@versini/auth-provider 5.0.5 → 5.1.0

package/dist/index.js

@@ -1,51 +1,51 @@
-var Me = Object.defineProperty;
-var Ve = (e, t, r) => t in e ? Me(e, t, { enumerable: !0, configurable: !0, writable: !0, value: r }) : e[t] = r;
-var L = (e, t, r) => (Ve(e, typeof t != "symbol" ? t + "" : t, r), r);
-import { jsx as Ye } from "react/jsx-runtime";
-import * as U from "react";
-import { createContext as Be, useRef as Fe, useState as Ge, useCallback as de, useEffect as qe, useContext as ze } from "react";
+var St = Object.defineProperty;
+var wt = (e, t, r) => t in e ? St(e, t, { enumerable: !0, configurable: !0, writable: !0, value: r }) : e[t] = r;
+var B = (e, t, r) => (wt(e, typeof t != "symbol" ? t + "" : t, r), r);
+import { jsx as gt } from "react/jsx-runtime";
+import * as K from "react";
+import { useContext as Ve, useState as ze, useLayoutEffect as At, useMemo as Ee, createContext as vt, useRef as _t, useCallback as Re, useEffect as Tt } from "react";
 /*!
-  @versini/auth-provider v5.0.5
+  @versini/auth-provider v5.1.0
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_CLIENT__ || (window.__VERSINI_AUTH_CLIENT__ = {
-    version: "5.0.5",
-    buildTime: "07/05/2024 02:22 PM EDT",
+    version: "5.1.0",
+    buildTime: "07/07/2024 10:25 AM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
 } catch {
 }
 /*!
-  @versini/auth-common v2.10.1
+  @versini/auth-common v2.11.0
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_COMMON__ || (window.__VERSINI_AUTH_COMMON__ = {
-    version: "2.10.1",
-    buildTime: "07/05/2024 02:22 PM EDT",
+    version: "2.11.0",
+    buildTime: "07/07/2024 10:25 AM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
 } catch {
 }
-const q = {
+const ie = {
   ID_TOKEN: "id_token",
   ACCESS_TOKEN: "token",
   ID_AND_ACCESS_TOKEN: "id_token token",
   CODE: "code",
   REFRESH_TOKEN: "refresh_token"
-}, Xe = {
+}, bt = {
   CLIENT_ID: "X-Auth-ClientId"
-}, y = {
+}, k = {
   ALG: "RS256",
   USER_ID_KEY: "sub",
   TOKEN_ID_KEY: "__raw",
   NONCE_KEY: "_nonce",
   USERNAME_KEY: "username",
   ISSUER: "gizmette.com"
-}, Qe = `-----BEGIN PUBLIC KEY-----
+}, kt = `-----BEGIN PUBLIC KEY-----
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6i3Jd9fY/3COqCw/m7
 w5PKyTYLGAI2I6SIIdpe6i6DOCbEkmDz7LdVsBqwNtVi8gvWYIj+8ol6rU3qu1v5
 i1Jd45GSK4kzkVdgCmQZbM5ak0KI99q5wsrAIzUd+LRJ2HRvWtr5IYdsIiXaQjle
@@ -53,33 +53,33 @@ aMwPFOIcJH+rKfFgNcHLcaS5syp7zU1ANwZ+trgR+DifBr8TLVkBynmNeTyhDm2+
 l0haqjMk0UoNPPE8iYBWUHQJJE1Dqstj65d6Eh5g64Pao25y4cmYJbKjiblIGEkE
 sjqybA9mARAqh9k/eiIopecWSiffNQTwVQVd2I9ZH3BalhEXHlqFgrjz51kFqg81
 awIDAQAB
------END PUBLIC KEY-----`, z = {
+-----END PUBLIC KEY-----`, ce = {
   AUTHENTICATE: "authenticate",
   CODE: "code",
   LOGOUT: "logout"
-}, X = crypto, _e = (e) => e instanceof CryptoKey, $ = new TextEncoder(), Q = new TextDecoder();
-function Ze(...e) {
+}, ue = crypto, Be = (e) => e instanceof CryptoKey, G = new TextEncoder(), le = new TextDecoder();
+function Ct(...e) {
   const t = e.reduce((n, { length: s }) => n + s, 0), r = new Uint8Array(t);
-  let a = 0;
+  let o = 0;
   for (const n of e)
-    r.set(n, a), a += n.length;
+    r.set(n, o), o += n.length;
   return r;
 }
-const et = (e) => {
+const Rt = (e) => {
   const t = atob(e), r = new Uint8Array(t.length);
-  for (let a = 0; a < t.length; a++)
-    r[a] = t.charCodeAt(a);
+  for (let o = 0; o < t.length; o++)
+    r[o] = t.charCodeAt(o);
   return r;
-}, B = (e) => {
+}, ne = (e) => {
   let t = e;
-  t instanceof Uint8Array && (t = Q.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
+  t instanceof Uint8Array && (t = le.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
   try {
-    return et(t);
+    return Rt(t);
   } catch {
     throw new TypeError("The input to be decoded is not correctly encoded.");
   }
 };
-class C extends Error {
+class H extends Error {
   static get code() {
     return "ERR_JOSE_GENERIC";
   }
@@ -88,23 +88,23 @@ class C extends Error {
     super(t), this.code = "ERR_JOSE_GENERIC", this.name = this.constructor.name, (r = Error.captureStackTrace) == null || r.call(Error, this, this.constructor);
   }
 }
-class g extends C {
+class O extends H {
   static get code() {
     return "ERR_JWT_CLAIM_VALIDATION_FAILED";
   }
-  constructor(t, r, a = "unspecified", n = "unspecified") {
-    super(t), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = a, this.reason = n, this.payload = r;
+  constructor(t, r, o = "unspecified", n = "unspecified") {
+    super(t), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = o, this.reason = n, this.payload = r;
   }
 }
-class le extends C {
+class Oe extends H {
   static get code() {
     return "ERR_JWT_EXPIRED";
   }
-  constructor(t, r, a = "unspecified", n = "unspecified") {
-    super(t), this.code = "ERR_JWT_EXPIRED", this.claim = a, this.reason = n, this.payload = r;
+  constructor(t, r, o = "unspecified", n = "unspecified") {
+    super(t), this.code = "ERR_JWT_EXPIRED", this.claim = o, this.reason = n, this.payload = r;
   }
 }
-class tt extends C {
+class Ot extends H {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_ALG_NOT_ALLOWED";
   }
@@ -112,14 +112,14 @@ class tt extends C {
     return "ERR_JOSE_ALG_NOT_ALLOWED";
   }
 }
-let _ = class extends C {
+let x = class extends H {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_NOT_SUPPORTED";
   }
   static get code() {
     return "ERR_JOSE_NOT_SUPPORTED";
   }
-}, f = class extends C {
+}, _ = class extends H {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_INVALID";
   }
@@ -127,7 +127,7 @@ let _ = class extends C {
     return "ERR_JWS_INVALID";
   }
 };
-class ve extends C {
+class Ge extends H {
   constructor() {
     super(...arguments), this.code = "ERR_JWT_INVALID";
   }
@@ -135,7 +135,7 @@ class ve extends C {
     return "ERR_JWT_INVALID";
   }
 }
-class rt extends C {
+class Pt extends H {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED", this.message = "signature verification failed";
   }
@@ -143,16 +143,16 @@ class rt extends C {
     return "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
   }
 }
-function T(e, t = "algorithm.name") {
+function $(e, t = "algorithm.name") {
   return new TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`);
 }
-function W(e, t) {
+function q(e, t) {
   return e.name === t;
 }
-function te(e) {
+function Se(e) {
   return parseInt(e.name.slice(4), 10);
 }
-function at(e) {
+function It(e) {
   switch (e) {
     case "ES256":
       return "P-256";
@@ -164,89 +164,89 @@ function at(e) {
       throw new Error("unreachable");
   }
 }
-function nt(e, t) {
+function Dt(e, t) {
   if (t.length && !t.some((r) => e.usages.includes(r))) {
     let r = "CryptoKey does not support this operation, its usages must include ";
     if (t.length > 2) {
-      const a = t.pop();
-      r += `one of ${t.join(", ")}, or ${a}.`;
+      const o = t.pop();
+      r += `one of ${t.join(", ")}, or ${o}.`;
     } else
       t.length === 2 ? r += `one of ${t[0]} or ${t[1]}.` : r += `${t[0]}.`;
     throw new TypeError(r);
   }
 }
-function st(e, t, ...r) {
+function Nt(e, t, ...r) {
   switch (t) {
     case "HS256":
     case "HS384":
     case "HS512": {
-      if (!W(e.algorithm, "HMAC"))
-        throw T("HMAC");
-      const a = parseInt(t.slice(2), 10);
-      if (te(e.algorithm.hash) !== a)
-        throw T(`SHA-${a}`, "algorithm.hash");
+      if (!q(e.algorithm, "HMAC"))
+        throw $("HMAC");
+      const o = parseInt(t.slice(2), 10);
+      if (Se(e.algorithm.hash) !== o)
+        throw $(`SHA-${o}`, "algorithm.hash");
       break;
     }
     case "RS256":
     case "RS384":
     case "RS512": {
-      if (!W(e.algorithm, "RSASSA-PKCS1-v1_5"))
-        throw T("RSASSA-PKCS1-v1_5");
-      const a = parseInt(t.slice(2), 10);
-      if (te(e.algorithm.hash) !== a)
-        throw T(`SHA-${a}`, "algorithm.hash");
+      if (!q(e.algorithm, "RSASSA-PKCS1-v1_5"))
+        throw $("RSASSA-PKCS1-v1_5");
+      const o = parseInt(t.slice(2), 10);
+      if (Se(e.algorithm.hash) !== o)
+        throw $(`SHA-${o}`, "algorithm.hash");
       break;
     }
     case "PS256":
     case "PS384":
     case "PS512": {
-      if (!W(e.algorithm, "RSA-PSS"))
-        throw T("RSA-PSS");
-      const a = parseInt(t.slice(2), 10);
-      if (te(e.algorithm.hash) !== a)
-        throw T(`SHA-${a}`, "algorithm.hash");
+      if (!q(e.algorithm, "RSA-PSS"))
+        throw $("RSA-PSS");
+      const o = parseInt(t.slice(2), 10);
+      if (Se(e.algorithm.hash) !== o)
+        throw $(`SHA-${o}`, "algorithm.hash");
       break;
     }
     case "EdDSA": {
       if (e.algorithm.name !== "Ed25519" && e.algorithm.name !== "Ed448")
-        throw T("Ed25519 or Ed448");
+        throw $("Ed25519 or Ed448");
       break;
     }
     case "ES256":
     case "ES384":
     case "ES512": {
-      if (!W(e.algorithm, "ECDSA"))
-        throw T("ECDSA");
-      const a = at(t);
-      if (e.algorithm.namedCurve !== a)
-        throw T(a, "algorithm.namedCurve");
+      if (!q(e.algorithm, "ECDSA"))
+        throw $("ECDSA");
+      const o = It(t);
+      if (e.algorithm.namedCurve !== o)
+        throw $(o, "algorithm.namedCurve");
       break;
     }
     default:
       throw new TypeError("CryptoKey does not support this operation");
   }
-  nt(e, r);
+  Dt(e, r);
 }
-function Re(e, t, ...r) {
-  var a;
+function qe(e, t, ...r) {
+  var o;
   if (r.length > 2) {
     const n = r.pop();
     e += `one of type ${r.join(", ")}, or ${n}.`;
   } else
     r.length === 2 ? e += `one of type ${r[0]} or ${r[1]}.` : e += `of type ${r[0]}.`;
-  return t == null ? e += ` Received ${t}` : typeof t == "function" && t.name ? e += ` Received function ${t.name}` : typeof t == "object" && t != null && (a = t.constructor) != null && a.name && (e += ` Received an instance of ${t.constructor.name}`), e;
+  return t == null ? e += ` Received ${t}` : typeof t == "function" && t.name ? e += ` Received function ${t.name}` : typeof t == "object" && t != null && (o = t.constructor) != null && o.name && (e += ` Received an instance of ${t.constructor.name}`), e;
 }
-const he = (e, ...t) => Re("Key must be ", e, ...t);
-function Ie(e, t, ...r) {
-  return Re(`Key for the ${e} algorithm must be `, t, ...r);
+const Pe = (e, ...t) => qe("Key must be ", e, ...t);
+function Xe(e, t, ...r) {
+  return qe(`Key for the ${e} algorithm must be `, t, ...r);
 }
-const Ce = (e) => _e(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", G = ["CryptoKey"], ot = (...e) => {
+const Qe = (e) => Be(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", se = ["CryptoKey"], $t = (...e) => {
   const t = e.filter(Boolean);
   if (t.length === 0 || t.length === 1)
     return !0;
   let r;
-  for (const a of t) {
-    const n = Object.keys(a);
+  for (const o of t) {
+    const n = Object.keys(o);
     if (!r || r.size === 0) {
       r = new Set(n);
       continue;
@@ -259,11 +259,11 @@ const Ce = (e) => _e(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) ===
   }
   return !0;
 };
-function it(e) {
+function Ut(e) {
   return typeof e == "object" && e !== null;
 }
-function ie(e) {
-  if (!it(e) || Object.prototype.toString.call(e) !== "[object Object]")
+function be(e) {
+  if (!Ut(e) || Object.prototype.toString.call(e) !== "[object Object]")
     return !1;
   if (Object.getPrototypeOf(e) === null)
     return !0;
@@ -272,14 +272,14 @@ function ie(e) {
     t = Object.getPrototypeOf(t);
   return Object.getPrototypeOf(e) === t;
 }
-const ct = (e, t) => {
+const Lt = (e, t) => {
   if (e.startsWith("RS") || e.startsWith("PS")) {
     const { modulusLength: r } = t.algorithm;
     if (typeof r != "number" || r < 2048)
       throw new TypeError(`${e} requires key modulusLength to be 2048 bits or larger`);
   }
 };
-function ut(e) {
+function xt(e) {
   let t, r;
   switch (e.kty) {
     case "RSA": {
@@ -304,7 +304,7 @@ function ut(e) {
           }, r = e.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
           break;
         default:
-          throw new _('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new x('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
@@ -326,7 +326,7 @@ function ut(e) {
           t = { name: "ECDH", namedCurve: e.crv }, r = e.d ? ["deriveBits"] : [];
           break;
         default:
-          throw new _('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new x('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
@@ -342,83 +342,83 @@ function ut(e) {
           t = { name: e.crv }, r = e.d ? ["deriveBits"] : [];
           break;
         default:
-          throw new _('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new x('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
     default:
-      throw new _('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
+      throw new x('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
   }
   return { algorithm: t, keyUsages: r };
 }
-const dt = async (e) => {
+const Ht = async (e) => {
   if (!e.alg)
     throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
-  const { algorithm: t, keyUsages: r } = ut(e), a = [
+  const { algorithm: t, keyUsages: r } = xt(e), o = [
     t,
     e.ext ?? !1,
     e.key_ops ?? r
   ], n = { ...e };
-  return delete n.alg, delete n.use, X.subtle.importKey("jwk", n, ...a);
-}, Pe = (e) => B(e);
-let re, ae;
-const Oe = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", De = async (e, t, r, a) => {
+  return delete n.alg, delete n.use, ue.subtle.importKey("jwk", n, ...o);
+}, Ze = (e) => ne(e);
+let we, ge;
+const et = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", tt = async (e, t, r, o) => {
   let n = e.get(t);
-  if (n != null && n[a])
-    return n[a];
-  const s = await dt({ ...r, alg: a });
-  return n ? n[a] = s : e.set(t, { [a]: s }), s;
-}, lt = (e, t) => {
-  if (Oe(e)) {
+  if (n != null && n[o])
+    return n[o];
+  const s = await Ht({ ...r, alg: o });
+  return n ? n[o] = s : e.set(t, { [o]: s }), s;
+}, Mt = (e, t) => {
+  if (et(e)) {
     let r = e.export({ format: "jwk" });
-    return delete r.d, delete r.dp, delete r.dq, delete r.p, delete r.q, delete r.qi, r.k ? Pe(r.k) : (ae || (ae = /* @__PURE__ */ new WeakMap()), De(ae, e, r, t));
+    return delete r.d, delete r.dp, delete r.dq, delete r.p, delete r.q, delete r.qi, r.k ? Ze(r.k) : (ge || (ge = /* @__PURE__ */ new WeakMap()), tt(ge, e, r, t));
   }
   return e;
-}, ht = (e, t) => {
-  if (Oe(e)) {
+}, Kt = (e, t) => {
+  if (et(e)) {
     let r = e.export({ format: "jwk" });
-    return r.k ? Pe(r.k) : (re || (re = /* @__PURE__ */ new WeakMap()), De(re, e, r, t));
+    return r.k ? Ze(r.k) : (we || (we = /* @__PURE__ */ new WeakMap()), tt(we, e, r, t));
   }
   return e;
-}, ft = { normalizePublicKey: lt, normalizePrivateKey: ht }, b = (e, t, r = 0) => {
+}, jt = { normalizePublicKey: Mt, normalizePrivateKey: Kt }, L = (e, t, r = 0) => {
   r === 0 && (t.unshift(t.length), t.unshift(6));
-  const a = e.indexOf(t[0], r);
-  if (a === -1)
+  const o = e.indexOf(t[0], r);
+  if (o === -1)
     return !1;
-  const n = e.subarray(a, a + t.length);
-  return n.length !== t.length ? !1 : n.every((s, o) => s === t[o]) || b(e, t, a + 1);
-}, fe = (e) => {
+  const n = e.subarray(o, o + t.length);
+  return n.length !== t.length ? !1 : n.every((s, a) => s === t[a]) || L(e, t, o + 1);
+}, Ie = (e) => {
   switch (!0) {
-    case b(e, [42, 134, 72, 206, 61, 3, 1, 7]):
+    case L(e, [42, 134, 72, 206, 61, 3, 1, 7]):
       return "P-256";
-    case b(e, [43, 129, 4, 0, 34]):
+    case L(e, [43, 129, 4, 0, 34]):
       return "P-384";
-    case b(e, [43, 129, 4, 0, 35]):
+    case L(e, [43, 129, 4, 0, 35]):
       return "P-521";
-    case b(e, [43, 101, 110]):
+    case L(e, [43, 101, 110]):
       return "X25519";
-    case b(e, [43, 101, 111]):
+    case L(e, [43, 101, 111]):
       return "X448";
-    case b(e, [43, 101, 112]):
+    case L(e, [43, 101, 112]):
       return "Ed25519";
-    case b(e, [43, 101, 113]):
+    case L(e, [43, 101, 113]):
       return "Ed448";
     default:
-      throw new _("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
+      throw new x("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
   }
-}, pt = async (e, t, r, a, n) => {
-  let s, o;
-  const i = new Uint8Array(atob(r.replace(e, "")).split("").map((c) => c.charCodeAt(0)));
-  switch (a) {
+}, Wt = async (e, t, r, o, n) => {
+  let s, a;
+  const c = new Uint8Array(atob(r.replace(e, "")).split("").map((l) => l.charCodeAt(0)));
+  switch (o) {
     case "PS256":
     case "PS384":
     case "PS512":
-      s = { name: "RSA-PSS", hash: `SHA-${a.slice(-3)}` }, o = ["verify"];
+      s = { name: "RSA-PSS", hash: `SHA-${o.slice(-3)}` }, a = ["verify"];
       break;
     case "RS256":
     case "RS384":
     case "RS512":
-      s = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${a.slice(-3)}` }, o = ["verify"];
+      s = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${o.slice(-3)}` }, a = ["verify"];
       break;
     case "RSA-OAEP":
     case "RSA-OAEP-256":
@@ -426,84 +426,84 @@ const Oe = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject",
     case "RSA-OAEP-512":
       s = {
         name: "RSA-OAEP",
-        hash: `SHA-${parseInt(a.slice(-3), 10) || 1}`
-      }, o = ["encrypt", "wrapKey"];
+        hash: `SHA-${parseInt(o.slice(-3), 10) || 1}`
+      }, a = ["encrypt", "wrapKey"];
       break;
     case "ES256":
-      s = { name: "ECDSA", namedCurve: "P-256" }, o = ["verify"];
+      s = { name: "ECDSA", namedCurve: "P-256" }, a = ["verify"];
       break;
     case "ES384":
-      s = { name: "ECDSA", namedCurve: "P-384" }, o = ["verify"];
+      s = { name: "ECDSA", namedCurve: "P-384" }, a = ["verify"];
       break;
     case "ES512":
-      s = { name: "ECDSA", namedCurve: "P-521" }, o = ["verify"];
+      s = { name: "ECDSA", namedCurve: "P-521" }, a = ["verify"];
       break;
     case "ECDH-ES":
     case "ECDH-ES+A128KW":
     case "ECDH-ES+A192KW":
     case "ECDH-ES+A256KW": {
-      const c = fe(i);
-      s = c.startsWith("P-") ? { name: "ECDH", namedCurve: c } : { name: c }, o = [];
+      const l = Ie(c);
+      s = l.startsWith("P-") ? { name: "ECDH", namedCurve: l } : { name: l }, a = [];
       break;
     }
     case "EdDSA":
-      s = { name: fe(i) }, o = ["verify"];
+      s = { name: Ie(c) }, a = ["verify"];
       break;
     default:
-      throw new _('Invalid or unsupported "alg" (Algorithm) value');
+      throw new x('Invalid or unsupported "alg" (Algorithm) value');
   }
-  return X.subtle.importKey(t, i, s, !1, o);
-}, yt = (e, t, r) => pt(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
-async function mt(e, t, r) {
+  return ue.subtle.importKey(t, c, s, !1, a);
+}, Jt = (e, t, r) => Wt(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
+async function Yt(e, t, r) {
   if (e.indexOf("-----BEGIN PUBLIC KEY-----") !== 0)
     throw new TypeError('"spki" must be SPKI formatted string');
-  return yt(e, t);
+  return Jt(e, t);
 }
-const F = (e) => e == null ? void 0 : e[Symbol.toStringTag], wt = (e, t) => {
+const ae = (e) => e == null ? void 0 : e[Symbol.toStringTag], Ft = (e, t) => {
   if (!(t instanceof Uint8Array)) {
-    if (!Ce(t))
-      throw new TypeError(Ie(e, t, ...G, "Uint8Array"));
+    if (!Qe(t))
+      throw new TypeError(Xe(e, t, ...se, "Uint8Array"));
     if (t.type !== "secret")
-      throw new TypeError(`${F(t)} instances for symmetric algorithms must be of type "secret"`);
+      throw new TypeError(`${ae(t)} instances for symmetric algorithms must be of type "secret"`);
   }
-}, Et = (e, t, r) => {
-  if (!Ce(t))
-    throw new TypeError(Ie(e, t, ...G));
+}, Vt = (e, t, r) => {
+  if (!Qe(t))
+    throw new TypeError(Xe(e, t, ...se));
   if (t.type === "secret")
-    throw new TypeError(`${F(t)} instances for asymmetric algorithms must not be of type "secret"`);
+    throw new TypeError(`${ae(t)} instances for asymmetric algorithms must not be of type "secret"`);
   if (t.algorithm && r === "verify" && t.type === "private")
-    throw new TypeError(`${F(t)} instances for asymmetric algorithm verifying must be of type "public"`);
+    throw new TypeError(`${ae(t)} instances for asymmetric algorithm verifying must be of type "public"`);
   if (t.algorithm && r === "encrypt" && t.type === "private")
-    throw new TypeError(`${F(t)} instances for asymmetric algorithm encryption must be of type "public"`);
-}, St = (e, t, r) => {
-  e.startsWith("HS") || e === "dir" || e.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(e) ? wt(e, t) : Et(e, t, r);
+    throw new TypeError(`${ae(t)} instances for asymmetric algorithm encryption must be of type "public"`);
+}, zt = (e, t, r) => {
+  e.startsWith("HS") || e === "dir" || e.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(e) ? Ft(e, t) : Vt(e, t, r);
 };
-function gt(e, t, r, a, n) {
-  if (n.crit !== void 0 && (a == null ? void 0 : a.crit) === void 0)
+function Bt(e, t, r, o, n) {
+  if (n.crit !== void 0 && (o == null ? void 0 : o.crit) === void 0)
     throw new e('"crit" (Critical) Header Parameter MUST be integrity protected');
-  if (!a || a.crit === void 0)
+  if (!o || o.crit === void 0)
     return /* @__PURE__ */ new Set();
-  if (!Array.isArray(a.crit) || a.crit.length === 0 || a.crit.some((o) => typeof o != "string" || o.length === 0))
+  if (!Array.isArray(o.crit) || o.crit.length === 0 || o.crit.some((a) => typeof a != "string" || a.length === 0))
     throw new e('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
   let s;
   r !== void 0 ? s = new Map([...Object.entries(r), ...t.entries()]) : s = t;
-  for (const o of a.crit) {
-    if (!s.has(o))
-      throw new _(`Extension Header Parameter "${o}" is not recognized`);
-    if (n[o] === void 0)
-      throw new e(`Extension Header Parameter "${o}" is missing`);
-    if (s.get(o) && a[o] === void 0)
-      throw new e(`Extension Header Parameter "${o}" MUST be integrity protected`);
-  }
-  return new Set(a.crit);
+  for (const a of o.crit) {
+    if (!s.has(a))
+      throw new x(`Extension Header Parameter "${a}" is not recognized`);
+    if (n[a] === void 0)
+      throw new e(`Extension Header Parameter "${a}" is missing`);
+    if (s.get(a) && o[a] === void 0)
+      throw new e(`Extension Header Parameter "${a}" MUST be integrity protected`);
+  }
+  return new Set(o.crit);
 }
-const At = (e, t) => {
+const Gt = (e, t) => {
   if (t !== void 0 && (!Array.isArray(t) || t.some((r) => typeof r != "string")))
     throw new TypeError(`"${e}" option must be an array of strings`);
   if (t)
     return new Set(t);
 };
-function Tt(e, t) {
+function qt(e, t) {
   const r = `SHA-${e.slice(-3)}`;
   switch (e) {
     case "HS256":
@@ -525,109 +525,109 @@ function Tt(e, t) {
     case "EdDSA":
       return { name: t.name };
     default:
-      throw new _(`alg ${e} is not supported either by JOSE or your javascript runtime`);
+      throw new x(`alg ${e} is not supported either by JOSE or your javascript runtime`);
   }
 }
-async function kt(e, t, r) {
-  if (t = await ft.normalizePublicKey(t, e), _e(t))
-    return st(t, e, r), t;
+async function Xt(e, t, r) {
+  if (t = await jt.normalizePublicKey(t, e), Be(t))
+    return Nt(t, e, r), t;
   if (t instanceof Uint8Array) {
     if (!e.startsWith("HS"))
-      throw new TypeError(he(t, ...G));
-    return X.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [r]);
+      throw new TypeError(Pe(t, ...se));
+    return ue.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [r]);
   }
-  throw new TypeError(he(t, ...G, "Uint8Array"));
+  throw new TypeError(Pe(t, ...se, "Uint8Array"));
 }
-const bt = async (e, t, r, a) => {
-  const n = await kt(e, t, "verify");
-  ct(e, n);
-  const s = Tt(e, n.algorithm);
+const Qt = async (e, t, r, o) => {
+  const n = await Xt(e, t, "verify");
+  Lt(e, n);
+  const s = qt(e, n.algorithm);
   try {
-    return await X.subtle.verify(s, n, r, a);
+    return await ue.subtle.verify(s, n, r, o);
   } catch {
     return !1;
   }
 };
-async function _t(e, t, r) {
-  if (!ie(e))
-    throw new f("Flattened JWS must be an object");
+async function Zt(e, t, r) {
+  if (!be(e))
+    throw new _("Flattened JWS must be an object");
   if (e.protected === void 0 && e.header === void 0)
-    throw new f('Flattened JWS must have either of the "protected" or "header" members');
+    throw new _('Flattened JWS must have either of the "protected" or "header" members');
   if (e.protected !== void 0 && typeof e.protected != "string")
-    throw new f("JWS Protected Header incorrect type");
+    throw new _("JWS Protected Header incorrect type");
   if (e.payload === void 0)
-    throw new f("JWS Payload missing");
+    throw new _("JWS Payload missing");
   if (typeof e.signature != "string")
-    throw new f("JWS Signature missing or incorrect type");
-  if (e.header !== void 0 && !ie(e.header))
-    throw new f("JWS Unprotected Header incorrect type");
-  let a = {};
+    throw new _("JWS Signature missing or incorrect type");
+  if (e.header !== void 0 && !be(e.header))
+    throw new _("JWS Unprotected Header incorrect type");
+  let o = {};
   if (e.protected)
     try {
-      const E = B(e.protected);
-      a = JSON.parse(Q.decode(E));
+      const S = ne(e.protected);
+      o = JSON.parse(le.decode(S));
     } catch {
-      throw new f("JWS Protected Header is invalid");
+      throw new _("JWS Protected Header is invalid");
     }
-  if (!ot(a, e.header))
-    throw new f("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
+  if (!$t(o, e.header))
+    throw new _("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
   const n = {
-    ...a,
+    ...o,
     ...e.header
-  }, s = gt(f, /* @__PURE__ */ new Map([["b64", !0]]), r == null ? void 0 : r.crit, a, n);
-  let o = !0;
-  if (s.has("b64") && (o = a.b64, typeof o != "boolean"))
-    throw new f('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
-  const { alg: i } = n;
-  if (typeof i != "string" || !i)
-    throw new f('JWS "alg" (Algorithm) Header Parameter missing or invalid');
-  const c = r && At("algorithms", r.algorithms);
-  if (c && !c.has(i))
-    throw new tt('"alg" (Algorithm) Header Parameter value not allowed');
-  if (o) {
+  }, s = Bt(_, /* @__PURE__ */ new Map([["b64", !0]]), r == null ? void 0 : r.crit, o, n);
+  let a = !0;
+  if (s.has("b64") && (a = o.b64, typeof a != "boolean"))
+    throw new _('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
+  const { alg: c } = n;
+  if (typeof c != "string" || !c)
+    throw new _('JWS "alg" (Algorithm) Header Parameter missing or invalid');
+  const l = r && Gt("algorithms", r.algorithms);
+  if (l && !l.has(c))
+    throw new Ot('"alg" (Algorithm) Header Parameter value not allowed');
+  if (a) {
     if (typeof e.payload != "string")
-      throw new f("JWS Payload must be a string");
+      throw new _("JWS Payload must be a string");
   } else if (typeof e.payload != "string" && !(e.payload instanceof Uint8Array))
-    throw new f("JWS Payload must be a string or an Uint8Array instance");
+    throw new _("JWS Payload must be a string or an Uint8Array instance");
   let d = !1;
-  typeof t == "function" && (t = await t(a, e), d = !0), St(i, t, "verify");
-  const m = Ze($.encode(e.protected ?? ""), $.encode("."), typeof e.payload == "string" ? $.encode(e.payload) : e.payload);
-  let p;
+  typeof t == "function" && (t = await t(o, e), d = !0), zt(c, t, "verify");
+  const p = Ct(G.encode(e.protected ?? ""), G.encode("."), typeof e.payload == "string" ? G.encode(e.payload) : e.payload);
+  let m;
   try {
-    p = B(e.signature);
+    m = ne(e.signature);
   } catch {
-    throw new f("Failed to base64url decode the signature");
+    throw new _("Failed to base64url decode the signature");
   }
-  if (!await bt(i, t, p, m))
-    throw new rt();
-  let A;
-  if (o)
+  if (!await Qt(c, t, m, p))
+    throw new Pt();
+  let T;
+  if (a)
     try {
-      A = B(e.payload);
+      T = ne(e.payload);
     } catch {
-      throw new f("Failed to base64url decode the payload");
+      throw new _("Failed to base64url decode the payload");
     }
   else
-    typeof e.payload == "string" ? A = $.encode(e.payload) : A = e.payload;
-  const w = { payload: A };
-  return e.protected !== void 0 && (w.protectedHeader = a), e.header !== void 0 && (w.unprotectedHeader = e.header), d ? { ...w, key: t } : w;
+    typeof e.payload == "string" ? T = G.encode(e.payload) : T = e.payload;
+  const E = { payload: T };
+  return e.protected !== void 0 && (E.protectedHeader = o), e.header !== void 0 && (E.unprotectedHeader = e.header), d ? { ...E, key: t } : E;
 }
-async function vt(e, t, r) {
-  if (e instanceof Uint8Array && (e = Q.decode(e)), typeof e != "string")
-    throw new f("Compact JWS must be a string or Uint8Array");
-  const { 0: a, 1: n, 2: s, length: o } = e.split(".");
-  if (o !== 3)
-    throw new f("Invalid Compact JWS");
-  const i = await _t({ payload: n, protected: a, signature: s }, t, r), c = { payload: i.payload, protectedHeader: i.protectedHeader };
-  return typeof t == "function" ? { ...c, key: i.key } : c;
+async function er(e, t, r) {
+  if (e instanceof Uint8Array && (e = le.decode(e)), typeof e != "string")
+    throw new _("Compact JWS must be a string or Uint8Array");
+  const { 0: o, 1: n, 2: s, length: a } = e.split(".");
+  if (a !== 3)
+    throw new _("Invalid Compact JWS");
+  const c = await Zt({ payload: n, protected: o, signature: s }, t, r), l = { payload: c.payload, protectedHeader: c.protectedHeader };
+  return typeof t == "function" ? { ...l, key: c.key } : l;
 }
-const Rt = (e) => Math.floor(e.getTime() / 1e3), Ue = 60, He = Ue * 60, ce = He * 24, It = ce * 7, Ct = ce * 365.25, Pt = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, pe = (e) => {
-  const t = Pt.exec(e);
+const tr = (e) => Math.floor(e.getTime() / 1e3), rt = 60, ot = rt * 60, ke = ot * 24, rr = ke * 7, or = ke * 365.25, nr = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, De = (e) => {
+  const t = nr.exec(e);
   if (!t || t[4] && t[1])
     throw new TypeError("Invalid time period format");
-  const r = parseFloat(t[2]), a = t[3].toLowerCase();
+  const r = parseFloat(t[2]), o = t[3].toLowerCase();
   let n;
-  switch (a) {
+  switch (o) {
     case "sec":
     case "secs":
     case "second":
@@ -640,256 +640,646 @@ const Rt = (e) => Math.floor(e.getTime() / 1e3), Ue = 60, He = Ue * 60, ce = He
     case "min":
     case "mins":
     case "m":
-      n = Math.round(r * Ue);
+      n = Math.round(r * rt);
       break;
     case "hour":
     case "hours":
     case "hr":
     case "hrs":
     case "h":
-      n = Math.round(r * He);
+      n = Math.round(r * ot);
       break;
     case "day":
     case "days":
     case "d":
-      n = Math.round(r * ce);
+      n = Math.round(r * ke);
       break;
     case "week":
     case "weeks":
     case "w":
-      n = Math.round(r * It);
+      n = Math.round(r * rr);
       break;
     default:
-      n = Math.round(r * Ct);
+      n = Math.round(r * or);
       break;
   }
   return t[1] === "-" || t[4] === "ago" ? -n : n;
-}, ye = (e) => e.toLowerCase().replace(/^application\//, ""), Ot = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, Dt = (e, t, r = {}) => {
-  let a;
+}, Ne = (e) => e.toLowerCase().replace(/^application\//, ""), ar = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, sr = (e, t, r = {}) => {
+  let o;
   try {
-    a = JSON.parse(Q.decode(t));
+    o = JSON.parse(le.decode(t));
   } catch {
   }
-  if (!ie(a))
-    throw new ve("JWT Claims Set must be a top-level JSON object");
+  if (!be(o))
+    throw new Ge("JWT Claims Set must be a top-level JSON object");
   const { typ: n } = r;
-  if (n && (typeof e.typ != "string" || ye(e.typ) !== ye(n)))
-    throw new g('unexpected "typ" JWT header value', a, "typ", "check_failed");
-  const { requiredClaims: s = [], issuer: o, subject: i, audience: c, maxTokenAge: d } = r, m = [...s];
-  d !== void 0 && m.push("iat"), c !== void 0 && m.push("aud"), i !== void 0 && m.push("sub"), o !== void 0 && m.push("iss");
-  for (const E of new Set(m.reverse()))
-    if (!(E in a))
-      throw new g(`missing required "${E}" claim`, a, E, "missing");
-  if (o && !(Array.isArray(o) ? o : [o]).includes(a.iss))
-    throw new g('unexpected "iss" claim value', a, "iss", "check_failed");
-  if (i && a.sub !== i)
-    throw new g('unexpected "sub" claim value', a, "sub", "check_failed");
-  if (c && !Ot(a.aud, typeof c == "string" ? [c] : c))
-    throw new g('unexpected "aud" claim value', a, "aud", "check_failed");
-  let p;
+  if (n && (typeof e.typ != "string" || Ne(e.typ) !== Ne(n)))
+    throw new O('unexpected "typ" JWT header value', o, "typ", "check_failed");
+  const { requiredClaims: s = [], issuer: a, subject: c, audience: l, maxTokenAge: d } = r, p = [...s];
+  d !== void 0 && p.push("iat"), l !== void 0 && p.push("aud"), c !== void 0 && p.push("sub"), a !== void 0 && p.push("iss");
+  for (const S of new Set(p.reverse()))
+    if (!(S in o))
+      throw new O(`missing required "${S}" claim`, o, S, "missing");
+  if (a && !(Array.isArray(a) ? a : [a]).includes(o.iss))
+    throw new O('unexpected "iss" claim value', o, "iss", "check_failed");
+  if (c && o.sub !== c)
+    throw new O('unexpected "sub" claim value', o, "sub", "check_failed");
+  if (l && !ar(o.aud, typeof l == "string" ? [l] : l))
+    throw new O('unexpected "aud" claim value', o, "aud", "check_failed");
+  let m;
   switch (typeof r.clockTolerance) {
     case "string":
-      p = pe(r.clockTolerance);
+      m = De(r.clockTolerance);
       break;
     case "number":
-      p = r.clockTolerance;
+      m = r.clockTolerance;
       break;
     case "undefined":
-      p = 0;
+      m = 0;
       break;
     default:
       throw new TypeError("Invalid clockTolerance option type");
   }
-  const { currentDate: A } = r, w = Rt(A || /* @__PURE__ */ new Date());
-  if ((a.iat !== void 0 || d) && typeof a.iat != "number")
-    throw new g('"iat" claim must be a number', a, "iat", "invalid");
-  if (a.nbf !== void 0) {
-    if (typeof a.nbf != "number")
-      throw new g('"nbf" claim must be a number', a, "nbf", "invalid");
-    if (a.nbf > w + p)
-      throw new g('"nbf" claim timestamp check failed', a, "nbf", "check_failed");
-  }
-  if (a.exp !== void 0) {
-    if (typeof a.exp != "number")
-      throw new g('"exp" claim must be a number', a, "exp", "invalid");
-    if (a.exp <= w - p)
-      throw new le('"exp" claim timestamp check failed', a, "exp", "check_failed");
+  const { currentDate: T } = r, E = tr(T || /* @__PURE__ */ new Date());
+  if ((o.iat !== void 0 || d) && typeof o.iat != "number")
+    throw new O('"iat" claim must be a number', o, "iat", "invalid");
+  if (o.nbf !== void 0) {
+    if (typeof o.nbf != "number")
+      throw new O('"nbf" claim must be a number', o, "nbf", "invalid");
+    if (o.nbf > E + m)
+      throw new O('"nbf" claim timestamp check failed', o, "nbf", "check_failed");
+  }
+  if (o.exp !== void 0) {
+    if (typeof o.exp != "number")
+      throw new O('"exp" claim must be a number', o, "exp", "invalid");
+    if (o.exp <= E - m)
+      throw new Oe('"exp" claim timestamp check failed', o, "exp", "check_failed");
   }
   if (d) {
-    const E = w - a.iat, K = typeof d == "number" ? d : pe(d);
-    if (E - p > K)
-      throw new le('"iat" claim timestamp check failed (too far in the past)', a, "iat", "check_failed");
-    if (E < 0 - p)
-      throw new g('"iat" claim timestamp check failed (it should be in the past)', a, "iat", "check_failed");
+    const S = E - o.iat, P = typeof d == "number" ? d : De(d);
+    if (S - m > P)
+      throw new Oe('"iat" claim timestamp check failed (too far in the past)', o, "iat", "check_failed");
+    if (S < 0 - m)
+      throw new O('"iat" claim timestamp check failed (it should be in the past)', o, "iat", "check_failed");
   }
-  return a;
+  return o;
 };
-async function Ut(e, t, r) {
-  var a;
-  const n = await vt(e, t, r);
-  if ((a = n.protectedHeader.crit) != null && a.includes("b64") && n.protectedHeader.b64 === !1)
-    throw new ve("JWTs MUST NOT use unencoded payload");
-  const s = { payload: Dt(n.protectedHeader, n.payload, r), protectedHeader: n.protectedHeader };
+async function ir(e, t, r) {
+  var o;
+  const n = await er(e, t, r);
+  if ((o = n.protectedHeader.crit) != null && o.includes("b64") && n.protectedHeader.b64 === !1)
+    throw new Ge("JWTs MUST NOT use unencoded payload");
+  const s = { payload: sr(n.protectedHeader, n.payload, r), protectedHeader: n.protectedHeader };
   return typeof t == "function" ? { ...s, key: n.key } : s;
 }
-const H = async (e) => {
+const Y = async (e) => {
   try {
-    const t = y.ALG, r = await mt(Qe, t);
-    return await Ut(e, r, {
-      issuer: y.ISSUER
+    const t = k.ALG, r = await Yt(kt, t);
+    return await ir(e, r, {
+      issuer: k.ISSUER
     });
   } catch {
     return;
   }
 };
-var l = [];
-for (var ne = 0; ne < 256; ++ne)
-  l.push((ne + 256).toString(16).slice(1));
-function Ht(e, t = 0) {
-  return (l[e[t + 0]] + l[e[t + 1]] + l[e[t + 2]] + l[e[t + 3]] + "-" + l[e[t + 4]] + l[e[t + 5]] + "-" + l[e[t + 6]] + l[e[t + 7]] + "-" + l[e[t + 8]] + l[e[t + 9]] + "-" + l[e[t + 10]] + l[e[t + 11]] + l[e[t + 12]] + l[e[t + 13]] + l[e[t + 14]] + l[e[t + 15]]).toLowerCase();
+var A = [];
+for (var Ae = 0; Ae < 256; ++Ae)
+  A.push((Ae + 256).toString(16).slice(1));
+function cr(e, t = 0) {
+  return (A[e[t + 0]] + A[e[t + 1]] + A[e[t + 2]] + A[e[t + 3]] + "-" + A[e[t + 4]] + A[e[t + 5]] + "-" + A[e[t + 6]] + A[e[t + 7]] + "-" + A[e[t + 8]] + A[e[t + 9]] + "-" + A[e[t + 10]] + A[e[t + 11]] + A[e[t + 12]] + A[e[t + 13]] + A[e[t + 14]] + A[e[t + 15]]).toLowerCase();
 }
-var J, Kt = new Uint8Array(16);
-function Nt() {
-  if (!J && (J = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !J))
+var X, ur = new Uint8Array(16);
+function lr() {
+  if (!X && (X = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !X))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return J(Kt);
+  return X(ur);
 }
-var Lt = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
-const me = {
-  randomUUID: Lt
+var dr = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
+const $e = {
+  randomUUID: dr
 };
-function we(e, t, r) {
-  if (me.randomUUID && !t && !e)
-    return me.randomUUID();
+function Ue(e, t, r) {
+  if ($e.randomUUID && !t && !e)
+    return $e.randomUUID();
   e = e || {};
-  var a = e.random || (e.rng || Nt)();
-  return a[6] = a[6] & 15 | 64, a[8] = a[8] & 63 | 128, Ht(a);
+  var o = e.random || (e.rng || lr)();
+  return o[6] = o[6] & 15 | 64, o[8] = o[8] & 63 | 128, cr(o);
 }
-const Ee = globalThis.crypto, $t = (e) => `${we()}${we()}`.slice(0, e), Wt = (e) => btoa(
+const Le = globalThis.crypto, fr = (e) => `${Ue()}${Ue()}`.slice(0, e), hr = (e) => btoa(
   [...new Uint8Array(e)].map((t) => String.fromCharCode(t)).join("")
 );
-async function Jt(e) {
-  if (!Ee.subtle)
+async function pr(e) {
+  if (!Le.subtle)
     throw new Error(
       "crypto.subtle is available only in secure contexts (HTTPS)."
     );
-  const t = new TextEncoder().encode(e), r = await Ee.subtle.digest("SHA-256", t);
-  return Wt(r).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  const t = new TextEncoder().encode(e), r = await Le.subtle.digest("SHA-256", t);
+  return hr(r).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-async function xt(e) {
-  const r = $t(43), a = await Jt(r);
+async function yr(e) {
+  const r = fr(43), o = await pr(r);
   return {
     code_verifier: r,
-    code_challenge: a
+    code_challenge: o
   };
 }
-function Ke(e, t) {
+function nt(e, t) {
   window.dispatchEvent(new StorageEvent("storage", { key: e, newValue: t }));
 }
-const Se = (e, t) => {
+const xe = (e, t) => {
   const r = JSON.stringify(
     typeof t == "function" ? t() : t
   );
-  window.localStorage.setItem(e, r), Ke(e, r);
-}, jt = (e) => {
-  window.localStorage.removeItem(e), Ke(e, null);
-}, ge = (e) => window.localStorage.getItem(e), Mt = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
-function x({
+  window.localStorage.setItem(e, r), nt(e, r);
+}, mr = (e) => {
+  window.localStorage.removeItem(e), nt(e, null);
+}, He = (e) => window.localStorage.getItem(e), Er = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
+function Q({
   key: e,
   initialValue: t
 }) {
-  const r = () => ge(e), a = U.useSyncExternalStore(
-    Mt,
+  const r = () => He(e), o = K.useSyncExternalStore(
+    Er,
     r
-  ), n = U.useCallback(
-    (i) => {
+  ), n = K.useCallback(
+    (c) => {
       try {
-        const c = typeof i == "function" ? i(JSON.parse(a)) : i;
-        c == null ? jt(e) : Se(e, c);
-      } catch (c) {
-        console.warn(c);
+        const l = typeof c == "function" ? c(JSON.parse(o)) : c;
+        l == null ? mr(e) : xe(e, l);
+      } catch (l) {
+        console.warn(l);
       }
     },
-    [e, a]
-  ), s = U.useCallback(() => {
+    [e, o]
+  ), s = K.useCallback(() => {
     n(t);
-  }, [t, n]), o = U.useCallback(() => {
+  }, [t, n]), a = K.useCallback(() => {
     n(null);
   }, [n]);
-  return U.useEffect(() => {
+  return K.useEffect(() => {
     try {
-      ge(e) === null && typeof t < "u" && Se(e, t);
-    } catch (i) {
-      console.warn(i);
+      He(e) === null && typeof t < "u" && xe(e, t);
+    } catch (c) {
+      console.warn(c);
+    }
+  }, [e, t]), [o ? JSON.parse(o) : null, n, s, a];
+}
+/*!
+* cookie
+* Copyright(c) 2012-2014 Roman Shtylman
+* Copyright(c) 2015 Douglas Christopher Wilson
+* MIT Licensed
+*/
+var at = wr, Me = gr, Sr = Object.prototype.toString, Z = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/;
+function wr(e, t) {
+  if (typeof e != "string")
+    throw new TypeError("argument str must be a string");
+  for (var r = {}, o = t || {}, n = o.decode || Ar, s = 0; s < e.length; ) {
+    var a = e.indexOf("=", s);
+    if (a === -1)
+      break;
+    var c = e.indexOf(";", s);
+    if (c === -1)
+      c = e.length;
+    else if (c < a) {
+      s = e.lastIndexOf(";", a - 1) + 1;
+      continue;
+    }
+    var l = e.slice(s, a).trim();
+    if (r[l] === void 0) {
+      var d = e.slice(a + 1, c).trim();
+      d.charCodeAt(0) === 34 && (d = d.slice(1, -1)), r[l] = Tr(d, n);
+    }
+    s = c + 1;
+  }
+  return r;
+}
+function gr(e, t, r) {
+  var o = r || {}, n = o.encode || vr;
+  if (typeof n != "function")
+    throw new TypeError("option encode is invalid");
+  if (!Z.test(e))
+    throw new TypeError("argument name is invalid");
+  var s = n(t);
+  if (s && !Z.test(s))
+    throw new TypeError("argument val is invalid");
+  var a = e + "=" + s;
+  if (o.maxAge != null) {
+    var c = o.maxAge - 0;
+    if (isNaN(c) || !isFinite(c))
+      throw new TypeError("option maxAge is invalid");
+    a += "; Max-Age=" + Math.floor(c);
+  }
+  if (o.domain) {
+    if (!Z.test(o.domain))
+      throw new TypeError("option domain is invalid");
+    a += "; Domain=" + o.domain;
+  }
+  if (o.path) {
+    if (!Z.test(o.path))
+      throw new TypeError("option path is invalid");
+    a += "; Path=" + o.path;
+  }
+  if (o.expires) {
+    var l = o.expires;
+    if (!_r(l) || isNaN(l.valueOf()))
+      throw new TypeError("option expires is invalid");
+    a += "; Expires=" + l.toUTCString();
+  }
+  if (o.httpOnly && (a += "; HttpOnly"), o.secure && (a += "; Secure"), o.partitioned && (a += "; Partitioned"), o.priority) {
+    var d = typeof o.priority == "string" ? o.priority.toLowerCase() : o.priority;
+    switch (d) {
+      case "low":
+        a += "; Priority=Low";
+        break;
+      case "medium":
+        a += "; Priority=Medium";
+        break;
+      case "high":
+        a += "; Priority=High";
+        break;
+      default:
+        throw new TypeError("option priority is invalid");
+    }
+  }
+  if (o.sameSite) {
+    var p = typeof o.sameSite == "string" ? o.sameSite.toLowerCase() : o.sameSite;
+    switch (p) {
+      case !0:
+        a += "; SameSite=Strict";
+        break;
+      case "lax":
+        a += "; SameSite=Lax";
+        break;
+      case "strict":
+        a += "; SameSite=Strict";
+        break;
+      case "none":
+        a += "; SameSite=None";
+        break;
+      default:
+        throw new TypeError("option sameSite is invalid");
+    }
+  }
+  return a;
+}
+function Ar(e) {
+  return e.indexOf("%") !== -1 ? decodeURIComponent(e) : e;
+}
+function vr(e) {
+  return encodeURIComponent(e);
+}
+function _r(e) {
+  return Sr.call(e) === "[object Date]" || e instanceof Date;
+}
+function Tr(e, t) {
+  try {
+    return t(e);
+  } catch {
+    return e;
+  }
+}
+function br() {
+  const e = typeof global > "u" ? void 0 : global.TEST_HAS_DOCUMENT_COOKIE;
+  return typeof e == "boolean" ? e : typeof document == "object" && typeof document.cookie == "string";
+}
+function kr(e) {
+  return typeof e == "string" ? at(e) : typeof e == "object" && e !== null ? e : {};
+}
+function ve(e, t = {}) {
+  const r = Cr(e);
+  if (!t.doNotParse)
+    try {
+      return JSON.parse(r);
+    } catch {
+    }
+  return e;
+}
+function Cr(e) {
+  return e && e[0] === "j" && e[1] === ":" ? e.substr(2) : e;
+}
+class Rr {
+  constructor(t, r = {}) {
+    this.changeListeners = [], this.HAS_DOCUMENT_COOKIE = !1, this.update = () => {
+      if (!this.HAS_DOCUMENT_COOKIE)
+        return;
+      const n = this.cookies;
+      this.cookies = at(document.cookie), this._checkChanges(n);
+    };
+    const o = typeof document > "u" ? "" : document.cookie;
+    this.cookies = kr(t || o), this.defaultSetOptions = r, this.HAS_DOCUMENT_COOKIE = br();
+  }
+  _emitChange(t) {
+    for (let r = 0; r < this.changeListeners.length; ++r)
+      this.changeListeners[r](t);
+  }
+  _checkChanges(t) {
+    new Set(Object.keys(t).concat(Object.keys(this.cookies))).forEach((o) => {
+      t[o] !== this.cookies[o] && this._emitChange({
+        name: o,
+        value: ve(this.cookies[o])
+      });
+    });
+  }
+  _startPolling() {
+    this.pollingInterval = setInterval(this.update, 300);
+  }
+  _stopPolling() {
+    this.pollingInterval && clearInterval(this.pollingInterval);
+  }
+  get(t, r = {}) {
+    return r.doNotUpdate || this.update(), ve(this.cookies[t], r);
+  }
+  getAll(t = {}) {
+    t.doNotUpdate || this.update();
+    const r = {};
+    for (let o in this.cookies)
+      r[o] = ve(this.cookies[o], t);
+    return r;
+  }
+  set(t, r, o) {
+    o ? o = Object.assign(Object.assign({}, this.defaultSetOptions), o) : o = this.defaultSetOptions;
+    const n = typeof r == "string" ? r : JSON.stringify(r);
+    this.cookies = Object.assign(Object.assign({}, this.cookies), { [t]: n }), this.HAS_DOCUMENT_COOKIE && (document.cookie = Me(t, n, o)), this._emitChange({ name: t, value: r, options: o });
+  }
+  remove(t, r) {
+    const o = r = Object.assign(Object.assign(Object.assign({}, this.defaultSetOptions), r), { expires: new Date(1970, 1, 1, 0, 0, 1), maxAge: 0 });
+    this.cookies = Object.assign({}, this.cookies), delete this.cookies[t], this.HAS_DOCUMENT_COOKIE && (document.cookie = Me(t, "", o)), this._emitChange({ name: t, value: void 0, options: r });
+  }
+  addChangeListener(t) {
+    this.changeListeners.push(t), this.HAS_DOCUMENT_COOKIE && this.changeListeners.length === 1 && (typeof window == "object" && "cookieStore" in window ? window.cookieStore.addEventListener("change", this.update) : this._startPolling());
+  }
+  removeChangeListener(t) {
+    const r = this.changeListeners.indexOf(t);
+    r >= 0 && this.changeListeners.splice(r, 1), this.HAS_DOCUMENT_COOKIE && this.changeListeners.length === 0 && (typeof window == "object" && "cookieStore" in window ? window.cookieStore.removeEventListener("change", this.update) : this._stopPolling());
+  }
+}
+const Or = K.createContext(new Rr());
+var f = {};
+/** @license React v16.13.1
+ * react-is.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+var Ke;
+function Pr() {
+  if (Ke)
+    return f;
+  Ke = 1;
+  var e = typeof Symbol == "function" && Symbol.for, t = e ? Symbol.for("react.element") : 60103, r = e ? Symbol.for("react.portal") : 60106, o = e ? Symbol.for("react.fragment") : 60107, n = e ? Symbol.for("react.strict_mode") : 60108, s = e ? Symbol.for("react.profiler") : 60114, a = e ? Symbol.for("react.provider") : 60109, c = e ? Symbol.for("react.context") : 60110, l = e ? Symbol.for("react.async_mode") : 60111, d = e ? Symbol.for("react.concurrent_mode") : 60111, p = e ? Symbol.for("react.forward_ref") : 60112, m = e ? Symbol.for("react.suspense") : 60113, T = e ? Symbol.for("react.suspense_list") : 60120, E = e ? Symbol.for("react.memo") : 60115, S = e ? Symbol.for("react.lazy") : 60116, P = e ? Symbol.for("react.block") : 60121, j = e ? Symbol.for("react.fundamental") : 60117, W = e ? Symbol.for("react.responder") : 60118, M = e ? Symbol.for("react.scope") : 60119;
+  function g(i) {
+    if (typeof i == "object" && i !== null) {
+      var C = i.$$typeof;
+      switch (C) {
+        case t:
+          switch (i = i.type, i) {
+            case l:
+            case d:
+            case o:
+            case s:
+            case n:
+            case m:
+              return i;
+            default:
+              switch (i = i && i.$$typeof, i) {
+                case c:
+                case p:
+                case S:
+                case E:
+                case a:
+                  return i;
+                default:
+                  return C;
+              }
+          }
+        case r:
+          return C;
+      }
     }
-  }, [e, t]), [a ? JSON.parse(a) : null, n, s, o];
+  }
+  function w(i) {
+    return g(i) === d;
+  }
+  return f.AsyncMode = l, f.ConcurrentMode = d, f.ContextConsumer = c, f.ContextProvider = a, f.Element = t, f.ForwardRef = p, f.Fragment = o, f.Lazy = S, f.Memo = E, f.Portal = r, f.Profiler = s, f.StrictMode = n, f.Suspense = m, f.isAsyncMode = function(i) {
+    return w(i) || g(i) === l;
+  }, f.isConcurrentMode = w, f.isContextConsumer = function(i) {
+    return g(i) === c;
+  }, f.isContextProvider = function(i) {
+    return g(i) === a;
+  }, f.isElement = function(i) {
+    return typeof i == "object" && i !== null && i.$$typeof === t;
+  }, f.isForwardRef = function(i) {
+    return g(i) === p;
+  }, f.isFragment = function(i) {
+    return g(i) === o;
+  }, f.isLazy = function(i) {
+    return g(i) === S;
+  }, f.isMemo = function(i) {
+    return g(i) === E;
+  }, f.isPortal = function(i) {
+    return g(i) === r;
+  }, f.isProfiler = function(i) {
+    return g(i) === s;
+  }, f.isStrictMode = function(i) {
+    return g(i) === n;
+  }, f.isSuspense = function(i) {
+    return g(i) === m;
+  }, f.isValidElementType = function(i) {
+    return typeof i == "string" || typeof i == "function" || i === o || i === d || i === s || i === n || i === m || i === T || typeof i == "object" && i !== null && (i.$$typeof === S || i.$$typeof === E || i.$$typeof === a || i.$$typeof === c || i.$$typeof === p || i.$$typeof === j || i.$$typeof === W || i.$$typeof === M || i.$$typeof === P);
+  }, f.typeOf = g, f;
 }
-var h = [];
-for (var se = 0; se < 256; ++se)
-  h.push((se + 256).toString(16).slice(1));
-function Vt(e, t = 0) {
-  return (h[e[t + 0]] + h[e[t + 1]] + h[e[t + 2]] + h[e[t + 3]] + "-" + h[e[t + 4]] + h[e[t + 5]] + "-" + h[e[t + 6]] + h[e[t + 7]] + "-" + h[e[t + 8]] + h[e[t + 9]] + "-" + h[e[t + 10]] + h[e[t + 11]] + h[e[t + 12]] + h[e[t + 13]] + h[e[t + 14]] + h[e[t + 15]]).toLowerCase();
+var h = {};
+/** @license React v16.13.1
+ * react-is.development.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+var je;
+function Ir() {
+  return je || (je = 1, process.env.NODE_ENV !== "production" && function() {
+    var e = typeof Symbol == "function" && Symbol.for, t = e ? Symbol.for("react.element") : 60103, r = e ? Symbol.for("react.portal") : 60106, o = e ? Symbol.for("react.fragment") : 60107, n = e ? Symbol.for("react.strict_mode") : 60108, s = e ? Symbol.for("react.profiler") : 60114, a = e ? Symbol.for("react.provider") : 60109, c = e ? Symbol.for("react.context") : 60110, l = e ? Symbol.for("react.async_mode") : 60111, d = e ? Symbol.for("react.concurrent_mode") : 60111, p = e ? Symbol.for("react.forward_ref") : 60112, m = e ? Symbol.for("react.suspense") : 60113, T = e ? Symbol.for("react.suspense_list") : 60120, E = e ? Symbol.for("react.memo") : 60115, S = e ? Symbol.for("react.lazy") : 60116, P = e ? Symbol.for("react.block") : 60121, j = e ? Symbol.for("react.fundamental") : 60117, W = e ? Symbol.for("react.responder") : 60118, M = e ? Symbol.for("react.scope") : 60119;
+    function g(u) {
+      return typeof u == "string" || typeof u == "function" || // Note: its typeof might be other than 'symbol' or 'number' if it's a polyfill.
+      u === o || u === d || u === s || u === n || u === m || u === T || typeof u == "object" && u !== null && (u.$$typeof === S || u.$$typeof === E || u.$$typeof === a || u.$$typeof === c || u.$$typeof === p || u.$$typeof === j || u.$$typeof === W || u.$$typeof === M || u.$$typeof === P);
+    }
+    function w(u) {
+      if (typeof u == "object" && u !== null) {
+        var me = u.$$typeof;
+        switch (me) {
+          case t:
+            var z = u.type;
+            switch (z) {
+              case l:
+              case d:
+              case o:
+              case s:
+              case n:
+              case m:
+                return z;
+              default:
+                var Ce = z && z.$$typeof;
+                switch (Ce) {
+                  case c:
+                  case p:
+                  case S:
+                  case E:
+                  case a:
+                    return Ce;
+                  default:
+                    return me;
+                }
+            }
+          case r:
+            return me;
+        }
+      }
+    }
+    var i = l, C = d, I = c, fe = a, he = t, pe = p, ye = o, y = S, R = E, b = r, D = s, U = n, J = m, F = !1;
+    function V(u) {
+      return F || (F = !0, console.warn("The ReactIs.isAsyncMode() alias has been deprecated, and will be removed in React 17+. Update your code to use ReactIs.isConcurrentMode() instead. It has the exact same API.")), N(u) || w(u) === l;
+    }
+    function N(u) {
+      return w(u) === d;
+    }
+    function it(u) {
+      return w(u) === c;
+    }
+    function ct(u) {
+      return w(u) === a;
+    }
+    function ut(u) {
+      return typeof u == "object" && u !== null && u.$$typeof === t;
+    }
+    function lt(u) {
+      return w(u) === p;
+    }
+    function dt(u) {
+      return w(u) === o;
+    }
+    function ft(u) {
+      return w(u) === S;
+    }
+    function ht(u) {
+      return w(u) === E;
+    }
+    function pt(u) {
+      return w(u) === r;
+    }
+    function yt(u) {
+      return w(u) === s;
+    }
+    function mt(u) {
+      return w(u) === n;
+    }
+    function Et(u) {
+      return w(u) === m;
+    }
+    h.AsyncMode = i, h.ConcurrentMode = C, h.ContextConsumer = I, h.ContextProvider = fe, h.Element = he, h.ForwardRef = pe, h.Fragment = ye, h.Lazy = y, h.Memo = R, h.Portal = b, h.Profiler = D, h.StrictMode = U, h.Suspense = J, h.isAsyncMode = V, h.isConcurrentMode = N, h.isContextConsumer = it, h.isContextProvider = ct, h.isElement = ut, h.isForwardRef = lt, h.isFragment = dt, h.isLazy = ft, h.isMemo = ht, h.isPortal = pt, h.isProfiler = yt, h.isStrictMode = mt, h.isSuspense = Et, h.isValidElementType = g, h.typeOf = w;
+  }()), h;
 }
-var j, Yt = new Uint8Array(16);
-function Bt() {
-  if (!j && (j = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !j))
+process.env.NODE_ENV === "production" ? Pr() : Ir();
+function Dr() {
+  return typeof window < "u" && typeof window.document < "u" && typeof window.document.createElement < "u";
+}
+function Nr(e) {
+  const t = Ve(Or);
+  if (!t)
+    throw new Error("Missing <CookiesProvider>");
+  const [r, o] = ze(() => t.getAll({ doNotUpdate: !0 }));
+  Dr() && At(() => {
+    function c() {
+      const l = t.getAll({
+        doNotUpdate: !0
+      });
+      $r(e || null, l, r) && o(l);
+    }
+    return t.addChangeListener(c), () => {
+      t.removeChangeListener(c);
+    };
+  }, [t, r]);
+  const n = Ee(() => t.set.bind(t), [t]), s = Ee(() => t.remove.bind(t), [t]), a = Ee(() => t.update.bind(t), [t]);
+  return [r, n, s, a];
+}
+function $r(e, t, r) {
+  if (!e)
+    return !0;
+  for (let o of e)
+    if (t[o] !== r[o])
+      return !0;
+  return !1;
+}
+var v = [];
+for (var _e = 0; _e < 256; ++_e)
+  v.push((_e + 256).toString(16).slice(1));
+function Ur(e, t = 0) {
+  return (v[e[t + 0]] + v[e[t + 1]] + v[e[t + 2]] + v[e[t + 3]] + "-" + v[e[t + 4]] + v[e[t + 5]] + "-" + v[e[t + 6]] + v[e[t + 7]] + "-" + v[e[t + 8]] + v[e[t + 9]] + "-" + v[e[t + 10]] + v[e[t + 11]] + v[e[t + 12]] + v[e[t + 13]] + v[e[t + 14]] + v[e[t + 15]]).toLowerCase();
+}
+var ee, Lr = new Uint8Array(16);
+function xr() {
+  if (!ee && (ee = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !ee))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return j(Yt);
+  return ee(Lr);
 }
-var Ft = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
-const Ae = {
-  randomUUID: Ft
+var Hr = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
+const We = {
+  randomUUID: Hr
 };
-function Gt(e, t, r) {
-  if (Ae.randomUUID && !t && !e)
-    return Ae.randomUUID();
+function Mr(e, t, r) {
+  if (We.randomUUID && !t && !e)
+    return We.randomUUID();
   e = e || {};
-  var a = e.random || (e.rng || Bt)();
-  return a[6] = a[6] & 15 | 64, a[8] = a[8] & 63 | 128, Vt(a);
+  var o = e.random || (e.rng || xr)();
+  return o[6] = o[6] & 15 | 64, o[8] = o[8] & 63 | 128, Ur(o);
 }
-const M = "Oops! It looks like your session has expired. For your security, please log in again to continue.", qt = "Your session has been successfully terminated.", Te = "Login failed. Please try again.", oe = "Error getting access token, please re-authenticate.", zt = "You forgot to wrap your component in <AuthProvider>.", ke = {
+const te = "Oops! It looks like your session has expired. For your security, please log in again to continue.", Kr = "Your session has been successfully terminated.", Je = "Login failed. Please try again.", Te = "Error getting access token, please re-authenticate.", jr = "You forgot to wrap your component in <AuthProvider>.", Ye = {
   dev: "https://auth.gizmette.local.com:3003",
   prod: "https://mylogin.gizmette.com"
-}, V = "@@auth@@", Xt = process.env.NODE_ENV === "production", Qt = !Xt, Z = async ({
+}, re = "@@auth@@", Wr = process.env.NODE_ENV === "production", Jr = !Wr, de = async ({
   type: e,
   clientId: t,
   params: r = {}
 }) => {
   try {
-    const a = await fetch(
-      Qt ? `${ke.dev}/${e}` : `${ke.prod}/${e}`,
+    const o = await fetch(
+      Jr ? `${Ye.dev}/${e}` : `${Ye.prod}/${e}`,
       {
         credentials: "include",
         method: "POST",
         headers: {
           "Content-Type": "application/json",
-          [Xe.CLIENT_ID]: `${t}`
+          [bt.CLIENT_ID]: `${t}`
         },
         body: JSON.stringify(r)
       }
     );
-    if (a.status !== 200)
-      return { status: a.status, data: [] };
-    const { data: n, errors: s } = await a.json();
+    if (o.status !== 200)
+      return { status: o.status, data: [] };
+    const { data: n, errors: s } = await o.json();
     return {
-      status: a.status,
+      status: o.status,
       data: n,
       errors: s
     };
-  } catch (a) {
-    return console.error(a), { status: 500, data: [] };
+  } catch (o) {
+    return console.error(o), { status: 500, data: [] };
   }
-}, Zt = async ({
+}, Yr = async ({
   idToken: e,
   accessToken: t,
   refreshToken: r,
-  clientId: a
+  clientId: o
 }) => {
   try {
     return {
-      status: (await Z({
-        type: z.LOGOUT,
-        clientId: a,
+      status: (await de({
+        type: ce.LOGOUT,
+        clientId: o,
         params: {
           idToken: e,
           accessToken: t,
@@ -902,35 +1292,35 @@ const M = "Oops! It looks like your session has expired. For your security, plea
       status: !1
     };
   }
-}, be = async ({
+}, Fe = async ({
   username: e,
   password: t,
   clientId: r,
-  nonce: a,
+  nonce: o,
   type: n,
   sessionExpiration: s,
-  code: o,
-  code_verifier: i
+  code: a,
+  code_verifier: c
 }) => {
   try {
-    const c = await Z({
-      type: z.AUTHENTICATE,
+    const l = await de({
+      type: ce.AUTHENTICATE,
       clientId: r,
       params: {
-        type: n || q.ID_AND_ACCESS_TOKEN,
+        type: n || ie.ID_AND_ACCESS_TOKEN,
         username: e,
         password: t,
         sessionExpiration: s,
-        nonce: a,
-        code: o,
-        code_verifier: i
+        nonce: o,
+        code: a,
+        code_verifier: c
       }
-    }), d = await H(c.data.idToken);
-    return d && d.payload[y.USER_ID_KEY] !== "" && d.payload[y.NONCE_KEY] === a ? {
-      idToken: c.data.idToken,
-      accessToken: c.data.accessToken,
-      refreshToken: c.data.refreshToken,
-      userId: d.payload[y.USER_ID_KEY],
+    }), d = await Y(l.data.idToken);
+    return d && d.payload[k.USER_ID_KEY] !== "" && d.payload[k.NONCE_KEY] === o ? {
+      idToken: l.data.idToken,
+      accessToken: l.data.accessToken,
+      refreshToken: l.data.refreshToken,
+      userId: d.payload[k.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -940,24 +1330,24 @@ const M = "Oops! It looks like your session has expired. For your security, plea
       status: !1
     };
   }
-}, er = async ({
+}, Fr = async ({
   nonce: e,
   clientId: t,
   code_challenge: r
 }) => {
   try {
-    const a = await Z({
-      type: z.CODE,
+    const o = await de({
+      type: ce.CODE,
       clientId: t,
       params: {
-        type: q.CODE,
+        type: ie.CODE,
         nonce: e,
         code_challenge: r
       }
     });
-    return a.data.code ? {
+    return o.data.code ? {
       status: !0,
-      code: a.data.code
+      code: o.data.code
     } : {
       status: !1
     };
@@ -966,29 +1356,29 @@ const M = "Oops! It looks like your session has expired. For your security, plea
       status: !1
     };
   }
-}, tr = async ({
+}, Vr = async ({
   clientId: e,
   userId: t,
   nonce: r,
-  refreshToken: a,
+  refreshToken: o,
   accessToken: n
 }) => {
   try {
-    const s = await Z({
-      type: z.AUTHENTICATE,
+    const s = await de({
+      type: ce.AUTHENTICATE,
       clientId: e,
       params: {
-        type: q.REFRESH_TOKEN,
+        type: ie.REFRESH_TOKEN,
         userId: t,
         nonce: r,
-        refreshToken: a,
+        refreshToken: o,
         accessToken: n
       }
-    }), o = await H(s.data.accessToken);
-    return o && o.payload[y.USER_ID_KEY] !== "" && o.payload[y.NONCE_KEY] === r ? {
+    }), a = await Y(s.data.accessToken);
+    return a && a.payload[k.USER_ID_KEY] !== "" && a.payload[k.NONCE_KEY] === r ? {
       accessToken: s.data.accessToken,
       refreshToken: s.data.refreshToken,
-      userId: o.payload[y.USER_ID_KEY],
+      userId: a.payload[k.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -999,22 +1389,22 @@ const M = "Oops! It looks like your session has expired. For your security, plea
     };
   }
 };
-class rr {
+class zr {
   constructor(t = null, r = null) {
-    L(this, "refreshTokenPromise", null);
-    L(this, "accessToken");
-    L(this, "refreshToken");
+    B(this, "refreshTokenPromise", null);
+    B(this, "accessToken");
+    B(this, "refreshToken");
     this.accessToken = t || "", this.refreshToken = r || "";
   }
   async refreshtoken({
     clientId: t,
     userId: r,
-    nonce: a
+    nonce: o
   }) {
     this.refreshTokenPromise || (this.refreshTokenPromise = this._refreshToken({
       clientId: t,
       userId: r,
-      nonce: a
+      nonce: o
     }));
     try {
       return await this.refreshTokenPromise;
@@ -1025,14 +1415,14 @@ class rr {
   async _refreshToken({
     clientId: t,
     userId: r,
-    nonce: a
+    nonce: o
   }) {
-    const n = await H(this.refreshToken);
-    if (n && n.payload[y.USER_ID_KEY] !== "") {
-      const s = await tr({
+    const n = await Y(this.refreshToken);
+    if (n && n.payload[k.USER_ID_KEY] !== "") {
+      const s = await Vr({
         clientId: t,
         userId: r,
-        nonce: a,
+        nonce: o,
         refreshToken: this.refreshToken,
         accessToken: this.accessToken
       });
@@ -1049,170 +1439,191 @@ class rr {
       };
   }
 }
-const Y = () => {
-  throw new Error(zt);
-}, Ne = Be({
+const oe = () => {
+  throw new Error(jr);
+}, st = vt({
   isAuthenticated: !1,
   isLoading: !1,
-  login: Y,
-  logout: Y,
-  getAccessToken: Y,
-  getIdToken: Y,
+  login: oe,
+  logout: oe,
+  getAccessToken: oe,
+  getIdToken: oe,
   logoutReason: ""
-}), cr = ({
+}), Zr = ({
   children: e,
   sessionExpiration: t,
-  clientId: r
+  clientId: r,
+  domain: o
 }) => {
-  const a = Fe(!1), [n, s, , o] = x({
-    key: `${V}::${r}::@@user@@`
-  }), [i, c, , d] = x({
-    key: `${V}::${r}::@@access@@`
-  }), [m, p, , A] = x(
+  const n = _t(!1), [, s, a] = Nr([`auth.${r}`]), [c, l, , d] = Q({
+    key: `${re}::${r}::@@user@@`
+  }), [p, m, , T] = Q({
+    key: `${re}::${r}::@@access@@`
+  }), [E, S, , P] = Q(
     {
-      key: `${V}::${r}::@@refresh@@`
+      key: `${re}::${r}::@@refresh@@`
     }
-  ), [w, E, , K] = x({
-    key: `${V}::${r}::@@nonce@@`
-  }), Le = new rr(i, m), [P, v] = Ge({
+  ), [j, W, , M] = Q({
+    key: `${re}::${r}::@@nonce@@`
+  }), g = new zr(p, E), [w, i] = ze({
     isLoading: !0,
     isAuthenticated: !1,
     user: void 0,
     logoutReason: ""
-  }), N = de(
-    (u) => {
-      console.warn(u), v({
+  }), C = Re(
+    (y) => {
+      console.warn(y), i({
         isLoading: !0,
         isAuthenticated: !1,
         user: void 0,
-        logoutReason: u || M
-      }), o(), d(), A(), K();
+        logoutReason: y || te
+      }), d(), T(), P(), M(), o && a(`auth.${r}`, {
+        secure: !0,
+        domain: o
+      });
     },
-    [o, d, K, A]
-  ), R = de(
-    async (u) => {
-      N(u || M), await Zt({
-        idToken: n,
-        accessToken: i,
-        refreshToken: m,
+    [
+      r,
+      o,
+      T,
+      a,
+      d,
+      M,
+      P
+    ]
+  ), I = Re(
+    async (y) => {
+      C(y || te), await Yr({
+        idToken: c,
+        accessToken: p,
+        refreshToken: E,
         clientId: r
-      }), v((k) => ({
-        ...k,
+      }), i((R) => ({
+        ...R,
         isLoading: !1
       }));
     },
-    [i, r, n, N, m]
+    [p, r, c, C, E]
   );
-  qe(() => {
-    if (!a.current)
-      return P.isLoading && n !== null ? (async () => {
+  Tt(() => {
+    if (!n.current)
+      return w.isLoading && c !== null ? (async () => {
         try {
-          const u = await H(n);
-          u && u.payload[y.USER_ID_KEY] !== "" ? v({
+          const y = await Y(c);
+          y && y.payload[k.USER_ID_KEY] !== "" ? i({
             isLoading: !1,
             isAuthenticated: !0,
             user: {
-              userId: u.payload[y.USER_ID_KEY],
-              username: u.payload[y.USERNAME_KEY]
+              userId: y.payload[k.USER_ID_KEY],
+              username: y.payload[k.USERNAME_KEY]
             },
             logoutReason: ""
-          }) : await R(M);
+          }) : await I(te);
         } catch {
-          await R(M);
+          await I(te);
         }
-      })() : v((u) => ({
-        ...u,
+      })() : i((y) => ({
+        ...y,
         isLoading: !1
       })), () => {
-        a.current = !0;
+        n.current = !0;
       };
-  }, [P.isLoading, n, R]);
-  const $e = async (u, k, S) => {
-    const I = Gt();
-    if (E(I), v((ee) => ({
-      ...ee,
+  }, [w.isLoading, c, I]);
+  const fe = async (y, R, b) => {
+    const D = Mr();
+    if (W(D), i((J) => ({
+      ...J,
       isLoading: !0
-    })), S === q.CODE) {
-      const { code_verifier: ee, code_challenge: je } = await xt(), ue = await er({
-        nonce: I,
+    })), d(), T(), P(), b === ie.CODE) {
+      const { code_verifier: J, code_challenge: F } = await yr(), V = await Fr({
+        nonce: D,
         clientId: r,
-        code_challenge: je
+        code_challenge: F
       });
-      if (ue.status) {
-        const D = await be({
-          username: u,
-          password: k,
+      if (V.status) {
+        const N = await Fe({
+          username: y,
+          password: R,
           clientId: r,
           sessionExpiration: t,
-          nonce: I,
-          type: S,
-          code: ue.code,
-          code_verifier: ee
+          nonce: D,
+          type: b,
+          code: V.code,
+          code_verifier: J
         });
-        return D.status ? (s(D.idToken), c(D.accessToken), p(D.refreshToken), v({
+        return N.status ? (o && s(`auth.${r}`, N.accessToken, {
+          secure: !0,
+          domain: o
+        }), l(N.idToken), m(N.accessToken), S(N.refreshToken), i({
           isLoading: !1,
           isAuthenticated: !0,
           user: {
-            userId: D.userId,
-            username: u
+            userId: N.userId,
+            username: y
           },
           logoutReason: ""
-        }), !0) : (N(Te), !1);
+        }), !0) : (C(Je), !1);
       }
       return !1;
     }
-    const O = await be({
-      username: u,
-      password: k,
+    const U = await Fe({
+      username: y,
+      password: R,
       clientId: r,
       sessionExpiration: t,
-      nonce: I,
-      type: S
+      nonce: D,
+      type: b
     });
-    return O.status ? (s(O.idToken), c(O.accessToken), p(O.refreshToken), v({
+    return U.status ? (o && s(`auth.${r}`, U.accessToken, {
+      secure: !0,
+      domain: o
+    }), l(U.idToken), m(U.accessToken), S(U.refreshToken), i({
       isLoading: !1,
       isAuthenticated: !0,
       user: {
-        userId: O.userId,
-        username: u
+        userId: U.userId,
+        username: y
       }
-    }), !0) : (N(Te), !1);
-  }, We = async (u) => {
-    u == null || u.preventDefault(), await R(qt);
-  }, Je = async () => {
-    const { isAuthenticated: u, user: k } = P;
+    }), !0) : (C(Je), !1);
+  }, he = async (y) => {
+    y == null || y.preventDefault(), await I(Kr);
+  }, pe = async () => {
+    const { isAuthenticated: y, user: R } = w;
     try {
-      if (u && k && k.userId) {
-        if (i) {
-          const I = await H(i);
-          if (I && I.payload[y.USER_ID_KEY] !== "")
-            return i;
+      if (y && R && R.userId) {
+        if (p) {
+          const D = await Y(p);
+          if (D && D.payload[k.USER_ID_KEY] !== "")
+            return p;
         }
-        const S = await Le.refreshtoken({
+        const b = await g.refreshtoken({
           clientId: r,
-          userId: k.userId,
-          nonce: w
+          userId: R.userId,
+          nonce: j
         });
-        return S.status && S.status === "success" ? (c(S.newAccessToken), p(S.newRefreshToken), S.newAccessToken) : (await R(oe), "");
+        return b.status && b.status === "success" ? (o && s(`auth.${r}`, b.newAccessToken, {
+          secure: !0,
+          domain: o
+        }), m(b.newAccessToken), S(b.newRefreshToken), b.newAccessToken) : (await I(Te), "");
       }
-      return await R(oe), "";
+      return await I(Te), "";
     } catch {
-      return await R(oe), "";
+      return await I(Te), "";
     }
-  }, xe = () => {
-    if (P.isAuthenticated && n)
-      return n;
+  }, ye = () => {
+    if (w.isAuthenticated && c)
+      return c;
   };
-  return /* @__PURE__ */ Ye(
-    Ne.Provider,
+  return /* @__PURE__ */ gt(
+    st.Provider,
     {
-      value: { ...P, login: $e, logout: We, getAccessToken: Je, getIdToken: xe },
+      value: { ...w, login: fe, logout: he, getAccessToken: pe, getIdToken: ye },
       children: e
     }
   );
-}, ur = (e = Ne) => ze(e);
+}, eo = (e = st) => Ve(e);
 export {
-  q as AUTH_TYPES,
-  cr as AuthProvider,
-  ur as useAuth
+  ie as AUTH_TYPES,
+  Zr as AuthProvider,
+  eo as useAuth
 };