@thunderid/javascript 1.1.0 → 1.3.0

package/dist/constants/OIDCDiscoveryConstants.d.ts

@@ -24,7 +24,6 @@ declare const OIDCDiscoveryConstants: {
         readonly ISSUER: string;
         readonly JWKS: string;
         readonly REVOCATION: string;
-        readonly SESSION_IFRAME: string;
         readonly TOKEN: string;
         readonly USERINFO: string;
     };
@@ -36,7 +35,6 @@ declare const OIDCDiscoveryConstants: {
                 readonly ISSUER: string;
                 readonly JWKS: string;
                 readonly REVOCATION: string;
-                readonly SESSION_IFRAME: string;
                 readonly TOKEN: string;
                 readonly USERINFO: string;
             };

package/dist/constants/OIDCDiscoveryConstants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCDiscoveryConstants.d.ts","sourceRoot":"","sources":["../../src/constants/OIDCDiscoveryConstants.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;GAkBG;AACH,QAAA,MAAM,sBAAsB,EAAE;IAC5B,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,WAAW,EAAE;YACpB,QAAQ,CAAC,SAAS,EAAE;gBAClB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;gBAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC3B,CAAC;YACF,QAAQ,CAAC,gCAAgC,EAAE,MAAM,CAAC;SACnD,CAAC;KACH,CAAC;CAwIM,CAAC;AAEX,eAAe,sBAAsB,CAAC"}
+{"version":3,"file":"OIDCDiscoveryConstants.d.ts","sourceRoot":"","sources":["../../src/constants/OIDCDiscoveryConstants.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;GAkBG;AACH,QAAA,MAAM,sBAAsB,EAAE;IAC5B,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,WAAW,EAAE;YACpB,QAAQ,CAAC,SAAS,EAAE;gBAClB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC3B,CAAC;YACF,QAAQ,CAAC,gCAAgC,EAAE,MAAM,CAAC;SACnD,CAAC;KACH,CAAC;CA4HM,CAAC;AAEX,eAAe,sBAAsB,CAAC"}

package/dist/constants/OIDCRequestConstants.d.ts

@@ -5,7 +5,6 @@
 declare const OIDCRequestConstants: {
     readonly Params: {
         readonly AUTHORIZATION_CODE: string;
-        readonly SESSION_STATE: string;
         readonly SIGN_OUT_SUCCESS: string;
         readonly STATE: string;
     };

package/dist/constants/OIDCRequestConstants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OIDCRequestConstants.d.ts","sourceRoot":"","sources":["../../src/constants/OIDCRequestConstants.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,QAAA,MAAM,oBAAoB,EAAE;IAC1B,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;SAC5C,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,WAAW,EAAE;gBACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;aAC/B,CAAC;SACH,CAAC;KACH,CAAC;CA+DM,CAAC;AAEX,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"OIDCRequestConstants.d.ts","sourceRoot":"","sources":["../../src/constants/OIDCRequestConstants.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,QAAA,MAAM,oBAAoB,EAAE;IAC1B,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;SAC5C,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,OAAO,EAAE;YAChB,QAAQ,CAAC,WAAW,EAAE;gBACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;aAC/B,CAAC;SACH,CAAC;KACH,CAAC;CA0DM,CAAC;AAEX,eAAe,oBAAoB,CAAC"}

package/dist/edge/index.js

@@ -61,6 +61,15 @@ var ThunderIDAuthException = class extends Error {
 		Object.setPrototypeOf(this, new.target.prototype);
 	}
 };
+/**
+* Raised when a back-channel logout token is not valid. A logout handler answers 400 for this and a
+* 5xx for any other failure, which tells the server whether a retry can help.
+*/
+var InvalidLogoutTokenError = class extends ThunderIDAuthException {
+	constructor(code, message) {
+		super(code, "Invalid logout token.", message);
+	}
+};
 
 //#endregion
 //#region src/IsomorphicCrypto.ts
@@ -124,6 +133,38 @@ var IsomorphicCrypto = class {
 			return Promise.reject(new ThunderIDAuthException("JS-CRYPTO_HELPER-IVIT-IV01", "Invalid ID token.", "ID token validation returned false"));
 		}).catch((error$1) => Promise.reject(error$1));
 	}
+	/**
+	* Verifies the signature of a back-channel logout token, along with its audience, issuer,
+	* lifetime and, when the token has one, subject.
+	*
+	* @param logoutToken - The logout token received from the server.
+	* @param jwk - The server key the token names.
+	* @param clientId - The client the token must be addressed to.
+	* @param issuer - The expected issuer.
+	* @param subject - The token's subject, when it has one.
+	* @param clockTolerance - Allowed clock difference in seconds.
+	*
+	* @throws {InvalidLogoutTokenError} When verification fails. The message never includes the token.
+	*/
+	async verifyLogoutTokenSignature(logoutToken, jwk, clientId, issuer, subject, clockTolerance) {
+		let verified = false;
+		try {
+			verified = await this.cryptoUtils.verifyJwt(logoutToken, jwk, TokenConstants_default.SignatureValidation.SUPPORTED_ALGORITHMS, clientId, issuer, subject, clockTolerance, true);
+		} catch {
+			verified = false;
+		}
+		if (!verified) throw new InvalidLogoutTokenError("JS-CRYPTO_HELPER-VLTS-IV01", "The logout token signature could not be verified.");
+	}
+	/**
+	* Decodes the JOSE header of a JWT without verifying its signature.
+	*/
+	decodeJwtHeader(token) {
+		try {
+			return JSON.parse(this.cryptoUtils.base64URLDecode(token?.split(".")[0]));
+		} catch {
+			throw new ThunderIDAuthException("JS-CRYPTO_UTIL-DJH-IV01", "Decoding token failed.", "The token header could not be decoded.");
+		}
+	}
 	decodeJwtToken(token) {
 		try {
 			const utf8String = this.cryptoUtils.base64URLDecode(token?.split(".")[1]);
@@ -1012,6 +1053,8 @@ let EmbeddedFlowComponentType = /* @__PURE__ */ function(EmbeddedFlowComponentTy
 	EmbeddedFlowComponentType$1["Icon"] = "ICON";
 	/** Image display component for logos and illustrations */
 	EmbeddedFlowComponentType$1["Image"] = "IMAGE";
+	/** Key-value list display component that shows label and value pairs published in additionalData */
+	EmbeddedFlowComponentType$1["KeyValueList"] = "KEY_VALUE_LIST";
 	/** One-time password input field for multi-factor authentication */
 	EmbeddedFlowComponentType$1["OtpInput"] = "OTP_INPUT";
 	/** Organization unit tree picker for selecting an OU */
@@ -2062,6 +2105,21 @@ const ApplicationNativeAuthenticationConstants = { SupportedAuthenticators: {
 } };
 var ApplicationNativeAuthenticationConstants_default = ApplicationNativeAuthenticationConstants;
 
+//#endregion
+//#region src/constants/BackchannelLogoutConstants.ts
+/**
+* Constants for OpenID Connect Back-Channel Logout 1.0, for an SDK that receives logout tokens.
+*/
+const BackchannelLogoutConstants = {
+	DEFAULT_CLOCK_TOLERANCE_SECONDS: 60,
+	EVENT: "http://schemas.openid.net/event/backchannel-logout",
+	JWKS_CACHE_TTL_MS: 6e5,
+	JWKS_MIN_REFETCH_INTERVAL_MS: 3e4,
+	TOKEN_PARAM: "logout_token",
+	TOKEN_TYPE: "logout+jwt"
+};
+var BackchannelLogoutConstants_default = BackchannelLogoutConstants;
+
 //#endregion
 //#region src/constants/ScopeConstants.ts
 /**
@@ -2098,7 +2156,6 @@ var ScopeConstants_default = ScopeConstants;
 const OIDCRequestConstants = {
 	Params: {
 		AUTHORIZATION_CODE: "code",
-		SESSION_STATE: "session_state",
 		SIGN_OUT_SUCCESS: "sign_out_success",
 		STATE: "state"
 	},
@@ -2421,7 +2478,6 @@ const OIDCDiscoveryConstants = {
 		ISSUER: "/oauth2/token",
 		JWKS: "/oauth2/jwks",
 		REVOCATION: "/oauth2/revoke",
-		SESSION_IFRAME: "/oidc/checksession",
 		TOKEN: "/oauth2/token",
 		USERINFO: "/oauth2/userinfo"
 	},
@@ -2432,7 +2488,6 @@ const OIDCDiscoveryConstants = {
 			ISSUER: "issuer",
 			JWKS: "jwks_uri",
 			REVOCATION: "revocation_endpoint",
-			SESSION_IFRAME: "check_session_iframe",
 			TOKEN: "token_endpoint",
 			USERINFO: "userinfo_endpoint"
 		},
@@ -2700,6 +2755,9 @@ var StorageManager = class StorageManager {
 	async getCustomData(key, userId) {
 		return JSON.parse(await this.store.getData(this.resolveKey(key, userId)) ?? null);
 	}
+	async removeCustomData(key, userId) {
+		await this.store.removeData(this.resolveKey(key, userId));
+	}
 	setSessionStatus(status) {
 		if (StorageManager.isLocalStorageAvailable()) localStorage.setItem(`${this.vendor}-session-active`, status);
 	}
@@ -2934,6 +2992,47 @@ const RESOURCE_ENDPOINT_KEYS = [
 const resolveResourceEndpoint = (key, config, explicitUrl) => explicitUrl ?? config?.endpoints?.[key] ?? void 0;
 var resolveResourceEndpoint_default = resolveResourceEndpoint;
 
+//#endregion
+//#region src/utils/validateLogoutTokenClaims.ts
+const fail = (code, message) => {
+	throw new InvalidLogoutTokenError(code, message);
+};
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isNonEmptyString = (value) => typeof value === "string" && value.length > 0;
+/**
+* Checks the header and claims of a back-channel logout token, per OpenID Connect Back-Channel
+* Logout 1.0 section 2.6. It does not verify the signature: the caller does that with the server's
+* keys. Messages never include the token or its claim values.
+*
+* @param header - The decoded JOSE header.
+* @param payload - The decoded claims.
+* @param options - The issuer, client and clock the claims are checked against.
+* @returns The claims, typed.
+* @throws {InvalidLogoutTokenError} When any check fails.
+*/
+const validateLogoutTokenClaims = (header, payload, options) => {
+	if (!isRecord(header) || !isRecord(payload)) return fail("JS-LOGOUT_TOKEN-VLTC-IV01", "The logout token is not a well-formed JWT.");
+	const type = typeof header["typ"] === "string" ? header["typ"].toLowerCase() : "";
+	if (type !== BackchannelLogoutConstants_default.TOKEN_TYPE && type !== `application/${BackchannelLogoutConstants_default.TOKEN_TYPE}`) return fail("JS-LOGOUT_TOKEN-VLTC-IV02", "The token type is not logout+jwt.");
+	if (typeof header["alg"] !== "string" || !options.supportedAlgorithms.includes(header["alg"])) return fail("JS-LOGOUT_TOKEN-VLTC-IV03", "The signature algorithm is not supported.");
+	if ("nonce" in payload) return fail("JS-LOGOUT_TOKEN-VLTC-IV04", "A logout token must not carry a nonce.");
+	const { events } = payload;
+	if (!isRecord(events) || !isRecord(events[BackchannelLogoutConstants_default.EVENT])) return fail("JS-LOGOUT_TOKEN-VLTC-IV05", "The back-channel logout event is missing.");
+	if (payload["iss"] !== options.issuer) return fail("JS-LOGOUT_TOKEN-VLTC-IV06", "The issuer does not match.");
+	const audiences = Array.isArray(payload["aud"]) ? payload["aud"] : [payload["aud"]];
+	if (!isNonEmptyString(options.clientId) || !audiences.includes(options.clientId)) return fail("JS-LOGOUT_TOKEN-VLTC-IV07", "The audience does not include this client.");
+	const now = options.now ?? Math.floor(Date.now() / 1e3);
+	const tolerance = options.clockTolerance ?? BackchannelLogoutConstants_default.DEFAULT_CLOCK_TOLERANCE_SECONDS;
+	if (typeof payload["iat"] !== "number" || payload["iat"] > now + tolerance) return fail("JS-LOGOUT_TOKEN-VLTC-IV08", "The issued-at time is missing or in the future.");
+	if (typeof payload["exp"] !== "number" || payload["exp"] <= now - tolerance) return fail("JS-LOGOUT_TOKEN-VLTC-IV09", "The token has expired.");
+	if ("sid" in payload && !isNonEmptyString(payload["sid"])) return fail("JS-LOGOUT_TOKEN-VLTC-IV10", "The session identifier is not valid.");
+	if ("sub" in payload && !isNonEmptyString(payload["sub"])) return fail("JS-LOGOUT_TOKEN-VLTC-IV10", "The subject is not valid.");
+	if (!("sid" in payload) && !("sub" in payload)) return fail("JS-LOGOUT_TOKEN-VLTC-IV11", "The token names neither a session nor a subject.");
+	if (!isNonEmptyString(payload["jti"])) return fail("JS-LOGOUT_TOKEN-VLTC-IV12", "The token identifier is missing.");
+	return payload;
+};
+var validateLogoutTokenClaims_default = validateLogoutTokenClaims;
+
 //#endregion
 //#region src/constants/TokenExchangeConstants.ts
 /**
@@ -2974,6 +3073,9 @@ var AuthenticationHelper = class {
 	config;
 	oidcProviderMetaData;
 	cryptoHelper;
+	jwksCache;
+	jwksFetch;
+	jwksFetchStartedAt = 0;
 	/**
 	* Creates a new `AuthenticationHelper` instance.
 	*
@@ -3032,7 +3134,6 @@ var AuthenticationHelper = class {
 			OIDCDiscoveryConstants_default.Storage.StorageKeys.Endpoints.AUTHORIZATION,
 			OIDCDiscoveryConstants_default.Storage.StorageKeys.Endpoints.END_SESSION,
 			OIDCDiscoveryConstants_default.Storage.StorageKeys.Endpoints.JWKS,
-			OIDCDiscoveryConstants_default.Storage.StorageKeys.Endpoints.SESSION_IFRAME,
 			OIDCDiscoveryConstants_default.Storage.StorageKeys.Endpoints.REVOCATION,
 			OIDCDiscoveryConstants_default.Storage.StorageKeys.Endpoints.TOKEN,
 			OIDCDiscoveryConstants_default.Storage.StorageKeys.Endpoints.ISSUER,
@@ -3063,7 +3164,6 @@ var AuthenticationHelper = class {
 			[endpointKeys.END_SESSION]: `${baseUrl}${endpointPaths.END_SESSION}`,
 			[endpointKeys.ISSUER]: `${baseUrl}`,
 			[endpointKeys.JWKS]: `${baseUrl}${endpointPaths.JWKS}`,
-			[endpointKeys.SESSION_IFRAME]: `${baseUrl}${endpointPaths.SESSION_IFRAME}`,
 			[endpointKeys.REVOCATION]: `${baseUrl}${endpointPaths.REVOCATION}`,
 			[endpointKeys.TOKEN]: `${baseUrl}${endpointPaths.TOKEN}`,
 			[endpointKeys.USERINFO]: `${baseUrl}${endpointPaths.USERINFO}`,
@@ -3078,6 +3178,83 @@ var AuthenticationHelper = class {
 	* @throws {ThunderIDAuthException} When the JWKS endpoint is missing or the request fails.
 	*/
 	async validateIdToken(idToken) {
+		const keys = await this.fetchJwks();
+		const { issuer } = await this.oidcProviderMetaData();
+		const jwk = await this.cryptoHelper.getJWKForTheIdToken(idToken.split(".")[0], keys);
+		return this.cryptoHelper.isValidIdToken(idToken, jwk, (await this.config()).clientId ?? "", issuer ?? "", this.cryptoHelper.decodeJwtToken(idToken).sub, (await this.config()).tokenValidation?.idToken?.clockTolerance, (await this.config()).tokenValidation?.idToken?.validateIssuer ?? true);
+	}
+	/**
+	* Validates a back-channel logout token: its type, event, issuer, audience and lifetime, then its
+	* signature against the server's keys. The claims are checked first, so a malformed token costs
+	* neither a key fetch nor a signature check.
+	*
+	* @param logoutToken - The raw `logout_token` the server posted.
+	* @returns The token's claims.
+	* @throws {InvalidLogoutTokenError} When the token is not valid.
+	*/
+	async validateLogoutToken(logoutToken) {
+		const malformed = new InvalidLogoutTokenError("JS-AUTH_HELPER-VLT-IV01", "The logout token is not a signed JWT.");
+		if (typeof logoutToken !== "string" || logoutToken.split(".").length !== 3) throw malformed;
+		const configData = await this.config();
+		const { issuer } = await this.oidcProviderMetaData();
+		const clockTolerance = configData.tokenValidation?.idToken?.clockTolerance ?? BackchannelLogoutConstants_default.DEFAULT_CLOCK_TOLERANCE_SECONDS;
+		let header;
+		let payload;
+		try {
+			header = this.cryptoHelper.decodeJwtHeader(logoutToken);
+			payload = this.cryptoHelper.decodeJwtToken(logoutToken);
+		} catch {
+			throw malformed;
+		}
+		const claims = validateLogoutTokenClaims_default(header, payload, {
+			clientId: configData.clientId ?? "",
+			clockTolerance,
+			issuer: issuer ?? "",
+			supportedAlgorithms: TokenConstants_default.SignatureValidation.SUPPORTED_ALGORITHMS
+		});
+		await this.cryptoHelper.verifyLogoutTokenSignature(logoutToken, await this.getCachedJwk(header["kid"]), configData.clientId ?? "", issuer ?? "", claims.sub, clockTolerance);
+		return claims;
+	}
+	/**
+	* Returns the server key with the given identifier from a cached key set. An unknown identifier
+	* triggers one re-fetch, to follow key rotation, no more often than the minimum interval: the
+	* logout endpoint is unauthenticated, so an unbounded re-fetch would let anyone drive requests
+	* to the server. Requests that arrive while a fetch runs share it.
+	*/
+	async getCachedJwk(kid) {
+		const now = Date.now();
+		const find = (keys) => keys.find((key) => key.kid === kid);
+		const fresh = this.jwksCache !== void 0 && now - this.jwksCache.fetchedAt < BackchannelLogoutConstants_default.JWKS_CACHE_TTL_MS;
+		let jwk = fresh ? find(this.jwksCache.keys) : void 0;
+		if (!jwk && (this.jwksFetch || now - this.jwksFetchStartedAt >= BackchannelLogoutConstants_default.JWKS_MIN_REFETCH_INTERVAL_MS)) jwk = find(await this.fetchJwksOnce());
+		else if (!jwk && !fresh) throw new ThunderIDAuthException("JS-AUTH_HELPER-GCJ-NA02", "The server keys are not available.", "The server key set could not be fetched recently, and the cached one has expired.");
+		if (!jwk) throw new InvalidLogoutTokenError("JS-AUTH_HELPER-GCJ-NF01", "The logout token names a key the server does not publish.");
+		return jwk;
+	}
+	/**
+	* Fetches the key set unless a fetch is already running, in which case that one is shared.
+	*/
+	fetchJwksOnce() {
+		if (!this.jwksFetch) {
+			this.jwksFetchStartedAt = Date.now();
+			this.jwksFetch = this.fetchJwks().then((keys) => {
+				this.jwksCache = {
+					fetchedAt: Date.now(),
+					keys
+				};
+				return keys;
+			}).finally(() => {
+				this.jwksFetch = void 0;
+			});
+		}
+		return this.jwksFetch;
+	}
+	/**
+	* Fetches the server's JSON Web Key Set.
+	*
+	* @throws {ThunderIDAuthException} When the JWKS endpoint is missing or the request fails.
+	*/
+	async fetchJwks() {
 		const jwksEndpoint = (await this.storageManager.loadOpenIDProviderConfiguration()).jwks_uri;
 		const configData = await this.config();
 		if (!jwksEndpoint || jwksEndpoint.trim().length === 0) throw new ThunderIDAuthException("JS_AUTH_HELPER-VIT-NF01", "JWKS endpoint not found.", "No JWKS endpoint was found in the OIDC provider meta data returned by the well-known endpoint or the JWKS endpoint passed to the SDK is empty.");
@@ -3088,10 +3265,8 @@ var AuthenticationHelper = class {
 			throw new ThunderIDAuthException("JS-AUTH_HELPER-VIT-NE02", "Request to jwks endpoint failed.", error$1 ?? "The request sent to get the jwks from the server failed.");
 		}
 		if (response.status !== 200 || !response.ok) throw new ThunderIDAuthException("JS-AUTH_HELPER-VIT-HE03", `Invalid response status received for jwks request (${response.statusText}).`, await response.json());
-		const { issuer } = await this.oidcProviderMetaData();
 		const { keys } = await response.json();
-		const jwk = await this.cryptoHelper.getJWKForTheIdToken(idToken.split(".")[0], keys);
-		return this.cryptoHelper.isValidIdToken(idToken, jwk, (await this.config()).clientId ?? "", issuer ?? "", this.cryptoHelper.decodeJwtToken(idToken).sub, (await this.config()).tokenValidation?.idToken?.clockTolerance, (await this.config()).tokenValidation?.idToken?.validateIssuer ?? true);
+		return keys;
 	}
 	/**
 	* Extracts user information from a decoded ID token payload.
@@ -3496,6 +3671,14 @@ var ThunderIDJavaScriptClient = class {
 	async decodeJwtToken(token) {
 		return this.cryptoHelper.decodeJwtToken(token);
 	}
+	/**
+	* Validates a back-channel logout token and returns its claims. Protected, because only an SDK
+	* that runs on a server can receive one; such an SDK builds its logout handler on this.
+	*/
+	async validateLogoutToken(logoutToken) {
+		await this.loadOpenIDProviderConfiguration(false);
+		return this.authHelper.validateLogoutToken(logoutToken);
+	}
 	async exchangeToken(config, sessionId) {
 		if (!await this.storageManager.getTemporaryDataParameter(OIDCDiscoveryConstants_default.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED)) await this.loadOpenIDProviderConfiguration(false);
 		const oidcProviderMetadata = await this.oidcProviderMetaDataProvider();
@@ -3635,12 +3818,11 @@ var ThunderIDJavaScriptClient = class {
 		if (await this.storageManager.getTemporaryDataParameter(OIDCDiscoveryConstants_default.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED)) return buildSignInUrl();
 		return this.loadOpenIDProviderConfiguration(requestConfig?.forceInit).then(() => buildSignInUrl());
 	}
-	async requestAccessToken(authorizationCode, sessionState, state, userId, tokenRequestConfig) {
+	async requestAccessToken(authorizationCode, state, userId, tokenRequestConfig) {
 		if (!await this.storageManager.getTemporaryDataParameter(OIDCDiscoveryConstants_default.Storage.StorageKeys.OPENID_PROVIDER_CONFIG_INITIATED)) await this.loadOpenIDProviderConfiguration(false);
 		const tokenEndpoint = (await this.oidcProviderMetaDataProvider()).token_endpoint;
 		const configData = await this.configProvider();
 		if (!tokenEndpoint || tokenEndpoint.trim().length === 0) throw new ThunderIDAuthException("JS-AUTH_CORE-RAT1-NF01", "Token endpoint not found.", "No token endpoint was found in the OIDC provider meta data returned by the well-known endpoint or the token endpoint passed to the SDK is empty.");
-		if (sessionState) await this.storageManager.setSessionDataParameter(OIDCRequestConstants_default.Params.SESSION_STATE, sessionState, userId);
 		const body = new URLSearchParams();
 		body.set("client_id", configData.clientId ?? "");
 		const hasSecret = Boolean(configData.clientSecret && configData.clientSecret.trim().length > 0);
@@ -3693,7 +3875,6 @@ var ThunderIDJavaScriptClient = class {
 		const meta = await this.oidcProviderMetaDataProvider();
 		return {
 			authorizationEndpoint: meta.authorization_endpoint ?? "",
-			checkSessionIframe: meta.check_session_iframe ?? "",
 			endSessionEndpoint: meta.end_session_endpoint ?? "",
 			introspectionEndpoint: meta.introspection_endpoint ?? "",
 			issuer: meta.issuer ?? "",
@@ -3716,11 +3897,7 @@ var ThunderIDJavaScriptClient = class {
 		return (await this.storageManager.getSessionData(userId)).id_token;
 	}
 	async getUserSession(userId) {
-		const sessionData = await this.storageManager.getSessionData(userId);
-		return {
-			scopes: sessionData?.scope?.split(" "),
-			sessionState: sessionData?.session_state ?? ""
-		};
+		return { scopes: (await this.storageManager.getSessionData(userId))?.scope?.split(" ") };
 	}
 	async refreshAccessToken(userId) {
 		const tokenEndpoint = (await this.oidcProviderMetaDataProvider()).token_endpoint;
@@ -5304,6 +5481,40 @@ function resolveFlowTemplateLiterals(text, { t, meta }) {
 	});
 }
 
+//#endregion
+//#region src/utils/parseKeyValuePairs.ts
+/**
+* Reads the label and value pairs a KEY_VALUE_LIST renders from the raw value found under its
+* `source` key in `additionalData`. The server publishes them as a JSON-encoded array, since
+* additional data carries strings, so both an array and its encoding are accepted.
+*
+* Entries that are not objects, or that carry no value, are dropped, since an empty row tells the
+* user nothing. Anything that is not a list of pairs yields none.
+*
+* @param raw - The raw value found under the source key.
+* @returns The pairs to render, empty when the value holds none.
+*
+* @example
+* ```typescript
+* parseKeyValuePairs('[{"label":"Email","value":"a@b.com"}]'); // [{label: 'Email', value: 'a@b.com'}]
+* parseKeyValuePairs('not json');                              // []
+* ```
+*/
+const parseKeyValuePairs = (raw) => {
+	let parsed = raw;
+	if (typeof raw === "string") try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return [];
+	}
+	if (!Array.isArray(parsed)) return [];
+	return parsed.filter((entry) => typeof entry === "object" && entry !== null && !Array.isArray(entry)).map((entry) => ({
+		label: typeof entry["label"] === "string" ? entry["label"] : "",
+		value: typeof entry["value"] === "string" ? entry["value"] : ""
+	})).filter((pair) => pair.value !== "");
+};
+var parseKeyValuePairs_default = parseKeyValuePairs;
+
 //#endregion
 //#region src/utils/countryCodeToFlagEmoji.ts
 /**
@@ -5498,7 +5709,7 @@ const DEFAULT_VALIDATION_MESSAGE_KEYS = {
 * - Unknown rule types are treated as passing (forward compatibility with future types).
 */
 const evaluateValidationRule = (rule, value) => {
-	const fail = () => rule.message ?? DEFAULT_VALIDATION_MESSAGE_KEYS[rule.type];
+	const fail$1 = () => rule.message ?? DEFAULT_VALIDATION_MESSAGE_KEYS[rule.type];
 	switch (rule.type) {
 		case "regex": {
 			if (typeof rule.value !== "string" || rule.value === "") return null;
@@ -5508,14 +5719,14 @@ const evaluateValidationRule = (rule, value) => {
 			} catch {
 				return null;
 			}
-			return re.test(value) ? null : fail();
+			return re.test(value) ? null : fail$1();
 		}
 		case "minLength":
 			if (typeof rule.value !== "number" || Number.isNaN(rule.value)) return null;
-			return value.length >= rule.value ? null : fail();
+			return value.length >= rule.value ? null : fail$1();
 		case "maxLength":
 			if (typeof rule.value !== "number" || Number.isNaN(rule.value)) return null;
-			return value.length <= rule.value ? null : fail();
+			return value.length <= rule.value ? null : fail$1();
 		default: return null;
 	}
 };
@@ -5801,6 +6012,7 @@ const en_US = {
 		"errors.signup.initialization": "An error occurred while initializing. Please try again later.",
 		"errors.signup.flow.failure": "An error occurred during the sign-up flow. Please try again later.",
 		"errors.signup.flow.initialization.failure": "An error occurred while initializing the sign-up flow. Please try again later.",
+		"errors.signup.popup.failure": "Could not continue the sign-up in the pop-up window. Please try again.",
 		"errors.signup.components.not.available": "Sign-up form is not available at the moment. Please try again later."
 	}
 };
@@ -5933,6 +6145,7 @@ const fr_FR = {
 		"errors.signup.initialization": "Une erreur est survenue lors de l'initialisation. Veuillez réessayer plus tard.",
 		"errors.signup.flow.failure": "Une erreur est survenue lors du flux d'inscription. Veuillez réessayer plus tard.",
 		"errors.signup.flow.initialization.failure": "Une erreur est survenue lors de l'initialisation du flux d'inscription. Veuillez réessayer plus tard.",
+		"errors.signup.popup.failure": "Impossible de poursuivre l'inscription dans la fenêtre contextuelle. Veuillez réessayer.",
 		"errors.signup.components.not.available": "Le formulaire d'inscription n'est pas disponible pour le moment. Veuillez réessayer plus tard.",
 		"errors.signin.components.not.available": "Le formulaire de connexion n'est pas disponible pour le moment. Veuillez réessayer plus tard.",
 		"errors.signin.timeout": "Le temps imparti pour effectuer cette e'tape est expire'."
@@ -6067,6 +6280,7 @@ const te_IN = {
 		"errors.signup.initialization": "ప్రారంభించేటప్పుడు లోపం వచ్చింది. దయచేసి తరువాత మళ్లీ ప్రయత్నించండి.",
 		"errors.signup.flow.failure": "సైన్ అప్ ప్రక్రియలో లోపం వచ్చింది. దయచేసి తరువాత మళ్లీ ప్రయత్నించండి.",
 		"errors.signup.flow.initialization.failure": "సైన్ అప్ ప్రక్రియను ప్రారంభించేటప్పుడు లోపం వచ్చింది. దయచేసి తరువాత మళ్లీ ప్రయత్నించండి.",
+		"errors.signup.popup.failure": "పాప్-అప్ విండోలో సైన్ అప్ కొనసాగించడం సాధ్యం కాలేదు. దయచేసి మళ్లీ ప్రయత్నించండి.",
 		"errors.signup.components.not.available": "సైన్ అప్ ఫారం ప్రస్తుతం అందుబాటులో లేదు. దయచేసి తరువాత మళ్లీ ప్రయత్నించండి.",
 		"errors.signin.components.not.available": "సైన్ ఇన్ ఫారం ప్రస్తుతం అందుబాటులో లేదు. దయచేసి తరువాత మళ్లీ ప్రయత్నించండి.",
 		"errors.signin.timeout": "దశను పూర్తి చేయడానికి అనుమతించబడిన సమయం ముగిసింది."
@@ -6201,6 +6415,7 @@ const hi_IN = {
 		"errors.signup.initialization": "प्रारंभीकरण के दौरान एक त्रुटि हुई। कृपया बाद में पुनः प्रयास करें।",
 		"errors.signup.flow.failure": "साइन-अप प्रक्रिया में त्रुटि। कृपया बाद में पुनः प्रयास करें।",
 		"errors.signup.flow.initialization.failure": "साइन-अप प्रक्रिया प्रारंभ करते समय त्रुटि। कृपया बाद में पुनः प्रयास करें।",
+		"errors.signup.popup.failure": "पॉप-अप विंडो में साइन-अप जारी नहीं रखा जा सका। कृपया पुनः प्रयास करें।",
 		"errors.signup.components.not.available": "साइन-अप फॉर्म फिलहाल उपलब्ध नहीं है। कृपया बाद में पुनः प्रयास करें।",
 		"errors.signin.components.not.available": "साइन-इन फॉर्म फिलहाल उपलब्ध नहीं है। कृपया बाद में पुनः प्रयास करें।",
 		"errors.signin.timeout": "स्टेप पूरा करने के लिए दिया गया समय खत्म हो गया है।"
@@ -6335,6 +6550,7 @@ const pt_BR = {
 		"errors.signup.initialization": "Ocorreu um erro durante a inicialização. Tente novamente mais tarde.",
 		"errors.signup.flow.failure": "Ocorreu um erro durante o fluxo de cadastro. Tente novamente mais tarde.",
 		"errors.signup.flow.initialization.failure": "Ocorreu um erro ao inicializar o fluxo de cadastro. Tente novamente mais tarde.",
+		"errors.signup.popup.failure": "Não foi possível continuar o cadastro na janela pop-up. Tente novamente.",
 		"errors.signup.components.not.available": "O formulário de cadastro não está disponível no momento. Tente novamente mais tarde.",
 		"errors.signin.components.not.available": "O formulário de login não está disponível no momento. Tente novamente mais tarde.",
 		"errors.signin.timeout": "O tempo permitido para concluir a etapa expirou."
@@ -6469,6 +6685,7 @@ const pt_PT = {
 		"errors.signup.initialization": "Ocorreu um erro durante a inicialização. Tente novamente mais tarde.",
 		"errors.signup.flow.failure": "Ocorreu um erro durante o fluxo de registo. Tente novamente mais tarde.",
 		"errors.signup.flow.initialization.failure": "Ocorreu um erro ao inicializar o fluxo de registo. Tente novamente mais tarde.",
+		"errors.signup.popup.failure": "Não foi possível continuar o registo na janela pop-up. Tente novamente.",
 		"errors.signup.components.not.available": "O formulário de registo não está disponível de momento. Tente novamente mais tarde.",
 		"errors.signin.components.not.available": "O formulário de início de sessão não está disponível de momento. Tente novamente mais tarde.",
 		"errors.signin.timeout": "O tempo permitido para completar a etapa expirou."
@@ -6603,6 +6820,7 @@ const ta_IN = {
 		"errors.signup.initialization": "தொடங்கும்போது பிழை ஏற்பட்டது. பின்னர் மீண்டும் முயற்சிக்கவும்.",
 		"errors.signup.flow.failure": "பதிவு செய்யும் செயல்பாட்டில் பிழை ஏற்பட்டது. பின்னர் மீண்டும் முயற்சிக்கவும்.",
 		"errors.signup.flow.initialization.failure": "பதிவு செய்யும் செயல்பாட்டை தொடங்கும்போது பிழை ஏற்பட்டது. பின்னர் மீண்டும் முயற்சிக்கவும்.",
+		"errors.signup.popup.failure": "பாப்-அப் சாளரத்தில் பதிவைத் தொடர முடியவில்லை. மீண்டும் முயற்சிக்கவும்.",
 		"errors.signup.components.not.available": "பதிவு படிவம் இப்போது கிடைக்கவில்லை. பின்னர் மீண்டும் முயற்சிக்கவும்.",
 		"errors.signin.components.not.available": "உள்நுழைவு படிவம் இப்போது கிடைக்கவில்லை. பின்னர் மீண்டும் முயற்சிக்கவும்.",
 		"errors.signin.timeout": "படிநிலையை முடிக்க அனுமதிக்கப்பட்ட நேரம் காலாவதியானது."
@@ -6737,6 +6955,7 @@ const si_LK = {
 		"errors.signup.initialization": "ආරම්භ කිරීමේදී දෝෂයක් සිදු විය. කරුණාකර පසුව නැවත උත්සාහ කරන්න.",
 		"errors.signup.flow.failure": "ගිණුම් තැනීමේ ක්‍රියාවලියේදී දෝෂයක් සිදු විය. කරුණාකර පසුව නැවත උත්සාහ කරන්න.",
 		"errors.signup.flow.initialization.failure": "ගිණුම් තැනීමේ ක්‍රියාවලිය ආරම්භ කිරීමේදී දෝෂයක් සිදු විය. කරුණාකර පසුව නැවත උත්සාහ කරන්න.",
+		"errors.signup.popup.failure": "උත්පතන කවුළුවේ ගිණුම් තැනීම දිගටම කරගෙන යා නොහැකි විය. කරුණාකර නැවත උත්සාහ කරන්න.",
 		"errors.signup.components.not.available": "ගිණුම් තැනීමේ පිටුව දැන් ලබා ගත නොහැකිය. කරුණාකර පසුව නැවත උත්සාහ කරන්න.",
 		"errors.signin.components.not.available": "ප්‍රවේශ වීමේ පිටුව දැන් ලබා ගත නොහැකිය. කරුණාකර පසුව නැවත උත්සාහ කරන්න.",
 		"errors.signin.timeout": "පියවර සම්පූර්ණ කිරීමට ලබා දී තිබූ කාලය ඉකුත් වී ඇත."
@@ -6833,4 +7052,4 @@ const normalizeTranslations = (translations) => {
 var normalizeTranslations_default = normalizeTranslations;
 
 //#endregion
-export { AgentQueryKeys_default as AgentQueryKeys, ApplicationNativeAuthenticationConstants_default as ApplicationNativeAuthenticationConstants, ApplicationQueryKeys_default as ApplicationQueryKeys, AuthenticationHelper_default as AuthenticationHelper, ConsentConstants_default as ConsentConstants, CredentialConstants_default as CredentialConstants, DEFAULT_THEME, DEFAULT_VALIDATION_MESSAGE_KEYS, EMOJI_URI_SCHEME, EmbeddedFlowActionVariant, EmbeddedFlowComponentType, EmbeddedFlowEventType, EmbeddedFlowResponseType, EmbeddedFlowTextVariant, EmbeddedFlowType, EmbeddedRecoveryFlowStatus, EmbeddedRecoveryFlowType, EmbeddedSignInFlowStatus, EmbeddedSignInFlowType, EmbeddedSignUpFlowStatus, EmbeddedSignUpFlowType, FieldType, FlowMetaType, FlowMode, HttpClient, InboundAuthTypes, IsomorphicCrypto, OAuth2GrantTypes, OAuth2ResponseTypes, OIDCRequestConstants_default as OIDCRequestConstants, REFRESH_TOKEN_ISSUING_GRANTS, StorageManager_default as StorageManager, ThunderIDAPIError, ThunderIDAuthException, ThunderIDError, ThunderIDJavaScriptClient_default as ThunderIDJavaScriptClient, ThunderIDRuntimeError, TokenConstants_default as TokenConstants, TokenEndpointAuthMethods, TranslationBundleConstants_default as TranslationBundleConstants, UserQueryKeys_default as UserQueryKeys, VendorConstants_default as VendorConstants, arrayBufferToBase64url_default as arrayBufferToBase64url, base64urlToArrayBuffer_default as base64urlToArrayBuffer, bem_default as bem, buildValidatorFromRules_default as buildValidatorFromRules, configure as configureLogger, countryCodeToFlagEmoji, createAgent_default as createAgent, createApplication_default as createApplication, createComponentLogger, createLogger, createPackageComponentLogger, createPackageLogger, createTheme_default as createTheme, createUser_default as createUser, debug, deepMerge_default as deepMerge, deleteAgent_default as deleteAgent, deleteApplication_default as deleteApplication, deleteUser_default as deleteUser, error, evaluateChangePasswordForm_default as evaluateChangePasswordForm, evaluatePasswordPolicy_default as evaluatePasswordPolicy, evaluateValidationRule_default as evaluateValidationRule, executeEmbeddedRecoveryFlow_default as executeEmbeddedRecoveryFlow, executeEmbeddedSignInFlow_default as executeEmbeddedSignInFlow, executeEmbeddedSignUpFlow_default as executeEmbeddedSignUpFlow, executeEmbeddedUserOnboardingFlow_default as executeEmbeddedUserOnboardingFlow, extractEmojiFromUri_default as extractEmojiFromUri, extractPkceStorageKeyFromState_default as extractPkceStorageKeyFromState, extractUserClaimsFromIdToken_default as extractUserClaimsFromIdToken, formatDate_default as formatDate, generateFlattenedUserProfile_default as generateFlattenedUserProfile, get_default as get, getAgent_default as getAgent, getAgents_default as getAgents, getApplication_default as getApplication, getApplications_default as getApplications, getBaseLanguage, getDefaultI18nBundles_default as getDefaultI18nBundles, getFlowMeta_default as getFlowMeta, getLatestStateParam_default as getLatestStateParam, getOrganizationUnitChildren_default as getOrganizationUnitChildren, getRedirectBasedSignUpUrl_default as getRedirectBasedSignUpUrl, getUser_default as getUser, getUserInfo_default as getUserInfo, getUsers_default as getUsers, getUsersMe_default as getUsersMe, getUsersMeMeta_default as getUsersMeMeta, getVendorPrefix_default as getVendorPrefix, hasUnresolvedTranslationParams, info, isEmojiUri_default as isEmojiUri, isEmpty_default as isEmpty, isRecognizedBaseUrlPattern_default as isRecognizedBaseUrlPattern, logger_default as logger, mapCredentialUpdateError_default as mapCredentialUpdateError, normalizeLocaleTag, normalizeTranslations_default as normalizeTranslations, processOpenIDScopes_default as processOpenIDScopes, removeTrailingSlash_default as removeTrailingSlash, resolveChangeCredentialPolicy_default as resolveChangeCredentialPolicy, resolveFieldName_default as resolveFieldName, resolveFlowTemplateLiterals, resolveLocaleDisplayName, resolveLocaleEmoji_default as resolveLocaleEmoji, resolveMeta, resolveResourceEndpoint_default as resolveResourceEndpoint, set_default as set, startCase_default as startCase, substituteTranslationParams_default as substituteTranslationParams, supportsCredential_default as supportsCredential, updateAgent_default as updateAgent, updateApplication_default as updateApplication, updateMeCredentials_default as updateMeCredentials, updateMeProfile_default as updateMeProfile, updateUser_default as updateUser, warn, withVendorCSSClassPrefix_default as withVendorCSSClassPrefix };
+export { AgentQueryKeys_default as AgentQueryKeys, ApplicationNativeAuthenticationConstants_default as ApplicationNativeAuthenticationConstants, ApplicationQueryKeys_default as ApplicationQueryKeys, AuthenticationHelper_default as AuthenticationHelper, BackchannelLogoutConstants_default as BackchannelLogoutConstants, ConsentConstants_default as ConsentConstants, CredentialConstants_default as CredentialConstants, DEFAULT_THEME, DEFAULT_VALIDATION_MESSAGE_KEYS, EMOJI_URI_SCHEME, EmbeddedFlowActionVariant, EmbeddedFlowComponentType, EmbeddedFlowEventType, EmbeddedFlowResponseType, EmbeddedFlowTextVariant, EmbeddedFlowType, EmbeddedRecoveryFlowStatus, EmbeddedRecoveryFlowType, EmbeddedSignInFlowStatus, EmbeddedSignInFlowType, EmbeddedSignUpFlowStatus, EmbeddedSignUpFlowType, FieldType, FlowMetaType, FlowMode, HttpClient, InboundAuthTypes, InvalidLogoutTokenError, IsomorphicCrypto, OAuth2GrantTypes, OAuth2ResponseTypes, OIDCRequestConstants_default as OIDCRequestConstants, REFRESH_TOKEN_ISSUING_GRANTS, StorageManager_default as StorageManager, ThunderIDAPIError, ThunderIDAuthException, ThunderIDError, ThunderIDJavaScriptClient_default as ThunderIDJavaScriptClient, ThunderIDRuntimeError, TokenConstants_default as TokenConstants, TokenEndpointAuthMethods, TranslationBundleConstants_default as TranslationBundleConstants, UserQueryKeys_default as UserQueryKeys, VendorConstants_default as VendorConstants, arrayBufferToBase64url_default as arrayBufferToBase64url, base64urlToArrayBuffer_default as base64urlToArrayBuffer, bem_default as bem, buildValidatorFromRules_default as buildValidatorFromRules, configure as configureLogger, countryCodeToFlagEmoji, createAgent_default as createAgent, createApplication_default as createApplication, createComponentLogger, createLogger, createPackageComponentLogger, createPackageLogger, createTheme_default as createTheme, createUser_default as createUser, debug, deepMerge_default as deepMerge, deleteAgent_default as deleteAgent, deleteApplication_default as deleteApplication, deleteUser_default as deleteUser, error, evaluateChangePasswordForm_default as evaluateChangePasswordForm, evaluatePasswordPolicy_default as evaluatePasswordPolicy, evaluateValidationRule_default as evaluateValidationRule, executeEmbeddedRecoveryFlow_default as executeEmbeddedRecoveryFlow, executeEmbeddedSignInFlow_default as executeEmbeddedSignInFlow, executeEmbeddedSignUpFlow_default as executeEmbeddedSignUpFlow, executeEmbeddedUserOnboardingFlow_default as executeEmbeddedUserOnboardingFlow, extractEmojiFromUri_default as extractEmojiFromUri, extractPkceStorageKeyFromState_default as extractPkceStorageKeyFromState, extractUserClaimsFromIdToken_default as extractUserClaimsFromIdToken, formatDate_default as formatDate, generateFlattenedUserProfile_default as generateFlattenedUserProfile, get_default as get, getAgent_default as getAgent, getAgents_default as getAgents, getApplication_default as getApplication, getApplications_default as getApplications, getBaseLanguage, getDefaultI18nBundles_default as getDefaultI18nBundles, getFlowMeta_default as getFlowMeta, getLatestStateParam_default as getLatestStateParam, getOrganizationUnitChildren_default as getOrganizationUnitChildren, getRedirectBasedSignUpUrl_default as getRedirectBasedSignUpUrl, getUser_default as getUser, getUserInfo_default as getUserInfo, getUsers_default as getUsers, getUsersMe_default as getUsersMe, getUsersMeMeta_default as getUsersMeMeta, getVendorPrefix_default as getVendorPrefix, hasUnresolvedTranslationParams, info, isEmojiUri_default as isEmojiUri, isEmpty_default as isEmpty, isRecognizedBaseUrlPattern_default as isRecognizedBaseUrlPattern, logger_default as logger, mapCredentialUpdateError_default as mapCredentialUpdateError, normalizeLocaleTag, normalizeTranslations_default as normalizeTranslations, parseKeyValuePairs_default as parseKeyValuePairs, processOpenIDScopes_default as processOpenIDScopes, removeTrailingSlash_default as removeTrailingSlash, resolveChangeCredentialPolicy_default as resolveChangeCredentialPolicy, resolveFieldName_default as resolveFieldName, resolveFlowTemplateLiterals, resolveLocaleDisplayName, resolveLocaleEmoji_default as resolveLocaleEmoji, resolveMeta, resolveResourceEndpoint_default as resolveResourceEndpoint, set_default as set, startCase_default as startCase, substituteTranslationParams_default as substituteTranslationParams, supportsCredential_default as supportsCredential, updateAgent_default as updateAgent, updateApplication_default as updateApplication, updateMeCredentials_default as updateMeCredentials, updateMeProfile_default as updateMeProfile, updateUser_default as updateUser, validateLogoutTokenClaims_default as validateLogoutTokenClaims, warn, withVendorCSSClassPrefix_default as withVendorCSSClassPrefix };

package/dist/errors/exception.d.ts

@@ -5,4 +5,11 @@ export declare class ThunderIDAuthException extends Error {
     code: string | undefined;
     constructor(code: string, name: string, message: string);
 }
+/**
+ * Raised when a back-channel logout token is not valid. A logout handler answers 400 for this and a
+ * 5xx for any other failure, which tells the server whether a retry can help.
+ */
+export declare class InvalidLogoutTokenError extends ThunderIDAuthException {
+    constructor(code: string, message: string);
+}
 //# sourceMappingURL=exception.d.ts.map

package/dist/errors/exception.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exception.d.ts","sourceRoot":"","sources":["../../src/errors/exception.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IACxC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEb,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAM/D"}
+{"version":3,"file":"exception.d.ts","sourceRoot":"","sources":["../../src/errors/exception.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IACxC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;gBAEb,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAM/D;AAED;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,sBAAsB;gBAC9C,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAGjD"}

package/dist/i18n/models/i18n.d.ts

@@ -115,6 +115,7 @@ export interface I18nTranslations {
     'errors.signup.initialization': string;
     'errors.signup.flow.failure': string;
     'errors.signup.flow.initialization.failure': string;
+    'errors.signup.popup.failure': string;
     'errors.signup.components.not.available': string;
     'errors.signin.components.not.available': string;
     'errors.signin.timeout': string;

package/dist/i18n/models/i18n.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../../../src/i18n/models/i18n.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,gBAAgB;IAM/B,8BAA8B,EAAE,MAAM,CAAC;IACvC,+BAA+B,EAAE,MAAM,CAAC;IACxC,8BAA8B,EAAE,MAAM,CAAC;IACvC,8BAA8B,EAAE,MAAM,CAAC;IACvC,gCAAgC,EAAE,MAAM,CAAC;IACzC,8BAA8B,EAAE,MAAM,CAAC;IACvC,8BAA8B,EAAE,MAAM,CAAC;IACvC,iCAAiC,EAAE,MAAM,CAAC;IAC1C,gCAAgC,EAAE,MAAM,CAAC;IACzC,gCAAgC,EAAE,MAAM,CAAC;IACzC,8BAA8B,EAAE,MAAM,CAAC;IACvC,oCAAoC,EAAE,MAAM,CAAC;IAC7C,8BAA8B,EAAE,MAAM,CAAC;IAGvC,uCAAuC,EAAE,MAAM,CAAC;IAChD,qCAAqC,EAAE,MAAM,CAAC;IAC9C,uCAAuC,EAAE,MAAM,CAAC;IAGhD,qCAAqC,EAAE,MAAM,CAAC;IAC9C,gCAAgC,EAAE,MAAM,CAAC;IACzC,sCAAsC,EAAE,MAAM,CAAC;IAC/C,gCAAgC,EAAE,MAAM,CAAC;IACzC,sCAAsC,EAAE,MAAM,CAAC;IAC/C,kCAAkC,EAAE,MAAM,CAAC;IAC3C,wCAAwC,EAAE,MAAM,CAAC;IACjD,iCAAiC,EAAE,MAAM,CAAC;IAC1C,uCAAuC,EAAE,MAAM,CAAC;IAChD,6BAA6B,EAAE,MAAM,CAAC;IACtC,mCAAmC,EAAE,MAAM,CAAC;IAC5C,yCAAyC,EAAE,MAAM,CAAC;IAClD,2CAA2C,EAAE,MAAM,CAAC;IACpD,gDAAgD,EAAE,MAAM,CAAC;IACzD,2CAA2C,EAAE,MAAM,CAAC;IACpD,iDAAiD,EAAE,MAAM,CAAC;IAG1D,kCAAkC,EAAE,MAAM,CAAC;IAC3C,4BAA4B,EAAE,MAAM,CAAC;IACrC,8BAA8B,EAAE,MAAM,CAAC;IACvC,8BAA8B,EAAE,MAAM,CAAC;IAOvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4BAA4B,EAAE,MAAM,CAAC;IAGrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAG5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,+BAA+B,EAAE,MAAM,CAAC;IAGxC,0BAA0B,EAAE,MAAM,CAAC;IACnC,6BAA6B,EAAE,MAAM,CAAC;IACtC,sCAAsC,EAAE,MAAM,CAAC;IAG/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,6BAA6B,EAAE,MAAM,CAAC;IAGtC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0BAA0B,EAAE,MAAM,CAAC;IAGnC,uCAAuC,EAAE,MAAM,CAAC;IAChD,2BAA2B,EAAE,MAAM,CAAC;IACpC,8BAA8B,EAAE,MAAM,CAAC;IAGvC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wBAAwB,EAAE,MAAM,CAAC;IACjC,0BAA0B,EAAE,MAAM,CAAC;IACnC,8BAA8B,EAAE,MAAM,CAAC;IAMvC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mCAAmC,EAAE,MAAM,CAAC;IAM5C,8BAA8B,EAAE,MAAM,CAAC;IACvC,gCAAgC,EAAE,MAAM,CAAC;IACzC,sCAAsC,EAAE,MAAM,CAAC;IAC/C,oCAAoC,EAAE,MAAM,CAAC;IAC7C,0CAA0C,EAAE,MAAM,CAAC;IACnD,2CAA2C,EAAE,MAAM,CAAC;IACpD,6BAA6B,EAAE,MAAM,CAAC;IACtC,8BAA8B,EAAE,MAAM,CAAC;IACvC,qCAAqC,EAAE,MAAM,CAAC;IAC9C,oCAAoC,EAAE,MAAM,CAAC;IAC7C,0CAA0C,EAAE,MAAM,CAAC;IACnD,8CAA8C,EAAE,MAAM,CAAC;IACvD,6BAA6B,EAAE,MAAM,CAAC;IAMtC,2CAA2C,EAAE,MAAM,CAAC;IACpD,yDAAyD,EAAE,MAAM,CAAC;IAClE,+BAA+B,EAAE,MAAM,CAAC;IACxC,8BAA8B,EAAE,MAAM,CAAC;IACvC,2CAA2C,EAAE,MAAM,CAAC;IACpD,4CAA4C,EAAE,MAAM,CAAC;IACrD,2CAA2C,EAAE,MAAM,CAAC;IACpD,6CAA6C,EAAE,MAAM,CAAC;IACtD,2CAA2C,EAAE,MAAM,CAAC;IACpD,iCAAiC,EAAE,MAAM,CAAC;IAC1C,oCAAoC,EAAE,MAAM,CAAC;IAC7C,qCAAqC,EAAE,MAAM,CAAC;IAC9C,4CAA4C,EAAE,MAAM,CAAC;IACrD,8CAA8C,EAAE,MAAM,CAAC;IACvD,oCAAoC,EAAE,MAAM,CAAC;IAC7C,wCAAwC,EAAE,MAAM,CAAC;IACjD,oCAAoC,EAAE,MAAM,CAAC;IAC7C,8BAA8B,EAAE,MAAM,CAAC;IACvC,8BAA8B,EAAE,MAAM,CAAC;IACvC,4BAA4B,EAAE,MAAM,CAAC;IAMrC,6BAA6B,EAAE,MAAM,CAAC;IACtC,sDAAsD,EAAE,MAAM,CAAC;IAC/D,8DAA8D,EAAE,MAAM,CAAC;IACvE,yCAAyC,EAAE,MAAM,CAAC;IAMlD,8BAA8B,EAAE,MAAM,CAAC;IAMvC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,MAAM,CAAC;IAClC,yBAAyB,EAAE,MAAM,CAAC;IAClC,+BAA+B,EAAE,MAAM,CAAC;IACxC,8BAA8B,EAAE,MAAM,CAAC;IACvC,8BAA8B,EAAE,MAAM,CAAC;IAMvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,8BAA8B,EAAE,MAAM,CAAC;IACvC,4BAA4B,EAAE,MAAM,CAAC;IACrC,uCAAuC,EAAE,MAAM,CAAC;IAChD,qCAAqC,EAAE,MAAM,CAAC;IAC9C,gDAAgD,EAAE,MAAM,CAAC;IACzD,8BAA8B,EAAE,MAAM,CAAC;IACvC,4BAA4B,EAAE,MAAM,CAAC;IACrC,2CAA2C,EAAE,MAAM,CAAC;IACpD,wCAAwC,EAAE,MAAM,CAAC;IACjD,wCAAwC,EAAE,MAAM,CAAC;IACjD,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,KAAK,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,iBAAiB,GAAG,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,YAAY,CAAC;IACvB,YAAY,EAAE,gBAAgB,CAAC;CAChC"}
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../../../src/i18n/models/i18n.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,gBAAgB;IAM/B,8BAA8B,EAAE,MAAM,CAAC;IACvC,+BAA+B,EAAE,MAAM,CAAC;IACxC,8BAA8B,EAAE,MAAM,CAAC;IACvC,8BAA8B,EAAE,MAAM,CAAC;IACvC,gCAAgC,EAAE,MAAM,CAAC;IACzC,8BAA8B,EAAE,MAAM,CAAC;IACvC,8BAA8B,EAAE,MAAM,CAAC;IACvC,iCAAiC,EAAE,MAAM,CAAC;IAC1C,gCAAgC,EAAE,MAAM,CAAC;IACzC,gCAAgC,EAAE,MAAM,CAAC;IACzC,8BAA8B,EAAE,MAAM,CAAC;IACvC,oCAAoC,EAAE,MAAM,CAAC;IAC7C,8BAA8B,EAAE,MAAM,CAAC;IAGvC,uCAAuC,EAAE,MAAM,CAAC;IAChD,qCAAqC,EAAE,MAAM,CAAC;IAC9C,uCAAuC,EAAE,MAAM,CAAC;IAGhD,qCAAqC,EAAE,MAAM,CAAC;IAC9C,gCAAgC,EAAE,MAAM,CAAC;IACzC,sCAAsC,EAAE,MAAM,CAAC;IAC/C,gCAAgC,EAAE,MAAM,CAAC;IACzC,sCAAsC,EAAE,MAAM,CAAC;IAC/C,kCAAkC,EAAE,MAAM,CAAC;IAC3C,wCAAwC,EAAE,MAAM,CAAC;IACjD,iCAAiC,EAAE,MAAM,CAAC;IAC1C,uCAAuC,EAAE,MAAM,CAAC;IAChD,6BAA6B,EAAE,MAAM,CAAC;IACtC,mCAAmC,EAAE,MAAM,CAAC;IAC5C,yCAAyC,EAAE,MAAM,CAAC;IAClD,2CAA2C,EAAE,MAAM,CAAC;IACpD,gDAAgD,EAAE,MAAM,CAAC;IACzD,2CAA2C,EAAE,MAAM,CAAC;IACpD,iDAAiD,EAAE,MAAM,CAAC;IAG1D,kCAAkC,EAAE,MAAM,CAAC;IAC3C,4BAA4B,EAAE,MAAM,CAAC;IACrC,8BAA8B,EAAE,MAAM,CAAC;IACvC,8BAA8B,EAAE,MAAM,CAAC;IAOvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4BAA4B,EAAE,MAAM,CAAC;IAGrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAG5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,+BAA+B,EAAE,MAAM,CAAC;IAGxC,0BAA0B,EAAE,MAAM,CAAC;IACnC,6BAA6B,EAAE,MAAM,CAAC;IACtC,sCAAsC,EAAE,MAAM,CAAC;IAG/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,6BAA6B,EAAE,MAAM,CAAC;IAGtC,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0BAA0B,EAAE,MAAM,CAAC;IAGnC,uCAAuC,EAAE,MAAM,CAAC;IAChD,2BAA2B,EAAE,MAAM,CAAC;IACpC,8BAA8B,EAAE,MAAM,CAAC;IAGvC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wBAAwB,EAAE,MAAM,CAAC;IACjC,0BAA0B,EAAE,MAAM,CAAC;IACnC,8BAA8B,EAAE,MAAM,CAAC;IAMvC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mCAAmC,EAAE,MAAM,CAAC;IAM5C,8BAA8B,EAAE,MAAM,CAAC;IACvC,gCAAgC,EAAE,MAAM,CAAC;IACzC,sCAAsC,EAAE,MAAM,CAAC;IAC/C,oCAAoC,EAAE,MAAM,CAAC;IAC7C,0CAA0C,EAAE,MAAM,CAAC;IACnD,2CAA2C,EAAE,MAAM,CAAC;IACpD,6BAA6B,EAAE,MAAM,CAAC;IACtC,8BAA8B,EAAE,MAAM,CAAC;IACvC,qCAAqC,EAAE,MAAM,CAAC;IAC9C,oCAAoC,EAAE,MAAM,CAAC;IAC7C,0CAA0C,EAAE,MAAM,CAAC;IACnD,8CAA8C,EAAE,MAAM,CAAC;IACvD,6BAA6B,EAAE,MAAM,CAAC;IAMtC,2CAA2C,EAAE,MAAM,CAAC;IACpD,yDAAyD,EAAE,MAAM,CAAC;IAClE,+BAA+B,EAAE,MAAM,CAAC;IACxC,8BAA8B,EAAE,MAAM,CAAC;IACvC,2CAA2C,EAAE,MAAM,CAAC;IACpD,4CAA4C,EAAE,MAAM,CAAC;IACrD,2CAA2C,EAAE,MAAM,CAAC;IACpD,6CAA6C,EAAE,MAAM,CAAC;IACtD,2CAA2C,EAAE,MAAM,CAAC;IACpD,iCAAiC,EAAE,MAAM,CAAC;IAC1C,oCAAoC,EAAE,MAAM,CAAC;IAC7C,qCAAqC,EAAE,MAAM,CAAC;IAC9C,4CAA4C,EAAE,MAAM,CAAC;IACrD,8CAA8C,EAAE,MAAM,CAAC;IACvD,oCAAoC,EAAE,MAAM,CAAC;IAC7C,wCAAwC,EAAE,MAAM,CAAC;IACjD,oCAAoC,EAAE,MAAM,CAAC;IAC7C,8BAA8B,EAAE,MAAM,CAAC;IACvC,8BAA8B,EAAE,MAAM,CAAC;IACvC,4BAA4B,EAAE,MAAM,CAAC;IAMrC,6BAA6B,EAAE,MAAM,CAAC;IACtC,sDAAsD,EAAE,MAAM,CAAC;IAC/D,8DAA8D,EAAE,MAAM,CAAC;IACvE,yCAAyC,EAAE,MAAM,CAAC;IAMlD,8BAA8B,EAAE,MAAM,CAAC;IAMvC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,MAAM,CAAC;IAClC,yBAAyB,EAAE,MAAM,CAAC;IAClC,+BAA+B,EAAE,MAAM,CAAC;IACxC,8BAA8B,EAAE,MAAM,CAAC;IACvC,8BAA8B,EAAE,MAAM,CAAC;IAMvC,gBAAgB,EAAE,MAAM,CAAC;IACzB,8BAA8B,EAAE,MAAM,CAAC;IACvC,4BAA4B,EAAE,MAAM,CAAC;IACrC,uCAAuC,EAAE,MAAM,CAAC;IAChD,qCAAqC,EAAE,MAAM,CAAC;IAC9C,gDAAgD,EAAE,MAAM,CAAC;IACzD,8BAA8B,EAAE,MAAM,CAAC;IACvC,4BAA4B,EAAE,MAAM,CAAC;IACrC,2CAA2C,EAAE,MAAM,CAAC;IACpD,6BAA6B,EAAE,MAAM,CAAC;IACtC,wCAAwC,EAAE,MAAM,CAAC;IACjD,wCAAwC,EAAE,MAAM,CAAC;IACjD,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,KAAK,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,iBAAiB,GAAG,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,YAAY,CAAC;IACvB,YAAY,EAAE,gBAAgB,CAAC;CAChC"}

package/dist/i18n/translations/en-US.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"en-US.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/en-US.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAuM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"en-US.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/en-US.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAwM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/i18n/translations/fr-FR.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fr-FR.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/fr-FR.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AA6M1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"fr-FR.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/fr-FR.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AA+M1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/i18n/translations/hi-IN.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hi-IN.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/hi-IN.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAoM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"hi-IN.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/hi-IN.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAqM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/i18n/translations/ja-JP.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ja-JP.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/ja-JP.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAqM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"ja-JP.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/ja-JP.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAsM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/i18n/translations/pt-BR.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pt-BR.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/pt-BR.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAwM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"pt-BR.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/pt-BR.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAyM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/i18n/translations/pt-PT.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pt-PT.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/pt-PT.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAyM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"pt-PT.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/pt-PT.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AA0M1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/i18n/translations/si-LK.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"si-LK.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/si-LK.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAuM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"si-LK.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/si-LK.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAwM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/i18n/translations/ta-IN.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ta-IN.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/ta-IN.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAyM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"ta-IN.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/ta-IN.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AA0M1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/i18n/translations/te-IN.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"te-IN.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/te-IN.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAyM1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"te-IN.d.ts","sourceRoot":"","sources":["../../../src/i18n/translations/te-IN.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AA0M1E,QAAA,MAAM,KAAK,EAAE,UAGZ,CAAC;AAEF,eAAe,KAAK,CAAC"}