@versini/auth-provider 6.2.0 → 6.3.0

package/dist/index.js

@@ -1,49 +1,49 @@
 var _t = Object.defineProperty;
 var vt = (e, t, n) => t in e ? _t(e, t, { enumerable: !0, configurable: !0, writable: !0, value: n }) : e[t] = n;
-var B = (e, t, n) => vt(e, typeof t != "symbol" ? t + "" : t, n);
-import { jsx as ve } from "react/jsx-runtime";
-import kt, { useSyncExternalStore as Pt, useCallback as x, useEffect as Se, createContext as Ct, useReducer as Ot, useRef as ke, useContext as Nt } from "react";
+var z = (e, t, n) => vt(e, typeof t != "symbol" ? t + "" : t, n);
+import { jsx as Pe } from "react/jsx-runtime";
+import Pt, { useSyncExternalStore as Ct, useCallback as x, useEffect as Te, createContext as kt, useReducer as Ot, useRef as Ce, useContext as Nt } from "react";
 /*!
-  @versini/auth-provider v6.2.0
+  @versini/auth-provider v6.3.0
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_CLIENT__ || (window.__VERSINI_AUTH_CLIENT__ = {
-    version: "6.2.0",
-    buildTime: "07/18/2024 11:48 AM EDT",
+    version: "6.3.0",
+    buildTime: "07/21/2024 06:09 PM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
 } catch {
 }
-function k(e) {
+function P(e) {
   const t = new Uint8Array(e);
   let n = "";
   for (const a of t)
     n += String.fromCharCode(a);
   return btoa(n).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function oe(e) {
+function ie(e) {
   const t = e.replace(/-/g, "+").replace(/_/g, "/"), n = (4 - t.length % 4) % 4, r = t.padEnd(t.length + n, "="), a = atob(r), s = new ArrayBuffer(a.length), o = new Uint8Array(s);
   for (let i = 0; i < a.length; i++)
     o[i] = a.charCodeAt(i);
   return s;
 }
-function Te() {
+function Re() {
   return (window == null ? void 0 : window.PublicKeyCredential) !== void 0 && typeof window.PublicKeyCredential == "function";
 }
-function Ve(e) {
+function Ye(e) {
   const { id: t } = e;
   return {
     ...e,
-    id: oe(t),
+    id: ie(t),
     transports: e.transports
   };
 }
-function Ye(e) {
+function Ve(e) {
   return e === "localhost" || /^([a-z0-9]+(-[a-z0-9]+)*\.)+[a-z]{2,}$/i.test(e);
 }
-class b extends Error {
+class I extends Error {
   constructor({ message: t, code: n, cause: r, name: a }) {
     super(t, { cause: r }), this.name = a ?? r.name, this.code = n;
   }
@@ -55,70 +55,70 @@ function Dt({ error: e, options: t }) {
     throw Error("options was missing required publicKey property");
   if (e.name === "AbortError") {
     if (t.signal instanceof AbortSignal)
-      return new b({
+      return new I({
         message: "Registration ceremony was sent an abort signal",
         code: "ERROR_CEREMONY_ABORTED",
         cause: e
       });
   } else if (e.name === "ConstraintError") {
     if (((r = n.authenticatorSelection) == null ? void 0 : r.requireResidentKey) === !0)
-      return new b({
+      return new I({
         message: "Discoverable credentials were required but no available authenticator supported it",
         code: "ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",
         cause: e
       });
     if (((a = n.authenticatorSelection) == null ? void 0 : a.userVerification) === "required")
-      return new b({
+      return new I({
         message: "User verification was required but no available authenticator supported it",
         code: "ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",
         cause: e
       });
   } else {
     if (e.name === "InvalidStateError")
-      return new b({
+      return new I({
         message: "The authenticator was previously registered",
         code: "ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",
         cause: e
       });
     if (e.name === "NotAllowedError")
-      return new b({
+      return new I({
         message: e.message,
         code: "ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",
         cause: e
       });
     if (e.name === "NotSupportedError")
-      return n.pubKeyCredParams.filter((o) => o.type === "public-key").length === 0 ? new b({
+      return n.pubKeyCredParams.filter((o) => o.type === "public-key").length === 0 ? new I({
         message: 'No entry in pubKeyCredParams was of type "public-key"',
         code: "ERROR_MALFORMED_PUBKEYCREDPARAMS",
         cause: e
-      }) : new b({
+      }) : new I({
         message: "No available authenticator supported any of the specified pubKeyCredParams algorithms",
         code: "ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",
         cause: e
       });
     if (e.name === "SecurityError") {
       const s = window.location.hostname;
-      if (Ye(s)) {
+      if (Ve(s)) {
         if (n.rp.id !== s)
-          return new b({
+          return new I({
             message: `The RP ID "${n.rp.id}" is invalid for this domain`,
             code: "ERROR_INVALID_RP_ID",
             cause: e
           });
-      } else return new b({
+      } else return new I({
         message: `${window.location.hostname} is an invalid domain`,
         code: "ERROR_INVALID_DOMAIN",
         cause: e
       });
     } else if (e.name === "TypeError") {
       if (n.user.id.byteLength < 1 || n.user.id.byteLength > 64)
-        return new b({
+        return new I({
           message: "User ID was not between 1 and 64 characters",
           code: "ERROR_INVALID_USER_ID_LENGTH",
           cause: e
         });
     } else if (e.name === "UnknownError")
-      return new b({
+      return new I({
         message: "The authenticator was unable to process the specified options, or could not create a new credential",
         code: "ERROR_AUTHENTICATOR_GENERAL_ERROR",
         cause: e
@@ -143,22 +143,22 @@ class Ut {
   }
 }
 const je = new Ut(), $t = ["cross-platform", "platform"];
-function Je(e) {
+function Fe(e) {
   if (e && !($t.indexOf(e) < 0))
     return e;
 }
-async function Ht(e) {
+async function Kt(e) {
   var p;
-  if (!Te())
+  if (!Re())
     throw new Error("WebAuthn is not supported in this browser");
   const n = { publicKey: {
     ...e,
-    challenge: oe(e.challenge),
+    challenge: ie(e.challenge),
     user: {
       ...e.user,
-      id: oe(e.user.id)
+      id: ie(e.user.id)
     },
-    excludeCredentials: (p = e.excludeCredentials) == null ? void 0 : p.map(Ve)
+    excludeCredentials: (p = e.excludeCredentials) == null ? void 0 : p.map(Ye)
   } };
   n.signal = je.createNewAbortSignal();
   let r;
@@ -172,50 +172,50 @@ async function Ht(e) {
   const { id: a, rawId: s, response: o, type: i } = r;
   let u;
   typeof o.getTransports == "function" && (u = o.getTransports());
-  let y;
+  let f;
   if (typeof o.getPublicKeyAlgorithm == "function")
     try {
-      y = o.getPublicKeyAlgorithm();
+      f = o.getPublicKeyAlgorithm();
     } catch (l) {
-      he("getPublicKeyAlgorithm()", l);
+      fe("getPublicKeyAlgorithm()", l);
     }
-  let f;
+  let y;
   if (typeof o.getPublicKey == "function")
     try {
       const l = o.getPublicKey();
-      l !== null && (f = k(l));
+      l !== null && (y = P(l));
     } catch (l) {
-      he("getPublicKey()", l);
+      fe("getPublicKey()", l);
     }
   let h;
   if (typeof o.getAuthenticatorData == "function")
     try {
-      h = k(o.getAuthenticatorData());
+      h = P(o.getAuthenticatorData());
     } catch (l) {
-      he("getAuthenticatorData()", l);
+      fe("getAuthenticatorData()", l);
     }
   return {
     id: a,
-    rawId: k(s),
+    rawId: P(s),
     response: {
-      attestationObject: k(o.attestationObject),
-      clientDataJSON: k(o.clientDataJSON),
+      attestationObject: P(o.attestationObject),
+      clientDataJSON: P(o.clientDataJSON),
       transports: u,
-      publicKeyAlgorithm: y,
-      publicKey: f,
+      publicKeyAlgorithm: f,
+      publicKey: y,
       authenticatorData: h
     },
     type: i,
     clientExtensionResults: r.getClientExtensionResults(),
-    authenticatorAttachment: Je(r.authenticatorAttachment)
+    authenticatorAttachment: Fe(r.authenticatorAttachment)
   };
 }
-function he(e, t) {
+function fe(e, t) {
   console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
 `, t);
 }
-function Kt() {
-  if (!Te())
+function Ht() {
+  if (!Re())
     return new Promise((t) => t(!1));
   const e = window.PublicKeyCredential;
   return e.isConditionalMediationAvailable === void 0 ? new Promise((t) => t(!1)) : e.isConditionalMediationAvailable();
@@ -226,34 +226,34 @@ function Lt({ error: e, options: t }) {
     throw Error("options was missing required publicKey property");
   if (e.name === "AbortError") {
     if (t.signal instanceof AbortSignal)
-      return new b({
+      return new I({
         message: "Authentication ceremony was sent an abort signal",
         code: "ERROR_CEREMONY_ABORTED",
         cause: e
       });
   } else {
     if (e.name === "NotAllowedError")
-      return new b({
+      return new I({
         message: e.message,
         code: "ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",
         cause: e
       });
     if (e.name === "SecurityError") {
       const r = window.location.hostname;
-      if (Ye(r)) {
+      if (Ve(r)) {
         if (n.rpId !== r)
-          return new b({
+          return new I({
             message: `The RP ID "${n.rpId}" is invalid for this domain`,
             code: "ERROR_INVALID_RP_ID",
             cause: e
           });
-      } else return new b({
+      } else return new I({
         message: `${window.location.hostname} is an invalid domain`,
         code: "ERROR_INVALID_DOMAIN",
         cause: e
       });
     } else if (e.name === "UnknownError")
-      return new b({
+      return new I({
         message: "The authenticator was unable to process the specified options, or could not create a new assertion signature",
         code: "ERROR_AUTHENTICATOR_GENERAL_ERROR",
         cause: e
@@ -261,19 +261,19 @@ function Lt({ error: e, options: t }) {
   }
   return e;
 }
-async function xt(e, t = !1) {
+async function Wt(e, t = !1) {
   var h, p;
-  if (!Te())
+  if (!Re())
     throw new Error("WebAuthn is not supported in this browser");
   let n;
-  ((h = e.allowCredentials) == null ? void 0 : h.length) !== 0 && (n = (p = e.allowCredentials) == null ? void 0 : p.map(Ve));
+  ((h = e.allowCredentials) == null ? void 0 : h.length) !== 0 && (n = (p = e.allowCredentials) == null ? void 0 : p.map(Ye));
   const r = {
     ...e,
-    challenge: oe(e.challenge),
+    challenge: ie(e.challenge),
     allowCredentials: n
   }, a = {};
   if (t) {
-    if (!await Kt())
+    if (!await Ht())
       throw Error("Browser does not support WebAuthn autofill");
     if (document.querySelectorAll("input[autocomplete$='webauthn']").length < 1)
       throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');
@@ -288,36 +288,36 @@ async function xt(e, t = !1) {
   }
   if (!s)
     throw new Error("Authentication was not completed");
-  const { id: o, rawId: i, response: u, type: y } = s;
-  let f;
-  return u.userHandle && (f = k(u.userHandle)), {
+  const { id: o, rawId: i, response: u, type: f } = s;
+  let y;
+  return u.userHandle && (y = P(u.userHandle)), {
     id: o,
-    rawId: k(i),
+    rawId: P(i),
     response: {
-      authenticatorData: k(u.authenticatorData),
-      clientDataJSON: k(u.clientDataJSON),
-      signature: k(u.signature),
-      userHandle: f
+      authenticatorData: P(u.authenticatorData),
+      clientDataJSON: P(u.clientDataJSON),
+      signature: P(u.signature),
+      userHandle: y
     },
-    type: y,
+    type: f,
     clientExtensionResults: s.getClientExtensionResults(),
-    authenticatorAttachment: Je(s.authenticatorAttachment)
+    authenticatorAttachment: Fe(s.authenticatorAttachment)
   };
 }
 /*!
-  @versini/auth-common v2.12.1
+  @versini/auth-common v3.2.0
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_COMMON__ || (window.__VERSINI_AUTH_COMMON__ = {
-    version: "2.12.1",
-    buildTime: "07/18/2024 11:48 AM EDT",
+    version: "3.2.0",
+    buildTime: "07/21/2024 06:09 PM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
 } catch {
 }
-const Y = {
+const F = {
   ID_TOKEN: "id_token",
   ACCESS_TOKEN: "token",
   ID_AND_ACCESS_TOKEN: "id_token token",
@@ -326,15 +326,18 @@ const Y = {
   PASSKEY: "passkey"
 }, Be = {
   CLIENT_ID: "X-Auth-ClientId"
-}, I = {
+}, b = {
   ALG: "RS256",
   USER_ID_KEY: "sub",
   TOKEN_ID_KEY: "__raw",
   NONCE_KEY: "_nonce",
   USERNAME_KEY: "username",
   AUTH_TYPE_KEY: "auth_type",
+  EXPIRES_AT_KEY: "exp",
+  CREATED_AT_KEY: "iat",
+  SCOPES_KEY: "scopes",
   ISSUER: "gizmette.com"
-}, Mt = `-----BEGIN PUBLIC KEY-----
+}, xt = `-----BEGIN PUBLIC KEY-----
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6i3Jd9fY/3COqCw/m7
 w5PKyTYLGAI2I6SIIdpe6i6DOCbEkmDz7LdVsBqwNtVi8gvWYIj+8ol6rU3qu1v5
 i1Jd45GSK4kzkVdgCmQZbM5ak0KI99q5wsrAIzUd+LRJ2HRvWtr5IYdsIiXaQjle
@@ -342,12 +345,12 @@ aMwPFOIcJH+rKfFgNcHLcaS5syp7zU1ANwZ+trgR+DifBr8TLVkBynmNeTyhDm2+
 l0haqjMk0UoNPPE8iYBWUHQJJE1Dqstj65d6Eh5g64Pao25y4cmYJbKjiblIGEkE
 sjqybA9mARAqh9k/eiIopecWSiffNQTwVQVd2I9ZH3BalhEXHlqFgrjz51kFqg81
 awIDAQAB
------END PUBLIC KEY-----`, ce = {
+-----END PUBLIC KEY-----`, de = {
   AUTHENTICATE: "authenticate",
   CODE: "code",
   LOGOUT: "logout"
-}, ue = crypto, Fe = (e) => e instanceof CryptoKey, F = new TextEncoder(), le = new TextDecoder();
-function Wt(...e) {
+}, he = crypto, qe = (e) => e instanceof CryptoKey, Q = new TextEncoder(), B = new TextDecoder();
+function Mt(...e) {
   const t = e.reduce((a, { length: s }) => a + s, 0), n = new Uint8Array(t);
   let r = 0;
   for (const a of e)
@@ -359,16 +362,16 @@ const Gt = (e) => {
   for (let r = 0; r < t.length; r++)
     n[r] = t.charCodeAt(r);
   return n;
-}, re = (e) => {
+}, j = (e) => {
   let t = e;
-  t instanceof Uint8Array && (t = le.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
+  t instanceof Uint8Array && (t = B.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
   try {
     return Gt(t);
   } catch {
     throw new TypeError("The input to be decoded is not correctly encoded.");
   }
 };
-let D = class extends Error {
+let U = class extends Error {
   static get code() {
     return "ERR_JOSE_GENERIC";
   }
@@ -376,14 +379,14 @@ let D = class extends Error {
     var n;
     super(t), this.code = "ERR_JOSE_GENERIC", this.name = this.constructor.name, (n = Error.captureStackTrace) == null || n.call(Error, this, this.constructor);
   }
-}, v = class extends D {
+}, v = class extends U {
   static get code() {
     return "ERR_JWT_CLAIM_VALIDATION_FAILED";
   }
   constructor(t, n, r = "unspecified", a = "unspecified") {
     super(t), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = r, this.reason = a, this.payload = n;
   }
-}, Pe = class extends D {
+}, ke = class extends U {
   static get code() {
     return "ERR_JWT_EXPIRED";
   }
@@ -391,7 +394,7 @@ let D = class extends Error {
     super(t), this.code = "ERR_JWT_EXPIRED", this.claim = r, this.reason = a, this.payload = n;
   }
 };
-class Vt extends D {
+class Jt extends U {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_ALG_NOT_ALLOWED";
   }
@@ -399,7 +402,7 @@ class Vt extends D {
     return "ERR_JOSE_ALG_NOT_ALLOWED";
   }
 }
-let O = class extends D {
+let N = class extends U {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_NOT_SUPPORTED";
   }
@@ -407,7 +410,7 @@ let O = class extends D {
     return "ERR_JOSE_NOT_SUPPORTED";
   }
 };
-class R extends D {
+class R extends U {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_INVALID";
   }
@@ -415,7 +418,7 @@ class R extends D {
     return "ERR_JWS_INVALID";
   }
 }
-let qe = class extends D {
+let k = class extends U {
   constructor() {
     super(...arguments), this.code = "ERR_JWT_INVALID";
   }
@@ -423,7 +426,7 @@ let qe = class extends D {
     return "ERR_JWT_INVALID";
   }
 };
-class Yt extends D {
+class Yt extends U {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED", this.message = "signature verification failed";
   }
@@ -431,16 +434,16 @@ class Yt extends D {
     return "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
   }
 }
-function P(e, t = "algorithm.name") {
+function C(e, t = "algorithm.name") {
   return new TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`);
 }
-function q(e, t) {
+function X(e, t) {
   return e.name === t;
 }
-function pe(e) {
+function ye(e) {
   return parseInt(e.name.slice(4), 10);
 }
-function jt(e) {
+function Vt(e) {
   switch (e) {
     case "ES256":
       return "P-256";
@@ -452,7 +455,7 @@ function jt(e) {
       throw new Error("unreachable");
   }
 }
-function Jt(e, t) {
+function jt(e, t) {
   if (t.length && !t.some((n) => e.usages.includes(n))) {
     let n = "CryptoKey does not support this operation, its usages must include ";
     if (t.length > 2) {
@@ -462,57 +465,57 @@ function Jt(e, t) {
     throw new TypeError(n);
   }
 }
-function Bt(e, t, ...n) {
+function Ft(e, t, ...n) {
   switch (t) {
     case "HS256":
     case "HS384":
     case "HS512": {
-      if (!q(e.algorithm, "HMAC"))
-        throw P("HMAC");
+      if (!X(e.algorithm, "HMAC"))
+        throw C("HMAC");
       const r = parseInt(t.slice(2), 10);
-      if (pe(e.algorithm.hash) !== r)
-        throw P(`SHA-${r}`, "algorithm.hash");
+      if (ye(e.algorithm.hash) !== r)
+        throw C(`SHA-${r}`, "algorithm.hash");
       break;
     }
     case "RS256":
     case "RS384":
     case "RS512": {
-      if (!q(e.algorithm, "RSASSA-PKCS1-v1_5"))
-        throw P("RSASSA-PKCS1-v1_5");
+      if (!X(e.algorithm, "RSASSA-PKCS1-v1_5"))
+        throw C("RSASSA-PKCS1-v1_5");
       const r = parseInt(t.slice(2), 10);
-      if (pe(e.algorithm.hash) !== r)
-        throw P(`SHA-${r}`, "algorithm.hash");
+      if (ye(e.algorithm.hash) !== r)
+        throw C(`SHA-${r}`, "algorithm.hash");
       break;
     }
     case "PS256":
     case "PS384":
     case "PS512": {
-      if (!q(e.algorithm, "RSA-PSS"))
-        throw P("RSA-PSS");
+      if (!X(e.algorithm, "RSA-PSS"))
+        throw C("RSA-PSS");
       const r = parseInt(t.slice(2), 10);
-      if (pe(e.algorithm.hash) !== r)
-        throw P(`SHA-${r}`, "algorithm.hash");
+      if (ye(e.algorithm.hash) !== r)
+        throw C(`SHA-${r}`, "algorithm.hash");
       break;
     }
     case "EdDSA": {
       if (e.algorithm.name !== "Ed25519" && e.algorithm.name !== "Ed448")
-        throw P("Ed25519 or Ed448");
+        throw C("Ed25519 or Ed448");
       break;
     }
     case "ES256":
     case "ES384":
     case "ES512": {
-      if (!q(e.algorithm, "ECDSA"))
-        throw P("ECDSA");
-      const r = jt(t);
+      if (!X(e.algorithm, "ECDSA"))
+        throw C("ECDSA");
+      const r = Vt(t);
       if (e.algorithm.namedCurve !== r)
-        throw P(r, "algorithm.namedCurve");
+        throw C(r, "algorithm.namedCurve");
       break;
     }
     default:
       throw new TypeError("CryptoKey does not support this operation");
   }
-  Jt(e, n);
+  jt(e, n);
 }
 function ze(e, t, ...n) {
   var r;
@@ -522,11 +525,11 @@ function ze(e, t, ...n) {
   } else n.length === 2 ? e += `one of type ${n[0]} or ${n[1]}.` : e += `of type ${n[0]}.`;
   return t == null ? e += ` Received ${t}` : typeof t == "function" && t.name ? e += ` Received function ${t.name}` : typeof t == "object" && t != null && (r = t.constructor) != null && r.name && (e += ` Received an instance of ${t.constructor.name}`), e;
 }
-const Ce = (e, ...t) => ze("Key must be ", e, ...t);
+const Oe = (e, ...t) => ze("Key must be ", e, ...t);
 function Qe(e, t, ...n) {
   return ze(`Key for the ${e} algorithm must be `, t, ...n);
 }
-const Xe = (e) => Fe(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", se = ["CryptoKey"], Ft = (...e) => {
+const Xe = (e) => qe(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", ce = ["CryptoKey"], Bt = (...e) => {
   const t = e.filter(Boolean);
   if (t.length === 0 || t.length === 1)
     return !0;
@@ -548,7 +551,7 @@ const Xe = (e) => Fe(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) ===
 function qt(e) {
   return typeof e == "object" && e !== null;
 }
-function Ae(e) {
+function ue(e) {
   if (!qt(e) || Object.prototype.toString.call(e) !== "[object Object]")
     return !1;
   if (Object.getPrototypeOf(e) === null)
@@ -590,7 +593,7 @@ function Qt(e) {
           }, n = e.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
           break;
         default:
-          throw new O('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new N('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
@@ -612,7 +615,7 @@ function Qt(e) {
           t = { name: "ECDH", namedCurve: e.crv }, n = e.d ? ["deriveBits"] : [];
           break;
         default:
-          throw new O('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new N('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
@@ -628,12 +631,12 @@ function Qt(e) {
           t = { name: e.crv }, n = e.d ? ["deriveBits"] : [];
           break;
         default:
-          throw new O('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new N('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
     default:
-      throw new O('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
+      throw new N('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
   }
   return { algorithm: t, keyUsages: n };
 }
@@ -645,9 +648,9 @@ const Xt = async (e) => {
     e.ext ?? !1,
     e.key_ops ?? n
   ], a = { ...e };
-  return delete a.alg, delete a.use, ue.subtle.importKey("jwk", a, ...r);
-}, Ze = (e) => re(e);
-let fe, ye;
+  return delete a.alg, delete a.use, he.subtle.importKey("jwk", a, ...r);
+}, Ze = (e) => j(e);
+let ge, me;
 const et = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", tt = async (e, t, n, r) => {
   let a = e.get(t);
   if (a != null && a[r])
@@ -657,40 +660,40 @@ const et = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject",
 }, Zt = (e, t) => {
   if (et(e)) {
     let n = e.export({ format: "jwk" });
-    return delete n.d, delete n.dp, delete n.dq, delete n.p, delete n.q, delete n.qi, n.k ? Ze(n.k) : (ye || (ye = /* @__PURE__ */ new WeakMap()), tt(ye, e, n, t));
+    return delete n.d, delete n.dp, delete n.dq, delete n.p, delete n.q, delete n.qi, n.k ? Ze(n.k) : (me || (me = /* @__PURE__ */ new WeakMap()), tt(me, e, n, t));
   }
   return e;
 }, en = (e, t) => {
   if (et(e)) {
     let n = e.export({ format: "jwk" });
-    return n.k ? Ze(n.k) : (fe || (fe = /* @__PURE__ */ new WeakMap()), tt(fe, e, n, t));
+    return n.k ? Ze(n.k) : (ge || (ge = /* @__PURE__ */ new WeakMap()), tt(ge, e, n, t));
   }
   return e;
-}, tn = { normalizePublicKey: Zt, normalizePrivateKey: en }, C = (e, t, n = 0) => {
+}, tn = { normalizePublicKey: Zt, normalizePrivateKey: en }, O = (e, t, n = 0) => {
   n === 0 && (t.unshift(t.length), t.unshift(6));
   const r = e.indexOf(t[0], n);
   if (r === -1)
     return !1;
   const a = e.subarray(r, r + t.length);
-  return a.length !== t.length ? !1 : a.every((s, o) => s === t[o]) || C(e, t, r + 1);
-}, Oe = (e) => {
+  return a.length !== t.length ? !1 : a.every((s, o) => s === t[o]) || O(e, t, r + 1);
+}, Ne = (e) => {
   switch (!0) {
-    case C(e, [42, 134, 72, 206, 61, 3, 1, 7]):
+    case O(e, [42, 134, 72, 206, 61, 3, 1, 7]):
       return "P-256";
-    case C(e, [43, 129, 4, 0, 34]):
+    case O(e, [43, 129, 4, 0, 34]):
       return "P-384";
-    case C(e, [43, 129, 4, 0, 35]):
+    case O(e, [43, 129, 4, 0, 35]):
       return "P-521";
-    case C(e, [43, 101, 110]):
+    case O(e, [43, 101, 110]):
       return "X25519";
-    case C(e, [43, 101, 111]):
+    case O(e, [43, 101, 111]):
       return "X448";
-    case C(e, [43, 101, 112]):
+    case O(e, [43, 101, 112]):
       return "Ed25519";
-    case C(e, [43, 101, 113]):
+    case O(e, [43, 101, 113]):
       return "Ed448";
     default:
-      throw new O("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
+      throw new N("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
   }
 }, nn = async (e, t, n, r, a) => {
   let s, o;
@@ -728,39 +731,39 @@ const et = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject",
     case "ECDH-ES+A128KW":
     case "ECDH-ES+A192KW":
     case "ECDH-ES+A256KW": {
-      const u = Oe(i);
+      const u = Ne(i);
       s = u.startsWith("P-") ? { name: "ECDH", namedCurve: u } : { name: u }, o = [];
       break;
     }
     case "EdDSA":
-      s = { name: Oe(i) }, o = ["verify"];
+      s = { name: Ne(i) }, o = ["verify"];
       break;
     default:
-      throw new O('Invalid or unsupported "alg" (Algorithm) value');
+      throw new N('Invalid or unsupported "alg" (Algorithm) value');
   }
-  return ue.subtle.importKey(t, i, s, !1, o);
+  return he.subtle.importKey(t, i, s, !1, o);
 }, rn = (e, t, n) => nn(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
 async function an(e, t, n) {
   if (e.indexOf("-----BEGIN PUBLIC KEY-----") !== 0)
     throw new TypeError('"spki" must be SPKI formatted string');
   return rn(e, t);
 }
-const ae = (e) => e == null ? void 0 : e[Symbol.toStringTag], on = (e, t) => {
+const se = (e) => e == null ? void 0 : e[Symbol.toStringTag], on = (e, t) => {
   if (!(t instanceof Uint8Array)) {
     if (!Xe(t))
-      throw new TypeError(Qe(e, t, ...se, "Uint8Array"));
+      throw new TypeError(Qe(e, t, ...ce, "Uint8Array"));
     if (t.type !== "secret")
-      throw new TypeError(`${ae(t)} instances for symmetric algorithms must be of type "secret"`);
+      throw new TypeError(`${se(t)} instances for symmetric algorithms must be of type "secret"`);
   }
 }, sn = (e, t, n) => {
   if (!Xe(t))
-    throw new TypeError(Qe(e, t, ...se));
+    throw new TypeError(Qe(e, t, ...ce));
   if (t.type === "secret")
-    throw new TypeError(`${ae(t)} instances for asymmetric algorithms must not be of type "secret"`);
+    throw new TypeError(`${se(t)} instances for asymmetric algorithms must not be of type "secret"`);
   if (t.algorithm && n === "verify" && t.type === "private")
-    throw new TypeError(`${ae(t)} instances for asymmetric algorithm verifying must be of type "public"`);
+    throw new TypeError(`${se(t)} instances for asymmetric algorithm verifying must be of type "public"`);
   if (t.algorithm && n === "encrypt" && t.type === "private")
-    throw new TypeError(`${ae(t)} instances for asymmetric algorithm encryption must be of type "public"`);
+    throw new TypeError(`${se(t)} instances for asymmetric algorithm encryption must be of type "public"`);
 }, cn = (e, t, n) => {
   e.startsWith("HS") || e === "dir" || e.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(e) ? on(e, t) : sn(e, t, n);
 };
@@ -775,7 +778,7 @@ function un(e, t, n, r, a) {
   n !== void 0 ? s = new Map([...Object.entries(n), ...t.entries()]) : s = t;
   for (const o of r.crit) {
     if (!s.has(o))
-      throw new O(`Extension Header Parameter "${o}" is not recognized`);
+      throw new N(`Extension Header Parameter "${o}" is not recognized`);
     if (a[o] === void 0)
       throw new e(`Extension Header Parameter "${o}" is missing`);
     if (s.get(o) && r[o] === void 0)
@@ -811,31 +814,31 @@ function dn(e, t) {
     case "EdDSA":
       return { name: t.name };
     default:
-      throw new O(`alg ${e} is not supported either by JOSE or your javascript runtime`);
+      throw new N(`alg ${e} is not supported either by JOSE or your javascript runtime`);
   }
 }
 async function hn(e, t, n) {
-  if (t = await tn.normalizePublicKey(t, e), Fe(t))
-    return Bt(t, e, n), t;
+  if (t = await tn.normalizePublicKey(t, e), qe(t))
+    return Ft(t, e, n), t;
   if (t instanceof Uint8Array) {
     if (!e.startsWith("HS"))
-      throw new TypeError(Ce(t, ...se));
-    return ue.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [n]);
+      throw new TypeError(Oe(t, ...ce));
+    return he.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [n]);
   }
-  throw new TypeError(Ce(t, ...se, "Uint8Array"));
+  throw new TypeError(Oe(t, ...ce, "Uint8Array"));
 }
 const pn = async (e, t, n, r) => {
   const a = await hn(e, t, "verify");
   zt(e, a);
   const s = dn(e, a.algorithm);
   try {
-    return await ue.subtle.verify(s, a, n, r);
+    return await he.subtle.verify(s, a, n, r);
   } catch {
     return !1;
   }
 };
 async function fn(e, t, n) {
-  if (!Ae(e))
+  if (!ue(e))
     throw new R("Flattened JWS must be an object");
   if (e.protected === void 0 && e.header === void 0)
     throw new R('Flattened JWS must have either of the "protected" or "header" members');
@@ -845,17 +848,17 @@ async function fn(e, t, n) {
     throw new R("JWS Payload missing");
   if (typeof e.signature != "string")
     throw new R("JWS Signature missing or incorrect type");
-  if (e.header !== void 0 && !Ae(e.header))
+  if (e.header !== void 0 && !ue(e.header))
     throw new R("JWS Unprotected Header incorrect type");
   let r = {};
   if (e.protected)
     try {
-      const d = re(e.protected);
-      r = JSON.parse(le.decode(d));
+      const d = j(e.protected);
+      r = JSON.parse(B.decode(d));
     } catch {
       throw new R("JWS Protected Header is invalid");
     }
-  if (!Ft(r, e.header))
+  if (!Bt(r, e.header))
     throw new R("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
   const a = {
     ...r,
@@ -869,36 +872,36 @@ async function fn(e, t, n) {
     throw new R('JWS "alg" (Algorithm) Header Parameter missing or invalid');
   const u = n && ln("algorithms", n.algorithms);
   if (u && !u.has(i))
-    throw new Vt('"alg" (Algorithm) Header Parameter value not allowed');
+    throw new Jt('"alg" (Algorithm) Header Parameter value not allowed');
   if (o) {
     if (typeof e.payload != "string")
       throw new R("JWS Payload must be a string");
   } else if (typeof e.payload != "string" && !(e.payload instanceof Uint8Array))
     throw new R("JWS Payload must be a string or an Uint8Array instance");
-  let y = !1;
-  typeof t == "function" && (t = await t(r, e), y = !0), cn(i, t, "verify");
-  const f = Wt(F.encode(e.protected ?? ""), F.encode("."), typeof e.payload == "string" ? F.encode(e.payload) : e.payload);
+  let f = !1;
+  typeof t == "function" && (t = await t(r, e), f = !0), cn(i, t, "verify");
+  const y = Mt(Q.encode(e.protected ?? ""), Q.encode("."), typeof e.payload == "string" ? Q.encode(e.payload) : e.payload);
   let h;
   try {
-    h = re(e.signature);
+    h = j(e.signature);
   } catch {
     throw new R("Failed to base64url decode the signature");
   }
-  if (!await pn(i, t, h, f))
+  if (!await pn(i, t, h, y))
     throw new Yt();
   let p;
   if (o)
     try {
-      p = re(e.payload);
+      p = j(e.payload);
     } catch {
       throw new R("Failed to base64url decode the payload");
     }
-  else typeof e.payload == "string" ? p = F.encode(e.payload) : p = e.payload;
+  else typeof e.payload == "string" ? p = Q.encode(e.payload) : p = e.payload;
   const l = { payload: p };
-  return e.protected !== void 0 && (l.protectedHeader = r), e.header !== void 0 && (l.unprotectedHeader = e.header), y ? { ...l, key: t } : l;
+  return e.protected !== void 0 && (l.protectedHeader = r), e.header !== void 0 && (l.unprotectedHeader = e.header), f ? { ...l, key: t } : l;
 }
 async function yn(e, t, n) {
-  if (e instanceof Uint8Array && (e = le.decode(e)), typeof e != "string")
+  if (e instanceof Uint8Array && (e = B.decode(e)), typeof e != "string")
     throw new R("Compact JWS must be a string or Uint8Array");
   const { 0: r, 1: a, 2: s, length: o } = e.split(".");
   if (o !== 3)
@@ -906,7 +909,7 @@ async function yn(e, t, n) {
   const i = await fn({ payload: a, protected: r, signature: s }, t, n), u = { payload: i.payload, protectedHeader: i.protectedHeader };
   return typeof t == "function" ? { ...u, key: i.key } : u;
 }
-const gn = (e) => Math.floor(e.getTime() / 1e3), nt = 60, rt = nt * 60, Re = rt * 24, mn = Re * 7, wn = Re * 365.25, En = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, Ne = (e) => {
+const gn = (e) => Math.floor(e.getTime() / 1e3), nt = 60, rt = nt * 60, be = rt * 24, mn = be * 7, wn = be * 365.25, En = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, De = (e) => {
   const t = En.exec(e);
   if (!t || t[4] && t[1])
     throw new TypeError("Invalid time period format");
@@ -937,7 +940,7 @@ const gn = (e) => Math.floor(e.getTime() / 1e3), nt = 60, rt = nt * 60, Re = rt
     case "day":
     case "days":
     case "d":
-      a = Math.round(n * Re);
+      a = Math.round(n * be);
       break;
     case "week":
     case "weeks":
@@ -949,20 +952,20 @@ const gn = (e) => Math.floor(e.getTime() / 1e3), nt = 60, rt = nt * 60, Re = rt
       break;
   }
   return t[1] === "-" || t[4] === "ago" ? -a : a;
-}, De = (e) => e.toLowerCase().replace(/^application\//, ""), Sn = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, An = (e, t, n = {}) => {
+}, Ue = (e) => e.toLowerCase().replace(/^application\//, ""), Sn = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, An = (e, t, n = {}) => {
   let r;
   try {
-    r = JSON.parse(le.decode(t));
+    r = JSON.parse(B.decode(t));
   } catch {
   }
-  if (!Ae(r))
-    throw new qe("JWT Claims Set must be a top-level JSON object");
+  if (!ue(r))
+    throw new k("JWT Claims Set must be a top-level JSON object");
   const { typ: a } = n;
-  if (a && (typeof e.typ != "string" || De(e.typ) !== De(a)))
+  if (a && (typeof e.typ != "string" || Ue(e.typ) !== Ue(a)))
     throw new v('unexpected "typ" JWT header value', r, "typ", "check_failed");
-  const { requiredClaims: s = [], issuer: o, subject: i, audience: u, maxTokenAge: y } = n, f = [...s];
-  y !== void 0 && f.push("iat"), u !== void 0 && f.push("aud"), i !== void 0 && f.push("sub"), o !== void 0 && f.push("iss");
-  for (const d of new Set(f.reverse()))
+  const { requiredClaims: s = [], issuer: o, subject: i, audience: u, maxTokenAge: f } = n, y = [...s];
+  f !== void 0 && y.push("iat"), u !== void 0 && y.push("aud"), i !== void 0 && y.push("sub"), o !== void 0 && y.push("iss");
+  for (const d of new Set(y.reverse()))
     if (!(d in r))
       throw new v(`missing required "${d}" claim`, r, d, "missing");
   if (o && !(Array.isArray(o) ? o : [o]).includes(r.iss))
@@ -974,7 +977,7 @@ const gn = (e) => Math.floor(e.getTime() / 1e3), nt = 60, rt = nt * 60, Re = rt
   let h;
   switch (typeof n.clockTolerance) {
     case "string":
-      h = Ne(n.clockTolerance);
+      h = De(n.clockTolerance);
       break;
     case "number":
       h = n.clockTolerance;
@@ -986,7 +989,7 @@ const gn = (e) => Math.floor(e.getTime() / 1e3), nt = 60, rt = nt * 60, Re = rt
       throw new TypeError("Invalid clockTolerance option type");
   }
   const { currentDate: p } = n, l = gn(p || /* @__PURE__ */ new Date());
-  if ((r.iat !== void 0 || y) && typeof r.iat != "number")
+  if ((r.iat !== void 0 || f) && typeof r.iat != "number")
     throw new v('"iat" claim must be a number', r, "iat", "invalid");
   if (r.nbf !== void 0) {
     if (typeof r.nbf != "number")
@@ -998,12 +1001,12 @@ const gn = (e) => Math.floor(e.getTime() / 1e3), nt = 60, rt = nt * 60, Re = rt
     if (typeof r.exp != "number")
       throw new v('"exp" claim must be a number', r, "exp", "invalid");
     if (r.exp <= l - h)
-      throw new Pe('"exp" claim timestamp check failed', r, "exp", "check_failed");
+      throw new ke('"exp" claim timestamp check failed', r, "exp", "check_failed");
   }
-  if (y) {
-    const d = l - r.iat, m = typeof y == "number" ? y : Ne(y);
+  if (f) {
+    const d = l - r.iat, m = typeof f == "number" ? f : De(f);
     if (d - h > m)
-      throw new Pe('"iat" claim timestamp check failed (too far in the past)', r, "iat", "check_failed");
+      throw new ke('"iat" claim timestamp check failed (too far in the past)', r, "iat", "check_failed");
     if (d < 0 - h)
       throw new v('"iat" claim timestamp check failed (it should be in the past)', r, "iat", "check_failed");
   }
@@ -1013,81 +1016,123 @@ async function Tn(e, t, n) {
   var r;
   const a = await yn(e, t, n);
   if ((r = a.protectedHeader.crit) != null && r.includes("b64") && a.protectedHeader.b64 === !1)
-    throw new qe("JWTs MUST NOT use unencoded payload");
+    throw new k("JWTs MUST NOT use unencoded payload");
   const s = { payload: An(a.protectedHeader, a.payload, n), protectedHeader: a.protectedHeader };
   return typeof t == "function" ? { ...s, key: a.key } : s;
 }
-const j = async (e) => {
+const Rn = j;
+function bn(e) {
+  if (typeof e != "string")
+    throw new k("JWTs must use Compact JWS serialization, JWT must be a string");
+  const { 1: t, length: n } = e.split(".");
+  if (n === 5)
+    throw new k("Only JWTs using Compact JWS serialization can be decoded");
+  if (n !== 3)
+    throw new k("Invalid JWT");
+  if (!t)
+    throw new k("JWTs must contain a payload");
+  let r;
+  try {
+    r = Rn(t);
+  } catch {
+    throw new k("Failed to base64url decode the payload");
+  }
+  let a;
+  try {
+    a = JSON.parse(B.decode(r));
+  } catch {
+    throw new k("Failed to parse the decoded payload as JSON");
+  }
+  if (!ue(a))
+    throw new k("Invalid JWT Claims Set");
+  return a;
+}
+const M = async (e) => {
   try {
-    const t = I.ALG, n = await an(Mt, t);
+    const t = b.ALG, n = await an(xt, t);
     return await Tn(e, n, {
-      issuer: I.ISSUER
+      issuer: b.ISSUER
     });
   } catch {
     return;
   }
+}, In = (e) => {
+  try {
+    return bn(e);
+  } catch {
+    return;
+  }
 };
 var A = [];
-for (var ge = 0; ge < 256; ++ge)
-  A.push((ge + 256).toString(16).slice(1));
-function Rn(e, t = 0) {
+for (var we = 0; we < 256; ++we)
+  A.push((we + 256).toString(16).slice(1));
+function _n(e, t = 0) {
   return (A[e[t + 0]] + A[e[t + 1]] + A[e[t + 2]] + A[e[t + 3]] + "-" + A[e[t + 4]] + A[e[t + 5]] + "-" + A[e[t + 6]] + A[e[t + 7]] + "-" + A[e[t + 8]] + A[e[t + 9]] + "-" + A[e[t + 10]] + A[e[t + 11]] + A[e[t + 12]] + A[e[t + 13]] + A[e[t + 14]] + A[e[t + 15]]).toLowerCase();
 }
-var z, bn = new Uint8Array(16);
-function In() {
-  if (!z && (z = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !z))
+var Z, vn = new Uint8Array(16);
+function Pn() {
+  if (!Z && (Z = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !Z))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return z(bn);
+  return Z(vn);
 }
-var _n = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
-const Ue = {
-  randomUUID: _n
+var Cn = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
+const $e = {
+  randomUUID: Cn
 };
-function $e(e, t, n) {
-  if (Ue.randomUUID && !t && !e)
-    return Ue.randomUUID();
+function Ke(e, t, n) {
+  if ($e.randomUUID && !t && !e)
+    return $e.randomUUID();
   e = e || {};
-  var r = e.random || (e.rng || In)();
-  return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, Rn(r);
+  var r = e.random || (e.rng || Pn)();
+  return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, _n(r);
 }
-const He = globalThis.crypto, vn = (e) => `${$e()}${$e()}`.slice(0, e), kn = (e) => btoa(
+const He = globalThis.crypto, kn = (e) => `${Ke()}${Ke()}`.slice(0, e), On = (e) => btoa(
   [...new Uint8Array(e)].map((t) => String.fromCharCode(t)).join("")
 );
-async function Pn(e) {
+async function Nn(e) {
   if (!He.subtle)
     throw new Error(
       "crypto.subtle is available only in secure contexts (HTTPS)."
     );
   const t = new TextEncoder().encode(e), n = await He.subtle.digest("SHA-256", t);
-  return kn(n).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  return On(n).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-async function Cn(e) {
-  const n = vn(43), r = await Pn(n);
+async function Dn(e) {
+  const n = kn(43), r = await Nn(n);
   return {
     code_verifier: n,
     code_challenge: r
   };
 }
+const Cr = async (e, t) => {
+  var n, r;
+  const a = await M(e);
+  if ((r = a && ((n = a == null ? void 0 : a.payload) == null ? void 0 : n[b.SCOPES_KEY])) != null && r.length) {
+    const s = a.payload[b.SCOPES_KEY];
+    return t.every((o) => s.includes(o));
+  }
+  return !1;
+};
 function at(e, t) {
   window.dispatchEvent(new StorageEvent("storage", { key: e, newValue: t }));
 }
-const Ke = (e, t) => {
+const Le = (e, t) => {
   const n = JSON.stringify(
     typeof t == "function" ? t() : t
   );
   window.localStorage.setItem(e, n), at(e, n);
-}, On = (e) => {
+}, Un = (e) => {
   window.localStorage.removeItem(e), at(e, null);
-}, Le = (e) => window.localStorage.getItem(e), Nn = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
-function Q({
+}, We = (e) => window.localStorage.getItem(e), $n = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
+function ee({
   key: e,
   initialValue: t
 }) {
-  const n = Pt(Nn, () => Le(e)), r = x(
+  const n = Ct($n, () => We(e)), r = x(
     (o) => {
       try {
         const i = typeof o == "function" ? o(JSON.parse(n)) : o;
-        i == null ? On(e) : Ke(e, i);
+        i == null ? Un(e) : Le(e, i);
       } catch (i) {
         console.warn(i);
       }
@@ -1098,36 +1143,36 @@ function Q({
   }, [t, r]), s = x(() => {
     r(null);
   }, [r]);
-  return Se(() => {
+  return Te(() => {
     try {
-      Le(e) === null && typeof t < "u" && Ke(e, t);
+      We(e) === null && typeof t < "u" && Le(e, t);
     } catch (o) {
       console.warn(o);
     }
   }, [e, t]), [n ? JSON.parse(n) : null, r, a, s];
 }
 var T = [];
-for (var me = 0; me < 256; ++me)
-  T.push((me + 256).toString(16).slice(1));
-function Dn(e, t = 0) {
+for (var Ee = 0; Ee < 256; ++Ee)
+  T.push((Ee + 256).toString(16).slice(1));
+function Kn(e, t = 0) {
   return (T[e[t + 0]] + T[e[t + 1]] + T[e[t + 2]] + T[e[t + 3]] + "-" + T[e[t + 4]] + T[e[t + 5]] + "-" + T[e[t + 6]] + T[e[t + 7]] + "-" + T[e[t + 8]] + T[e[t + 9]] + "-" + T[e[t + 10]] + T[e[t + 11]] + T[e[t + 12]] + T[e[t + 13]] + T[e[t + 14]] + T[e[t + 15]]).toLowerCase();
 }
-var X, Un = new Uint8Array(16);
-function $n() {
-  if (!X && (X = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !X))
+var te, Hn = new Uint8Array(16);
+function Ln() {
+  if (!te && (te = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !te))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return X(Un);
+  return te(Hn);
 }
-var Hn = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
+var Wn = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
 const xe = {
-  randomUUID: Hn
+  randomUUID: Wn
 };
-function we(e, t, n) {
+function Se(e, t, n) {
   if (xe.randomUUID && !t && !e)
     return xe.randomUUID();
   e = e || {};
-  var r = e.random || (e.rng || $n)();
-  return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, Dn(r);
+  var r = e.random || (e.rng || Ln)();
+  return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, Kn(r);
 }
 /*!
   @versini/ui-fingerprint v1.0.1
@@ -1142,7 +1187,7 @@ try {
   });
 } catch {
 }
-const Kn = (e) => Array.from(e).map((t) => t.toString(16).padStart(2, "0")).join(""), ot = async (e) => {
+const xn = (e) => Array.from(e).map((t) => t.toString(16).padStart(2, "0")).join(""), ot = async (e) => {
   if (e === "")
     return "";
   const t = new TextEncoder().encode(e), n = await crypto.subtle.digest("SHA-256", t);
@@ -1151,26 +1196,26 @@ const Kn = (e) => Array.from(e).map((t) => t.toString(16).padStart(2, "0")).join
 function Me(e, t) {
   return new Promise((n) => setTimeout(n, e, t));
 }
-async function Ln(e, t, n = 50) {
+async function Mn(e, t, n = 50) {
   var r, a, s;
   const o = document;
   for (; !o.body; )
     await Me(n);
   const i = o.createElement("iframe");
   try {
-    for (await new Promise((u, y) => {
-      let f = !1;
+    for (await new Promise((u, f) => {
+      let y = !1;
       const h = () => {
-        f = !0, u();
+        y = !0, u();
       }, p = (m) => {
-        f = !0, y(m);
+        y = !0, f(m);
       };
       i.onload = h, i.onerror = p;
       const { style: l } = i;
       l.setProperty("display", "block", "important"), l.position = "absolute", l.top = "0", l.left = "0", l.visibility = "hidden", i.src = "about:blank", o.body.appendChild(i);
       const d = () => {
         var m, S;
-        f || (((S = (m = i.contentWindow) == null ? void 0 : m.document) == null ? void 0 : S.readyState) === "complete" ? h() : setTimeout(d, 10));
+        y || (((S = (m = i.contentWindow) == null ? void 0 : m.document) == null ? void 0 : S.readyState) === "complete" ? h() : setTimeout(d, 10));
       };
       d();
     }); !((a = (r = i.contentWindow) == null ? void 0 : r.document) != null && a.body); )
@@ -1180,14 +1225,14 @@ async function Ln(e, t, n = 50) {
     (s = i.parentNode) == null || s.removeChild(i);
   }
 }
-const xn = {
+const Gn = {
   audio: {
     sampleHash: "",
     oscillator: "",
     maxChannels: 0,
     channelCountMode: ""
   }
-}, Mn = async (e) => new Promise((t) => {
+}, Jn = async (e) => new Promise((t) => {
   try {
     const n = new window.OfflineAudioContext(1, 5e3, 44100), r = n.createBufferSource(), a = n.createOscillator();
     a.frequency.value = 1e3;
@@ -1196,7 +1241,7 @@ const xn = {
       const i = o.renderedBuffer.getChannelData(0);
       a.disconnect(), s.disconnect(), t({
         audio: {
-          sampleHash: Kn(i),
+          sampleHash: xn(i),
           oscillator: a.type,
           maxChannels: n.destination.maxChannelCount,
           channelCountMode: r.channelCountMode
@@ -1213,16 +1258,16 @@ const xn = {
       }
     });
   }
-}), st = { browser: "" }, Wn = async (e) => typeof navigator > "u" ? st : { browser: navigator.userAgent }, it = {
+}), st = { browser: "" }, Yn = async (e) => typeof navigator > "u" ? st : { browser: navigator.userAgent }, it = {
   canvas: {
     data: ""
   }
-}, Gn = async (e) => {
+}, Vn = async (e) => {
   try {
     const t = Array.from(
       { length: 3 },
-      () => Vn(300, 30)
-    ), n = jn(t, 300, 30);
+      () => jn(300, 30)
+    ), n = Bn(t, 300, 30);
     return {
       canvas: {
         data: (await ot(n.data.toString())).toString()
@@ -1231,7 +1276,7 @@ const xn = {
   } catch {
     return it;
   }
-}, Vn = (e, t) => {
+}, jn = (e, t) => {
   const n = document.createElement("canvas"), r = n.getContext("2d");
   if (!r)
     return new ImageData(1, 1);
@@ -1240,7 +1285,7 @@ const xn = {
   a.addColorStop(0, "red"), a.addColorStop(1 / 6, "orange"), a.addColorStop(2 / 6, "yellow"), a.addColorStop(3 / 6, "green"), a.addColorStop(4 / 6, "blue"), a.addColorStop(5 / 6, "indigo"), a.addColorStop(1, "violet"), r.fillStyle = a, r.fillRect(0, 0, n.width, n.height);
   const s = "mmMwWLliI0O&1 - Les sanglots longs des violons de l'automne blessent mon coeur d'une langueur monotone";
   return r.font = "26.321px Arial", r.fillStyle = "black", r.fillText(s, -5, 15), r.fillStyle = "rgba(0, 0, 255, 0.5)", r.fillText(s, -3.3, 17.7), r.beginPath(), r.moveTo(0, 0), r.lineTo(n.width * 2 / 7, n.height), r.strokeStyle = "white", r.lineWidth = 2, r.stroke(), r.getImageData(0, 0, n.width, n.height);
-}, Yn = (e) => {
+}, Fn = (e) => {
   if (e.length === 0)
     return 0;
   const t = {};
@@ -1250,17 +1295,17 @@ const xn = {
   for (const r in t)
     t[r] > t[n] && (n = parseInt(r, 10));
   return n;
-}, jn = (e, t, n) => {
+}, Bn = (e, t, n) => {
   const r = [];
   for (let o = 0; o < e[0].data.length; o++) {
     const i = [];
     for (let u = 0; u < e.length; u++)
       i.push(e[u].data[o]);
-    r.push(Yn(i));
+    r.push(Fn(i));
   }
   const a = r, s = new Uint8ClampedArray(a);
   return new ImageData(s, t, n);
-}, Jn = [], Bn = "mmMwWLliI0O&1", Fn = "48px", $ = ["monospace", "sans-serif", "serif"], We = [
+}, qn = [], zn = "mmMwWLliI0O&1", Qn = "48px", K = ["monospace", "sans-serif", "serif"], Ge = [
   "sans-serif-thin",
   "ARNO PRO",
   "Agency FB",
@@ -1298,28 +1343,28 @@ const xn = {
   "TRAJAN PRO",
   "Univers CE 55 Medium",
   "ZWAdobeF"
-], qn = async (e) => Ln(async (t, { document: n }) => {
+], Xn = async (e) => Mn(async (t, { document: n }) => {
   const r = n.body;
-  r.style.fontSize = Fn;
+  r.style.fontSize = Qn;
   const a = n.createElement("div");
   a.style.setProperty("visibility", "hidden", "important");
   const s = {}, o = {}, i = (d) => {
     const m = n.createElement("span"), { style: S } = m;
-    return S.position = "absolute", S.top = "0", S.left = "0", S.fontFamily = d, m.textContent = Bn, a.appendChild(m), m;
-  }, u = (d, m) => i(`'${d}',${m}`), y = () => $.map(i), f = () => {
+    return S.position = "absolute", S.top = "0", S.left = "0", S.fontFamily = d, m.textContent = zn, a.appendChild(m), m;
+  }, u = (d, m) => i(`'${d}',${m}`), f = () => K.map(i), y = () => {
     const d = {};
-    for (const m of We)
-      d[m] = $.map(
+    for (const m of Ge)
+      d[m] = K.map(
         (S) => u(m, S)
       );
     return d;
-  }, h = (d) => $.some(
+  }, h = (d) => K.some(
     (m, S) => d[S].offsetWidth !== s[m] || d[S].offsetHeight !== o[m]
-  ), p = y(), l = f();
+  ), p = f(), l = y();
   r.appendChild(a);
-  for (let d = 0; d < $.length; d++)
-    s[$[d]] = p[d].offsetWidth, o[$[d]] = p[d].offsetHeight;
-  return We.filter((d) => h(l[d]));
+  for (let d = 0; d < K.length; d++)
+    s[K[d]] = p[d].offsetWidth, o[K[d]] = p[d].offsetHeight;
+  return Ge.filter((d) => h(l[d]));
 }), ct = {
   vendor: "",
   vendorUnmasked: "",
@@ -1335,7 +1380,7 @@ const xn = {
     jsHeapSizeLimit: 0
   }
 };
-function zn() {
+function Zn() {
   const e = document.createElement("canvas"), t = e.getContext("webgl") ?? e.getContext("experimental-webgl");
   if (t && "getParameter" in t) {
     const n = t.getExtension("WEBGL_debug_renderer_info");
@@ -1350,19 +1395,19 @@ function zn() {
   }
   return ct;
 }
-function Qn() {
+function er() {
   const e = new Float32Array(1), t = new Uint8Array(e.buffer);
   return e[0] = 1 / 0, e[0] = e[0] - e[0], t[3];
 }
-const Xn = () => navigator.deviceMemory || 0, Zn = () => window.performance && window.performance.memory || {
+const tr = () => navigator.deviceMemory || 0, nr = () => window.performance && window.performance.memory || {
   jsHeapSizeLimit: 0
-}, er = async (e) => new Promise((t) => {
+}, rr = async (e) => new Promise((t) => {
   try {
-    const n = Xn(), r = Zn();
+    const n = tr(), r = nr();
     t({
       hardware: {
-        videocard: zn(),
-        architecture: Qn(),
+        videocard: Zn(),
+        architecture: er(),
         deviceMemory: n.toString() || "undefined",
         jsHeapSizeLimit: r.jsHeapSizeLimit || 0
       }
@@ -1370,12 +1415,12 @@ const Xn = () => navigator.deviceMemory || 0, Zn = () => window.performance && w
   } catch {
     t(ut);
   }
-}), tr = {
+}), ar = {
   locales: {
     languages: "",
     timezone: ""
   }
-}, nr = async (e) => new Promise((t) => {
+}, or = async (e) => new Promise((t) => {
   t({
     locales: {
       languages: navigator.language,
@@ -1390,7 +1435,7 @@ const Xn = () => navigator.deviceMemory || 0, Zn = () => window.performance && w
     maxTouchPoints: 0,
     mediaMatches: []
   }
-}, rr = async (e) => new Promise((t) => {
+}, sr = async (e) => new Promise((t) => {
   try {
     const n = window.screen, r = {
       screen: {
@@ -1398,7 +1443,7 @@ const Xn = () => navigator.deviceMemory || 0, Zn = () => window.performance && w
         pixelDepth: n.pixelDepth,
         isTouchScreen: navigator.maxTouchPoints > 0,
         maxTouchPoints: navigator.maxTouchPoints,
-        mediaMatches: ar()
+        mediaMatches: ir()
       }
     };
     t(r);
@@ -1406,7 +1451,7 @@ const Xn = () => navigator.deviceMemory || 0, Zn = () => window.performance && w
     t(lt);
   }
 });
-function ar() {
+function ir() {
   const e = [], t = {
     "prefers-contrast": [
       "high",
@@ -1434,7 +1479,7 @@ function ar() {
     });
   }), e;
 }
-const or = async (e) => {
+const cr = async (e) => {
   try {
     return {
       system: {
@@ -1454,48 +1499,55 @@ const or = async (e) => {
     productSub: "",
     product: ""
   }
-}, sr = async (e) => {
+}, ur = async (e) => {
   try {
     return Promise.all([
-      Mn(),
-      Wn(),
-      Gn(),
-      qn(),
-      er(),
-      nr(),
+      Jn(),
+      Yn(),
+      Vn(),
+      Xn(),
       rr(),
-      or()
+      or(),
+      sr(),
+      cr()
     ]);
   } catch {
     return [
-      xn,
+      Gn,
       st,
       it,
-      Jn,
+      qn,
       ut,
-      tr,
+      ar,
       lt,
       dt
     ];
   }
-}, ir = async (e) => {
+}, lr = async (e) => {
   try {
-    const t = await sr();
+    const t = await ur();
     return await ot(JSON.stringify(t));
   } catch {
     return "";
   }
-}, Z = "Oops! It looks like your session has expired. For your security, please log in again to continue.", cr = "Your session has been successfully terminated.", ee = "Login failed. Please try again.", Ee = "Error getting access token, please re-authenticate.", ur = "You forgot to wrap your component in <AuthProvider>.", ie = {
+}, ne = "Oops! It looks like your session has expired. For your security, please log in again to continue.", dr = "Your session has been successfully terminated.", re = "Login failed. Please try again.", Ae = "Error getting access token, please re-authenticate.", hr = "You forgot to wrap your component in <AuthProvider>.", le = {
   dev: "https://auth.gizmette.local.com:3003",
   prod: "https://mylogin.gizmette.com/auth"
-}, te = "@@auth@@", G = "LOADING", V = "LOGIN", ht = "LOGOUT", lr = process.env.NODE_ENV === "production", pt = !lr, de = async ({
+}, ae = "@@auth@@", Y = "LOADING", V = "LOGIN", ht = "LOGOUT", pr = process.env.NODE_ENV === "production", pt = !pr, fr = (e) => {
+  try {
+    const t = In(e);
+    return t ? t[b.USER_ID_KEY] : "";
+  } catch {
+    return "";
+  }
+}, pe = async ({
   type: e,
   clientId: t,
   params: n = {}
 }) => {
   try {
     const r = await fetch(
-      pt ? `${ie.dev}/${e}` : `${ie.prod}/${e}`,
+      pt ? `${le.dev}/${e}` : `${le.prod}/${e}`,
       {
         credentials: "include",
         method: "POST",
@@ -1517,7 +1569,7 @@ const or = async (e) => {
   } catch (r) {
     return console.error(r), { status: 500, data: [] };
   }
-}, dr = async ({
+}, yr = async ({
   userId: e,
   idToken: t,
   accessToken: n,
@@ -1527,8 +1579,8 @@ const or = async (e) => {
 }) => {
   try {
     return {
-      status: (await de({
-        type: ce.LOGOUT,
+      status: (await pe({
+        type: de.LOGOUT,
         clientId: a,
         params: {
           userId: e,
@@ -1544,7 +1596,7 @@ const or = async (e) => {
       status: !1
     };
   }
-}, Ge = async ({
+}, Je = async ({
   username: e,
   password: t,
   clientId: n,
@@ -1554,14 +1606,14 @@ const or = async (e) => {
   code: o,
   code_verifier: i,
   domain: u,
-  fingerprint: y
+  fingerprint: f
 }) => {
   try {
-    const f = await de({
-      type: ce.AUTHENTICATE,
+    const y = await pe({
+      type: de.AUTHENTICATE,
       clientId: n,
       params: {
-        type: a || Y.ID_AND_ACCESS_TOKEN,
+        type: a || F.ID_AND_ACCESS_TOKEN,
         username: e,
         password: t,
         sessionExpiration: s,
@@ -1569,14 +1621,14 @@ const or = async (e) => {
         code: o,
         code_verifier: i,
         domain: u,
-        fingerprint: y
+        fingerprint: f
       }
-    }), h = await j(f.data.idToken);
-    return h && h.payload[I.USER_ID_KEY] !== "" && h.payload[I.NONCE_KEY] === r ? {
-      idToken: f.data.idToken,
-      accessToken: f.data.accessToken,
-      refreshToken: f.data.refreshToken,
-      userId: h.payload[I.USER_ID_KEY],
+    }), h = await M(y.data.idToken);
+    return h && h.payload[b.USER_ID_KEY] !== "" && h.payload[b.NONCE_KEY] === r ? {
+      idToken: y.data.idToken,
+      accessToken: y.data.accessToken,
+      refreshToken: y.data.refreshToken,
+      userId: h.payload[b.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -1586,17 +1638,17 @@ const or = async (e) => {
       status: !1
     };
   }
-}, hr = async ({
+}, gr = async ({
   nonce: e,
   clientId: t,
   code_challenge: n
 }) => {
   try {
-    const r = await de({
-      type: ce.CODE,
+    const r = await pe({
+      type: de.CODE,
       clientId: t,
       params: {
-        type: Y.CODE,
+        type: F.CODE,
         nonce: e,
         code_challenge: n
       }
@@ -1612,7 +1664,7 @@ const or = async (e) => {
       status: !1
     };
   }
-}, pr = async ({
+}, mr = async ({
   clientId: e,
   userId: t,
   nonce: n,
@@ -1621,11 +1673,11 @@ const or = async (e) => {
   domain: s
 }) => {
   try {
-    const o = await de({
-      type: ce.AUTHENTICATE,
+    const o = await pe({
+      type: de.AUTHENTICATE,
       clientId: e,
       params: {
-        type: Y.REFRESH_TOKEN,
+        type: F.REFRESH_TOKEN,
         userId: t,
         nonce: n,
         refreshToken: r,
@@ -1633,11 +1685,11 @@ const or = async (e) => {
         domain: s,
         fingerprint: await ft()
       }
-    }), i = await j(o.data.accessToken);
-    return i && i.payload[I.USER_ID_KEY] !== "" && i.payload[I.NONCE_KEY] === n ? {
+    }), i = await M(o.data.accessToken);
+    return i && i.payload[b.USER_ID_KEY] !== "" && i.payload[b.NONCE_KEY] === n ? {
       accessToken: o.data.accessToken,
       refreshToken: o.data.refreshToken,
-      userId: i.payload[I.USER_ID_KEY],
+      userId: i.payload[b.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -1647,7 +1699,7 @@ const or = async (e) => {
       status: !1
     };
   }
-}, ne = {
+}, oe = {
   GET_REGISTRATION_OPTIONS: `mutation GetPasskeyRegistrationOptions(
 	$clientId: String!,
 	$username: String!,
@@ -1724,22 +1776,22 @@ const or = async (e) => {
 	}`
 }, H = {
   GET_REGISTRATION_OPTIONS: {
-    schema: ne.GET_REGISTRATION_OPTIONS,
+    schema: oe.GET_REGISTRATION_OPTIONS,
     method: "getPasskeyRegistrationOptions"
   },
   VERIFY_REGISTRATION: {
-    schema: ne.VERIFY_REGISTRATION,
+    schema: oe.VERIFY_REGISTRATION,
     method: "verifyPasskeyRegistration"
   },
   GET_AUTHENTICATION_OPTIONS: {
-    schema: ne.GET_AUTHENTICATION_OPTIONS,
+    schema: oe.GET_AUTHENTICATION_OPTIONS,
     method: "getPasskeyAuthenticationOptions"
   },
   VERIFY_AUTHENTICATION: {
-    schema: ne.VERIFY_AUTHENTICATION,
+    schema: oe.VERIFY_AUTHENTICATION,
     method: "verifyPasskeyAuthentication"
   }
-}, K = async ({
+}, L = async ({
   accessToken: e,
   type: t,
   clientId: n,
@@ -1747,7 +1799,7 @@ const or = async (e) => {
 }) => {
   try {
     const a = t != null && t.data ? t.data(r) : r, s = `Bearer ${e}`, o = await fetch(
-      pt ? `${ie.dev}/graphql` : `${ie.prod}/graphql`,
+      pt ? `${le.dev}/graphql` : `${le.prod}/graphql`,
       {
         method: "POST",
         credentials: "include",
@@ -1776,16 +1828,16 @@ const or = async (e) => {
   }
 }, ft = async () => {
   try {
-    return await ir();
+    return await lr();
   } catch {
     return "";
   }
 };
-class fr {
+class wr {
   constructor(t = null, n = null) {
-    B(this, "refreshTokenPromise", null);
-    B(this, "accessToken");
-    B(this, "refreshToken");
+    z(this, "refreshTokenPromise", null);
+    z(this, "accessToken");
+    z(this, "refreshToken");
     this.accessToken = t || "", this.refreshToken = n || "";
   }
   async refreshtoken({
@@ -1812,9 +1864,9 @@ class fr {
     nonce: r,
     domain: a
   }) {
-    const s = await j(this.refreshToken);
-    if (s && s.payload[I.USER_ID_KEY] !== "") {
-      const o = await pr({
+    const s = await M(this.refreshToken);
+    if (s && s.payload[b.USER_ID_KEY] !== "") {
+      const o = await mr({
         clientId: t,
         userId: n,
         nonce: r,
@@ -1835,20 +1887,20 @@ class fr {
       };
   }
 }
-const L = () => {
-  throw new Error(ur);
-}, yt = Ct({
+const W = () => {
+  throw new Error(hr);
+}, yt = kt({
   isAuthenticated: !1,
   isLoading: !1,
   authenticationType: null,
-  login: L,
-  logout: L,
-  getAccessToken: L,
-  getIdToken: L,
-  registeringForPasskey: L,
-  loginWithPasskey: L,
+  login: W,
+  logout: W,
+  getAccessToken: W,
+  getIdToken: W,
+  registeringForPasskey: W,
+  loginWithPasskey: W,
   logoutReason: ""
-}), yr = kt.createContext({
+}), Er = Pt.createContext({
   state: {
     isLoading: !0,
     isAuthenticated: !1,
@@ -1859,7 +1911,7 @@ const L = () => {
   },
   dispatch: () => {
   }
-}), gr = (e, t) => (t == null ? void 0 : t.type) === G ? {
+}), Sr = (e, t) => (t == null ? void 0 : t.type) === Y ? {
   ...e,
   isLoading: t.payload.isLoading
 } : (t == null ? void 0 : t.type) === V ? {
@@ -1876,36 +1928,36 @@ const L = () => {
   user: void 0,
   authenticationType: null,
   logoutReason: t.payload.logoutReason
-} : e, Ir = ({
+} : e, kr = ({
   children: e,
   sessionExpiration: t,
   clientId: n,
   domain: r = "",
   debug: a = !1
 }) => {
-  const [s, o] = Ot(gr, {
+  const [s, o] = Ot(Sr, {
     isLoading: !0,
     isAuthenticated: !1,
     authenticationType: null,
     user: void 0,
     logoutReason: "",
     debug: a
-  }), i = ke(!1), u = ke(""), [y, f, , h] = Q({
-    key: `${te}::${n}::@@user@@`
-  }), [p, l, , d] = Q({
-    key: `${te}::${n}::@@access@@`
-  }), [m, S, , J] = Q(
+  }), i = Ce(!1), u = Ce(""), [f, y, , h] = ee({
+    key: `${ae}::${n}::@@user@@`
+  }), [p, l, , d] = ee({
+    key: `${ae}::${n}::@@access@@`
+  }), [m, S, , q] = ee(
     {
-      key: `${te}::${n}::@@refresh@@`
+      key: `${ae}::${n}::@@refresh@@`
     }
-  ), [gt, be, , Ie] = Q({
-    key: `${te}::${n}::@@nonce@@`
+  ), [gt, Ie, , _e] = ee({
+    key: `${ae}::${n}::@@nonce@@`
   }), w = x(
     (...c) => {
       a && console.info(`==> [Auth ${Date.now()}]: `, ...c);
     },
     [a]
-  ), mt = new fr(p, m), U = x(
+  ), mt = new wr(p, m), $ = x(
     (c) => {
       w(
         "removeStateAndLocalStorage: removing state and local storage with reason: ",
@@ -1913,96 +1965,98 @@ const L = () => {
       ), o({
         type: ht,
         payload: {
-          logoutReason: c || Z
+          logoutReason: c || ne
         }
-      }), h(), d(), J(), Ie(), o({ type: G, payload: { isLoading: !1 } });
+      }), h(), d(), q(), _e(), o({ type: Y, payload: { isLoading: !1 } });
     },
-    [d, h, Ie, J, w]
-  ), N = x(
+    [d, h, _e, q, w]
+  ), D = x(
     async (c) => {
       w("invalidateAndLogout: invalidating and logging out");
-      const { user: E } = s;
-      await dr({
-        userId: (E == null ? void 0 : E.userId) || "",
-        idToken: y,
+      const { user: E } = s, g = (E == null ? void 0 : E.userId) || fr(f);
+      g || w(
+        "invalidateAndLogout: user cannot be identified, logging out without userId"
+      ), await yr({
+        userId: g,
+        idToken: f,
         accessToken: p,
         refreshToken: m,
         clientId: n,
         domain: r
-      }), U(c || Z);
+      }), $(c || ne);
     },
     [
       p,
       s,
       n,
       r,
-      y,
+      f,
       m,
-      U,
+      $,
       w
     ]
   );
-  Se(() => ((async () => (w("useEffect: setting the fingerprint"), u.current = await ft()))(), () => {
+  Te(() => ((async () => (w("useEffect: setting the fingerprint"), u.current = await ft()))(), () => {
     w("useEffect: cleaning up the fingerprint"), u.current = "";
-  }), []), Se(() => {
+  }), []), Te(() => {
     if (!i.current)
-      return s.isLoading && y !== null ? (async () => {
+      return s.isLoading && f !== null ? (async () => {
         try {
-          const c = await j(y);
-          c && c.payload[I.USER_ID_KEY] !== "" ? (w("useEffect: setting the authentication state"), o({
+          const c = await M(f);
+          c && c.payload[b.USER_ID_KEY] !== "" ? (w("useEffect: setting the authentication state"), o({
             type: V,
             payload: {
-              authenticationType: c.payload[I.AUTH_TYPE_KEY],
+              authenticationType: c.payload[b.AUTH_TYPE_KEY],
               user: {
-                userId: c.payload[I.USER_ID_KEY],
-                username: c.payload[I.USERNAME_KEY]
+                userId: c.payload[b.USER_ID_KEY],
+                username: c.payload[b.USERNAME_KEY]
               }
             }
-          })) : (w("useEffect: invalid JWT, invalidating and logging out"), await N(Z));
+          })) : (w("useEffect: invalid JWT, invalidating and logging out"), await D(ne));
         } catch {
           w(
             "useEffect: exception validating JWT, invalidating and logging out"
-          ), await N(Z);
+          ), await D(ne);
         }
-      })() : (w("useEffect: setting the loading state to false"), o({ type: G, payload: { isLoading: !1 } })), () => {
+      })() : (w("useEffect: setting the loading state to false"), o({ type: Y, payload: { isLoading: !1 } })), () => {
         i.current = !0;
       };
-  }, [s.isLoading, y, N, w]);
+  }, [s.isLoading, f, D, w]);
   const wt = async (c, E, g) => {
-    const _ = we();
-    if (be(_), o({ type: G, payload: { isLoading: !0 } }), h(), d(), J(), w("login: Logging in with type: ", g), g === Y.CODE) {
-      const { code_verifier: bt, code_challenge: It } = await Cn(), _e = await hr({
+    const _ = Se();
+    if (Ie(_), o({ type: Y, payload: { isLoading: !0 } }), h(), d(), q(), w("login: Logging in with type: ", g), g === F.CODE) {
+      const { code_verifier: bt, code_challenge: It } = await Dn(), ve = await gr({
         nonce: _,
         clientId: n,
         code_challenge: It
       });
-      if (_e.status) {
-        const W = await Ge({
+      if (ve.status) {
+        const J = await Je({
           username: c,
           password: E,
           clientId: n,
           sessionExpiration: t,
           nonce: _,
           type: g,
-          code: _e.code,
+          code: ve.code,
           code_verifier: bt,
           domain: r,
           fingerprint: u.current
         });
-        return W.status ? (f(W.idToken), l(W.accessToken), S(W.refreshToken), o({
+        return J.status ? (y(J.idToken), l(J.accessToken), S(J.refreshToken), o({
           type: V,
           payload: {
             authenticationType: g,
             user: {
-              userId: W.userId,
+              userId: J.userId,
               username: c
             }
           }
-        }), !0) : (U(ee), !1);
+        }), !0) : ($(re), !1);
       }
       return !1;
     }
-    const M = await Ge({
+    const G = await Je({
       username: c,
       password: E,
       clientId: n,
@@ -2012,26 +2066,26 @@ const L = () => {
       domain: r,
       fingerprint: u.current
     });
-    return M.status ? (f(M.idToken), l(M.accessToken), S(M.refreshToken), o({
+    return G.status ? (y(G.idToken), l(G.accessToken), S(G.refreshToken), o({
       type: V,
       payload: {
         authenticationType: g,
         user: {
-          userId: M.userId,
+          userId: G.userId,
           username: c
         }
       }
-    }), !0) : (U(ee), !1);
+    }), !0) : ($(re), !1);
   }, Et = async (c) => {
-    c == null || c.preventDefault(), await N(cr);
+    c == null || c.preventDefault(), await D(dr);
   }, St = async () => {
     const { isAuthenticated: c, user: E } = s;
     try {
       if (c && E && E.userId) {
         if (p) {
           w("getAccessToken");
-          const _ = await j(p);
-          if (_ && _.payload[I.USER_ID_KEY] !== "")
+          const _ = await M(p);
+          if (_ && _.payload[b.USER_ID_KEY] !== "")
             return p;
         }
         w("getAccessToken: invalid access token, refreshing it");
@@ -2041,22 +2095,22 @@ const L = () => {
           nonce: gt,
           domain: r
         });
-        return g.status && g.status === "success" ? (l(g.newAccessToken), S(g.newRefreshToken), g.newAccessToken) : (w("getAccessToken: invalid refresh token, re-authenticating user"), await N(Ee), "");
+        return g.status && g.status === "success" ? (l(g.newAccessToken), S(g.newRefreshToken), g.newAccessToken) : (w("getAccessToken: invalid refresh token, re-authenticating user"), await D(Ae), "");
       }
       return w(
         "getAccessToken: user is not authenticated, cannot get access token"
-      ), await N(Ee), "";
+      ), await D(Ae), "";
     } catch {
       return w(
         "getAccessToken: exception occurred, invalidating and logging out"
-      ), await N(Ee), "";
+      ), await D(Ae), "";
     }
   }, At = () => {
-    if (s.isAuthenticated && y)
-      return y;
+    if (s.isAuthenticated && f)
+      return f;
   }, Tt = async () => {
     const { user: c } = s;
-    let E = await K({
+    let E = await L({
       accessToken: p,
       clientId: n,
       type: H.GET_REGISTRATION_OPTIONS,
@@ -2068,8 +2122,8 @@ const L = () => {
     });
     if (E.status)
       try {
-        const g = await Ht(E.data);
-        E = await K({
+        const g = await Kt(E.data);
+        E = await L({
           accessToken: p,
           clientId: n,
           type: H.VERIFY_REGISTRATION,
@@ -2081,7 +2135,7 @@ const L = () => {
           }
         });
       } catch {
-        return await K({
+        return await L({
           accessToken: p,
           clientId: n,
           type: H.VERIFY_REGISTRATION,
@@ -2094,10 +2148,10 @@ const L = () => {
         }), !1;
       }
   }, Rt = async () => {
-    const c = we();
-    be(c), o({ type: G, payload: { isLoading: !0 } }), h(), d(), J(), w("loginWithPasskey");
-    const E = we();
-    let g = await K({
+    const c = Se();
+    Ie(c), o({ type: Y, payload: { isLoading: !0 } }), h(), d(), q(), w("loginWithPasskey");
+    const E = Se();
+    let g = await L({
       accessToken: p,
       clientId: n,
       type: H.GET_AUTHENTICATION_OPTIONS,
@@ -2108,8 +2162,8 @@ const L = () => {
     });
     if (g.status)
       try {
-        const _ = await xt(g.data);
-        return g = await K({
+        const _ = await Wt(g.data);
+        return g = await L({
           accessToken: p,
           clientId: n,
           type: H.VERIFY_AUTHENTICATION,
@@ -2121,18 +2175,18 @@ const L = () => {
             domain: r,
             fingerprint: u.current
           }
-        }), g.data.status === "success" ? (f(g.data.idToken), l(g.data.accessToken), S(g.data.refreshToken), o({
+        }), g.data.status === "success" ? (y(g.data.idToken), l(g.data.accessToken), S(g.data.refreshToken), o({
           type: V,
           payload: {
-            authenticationType: Y.PASSKEY,
+            authenticationType: F.PASSKEY,
             user: {
               userId: g.data.userId,
               username: g.data.username
             }
           }
-        }), !0) : (U(ee), !1);
+        }), !0) : ($(re), !1);
       } catch {
-        return await K({
+        return await L({
           accessToken: p,
           clientId: n,
           type: H.VERIFY_AUTHENTICATION,
@@ -2143,10 +2197,10 @@ const L = () => {
             nonce: c,
             domain: r
           }
-        }), U(ee), !1;
+        }), $(re), !1;
       }
   };
-  return /* @__PURE__ */ ve(yr.Provider, { value: { state: s, dispatch: o }, children: /* @__PURE__ */ ve(
+  return /* @__PURE__ */ Pe(Er.Provider, { value: { state: s, dispatch: o }, children: /* @__PURE__ */ Pe(
     yt.Provider,
     {
       value: {
@@ -2161,9 +2215,10 @@ const L = () => {
       children: e
     }
   ) });
-}, _r = (e = yt) => Nt(e);
+}, Or = (e = yt) => Nt(e);
 export {
-  Y as AUTH_TYPES,
-  Ir as AuthProvider,
-  _r as useAuth
+  F as AUTH_TYPES,
+  kr as AuthProvider,
+  Cr as isGranted,
+  Or as useAuth
 };