field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ]
+	 * field-vchar   = VCHAR / obs-text
+	 * obs-text      = %x80-FF
+	 */
+
+	var fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/;
+
+	/**
+	 * Parse a cookie header.
+	 *
+	 * Parse the given cookie header string into an object
+	 * The object has the various cookies as keys(names) => values
+	 *
+	 * @param {string} str
+	 * @param {object} [options]
+	 * @return {object}
+	 * @public
+	 */
+
+	function parse(str, options) {
+	  if (typeof str !== 'string') {
+	    throw new TypeError('argument str must be a string');
+	  }
+
+	  var obj = {};
+	  var opt = options || {};
+	  var pairs = str.split(';');
+	  var dec = opt.decode || decode;
+
+	  for (var i = 0; i < pairs.length; i++) {
+	    var pair = pairs[i];
+	    var index = pair.indexOf('=');
+
+	    // skip things that don't look like key=value
+	    if (index < 0) {
+	      continue;
+	    }
+
+	    var key = pair.substring(0, index).trim();
+
+	    // only assign once
+	    if (undefined == obj[key]) {
+	      var val = pair.substring(index + 1, pair.length).trim();
+
+	      // quoted values
+	      if (val[0] === '"') {
+	        val = val.slice(1, -1);
+	      }
+
+	      obj[key] = tryDecode(val, dec);
+	    }
+	  }
+
+	  return obj;
+	}
+
+	/**
+	 * Serialize data into a cookie header.
+	 *
+	 * Serialize the a name value pair into a cookie string suitable for
+	 * http headers. An optional options object specified cookie parameters.
+	 *
+	 * serialize('foo', 'bar', { httpOnly: true })
+	 *   => "foo=bar; httpOnly"
+	 *
+	 * @param {string} name
+	 * @param {string} val
+	 * @param {object} [options]
+	 * @return {string}
+	 * @public
+	 */
+
+	function serialize(name, val, options) {
+	  var opt = options || {};
+	  var enc = opt.encode || encode;
+
+	  if (typeof enc !== 'function') {
+	    throw new TypeError('option encode is invalid');
+	  }
+
+	  if (!fieldContentRegExp.test(name)) {
+	    throw new TypeError('argument name is invalid');
+	  }
+
+	  var value = enc(val);
+
+	  if (value && !fieldContentRegExp.test(value)) {
+	    throw new TypeError('argument val is invalid');
+	  }
+
+	  var str = name + '=' + value;
+
+	  if (null != opt.maxAge) {
+	    var maxAge = opt.maxAge - 0;
+
+	    if (isNaN(maxAge) || !isFinite(maxAge)) {
+	      throw new TypeError('option maxAge is invalid')
+	    }
+
+	    str += '; Max-Age=' + Math.floor(maxAge);
+	  }
+
+	  if (opt.domain) {
+	    if (!fieldContentRegExp.test(opt.domain)) {
+	      throw new TypeError('option domain is invalid');
+	    }
+
+	    str += '; Domain=' + opt.domain;
+	  }
+
+	  if (opt.path) {
+	    if (!fieldContentRegExp.test(opt.path)) {
+	      throw new TypeError('option path is invalid');
+	    }
+
+	    str += '; Path=' + opt.path;
+	  }
+
+	  if (opt.expires) {
+	    if (typeof opt.expires.toUTCString !== 'function') {
+	      throw new TypeError('option expires is invalid');
+	    }
+
+	    str += '; Expires=' + opt.expires.toUTCString();
+	  }
+
+	  if (opt.httpOnly) {
+	    str += '; HttpOnly';
+	  }
+
+	  if (opt.secure) {
+	    str += '; Secure';
+	  }
+
+	  if (opt.sameSite) {
+	    var sameSite = typeof opt.sameSite === 'string'
+	      ? opt.sameSite.toLowerCase() : opt.sameSite;
+
+	    switch (sameSite) {
+	      case true:
+	        str += '; SameSite=Strict';
+	        break;
+	      case 'lax':
+	        str += '; SameSite=Lax';
+	        break;
+	      case 'strict':
+	        str += '; SameSite=Strict';
+	        break;
+	      case 'none':
+	        str += '; SameSite=None';
+	        break;
+	      default:
+	        throw new TypeError('option sameSite is invalid');
+	    }
+	  }
+
+	  return str;
+	}
+
+	/**
+	 * Try decoding a string using a decoding function.
+	 *
+	 * @param {string} str
+	 * @param {function} decode
+	 * @private
+	 */
+
+	function tryDecode(str, decode) {
+	  try {
+	    return decode(str);
+	  } catch (e) {
+	    return str;
+	  }
+	}
+	return cookie;
 }
 
-/**
- * Serialize data into a cookie header.
- *
- * Serialize the a name value pair into a cookie string suitable for
- * http headers. An optional options object specified cookie parameters.
- *
- * serialize('foo', 'bar', { httpOnly: true })
- *   => "foo=bar; httpOnly"
- *
- * @param {string} name
- * @param {string} val
- * @param {object} [options]
- * @return {string}
- * @public
- */
-
-function serialize$1(name, val, options) {
-  var opt = options || {};
-  var enc = opt.encode || encode;
-
-  if (typeof enc !== 'function') {
-    throw new TypeError('option encode is invalid');
-  }
-
-  if (!fieldContentRegExp.test(name)) {
-    throw new TypeError('argument name is invalid');
-  }
-
-  var value = enc(val);
-
-  if (value && !fieldContentRegExp.test(value)) {
-    throw new TypeError('argument val is invalid');
-  }
-
-  var str = name + '=' + value;
-
-  if (null != opt.maxAge) {
-    var maxAge = opt.maxAge - 0;
-
-    if (isNaN(maxAge) || !isFinite(maxAge)) {
-      throw new TypeError('option maxAge is invalid')
-    }
-
-    str += '; Max-Age=' + Math.floor(maxAge);
-  }
-
-  if (opt.domain) {
-    if (!fieldContentRegExp.test(opt.domain)) {
-      throw new TypeError('option domain is invalid');
-    }
-
-    str += '; Domain=' + opt.domain;
-  }
-
-  if (opt.path) {
-    if (!fieldContentRegExp.test(opt.path)) {
-      throw new TypeError('option path is invalid');
-    }
-
-    str += '; Path=' + opt.path;
-  }
-
-  if (opt.expires) {
-    if (typeof opt.expires.toUTCString !== 'function') {
-      throw new TypeError('option expires is invalid');
-    }
-
-    str += '; Expires=' + opt.expires.toUTCString();
-  }
-
-  if (opt.httpOnly) {
-    str += '; HttpOnly';
-  }
-
-  if (opt.secure) {
-    str += '; Secure';
-  }
-
-  if (opt.sameSite) {
-    var sameSite = typeof opt.sameSite === 'string'
-      ? opt.sameSite.toLowerCase() : opt.sameSite;
-
-    switch (sameSite) {
-      case true:
-        str += '; SameSite=Strict';
-        break;
-      case 'lax':
-        str += '; SameSite=Lax';
-        break;
-      case 'strict':
-        str += '; SameSite=Strict';
-        break;
-      case 'none':
-        str += '; SameSite=None';
-        break;
-      default:
-        throw new TypeError('option sameSite is invalid');
-    }
-  }
-
-  return str;
-}
-
-/**
- * Try decoding a string using a decoding function.
- *
- * @param {string} str
- * @param {function} decode
- * @private
- */
-
-function tryDecode(str, decode) {
-  try {
-    return decode(str);
-  } catch (e) {
-    return str;
-  }
-}
-
-var setCookie$1 = {exports: {}};
-
-var defaultParseOptions = {
-  decodeValues: true,
-  map: false,
-  silent: false,
-};
-
-function isNonEmptyString(str) {
-  return typeof str === "string" && !!str.trim();
-}
-
-function parseString(setCookieValue, options) {
-  var parts = setCookieValue.split(";").filter(isNonEmptyString);
-
-  var nameValuePairStr = parts.shift();
-  var parsed = parseNameValuePair(nameValuePairStr);
-  var name = parsed.name;
-  var value = parsed.value;
-
-  options = options
-    ? Object.assign({}, defaultParseOptions, options)
-    : defaultParseOptions;
-
-  try {
-    value = options.decodeValues ? decodeURIComponent(value) : value; // decode cookie value
-  } catch (e) {
-    console.error(
-      "set-cookie-parser encountered an error while decoding a cookie with value '" +
-        value +
-        "'. Set options.decodeValues to false to disable this feature.",
-      e
-    );
-  }
-
-  var cookie = {
-    name: name,
-    value: value,
-  };
-
-  parts.forEach(function (part) {
-    var sides = part.split("=");
-    var key = sides.shift().trimLeft().toLowerCase();
-    var value = sides.join("=");
-    if (key === "expires") {
-      cookie.expires = new Date(value);
-    } else if (key === "max-age") {
-      cookie.maxAge = parseInt(value, 10);
-    } else if (key === "secure") {
-      cookie.secure = true;
-    } else if (key === "httponly") {
-      cookie.httpOnly = true;
-    } else if (key === "samesite") {
-      cookie.sameSite = value;
-    } else {
-      cookie[key] = value;
-    }
-  });
-
-  return cookie;
-}
-
-function parseNameValuePair(nameValuePairStr) {
-  // Parses name-value-pair according to rfc6265bis draft
-
-  var name = "";
-  var value = "";
-  var nameValueArr = nameValuePairStr.split("=");
-  if (nameValueArr.length > 1) {
-    name = nameValueArr.shift();
-    value = nameValueArr.join("="); // everything after the first =, joined by a "=" if there was more than one part
-  } else {
-    value = nameValuePairStr;
-  }
-
-  return { name: name, value: value };
+var setCookie = {exports: {}};
+
+var hasRequiredSetCookie;
+
+function requireSetCookie () {
+	if (hasRequiredSetCookie) return setCookie.exports;
+	hasRequiredSetCookie = 1;
+
+	var defaultParseOptions = {
+	  decodeValues: true,
+	  map: false,
+	  silent: false,
+	};
+
+	function isNonEmptyString(str) {
+	  return typeof str === "string" && !!str.trim();
+	}
+
+	function parseString(setCookieValue, options) {
+	  var parts = setCookieValue.split(";").filter(isNonEmptyString);
+
+	  var nameValuePairStr = parts.shift();
+	  var parsed = parseNameValuePair(nameValuePairStr);
+	  var name = parsed.name;
+	  var value = parsed.value;
+
+	  options = options
+	    ? Object.assign({}, defaultParseOptions, options)
+	    : defaultParseOptions;
+
+	  try {
+	    value = options.decodeValues ? decodeURIComponent(value) : value; // decode cookie value
+	  } catch (e) {
+	    console.error(
+	      "set-cookie-parser encountered an error while decoding a cookie with value '" +
+	        value +
+	        "'. Set options.decodeValues to false to disable this feature.",
+	      e
+	    );
+	  }
+
+	  var cookie = {
+	    name: name,
+	    value: value,
+	  };
+
+	  parts.forEach(function (part) {
+	    var sides = part.split("=");
+	    var key = sides.shift().trimLeft().toLowerCase();
+	    var value = sides.join("=");
+	    if (key === "expires") {
+	      cookie.expires = new Date(value);
+	    } else if (key === "max-age") {
+	      cookie.maxAge = parseInt(value, 10);
+	    } else if (key === "secure") {
+	      cookie.secure = true;
+	    } else if (key === "httponly") {
+	      cookie.httpOnly = true;
+	    } else if (key === "samesite") {
+	      cookie.sameSite = value;
+	    } else {
+	      cookie[key] = value;
+	    }
+	  });
+
+	  return cookie;
+	}
+
+	function parseNameValuePair(nameValuePairStr) {
+	  // Parses name-value-pair according to rfc6265bis draft
+
+	  var name = "";
+	  var value = "";
+	  var nameValueArr = nameValuePairStr.split("=");
+	  if (nameValueArr.length > 1) {
+	    name = nameValueArr.shift();
+	    value = nameValueArr.join("="); // everything after the first =, joined by a "=" if there was more than one part
+	  } else {
+	    value = nameValuePairStr;
+	  }
+
+	  return { name: name, value: value };
+	}
+
+	function parse(input, options) {
+	  options = options
+	    ? Object.assign({}, defaultParseOptions, options)
+	    : defaultParseOptions;
+
+	  if (!input) {
+	    if (!options.map) {
+	      return [];
+	    } else {
+	      return {};
+	    }
+	  }
+
+	  if (input.headers && input.headers["set-cookie"]) {
+	    // fast-path for node.js (which automatically normalizes header names to lower-case
+	    input = input.headers["set-cookie"];
+	  } else if (input.headers) {
+	    // slow-path for other environments - see #25
+	    var sch =
+	      input.headers[
+	        Object.keys(input.headers).find(function (key) {
+	          return key.toLowerCase() === "set-cookie";
+	        })
+	      ];
+	    // warn if called on a request-like object with a cookie header rather than a set-cookie header - see #34, 36
+	    if (!sch && input.headers.cookie && !options.silent) {
+	      console.warn(
+	        "Warning: set-cookie-parser appears to have been called on a request object. It is designed to parse Set-Cookie headers from responses, not Cookie headers from requests. Set the option {silent: true} to suppress this warning."
+	      );
+	    }
+	    input = sch;
+	  }
+	  if (!Array.isArray(input)) {
+	    input = [input];
+	  }
+
+	  options = options
+	    ? Object.assign({}, defaultParseOptions, options)
+	    : defaultParseOptions;
+
+	  if (!options.map) {
+	    return input.filter(isNonEmptyString).map(function (str) {
+	      return parseString(str, options);
+	    });
+	  } else {
+	    var cookies = {};
+	    return input.filter(isNonEmptyString).reduce(function (cookies, str) {
+	      var cookie = parseString(str, options);
+	      cookies[cookie.name] = cookie;
+	      return cookies;
+	    }, cookies);
+	  }
+	}
+
+	/*
+	  Set-Cookie header field-values are sometimes comma joined in one string. This splits them without choking on commas
+	  that are within a single set-cookie field-value, such as in the Expires portion.
+
+	  This is uncommon, but explicitly allowed - see https://tools.ietf.org/html/rfc2616#section-4.2
+	  Node.js does this for every header *except* set-cookie - see https://github.com/nodejs/node/blob/d5e363b77ebaf1caf67cd7528224b651c86815c1/lib/_http_incoming.js#L128
+	  React Native's fetch does this for *every* header, including set-cookie.
+
+	  Based on: https://github.com/google/j2objc/commit/16820fdbc8f76ca0c33472810ce0cb03d20efe25
+	  Credits to: https://github.com/tomball for original and https://github.com/chrusart for JavaScript implementation
+	*/
+	function splitCookiesString(cookiesString) {
+	  if (Array.isArray(cookiesString)) {
+	    return cookiesString;
+	  }
+	  if (typeof cookiesString !== "string") {
+	    return [];
+	  }
+
+	  var cookiesStrings = [];
+	  var pos = 0;
+	  var start;
+	  var ch;
+	  var lastComma;
+	  var nextStart;
+	  var cookiesSeparatorFound;
+
+	  function skipWhitespace() {
+	    while (pos < cookiesString.length && /\s/.test(cookiesString.charAt(pos))) {
+	      pos += 1;
+	    }
+	    return pos < cookiesString.length;
+	  }
+
+	  function notSpecialChar() {
+	    ch = cookiesString.charAt(pos);
+
+	    return ch !== "=" && ch !== ";" && ch !== ",";
+	  }
+
+	  while (pos < cookiesString.length) {
+	    start = pos;
+	    cookiesSeparatorFound = false;
+
+	    while (skipWhitespace()) {
+	      ch = cookiesString.charAt(pos);
+	      if (ch === ",") {
+	        // ',' is a cookie separator if we have later first '=', not ';' or ','
+	        lastComma = pos;
+	        pos += 1;
+
+	        skipWhitespace();
+	        nextStart = pos;
+
+	        while (pos < cookiesString.length && notSpecialChar()) {
+	          pos += 1;
+	        }
+
+	        // currently special character
+	        if (pos < cookiesString.length && cookiesString.charAt(pos) === "=") {
+	          // we found cookies separator
+	          cookiesSeparatorFound = true;
+	          // pos is inside the next cookie, so back up and return it.
+	          pos = nextStart;
+	          cookiesStrings.push(cookiesString.substring(start, lastComma));
+	          start = pos;
+	        } else {
+	          // in param ',' or param separator ';',
+	          // we continue from that comma
+	          pos = lastComma + 1;
+	        }
+	      } else {
+	        pos += 1;
+	      }
+	    }
+
+	    if (!cookiesSeparatorFound || pos >= cookiesString.length) {
+	      cookiesStrings.push(cookiesString.substring(start, cookiesString.length));
+	    }
+	  }
+
+	  return cookiesStrings;
+	}
+
+	setCookie.exports = parse;
+	setCookie.exports.parse = parse;
+	setCookie.exports.parseString = parseString;
+	setCookie.exports.splitCookiesString = splitCookiesString;
+	return setCookie.exports;
 }
 
-function parse$1(input, options) {
-  options = options
-    ? Object.assign({}, defaultParseOptions, options)
-    : defaultParseOptions;
+var utils = {};
 
-  if (!input) {
-    if (!options.map) {
-      return [];
-    } else {
-      return {};
-    }
-  }
-
-  if (input.headers && input.headers["set-cookie"]) {
-    // fast-path for node.js (which automatically normalizes header names to lower-case
-    input = input.headers["set-cookie"];
-  } else if (input.headers) {
-    // slow-path for other environments - see #25
-    var sch =
-      input.headers[
-        Object.keys(input.headers).find(function (key) {
-          return key.toLowerCase() === "set-cookie";
-        })
-      ];
-    // warn if called on a request-like object with a cookie header rather than a set-cookie header - see #34, 36
-    if (!sch && input.headers.cookie && !options.silent) {
-      console.warn(
-        "Warning: set-cookie-parser appears to have been called on a request object. It is designed to parse Set-Cookie headers from responses, not Cookie headers from requests. Set the option {silent: true} to suppress this warning."
-      );
-    }
-    input = sch;
-  }
-  if (!Array.isArray(input)) {
-    input = [input];
-  }
-
-  options = options
-    ? Object.assign({}, defaultParseOptions, options)
-    : defaultParseOptions;
-
-  if (!options.map) {
-    return input.filter(isNonEmptyString).map(function (str) {
-      return parseString(str, options);
-    });
-  } else {
-    var cookies = {};
-    return input.filter(isNonEmptyString).reduce(function (cookies, str) {
-      var cookie = parseString(str, options);
-      cookies[cookie.name] = cookie;
-      return cookies;
-    }, cookies);
-  }
+var hasRequiredUtils;
+
+function requireUtils () {
+	if (hasRequiredUtils) return utils;
+	hasRequiredUtils = 1;
+	var __assign = (utils && utils.__assign) || function () {
+	    __assign = Object.assign || function(t) {
+	        for (var s, i = 1, n = arguments.length; i < n; i++) {
+	            s = arguments[i];
+	            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+	                t[p] = s[p];
+	        }
+	        return t;
+	    };
+	    return __assign.apply(this, arguments);
+	};
+	Object.defineProperty(utils, "__esModule", { value: true });
+	utils.areCookiesEqual = utils.hasSameProperties = utils.createCookie = utils.isBrowser = void 0;
+	/**
+	 * Tells whether we are in a browser or server.
+	 */
+	function isBrowser() {
+	    return typeof window !== 'undefined';
+	}
+	utils.isBrowser = isBrowser;
+	/**
+	 * Create an instance of the Cookie interface
+	 */
+	function createCookie(name, value, options) {
+	    var sameSite = options.sameSite;
+	    if (sameSite === true) {
+	        sameSite = 'strict';
+	    }
+	    if (sameSite === undefined || sameSite === false) {
+	        sameSite = 'lax';
+	    }
+	    var cookieToSet = __assign(__assign({}, options), { sameSite: sameSite });
+	    delete cookieToSet.encode;
+	    return __assign({ name: name, value: value }, cookieToSet);
+	}
+	utils.createCookie = createCookie;
+	/**
+	 * Tells whether given objects have the same properties.
+	 */
+	function hasSameProperties(a, b) {
+	    var aProps = Object.getOwnPropertyNames(a);
+	    var bProps = Object.getOwnPropertyNames(b);
+	    if (aProps.length !== bProps.length) {
+	        return false;
+	    }
+	    for (var i = 0; i < aProps.length; i++) {
+	        var propName = aProps[i];
+	        if (a[propName] !== b[propName]) {
+	            return false;
+	        }
+	    }
+	    return true;
+	}
+	utils.hasSameProperties = hasSameProperties;
+	/**
+	 * Compare the cookie and return true if the cookies have equivalent
+	 * options and the cookies would be overwritten in the browser storage.
+	 *
+	 * @param a first Cookie for comparison
+	 * @param b second Cookie for comparison
+	 */
+	function areCookiesEqual(a, b) {
+	    var sameSiteSame = a.sameSite === b.sameSite;
+	    if (typeof a.sameSite === 'string' && typeof b.sameSite === 'string') {
+	        sameSiteSame = a.sameSite.toLowerCase() === b.sameSite.toLowerCase();
+	    }
+	    return (hasSameProperties(__assign(__assign({}, a), { sameSite: undefined }), __assign(__assign({}, b), { sameSite: undefined })) && sameSiteSame);
+	}
+	utils.areCookiesEqual = areCookiesEqual;
+	/* Functions */
+	
+	return utils;
 }
 
-/*
-  Set-Cookie header field-values are sometimes comma joined in one string. This splits them without choking on commas
-  that are within a single set-cookie field-value, such as in the Expires portion.
-
-  This is uncommon, but explicitly allowed - see https://tools.ietf.org/html/rfc2616#section-4.2
-  Node.js does this for every header *except* set-cookie - see https://github.com/nodejs/node/blob/d5e363b77ebaf1caf67cd7528224b651c86815c1/lib/_http_incoming.js#L128
-  React Native's fetch does this for *every* header, including set-cookie.
-
-  Based on: https://github.com/google/j2objc/commit/16820fdbc8f76ca0c33472810ce0cb03d20efe25
-  Credits to: https://github.com/tomball for original and https://github.com/chrusart for JavaScript implementation
-*/
-function splitCookiesString(cookiesString) {
-  if (Array.isArray(cookiesString)) {
-    return cookiesString;
-  }
-  if (typeof cookiesString !== "string") {
-    return [];
-  }
-
-  var cookiesStrings = [];
-  var pos = 0;
-  var start;
-  var ch;
-  var lastComma;
-  var nextStart;
-  var cookiesSeparatorFound;
-
-  function skipWhitespace() {
-    while (pos < cookiesString.length && /\s/.test(cookiesString.charAt(pos))) {
-      pos += 1;
-    }
-    return pos < cookiesString.length;
-  }
-
-  function notSpecialChar() {
-    ch = cookiesString.charAt(pos);
-
-    return ch !== "=" && ch !== ";" && ch !== ",";
-  }
-
-  while (pos < cookiesString.length) {
-    start = pos;
-    cookiesSeparatorFound = false;
-
-    while (skipWhitespace()) {
-      ch = cookiesString.charAt(pos);
-      if (ch === ",") {
-        // ',' is a cookie separator if we have later first '=', not ';' or ','
-        lastComma = pos;
-        pos += 1;
-
-        skipWhitespace();
-        nextStart = pos;
-
-        while (pos < cookiesString.length && notSpecialChar()) {
-          pos += 1;
-        }
-
-        // currently special character
-        if (pos < cookiesString.length && cookiesString.charAt(pos) === "=") {
-          // we found cookies separator
-          cookiesSeparatorFound = true;
-          // pos is inside the next cookie, so back up and return it.
-          pos = nextStart;
-          cookiesStrings.push(cookiesString.substring(start, lastComma));
-          start = pos;
-        } else {
-          // in param ',' or param separator ';',
-          // we continue from that comma
-          pos = lastComma + 1;
-        }
-      } else {
-        pos += 1;
-      }
-    }
-
-    if (!cookiesSeparatorFound || pos >= cookiesString.length) {
-      cookiesStrings.push(cookiesString.substring(start, cookiesString.length));
-    }
-  }
-
-  return cookiesStrings;
+var hasRequiredDist$1;
+
+function requireDist$1 () {
+	if (hasRequiredDist$1) return dist$1;
+	hasRequiredDist$1 = 1;
+	var __assign = (dist$1 && dist$1.__assign) || function () {
+	    __assign = Object.assign || function(t) {
+	        for (var s, i = 1, n = arguments.length; i < n; i++) {
+	            s = arguments[i];
+	            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+	                t[p] = s[p];
+	        }
+	        return t;
+	    };
+	    return __assign.apply(this, arguments);
+	};
+	Object.defineProperty(dist$1, "__esModule", { value: true });
+	dist$1.destroyCookie = dist$1.setCookie = dist$1.parseCookies = void 0;
+	var cookie = requireCookie();
+	var setCookieParser = /*@__PURE__*/ requireSetCookie();
+	var utils_1 = requireUtils();
+	/**
+	 * Parses cookies.
+	 *
+	 * @param ctx NextJS page or API context, express context, null or undefined.
+	 * @param options Options that we pass down to `cookie` library.
+	 */
+	function parseCookies(ctx, options) {
+	    var _a, _b;
+	    if ((_b = (_a = ctx === null || ctx === void 0 ? void 0 : ctx.req) === null || _a === void 0 ? void 0 : _a.headers) === null || _b === void 0 ? void 0 : _b.cookie) {
+	        return cookie.parse(ctx.req.headers.cookie, options);
+	    }
+	    if (utils_1.isBrowser()) {
+	        return cookie.parse(document.cookie, options);
+	    }
+	    return {};
+	}
+	dist$1.parseCookies = parseCookies;
+	/**
+	 * Sets a cookie.
+	 *
+	 * @param ctx NextJS page or API context, express context, null or undefined.
+	 * @param name The name of your cookie.
+	 * @param value The value of your cookie.
+	 * @param options Options that we pass down to `cookie` library.
+	 */
+	function setCookie(ctx, name, value, options) {
+	    var _a, _b;
+	    if (options === void 0) { options = {}; }
+	    // SSR
+	    if (((_a = ctx === null || ctx === void 0 ? void 0 : ctx.res) === null || _a === void 0 ? void 0 : _a.getHeader) && ctx.res.setHeader) {
+	        // Check if response has finished and warn about it.
+	        if ((_b = ctx === null || ctx === void 0 ? void 0 : ctx.res) === null || _b === void 0 ? void 0 : _b.finished) {
+	            console.warn("Not setting \"" + name + "\" cookie. Response has finished.");
+	            console.warn("You should set cookie before res.send()");
+	            return {};
+	        }
+	        /**
+	         * Load existing cookies from the header and parse them.
+	         */
+	        var cookies = ctx.res.getHeader('Set-Cookie') || [];
+	        if (typeof cookies === 'string')
+	            cookies = [cookies];
+	        if (typeof cookies === 'number')
+	            cookies = [];
+	        /**
+	         * Parse cookies but ignore values - we've already encoded
+	         * them in the previous call.
+	         */
+	        var parsedCookies = setCookieParser.parse(cookies, {
+	            decodeValues: false,
+	        });
+	        /**
+	         * We create the new cookie and make sure that none of
+	         * the existing cookies match it.
+	         */
+	        var newCookie_1 = utils_1.createCookie(name, value, options);
+	        var cookiesToSet_1 = [];
+	        parsedCookies.forEach(function (parsedCookie) {
+	            if (!utils_1.areCookiesEqual(parsedCookie, newCookie_1)) {
+	                /**
+	                 * We serialize the cookie back to the original format
+	                 * if it isn't the same as the new one.
+	                 */
+	                var serializedCookie = cookie.serialize(parsedCookie.name, parsedCookie.value, __assign({ 
+	                    // we prevent reencoding by default, but you might override it
+	                    encode: function (val) { return val; } }, parsedCookie));
+	                cookiesToSet_1.push(serializedCookie);
+	            }
+	        });
+	        cookiesToSet_1.push(cookie.serialize(name, value, options));
+	        // Update the header.
+	        ctx.res.setHeader('Set-Cookie', cookiesToSet_1);
+	    }
+	    // Browser
+	    if (utils_1.isBrowser()) {
+	        if (options && options.httpOnly) {
+	            throw new Error('Can not set a httpOnly cookie in the browser.');
+	        }
+	        document.cookie = cookie.serialize(name, value, options);
+	    }
+	    return {};
+	}
+	dist$1.setCookie = setCookie;
+	/**
+	 * Destroys a cookie with a particular name.
+	 *
+	 * @param ctx NextJS page or API context, express context, null or undefined.
+	 * @param name Cookie name.
+	 * @param options Options that we pass down to `cookie` library.
+	 */
+	function destroyCookie(ctx, name, options) {
+	    /**
+	     * We forward the request destroy to setCookie function
+	     * as it is the same function with modified maxAge value.
+	     */
+	    return setCookie(ctx, name, '', __assign(__assign({}, (options || {})), { maxAge: -1 }));
+	}
+	dist$1.destroyCookie = destroyCookie;
+	/* Utility Exports */
+	dist$1.default = {
+	    set: setCookie,
+	    get: parseCookies,
+	    destroy: destroyCookie,
+	};
+	
+	return dist$1;
 }
 
-setCookie$1.exports = parse$1;
-setCookie$1.exports.parse = parse$1;
-setCookie$1.exports.parseString = parseString;
-setCookie$1.exports.splitCookiesString = splitCookiesString;
-
-var setCookieExports = setCookie$1.exports;
-
-var utils = {};
-
-var __assign$1 = (commonjsGlobal && commonjsGlobal.__assign) || function () {
-    __assign$1 = Object.assign || function(t) {
-        for (var s, i = 1, n = arguments.length; i < n; i++) {
-            s = arguments[i];
-            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
-                t[p] = s[p];
-        }
-        return t;
-    };
-    return __assign$1.apply(this, arguments);
-};
-Object.defineProperty(utils, "__esModule", { value: true });
-utils.areCookiesEqual = utils.hasSameProperties = utils.createCookie = utils.isBrowser = void 0;
-/**
- * Tells whether we are in a browser or server.
- */
-function isBrowser() {
-    return typeof window !== 'undefined';
-}
-utils.isBrowser = isBrowser;
-/**
- * Create an instance of the Cookie interface
- */
-function createCookie(name, value, options) {
-    var sameSite = options.sameSite;
-    if (sameSite === true) {
-        sameSite = 'strict';
-    }
-    if (sameSite === undefined || sameSite === false) {
-        sameSite = 'lax';
-    }
-    var cookieToSet = __assign$1(__assign$1({}, options), { sameSite: sameSite });
-    delete cookieToSet.encode;
-    return __assign$1({ name: name, value: value }, cookieToSet);
-}
-utils.createCookie = createCookie;
-/**
- * Tells whether given objects have the same properties.
- */
-function hasSameProperties(a, b) {
-    var aProps = Object.getOwnPropertyNames(a);
-    var bProps = Object.getOwnPropertyNames(b);
-    if (aProps.length !== bProps.length) {
-        return false;
-    }
-    for (var i = 0; i < aProps.length; i++) {
-        var propName = aProps[i];
-        if (a[propName] !== b[propName]) {
-            return false;
-        }
-    }
-    return true;
-}
-utils.hasSameProperties = hasSameProperties;
-/**
- * Compare the cookie and return true if the cookies have equivalent
- * options and the cookies would be overwritten in the browser storage.
- *
- * @param a first Cookie for comparison
- * @param b second Cookie for comparison
- */
-function areCookiesEqual(a, b) {
-    var sameSiteSame = a.sameSite === b.sameSite;
-    if (typeof a.sameSite === 'string' && typeof b.sameSite === 'string') {
-        sameSiteSame = a.sameSite.toLowerCase() === b.sameSite.toLowerCase();
-    }
-    return (hasSameProperties(__assign$1(__assign$1({}, a), { sameSite: undefined }), __assign$1(__assign$1({}, b), { sameSite: undefined })) && sameSiteSame);
-}
-utils.areCookiesEqual = areCookiesEqual;
-
-var __assign = (commonjsGlobal && commonjsGlobal.__assign) || function () {
-    __assign = Object.assign || function(t) {
-        for (var s, i = 1, n = arguments.length; i < n; i++) {
-            s = arguments[i];
-            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
-                t[p] = s[p];
-        }
-        return t;
-    };
-    return __assign.apply(this, arguments);
-};
-Object.defineProperty(dist$1, "__esModule", { value: true });
-dist$1.destroyCookie = dist$1.setCookie = parseCookies_1 = dist$1.parseCookies = void 0;
-var cookie = cookie$1;
-var setCookieParser = setCookieExports;
-var utils_1 = utils;
-/**
- * Parses cookies.
- *
- * @param ctx NextJS page or API context, express context, null or undefined.
- * @param options Options that we pass down to `cookie` library.
- */
-function parseCookies(ctx, options) {
-    var _a, _b;
-    if ((_b = (_a = ctx === null || ctx === void 0 ? void 0 : ctx.req) === null || _a === void 0 ? void 0 : _a.headers) === null || _b === void 0 ? void 0 : _b.cookie) {
-        return cookie.parse(ctx.req.headers.cookie, options);
-    }
-    if (utils_1.isBrowser()) {
-        return cookie.parse(document.cookie, options);
-    }
-    return {};
-}
-var parseCookies_1 = dist$1.parseCookies = parseCookies;
-/**
- * Sets a cookie.
- *
- * @param ctx NextJS page or API context, express context, null or undefined.
- * @param name The name of your cookie.
- * @param value The value of your cookie.
- * @param options Options that we pass down to `cookie` library.
- */
-function setCookie(ctx, name, value, options) {
-    var _a, _b;
-    if (options === void 0) { options = {}; }
-    // SSR
-    if (((_a = ctx === null || ctx === void 0 ? void 0 : ctx.res) === null || _a === void 0 ? void 0 : _a.getHeader) && ctx.res.setHeader) {
-        // Check if response has finished and warn about it.
-        if ((_b = ctx === null || ctx === void 0 ? void 0 : ctx.res) === null || _b === void 0 ? void 0 : _b.finished) {
-            console.warn("Not setting \"" + name + "\" cookie. Response has finished.");
-            console.warn("You should set cookie before res.send()");
-            return {};
-        }
-        /**
-         * Load existing cookies from the header and parse them.
-         */
-        var cookies = ctx.res.getHeader('Set-Cookie') || [];
-        if (typeof cookies === 'string')
-            cookies = [cookies];
-        if (typeof cookies === 'number')
-            cookies = [];
-        /**
-         * Parse cookies but ignore values - we've already encoded
-         * them in the previous call.
-         */
-        var parsedCookies = setCookieParser.parse(cookies, {
-            decodeValues: false,
-        });
-        /**
-         * We create the new cookie and make sure that none of
-         * the existing cookies match it.
-         */
-        var newCookie_1 = utils_1.createCookie(name, value, options);
-        var cookiesToSet_1 = [];
-        parsedCookies.forEach(function (parsedCookie) {
-            if (!utils_1.areCookiesEqual(parsedCookie, newCookie_1)) {
-                /**
-                 * We serialize the cookie back to the original format
-                 * if it isn't the same as the new one.
-                 */
-                var serializedCookie = cookie.serialize(parsedCookie.name, parsedCookie.value, __assign({ 
-                    // we prevent reencoding by default, but you might override it
-                    encode: function (val) { return val; } }, parsedCookie));
-                cookiesToSet_1.push(serializedCookie);
-            }
-        });
-        cookiesToSet_1.push(cookie.serialize(name, value, options));
-        // Update the header.
-        ctx.res.setHeader('Set-Cookie', cookiesToSet_1);
-    }
-    // Browser
-    if (utils_1.isBrowser()) {
-        if (options && options.httpOnly) {
-            throw new Error('Can not set a httpOnly cookie in the browser.');
-        }
-        document.cookie = cookie.serialize(name, value, options);
-    }
-    return {};
-}
-dist$1.setCookie = setCookie;
-/**
- * Destroys a cookie with a particular name.
- *
- * @param ctx NextJS page or API context, express context, null or undefined.
- * @param name Cookie name.
- * @param options Options that we pass down to `cookie` library.
- */
-function destroyCookie(ctx, name, options) {
-    /**
-     * We forward the request destroy to setCookie function
-     * as it is the same function with modified maxAge value.
-     */
-    return setCookie(ctx, name, '', __assign(__assign({}, (options || {})), { maxAge: -1 }));
-}
-dist$1.destroyCookie = destroyCookie;
-/* Utility Exports */
-dist$1.default = {
-    set: setCookie,
-    get: parseCookies,
-    destroy: destroyCookie,
-};
+var distExports$1 = requireDist$1();
 
 var decodeJWT = function (token) {
     if (token === null || token === undefined)
@@ -752,7 +783,7 @@ var getUserDataAndTokensFromCookies = function (_a) {
         : null;
     var user = decodeJWT(accessToken);
     var mergedUser = user
-        ? __assign$2({ id: user.id, email: user.email, exp: user.exp, sellerId: (_b = user.sellerIds) === null || _b === void 0 ? void 0 : _b[0], sellerIds: user.sellerIds, isImpersonated: user.isImpersonated ? user.isImpersonated : false }, userDataCookieObject) : null;
+        ? __assign({ id: user.id, email: user.email, exp: user.exp, sellerId: (_b = user.sellerIds) === null || _b === void 0 ? void 0 : _b[0], sellerIds: user.sellerIds, isImpersonated: user.isImpersonated ? user.isImpersonated : false }, userDataCookieObject) : null;
     return {
         user: mergedUser,
         accessToken: accessToken,
@@ -778,11 +809,11 @@ var AuthProvider = function (_a) {
     }, []);
     var triggerRefreshTokenApiUrl = memoizedAuthConfig.triggerRefreshTokenApiUrl, subMinutesFromExpirationTime = memoizedAuthConfig.subMinutesFromExpirationTime;
     var errorHandler = authConfig.errorHandler;
-    var cookies = parseCookies_1();
+    var cookies = distExports$1.parseCookies();
     var _b = getUserDataAndTokensFromCookies({
         cookies: cookies,
         passedAccessToken: passedAccessToken,
-        authConfig: __assign$2(__assign$2({}, memoizedAuthConfig), { errorHandler: errorHandler }),
+        authConfig: __assign(__assign({}, memoizedAuthConfig), { errorHandler: errorHandler }),
     }), cookieUser = _b.user, cookieAccessToken = _b.accessToken;
     var memoizedUser = React.useMemo(function () {
         if (!passedUser) {
@@ -805,21 +836,20 @@ var AuthProvider = function (_a) {
                         case 1:
                             response = _a.sent();
                             if (!response.ok) {
-                                errorHandler &&
-                                    errorHandler(new Error('Failed to trigger refresh token api'), {
-                                        extra: { response: response },
-                                    });
+                                errorHandler === null || errorHandler === void 0 ? void 0 : errorHandler(new Error('Failed to trigger refresh token api'), {
+                                    extra: { response: response },
+                                });
                             }
-                            updatedCookies = parseCookies_1();
+                            updatedCookies = distExports$1.parseCookies();
                             refreshedUser = getUserDataAndTokensFromCookies({
                                 cookies: updatedCookies,
-                                authConfig: __assign$2(__assign$2({}, memoizedAuthConfig), { errorHandler: errorHandler }),
+                                authConfig: __assign(__assign({}, memoizedAuthConfig), { errorHandler: errorHandler }),
                             }).user;
                             setUser(refreshedUser);
                             return [3 /*break*/, 3];
                         case 2:
                             error_1 = _a.sent();
-                            errorHandler && errorHandler(error_1);
+                            errorHandler === null || errorHandler === void 0 ? void 0 : errorHandler(error_1);
                             return [3 /*break*/, 3];
                         case 3: return [2 /*return*/];
                     }
@@ -932,10 +962,9 @@ var ensureTokenFreshness = function (_a) { return __awaiter(void 0, [_a], void 0
                     res.cookies.delete(tokenNames.access);
                     res.cookies.delete(tokenNames.refresh);
                     res.cookies.delete(userDataCookieName);
-                    errorHandler &&
-                        errorHandler(new Error('Failed to refresh token'), {
-                            extra: { response: response },
-                        });
+                    errorHandler === null || errorHandler === void 0 ? void 0 : errorHandler(new Error('Failed to refresh token'), {
+                        extra: { response: response },
+                    });
                     return [2 /*return*/, res];
                 }
                 return [4 /*yield*/, response.json()];
@@ -970,7 +999,7 @@ var ensureTokenFreshness = function (_a) { return __awaiter(void 0, [_a], void 0
                 return [2 /*return*/, res];
             case 4:
                 error_1 = _e.sent();
-                errorHandler && errorHandler(error_1);
+                errorHandler === null || errorHandler === void 0 ? void 0 : errorHandler(error_1);
                 return [3 /*break*/, 5];
             case 5:
                 res.cookies.delete(userDataCookieName);
@@ -983,238 +1012,254 @@ var ensureTokenFreshness = function (_a) { return __awaiter(void 0, [_a], void 0
 
 var dist = {};
 
-Object.defineProperty(dist, "__esModule", { value: true });
-var parse_1 = dist.parse = parse;
-dist.serialize = serialize;
-/**
- * RegExp to match cookie-name in RFC 6265 sec 4.1.1
- * This refers out to the obsoleted definition of token in RFC 2616 sec 2.2
- * which has been replaced by the token definition in RFC 7230 appendix B.
- *
- * cookie-name       = token
- * token             = 1*tchar
- * tchar             = "!" / "#" / "$" / "%" / "&" / "'" /
- *                     "*" / "+" / "-" / "." / "^" / "_" /
- *                     "`" / "|" / "~" / DIGIT / ALPHA
- */
-const cookieNameRegExp = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
-/**
- * RegExp to match cookie-value in RFC 6265 sec 4.1.1
- *
- * cookie-value      = *cookie-octet / ( DQUOTE *cookie-octet DQUOTE )
- * cookie-octet      = %x21 / %x23-2B / %x2D-3A / %x3C-5B / %x5D-7E
- *                     ; US-ASCII characters excluding CTLs,
- *                     ; whitespace DQUOTE, comma, semicolon,
- *                     ; and backslash
- */
-const cookieValueRegExp = /^("?)[\u0021\u0023-\u002B\u002D-\u003A\u003C-\u005B\u005D-\u007E]*\1$/;
-/**
- * RegExp to match domain-value in RFC 6265 sec 4.1.1
- *
- * domain-value      = <subdomain>
- *                     ; defined in [RFC1034], Section 3.5, as
- *                     ; enhanced by [RFC1123], Section 2.1
- * <subdomain>       = <label> | <subdomain> "." <label>
- * <label>           = <let-dig> [ [ <ldh-str> ] <let-dig> ]
- *                     Labels must be 63 characters or less.
- *                     'let-dig' not 'letter' in the first char, per RFC1123
- * <ldh-str>         = <let-dig-hyp> | <let-dig-hyp> <ldh-str>
- * <let-dig-hyp>     = <let-dig> | "-"
- * <let-dig>         = <letter> | <digit>
- * <letter>          = any one of the 52 alphabetic characters A through Z in
- *                     upper case and a through z in lower case
- * <digit>           = any one of the ten digits 0 through 9
- *
- * Keep support for leading dot: https://github.com/jshttp/cookie/issues/173
- *
- * > (Note that a leading %x2E ("."), if present, is ignored even though that
- * character is not permitted, but a trailing %x2E ("."), if present, will
- * cause the user agent to ignore the attribute.)
- */
-const domainValueRegExp = /^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i;
-/**
- * RegExp to match path-value in RFC 6265 sec 4.1.1
- *
- * path-value        = <any CHAR except CTLs or ";">
- * CHAR              = %x01-7F
- *                     ; defined in RFC 5234 appendix B.1
- */
-const pathValueRegExp = /^[\u0020-\u003A\u003D-\u007E]*$/;
-const __toString = Object.prototype.toString;
-const NullObject = /* @__PURE__ */ (() => {
-    const C = function () { };
-    C.prototype = Object.create(null);
-    return C;
-})();
-/**
- * Parse a cookie header.
- *
- * Parse the given cookie header string into an object
- * The object has the various cookies as keys(names) => values
- */
-function parse(str, options) {
-    const obj = new NullObject();
-    const len = str.length;
-    // RFC 6265 sec 4.1.1, RFC 2616 2.2 defines a cookie name consists of one char minimum, plus '='.
-    if (len < 2)
-        return obj;
-    const dec = options?.decode || decode;
-    let index = 0;
-    do {
-        const eqIdx = str.indexOf("=", index);
-        if (eqIdx === -1)
-            break; // No more cookie pairs.
-        const colonIdx = str.indexOf(";", index);
-        const endIdx = colonIdx === -1 ? len : colonIdx;
-        if (eqIdx > endIdx) {
-            // backtrack on prior semicolon
-            index = str.lastIndexOf(";", eqIdx - 1) + 1;
-            continue;
-        }
-        const keyStartIdx = startIndex(str, index, eqIdx);
-        const keyEndIdx = endIndex(str, eqIdx, keyStartIdx);
-        const key = str.slice(keyStartIdx, keyEndIdx);
-        // only assign once
-        if (obj[key] === undefined) {
-            let valStartIdx = startIndex(str, eqIdx + 1, endIdx);
-            let valEndIdx = endIndex(str, endIdx, valStartIdx);
-            const value = dec(str.slice(valStartIdx, valEndIdx));
-            obj[key] = value;
-        }
-        index = endIdx + 1;
-    } while (index < len);
-    return obj;
-}
-function startIndex(str, index, max) {
-    do {
-        const code = str.charCodeAt(index);
-        if (code !== 0x20 /*   */ && code !== 0x09 /* \t */)
-            return index;
-    } while (++index < max);
-    return max;
-}
-function endIndex(str, index, min) {
-    while (index > min) {
-        const code = str.charCodeAt(--index);
-        if (code !== 0x20 /*   */ && code !== 0x09 /* \t */)
-            return index + 1;
-    }
-    return min;
-}
-/**
- * Serialize data into a cookie header.
- *
- * Serialize a name value pair into a cookie string suitable for
- * http headers. An optional options object specifies cookie parameters.
- *
- * serialize('foo', 'bar', { httpOnly: true })
- *   => "foo=bar; httpOnly"
- */
-function serialize(name, val, options) {
-    const enc = options?.encode || encodeURIComponent;
-    if (!cookieNameRegExp.test(name)) {
-        throw new TypeError(`argument name is invalid: ${name}`);
-    }
-    const value = enc(val);
-    if (!cookieValueRegExp.test(value)) {
-        throw new TypeError(`argument val is invalid: ${val}`);
-    }
-    let str = name + "=" + value;
-    if (!options)
-        return str;
-    if (options.maxAge !== undefined) {
-        if (!Number.isInteger(options.maxAge)) {
-            throw new TypeError(`option maxAge is invalid: ${options.maxAge}`);
-        }
-        str += "; Max-Age=" + options.maxAge;
-    }
-    if (options.domain) {
-        if (!domainValueRegExp.test(options.domain)) {
-            throw new TypeError(`option domain is invalid: ${options.domain}`);
-        }
-        str += "; Domain=" + options.domain;
-    }
-    if (options.path) {
-        if (!pathValueRegExp.test(options.path)) {
-            throw new TypeError(`option path is invalid: ${options.path}`);
-        }
-        str += "; Path=" + options.path;
-    }
-    if (options.expires) {
-        if (!isDate(options.expires) ||
-            !Number.isFinite(options.expires.valueOf())) {
-            throw new TypeError(`option expires is invalid: ${options.expires}`);
-        }
-        str += "; Expires=" + options.expires.toUTCString();
-    }
-    if (options.httpOnly) {
-        str += "; HttpOnly";
-    }
-    if (options.secure) {
-        str += "; Secure";
-    }
-    if (options.partitioned) {
-        str += "; Partitioned";
-    }
-    if (options.priority) {
-        switch (options.priority) {
-            case "low":
-                str += "; Priority=Low";
-                break;
-            case "medium":
-                str += "; Priority=Medium";
-                break;
-            case "high":
-                str += "; Priority=High";
-                break;
-            default:
-                throw new TypeError(`option priority is invalid: ${options.priority}`);
-        }
-    }
-    if (options.sameSite) {
-        switch (options.sameSite) {
-            case true:
-            case "strict":
-                str += "; SameSite=Strict";
-                break;
-            case "lax":
-                str += "; SameSite=Lax";
-                break;
-            case "none":
-                str += "; SameSite=None";
-                break;
-            default:
-                throw new TypeError(`option sameSite is invalid: ${options.sameSite}`);
-        }
-    }
-    return str;
-}
-/**
- * URL-decode string value. Optimized to skip native call when no %.
- */
-function decode(str) {
-    if (str.indexOf("%") === -1)
-        return str;
-    try {
-        return decodeURIComponent(str);
-    }
-    catch (e) {
-        return str;
-    }
-}
-/**
- * Determine if value is a Date.
- */
-function isDate(val) {
-    return __toString.call(val) === "[object Date]";
+var hasRequiredDist;
+
+function requireDist () {
+	if (hasRequiredDist) return dist;
+	hasRequiredDist = 1;
+	Object.defineProperty(dist, "__esModule", { value: true });
+	dist.parse = parse;
+	dist.serialize = serialize;
+	/**
+	 * RegExp to match cookie-name in RFC 6265 sec 4.1.1
+	 * This refers out to the obsoleted definition of token in RFC 2616 sec 2.2
+	 * which has been replaced by the token definition in RFC 7230 appendix B.
+	 *
+	 * cookie-name       = token
+	 * token             = 1*tchar
+	 * tchar             = "!" / "#" / "$" / "%" / "&" / "'" /
+	 *                     "*" / "+" / "-" / "." / "^" / "_" /
+	 *                     "`" / "|" / "~" / DIGIT / ALPHA
+	 */
+	const cookieNameRegExp = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+	/**
+	 * RegExp to match cookie-value in RFC 6265 sec 4.1.1
+	 *
+	 * cookie-value      = *cookie-octet / ( DQUOTE *cookie-octet DQUOTE )
+	 * cookie-octet      = %x21 / %x23-2B / %x2D-3A / %x3C-5B / %x5D-7E
+	 *                     ; US-ASCII characters excluding CTLs,
+	 *                     ; whitespace DQUOTE, comma, semicolon,
+	 *                     ; and backslash
+	 */
+	const cookieValueRegExp = /^("?)[\u0021\u0023-\u002B\u002D-\u003A\u003C-\u005B\u005D-\u007E]*\1$/;
+	/**
+	 * RegExp to match domain-value in RFC 6265 sec 4.1.1
+	 *
+	 * domain-value      = <subdomain>
+	 *                     ; defined in [RFC1034], Section 3.5, as
+	 *                     ; enhanced by [RFC1123], Section 2.1
+	 * <subdomain>       = <label> | <subdomain> "." <label>
+	 * <label>           = <let-dig> [ [ <ldh-str> ] <let-dig> ]
+	 *                     Labels must be 63 characters or less.
+	 *                     'let-dig' not 'letter' in the first char, per RFC1123
+	 * <ldh-str>         = <let-dig-hyp> | <let-dig-hyp> <ldh-str>
+	 * <let-dig-hyp>     = <let-dig> | "-"
+	 * <let-dig>         = <letter> | <digit>
+	 * <letter>          = any one of the 52 alphabetic characters A through Z in
+	 *                     upper case and a through z in lower case
+	 * <digit>           = any one of the ten digits 0 through 9
+	 *
+	 * Keep support for leading dot: https://github.com/jshttp/cookie/issues/173
+	 *
+	 * > (Note that a leading %x2E ("."), if present, is ignored even though that
+	 * character is not permitted, but a trailing %x2E ("."), if present, will
+	 * cause the user agent to ignore the attribute.)
+	 */
+	const domainValueRegExp = /^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i;
+	/**
+	 * RegExp to match path-value in RFC 6265 sec 4.1.1
+	 *
+	 * path-value        = <any CHAR except CTLs or ";">
+	 * CHAR              = %x01-7F
+	 *                     ; defined in RFC 5234 appendix B.1
+	 */
+	const pathValueRegExp = /^[\u0020-\u003A\u003D-\u007E]*$/;
+	const __toString = Object.prototype.toString;
+	const NullObject = /* @__PURE__ */ (() => {
+	    const C = function () { };
+	    C.prototype = Object.create(null);
+	    return C;
+	})();
+	/**
+	 * Parse a cookie header.
+	 *
+	 * Parse the given cookie header string into an object
+	 * The object has the various cookies as keys(names) => values
+	 */
+	function parse(str, options) {
+	    const obj = new NullObject();
+	    const len = str.length;
+	    // RFC 6265 sec 4.1.1, RFC 2616 2.2 defines a cookie name consists of one char minimum, plus '='.
+	    if (len < 2)
+	        return obj;
+	    const dec = options?.decode || decode;
+	    let index = 0;
+	    do {
+	        const eqIdx = str.indexOf("=", index);
+	        if (eqIdx === -1)
+	            break; // No more cookie pairs.
+	        const colonIdx = str.indexOf(";", index);
+	        const endIdx = colonIdx === -1 ? len : colonIdx;
+	        if (eqIdx > endIdx) {
+	            // backtrack on prior semicolon
+	            index = str.lastIndexOf(";", eqIdx - 1) + 1;
+	            continue;
+	        }
+	        const keyStartIdx = startIndex(str, index, eqIdx);
+	        const keyEndIdx = endIndex(str, eqIdx, keyStartIdx);
+	        const key = str.slice(keyStartIdx, keyEndIdx);
+	        // only assign once
+	        if (obj[key] === undefined) {
+	            let valStartIdx = startIndex(str, eqIdx + 1, endIdx);
+	            let valEndIdx = endIndex(str, endIdx, valStartIdx);
+	            const value = dec(str.slice(valStartIdx, valEndIdx));
+	            obj[key] = value;
+	        }
+	        index = endIdx + 1;
+	    } while (index < len);
+	    return obj;
+	}
+	function startIndex(str, index, max) {
+	    do {
+	        const code = str.charCodeAt(index);
+	        if (code !== 0x20 /*   */ && code !== 0x09 /* \t */)
+	            return index;
+	    } while (++index < max);
+	    return max;
+	}
+	function endIndex(str, index, min) {
+	    while (index > min) {
+	        const code = str.charCodeAt(--index);
+	        if (code !== 0x20 /*   */ && code !== 0x09 /* \t */)
+	            return index + 1;
+	    }
+	    return min;
+	}
+	/**
+	 * Serialize data into a cookie header.
+	 *
+	 * Serialize a name value pair into a cookie string suitable for
+	 * http headers. An optional options object specifies cookie parameters.
+	 *
+	 * serialize('foo', 'bar', { httpOnly: true })
+	 *   => "foo=bar; httpOnly"
+	 */
+	function serialize(name, val, options) {
+	    const enc = options?.encode || encodeURIComponent;
+	    if (!cookieNameRegExp.test(name)) {
+	        throw new TypeError(`argument name is invalid: ${name}`);
+	    }
+	    const value = enc(val);
+	    if (!cookieValueRegExp.test(value)) {
+	        throw new TypeError(`argument val is invalid: ${val}`);
+	    }
+	    let str = name + "=" + value;
+	    if (!options)
+	        return str;
+	    if (options.maxAge !== undefined) {
+	        if (!Number.isInteger(options.maxAge)) {
+	            throw new TypeError(`option maxAge is invalid: ${options.maxAge}`);
+	        }
+	        str += "; Max-Age=" + options.maxAge;
+	    }
+	    if (options.domain) {
+	        if (!domainValueRegExp.test(options.domain)) {
+	            throw new TypeError(`option domain is invalid: ${options.domain}`);
+	        }
+	        str += "; Domain=" + options.domain;
+	    }
+	    if (options.path) {
+	        if (!pathValueRegExp.test(options.path)) {
+	            throw new TypeError(`option path is invalid: ${options.path}`);
+	        }
+	        str += "; Path=" + options.path;
+	    }
+	    if (options.expires) {
+	        if (!isDate(options.expires) ||
+	            !Number.isFinite(options.expires.valueOf())) {
+	            throw new TypeError(`option expires is invalid: ${options.expires}`);
+	        }
+	        str += "; Expires=" + options.expires.toUTCString();
+	    }
+	    if (options.httpOnly) {
+	        str += "; HttpOnly";
+	    }
+	    if (options.secure) {
+	        str += "; Secure";
+	    }
+	    if (options.partitioned) {
+	        str += "; Partitioned";
+	    }
+	    if (options.priority) {
+	        const priority = typeof options.priority === "string"
+	            ? options.priority.toLowerCase()
+	            : options.sameSite;
+	        switch (priority) {
+	            case "low":
+	                str += "; Priority=Low";
+	                break;
+	            case "medium":
+	                str += "; Priority=Medium";
+	                break;
+	            case "high":
+	                str += "; Priority=High";
+	                break;
+	            default:
+	                throw new TypeError(`option priority is invalid: ${options.priority}`);
+	        }
+	    }
+	    if (options.sameSite) {
+	        const sameSite = typeof options.sameSite === "string"
+	            ? options.sameSite.toLowerCase()
+	            : options.sameSite;
+	        switch (sameSite) {
+	            case true:
+	            case "strict":
+	                str += "; SameSite=Strict";
+	                break;
+	            case "lax":
+	                str += "; SameSite=Lax";
+	                break;
+	            case "none":
+	                str += "; SameSite=None";
+	                break;
+	            default:
+	                throw new TypeError(`option sameSite is invalid: ${options.sameSite}`);
+	        }
+	    }
+	    return str;
+	}
+	/**
+	 * URL-decode string value. Optimized to skip native call when no %.
+	 */
+	function decode(str) {
+	    if (str.indexOf("%") === -1)
+	        return str;
+	    try {
+	        return decodeURIComponent(str);
+	    }
+	    catch (e) {
+	        return str;
+	    }
+	}
+	/**
+	 * Determine if value is a Date.
+	 */
+	function isDate(val) {
+	    return __toString.call(val) === "[object Date]";
+	}
+	
+	return dist;
 }
 
+var distExports = requireDist();
+
 var deriveUserAndTokenFromCookieHeader = function (_a) {
     var cookieHeader = _a.cookieHeader, setCookieHeader = _a.setCookieHeader, authConfig = _a.authConfig;
     if (!cookieHeader) {
         return { accessToken: null, user: null };
     }
-    var cookies = parse_1(cookieHeader);
+    var cookies = distExports.parse(cookieHeader);
     if (setCookieHeader) {
         var setCookie = setCookieHeader;
         if (!Array.isArray(setCookieHeader)) {
@@ -1222,7 +1267,7 @@ var deriveUserAndTokenFromCookieHeader = function (_a) {
         }
         var cookiesFromSetCookieHeader = setCookie.reduce(function (acc, current) {
             var _a, _b;
-            var parsedCookie = parse_1(current);
+            var parsedCookie = distExports.parse(current);
             if (Object.hasOwn(parsedCookie, authConfig.userDataCookieName)) {
                 acc.userDataCookie =
                     (_a = parsedCookie[authConfig.userDataCookieName]) !== null && _a !== void 0 ? _a : '';