@versini/auth-provider 4.3.0 → 5.0.0

package/dist/index.js

@@ -1,47 +1,48 @@
-import { jsx as Ue } from "react/jsx-runtime";
+import { jsx as We } from "react/jsx-runtime";
 import * as D from "react";
-import { createContext as Ne, useState as He, useCallback as Le, useEffect as $e, useContext as Ke } from "react";
+import { createContext as Je, useState as xe, useCallback as je, useEffect as Me, useContext as Ve } from "react";
 /*!
-  @versini/auth-provider v4.3.0
+  @versini/auth-provider v5.0.0
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_CLIENT__ || (window.__VERSINI_AUTH_CLIENT__ = {
-    version: "4.3.0",
-    buildTime: "06/28/2024 11:03 AM EDT",
+    version: "5.0.0",
+    buildTime: "06/29/2024 02:02 PM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
 } catch {
 }
 /*!
-  @versini/auth-common v2.9.0
+  @versini/auth-common v2.10.1
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_COMMON__ || (window.__VERSINI_AUTH_COMMON__ = {
-    version: "2.9.0",
-    buildTime: "06/28/2024 11:03 AM EDT",
+    version: "2.10.1",
+    buildTime: "06/29/2024 02:02 PM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
 } catch {
 }
-const M = {
+const B = {
   ID_TOKEN: "id_token",
   ACCESS_TOKEN: "token",
   ID_AND_ACCESS_TOKEN: "id_token token",
   CODE: "code",
   REFRESH_TOKEN: "refresh_token"
-}, Je = {
+}, Ye = {
   CLIENT_ID: "X-Auth-ClientId"
 }, f = {
   ALG: "RS256",
   USER_ID_KEY: "sub",
   TOKEN_ID_KEY: "__raw",
   NONCE_KEY: "_nonce",
+  USERNAME_KEY: "username",
   ISSUER: "gizmette.com"
-}, We = `-----BEGIN PUBLIC KEY-----
+}, Be = `-----BEGIN PUBLIC KEY-----
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6i3Jd9fY/3COqCw/m7
 w5PKyTYLGAI2I6SIIdpe6i6DOCbEkmDz7LdVsBqwNtVi8gvWYIj+8ol6rU3qu1v5
 i1Jd45GSK4kzkVdgCmQZbM5ak0KI99q5wsrAIzUd+LRJ2HRvWtr5IYdsIiXaQjle
@@ -49,28 +50,28 @@ aMwPFOIcJH+rKfFgNcHLcaS5syp7zU1ANwZ+trgR+DifBr8TLVkBynmNeTyhDm2+
 l0haqjMk0UoNPPE8iYBWUHQJJE1Dqstj65d6Eh5g64Pao25y4cmYJbKjiblIGEkE
 sjqybA9mARAqh9k/eiIopecWSiffNQTwVQVd2I9ZH3BalhEXHlqFgrjz51kFqg81
 awIDAQAB
------END PUBLIC KEY-----`, V = {
+-----END PUBLIC KEY-----`, F = {
   AUTHENTICATE: "authenticate",
   CODE: "code",
   LOGOUT: "logout"
-}, te = crypto, Ee = (e) => e instanceof CryptoKey, L = new TextEncoder(), Y = new TextDecoder();
-function xe(...e) {
-  const t = e.reduce((a, { length: s }) => a + s, 0), o = new Uint8Array(t);
-  let r = 0;
-  for (const a of e)
-    o.set(a, r), r += a.length;
-  return o;
+}, G = crypto, Ae = (e) => e instanceof CryptoKey, N = new TextEncoder(), q = new TextDecoder();
+function Fe(...e) {
+  const t = e.reduce((n, { length: s }) => n + s, 0), r = new Uint8Array(t);
+  let a = 0;
+  for (const n of e)
+    r.set(n, a), a += n.length;
+  return r;
 }
-const je = (e) => {
-  const t = atob(e), o = new Uint8Array(t.length);
-  for (let r = 0; r < t.length; r++)
-    o[r] = t.charCodeAt(r);
-  return o;
-}, B = (e) => {
+const Ge = (e) => {
+  const t = atob(e), r = new Uint8Array(t.length);
+  for (let a = 0; a < t.length; a++)
+    r[a] = t.charCodeAt(a);
+  return r;
+}, M = (e) => {
   let t = e;
-  t instanceof Uint8Array && (t = Y.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
+  t instanceof Uint8Array && (t = q.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
   try {
-    return je(t);
+    return Ge(t);
   } catch {
     throw new TypeError("The input to be decoded is not correctly encoded.");
   }
@@ -80,27 +81,27 @@ class C extends Error {
     return "ERR_JOSE_GENERIC";
   }
   constructor(t) {
-    var o;
-    super(t), this.code = "ERR_JOSE_GENERIC", this.name = this.constructor.name, (o = Error.captureStackTrace) == null || o.call(Error, this, this.constructor);
+    var r;
+    super(t), this.code = "ERR_JOSE_GENERIC", this.name = this.constructor.name, (r = Error.captureStackTrace) == null || r.call(Error, this, this.constructor);
   }
 }
 class g extends C {
   static get code() {
     return "ERR_JWT_CLAIM_VALIDATION_FAILED";
   }
-  constructor(t, o, r = "unspecified", a = "unspecified") {
-    super(t), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = r, this.reason = a, this.payload = o;
+  constructor(t, r, a = "unspecified", n = "unspecified") {
+    super(t), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = a, this.reason = n, this.payload = r;
   }
 }
-class ae extends C {
+class ie extends C {
   static get code() {
     return "ERR_JWT_EXPIRED";
   }
-  constructor(t, o, r = "unspecified", a = "unspecified") {
-    super(t), this.code = "ERR_JWT_EXPIRED", this.claim = r, this.reason = a, this.payload = o;
+  constructor(t, r, a = "unspecified", n = "unspecified") {
+    super(t), this.code = "ERR_JWT_EXPIRED", this.claim = a, this.reason = n, this.payload = r;
   }
 }
-class Me extends C {
+class qe extends C {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_ALG_NOT_ALLOWED";
   }
@@ -108,15 +109,14 @@ class Me extends C {
     return "ERR_JOSE_ALG_NOT_ALLOWED";
   }
 }
-class F extends C {
+let T = class extends C {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_NOT_SUPPORTED";
   }
   static get code() {
     return "ERR_JOSE_NOT_SUPPORTED";
   }
-}
-let h = class extends C {
+}, h = class extends C {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_INVALID";
   }
@@ -124,7 +124,7 @@ let h = class extends C {
     return "ERR_JWS_INVALID";
   }
 };
-class Se extends C {
+class be extends C {
   constructor() {
     super(...arguments), this.code = "ERR_JWT_INVALID";
   }
@@ -132,7 +132,7 @@ class Se extends C {
     return "ERR_JWT_INVALID";
   }
 }
-class Ve extends C {
+class ze extends C {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED", this.message = "signature verification failed";
   }
@@ -140,16 +140,16 @@ class Ve extends C {
     return "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
   }
 }
-function _(e, t = "algorithm.name") {
+function b(e, t = "algorithm.name") {
   return new TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`);
 }
 function $(e, t) {
   return e.name === t;
 }
-function q(e) {
+function X(e) {
   return parseInt(e.name.slice(4), 10);
 }
-function Ye(e) {
+function Xe(e) {
   switch (e) {
     case "ES256":
       return "P-256";
@@ -161,106 +161,106 @@ function Ye(e) {
       throw new Error("unreachable");
   }
 }
-function Fe(e, t) {
-  if (t.length && !t.some((o) => e.usages.includes(o))) {
-    let o = "CryptoKey does not support this operation, its usages must include ";
+function Qe(e, t) {
+  if (t.length && !t.some((r) => e.usages.includes(r))) {
+    let r = "CryptoKey does not support this operation, its usages must include ";
     if (t.length > 2) {
-      const r = t.pop();
-      o += `one of ${t.join(", ")}, or ${r}.`;
+      const a = t.pop();
+      r += `one of ${t.join(", ")}, or ${a}.`;
     } else
-      t.length === 2 ? o += `one of ${t[0]} or ${t[1]}.` : o += `${t[0]}.`;
-    throw new TypeError(o);
+      t.length === 2 ? r += `one of ${t[0]} or ${t[1]}.` : r += `${t[0]}.`;
+    throw new TypeError(r);
   }
 }
-function Ge(e, t, ...o) {
+function Ze(e, t, ...r) {
   switch (t) {
     case "HS256":
     case "HS384":
     case "HS512": {
       if (!$(e.algorithm, "HMAC"))
-        throw _("HMAC");
-      const r = parseInt(t.slice(2), 10);
-      if (q(e.algorithm.hash) !== r)
-        throw _(`SHA-${r}`, "algorithm.hash");
+        throw b("HMAC");
+      const a = parseInt(t.slice(2), 10);
+      if (X(e.algorithm.hash) !== a)
+        throw b(`SHA-${a}`, "algorithm.hash");
       break;
     }
     case "RS256":
     case "RS384":
     case "RS512": {
       if (!$(e.algorithm, "RSASSA-PKCS1-v1_5"))
-        throw _("RSASSA-PKCS1-v1_5");
-      const r = parseInt(t.slice(2), 10);
-      if (q(e.algorithm.hash) !== r)
-        throw _(`SHA-${r}`, "algorithm.hash");
+        throw b("RSASSA-PKCS1-v1_5");
+      const a = parseInt(t.slice(2), 10);
+      if (X(e.algorithm.hash) !== a)
+        throw b(`SHA-${a}`, "algorithm.hash");
       break;
     }
     case "PS256":
     case "PS384":
     case "PS512": {
       if (!$(e.algorithm, "RSA-PSS"))
-        throw _("RSA-PSS");
-      const r = parseInt(t.slice(2), 10);
-      if (q(e.algorithm.hash) !== r)
-        throw _(`SHA-${r}`, "algorithm.hash");
+        throw b("RSA-PSS");
+      const a = parseInt(t.slice(2), 10);
+      if (X(e.algorithm.hash) !== a)
+        throw b(`SHA-${a}`, "algorithm.hash");
       break;
     }
     case "EdDSA": {
       if (e.algorithm.name !== "Ed25519" && e.algorithm.name !== "Ed448")
-        throw _("Ed25519 or Ed448");
+        throw b("Ed25519 or Ed448");
       break;
     }
     case "ES256":
     case "ES384":
     case "ES512": {
       if (!$(e.algorithm, "ECDSA"))
-        throw _("ECDSA");
-      const r = Ye(t);
-      if (e.algorithm.namedCurve !== r)
-        throw _(r, "algorithm.namedCurve");
+        throw b("ECDSA");
+      const a = Xe(t);
+      if (e.algorithm.namedCurve !== a)
+        throw b(a, "algorithm.namedCurve");
       break;
     }
     default:
       throw new TypeError("CryptoKey does not support this operation");
   }
-  Fe(e, o);
+  Qe(e, r);
 }
-function ge(e, t, ...o) {
-  var r;
-  if (o.length > 2) {
-    const a = o.pop();
-    e += `one of type ${o.join(", ")}, or ${a}.`;
+function _e(e, t, ...r) {
+  var a;
+  if (r.length > 2) {
+    const n = r.pop();
+    e += `one of type ${r.join(", ")}, or ${n}.`;
   } else
-    o.length === 2 ? e += `one of type ${o[0]} or ${o[1]}.` : e += `of type ${o[0]}.`;
-  return t == null ? e += ` Received ${t}` : typeof t == "function" && t.name ? e += ` Received function ${t.name}` : typeof t == "object" && t != null && (r = t.constructor) != null && r.name && (e += ` Received an instance of ${t.constructor.name}`), e;
+    r.length === 2 ? e += `one of type ${r[0]} or ${r[1]}.` : e += `of type ${r[0]}.`;
+  return t == null ? e += ` Received ${t}` : typeof t == "function" && t.name ? e += ` Received function ${t.name}` : typeof t == "object" && t != null && (a = t.constructor) != null && a.name && (e += ` Received an instance of ${t.constructor.name}`), e;
 }
-const ne = (e, ...t) => ge("Key must be ", e, ...t);
-function Ae(e, t, ...o) {
-  return ge(`Key for the ${e} algorithm must be `, t, ...o);
+const ce = (e, ...t) => _e("Key must be ", e, ...t);
+function ve(e, t, ...r) {
+  return _e(`Key for the ${e} algorithm must be `, t, ...r);
 }
-const _e = (e) => Ee(e), I = ["CryptoKey"], Be = (...e) => {
+const Te = (e) => Ae(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", Y = ["CryptoKey"], et = (...e) => {
   const t = e.filter(Boolean);
   if (t.length === 0 || t.length === 1)
     return !0;
-  let o;
-  for (const r of t) {
-    const a = Object.keys(r);
-    if (!o || o.size === 0) {
-      o = new Set(a);
+  let r;
+  for (const a of t) {
+    const n = Object.keys(a);
+    if (!r || r.size === 0) {
+      r = new Set(n);
       continue;
     }
-    for (const s of a) {
-      if (o.has(s))
+    for (const s of n) {
+      if (r.has(s))
         return !1;
-      o.add(s);
+      r.add(s);
     }
   }
   return !0;
 };
-function qe(e) {
+function tt(e) {
   return typeof e == "object" && e !== null;
 }
-function ee(e) {
-  if (!qe(e) || Object.prototype.toString.call(e) !== "[object Object]")
+function ne(e) {
+  if (!tt(e) || Object.prototype.toString.call(e) !== "[object Object]")
     return !1;
   if (Object.getPrototypeOf(e) === null)
     return !0;
@@ -269,51 +269,153 @@ function ee(e) {
     t = Object.getPrototypeOf(t);
   return Object.getPrototypeOf(e) === t;
 }
-const ze = (e, t) => {
+const rt = (e, t) => {
   if (e.startsWith("RS") || e.startsWith("PS")) {
-    const { modulusLength: o } = t.algorithm;
-    if (typeof o != "number" || o < 2048)
+    const { modulusLength: r } = t.algorithm;
+    if (typeof r != "number" || r < 2048)
       throw new TypeError(`${e} requires key modulusLength to be 2048 bits or larger`);
   }
-}, b = (e, t, o = 0) => {
-  o === 0 && (t.unshift(t.length), t.unshift(6));
-  const r = e.indexOf(t[0], o);
-  if (r === -1)
+};
+function at(e) {
+  let t, r;
+  switch (e.kty) {
+    case "RSA": {
+      switch (e.alg) {
+        case "PS256":
+        case "PS384":
+        case "PS512":
+          t = { name: "RSA-PSS", hash: `SHA-${e.alg.slice(-3)}` }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "RS256":
+        case "RS384":
+        case "RS512":
+          t = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${e.alg.slice(-3)}` }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "RSA-OAEP":
+        case "RSA-OAEP-256":
+        case "RSA-OAEP-384":
+        case "RSA-OAEP-512":
+          t = {
+            name: "RSA-OAEP",
+            hash: `SHA-${parseInt(e.alg.slice(-3), 10) || 1}`
+          }, r = e.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
+          break;
+        default:
+          throw new T('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      }
+      break;
+    }
+    case "EC": {
+      switch (e.alg) {
+        case "ES256":
+          t = { name: "ECDSA", namedCurve: "P-256" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ES384":
+          t = { name: "ECDSA", namedCurve: "P-384" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ES512":
+          t = { name: "ECDSA", namedCurve: "P-521" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ECDH-ES":
+        case "ECDH-ES+A128KW":
+        case "ECDH-ES+A192KW":
+        case "ECDH-ES+A256KW":
+          t = { name: "ECDH", namedCurve: e.crv }, r = e.d ? ["deriveBits"] : [];
+          break;
+        default:
+          throw new T('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      }
+      break;
+    }
+    case "OKP": {
+      switch (e.alg) {
+        case "EdDSA":
+          t = { name: e.crv }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ECDH-ES":
+        case "ECDH-ES+A128KW":
+        case "ECDH-ES+A192KW":
+        case "ECDH-ES+A256KW":
+          t = { name: e.crv }, r = e.d ? ["deriveBits"] : [];
+          break;
+        default:
+          throw new T('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      }
+      break;
+    }
+    default:
+      throw new T('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
+  }
+  return { algorithm: t, keyUsages: r };
+}
+const nt = async (e) => {
+  if (!e.alg)
+    throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
+  const { algorithm: t, keyUsages: r } = at(e), a = [
+    t,
+    e.ext ?? !1,
+    e.key_ops ?? r
+  ], n = { ...e };
+  return delete n.alg, delete n.use, G.subtle.importKey("jwk", n, ...a);
+}, ke = (e) => M(e);
+let Q, Z;
+const Re = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", Ie = async (e, t, r, a) => {
+  let n = e.get(t);
+  if (n != null && n[a])
+    return n[a];
+  const s = await nt({ ...r, alg: a });
+  return n ? n[a] = s : e.set(t, { [a]: s }), s;
+}, ot = (e, t) => {
+  if (Re(e)) {
+    let r = e.export({ format: "jwk" });
+    return delete r.d, delete r.dp, delete r.dq, delete r.p, delete r.q, delete r.qi, r.k ? ke(r.k) : (Z || (Z = /* @__PURE__ */ new WeakMap()), Ie(Z, e, r, t));
+  }
+  return e;
+}, st = (e, t) => {
+  if (Re(e)) {
+    let r = e.export({ format: "jwk" });
+    return r.k ? ke(r.k) : (Q || (Q = /* @__PURE__ */ new WeakMap()), Ie(Q, e, r, t));
+  }
+  return e;
+}, it = { normalizePublicKey: ot, normalizePrivateKey: st }, v = (e, t, r = 0) => {
+  r === 0 && (t.unshift(t.length), t.unshift(6));
+  const a = e.indexOf(t[0], r);
+  if (a === -1)
     return !1;
-  const a = e.subarray(r, r + t.length);
-  return a.length !== t.length ? !1 : a.every((s, n) => s === t[n]) || b(e, t, r + 1);
-}, se = (e) => {
+  const n = e.subarray(a, a + t.length);
+  return n.length !== t.length ? !1 : n.every((s, o) => s === t[o]) || v(e, t, a + 1);
+}, ue = (e) => {
   switch (!0) {
-    case b(e, [42, 134, 72, 206, 61, 3, 1, 7]):
+    case v(e, [42, 134, 72, 206, 61, 3, 1, 7]):
       return "P-256";
-    case b(e, [43, 129, 4, 0, 34]):
+    case v(e, [43, 129, 4, 0, 34]):
       return "P-384";
-    case b(e, [43, 129, 4, 0, 35]):
+    case v(e, [43, 129, 4, 0, 35]):
       return "P-521";
-    case b(e, [43, 101, 110]):
+    case v(e, [43, 101, 110]):
       return "X25519";
-    case b(e, [43, 101, 111]):
+    case v(e, [43, 101, 111]):
       return "X448";
-    case b(e, [43, 101, 112]):
+    case v(e, [43, 101, 112]):
       return "Ed25519";
-    case b(e, [43, 101, 113]):
+    case v(e, [43, 101, 113]):
       return "Ed448";
     default:
-      throw new F("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
+      throw new T("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
   }
-}, Xe = async (e, t, o, r, a) => {
-  let s, n;
-  const i = new Uint8Array(atob(o.replace(e, "")).split("").map((c) => c.charCodeAt(0)));
-  switch (r) {
+}, ct = async (e, t, r, a, n) => {
+  let s, o;
+  const c = new Uint8Array(atob(r.replace(e, "")).split("").map((i) => i.charCodeAt(0)));
+  switch (a) {
     case "PS256":
     case "PS384":
     case "PS512":
-      s = { name: "RSA-PSS", hash: `SHA-${r.slice(-3)}` }, n = ["verify"];
+      s = { name: "RSA-PSS", hash: `SHA-${a.slice(-3)}` }, o = ["verify"];
       break;
     case "RS256":
     case "RS384":
     case "RS512":
-      s = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${r.slice(-3)}` }, n = ["verify"];
+      s = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${a.slice(-3)}` }, o = ["verify"];
       break;
     case "RSA-OAEP":
     case "RSA-OAEP-256":
@@ -321,130 +423,130 @@ const ze = (e, t) => {
     case "RSA-OAEP-512":
       s = {
         name: "RSA-OAEP",
-        hash: `SHA-${parseInt(r.slice(-3), 10) || 1}`
-      }, n = ["encrypt", "wrapKey"];
+        hash: `SHA-${parseInt(a.slice(-3), 10) || 1}`
+      }, o = ["encrypt", "wrapKey"];
       break;
     case "ES256":
-      s = { name: "ECDSA", namedCurve: "P-256" }, n = ["verify"];
+      s = { name: "ECDSA", namedCurve: "P-256" }, o = ["verify"];
       break;
     case "ES384":
-      s = { name: "ECDSA", namedCurve: "P-384" }, n = ["verify"];
+      s = { name: "ECDSA", namedCurve: "P-384" }, o = ["verify"];
       break;
     case "ES512":
-      s = { name: "ECDSA", namedCurve: "P-521" }, n = ["verify"];
+      s = { name: "ECDSA", namedCurve: "P-521" }, o = ["verify"];
       break;
     case "ECDH-ES":
     case "ECDH-ES+A128KW":
     case "ECDH-ES+A192KW":
     case "ECDH-ES+A256KW": {
-      const c = se(i);
-      s = c.startsWith("P-") ? { name: "ECDH", namedCurve: c } : { name: c }, n = [];
+      const i = ue(c);
+      s = i.startsWith("P-") ? { name: "ECDH", namedCurve: i } : { name: i }, o = [];
       break;
     }
     case "EdDSA":
-      s = { name: se(i) }, n = ["verify"];
+      s = { name: ue(c) }, o = ["verify"];
       break;
     default:
-      throw new F('Invalid or unsupported "alg" (Algorithm) value');
+      throw new T('Invalid or unsupported "alg" (Algorithm) value');
   }
-  return te.subtle.importKey(t, i, s, !1, n);
-}, Qe = (e, t, o) => Xe(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
-async function Ze(e, t, o) {
+  return G.subtle.importKey(t, c, s, !1, o);
+}, ut = (e, t, r) => ct(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
+async function dt(e, t, r) {
   if (e.indexOf("-----BEGIN PUBLIC KEY-----") !== 0)
     throw new TypeError('"spki" must be SPKI formatted string');
-  return Qe(e, t);
+  return ut(e, t);
 }
-const et = (e, t) => {
+const V = (e) => e == null ? void 0 : e[Symbol.toStringTag], lt = (e, t) => {
   if (!(t instanceof Uint8Array)) {
-    if (!_e(t))
-      throw new TypeError(Ae(e, t, ...I, "Uint8Array"));
+    if (!Te(t))
+      throw new TypeError(ve(e, t, ...Y, "Uint8Array"));
     if (t.type !== "secret")
-      throw new TypeError(`${I.join(" or ")} instances for symmetric algorithms must be of type "secret"`);
+      throw new TypeError(`${V(t)} instances for symmetric algorithms must be of type "secret"`);
   }
-}, tt = (e, t, o) => {
-  if (!_e(t))
-    throw new TypeError(Ae(e, t, ...I));
+}, ht = (e, t, r) => {
+  if (!Te(t))
+    throw new TypeError(ve(e, t, ...Y));
   if (t.type === "secret")
-    throw new TypeError(`${I.join(" or ")} instances for asymmetric algorithms must not be of type "secret"`);
-  if (t.algorithm && o === "verify" && t.type === "private")
-    throw new TypeError(`${I.join(" or ")} instances for asymmetric algorithm verifying must be of type "public"`);
-  if (t.algorithm && o === "encrypt" && t.type === "private")
-    throw new TypeError(`${I.join(" or ")} instances for asymmetric algorithm encryption must be of type "public"`);
-}, rt = (e, t, o) => {
-  e.startsWith("HS") || e === "dir" || e.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(e) ? et(e, t) : tt(e, t, o);
+    throw new TypeError(`${V(t)} instances for asymmetric algorithms must not be of type "secret"`);
+  if (t.algorithm && r === "verify" && t.type === "private")
+    throw new TypeError(`${V(t)} instances for asymmetric algorithm verifying must be of type "public"`);
+  if (t.algorithm && r === "encrypt" && t.type === "private")
+    throw new TypeError(`${V(t)} instances for asymmetric algorithm encryption must be of type "public"`);
+}, pt = (e, t, r) => {
+  e.startsWith("HS") || e === "dir" || e.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(e) ? lt(e, t) : ht(e, t, r);
 };
-function ot(e, t, o, r, a) {
-  if (a.crit !== void 0 && (r == null ? void 0 : r.crit) === void 0)
+function yt(e, t, r, a, n) {
+  if (n.crit !== void 0 && (a == null ? void 0 : a.crit) === void 0)
     throw new e('"crit" (Critical) Header Parameter MUST be integrity protected');
-  if (!r || r.crit === void 0)
+  if (!a || a.crit === void 0)
     return /* @__PURE__ */ new Set();
-  if (!Array.isArray(r.crit) || r.crit.length === 0 || r.crit.some((n) => typeof n != "string" || n.length === 0))
+  if (!Array.isArray(a.crit) || a.crit.length === 0 || a.crit.some((o) => typeof o != "string" || o.length === 0))
     throw new e('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
   let s;
-  o !== void 0 ? s = new Map([...Object.entries(o), ...t.entries()]) : s = t;
-  for (const n of r.crit) {
-    if (!s.has(n))
-      throw new F(`Extension Header Parameter "${n}" is not recognized`);
-    if (a[n] === void 0)
-      throw new e(`Extension Header Parameter "${n}" is missing`);
-    if (s.get(n) && r[n] === void 0)
-      throw new e(`Extension Header Parameter "${n}" MUST be integrity protected`);
+  r !== void 0 ? s = new Map([...Object.entries(r), ...t.entries()]) : s = t;
+  for (const o of a.crit) {
+    if (!s.has(o))
+      throw new T(`Extension Header Parameter "${o}" is not recognized`);
+    if (n[o] === void 0)
+      throw new e(`Extension Header Parameter "${o}" is missing`);
+    if (s.get(o) && a[o] === void 0)
+      throw new e(`Extension Header Parameter "${o}" MUST be integrity protected`);
   }
-  return new Set(r.crit);
+  return new Set(a.crit);
 }
-const at = (e, t) => {
-  if (t !== void 0 && (!Array.isArray(t) || t.some((o) => typeof o != "string")))
+const ft = (e, t) => {
+  if (t !== void 0 && (!Array.isArray(t) || t.some((r) => typeof r != "string")))
     throw new TypeError(`"${e}" option must be an array of strings`);
   if (t)
     return new Set(t);
 };
-function nt(e, t) {
-  const o = `SHA-${e.slice(-3)}`;
+function mt(e, t) {
+  const r = `SHA-${e.slice(-3)}`;
   switch (e) {
     case "HS256":
     case "HS384":
     case "HS512":
-      return { hash: o, name: "HMAC" };
+      return { hash: r, name: "HMAC" };
     case "PS256":
     case "PS384":
     case "PS512":
-      return { hash: o, name: "RSA-PSS", saltLength: e.slice(-3) >> 3 };
+      return { hash: r, name: "RSA-PSS", saltLength: e.slice(-3) >> 3 };
     case "RS256":
     case "RS384":
     case "RS512":
-      return { hash: o, name: "RSASSA-PKCS1-v1_5" };
+      return { hash: r, name: "RSASSA-PKCS1-v1_5" };
     case "ES256":
     case "ES384":
     case "ES512":
-      return { hash: o, name: "ECDSA", namedCurve: t.namedCurve };
+      return { hash: r, name: "ECDSA", namedCurve: t.namedCurve };
     case "EdDSA":
       return { name: t.name };
     default:
-      throw new F(`alg ${e} is not supported either by JOSE or your javascript runtime`);
+      throw new T(`alg ${e} is not supported either by JOSE or your javascript runtime`);
   }
 }
-function st(e, t, o) {
-  if (Ee(t))
-    return Ge(t, e, o), t;
+async function wt(e, t, r) {
+  if (t = await it.normalizePublicKey(t, e), Ae(t))
+    return Ze(t, e, r), t;
   if (t instanceof Uint8Array) {
     if (!e.startsWith("HS"))
-      throw new TypeError(ne(t, ...I));
-    return te.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [o]);
+      throw new TypeError(ce(t, ...Y));
+    return G.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [r]);
   }
-  throw new TypeError(ne(t, ...I, "Uint8Array"));
+  throw new TypeError(ce(t, ...Y, "Uint8Array"));
 }
-const ct = async (e, t, o, r) => {
-  const a = await st(e, t, "verify");
-  ze(e, a);
-  const s = nt(e, a.algorithm);
+const Et = async (e, t, r, a) => {
+  const n = await wt(e, t, "verify");
+  rt(e, n);
+  const s = mt(e, n.algorithm);
   try {
-    return await te.subtle.verify(s, a, o, r);
+    return await G.subtle.verify(s, n, r, a);
   } catch {
     return !1;
   }
 };
-async function it(e, t, o) {
-  if (!ee(e))
+async function St(e, t, r) {
+  if (!ne(e))
     throw new h("Flattened JWS must be an object");
   if (e.protected === void 0 && e.header === void 0)
     throw new h('Flattened JWS must have either of the "protected" or "header" members');
@@ -454,183 +556,183 @@ async function it(e, t, o) {
     throw new h("JWS Payload missing");
   if (typeof e.signature != "string")
     throw new h("JWS Signature missing or incorrect type");
-  if (e.header !== void 0 && !ee(e.header))
+  if (e.header !== void 0 && !ne(e.header))
     throw new h("JWS Unprotected Header incorrect type");
-  let r = {};
+  let a = {};
   if (e.protected)
     try {
-      const m = B(e.protected);
-      r = JSON.parse(Y.decode(m));
+      const w = M(e.protected);
+      a = JSON.parse(q.decode(w));
     } catch {
       throw new h("JWS Protected Header is invalid");
     }
-  if (!Be(r, e.header))
+  if (!et(a, e.header))
     throw new h("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
-  const a = {
-    ...r,
+  const n = {
+    ...a,
     ...e.header
-  }, s = ot(h, /* @__PURE__ */ new Map([["b64", !0]]), o == null ? void 0 : o.crit, r, a);
-  let n = !0;
-  if (s.has("b64") && (n = r.b64, typeof n != "boolean"))
+  }, s = yt(h, /* @__PURE__ */ new Map([["b64", !0]]), r == null ? void 0 : r.crit, a, n);
+  let o = !0;
+  if (s.has("b64") && (o = a.b64, typeof o != "boolean"))
     throw new h('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
-  const { alg: i } = a;
-  if (typeof i != "string" || !i)
+  const { alg: c } = n;
+  if (typeof c != "string" || !c)
     throw new h('JWS "alg" (Algorithm) Header Parameter missing or invalid');
-  const c = o && at("algorithms", o.algorithms);
-  if (c && !c.has(i))
-    throw new Me('"alg" (Algorithm) Header Parameter value not allowed');
-  if (n) {
+  const i = r && ft("algorithms", r.algorithms);
+  if (i && !i.has(c))
+    throw new qe('"alg" (Algorithm) Header Parameter value not allowed');
+  if (o) {
     if (typeof e.payload != "string")
       throw new h("JWS Payload must be a string");
   } else if (typeof e.payload != "string" && !(e.payload instanceof Uint8Array))
     throw new h("JWS Payload must be a string or an Uint8Array instance");
   let u = !1;
-  typeof t == "function" && (t = await t(r, e), u = !0), rt(i, t, "verify");
-  const y = xe(L.encode(e.protected ?? ""), L.encode("."), typeof e.payload == "string" ? L.encode(e.payload) : e.payload);
-  let p;
+  typeof t == "function" && (t = await t(a, e), u = !0), pt(c, t, "verify");
+  const m = Fe(N.encode(e.protected ?? ""), N.encode("."), typeof e.payload == "string" ? N.encode(e.payload) : e.payload);
+  let y;
   try {
-    p = B(e.signature);
+    y = M(e.signature);
   } catch {
     throw new h("Failed to base64url decode the signature");
   }
-  if (!await ct(i, t, p, y))
-    throw new Ve();
-  let T;
-  if (n)
+  if (!await Et(c, t, y, m))
+    throw new ze();
+  let _;
+  if (o)
     try {
-      T = B(e.payload);
+      _ = M(e.payload);
     } catch {
       throw new h("Failed to base64url decode the payload");
     }
   else
-    typeof e.payload == "string" ? T = L.encode(e.payload) : T = e.payload;
-  const E = { payload: T };
-  return e.protected !== void 0 && (E.protectedHeader = r), e.header !== void 0 && (E.unprotectedHeader = e.header), u ? { ...E, key: t } : E;
+    typeof e.payload == "string" ? _ = N.encode(e.payload) : _ = e.payload;
+  const E = { payload: _ };
+  return e.protected !== void 0 && (E.protectedHeader = a), e.header !== void 0 && (E.unprotectedHeader = e.header), u ? { ...E, key: t } : E;
 }
-async function ut(e, t, o) {
-  if (e instanceof Uint8Array && (e = Y.decode(e)), typeof e != "string")
+async function gt(e, t, r) {
+  if (e instanceof Uint8Array && (e = q.decode(e)), typeof e != "string")
     throw new h("Compact JWS must be a string or Uint8Array");
-  const { 0: r, 1: a, 2: s, length: n } = e.split(".");
-  if (n !== 3)
+  const { 0: a, 1: n, 2: s, length: o } = e.split(".");
+  if (o !== 3)
     throw new h("Invalid Compact JWS");
-  const i = await it({ payload: a, protected: r, signature: s }, t, o), c = { payload: i.payload, protectedHeader: i.protectedHeader };
-  return typeof t == "function" ? { ...c, key: i.key } : c;
+  const c = await St({ payload: n, protected: a, signature: s }, t, r), i = { payload: c.payload, protectedHeader: c.protectedHeader };
+  return typeof t == "function" ? { ...i, key: c.key } : i;
 }
-const dt = (e) => Math.floor(e.getTime() / 1e3), Te = 60, be = Te * 60, re = be * 24, lt = re * 7, ht = re * 365.25, pt = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, ce = (e) => {
-  const t = pt.exec(e);
+const At = (e) => Math.floor(e.getTime() / 1e3), Ce = 60, Pe = Ce * 60, oe = Pe * 24, bt = oe * 7, _t = oe * 365.25, vt = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, de = (e) => {
+  const t = vt.exec(e);
   if (!t || t[4] && t[1])
     throw new TypeError("Invalid time period format");
-  const o = parseFloat(t[2]), r = t[3].toLowerCase();
-  let a;
-  switch (r) {
+  const r = parseFloat(t[2]), a = t[3].toLowerCase();
+  let n;
+  switch (a) {
     case "sec":
     case "secs":
     case "second":
     case "seconds":
     case "s":
-      a = Math.round(o);
+      n = Math.round(r);
       break;
     case "minute":
     case "minutes":
     case "min":
     case "mins":
     case "m":
-      a = Math.round(o * Te);
+      n = Math.round(r * Ce);
       break;
     case "hour":
     case "hours":
     case "hr":
     case "hrs":
     case "h":
-      a = Math.round(o * be);
+      n = Math.round(r * Pe);
       break;
     case "day":
     case "days":
     case "d":
-      a = Math.round(o * re);
+      n = Math.round(r * oe);
       break;
     case "week":
     case "weeks":
     case "w":
-      a = Math.round(o * lt);
+      n = Math.round(r * bt);
       break;
     default:
-      a = Math.round(o * ht);
+      n = Math.round(r * _t);
       break;
   }
-  return t[1] === "-" || t[4] === "ago" ? -a : a;
-}, ie = (e) => e.toLowerCase().replace(/^application\//, ""), ft = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, yt = (e, t, o = {}) => {
-  let r;
+  return t[1] === "-" || t[4] === "ago" ? -n : n;
+}, le = (e) => e.toLowerCase().replace(/^application\//, ""), Tt = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, kt = (e, t, r = {}) => {
+  let a;
   try {
-    r = JSON.parse(Y.decode(t));
+    a = JSON.parse(q.decode(t));
   } catch {
   }
-  if (!ee(r))
-    throw new Se("JWT Claims Set must be a top-level JSON object");
-  const { typ: a } = o;
-  if (a && (typeof e.typ != "string" || ie(e.typ) !== ie(a)))
-    throw new g('unexpected "typ" JWT header value', r, "typ", "check_failed");
-  const { requiredClaims: s = [], issuer: n, subject: i, audience: c, maxTokenAge: u } = o, y = [...s];
-  u !== void 0 && y.push("iat"), c !== void 0 && y.push("aud"), i !== void 0 && y.push("sub"), n !== void 0 && y.push("iss");
-  for (const m of new Set(y.reverse()))
-    if (!(m in r))
-      throw new g(`missing required "${m}" claim`, r, m, "missing");
-  if (n && !(Array.isArray(n) ? n : [n]).includes(r.iss))
-    throw new g('unexpected "iss" claim value', r, "iss", "check_failed");
-  if (i && r.sub !== i)
-    throw new g('unexpected "sub" claim value', r, "sub", "check_failed");
-  if (c && !ft(r.aud, typeof c == "string" ? [c] : c))
-    throw new g('unexpected "aud" claim value', r, "aud", "check_failed");
-  let p;
-  switch (typeof o.clockTolerance) {
+  if (!ne(a))
+    throw new be("JWT Claims Set must be a top-level JSON object");
+  const { typ: n } = r;
+  if (n && (typeof e.typ != "string" || le(e.typ) !== le(n)))
+    throw new g('unexpected "typ" JWT header value', a, "typ", "check_failed");
+  const { requiredClaims: s = [], issuer: o, subject: c, audience: i, maxTokenAge: u } = r, m = [...s];
+  u !== void 0 && m.push("iat"), i !== void 0 && m.push("aud"), c !== void 0 && m.push("sub"), o !== void 0 && m.push("iss");
+  for (const w of new Set(m.reverse()))
+    if (!(w in a))
+      throw new g(`missing required "${w}" claim`, a, w, "missing");
+  if (o && !(Array.isArray(o) ? o : [o]).includes(a.iss))
+    throw new g('unexpected "iss" claim value', a, "iss", "check_failed");
+  if (c && a.sub !== c)
+    throw new g('unexpected "sub" claim value', a, "sub", "check_failed");
+  if (i && !Tt(a.aud, typeof i == "string" ? [i] : i))
+    throw new g('unexpected "aud" claim value', a, "aud", "check_failed");
+  let y;
+  switch (typeof r.clockTolerance) {
     case "string":
-      p = ce(o.clockTolerance);
+      y = de(r.clockTolerance);
       break;
     case "number":
-      p = o.clockTolerance;
+      y = r.clockTolerance;
       break;
     case "undefined":
-      p = 0;
+      y = 0;
       break;
     default:
       throw new TypeError("Invalid clockTolerance option type");
   }
-  const { currentDate: T } = o, E = dt(T || /* @__PURE__ */ new Date());
-  if ((r.iat !== void 0 || u) && typeof r.iat != "number")
-    throw new g('"iat" claim must be a number', r, "iat", "invalid");
-  if (r.nbf !== void 0) {
-    if (typeof r.nbf != "number")
-      throw new g('"nbf" claim must be a number', r, "nbf", "invalid");
-    if (r.nbf > E + p)
-      throw new g('"nbf" claim timestamp check failed', r, "nbf", "check_failed");
+  const { currentDate: _ } = r, E = At(_ || /* @__PURE__ */ new Date());
+  if ((a.iat !== void 0 || u) && typeof a.iat != "number")
+    throw new g('"iat" claim must be a number', a, "iat", "invalid");
+  if (a.nbf !== void 0) {
+    if (typeof a.nbf != "number")
+      throw new g('"nbf" claim must be a number', a, "nbf", "invalid");
+    if (a.nbf > E + y)
+      throw new g('"nbf" claim timestamp check failed', a, "nbf", "check_failed");
   }
-  if (r.exp !== void 0) {
-    if (typeof r.exp != "number")
-      throw new g('"exp" claim must be a number', r, "exp", "invalid");
-    if (r.exp <= E - p)
-      throw new ae('"exp" claim timestamp check failed', r, "exp", "check_failed");
+  if (a.exp !== void 0) {
+    if (typeof a.exp != "number")
+      throw new g('"exp" claim must be a number', a, "exp", "invalid");
+    if (a.exp <= E - y)
+      throw new ie('"exp" claim timestamp check failed', a, "exp", "check_failed");
   }
   if (u) {
-    const m = E - r.iat, v = typeof u == "number" ? u : ce(u);
-    if (m - p > v)
-      throw new ae('"iat" claim timestamp check failed (too far in the past)', r, "iat", "check_failed");
-    if (m < 0 - p)
-      throw new g('"iat" claim timestamp check failed (it should be in the past)', r, "iat", "check_failed");
+    const w = E - a.iat, k = typeof u == "number" ? u : de(u);
+    if (w - y > k)
+      throw new ie('"iat" claim timestamp check failed (too far in the past)', a, "iat", "check_failed");
+    if (w < 0 - y)
+      throw new g('"iat" claim timestamp check failed (it should be in the past)', a, "iat", "check_failed");
   }
-  return r;
+  return a;
 };
-async function mt(e, t, o) {
-  var r;
-  const a = await ut(e, t, o);
-  if ((r = a.protectedHeader.crit) != null && r.includes("b64") && a.protectedHeader.b64 === !1)
-    throw new Se("JWTs MUST NOT use unencoded payload");
-  const s = { payload: yt(a.protectedHeader, a.payload, o), protectedHeader: a.protectedHeader };
-  return typeof t == "function" ? { ...s, key: a.key } : s;
+async function Rt(e, t, r) {
+  var a;
+  const n = await gt(e, t, r);
+  if ((a = n.protectedHeader.crit) != null && a.includes("b64") && n.protectedHeader.b64 === !1)
+    throw new be("JWTs MUST NOT use unencoded payload");
+  const s = { payload: kt(n.protectedHeader, n.payload, r), protectedHeader: n.protectedHeader };
+  return typeof t == "function" ? { ...s, key: n.key } : s;
 }
-const N = async (e) => {
+const H = async (e) => {
   try {
-    const t = f.ALG, o = await Ze(We, t);
-    return await mt(e, o, {
+    const t = f.ALG, r = await dt(Be, t);
+    return await Rt(e, r, {
       issuer: f.ISSUER
     });
   } catch {
@@ -638,157 +740,157 @@ const N = async (e) => {
   }
 };
 var d = [];
-for (var z = 0; z < 256; ++z)
-  d.push((z + 256).toString(16).slice(1));
-function wt(e, t = 0) {
+for (var ee = 0; ee < 256; ++ee)
+  d.push((ee + 256).toString(16).slice(1));
+function It(e, t = 0) {
   return (d[e[t + 0]] + d[e[t + 1]] + d[e[t + 2]] + d[e[t + 3]] + "-" + d[e[t + 4]] + d[e[t + 5]] + "-" + d[e[t + 6]] + d[e[t + 7]] + "-" + d[e[t + 8]] + d[e[t + 9]] + "-" + d[e[t + 10]] + d[e[t + 11]] + d[e[t + 12]] + d[e[t + 13]] + d[e[t + 14]] + d[e[t + 15]]).toLowerCase();
 }
-var K, Et = new Uint8Array(16);
-function St() {
-  if (!K && (K = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !K))
+var L, Ct = new Uint8Array(16);
+function Pt() {
+  if (!L && (L = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !L))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return K(Et);
+  return L(Ct);
 }
-var gt = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
-const ue = {
-  randomUUID: gt
+var Ot = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
+const he = {
+  randomUUID: Ot
 };
-function de(e, t, o) {
-  if (ue.randomUUID && !t && !e)
-    return ue.randomUUID();
+function pe(e, t, r) {
+  if (he.randomUUID && !t && !e)
+    return he.randomUUID();
   e = e || {};
-  var r = e.random || (e.rng || St)();
-  return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, wt(r);
+  var a = e.random || (e.rng || Pt)();
+  return a[6] = a[6] & 15 | 64, a[8] = a[8] & 63 | 128, It(a);
 }
-const le = globalThis.crypto, At = (e) => `${de()}${de()}`.slice(0, e), _t = (e) => btoa(
+const ye = globalThis.crypto, Dt = (e) => `${pe()}${pe()}`.slice(0, e), Ut = (e) => btoa(
   [...new Uint8Array(e)].map((t) => String.fromCharCode(t)).join("")
 );
-async function Tt(e) {
-  if (!le.subtle)
+async function Ht(e) {
+  if (!ye.subtle)
     throw new Error(
       "crypto.subtle is available only in secure contexts (HTTPS)."
     );
-  const t = new TextEncoder().encode(e), o = await le.subtle.digest("SHA-256", t);
-  return _t(o).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  const t = new TextEncoder().encode(e), r = await ye.subtle.digest("SHA-256", t);
+  return Ut(r).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-async function bt(e) {
-  const o = At(43), r = await Tt(o);
+async function Kt(e) {
+  const r = Dt(43), a = await Ht(r);
   return {
-    code_verifier: o,
-    code_challenge: r
+    code_verifier: r,
+    code_challenge: a
   };
 }
-function Ie(e, t) {
+function Oe(e, t) {
   window.dispatchEvent(new StorageEvent("storage", { key: e, newValue: t }));
 }
-const he = (e, t) => {
-  const o = JSON.stringify(
+const fe = (e, t) => {
+  const r = JSON.stringify(
     typeof t == "function" ? t() : t
   );
-  window.localStorage.setItem(e, o), Ie(e, o);
-}, It = (e) => {
-  window.localStorage.removeItem(e), Ie(e, null);
-}, pe = (e) => window.localStorage.getItem(e), vt = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
-function J({
+  window.localStorage.setItem(e, r), Oe(e, r);
+}, Nt = (e) => {
+  window.localStorage.removeItem(e), Oe(e, null);
+}, me = (e) => window.localStorage.getItem(e), $t = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
+function W({
   key: e,
   initialValue: t
 }) {
-  const o = () => pe(e), r = D.useSyncExternalStore(
-    vt,
-    o
-  ), a = D.useCallback(
-    (i) => {
+  const r = () => me(e), a = D.useSyncExternalStore(
+    $t,
+    r
+  ), n = D.useCallback(
+    (c) => {
       try {
-        const c = typeof i == "function" ? i(JSON.parse(r)) : i;
-        c == null ? It(e) : he(e, c);
-      } catch (c) {
-        console.warn(c);
+        const i = typeof c == "function" ? c(JSON.parse(a)) : c;
+        i == null ? Nt(e) : fe(e, i);
+      } catch (i) {
+        console.warn(i);
       }
     },
-    [e, r]
+    [e, a]
   ), s = D.useCallback(() => {
-    a(t);
-  }, [t, a]), n = D.useCallback(() => {
-    a(null);
-  }, [a]);
+    n(t);
+  }, [t, n]), o = D.useCallback(() => {
+    n(null);
+  }, [n]);
   return D.useEffect(() => {
     try {
-      pe(e) === null && typeof t < "u" && he(e, t);
-    } catch (i) {
-      console.warn(i);
+      me(e) === null && typeof t < "u" && fe(e, t);
+    } catch (c) {
+      console.warn(c);
     }
-  }, [e, t]), [r ? JSON.parse(r) : null, a, s, n];
+  }, [e, t]), [a ? JSON.parse(a) : null, n, s, o];
 }
 var l = [];
-for (var X = 0; X < 256; ++X)
-  l.push((X + 256).toString(16).slice(1));
-function Rt(e, t = 0) {
+for (var te = 0; te < 256; ++te)
+  l.push((te + 256).toString(16).slice(1));
+function Lt(e, t = 0) {
   return (l[e[t + 0]] + l[e[t + 1]] + l[e[t + 2]] + l[e[t + 3]] + "-" + l[e[t + 4]] + l[e[t + 5]] + "-" + l[e[t + 6]] + l[e[t + 7]] + "-" + l[e[t + 8]] + l[e[t + 9]] + "-" + l[e[t + 10]] + l[e[t + 11]] + l[e[t + 12]] + l[e[t + 13]] + l[e[t + 14]] + l[e[t + 15]]).toLowerCase();
 }
-var W, kt = new Uint8Array(16);
-function Ct() {
-  if (!W && (W = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !W))
+var J, Wt = new Uint8Array(16);
+function Jt() {
+  if (!J && (J = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !J))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return W(kt);
+  return J(Wt);
 }
-var Ot = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
-const fe = {
-  randomUUID: Ot
+var xt = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
+const we = {
+  randomUUID: xt
 };
-function Pt(e, t, o) {
-  if (fe.randomUUID && !t && !e)
-    return fe.randomUUID();
+function jt(e, t, r) {
+  if (we.randomUUID && !t && !e)
+    return we.randomUUID();
   e = e || {};
-  var r = e.random || (e.rng || Ct)();
-  return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, Rt(r);
+  var a = e.random || (e.rng || Jt)();
+  return a[6] = a[6] & 15 | 64, a[8] = a[8] & 63 | 128, Lt(a);
 }
-const Q = "Oops! It looks like your session has expired. For your security, please log in again to continue.", Dt = "Your session has been successfully terminated.", ye = "Login failed. Please try again.", U = "Error getting access token, please re-authenticate.", Ut = "You forgot to wrap your component in <AuthProvider>.", me = {
+const re = "Oops! It looks like your session has expired. For your security, please log in again to continue.", Mt = "Your session has been successfully terminated.", Ee = "Login failed. Please try again.", U = "Error getting access token, please re-authenticate.", Vt = "You forgot to wrap your component in <AuthProvider>.", Se = {
   dev: "https://auth.gizmette.local.com:3003",
   prod: "https://mylogin.gizmette.com"
-}, x = "@@auth@@", Nt = process.env.NODE_ENV === "production", Ht = !Nt, G = async ({
+}, x = "@@auth@@", Yt = process.env.NODE_ENV === "production", Bt = !Yt, z = async ({
   type: e,
   clientId: t,
-  params: o = {}
+  params: r = {}
 }) => {
   try {
-    const r = await fetch(
-      Ht ? `${me.dev}/${e}` : `${me.prod}/${e}`,
+    const a = await fetch(
+      Bt ? `${Se.dev}/${e}` : `${Se.prod}/${e}`,
       {
         credentials: "include",
         method: "POST",
         headers: {
           "Content-Type": "application/json",
-          [Je.CLIENT_ID]: `${t}`
+          [Ye.CLIENT_ID]: `${t}`
         },
-        body: JSON.stringify(o)
+        body: JSON.stringify(r)
       }
     );
-    if (r.status !== 200)
-      return { status: r.status, data: [] };
-    const { data: a, errors: s } = await r.json();
+    if (a.status !== 200)
+      return { status: a.status, data: [] };
+    const { data: n, errors: s } = await a.json();
     return {
-      status: r.status,
-      data: a,
+      status: a.status,
+      data: n,
       errors: s
     };
-  } catch (r) {
-    return console.error(r), { status: 500, data: [] };
+  } catch (a) {
+    return console.error(a), { status: 500, data: [] };
   }
-}, Z = async ({
+}, ae = async ({
   idToken: e,
   accessToken: t,
-  refreshToken: o,
-  clientId: r
+  refreshToken: r,
+  clientId: a
 }) => {
   try {
     return {
-      status: (await G({
-        type: V.LOGOUT,
-        clientId: r,
+      status: (await z({
+        type: F.LOGOUT,
+        clientId: a,
         params: {
           idToken: e,
           accessToken: t,
-          refreshToken: o
+          refreshToken: r
         }
       })).status === 200
     };
@@ -797,34 +899,34 @@ const Q = "Oops! It looks like your session has expired. For your security, plea
       status: !1
     };
   }
-}, we = async ({
+}, ge = async ({
   username: e,
   password: t,
-  clientId: o,
-  nonce: r,
-  type: a,
+  clientId: r,
+  nonce: a,
+  type: n,
   sessionExpiration: s,
-  code: n,
-  code_verifier: i
+  code: o,
+  code_verifier: c
 }) => {
   try {
-    const c = await G({
-      type: V.AUTHENTICATE,
-      clientId: o,
+    const i = await z({
+      type: F.AUTHENTICATE,
+      clientId: r,
       params: {
-        type: a || M.ID_AND_ACCESS_TOKEN,
+        type: n || B.ID_AND_ACCESS_TOKEN,
         username: e,
         password: t,
         sessionExpiration: s,
-        nonce: r,
-        code: n,
-        code_verifier: i
+        nonce: a,
+        code: o,
+        code_verifier: c
       }
-    }), u = await N(c.data.idToken);
-    return u && u.payload[f.USER_ID_KEY] !== "" && u.payload[f.NONCE_KEY] === r ? {
-      idToken: c.data.idToken,
-      accessToken: c.data.accessToken,
-      refreshToken: c.data.refreshToken,
+    }), u = await H(i.data.idToken);
+    return u && u.payload[f.USER_ID_KEY] !== "" && u.payload[f.NONCE_KEY] === a ? {
+      idToken: i.data.idToken,
+      accessToken: i.data.accessToken,
+      refreshToken: i.data.refreshToken,
       userId: u.payload[f.USER_ID_KEY],
       status: !0
     } : {
@@ -835,24 +937,24 @@ const Q = "Oops! It looks like your session has expired. For your security, plea
       status: !1
     };
   }
-}, Lt = async ({
+}, Ft = async ({
   nonce: e,
   clientId: t,
-  code_challenge: o
+  code_challenge: r
 }) => {
   try {
-    const r = await G({
-      type: V.CODE,
+    const a = await z({
+      type: F.CODE,
       clientId: t,
       params: {
-        type: M.CODE,
+        type: B.CODE,
         nonce: e,
-        code_challenge: o
+        code_challenge: r
       }
     });
-    return r.data.code ? {
+    return a.data.code ? {
       status: !0,
-      code: r.data.code
+      code: a.data.code
     } : {
       status: !1
     };
@@ -861,29 +963,29 @@ const Q = "Oops! It looks like your session has expired. For your security, plea
       status: !1
     };
   }
-}, $t = async ({
+}, Gt = async ({
   clientId: e,
   userId: t,
-  nonce: o,
-  refreshToken: r,
-  accessToken: a
+  nonce: r,
+  refreshToken: a,
+  accessToken: n
 }) => {
   try {
-    const s = await G({
-      type: V.AUTHENTICATE,
+    const s = await z({
+      type: F.AUTHENTICATE,
       clientId: e,
       params: {
-        type: M.REFRESH_TOKEN,
+        type: B.REFRESH_TOKEN,
         userId: t,
-        nonce: o,
-        refreshToken: r,
-        accessToken: a
+        nonce: r,
+        refreshToken: a,
+        accessToken: n
       }
-    }), n = await N(s.data.accessToken);
-    return n && n.payload[f.USER_ID_KEY] !== "" && n.payload[f.NONCE_KEY] === o ? {
+    }), o = await H(s.data.accessToken);
+    return o && o.payload[f.USER_ID_KEY] !== "" && o.payload[f.NONCE_KEY] === r ? {
       accessToken: s.data.accessToken,
       refreshToken: s.data.refreshToken,
-      userId: n.payload[f.USER_ID_KEY],
+      userId: o.payload[f.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -894,8 +996,8 @@ const Q = "Oops! It looks like your session has expired. For your security, plea
     };
   }
 }, j = () => {
-  throw new Error(Ut);
-}, ve = Ne({
+  throw new Error(Vt);
+}, De = Je({
   isAuthenticated: !1,
   isLoading: !1,
   login: j,
@@ -903,135 +1005,144 @@ const Q = "Oops! It looks like your session has expired. For your security, plea
   getAccessToken: j,
   getIdToken: j,
   logoutReason: ""
-}), xt = ({
+}), Zt = ({
   children: e,
   sessionExpiration: t,
-  clientId: o
+  clientId: r
 }) => {
-  const [r, a, , s] = J({
-    key: `${x}::${o}::@@user@@`
-  }), [n, i, , c] = J({
-    key: `${x}::${o}::@@access@@`
-  }), [u, y, , p] = J(
+  const [a, n, , s] = W({
+    key: `${x}::${r}::@@user@@`
+  }), [o, c, , i] = W({
+    key: `${x}::${r}::@@access@@`
+  }), [u, m, , y] = W(
     {
-      key: `${x}::${o}::@@refresh@@`
+      key: `${x}::${r}::@@refresh@@`
     }
-  ), [T, E, , m] = J({
-    key: `${x}::${o}::@@nonce@@`
-  }), [v, H] = He({
+  ), [_, E, , w] = W({
+    key: `${x}::${r}::@@nonce@@`
+  }), [k, K] = xe({
     isLoading: !0,
     isAuthenticated: !1,
-    userId: "",
+    user: void 0,
     logoutReason: ""
-  }), A = Le(
-    (w) => {
-      H({
+  }), A = je(
+    (p) => {
+      K({
         isLoading: !1,
         isAuthenticated: !1,
-        userId: "",
-        logoutReason: w || Q
-      }), s(), c(), p(), m();
+        user: void 0,
+        logoutReason: p || re
+      }), s(), i(), y(), w();
     },
-    [s, c, m, p]
+    [s, i, w, y]
   );
-  $e(() => {
-    v.isLoading && r !== null && (async () => {
+  Me(() => {
+    k.isLoading && a !== null && (async () => {
       try {
-        const w = await N(r);
-        w && w.payload[f.USER_ID_KEY] !== "" ? H({
+        const p = await H(a);
+        p && p.payload[f.USER_ID_KEY] !== "" ? K({
           isLoading: !1,
           isAuthenticated: !0,
-          userId: w.payload[f.USER_ID_KEY],
+          user: {
+            userId: p.payload[f.USER_ID_KEY],
+            username: p.payload[f.USERNAME_KEY]
+          },
           logoutReason: ""
-        }) : (A(Q), await Z({
-          idToken: r,
-          accessToken: n,
+        }) : (A(re), await ae({
+          idToken: a,
+          accessToken: o,
           refreshToken: u,
-          clientId: o
+          clientId: r
         }));
       } catch {
-        A(Q), await Z({
-          idToken: r,
-          accessToken: n,
+        A(re), await ae({
+          idToken: a,
+          accessToken: o,
           refreshToken: u,
-          clientId: o
+          clientId: r
         });
       }
     })();
   }, [
-    v.isLoading,
-    n,
-    r,
-    u,
+    k.isLoading,
     o,
+    a,
+    u,
+    r,
     A
   ]);
-  const Re = async (w, O, R) => {
-    const k = Pt();
-    if (E(k), R === M.CODE) {
-      const { code_verifier: Pe, code_challenge: De } = await bt(), oe = await Lt({
-        nonce: k,
-        clientId: o,
-        code_challenge: De
+  const Ue = async (p, P, R) => {
+    const I = jt();
+    if (E(I), R === B.CODE) {
+      const { code_verifier: $e, code_challenge: Le } = await Kt(), se = await Ft({
+        nonce: I,
+        clientId: r,
+        code_challenge: Le
       });
-      if (oe.status) {
-        const P = await we({
-          username: w,
-          password: O,
-          clientId: o,
+      if (se.status) {
+        const O = await ge({
+          username: p,
+          password: P,
+          clientId: r,
           sessionExpiration: t,
-          nonce: k,
+          nonce: I,
           type: R,
-          code: oe.code,
-          code_verifier: Pe
+          code: se.code,
+          code_verifier: $e
         });
-        return P.status ? (a(P.idToken), i(P.accessToken), y(P.refreshToken), H({
+        return O.status ? (n(O.idToken), c(O.accessToken), m(O.refreshToken), K({
           isLoading: !1,
           isAuthenticated: !0,
-          userId: P.userId,
+          user: {
+            userId: O.userId,
+            username: p
+          },
           logoutReason: ""
-        }), !0) : (A(ye), !1);
+        }), !0) : (A(Ee), !1);
       }
       return !1;
     }
-    const S = await we({
-      username: w,
-      password: O,
-      clientId: o,
+    const S = await ge({
+      username: p,
+      password: P,
+      clientId: r,
       sessionExpiration: t,
-      nonce: k,
+      nonce: I,
       type: R
     });
-    return S.status ? (a(S.idToken), i(S.accessToken), y(S.refreshToken), H({
+    return S.status ? (n(S.idToken), c(S.accessToken), m(S.refreshToken), K({
       isLoading: !1,
       isAuthenticated: !0,
-      userId: S.userId
-    }), !0) : (A(ye), !1);
-  }, ke = async () => {
-    A(Dt), await Z({
-      idToken: r,
-      accessToken: n,
+      user: {
+        userId: S.userId,
+        username: p
+      }
+    }), !0) : (A(Ee), !1);
+  }, He = async () => {
+    A(Mt), await ae({
+      idToken: a,
+      accessToken: o,
       refreshToken: u,
-      clientId: o
+      clientId: r
     });
-  }, Ce = async () => {
-    const { isAuthenticated: w, userId: O } = v;
+  }, Ke = async () => {
+    const { isAuthenticated: p, user: P } = k;
     try {
-      if (w && O && n) {
-        const R = await N(n);
+      if (p && P && P.userId && o) {
+        const R = await H(o);
         if (R && R.payload[f.USER_ID_KEY] !== "")
-          return n;
-        const k = await N(u);
-        if (k && k.payload[f.USER_ID_KEY] !== "") {
-          const S = await $t({
-            clientId: o,
-            userId: O,
-            nonce: T,
+          return o;
+        const I = await H(u);
+        if (I && I.payload[f.USER_ID_KEY] !== "") {
+          const S = await Gt({
+            clientId: r,
+            userId: P.userId,
+            nonce: _,
             refreshToken: u,
-            accessToken: n
+            accessToken: o
           });
           if (S.status)
-            return i(S.accessToken), y(S.refreshToken), S.accessToken;
+            return c(S.accessToken), m(S.refreshToken), S.accessToken;
           A(U);
         }
         return A(U), console.error(U), "";
@@ -1039,20 +1150,20 @@ const Q = "Oops! It looks like your session has expired. For your security, plea
     } catch {
       return A(U), console.error(U), "";
     }
-  }, Oe = () => {
-    if (v.isAuthenticated && r)
-      return r;
+  }, Ne = () => {
+    if (k.isAuthenticated && a)
+      return a;
   };
-  return /* @__PURE__ */ Ue(
-    ve.Provider,
+  return /* @__PURE__ */ We(
+    De.Provider,
     {
-      value: { ...v, login: Re, logout: ke, getAccessToken: Ce, getIdToken: Oe },
+      value: { ...k, login: Ue, logout: He, getAccessToken: Ke, getIdToken: Ne },
       children: e
     }
   );
-}, jt = (e = ve) => Ke(e);
+}, er = (e = De) => Ve(e);
 export {
-  M as AUTH_TYPES,
-  xt as AuthProvider,
-  jt as useAuth
+  B as AUTH_TYPES,
+  Zt as AuthProvider,
+  er as useAuth
 };