@versini/auth-provider 5.0.1 → 5.0.3

package/dist/index.js

@@ -1,14 +1,17 @@
-import { jsx as We } from "react/jsx-runtime";
+var je = Object.defineProperty;
+var Me = (e, t, r) => t in e ? je(e, t, { enumerable: !0, configurable: !0, writable: !0, value: r }) : e[t] = r;
+var N = (e, t, r) => (Me(e, typeof t != "symbol" ? t + "" : t, r), r);
+import { jsx as Ve } from "react/jsx-runtime";
 import * as U from "react";
-import { createContext as Je, useState as xe, useCallback as je, useEffect as Me, useContext as Ve } from "react";
+import { createContext as Ye, useRef as Be, useState as Fe, useCallback as Ge, useEffect as qe, useContext as ze } from "react";
 /*!
-  @versini/auth-provider v5.0.1
+  @versini/auth-provider v5.0.3
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_CLIENT__ || (window.__VERSINI_AUTH_CLIENT__ = {
-    version: "5.0.1",
-    buildTime: "07/03/2024 06:46 PM EDT",
+    version: "5.0.3",
+    buildTime: "07/05/2024 10:27 AM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
@@ -21,28 +24,28 @@ try {
 try {
   window.__VERSINI_AUTH_COMMON__ || (window.__VERSINI_AUTH_COMMON__ = {
     version: "2.10.1",
-    buildTime: "07/03/2024 06:46 PM EDT",
+    buildTime: "07/05/2024 10:27 AM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
 } catch {
 }
-const B = {
+const F = {
   ID_TOKEN: "id_token",
   ACCESS_TOKEN: "token",
   ID_AND_ACCESS_TOKEN: "id_token token",
   CODE: "code",
   REFRESH_TOKEN: "refresh_token"
-}, Ye = {
+}, Xe = {
   CLIENT_ID: "X-Auth-ClientId"
-}, f = {
+}, m = {
   ALG: "RS256",
   USER_ID_KEY: "sub",
   TOKEN_ID_KEY: "__raw",
   NONCE_KEY: "_nonce",
   USERNAME_KEY: "username",
   ISSUER: "gizmette.com"
-}, Be = `-----BEGIN PUBLIC KEY-----
+}, Qe = `-----BEGIN PUBLIC KEY-----
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6i3Jd9fY/3COqCw/m7
 w5PKyTYLGAI2I6SIIdpe6i6DOCbEkmDz7LdVsBqwNtVi8gvWYIj+8ol6rU3qu1v5
 i1Jd45GSK4kzkVdgCmQZbM5ak0KI99q5wsrAIzUd+LRJ2HRvWtr5IYdsIiXaQjle
@@ -50,28 +53,28 @@ aMwPFOIcJH+rKfFgNcHLcaS5syp7zU1ANwZ+trgR+DifBr8TLVkBynmNeTyhDm2+
 l0haqjMk0UoNPPE8iYBWUHQJJE1Dqstj65d6Eh5g64Pao25y4cmYJbKjiblIGEkE
 sjqybA9mARAqh9k/eiIopecWSiffNQTwVQVd2I9ZH3BalhEXHlqFgrjz51kFqg81
 awIDAQAB
------END PUBLIC KEY-----`, F = {
+-----END PUBLIC KEY-----`, G = {
   AUTHENTICATE: "authenticate",
   CODE: "code",
   LOGOUT: "logout"
-}, G = crypto, Ae = (e) => e instanceof CryptoKey, N = new TextEncoder(), q = new TextDecoder();
-function Fe(...e) {
+}, q = crypto, be = (e) => e instanceof CryptoKey, L = new TextEncoder(), z = new TextDecoder();
+function Ze(...e) {
   const t = e.reduce((n, { length: s }) => n + s, 0), r = new Uint8Array(t);
   let a = 0;
   for (const n of e)
     r.set(n, a), a += n.length;
   return r;
 }
-const Ge = (e) => {
+const et = (e) => {
   const t = atob(e), r = new Uint8Array(t.length);
   for (let a = 0; a < t.length; a++)
     r[a] = t.charCodeAt(a);
   return r;
-}, M = (e) => {
+}, V = (e) => {
   let t = e;
-  t instanceof Uint8Array && (t = q.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
+  t instanceof Uint8Array && (t = z.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
   try {
-    return Ge(t);
+    return et(t);
   } catch {
     throw new TypeError("The input to be decoded is not correctly encoded.");
   }
@@ -85,7 +88,7 @@ class C extends Error {
     super(t), this.code = "ERR_JOSE_GENERIC", this.name = this.constructor.name, (r = Error.captureStackTrace) == null || r.call(Error, this, this.constructor);
   }
 }
-class A extends C {
+class g extends C {
   static get code() {
     return "ERR_JWT_CLAIM_VALIDATION_FAILED";
   }
@@ -93,7 +96,7 @@ class A extends C {
     super(t), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = a, this.reason = n, this.payload = r;
   }
 }
-class ce extends C {
+class de extends C {
   static get code() {
     return "ERR_JWT_EXPIRED";
   }
@@ -101,7 +104,7 @@ class ce extends C {
     super(t), this.code = "ERR_JWT_EXPIRED", this.claim = a, this.reason = n, this.payload = r;
   }
 }
-class qe extends C {
+class tt extends C {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_ALG_NOT_ALLOWED";
   }
@@ -109,14 +112,14 @@ class qe extends C {
     return "ERR_JOSE_ALG_NOT_ALLOWED";
   }
 }
-let k = class extends C {
+let R = class extends C {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_NOT_SUPPORTED";
   }
   static get code() {
     return "ERR_JOSE_NOT_SUPPORTED";
   }
-}, h = class extends C {
+}, f = class extends C {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_INVALID";
   }
@@ -124,7 +127,7 @@ let k = class extends C {
     return "ERR_JWS_INVALID";
   }
 };
-class be extends C {
+class _e extends C {
   constructor() {
     super(...arguments), this.code = "ERR_JWT_INVALID";
   }
@@ -132,7 +135,7 @@ class be extends C {
     return "ERR_JWT_INVALID";
   }
 }
-class ze extends C {
+class rt extends C {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED", this.message = "signature verification failed";
   }
@@ -140,16 +143,16 @@ class ze extends C {
     return "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
   }
 }
-function b(e, t = "algorithm.name") {
+function _(e, t = "algorithm.name") {
   return new TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`);
 }
 function $(e, t) {
   return e.name === t;
 }
-function X(e) {
+function Z(e) {
   return parseInt(e.name.slice(4), 10);
 }
-function Xe(e) {
+function at(e) {
   switch (e) {
     case "ES256":
       return "P-256";
@@ -161,7 +164,7 @@ function Xe(e) {
       throw new Error("unreachable");
   }
 }
-function Qe(e, t) {
+function nt(e, t) {
   if (t.length && !t.some((r) => e.usages.includes(r))) {
     let r = "CryptoKey does not support this operation, its usages must include ";
     if (t.length > 2) {
@@ -172,59 +175,59 @@ function Qe(e, t) {
     throw new TypeError(r);
   }
 }
-function Ze(e, t, ...r) {
+function st(e, t, ...r) {
   switch (t) {
     case "HS256":
     case "HS384":
     case "HS512": {
       if (!$(e.algorithm, "HMAC"))
-        throw b("HMAC");
+        throw _("HMAC");
       const a = parseInt(t.slice(2), 10);
-      if (X(e.algorithm.hash) !== a)
-        throw b(`SHA-${a}`, "algorithm.hash");
+      if (Z(e.algorithm.hash) !== a)
+        throw _(`SHA-${a}`, "algorithm.hash");
       break;
     }
     case "RS256":
     case "RS384":
     case "RS512": {
       if (!$(e.algorithm, "RSASSA-PKCS1-v1_5"))
-        throw b("RSASSA-PKCS1-v1_5");
+        throw _("RSASSA-PKCS1-v1_5");
       const a = parseInt(t.slice(2), 10);
-      if (X(e.algorithm.hash) !== a)
-        throw b(`SHA-${a}`, "algorithm.hash");
+      if (Z(e.algorithm.hash) !== a)
+        throw _(`SHA-${a}`, "algorithm.hash");
       break;
     }
     case "PS256":
     case "PS384":
     case "PS512": {
       if (!$(e.algorithm, "RSA-PSS"))
-        throw b("RSA-PSS");
+        throw _("RSA-PSS");
       const a = parseInt(t.slice(2), 10);
-      if (X(e.algorithm.hash) !== a)
-        throw b(`SHA-${a}`, "algorithm.hash");
+      if (Z(e.algorithm.hash) !== a)
+        throw _(`SHA-${a}`, "algorithm.hash");
       break;
     }
     case "EdDSA": {
       if (e.algorithm.name !== "Ed25519" && e.algorithm.name !== "Ed448")
-        throw b("Ed25519 or Ed448");
+        throw _("Ed25519 or Ed448");
       break;
     }
     case "ES256":
     case "ES384":
     case "ES512": {
       if (!$(e.algorithm, "ECDSA"))
-        throw b("ECDSA");
-      const a = Xe(t);
+        throw _("ECDSA");
+      const a = at(t);
       if (e.algorithm.namedCurve !== a)
-        throw b(a, "algorithm.namedCurve");
+        throw _(a, "algorithm.namedCurve");
       break;
     }
     default:
       throw new TypeError("CryptoKey does not support this operation");
   }
-  Qe(e, r);
+  nt(e, r);
 }
-function _e(e, t, ...r) {
+function ve(e, t, ...r) {
   var a;
   if (r.length > 2) {
     const n = r.pop();
@@ -233,11 +236,11 @@ function _e(e, t, ...r) {
     r.length === 2 ? e += `one of type ${r[0]} or ${r[1]}.` : e += `of type ${r[0]}.`;
   return t == null ? e += ` Received ${t}` : typeof t == "function" && t.name ? e += ` Received function ${t.name}` : typeof t == "object" && t != null && (a = t.constructor) != null && a.name && (e += ` Received an instance of ${t.constructor.name}`), e;
 }
-const ie = (e, ...t) => _e("Key must be ", e, ...t);
-function ve(e, t, ...r) {
-  return _e(`Key for the ${e} algorithm must be `, t, ...r);
+const le = (e, ...t) => ve("Key must be ", e, ...t);
+function Re(e, t, ...r) {
+  return ve(`Key for the ${e} algorithm must be `, t, ...r);
 }
-const Te = (e) => Ae(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", Y = ["CryptoKey"], et = (...e) => {
+const Ie = (e) => be(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", B = ["CryptoKey"], ot = (...e) => {
   const t = e.filter(Boolean);
   if (t.length === 0 || t.length === 1)
     return !0;
@@ -256,11 +259,11 @@ const Te = (e) => Ae(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) ===
   }
   return !0;
 };
-function tt(e) {
+function it(e) {
   return typeof e == "object" && e !== null;
 }
-function ne(e) {
-  if (!tt(e) || Object.prototype.toString.call(e) !== "[object Object]")
+function ie(e) {
+  if (!it(e) || Object.prototype.toString.call(e) !== "[object Object]")
     return !1;
   if (Object.getPrototypeOf(e) === null)
     return !0;
@@ -269,14 +272,14 @@ function ne(e) {
     t = Object.getPrototypeOf(t);
   return Object.getPrototypeOf(e) === t;
 }
-const rt = (e, t) => {
+const ct = (e, t) => {
   if (e.startsWith("RS") || e.startsWith("PS")) {
     const { modulusLength: r } = t.algorithm;
     if (typeof r != "number" || r < 2048)
       throw new TypeError(`${e} requires key modulusLength to be 2048 bits or larger`);
   }
 };
-function at(e) {
+function ut(e) {
   let t, r;
   switch (e.kty) {
     case "RSA": {
@@ -301,7 +304,7 @@ function at(e) {
           }, r = e.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
           break;
         default:
-          throw new k('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new R('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
@@ -323,7 +326,7 @@ function at(e) {
           t = { name: "ECDH", namedCurve: e.crv }, r = e.d ? ["deriveBits"] : [];
           break;
         default:
-          throw new k('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new R('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
@@ -339,71 +342,71 @@ function at(e) {
           t = { name: e.crv }, r = e.d ? ["deriveBits"] : [];
           break;
         default:
-          throw new k('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new R('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
     default:
-      throw new k('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
+      throw new R('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
   }
   return { algorithm: t, keyUsages: r };
 }
-const nt = async (e) => {
+const dt = async (e) => {
   if (!e.alg)
     throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
-  const { algorithm: t, keyUsages: r } = at(e), a = [
+  const { algorithm: t, keyUsages: r } = ut(e), a = [
     t,
     e.ext ?? !1,
     e.key_ops ?? r
   ], n = { ...e };
-  return delete n.alg, delete n.use, G.subtle.importKey("jwk", n, ...a);
-}, ke = (e) => M(e);
-let Q, Z;
-const Re = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", Ie = async (e, t, r, a) => {
+  return delete n.alg, delete n.use, q.subtle.importKey("jwk", n, ...a);
+}, Ce = (e) => V(e);
+let ee, te;
+const Pe = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", Oe = async (e, t, r, a) => {
   let n = e.get(t);
   if (n != null && n[a])
     return n[a];
-  const s = await nt({ ...r, alg: a });
+  const s = await dt({ ...r, alg: a });
   return n ? n[a] = s : e.set(t, { [a]: s }), s;
-}, ot = (e, t) => {
-  if (Re(e)) {
+}, lt = (e, t) => {
+  if (Pe(e)) {
     let r = e.export({ format: "jwk" });
-    return delete r.d, delete r.dp, delete r.dq, delete r.p, delete r.q, delete r.qi, r.k ? ke(r.k) : (Z || (Z = /* @__PURE__ */ new WeakMap()), Ie(Z, e, r, t));
+    return delete r.d, delete r.dp, delete r.dq, delete r.p, delete r.q, delete r.qi, r.k ? Ce(r.k) : (te || (te = /* @__PURE__ */ new WeakMap()), Oe(te, e, r, t));
   }
   return e;
-}, st = (e, t) => {
-  if (Re(e)) {
+}, ht = (e, t) => {
+  if (Pe(e)) {
     let r = e.export({ format: "jwk" });
-    return r.k ? ke(r.k) : (Q || (Q = /* @__PURE__ */ new WeakMap()), Ie(Q, e, r, t));
+    return r.k ? Ce(r.k) : (ee || (ee = /* @__PURE__ */ new WeakMap()), Oe(ee, e, r, t));
   }
   return e;
-}, ct = { normalizePublicKey: ot, normalizePrivateKey: st }, T = (e, t, r = 0) => {
+}, ft = { normalizePublicKey: lt, normalizePrivateKey: ht }, v = (e, t, r = 0) => {
   r === 0 && (t.unshift(t.length), t.unshift(6));
   const a = e.indexOf(t[0], r);
   if (a === -1)
     return !1;
   const n = e.subarray(a, a + t.length);
-  return n.length !== t.length ? !1 : n.every((s, o) => s === t[o]) || T(e, t, a + 1);
-}, ue = (e) => {
+  return n.length !== t.length ? !1 : n.every((s, o) => s === t[o]) || v(e, t, a + 1);
+}, he = (e) => {
   switch (!0) {
-    case T(e, [42, 134, 72, 206, 61, 3, 1, 7]):
+    case v(e, [42, 134, 72, 206, 61, 3, 1, 7]):
       return "P-256";
-    case T(e, [43, 129, 4, 0, 34]):
+    case v(e, [43, 129, 4, 0, 34]):
       return "P-384";
-    case T(e, [43, 129, 4, 0, 35]):
+    case v(e, [43, 129, 4, 0, 35]):
       return "P-521";
-    case T(e, [43, 101, 110]):
+    case v(e, [43, 101, 110]):
       return "X25519";
-    case T(e, [43, 101, 111]):
+    case v(e, [43, 101, 111]):
       return "X448";
-    case T(e, [43, 101, 112]):
+    case v(e, [43, 101, 112]):
       return "Ed25519";
-    case T(e, [43, 101, 113]):
+    case v(e, [43, 101, 113]):
       return "Ed448";
     default:
-      throw new k("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
+      throw new R("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
   }
-}, it = async (e, t, r, a, n) => {
+}, pt = async (e, t, r, a, n) => {
   let s, o;
   const i = new Uint8Array(atob(r.replace(e, "")).split("").map((c) => c.charCodeAt(0)));
   switch (a) {
@@ -439,43 +442,43 @@ const Re = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject",
     case "ECDH-ES+A128KW":
     case "ECDH-ES+A192KW":
     case "ECDH-ES+A256KW": {
-      const c = ue(i);
+      const c = he(i);
       s = c.startsWith("P-") ? { name: "ECDH", namedCurve: c } : { name: c }, o = [];
       break;
     }
     case "EdDSA":
-      s = { name: ue(i) }, o = ["verify"];
+      s = { name: he(i) }, o = ["verify"];
       break;
     default:
-      throw new k('Invalid or unsupported "alg" (Algorithm) value');
+      throw new R('Invalid or unsupported "alg" (Algorithm) value');
   }
-  return G.subtle.importKey(t, i, s, !1, o);
-}, ut = (e, t, r) => it(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
-async function dt(e, t, r) {
+  return q.subtle.importKey(t, i, s, !1, o);
+}, yt = (e, t, r) => pt(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
+async function mt(e, t, r) {
   if (e.indexOf("-----BEGIN PUBLIC KEY-----") !== 0)
     throw new TypeError('"spki" must be SPKI formatted string');
-  return ut(e, t);
+  return yt(e, t);
 }
-const V = (e) => e == null ? void 0 : e[Symbol.toStringTag], lt = (e, t) => {
+const Y = (e) => e == null ? void 0 : e[Symbol.toStringTag], wt = (e, t) => {
   if (!(t instanceof Uint8Array)) {
-    if (!Te(t))
-      throw new TypeError(ve(e, t, ...Y, "Uint8Array"));
+    if (!Ie(t))
+      throw new TypeError(Re(e, t, ...B, "Uint8Array"));
     if (t.type !== "secret")
-      throw new TypeError(`${V(t)} instances for symmetric algorithms must be of type "secret"`);
+      throw new TypeError(`${Y(t)} instances for symmetric algorithms must be of type "secret"`);
   }
-}, ht = (e, t, r) => {
-  if (!Te(t))
-    throw new TypeError(ve(e, t, ...Y));
+}, Et = (e, t, r) => {
+  if (!Ie(t))
+    throw new TypeError(Re(e, t, ...B));
   if (t.type === "secret")
-    throw new TypeError(`${V(t)} instances for asymmetric algorithms must not be of type "secret"`);
+    throw new TypeError(`${Y(t)} instances for asymmetric algorithms must not be of type "secret"`);
   if (t.algorithm && r === "verify" && t.type === "private")
-    throw new TypeError(`${V(t)} instances for asymmetric algorithm verifying must be of type "public"`);
+    throw new TypeError(`${Y(t)} instances for asymmetric algorithm verifying must be of type "public"`);
   if (t.algorithm && r === "encrypt" && t.type === "private")
-    throw new TypeError(`${V(t)} instances for asymmetric algorithm encryption must be of type "public"`);
-}, pt = (e, t, r) => {
-  e.startsWith("HS") || e === "dir" || e.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(e) ? lt(e, t) : ht(e, t, r);
+    throw new TypeError(`${Y(t)} instances for asymmetric algorithm encryption must be of type "public"`);
+}, St = (e, t, r) => {
+  e.startsWith("HS") || e === "dir" || e.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(e) ? wt(e, t) : Et(e, t, r);
 };
-function yt(e, t, r, a, n) {
+function gt(e, t, r, a, n) {
   if (n.crit !== void 0 && (a == null ? void 0 : a.crit) === void 0)
     throw new e('"crit" (Critical) Header Parameter MUST be integrity protected');
   if (!a || a.crit === void 0)
@@ -486,7 +489,7 @@ function yt(e, t, r, a, n) {
   r !== void 0 ? s = new Map([...Object.entries(r), ...t.entries()]) : s = t;
   for (const o of a.crit) {
     if (!s.has(o))
-      throw new k(`Extension Header Parameter "${o}" is not recognized`);
+      throw new R(`Extension Header Parameter "${o}" is not recognized`);
     if (n[o] === void 0)
       throw new e(`Extension Header Parameter "${o}" is missing`);
     if (s.get(o) && a[o] === void 0)
@@ -494,13 +497,13 @@ function yt(e, t, r, a, n) {
   }
   return new Set(a.crit);
 }
-const ft = (e, t) => {
+const At = (e, t) => {
   if (t !== void 0 && (!Array.isArray(t) || t.some((r) => typeof r != "string")))
     throw new TypeError(`"${e}" option must be an array of strings`);
   if (t)
     return new Set(t);
 };
-function mt(e, t) {
+function Tt(e, t) {
   const r = `SHA-${e.slice(-3)}`;
   switch (e) {
     case "HS256":
@@ -522,104 +525,104 @@ function mt(e, t) {
     case "EdDSA":
       return { name: t.name };
     default:
-      throw new k(`alg ${e} is not supported either by JOSE or your javascript runtime`);
+      throw new R(`alg ${e} is not supported either by JOSE or your javascript runtime`);
   }
 }
-async function wt(e, t, r) {
-  if (t = await ct.normalizePublicKey(t, e), Ae(t))
-    return Ze(t, e, r), t;
+async function kt(e, t, r) {
+  if (t = await ft.normalizePublicKey(t, e), be(t))
+    return st(t, e, r), t;
   if (t instanceof Uint8Array) {
     if (!e.startsWith("HS"))
-      throw new TypeError(ie(t, ...Y));
-    return G.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [r]);
+      throw new TypeError(le(t, ...B));
+    return q.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [r]);
   }
-  throw new TypeError(ie(t, ...Y, "Uint8Array"));
+  throw new TypeError(le(t, ...B, "Uint8Array"));
 }
-const Et = async (e, t, r, a) => {
-  const n = await wt(e, t, "verify");
-  rt(e, n);
-  const s = mt(e, n.algorithm);
+const bt = async (e, t, r, a) => {
+  const n = await kt(e, t, "verify");
+  ct(e, n);
+  const s = Tt(e, n.algorithm);
   try {
-    return await G.subtle.verify(s, n, r, a);
+    return await q.subtle.verify(s, n, r, a);
   } catch {
     return !1;
   }
 };
-async function St(e, t, r) {
-  if (!ne(e))
-    throw new h("Flattened JWS must be an object");
+async function _t(e, t, r) {
+  if (!ie(e))
+    throw new f("Flattened JWS must be an object");
   if (e.protected === void 0 && e.header === void 0)
-    throw new h('Flattened JWS must have either of the "protected" or "header" members');
+    throw new f('Flattened JWS must have either of the "protected" or "header" members');
   if (e.protected !== void 0 && typeof e.protected != "string")
-    throw new h("JWS Protected Header incorrect type");
+    throw new f("JWS Protected Header incorrect type");
   if (e.payload === void 0)
-    throw new h("JWS Payload missing");
+    throw new f("JWS Payload missing");
   if (typeof e.signature != "string")
-    throw new h("JWS Signature missing or incorrect type");
-  if (e.header !== void 0 && !ne(e.header))
-    throw new h("JWS Unprotected Header incorrect type");
+    throw new f("JWS Signature missing or incorrect type");
+  if (e.header !== void 0 && !ie(e.header))
+    throw new f("JWS Unprotected Header incorrect type");
   let a = {};
   if (e.protected)
     try {
-      const E = M(e.protected);
-      a = JSON.parse(q.decode(E));
+      const S = V(e.protected);
+      a = JSON.parse(z.decode(S));
     } catch {
-      throw new h("JWS Protected Header is invalid");
+      throw new f("JWS Protected Header is invalid");
     }
-  if (!et(a, e.header))
-    throw new h("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
+  if (!ot(a, e.header))
+    throw new f("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
   const n = {
     ...a,
     ...e.header
-  }, s = yt(h, /* @__PURE__ */ new Map([["b64", !0]]), r == null ? void 0 : r.crit, a, n);
+  }, s = gt(f, /* @__PURE__ */ new Map([["b64", !0]]), r == null ? void 0 : r.crit, a, n);
   let o = !0;
   if (s.has("b64") && (o = a.b64, typeof o != "boolean"))
-    throw new h('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
+    throw new f('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
   const { alg: i } = n;
   if (typeof i != "string" || !i)
-    throw new h('JWS "alg" (Algorithm) Header Parameter missing or invalid');
-  const c = r && ft("algorithms", r.algorithms);
+    throw new f('JWS "alg" (Algorithm) Header Parameter missing or invalid');
+  const c = r && At("algorithms", r.algorithms);
   if (c && !c.has(i))
-    throw new qe('"alg" (Algorithm) Header Parameter value not allowed');
+    throw new tt('"alg" (Algorithm) Header Parameter value not allowed');
   if (o) {
     if (typeof e.payload != "string")
-      throw new h("JWS Payload must be a string");
+      throw new f("JWS Payload must be a string");
   } else if (typeof e.payload != "string" && !(e.payload instanceof Uint8Array))
-    throw new h("JWS Payload must be a string or an Uint8Array instance");
-  let u = !1;
-  typeof t == "function" && (t = await t(a, e), u = !0), pt(i, t, "verify");
-  const w = Fe(N.encode(e.protected ?? ""), N.encode("."), typeof e.payload == "string" ? N.encode(e.payload) : e.payload);
-  let y;
+    throw new f("JWS Payload must be a string or an Uint8Array instance");
+  let d = !1;
+  typeof t == "function" && (t = await t(a, e), d = !0), St(i, t, "verify");
+  const y = Ze(L.encode(e.protected ?? ""), L.encode("."), typeof e.payload == "string" ? L.encode(e.payload) : e.payload);
+  let p;
   try {
-    y = M(e.signature);
+    p = V(e.signature);
   } catch {
-    throw new h("Failed to base64url decode the signature");
+    throw new f("Failed to base64url decode the signature");
   }
-  if (!await Et(i, t, y, w))
-    throw new ze();
-  let _;
+  if (!await bt(i, t, p, y))
+    throw new rt();
+  let A;
   if (o)
     try {
-      _ = M(e.payload);
+      A = V(e.payload);
     } catch {
-      throw new h("Failed to base64url decode the payload");
+      throw new f("Failed to base64url decode the payload");
     }
   else
-    typeof e.payload == "string" ? _ = N.encode(e.payload) : _ = e.payload;
-  const S = { payload: _ };
-  return e.protected !== void 0 && (S.protectedHeader = a), e.header !== void 0 && (S.unprotectedHeader = e.header), u ? { ...S, key: t } : S;
+    typeof e.payload == "string" ? A = L.encode(e.payload) : A = e.payload;
+  const E = { payload: A };
+  return e.protected !== void 0 && (E.protectedHeader = a), e.header !== void 0 && (E.unprotectedHeader = e.header), d ? { ...E, key: t } : E;
 }
-async function gt(e, t, r) {
-  if (e instanceof Uint8Array && (e = q.decode(e)), typeof e != "string")
-    throw new h("Compact JWS must be a string or Uint8Array");
+async function vt(e, t, r) {
+  if (e instanceof Uint8Array && (e = z.decode(e)), typeof e != "string")
+    throw new f("Compact JWS must be a string or Uint8Array");
   const { 0: a, 1: n, 2: s, length: o } = e.split(".");
   if (o !== 3)
-    throw new h("Invalid Compact JWS");
-  const i = await St({ payload: n, protected: a, signature: s }, t, r), c = { payload: i.payload, protectedHeader: i.protectedHeader };
+    throw new f("Invalid Compact JWS");
+  const i = await _t({ payload: n, protected: a, signature: s }, t, r), c = { payload: i.payload, protectedHeader: i.protectedHeader };
   return typeof t == "function" ? { ...c, key: i.key } : c;
 }
-const At = (e) => Math.floor(e.getTime() / 1e3), Ce = 60, Pe = Ce * 60, oe = Pe * 24, bt = oe * 7, _t = oe * 365.25, vt = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, de = (e) => {
-  const t = vt.exec(e);
+const Rt = (e) => Math.floor(e.getTime() / 1e3), De = 60, Ue = De * 60, ce = Ue * 24, It = ce * 7, Ct = ce * 365.25, Pt = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, fe = (e) => {
+  const t = Pt.exec(e);
   if (!t || t[4] && t[1])
     throw new TypeError("Invalid time period format");
   const r = parseFloat(t[2]), a = t[3].toLowerCase();
@@ -637,172 +640,172 @@ const At = (e) => Math.floor(e.getTime() / 1e3), Ce = 60, Pe = Ce * 60, oe = Pe
     case "min":
     case "mins":
     case "m":
-      n = Math.round(r * Ce);
+      n = Math.round(r * De);
       break;
     case "hour":
     case "hours":
     case "hr":
     case "hrs":
     case "h":
-      n = Math.round(r * Pe);
+      n = Math.round(r * Ue);
       break;
     case "day":
     case "days":
     case "d":
-      n = Math.round(r * oe);
+      n = Math.round(r * ce);
       break;
     case "week":
     case "weeks":
     case "w":
-      n = Math.round(r * bt);
+      n = Math.round(r * It);
       break;
     default:
-      n = Math.round(r * _t);
+      n = Math.round(r * Ct);
       break;
   }
   return t[1] === "-" || t[4] === "ago" ? -n : n;
-}, le = (e) => e.toLowerCase().replace(/^application\//, ""), Tt = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, kt = (e, t, r = {}) => {
+}, pe = (e) => e.toLowerCase().replace(/^application\//, ""), Ot = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, Dt = (e, t, r = {}) => {
   let a;
   try {
-    a = JSON.parse(q.decode(t));
+    a = JSON.parse(z.decode(t));
   } catch {
   }
-  if (!ne(a))
-    throw new be("JWT Claims Set must be a top-level JSON object");
+  if (!ie(a))
+    throw new _e("JWT Claims Set must be a top-level JSON object");
   const { typ: n } = r;
-  if (n && (typeof e.typ != "string" || le(e.typ) !== le(n)))
-    throw new A('unexpected "typ" JWT header value', a, "typ", "check_failed");
-  const { requiredClaims: s = [], issuer: o, subject: i, audience: c, maxTokenAge: u } = r, w = [...s];
-  u !== void 0 && w.push("iat"), c !== void 0 && w.push("aud"), i !== void 0 && w.push("sub"), o !== void 0 && w.push("iss");
-  for (const E of new Set(w.reverse()))
-    if (!(E in a))
-      throw new A(`missing required "${E}" claim`, a, E, "missing");
+  if (n && (typeof e.typ != "string" || pe(e.typ) !== pe(n)))
+    throw new g('unexpected "typ" JWT header value', a, "typ", "check_failed");
+  const { requiredClaims: s = [], issuer: o, subject: i, audience: c, maxTokenAge: d } = r, y = [...s];
+  d !== void 0 && y.push("iat"), c !== void 0 && y.push("aud"), i !== void 0 && y.push("sub"), o !== void 0 && y.push("iss");
+  for (const S of new Set(y.reverse()))
+    if (!(S in a))
+      throw new g(`missing required "${S}" claim`, a, S, "missing");
   if (o && !(Array.isArray(o) ? o : [o]).includes(a.iss))
-    throw new A('unexpected "iss" claim value', a, "iss", "check_failed");
+    throw new g('unexpected "iss" claim value', a, "iss", "check_failed");
   if (i && a.sub !== i)
-    throw new A('unexpected "sub" claim value', a, "sub", "check_failed");
-  if (c && !Tt(a.aud, typeof c == "string" ? [c] : c))
-    throw new A('unexpected "aud" claim value', a, "aud", "check_failed");
-  let y;
+    throw new g('unexpected "sub" claim value', a, "sub", "check_failed");
+  if (c && !Ot(a.aud, typeof c == "string" ? [c] : c))
+    throw new g('unexpected "aud" claim value', a, "aud", "check_failed");
+  let p;
   switch (typeof r.clockTolerance) {
     case "string":
-      y = de(r.clockTolerance);
+      p = fe(r.clockTolerance);
       break;
     case "number":
-      y = r.clockTolerance;
+      p = r.clockTolerance;
       break;
     case "undefined":
-      y = 0;
+      p = 0;
       break;
     default:
       throw new TypeError("Invalid clockTolerance option type");
   }
-  const { currentDate: _ } = r, S = At(_ || /* @__PURE__ */ new Date());
-  if ((a.iat !== void 0 || u) && typeof a.iat != "number")
-    throw new A('"iat" claim must be a number', a, "iat", "invalid");
+  const { currentDate: A } = r, E = Rt(A || /* @__PURE__ */ new Date());
+  if ((a.iat !== void 0 || d) && typeof a.iat != "number")
+    throw new g('"iat" claim must be a number', a, "iat", "invalid");
   if (a.nbf !== void 0) {
     if (typeof a.nbf != "number")
-      throw new A('"nbf" claim must be a number', a, "nbf", "invalid");
-    if (a.nbf > S + y)
-      throw new A('"nbf" claim timestamp check failed', a, "nbf", "check_failed");
+      throw new g('"nbf" claim must be a number', a, "nbf", "invalid");
+    if (a.nbf > E + p)
+      throw new g('"nbf" claim timestamp check failed', a, "nbf", "check_failed");
   }
   if (a.exp !== void 0) {
     if (typeof a.exp != "number")
-      throw new A('"exp" claim must be a number', a, "exp", "invalid");
-    if (a.exp <= S - y)
-      throw new ce('"exp" claim timestamp check failed', a, "exp", "check_failed");
+      throw new g('"exp" claim must be a number', a, "exp", "invalid");
+    if (a.exp <= E - p)
+      throw new de('"exp" claim timestamp check failed', a, "exp", "check_failed");
   }
-  if (u) {
-    const E = S - a.iat, R = typeof u == "number" ? u : de(u);
-    if (E - y > R)
-      throw new ce('"iat" claim timestamp check failed (too far in the past)', a, "iat", "check_failed");
-    if (E < 0 - y)
-      throw new A('"iat" claim timestamp check failed (it should be in the past)', a, "iat", "check_failed");
+  if (d) {
+    const S = E - a.iat, K = typeof d == "number" ? d : fe(d);
+    if (S - p > K)
+      throw new de('"iat" claim timestamp check failed (too far in the past)', a, "iat", "check_failed");
+    if (S < 0 - p)
+      throw new g('"iat" claim timestamp check failed (it should be in the past)', a, "iat", "check_failed");
   }
   return a;
 };
-async function Rt(e, t, r) {
+async function Ut(e, t, r) {
   var a;
-  const n = await gt(e, t, r);
+  const n = await vt(e, t, r);
   if ((a = n.protectedHeader.crit) != null && a.includes("b64") && n.protectedHeader.b64 === !1)
-    throw new be("JWTs MUST NOT use unencoded payload");
-  const s = { payload: kt(n.protectedHeader, n.payload, r), protectedHeader: n.protectedHeader };
+    throw new _e("JWTs MUST NOT use unencoded payload");
+  const s = { payload: Dt(n.protectedHeader, n.payload, r), protectedHeader: n.protectedHeader };
   return typeof t == "function" ? { ...s, key: n.key } : s;
 }
 const H = async (e) => {
   try {
-    const t = f.ALG, r = await dt(Be, t);
-    return await Rt(e, r, {
-      issuer: f.ISSUER
+    const t = m.ALG, r = await mt(Qe, t);
+    return await Ut(e, r, {
+      issuer: m.ISSUER
     });
   } catch {
     return;
   }
 };
-var d = [];
-for (var ee = 0; ee < 256; ++ee)
-  d.push((ee + 256).toString(16).slice(1));
-function It(e, t = 0) {
-  return (d[e[t + 0]] + d[e[t + 1]] + d[e[t + 2]] + d[e[t + 3]] + "-" + d[e[t + 4]] + d[e[t + 5]] + "-" + d[e[t + 6]] + d[e[t + 7]] + "-" + d[e[t + 8]] + d[e[t + 9]] + "-" + d[e[t + 10]] + d[e[t + 11]] + d[e[t + 12]] + d[e[t + 13]] + d[e[t + 14]] + d[e[t + 15]]).toLowerCase();
+var l = [];
+for (var re = 0; re < 256; ++re)
+  l.push((re + 256).toString(16).slice(1));
+function Ht(e, t = 0) {
+  return (l[e[t + 0]] + l[e[t + 1]] + l[e[t + 2]] + l[e[t + 3]] + "-" + l[e[t + 4]] + l[e[t + 5]] + "-" + l[e[t + 6]] + l[e[t + 7]] + "-" + l[e[t + 8]] + l[e[t + 9]] + "-" + l[e[t + 10]] + l[e[t + 11]] + l[e[t + 12]] + l[e[t + 13]] + l[e[t + 14]] + l[e[t + 15]]).toLowerCase();
 }
-var L, Ct = new Uint8Array(16);
-function Pt() {
-  if (!L && (L = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !L))
+var W, Kt = new Uint8Array(16);
+function Nt() {
+  if (!W && (W = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !W))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return L(Ct);
+  return W(Kt);
 }
-var Ot = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
-const he = {
-  randomUUID: Ot
+var Lt = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
+const ye = {
+  randomUUID: Lt
 };
-function pe(e, t, r) {
-  if (he.randomUUID && !t && !e)
-    return he.randomUUID();
+function me(e, t, r) {
+  if (ye.randomUUID && !t && !e)
+    return ye.randomUUID();
   e = e || {};
-  var a = e.random || (e.rng || Pt)();
-  return a[6] = a[6] & 15 | 64, a[8] = a[8] & 63 | 128, It(a);
+  var a = e.random || (e.rng || Nt)();
+  return a[6] = a[6] & 15 | 64, a[8] = a[8] & 63 | 128, Ht(a);
 }
-const ye = globalThis.crypto, Dt = (e) => `${pe()}${pe()}`.slice(0, e), Ut = (e) => btoa(
+const we = globalThis.crypto, $t = (e) => `${me()}${me()}`.slice(0, e), Wt = (e) => btoa(
   [...new Uint8Array(e)].map((t) => String.fromCharCode(t)).join("")
 );
-async function Ht(e) {
-  if (!ye.subtle)
+async function Jt(e) {
+  if (!we.subtle)
     throw new Error(
       "crypto.subtle is available only in secure contexts (HTTPS)."
     );
-  const t = new TextEncoder().encode(e), r = await ye.subtle.digest("SHA-256", t);
-  return Ut(r).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  const t = new TextEncoder().encode(e), r = await we.subtle.digest("SHA-256", t);
+  return Wt(r).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-async function Kt(e) {
-  const r = Dt(43), a = await Ht(r);
+async function xt(e) {
+  const r = $t(43), a = await Jt(r);
   return {
     code_verifier: r,
     code_challenge: a
   };
 }
-function Oe(e, t) {
+function He(e, t) {
   window.dispatchEvent(new StorageEvent("storage", { key: e, newValue: t }));
 }
-const fe = (e, t) => {
+const Ee = (e, t) => {
   const r = JSON.stringify(
     typeof t == "function" ? t() : t
   );
-  window.localStorage.setItem(e, r), Oe(e, r);
-}, Nt = (e) => {
-  window.localStorage.removeItem(e), Oe(e, null);
-}, me = (e) => window.localStorage.getItem(e), $t = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
-function W({
+  window.localStorage.setItem(e, r), He(e, r);
+}, jt = (e) => {
+  window.localStorage.removeItem(e), He(e, null);
+}, Se = (e) => window.localStorage.getItem(e), Mt = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
+function J({
   key: e,
   initialValue: t
 }) {
-  const r = () => me(e), a = U.useSyncExternalStore(
-    $t,
+  const r = () => Se(e), a = U.useSyncExternalStore(
+    Mt,
     r
   ), n = U.useCallback(
     (i) => {
       try {
         const c = typeof i == "function" ? i(JSON.parse(a)) : i;
-        c == null ? Nt(e) : fe(e, c);
+        c == null ? jt(e) : Ee(e, c);
       } catch (c) {
         console.warn(c);
       }
@@ -815,52 +818,52 @@ function W({
   }, [n]);
   return U.useEffect(() => {
     try {
-      me(e) === null && typeof t < "u" && fe(e, t);
+      Se(e) === null && typeof t < "u" && Ee(e, t);
     } catch (i) {
       console.warn(i);
     }
   }, [e, t]), [a ? JSON.parse(a) : null, n, s, o];
 }
-var l = [];
-for (var te = 0; te < 256; ++te)
-  l.push((te + 256).toString(16).slice(1));
-function Lt(e, t = 0) {
-  return (l[e[t + 0]] + l[e[t + 1]] + l[e[t + 2]] + l[e[t + 3]] + "-" + l[e[t + 4]] + l[e[t + 5]] + "-" + l[e[t + 6]] + l[e[t + 7]] + "-" + l[e[t + 8]] + l[e[t + 9]] + "-" + l[e[t + 10]] + l[e[t + 11]] + l[e[t + 12]] + l[e[t + 13]] + l[e[t + 14]] + l[e[t + 15]]).toLowerCase();
+var h = [];
+for (var ae = 0; ae < 256; ++ae)
+  h.push((ae + 256).toString(16).slice(1));
+function Vt(e, t = 0) {
+  return (h[e[t + 0]] + h[e[t + 1]] + h[e[t + 2]] + h[e[t + 3]] + "-" + h[e[t + 4]] + h[e[t + 5]] + "-" + h[e[t + 6]] + h[e[t + 7]] + "-" + h[e[t + 8]] + h[e[t + 9]] + "-" + h[e[t + 10]] + h[e[t + 11]] + h[e[t + 12]] + h[e[t + 13]] + h[e[t + 14]] + h[e[t + 15]]).toLowerCase();
 }
-var J, Wt = new Uint8Array(16);
-function Jt() {
-  if (!J && (J = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !J))
+var x, Yt = new Uint8Array(16);
+function Bt() {
+  if (!x && (x = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !x))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return J(Wt);
+  return x(Yt);
 }
-var xt = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
-const we = {
-  randomUUID: xt
+var Ft = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
+const ge = {
+  randomUUID: Ft
 };
-function jt(e, t, r) {
-  if (we.randomUUID && !t && !e)
-    return we.randomUUID();
+function Gt(e, t, r) {
+  if (ge.randomUUID && !t && !e)
+    return ge.randomUUID();
   e = e || {};
-  var a = e.random || (e.rng || Jt)();
-  return a[6] = a[6] & 15 | 64, a[8] = a[8] & 63 | 128, Lt(a);
+  var a = e.random || (e.rng || Bt)();
+  return a[6] = a[6] & 15 | 64, a[8] = a[8] & 63 | 128, Vt(a);
 }
-const re = "Oops! It looks like your session has expired. For your security, please log in again to continue.", Mt = "Your session has been successfully terminated.", Ee = "Login failed. Please try again.", v = "Error getting access token, please re-authenticate.", Vt = "You forgot to wrap your component in <AuthProvider>.", Se = {
+const ne = "Oops! It looks like your session has expired. For your security, please log in again to continue.", qt = "Your session has been successfully terminated.", Ae = "Login failed. Please try again.", se = "Error getting access token, please re-authenticate.", zt = "You forgot to wrap your component in <AuthProvider>.", Te = {
   dev: "https://auth.gizmette.local.com:3003",
   prod: "https://mylogin.gizmette.com"
-}, x = "@@auth@@", Yt = process.env.NODE_ENV === "production", Bt = !Yt, z = async ({
+}, j = "@@auth@@", Xt = process.env.NODE_ENV === "production", Qt = !Xt, X = async ({
   type: e,
   clientId: t,
   params: r = {}
 }) => {
   try {
     const a = await fetch(
-      Bt ? `${Se.dev}/${e}` : `${Se.prod}/${e}`,
+      Qt ? `${Te.dev}/${e}` : `${Te.prod}/${e}`,
       {
         credentials: "include",
         method: "POST",
         headers: {
           "Content-Type": "application/json",
-          [Ye.CLIENT_ID]: `${t}`
+          [Xe.CLIENT_ID]: `${t}`
         },
         body: JSON.stringify(r)
       }
@@ -876,7 +879,7 @@ const re = "Oops! It looks like your session has expired. For your security, ple
   } catch (a) {
     return console.error(a), { status: 500, data: [] };
   }
-}, ae = async ({
+}, oe = async ({
   idToken: e,
   accessToken: t,
   refreshToken: r,
@@ -884,8 +887,8 @@ const re = "Oops! It looks like your session has expired. For your security, ple
 }) => {
   try {
     return {
-      status: (await z({
-        type: F.LOGOUT,
+      status: (await X({
+        type: G.LOGOUT,
         clientId: a,
         params: {
           idToken: e,
@@ -899,7 +902,7 @@ const re = "Oops! It looks like your session has expired. For your security, ple
       status: !1
     };
   }
-}, ge = async ({
+}, ke = async ({
   username: e,
   password: t,
   clientId: r,
@@ -910,11 +913,11 @@ const re = "Oops! It looks like your session has expired. For your security, ple
   code_verifier: i
 }) => {
   try {
-    const c = await z({
-      type: F.AUTHENTICATE,
+    const c = await X({
+      type: G.AUTHENTICATE,
       clientId: r,
       params: {
-        type: n || B.ID_AND_ACCESS_TOKEN,
+        type: n || F.ID_AND_ACCESS_TOKEN,
         username: e,
         password: t,
         sessionExpiration: s,
@@ -922,12 +925,12 @@ const re = "Oops! It looks like your session has expired. For your security, ple
         code: o,
         code_verifier: i
       }
-    }), u = await H(c.data.idToken);
-    return u && u.payload[f.USER_ID_KEY] !== "" && u.payload[f.NONCE_KEY] === a ? {
+    }), d = await H(c.data.idToken);
+    return d && d.payload[m.USER_ID_KEY] !== "" && d.payload[m.NONCE_KEY] === a ? {
       idToken: c.data.idToken,
       accessToken: c.data.accessToken,
       refreshToken: c.data.refreshToken,
-      userId: u.payload[f.USER_ID_KEY],
+      userId: d.payload[m.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -937,17 +940,17 @@ const re = "Oops! It looks like your session has expired. For your security, ple
       status: !1
     };
   }
-}, Ft = async ({
+}, Zt = async ({
   nonce: e,
   clientId: t,
   code_challenge: r
 }) => {
   try {
-    const a = await z({
-      type: F.CODE,
+    const a = await X({
+      type: G.CODE,
       clientId: t,
       params: {
-        type: B.CODE,
+        type: F.CODE,
         nonce: e,
         code_challenge: r
       }
@@ -963,7 +966,7 @@ const re = "Oops! It looks like your session has expired. For your security, ple
       status: !1
     };
   }
-}, Gt = async ({
+}, er = async ({
   clientId: e,
   userId: t,
   nonce: r,
@@ -971,21 +974,21 @@ const re = "Oops! It looks like your session has expired. For your security, ple
   accessToken: n
 }) => {
   try {
-    const s = await z({
-      type: F.AUTHENTICATE,
+    const s = await X({
+      type: G.AUTHENTICATE,
       clientId: e,
       params: {
-        type: B.REFRESH_TOKEN,
+        type: F.REFRESH_TOKEN,
         userId: t,
         nonce: r,
         refreshToken: a,
         accessToken: n
       }
     }), o = await H(s.data.accessToken);
-    return o && o.payload[f.USER_ID_KEY] !== "" && o.payload[f.NONCE_KEY] === r ? {
+    return o && o.payload[m.USER_ID_KEY] !== "" && o.payload[m.NONCE_KEY] === r ? {
       accessToken: s.data.accessToken,
       refreshToken: s.data.refreshToken,
-      userId: o.payload[f.USER_ID_KEY],
+      userId: o.payload[m.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -995,176 +998,239 @@ const re = "Oops! It looks like your session has expired. For your security, ple
       status: !1
     };
   }
-}, j = () => {
-  throw new Error(Vt);
-}, De = Je({
+};
+class tr {
+  constructor(t = null, r = null) {
+    N(this, "refreshTokenPromise", null);
+    N(this, "accessToken");
+    N(this, "refreshToken");
+    this.accessToken = t || "", this.refreshToken = r || "";
+  }
+  async refreshtoken({
+    clientId: t,
+    userId: r,
+    nonce: a
+  }) {
+    this.refreshTokenPromise || (this.refreshTokenPromise = this._refreshToken({
+      clientId: t,
+      userId: r,
+      nonce: a
+    }));
+    try {
+      return await this.refreshTokenPromise;
+    } finally {
+      this.refreshTokenPromise = null;
+    }
+  }
+  async _refreshToken({
+    clientId: t,
+    userId: r,
+    nonce: a
+  }) {
+    const n = await H(this.refreshToken);
+    if (n && n.payload[m.USER_ID_KEY] !== "") {
+      const s = await er({
+        clientId: t,
+        userId: r,
+        nonce: a,
+        refreshToken: this.refreshToken,
+        accessToken: this.accessToken
+      });
+      return s.status ? (this.accessToken = s.accessToken, this.refreshToken = s.refreshToken, {
+        status: "success",
+        newAccessToken: s.accessToken,
+        newRefreshToken: s.refreshToken
+      }) : {
+        status: "failure"
+      };
+    } else
+      return {
+        status: "failure"
+      };
+  }
+}
+const M = () => {
+  throw new Error(zt);
+}, Ke = Ye({
   isAuthenticated: !1,
   isLoading: !1,
-  login: j,
-  logout: j,
-  getAccessToken: j,
-  getIdToken: j,
+  login: M,
+  logout: M,
+  getAccessToken: M,
+  getIdToken: M,
   logoutReason: ""
-}), Zt = ({
+}), ir = ({
   children: e,
   sessionExpiration: t,
   clientId: r
 }) => {
-  const [a, n, , s] = W({
-    key: `${x}::${r}::@@user@@`
-  }), [o, i, , c] = W({
-    key: `${x}::${r}::@@access@@`
-  }), [u, w, , y] = W(
+  const a = Be(!1), [n, s, , o] = J({
+    key: `${j}::${r}::@@user@@`
+  }), [i, c, , d] = J({
+    key: `${j}::${r}::@@access@@`
+  }), [y, p, , A] = J(
     {
-      key: `${x}::${r}::@@refresh@@`
+      key: `${j}::${r}::@@refresh@@`
     }
-  ), [_, S, , E] = W({
-    key: `${x}::${r}::@@nonce@@`
-  }), [R, K] = xe({
+  ), [E, S, , K] = J({
+    key: `${j}::${r}::@@nonce@@`
+  }), Ne = new tr(i, y), [P, T] = Fe({
     isLoading: !0,
     isAuthenticated: !1,
     user: void 0,
     logoutReason: ""
-  }), g = je(
-    (p) => {
-      K({
-        isLoading: !1,
+  }), k = Ge(
+    (u) => {
+      console.warn(u), T({
+        isLoading: !0,
         isAuthenticated: !1,
         user: void 0,
-        logoutReason: p || re
-      }), s(), c(), y(), E();
+        logoutReason: u || ne
+      }), o(), d(), A(), K();
     },
-    [s, c, E, y]
+    [o, d, K, A]
   );
-  Me(() => {
-    R.isLoading && a !== null && (async () => {
-      try {
-        const p = await H(a);
-        p && p.payload[f.USER_ID_KEY] !== "" ? K({
-          isLoading: !1,
-          isAuthenticated: !0,
-          user: {
-            userId: p.payload[f.USER_ID_KEY],
-            username: p.payload[f.USERNAME_KEY]
-          },
-          logoutReason: ""
-        }) : (g(re), await ae({
-          idToken: a,
-          accessToken: o,
-          refreshToken: u,
-          clientId: r
-        }));
-      } catch {
-        g(re), await ae({
-          idToken: a,
-          accessToken: o,
-          refreshToken: u,
-          clientId: r
-        });
-      }
-    })();
+  qe(() => {
+    if (!a.current)
+      return P.isLoading && n !== null ? (async () => {
+        try {
+          const u = await H(n);
+          u && u.payload[m.USER_ID_KEY] !== "" ? T({
+            isLoading: !1,
+            isAuthenticated: !0,
+            user: {
+              userId: u.payload[m.USER_ID_KEY],
+              username: u.payload[m.USERNAME_KEY]
+            },
+            logoutReason: ""
+          }) : (k(ne), await oe({
+            idToken: n,
+            accessToken: i,
+            refreshToken: y,
+            clientId: r
+          }), T((w) => ({
+            ...w,
+            isLoading: !1
+          })));
+        } catch {
+          k(ne), await oe({
+            idToken: n,
+            accessToken: i,
+            refreshToken: y,
+            clientId: r
+          }), T((w) => ({
+            ...w,
+            isLoading: !1
+          }));
+        }
+      })() : T((u) => ({
+        ...u,
+        isLoading: !1
+      })), () => {
+        a.current = !0;
+      };
   }, [
-    R.isLoading,
-    o,
-    a,
-    u,
+    P,
+    i,
+    n,
+    y,
     r,
-    g
+    k
   ]);
-  const Ue = async (p, P, I) => {
-    const m = jt();
-    if (S(m), I === B.CODE) {
-      const { code_verifier: $e, code_challenge: Le } = await Kt(), se = await Ft({
-        nonce: m,
+  const Le = async (u, w, b) => {
+    const I = Gt();
+    if (S(I), T((Q) => ({
+      ...Q,
+      isLoading: !0
+    })), b === F.CODE) {
+      const { code_verifier: Q, code_challenge: xe } = await xt(), ue = await Zt({
+        nonce: I,
         clientId: r,
-        code_challenge: Le
+        code_challenge: xe
       });
-      if (se.status) {
-        const D = await ge({
-          username: p,
-          password: P,
+      if (ue.status) {
+        const D = await ke({
+          username: u,
+          password: w,
           clientId: r,
           sessionExpiration: t,
-          nonce: m,
-          type: I,
-          code: se.code,
-          code_verifier: $e
+          nonce: I,
+          type: b,
+          code: ue.code,
+          code_verifier: Q
         });
-        return D.status ? (n(D.idToken), i(D.accessToken), w(D.refreshToken), K({
+        return D.status ? (s(D.idToken), c(D.accessToken), p(D.refreshToken), T({
           isLoading: !1,
           isAuthenticated: !0,
           user: {
             userId: D.userId,
-            username: p
+            username: u
           },
           logoutReason: ""
-        }), !0) : (g(Ee), !1);
+        }), !0) : (k(Ae), !1);
       }
       return !1;
     }
-    const O = await ge({
-      username: p,
-      password: P,
+    const O = await ke({
+      username: u,
+      password: w,
       clientId: r,
       sessionExpiration: t,
-      nonce: m,
-      type: I
+      nonce: I,
+      type: b
     });
-    return O.status ? (n(O.idToken), i(O.accessToken), w(O.refreshToken), K({
+    return O.status ? (s(O.idToken), c(O.accessToken), p(O.refreshToken), T({
       isLoading: !1,
       isAuthenticated: !0,
       user: {
         userId: O.userId,
-        username: p
+        username: u
       }
-    }), !0) : (g(Ee), !1);
-  }, He = async () => {
-    g(Mt), await ae({
-      idToken: a,
-      accessToken: o,
-      refreshToken: u,
+    }), !0) : (k(Ae), !1);
+  }, $e = async (u) => {
+    u == null || u.preventDefault(), k(qt), await oe({
+      idToken: n,
+      accessToken: i,
+      refreshToken: y,
       clientId: r
-    });
-  }, Ke = async () => {
-    const { isAuthenticated: p, user: P } = R;
+    }), T((w) => ({
+      ...w,
+      isLoading: !1
+    }));
+  }, We = async () => {
+    const { isAuthenticated: u, user: w } = P;
     try {
-      if (p && P && P.userId) {
-        if (o) {
-          const m = await H(o);
-          if (m && m.payload[f.USER_ID_KEY] !== "")
-            return o;
-        }
-        const I = await H(u);
-        if (I && I.payload[f.USER_ID_KEY] !== "") {
-          const m = await Gt({
-            clientId: r,
-            userId: P.userId,
-            nonce: _,
-            refreshToken: u,
-            accessToken: o
-          });
-          return m.status ? (i(m.accessToken), w(m.refreshToken), m.accessToken) : (g(v), console.error(v), "");
+      if (u && w && w.userId) {
+        if (i) {
+          const I = await H(i);
+          if (I && I.payload[m.USER_ID_KEY] !== "")
+            return i;
         }
-        return g(v), console.error(v), "";
+        const b = await Ne.refreshtoken({
+          clientId: r,
+          userId: w.userId,
+          nonce: E
+        });
+        return b.status ? (c(b.newAccessToken), p(b.newRefreshToken), b.newAccessToken) : (k(se), "");
       }
-      return g(v), console.error(v), "";
+      return k(se), "";
     } catch {
-      return g(v), console.error(v), "";
+      return k(se), "";
     }
-  }, Ne = () => {
-    if (R.isAuthenticated && a)
-      return a;
+  }, Je = () => {
+    if (P.isAuthenticated && n)
+      return n;
   };
-  return /* @__PURE__ */ We(
-    De.Provider,
+  return /* @__PURE__ */ Ve(
+    Ke.Provider,
     {
-      value: { ...R, login: Ue, logout: He, getAccessToken: Ke, getIdToken: Ne },
+      value: { ...P, login: Le, logout: $e, getAccessToken: We, getIdToken: Je },
       children: e
     }
   );
-}, er = (e = De) => Ve(e);
+}, cr = (e = Ke) => ze(e);
 export {
-  B as AUTH_TYPES,
-  Zt as AuthProvider,
-  er as useAuth
+  F as AUTH_TYPES,
+  ir as AuthProvider,
+  cr as useAuth
 };