@versini/auth-provider 6.2.1 → 6.3.1

package/dist/index.js

@@ -2,21 +2,21 @@ var _t = Object.defineProperty;
 var vt = (e, t, n) => t in e ? _t(e, t, { enumerable: !0, configurable: !0, writable: !0, value: n }) : e[t] = n;
 var z = (e, t, n) => vt(e, typeof t != "symbol" ? t + "" : t, n);
 import { jsx as ke } from "react/jsx-runtime";
-import kt, { useSyncExternalStore as Pt, useCallback as x, useEffect as Te, createContext as Ct, useReducer as Ot, useRef as Pe, useContext as Nt } from "react";
+import kt, { useSyncExternalStore as Ct, useCallback as W, useEffect as Te, createContext as Pt, useReducer as Ot, useRef as Ce, useContext as Nt } from "react";
 /*!
-  @versini/auth-provider v6.2.1
+  @versini/auth-provider v6.3.1
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_CLIENT__ || (window.__VERSINI_AUTH_CLIENT__ = {
-    version: "6.2.1",
-    buildTime: "07/18/2024 12:26 PM EDT",
+    version: "6.3.1",
+    buildTime: "07/22/2024 07:45 AM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
 } catch {
 }
-function k(e) {
+function v(e) {
   const t = new Uint8Array(e);
   let n = "";
   for (const a of t)
@@ -32,7 +32,7 @@ function ie(e) {
 function Re() {
   return (window == null ? void 0 : window.PublicKeyCredential) !== void 0 && typeof window.PublicKeyCredential == "function";
 }
-function Ve(e) {
+function Ye(e) {
   const { id: t } = e;
   return {
     ...e,
@@ -40,7 +40,7 @@ function Ve(e) {
     transports: e.transports
   };
 }
-function Ye(e) {
+function Ve(e) {
   return e === "localhost" || /^([a-z0-9]+(-[a-z0-9]+)*\.)+[a-z]{2,}$/i.test(e);
 }
 class b extends Error {
@@ -98,7 +98,7 @@ function Dt({ error: e, options: t }) {
       });
     if (e.name === "SecurityError") {
       const s = window.location.hostname;
-      if (Ye(s)) {
+      if (Ve(s)) {
         if (n.rp.id !== s)
           return new b({
             message: `The RP ID "${n.rp.id}" is invalid for this domain`,
@@ -148,7 +148,7 @@ function Fe(e) {
     return e;
 }
 async function Kt(e) {
-  var p;
+  var m;
   if (!Re())
     throw new Error("WebAuthn is not supported in this browser");
   const n = { publicKey: {
@@ -158,52 +158,52 @@ async function Kt(e) {
       ...e.user,
       id: ie(e.user.id)
     },
-    excludeCredentials: (p = e.excludeCredentials) == null ? void 0 : p.map(Ve)
+    excludeCredentials: (m = e.excludeCredentials) == null ? void 0 : m.map(Ye)
   } };
   n.signal = je.createNewAbortSignal();
   let r;
   try {
     r = await navigator.credentials.create(n);
-  } catch (l) {
-    throw Dt({ error: l, options: n });
+  } catch (u) {
+    throw Dt({ error: u, options: n });
   }
   if (!r)
     throw new Error("Registration was not completed");
   const { id: a, rawId: s, response: o, type: i } = r;
-  let u;
-  typeof o.getTransports == "function" && (u = o.getTransports());
-  let f;
+  let l;
+  typeof o.getTransports == "function" && (l = o.getTransports());
+  let y;
   if (typeof o.getPublicKeyAlgorithm == "function")
     try {
-      f = o.getPublicKeyAlgorithm();
-    } catch (l) {
-      fe("getPublicKeyAlgorithm()", l);
+      y = o.getPublicKeyAlgorithm();
+    } catch (u) {
+      fe("getPublicKeyAlgorithm()", u);
     }
-  let y;
+  let h;
   if (typeof o.getPublicKey == "function")
     try {
-      const l = o.getPublicKey();
-      l !== null && (y = k(l));
-    } catch (l) {
-      fe("getPublicKey()", l);
+      const u = o.getPublicKey();
+      u !== null && (h = v(u));
+    } catch (u) {
+      fe("getPublicKey()", u);
     }
-  let h;
+  let p;
   if (typeof o.getAuthenticatorData == "function")
     try {
-      h = k(o.getAuthenticatorData());
-    } catch (l) {
-      fe("getAuthenticatorData()", l);
+      p = v(o.getAuthenticatorData());
+    } catch (u) {
+      fe("getAuthenticatorData()", u);
     }
   return {
     id: a,
-    rawId: k(s),
+    rawId: v(s),
     response: {
-      attestationObject: k(o.attestationObject),
-      clientDataJSON: k(o.clientDataJSON),
-      transports: u,
-      publicKeyAlgorithm: f,
-      publicKey: y,
-      authenticatorData: h
+      attestationObject: v(o.attestationObject),
+      clientDataJSON: v(o.clientDataJSON),
+      transports: l,
+      publicKeyAlgorithm: y,
+      publicKey: h,
+      authenticatorData: p
     },
     type: i,
     clientExtensionResults: r.getClientExtensionResults(),
@@ -240,7 +240,7 @@ function Lt({ error: e, options: t }) {
       });
     if (e.name === "SecurityError") {
       const r = window.location.hostname;
-      if (Ye(r)) {
+      if (Ve(r)) {
         if (n.rpId !== r)
           return new b({
             message: `The RP ID "${n.rpId}" is invalid for this domain`,
@@ -262,11 +262,11 @@ function Lt({ error: e, options: t }) {
   return e;
 }
 async function Wt(e, t = !1) {
-  var h, p;
+  var p, m;
   if (!Re())
     throw new Error("WebAuthn is not supported in this browser");
   let n;
-  ((h = e.allowCredentials) == null ? void 0 : h.length) !== 0 && (n = (p = e.allowCredentials) == null ? void 0 : p.map(Ve));
+  ((p = e.allowCredentials) == null ? void 0 : p.length) !== 0 && (n = (m = e.allowCredentials) == null ? void 0 : m.map(Ye));
   const r = {
     ...e,
     challenge: ie(e.challenge),
@@ -283,35 +283,35 @@ async function Wt(e, t = !1) {
   let s;
   try {
     s = await navigator.credentials.get(a);
-  } catch (l) {
-    throw Lt({ error: l, options: a });
+  } catch (u) {
+    throw Lt({ error: u, options: a });
   }
   if (!s)
     throw new Error("Authentication was not completed");
-  const { id: o, rawId: i, response: u, type: f } = s;
-  let y;
-  return u.userHandle && (y = k(u.userHandle)), {
+  const { id: o, rawId: i, response: l, type: y } = s;
+  let h;
+  return l.userHandle && (h = v(l.userHandle)), {
     id: o,
-    rawId: k(i),
+    rawId: v(i),
     response: {
-      authenticatorData: k(u.authenticatorData),
-      clientDataJSON: k(u.clientDataJSON),
-      signature: k(u.signature),
-      userHandle: y
+      authenticatorData: v(l.authenticatorData),
+      clientDataJSON: v(l.clientDataJSON),
+      signature: v(l.signature),
+      userHandle: h
     },
-    type: f,
+    type: y,
     clientExtensionResults: s.getClientExtensionResults(),
     authenticatorAttachment: Fe(s.authenticatorAttachment)
   };
 }
 /*!
-  @versini/auth-common v2.12.1
+  @versini/auth-common v3.3.0
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_COMMON__ || (window.__VERSINI_AUTH_COMMON__ = {
-    version: "2.12.1",
-    buildTime: "07/18/2024 12:26 PM EDT",
+    version: "3.3.0",
+    buildTime: "07/22/2024 07:45 AM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
@@ -326,13 +326,16 @@ const j = {
   PASSKEY: "passkey"
 }, Be = {
   CLIENT_ID: "X-Auth-ClientId"
-}, I = {
+}, T = {
   ALG: "RS256",
   USER_ID_KEY: "sub",
   TOKEN_ID_KEY: "__raw",
   NONCE_KEY: "_nonce",
   USERNAME_KEY: "username",
   AUTH_TYPE_KEY: "auth_type",
+  EXPIRES_AT_KEY: "exp",
+  CREATED_AT_KEY: "iat",
+  SCOPES_KEY: "scopes",
   ISSUER: "gizmette.com"
 }, xt = `-----BEGIN PUBLIC KEY-----
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6i3Jd9fY/3COqCw/m7
@@ -346,7 +349,7 @@ awIDAQAB
   AUTHENTICATE: "authenticate",
   CODE: "code",
   LOGOUT: "logout"
-}, he = crypto, qe = (e) => e instanceof CryptoKey, Q = new TextEncoder(), B = new TextDecoder();
+}, he = crypto, qe = (e) => e instanceof CryptoKey, Q = new TextEncoder(), F = new TextDecoder();
 function Mt(...e) {
   const t = e.reduce((a, { length: s }) => a + s, 0), n = new Uint8Array(t);
   let r = 0;
@@ -359,16 +362,16 @@ const Gt = (e) => {
   for (let r = 0; r < t.length; r++)
     n[r] = t.charCodeAt(r);
   return n;
-}, Y = (e) => {
+}, V = (e) => {
   let t = e;
-  t instanceof Uint8Array && (t = B.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
+  t instanceof Uint8Array && (t = F.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
   try {
     return Gt(t);
   } catch {
     throw new TypeError("The input to be decoded is not correctly encoded.");
   }
 };
-let U = class extends Error {
+let D = class extends Error {
   static get code() {
     return "ERR_JOSE_GENERIC";
   }
@@ -376,14 +379,14 @@ let U = class extends Error {
     var n;
     super(t), this.code = "ERR_JOSE_GENERIC", this.name = this.constructor.name, (n = Error.captureStackTrace) == null || n.call(Error, this, this.constructor);
   }
-}, v = class extends U {
+}, _ = class extends D {
   static get code() {
     return "ERR_JWT_CLAIM_VALIDATION_FAILED";
   }
   constructor(t, n, r = "unspecified", a = "unspecified") {
     super(t), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = r, this.reason = a, this.payload = n;
   }
-}, Ce = class extends U {
+}, Pe = class extends D {
   static get code() {
     return "ERR_JWT_EXPIRED";
   }
@@ -391,7 +394,7 @@ let U = class extends Error {
     super(t), this.code = "ERR_JWT_EXPIRED", this.claim = r, this.reason = a, this.payload = n;
   }
 };
-class Jt extends U {
+class Jt extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_ALG_NOT_ALLOWED";
   }
@@ -399,7 +402,7 @@ class Jt extends U {
     return "ERR_JOSE_ALG_NOT_ALLOWED";
   }
 }
-let N = class extends U {
+let O = class extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_NOT_SUPPORTED";
   }
@@ -407,7 +410,7 @@ let N = class extends U {
     return "ERR_JOSE_NOT_SUPPORTED";
   }
 };
-class R extends U {
+class A extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_INVALID";
   }
@@ -415,7 +418,7 @@ class R extends U {
     return "ERR_JWS_INVALID";
   }
 }
-let C = class extends U {
+let C = class extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JWT_INVALID";
   }
@@ -423,7 +426,7 @@ let C = class extends U {
     return "ERR_JWT_INVALID";
   }
 };
-class Vt extends U {
+class Yt extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED", this.message = "signature verification failed";
   }
@@ -431,7 +434,7 @@ class Vt extends U {
     return "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
   }
 }
-function P(e, t = "algorithm.name") {
+function k(e, t = "algorithm.name") {
   return new TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`);
 }
 function X(e, t) {
@@ -440,7 +443,7 @@ function X(e, t) {
 function ye(e) {
   return parseInt(e.name.slice(4), 10);
 }
-function Yt(e) {
+function Vt(e) {
   switch (e) {
     case "ES256":
       return "P-256";
@@ -468,45 +471,45 @@ function Ft(e, t, ...n) {
     case "HS384":
     case "HS512": {
       if (!X(e.algorithm, "HMAC"))
-        throw P("HMAC");
+        throw k("HMAC");
       const r = parseInt(t.slice(2), 10);
       if (ye(e.algorithm.hash) !== r)
-        throw P(`SHA-${r}`, "algorithm.hash");
+        throw k(`SHA-${r}`, "algorithm.hash");
       break;
     }
     case "RS256":
     case "RS384":
     case "RS512": {
       if (!X(e.algorithm, "RSASSA-PKCS1-v1_5"))
-        throw P("RSASSA-PKCS1-v1_5");
+        throw k("RSASSA-PKCS1-v1_5");
       const r = parseInt(t.slice(2), 10);
       if (ye(e.algorithm.hash) !== r)
-        throw P(`SHA-${r}`, "algorithm.hash");
+        throw k(`SHA-${r}`, "algorithm.hash");
       break;
     }
     case "PS256":
     case "PS384":
     case "PS512": {
       if (!X(e.algorithm, "RSA-PSS"))
-        throw P("RSA-PSS");
+        throw k("RSA-PSS");
       const r = parseInt(t.slice(2), 10);
       if (ye(e.algorithm.hash) !== r)
-        throw P(`SHA-${r}`, "algorithm.hash");
+        throw k(`SHA-${r}`, "algorithm.hash");
       break;
     }
     case "EdDSA": {
       if (e.algorithm.name !== "Ed25519" && e.algorithm.name !== "Ed448")
-        throw P("Ed25519 or Ed448");
+        throw k("Ed25519 or Ed448");
       break;
     }
     case "ES256":
     case "ES384":
     case "ES512": {
       if (!X(e.algorithm, "ECDSA"))
-        throw P("ECDSA");
-      const r = Yt(t);
+        throw k("ECDSA");
+      const r = Vt(t);
       if (e.algorithm.namedCurve !== r)
-        throw P(r, "algorithm.namedCurve");
+        throw k(r, "algorithm.namedCurve");
       break;
     }
     default:
@@ -590,7 +593,7 @@ function Qt(e) {
           }, n = e.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
           break;
         default:
-          throw new N('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new O('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
@@ -612,7 +615,7 @@ function Qt(e) {
           t = { name: "ECDH", namedCurve: e.crv }, n = e.d ? ["deriveBits"] : [];
           break;
         default:
-          throw new N('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new O('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
@@ -628,12 +631,12 @@ function Qt(e) {
           t = { name: e.crv }, n = e.d ? ["deriveBits"] : [];
           break;
         default:
-          throw new N('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new O('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
     default:
-      throw new N('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
+      throw new O('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
   }
   return { algorithm: t, keyUsages: n };
 }
@@ -646,7 +649,7 @@ const Xt = async (e) => {
     e.key_ops ?? n
   ], a = { ...e };
   return delete a.alg, delete a.use, he.subtle.importKey("jwk", a, ...r);
-}, Ze = (e) => Y(e);
+}, Ze = (e) => V(e);
 let ge, me;
 const et = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", tt = async (e, t, n, r) => {
   let a = e.get(t);
@@ -666,35 +669,35 @@ const et = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject",
     return n.k ? Ze(n.k) : (ge || (ge = /* @__PURE__ */ new WeakMap()), tt(ge, e, n, t));
   }
   return e;
-}, tn = { normalizePublicKey: Zt, normalizePrivateKey: en }, O = (e, t, n = 0) => {
+}, tn = { normalizePublicKey: Zt, normalizePrivateKey: en }, P = (e, t, n = 0) => {
   n === 0 && (t.unshift(t.length), t.unshift(6));
   const r = e.indexOf(t[0], n);
   if (r === -1)
     return !1;
   const a = e.subarray(r, r + t.length);
-  return a.length !== t.length ? !1 : a.every((s, o) => s === t[o]) || O(e, t, r + 1);
+  return a.length !== t.length ? !1 : a.every((s, o) => s === t[o]) || P(e, t, r + 1);
 }, Ne = (e) => {
   switch (!0) {
-    case O(e, [42, 134, 72, 206, 61, 3, 1, 7]):
+    case P(e, [42, 134, 72, 206, 61, 3, 1, 7]):
       return "P-256";
-    case O(e, [43, 129, 4, 0, 34]):
+    case P(e, [43, 129, 4, 0, 34]):
       return "P-384";
-    case O(e, [43, 129, 4, 0, 35]):
+    case P(e, [43, 129, 4, 0, 35]):
       return "P-521";
-    case O(e, [43, 101, 110]):
+    case P(e, [43, 101, 110]):
       return "X25519";
-    case O(e, [43, 101, 111]):
+    case P(e, [43, 101, 111]):
       return "X448";
-    case O(e, [43, 101, 112]):
+    case P(e, [43, 101, 112]):
       return "Ed25519";
-    case O(e, [43, 101, 113]):
+    case P(e, [43, 101, 113]):
       return "Ed448";
     default:
-      throw new N("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
+      throw new O("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
   }
 }, nn = async (e, t, n, r, a) => {
   let s, o;
-  const i = new Uint8Array(atob(n.replace(e, "")).split("").map((u) => u.charCodeAt(0)));
+  const i = new Uint8Array(atob(n.replace(e, "")).split("").map((l) => l.charCodeAt(0)));
   switch (r) {
     case "PS256":
     case "PS384":
@@ -728,15 +731,15 @@ const et = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject",
     case "ECDH-ES+A128KW":
     case "ECDH-ES+A192KW":
     case "ECDH-ES+A256KW": {
-      const u = Ne(i);
-      s = u.startsWith("P-") ? { name: "ECDH", namedCurve: u } : { name: u }, o = [];
+      const l = Ne(i);
+      s = l.startsWith("P-") ? { name: "ECDH", namedCurve: l } : { name: l }, o = [];
       break;
     }
     case "EdDSA":
       s = { name: Ne(i) }, o = ["verify"];
       break;
     default:
-      throw new N('Invalid or unsupported "alg" (Algorithm) value');
+      throw new O('Invalid or unsupported "alg" (Algorithm) value');
   }
   return he.subtle.importKey(t, i, s, !1, o);
 }, rn = (e, t, n) => nn(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
@@ -775,7 +778,7 @@ function un(e, t, n, r, a) {
   n !== void 0 ? s = new Map([...Object.entries(n), ...t.entries()]) : s = t;
   for (const o of r.crit) {
     if (!s.has(o))
-      throw new N(`Extension Header Parameter "${o}" is not recognized`);
+      throw new O(`Extension Header Parameter "${o}" is not recognized`);
     if (a[o] === void 0)
       throw new e(`Extension Header Parameter "${o}" is missing`);
     if (s.get(o) && r[o] === void 0)
@@ -811,7 +814,7 @@ function dn(e, t) {
     case "EdDSA":
       return { name: t.name };
     default:
-      throw new N(`alg ${e} is not supported either by JOSE or your javascript runtime`);
+      throw new O(`alg ${e} is not supported either by JOSE or your javascript runtime`);
   }
 }
 async function hn(e, t, n) {
@@ -836,75 +839,75 @@ const pn = async (e, t, n, r) => {
 };
 async function fn(e, t, n) {
   if (!ue(e))
-    throw new R("Flattened JWS must be an object");
+    throw new A("Flattened JWS must be an object");
   if (e.protected === void 0 && e.header === void 0)
-    throw new R('Flattened JWS must have either of the "protected" or "header" members');
+    throw new A('Flattened JWS must have either of the "protected" or "header" members');
   if (e.protected !== void 0 && typeof e.protected != "string")
-    throw new R("JWS Protected Header incorrect type");
+    throw new A("JWS Protected Header incorrect type");
   if (e.payload === void 0)
-    throw new R("JWS Payload missing");
+    throw new A("JWS Payload missing");
   if (typeof e.signature != "string")
-    throw new R("JWS Signature missing or incorrect type");
+    throw new A("JWS Signature missing or incorrect type");
   if (e.header !== void 0 && !ue(e.header))
-    throw new R("JWS Unprotected Header incorrect type");
+    throw new A("JWS Unprotected Header incorrect type");
   let r = {};
   if (e.protected)
     try {
-      const d = Y(e.protected);
-      r = JSON.parse(B.decode(d));
+      const d = V(e.protected);
+      r = JSON.parse(F.decode(d));
     } catch {
-      throw new R("JWS Protected Header is invalid");
+      throw new A("JWS Protected Header is invalid");
     }
   if (!Bt(r, e.header))
-    throw new R("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
+    throw new A("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
   const a = {
     ...r,
     ...e.header
-  }, s = un(R, /* @__PURE__ */ new Map([["b64", !0]]), n == null ? void 0 : n.crit, r, a);
+  }, s = un(A, /* @__PURE__ */ new Map([["b64", !0]]), n == null ? void 0 : n.crit, r, a);
   let o = !0;
   if (s.has("b64") && (o = r.b64, typeof o != "boolean"))
-    throw new R('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
+    throw new A('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
   const { alg: i } = a;
   if (typeof i != "string" || !i)
-    throw new R('JWS "alg" (Algorithm) Header Parameter missing or invalid');
-  const u = n && ln("algorithms", n.algorithms);
-  if (u && !u.has(i))
+    throw new A('JWS "alg" (Algorithm) Header Parameter missing or invalid');
+  const l = n && ln("algorithms", n.algorithms);
+  if (l && !l.has(i))
     throw new Jt('"alg" (Algorithm) Header Parameter value not allowed');
   if (o) {
     if (typeof e.payload != "string")
-      throw new R("JWS Payload must be a string");
+      throw new A("JWS Payload must be a string");
   } else if (typeof e.payload != "string" && !(e.payload instanceof Uint8Array))
-    throw new R("JWS Payload must be a string or an Uint8Array instance");
-  let f = !1;
-  typeof t == "function" && (t = await t(r, e), f = !0), cn(i, t, "verify");
-  const y = Mt(Q.encode(e.protected ?? ""), Q.encode("."), typeof e.payload == "string" ? Q.encode(e.payload) : e.payload);
-  let h;
+    throw new A("JWS Payload must be a string or an Uint8Array instance");
+  let y = !1;
+  typeof t == "function" && (t = await t(r, e), y = !0), cn(i, t, "verify");
+  const h = Mt(Q.encode(e.protected ?? ""), Q.encode("."), typeof e.payload == "string" ? Q.encode(e.payload) : e.payload);
+  let p;
   try {
-    h = Y(e.signature);
+    p = V(e.signature);
   } catch {
-    throw new R("Failed to base64url decode the signature");
+    throw new A("Failed to base64url decode the signature");
   }
-  if (!await pn(i, t, h, y))
-    throw new Vt();
-  let p;
+  if (!await pn(i, t, p, h))
+    throw new Yt();
+  let m;
   if (o)
     try {
-      p = Y(e.payload);
+      m = V(e.payload);
     } catch {
-      throw new R("Failed to base64url decode the payload");
+      throw new A("Failed to base64url decode the payload");
     }
-  else typeof e.payload == "string" ? p = Q.encode(e.payload) : p = e.payload;
-  const l = { payload: p };
-  return e.protected !== void 0 && (l.protectedHeader = r), e.header !== void 0 && (l.unprotectedHeader = e.header), f ? { ...l, key: t } : l;
+  else typeof e.payload == "string" ? m = Q.encode(e.payload) : m = e.payload;
+  const u = { payload: m };
+  return e.protected !== void 0 && (u.protectedHeader = r), e.header !== void 0 && (u.unprotectedHeader = e.header), y ? { ...u, key: t } : u;
 }
 async function yn(e, t, n) {
-  if (e instanceof Uint8Array && (e = B.decode(e)), typeof e != "string")
-    throw new R("Compact JWS must be a string or Uint8Array");
+  if (e instanceof Uint8Array && (e = F.decode(e)), typeof e != "string")
+    throw new A("Compact JWS must be a string or Uint8Array");
   const { 0: r, 1: a, 2: s, length: o } = e.split(".");
   if (o !== 3)
-    throw new R("Invalid Compact JWS");
-  const i = await fn({ payload: a, protected: r, signature: s }, t, n), u = { payload: i.payload, protectedHeader: i.protectedHeader };
-  return typeof t == "function" ? { ...u, key: i.key } : u;
+    throw new A("Invalid Compact JWS");
+  const i = await fn({ payload: a, protected: r, signature: s }, t, n), l = { payload: i.payload, protectedHeader: i.protectedHeader };
+  return typeof t == "function" ? { ...l, key: i.key } : l;
 }
 const gn = (e) => Math.floor(e.getTime() / 1e3), nt = 60, rt = nt * 60, be = rt * 24, mn = be * 7, wn = be * 365.25, En = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, De = (e) => {
   const t = En.exec(e);
@@ -952,60 +955,60 @@ const gn = (e) => Math.floor(e.getTime() / 1e3), nt = 60, rt = nt * 60, be = rt
 }, Ue = (e) => e.toLowerCase().replace(/^application\//, ""), Sn = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, An = (e, t, n = {}) => {
   let r;
   try {
-    r = JSON.parse(B.decode(t));
+    r = JSON.parse(F.decode(t));
   } catch {
   }
   if (!ue(r))
     throw new C("JWT Claims Set must be a top-level JSON object");
   const { typ: a } = n;
   if (a && (typeof e.typ != "string" || Ue(e.typ) !== Ue(a)))
-    throw new v('unexpected "typ" JWT header value', r, "typ", "check_failed");
-  const { requiredClaims: s = [], issuer: o, subject: i, audience: u, maxTokenAge: f } = n, y = [...s];
-  f !== void 0 && y.push("iat"), u !== void 0 && y.push("aud"), i !== void 0 && y.push("sub"), o !== void 0 && y.push("iss");
-  for (const d of new Set(y.reverse()))
+    throw new _('unexpected "typ" JWT header value', r, "typ", "check_failed");
+  const { requiredClaims: s = [], issuer: o, subject: i, audience: l, maxTokenAge: y } = n, h = [...s];
+  y !== void 0 && h.push("iat"), l !== void 0 && h.push("aud"), i !== void 0 && h.push("sub"), o !== void 0 && h.push("iss");
+  for (const d of new Set(h.reverse()))
     if (!(d in r))
-      throw new v(`missing required "${d}" claim`, r, d, "missing");
+      throw new _(`missing required "${d}" claim`, r, d, "missing");
   if (o && !(Array.isArray(o) ? o : [o]).includes(r.iss))
-    throw new v('unexpected "iss" claim value', r, "iss", "check_failed");
+    throw new _('unexpected "iss" claim value', r, "iss", "check_failed");
   if (i && r.sub !== i)
-    throw new v('unexpected "sub" claim value', r, "sub", "check_failed");
-  if (u && !Sn(r.aud, typeof u == "string" ? [u] : u))
-    throw new v('unexpected "aud" claim value', r, "aud", "check_failed");
-  let h;
+    throw new _('unexpected "sub" claim value', r, "sub", "check_failed");
+  if (l && !Sn(r.aud, typeof l == "string" ? [l] : l))
+    throw new _('unexpected "aud" claim value', r, "aud", "check_failed");
+  let p;
   switch (typeof n.clockTolerance) {
     case "string":
-      h = De(n.clockTolerance);
+      p = De(n.clockTolerance);
       break;
     case "number":
-      h = n.clockTolerance;
+      p = n.clockTolerance;
       break;
     case "undefined":
-      h = 0;
+      p = 0;
       break;
     default:
       throw new TypeError("Invalid clockTolerance option type");
   }
-  const { currentDate: p } = n, l = gn(p || /* @__PURE__ */ new Date());
-  if ((r.iat !== void 0 || f) && typeof r.iat != "number")
-    throw new v('"iat" claim must be a number', r, "iat", "invalid");
+  const { currentDate: m } = n, u = gn(m || /* @__PURE__ */ new Date());
+  if ((r.iat !== void 0 || y) && typeof r.iat != "number")
+    throw new _('"iat" claim must be a number', r, "iat", "invalid");
   if (r.nbf !== void 0) {
     if (typeof r.nbf != "number")
-      throw new v('"nbf" claim must be a number', r, "nbf", "invalid");
-    if (r.nbf > l + h)
-      throw new v('"nbf" claim timestamp check failed', r, "nbf", "check_failed");
+      throw new _('"nbf" claim must be a number', r, "nbf", "invalid");
+    if (r.nbf > u + p)
+      throw new _('"nbf" claim timestamp check failed', r, "nbf", "check_failed");
   }
   if (r.exp !== void 0) {
     if (typeof r.exp != "number")
-      throw new v('"exp" claim must be a number', r, "exp", "invalid");
-    if (r.exp <= l - h)
-      throw new Ce('"exp" claim timestamp check failed', r, "exp", "check_failed");
+      throw new _('"exp" claim must be a number', r, "exp", "invalid");
+    if (r.exp <= u - p)
+      throw new Pe('"exp" claim timestamp check failed', r, "exp", "check_failed");
   }
-  if (f) {
-    const d = l - r.iat, m = typeof f == "number" ? f : De(f);
-    if (d - h > m)
-      throw new Ce('"iat" claim timestamp check failed (too far in the past)', r, "iat", "check_failed");
-    if (d < 0 - h)
-      throw new v('"iat" claim timestamp check failed (it should be in the past)', r, "iat", "check_failed");
+  if (y) {
+    const d = u - r.iat, g = typeof y == "number" ? y : De(y);
+    if (d - p > g)
+      throw new Pe('"iat" claim timestamp check failed (too far in the past)', r, "iat", "check_failed");
+    if (d < 0 - p)
+      throw new _('"iat" claim timestamp check failed (it should be in the past)', r, "iat", "check_failed");
   }
   return r;
 };
@@ -1017,7 +1020,7 @@ async function Tn(e, t, n) {
   const s = { payload: An(a.protectedHeader, a.payload, n), protectedHeader: a.protectedHeader };
   return typeof t == "function" ? { ...s, key: a.key } : s;
 }
-const Rn = Y;
+const Rn = V;
 function bn(e) {
   if (typeof e != "string")
     throw new C("JWTs must use Compact JWS serialization, JWT must be a string");
@@ -1036,7 +1039,7 @@ function bn(e) {
   }
   let a;
   try {
-    a = JSON.parse(B.decode(r));
+    a = JSON.parse(F.decode(r));
   } catch {
     throw new C("Failed to parse the decoded payload as JSON");
   }
@@ -1044,11 +1047,11 @@ function bn(e) {
     throw new C("Invalid JWT Claims Set");
   return a;
 }
-const F = async (e) => {
+const x = async (e) => {
   try {
-    const t = I.ALG, n = await an(xt, t);
+    const t = T.ALG, n = await an(xt, t);
     return await Tn(e, n, {
-      issuer: I.ISSUER
+      issuer: T.ISSUER
     });
   } catch {
     return;
@@ -1060,11 +1063,11 @@ const F = async (e) => {
     return;
   }
 };
-var A = [];
+var E = [];
 for (var we = 0; we < 256; ++we)
-  A.push((we + 256).toString(16).slice(1));
+  E.push((we + 256).toString(16).slice(1));
 function _n(e, t = 0) {
-  return (A[e[t + 0]] + A[e[t + 1]] + A[e[t + 2]] + A[e[t + 3]] + "-" + A[e[t + 4]] + A[e[t + 5]] + "-" + A[e[t + 6]] + A[e[t + 7]] + "-" + A[e[t + 8]] + A[e[t + 9]] + "-" + A[e[t + 10]] + A[e[t + 11]] + A[e[t + 12]] + A[e[t + 13]] + A[e[t + 14]] + A[e[t + 15]]).toLowerCase();
+  return (E[e[t + 0]] + E[e[t + 1]] + E[e[t + 2]] + E[e[t + 3]] + "-" + E[e[t + 4]] + E[e[t + 5]] + "-" + E[e[t + 6]] + E[e[t + 7]] + "-" + E[e[t + 8]] + E[e[t + 9]] + "-" + E[e[t + 10]] + E[e[t + 11]] + E[e[t + 12]] + E[e[t + 13]] + E[e[t + 14]] + E[e[t + 15]]).toLowerCase();
 }
 var Z, vn = new Uint8Array(16);
 function kn() {
@@ -1072,9 +1075,9 @@ function kn() {
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
   return Z(vn);
 }
-var Pn = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
+var Cn = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
 const $e = {
-  randomUUID: Pn
+  randomUUID: Cn
 };
 function Ke(e, t, n) {
   if ($e.randomUUID && !t && !e)
@@ -1083,7 +1086,7 @@ function Ke(e, t, n) {
   var r = e.random || (e.rng || kn)();
   return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, _n(r);
 }
-const He = globalThis.crypto, Cn = (e) => `${Ke()}${Ke()}`.slice(0, e), On = (e) => btoa(
+const He = globalThis.crypto, Pn = (e) => `${Ke()}${Ke()}`.slice(0, e), On = (e) => btoa(
   [...new Uint8Array(e)].map((t) => String.fromCharCode(t)).join("")
 );
 async function Nn(e) {
@@ -1095,12 +1098,22 @@ async function Nn(e) {
   return On(n).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 async function Dn(e) {
-  const n = Cn(43), r = await Nn(n);
+  const n = Pn(43), r = await Nn(n);
   return {
     code_verifier: n,
     code_challenge: r
   };
 }
+const Pr = async (e, t) => {
+  var n;
+  const r = await x(e);
+  if (!r || !Array.isArray((n = r.payload) == null ? void 0 : n[T.SCOPES_KEY]))
+    return !1;
+  const a = r.payload[T.SCOPES_KEY];
+  return Array.isArray(t) ? t.every((s) => a.includes(s)) : Object.keys(t).some(
+    (s) => t[s].every((o) => a.includes(o))
+  );
+};
 function at(e, t) {
   window.dispatchEvent(new StorageEvent("storage", { key: e, newValue: t }));
 }
@@ -1116,7 +1129,7 @@ function ee({
   key: e,
   initialValue: t
 }) {
-  const n = Pt($n, () => We(e)), r = x(
+  const n = Ct($n, () => We(e)), r = W(
     (o) => {
       try {
         const i = typeof o == "function" ? o(JSON.parse(n)) : o;
@@ -1126,9 +1139,9 @@ function ee({
       }
     },
     [e, n]
-  ), a = x(() => {
+  ), a = W(() => {
     r(t);
-  }, [t, r]), s = x(() => {
+  }, [t, r]), s = W(() => {
     r(null);
   }, [r]);
   return Te(() => {
@@ -1139,11 +1152,11 @@ function ee({
     }
   }, [e, t]), [n ? JSON.parse(n) : null, r, a, s];
 }
-var T = [];
+var S = [];
 for (var Ee = 0; Ee < 256; ++Ee)
-  T.push((Ee + 256).toString(16).slice(1));
+  S.push((Ee + 256).toString(16).slice(1));
 function Kn(e, t = 0) {
-  return (T[e[t + 0]] + T[e[t + 1]] + T[e[t + 2]] + T[e[t + 3]] + "-" + T[e[t + 4]] + T[e[t + 5]] + "-" + T[e[t + 6]] + T[e[t + 7]] + "-" + T[e[t + 8]] + T[e[t + 9]] + "-" + T[e[t + 10]] + T[e[t + 11]] + T[e[t + 12]] + T[e[t + 13]] + T[e[t + 14]] + T[e[t + 15]]).toLowerCase();
+  return (S[e[t + 0]] + S[e[t + 1]] + S[e[t + 2]] + S[e[t + 3]] + "-" + S[e[t + 4]] + S[e[t + 5]] + "-" + S[e[t + 6]] + S[e[t + 7]] + "-" + S[e[t + 8]] + S[e[t + 9]] + "-" + S[e[t + 10]] + S[e[t + 11]] + S[e[t + 12]] + S[e[t + 13]] + S[e[t + 14]] + S[e[t + 15]]).toLowerCase();
 }
 var te, Hn = new Uint8Array(16);
 function Ln() {
@@ -1191,19 +1204,19 @@ async function Mn(e, t, n = 50) {
     await Me(n);
   const i = o.createElement("iframe");
   try {
-    for (await new Promise((u, f) => {
-      let y = !1;
-      const h = () => {
-        y = !0, u();
-      }, p = (m) => {
-        y = !0, f(m);
+    for (await new Promise((l, y) => {
+      let h = !1;
+      const p = () => {
+        h = !0, l();
+      }, m = (g) => {
+        h = !0, y(g);
       };
-      i.onload = h, i.onerror = p;
-      const { style: l } = i;
-      l.setProperty("display", "block", "important"), l.position = "absolute", l.top = "0", l.left = "0", l.visibility = "hidden", i.src = "about:blank", o.body.appendChild(i);
+      i.onload = p, i.onerror = m;
+      const { style: u } = i;
+      u.setProperty("display", "block", "important"), u.position = "absolute", u.top = "0", u.left = "0", u.visibility = "hidden", i.src = "about:blank", o.body.appendChild(i);
       const d = () => {
-        var m, S;
-        y || (((S = (m = i.contentWindow) == null ? void 0 : m.document) == null ? void 0 : S.readyState) === "complete" ? h() : setTimeout(d, 10));
+        var g, R;
+        h || (((R = (g = i.contentWindow) == null ? void 0 : g.document) == null ? void 0 : R.readyState) === "complete" ? p() : setTimeout(d, 10));
       };
       d();
     }); !((a = (r = i.contentWindow) == null ? void 0 : r.document) != null && a.body); )
@@ -1246,11 +1259,11 @@ const Gn = {
       }
     });
   }
-}), st = { browser: "" }, Vn = async (e) => typeof navigator > "u" ? st : { browser: navigator.userAgent }, it = {
+}), st = { browser: "" }, Yn = async (e) => typeof navigator > "u" ? st : { browser: navigator.userAgent }, it = {
   canvas: {
     data: ""
   }
-}, Yn = async (e) => {
+}, Vn = async (e) => {
   try {
     const t = Array.from(
       { length: 3 },
@@ -1287,13 +1300,13 @@ const Gn = {
   const r = [];
   for (let o = 0; o < e[0].data.length; o++) {
     const i = [];
-    for (let u = 0; u < e.length; u++)
-      i.push(e[u].data[o]);
+    for (let l = 0; l < e.length; l++)
+      i.push(e[l].data[o]);
     r.push(Fn(i));
   }
   const a = r, s = new Uint8ClampedArray(a);
   return new ImageData(s, t, n);
-}, qn = [], zn = "mmMwWLliI0O&1", Qn = "48px", K = ["monospace", "sans-serif", "serif"], Ge = [
+}, qn = [], zn = "mmMwWLliI0O&1", Qn = "48px", $ = ["monospace", "sans-serif", "serif"], Ge = [
   "sans-serif-thin",
   "ARNO PRO",
   "Agency FB",
@@ -1337,22 +1350,22 @@ const Gn = {
   const a = n.createElement("div");
   a.style.setProperty("visibility", "hidden", "important");
   const s = {}, o = {}, i = (d) => {
-    const m = n.createElement("span"), { style: S } = m;
-    return S.position = "absolute", S.top = "0", S.left = "0", S.fontFamily = d, m.textContent = zn, a.appendChild(m), m;
-  }, u = (d, m) => i(`'${d}',${m}`), f = () => K.map(i), y = () => {
+    const g = n.createElement("span"), { style: R } = g;
+    return R.position = "absolute", R.top = "0", R.left = "0", R.fontFamily = d, g.textContent = zn, a.appendChild(g), g;
+  }, l = (d, g) => i(`'${d}',${g}`), y = () => $.map(i), h = () => {
     const d = {};
-    for (const m of Ge)
-      d[m] = K.map(
-        (S) => u(m, S)
+    for (const g of Ge)
+      d[g] = $.map(
+        (R) => l(g, R)
       );
     return d;
-  }, h = (d) => K.some(
-    (m, S) => d[S].offsetWidth !== s[m] || d[S].offsetHeight !== o[m]
-  ), p = f(), l = y();
+  }, p = (d) => $.some(
+    (g, R) => d[R].offsetWidth !== s[g] || d[R].offsetHeight !== o[g]
+  ), m = y(), u = h();
   r.appendChild(a);
-  for (let d = 0; d < K.length; d++)
-    s[K[d]] = p[d].offsetWidth, o[K[d]] = p[d].offsetHeight;
-  return Ge.filter((d) => h(l[d]));
+  for (let d = 0; d < $.length; d++)
+    s[$[d]] = m[d].offsetWidth, o[$[d]] = m[d].offsetHeight;
+  return Ge.filter((d) => p(u[d]));
 }), ct = {
   vendor: "",
   vendorUnmasked: "",
@@ -1491,8 +1504,8 @@ const cr = async (e) => {
   try {
     return Promise.all([
       Jn(),
-      Vn(),
       Yn(),
+      Vn(),
       Xn(),
       rr(),
       or(),
@@ -1521,10 +1534,10 @@ const cr = async (e) => {
 }, ne = "Oops! It looks like your session has expired. For your security, please log in again to continue.", dr = "Your session has been successfully terminated.", re = "Login failed. Please try again.", Ae = "Error getting access token, please re-authenticate.", hr = "You forgot to wrap your component in <AuthProvider>.", le = {
   dev: "https://auth.gizmette.local.com:3003",
   prod: "https://mylogin.gizmette.com/auth"
-}, ae = "@@auth@@", J = "LOADING", V = "LOGIN", ht = "LOGOUT", pr = process.env.NODE_ENV === "production", pt = !pr, fr = (e) => {
+}, ae = "@@auth@@", J = "LOADING", Y = "LOGIN", ht = "LOGOUT", pr = process.env.NODE_ENV === "production", pt = !pr, fr = (e) => {
   try {
     const t = In(e);
-    return t ? t[I.USER_ID_KEY] : "";
+    return t ? t[T.USER_ID_KEY] : "";
   } catch {
     return "";
   }
@@ -1593,11 +1606,11 @@ const cr = async (e) => {
   sessionExpiration: s,
   code: o,
   code_verifier: i,
-  domain: u,
-  fingerprint: f
+  domain: l,
+  fingerprint: y
 }) => {
   try {
-    const y = await pe({
+    const h = await pe({
       type: de.AUTHENTICATE,
       clientId: n,
       params: {
@@ -1608,15 +1621,15 @@ const cr = async (e) => {
         nonce: r,
         code: o,
         code_verifier: i,
-        domain: u,
-        fingerprint: f
+        domain: l,
+        fingerprint: y
       }
-    }), h = await F(y.data.idToken);
-    return h && h.payload[I.USER_ID_KEY] !== "" && h.payload[I.NONCE_KEY] === r ? {
-      idToken: y.data.idToken,
-      accessToken: y.data.accessToken,
-      refreshToken: y.data.refreshToken,
-      userId: h.payload[I.USER_ID_KEY],
+    }), p = await x(h.data.idToken);
+    return p && p.payload[T.USER_ID_KEY] !== "" && p.payload[T.NONCE_KEY] === r ? {
+      idToken: h.data.idToken,
+      accessToken: h.data.accessToken,
+      refreshToken: h.data.refreshToken,
+      userId: p.payload[T.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -1673,11 +1686,11 @@ const cr = async (e) => {
         domain: s,
         fingerprint: await ft()
       }
-    }), i = await F(o.data.accessToken);
-    return i && i.payload[I.USER_ID_KEY] !== "" && i.payload[I.NONCE_KEY] === n ? {
+    }), i = await x(o.data.accessToken);
+    return i && i.payload[T.USER_ID_KEY] !== "" && i.payload[T.NONCE_KEY] === n ? {
       accessToken: o.data.accessToken,
       refreshToken: o.data.refreshToken,
-      userId: i.payload[I.USER_ID_KEY],
+      userId: i.payload[T.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -1762,7 +1775,7 @@ const cr = async (e) => {
 				username,
 		}
 	}`
-}, H = {
+}, K = {
   GET_REGISTRATION_OPTIONS: {
     schema: oe.GET_REGISTRATION_OPTIONS,
     method: "getPasskeyRegistrationOptions"
@@ -1779,7 +1792,7 @@ const cr = async (e) => {
     schema: oe.VERIFY_AUTHENTICATION,
     method: "verifyPasskeyAuthentication"
   }
-}, L = async ({
+}, H = async ({
   accessToken: e,
   type: t,
   clientId: n,
@@ -1805,11 +1818,11 @@ const cr = async (e) => {
     );
     if (o.status !== 200)
       return { status: o.status, data: [] };
-    const { data: i, errors: u } = await o.json();
+    const { data: i, errors: l } = await o.json();
     return {
       status: o.status,
       data: i[t.method],
-      errors: u
+      errors: l
     };
   } catch (a) {
     return console.error(a), { status: 500, data: [] };
@@ -1852,8 +1865,8 @@ class wr {
     nonce: r,
     domain: a
   }) {
-    const s = await F(this.refreshToken);
-    if (s && s.payload[I.USER_ID_KEY] !== "") {
+    const s = await x(this.refreshToken);
+    if (s && s.payload[T.USER_ID_KEY] !== "") {
       const o = await mr({
         clientId: t,
         userId: n,
@@ -1875,20 +1888,25 @@ class wr {
       };
   }
 }
-const W = () => {
+const Er = (e) => W(
+  (...t) => {
+    e && console.info(`==> [Auth ${Date.now()}]: `, ...t);
+  },
+  [e]
+), L = () => {
   throw new Error(hr);
-}, yt = Ct({
+}, yt = Pt({
   isAuthenticated: !1,
   isLoading: !1,
   authenticationType: null,
-  login: W,
-  logout: W,
-  getAccessToken: W,
-  getIdToken: W,
-  registeringForPasskey: W,
-  loginWithPasskey: W,
+  login: L,
+  logout: L,
+  getAccessToken: L,
+  getIdToken: L,
+  registeringForPasskey: L,
+  loginWithPasskey: L,
   logoutReason: ""
-}), Er = kt.createContext({
+}), Sr = kt.createContext({
   state: {
     isLoading: !0,
     isAuthenticated: !1,
@@ -1899,10 +1917,10 @@ const W = () => {
   },
   dispatch: () => {
   }
-}), Sr = (e, t) => (t == null ? void 0 : t.type) === J ? {
+}), Ar = (e, t) => (t == null ? void 0 : t.type) === J ? {
   ...e,
   isLoading: t.payload.isLoading
-} : (t == null ? void 0 : t.type) === V ? {
+} : (t == null ? void 0 : t.type) === Y ? {
   ...e,
   isLoading: !1,
   isAuthenticated: !0,
@@ -1916,38 +1934,33 @@ const W = () => {
   user: void 0,
   authenticationType: null,
   logoutReason: t.payload.logoutReason
-} : e, Pr = ({
+} : e, Or = ({
   children: e,
   sessionExpiration: t,
   clientId: n,
   domain: r = "",
   debug: a = !1
 }) => {
-  const [s, o] = Ot(Sr, {
+  const [s, o] = Ot(Ar, {
     isLoading: !0,
     isAuthenticated: !1,
     authenticationType: null,
     user: void 0,
     logoutReason: "",
     debug: a
-  }), i = Pe(!1), u = Pe(""), [f, y, , h] = ee({
+  }), i = Er(a), l = Ce(!1), y = Ce(""), [h, p, , m] = ee({
     key: `${ae}::${n}::@@user@@`
-  }), [p, l, , d] = ee({
+  }), [u, d, , g] = ee({
     key: `${ae}::${n}::@@access@@`
-  }), [m, S, , q] = ee(
+  }), [R, B, , q] = ee(
     {
       key: `${ae}::${n}::@@refresh@@`
     }
   ), [gt, Ie, , _e] = ee({
     key: `${ae}::${n}::@@nonce@@`
-  }), w = x(
-    (...c) => {
-      a && console.info(`==> [Auth ${Date.now()}]: `, ...c);
-    },
-    [a]
-  ), mt = new wr(p, m), $ = x(
+  }), mt = new wr(u, R), U = W(
     (c) => {
-      w(
+      i(
         "removeStateAndLocalStorage: removing state and local storage with reason: ",
         c
       ), o({
@@ -1955,178 +1968,178 @@ const W = () => {
         payload: {
           logoutReason: c || ne
         }
-      }), h(), d(), q(), _e(), o({ type: J, payload: { isLoading: !1 } });
+      }), m(), g(), q(), _e(), o({ type: J, payload: { isLoading: !1 } });
     },
-    [d, h, _e, q, w]
-  ), D = x(
+    [g, m, _e, q, i]
+  ), N = W(
     async (c) => {
-      w("invalidateAndLogout: invalidating and logging out");
-      const { user: E } = s, g = (E == null ? void 0 : E.userId) || fr(f);
-      g || w(
+      i("invalidateAndLogout: invalidating and logging out");
+      const { user: w } = s, f = (w == null ? void 0 : w.userId) || fr(h);
+      f || i(
         "invalidateAndLogout: user cannot be identified, logging out without userId"
       ), await yr({
-        userId: g,
-        idToken: f,
-        accessToken: p,
-        refreshToken: m,
+        userId: f,
+        idToken: h,
+        accessToken: u,
+        refreshToken: R,
         clientId: n,
         domain: r
-      }), $(c || ne);
+      }), U(c || ne);
     },
     [
-      p,
+      u,
       s,
       n,
       r,
-      f,
-      m,
-      $,
-      w
+      h,
+      R,
+      U,
+      i
     ]
   );
-  Te(() => ((async () => (w("useEffect: setting the fingerprint"), u.current = await ft()))(), () => {
-    w("useEffect: cleaning up the fingerprint"), u.current = "";
+  Te(() => ((async () => (i("useEffect: setting the fingerprint"), y.current = await ft()))(), () => {
+    i("useEffect: cleaning up the fingerprint"), y.current = "";
   }), []), Te(() => {
-    if (!i.current)
-      return s.isLoading && f !== null ? (async () => {
+    if (!l.current)
+      return s.isLoading && h !== null ? (async () => {
         try {
-          const c = await F(f);
-          c && c.payload[I.USER_ID_KEY] !== "" ? (w("useEffect: setting the authentication state"), o({
-            type: V,
+          const c = await x(h);
+          c && c.payload[T.USER_ID_KEY] !== "" ? (i("useEffect: setting the authentication state"), o({
+            type: Y,
             payload: {
-              authenticationType: c.payload[I.AUTH_TYPE_KEY],
+              authenticationType: c.payload[T.AUTH_TYPE_KEY],
               user: {
-                userId: c.payload[I.USER_ID_KEY],
-                username: c.payload[I.USERNAME_KEY]
+                userId: c.payload[T.USER_ID_KEY],
+                username: c.payload[T.USERNAME_KEY]
               }
             }
-          })) : (w("useEffect: invalid JWT, invalidating and logging out"), await D(ne));
+          })) : (i("useEffect: invalid JWT, invalidating and logging out"), await N(ne));
         } catch {
-          w(
+          i(
             "useEffect: exception validating JWT, invalidating and logging out"
-          ), await D(ne);
+          ), await N(ne);
         }
-      })() : (w("useEffect: setting the loading state to false"), o({ type: J, payload: { isLoading: !1 } })), () => {
-        i.current = !0;
+      })() : (i("useEffect: setting the loading state to false"), o({ type: J, payload: { isLoading: !1 } })), () => {
+        l.current = !0;
       };
-  }, [s.isLoading, f, D, w]);
-  const wt = async (c, E, g) => {
-    const _ = Se();
-    if (Ie(_), o({ type: J, payload: { isLoading: !0 } }), h(), d(), q(), w("login: Logging in with type: ", g), g === j.CODE) {
+  }, [s.isLoading, h, N, i]);
+  const wt = async (c, w, f) => {
+    const I = Se();
+    if (Ie(I), o({ type: J, payload: { isLoading: !0 } }), m(), g(), q(), i("login: Logging in with type: ", f), f === j.CODE) {
       const { code_verifier: bt, code_challenge: It } = await Dn(), ve = await gr({
-        nonce: _,
+        nonce: I,
         clientId: n,
         code_challenge: It
       });
       if (ve.status) {
         const G = await Je({
           username: c,
-          password: E,
+          password: w,
           clientId: n,
           sessionExpiration: t,
-          nonce: _,
-          type: g,
+          nonce: I,
+          type: f,
           code: ve.code,
           code_verifier: bt,
           domain: r,
-          fingerprint: u.current
+          fingerprint: y.current
         });
-        return G.status ? (y(G.idToken), l(G.accessToken), S(G.refreshToken), o({
-          type: V,
+        return G.status ? (p(G.idToken), d(G.accessToken), B(G.refreshToken), o({
+          type: Y,
           payload: {
-            authenticationType: g,
+            authenticationType: f,
             user: {
               userId: G.userId,
               username: c
             }
           }
-        }), !0) : ($(re), !1);
+        }), !0) : (U(re), !1);
       }
       return !1;
     }
     const M = await Je({
       username: c,
-      password: E,
+      password: w,
       clientId: n,
       sessionExpiration: t,
-      nonce: _,
-      type: g,
+      nonce: I,
+      type: f,
       domain: r,
-      fingerprint: u.current
+      fingerprint: y.current
     });
-    return M.status ? (y(M.idToken), l(M.accessToken), S(M.refreshToken), o({
-      type: V,
+    return M.status ? (p(M.idToken), d(M.accessToken), B(M.refreshToken), o({
+      type: Y,
       payload: {
-        authenticationType: g,
+        authenticationType: f,
         user: {
           userId: M.userId,
           username: c
         }
       }
-    }), !0) : ($(re), !1);
+    }), !0) : (U(re), !1);
   }, Et = async (c) => {
-    c == null || c.preventDefault(), await D(dr);
+    c == null || c.preventDefault(), await N(dr);
   }, St = async () => {
-    const { isAuthenticated: c, user: E } = s;
+    const { isAuthenticated: c, user: w } = s;
     try {
-      if (c && E && E.userId) {
-        if (p) {
-          w("getAccessToken");
-          const _ = await F(p);
-          if (_ && _.payload[I.USER_ID_KEY] !== "")
-            return p;
+      if (c && w && w.userId) {
+        if (u) {
+          i("getAccessToken");
+          const I = await x(u);
+          if (I && I.payload[T.USER_ID_KEY] !== "")
+            return u;
         }
-        w("getAccessToken: invalid access token, refreshing it");
-        const g = await mt.refreshtoken({
+        i("getAccessToken: invalid access token, refreshing it");
+        const f = await mt.refreshtoken({
           clientId: n,
-          userId: E.userId,
+          userId: w.userId,
           nonce: gt,
           domain: r
         });
-        return g.status && g.status === "success" ? (l(g.newAccessToken), S(g.newRefreshToken), g.newAccessToken) : (w("getAccessToken: invalid refresh token, re-authenticating user"), await D(Ae), "");
+        return f.status && f.status === "success" ? (d(f.newAccessToken), B(f.newRefreshToken), f.newAccessToken) : (i("getAccessToken: invalid refresh token, re-authenticating user"), await N(Ae), "");
       }
-      return w(
+      return i(
         "getAccessToken: user is not authenticated, cannot get access token"
-      ), await D(Ae), "";
+      ), await N(Ae), "";
     } catch {
-      return w(
+      return i(
         "getAccessToken: exception occurred, invalidating and logging out"
-      ), await D(Ae), "";
+      ), await N(Ae), "";
     }
   }, At = () => {
-    if (s.isAuthenticated && f)
-      return f;
+    if (s.isAuthenticated && h)
+      return h;
   }, Tt = async () => {
     const { user: c } = s;
-    let E = await L({
-      accessToken: p,
+    let w = await H({
+      accessToken: u,
       clientId: n,
-      type: H.GET_REGISTRATION_OPTIONS,
+      type: K.GET_REGISTRATION_OPTIONS,
       params: {
         clientId: n,
         id: c == null ? void 0 : c.userId,
         username: c == null ? void 0 : c.username
       }
     });
-    if (E.status)
+    if (w.status)
       try {
-        const g = await Kt(E.data);
-        E = await L({
-          accessToken: p,
+        const f = await Kt(w.data);
+        w = await H({
+          accessToken: u,
           clientId: n,
-          type: H.VERIFY_REGISTRATION,
+          type: K.VERIFY_REGISTRATION,
           params: {
             clientId: n,
             id: c == null ? void 0 : c.userId,
             username: c == null ? void 0 : c.username,
-            registration: g
+            registration: f
           }
         });
       } catch {
-        return await L({
-          accessToken: p,
+        return await H({
+          accessToken: u,
           clientId: n,
-          type: H.VERIFY_REGISTRATION,
+          type: K.VERIFY_REGISTRATION,
           params: {
             clientId: n,
             id: c == null ? void 0 : c.userId,
@@ -2137,58 +2150,58 @@ const W = () => {
       }
   }, Rt = async () => {
     const c = Se();
-    Ie(c), o({ type: J, payload: { isLoading: !0 } }), h(), d(), q(), w("loginWithPasskey");
-    const E = Se();
-    let g = await L({
-      accessToken: p,
+    Ie(c), o({ type: J, payload: { isLoading: !0 } }), m(), g(), q(), i("loginWithPasskey");
+    const w = Se();
+    let f = await H({
+      accessToken: u,
       clientId: n,
-      type: H.GET_AUTHENTICATION_OPTIONS,
+      type: K.GET_AUTHENTICATION_OPTIONS,
       params: {
-        id: E,
+        id: w,
         clientId: n
       }
     });
-    if (g.status)
+    if (f.status)
       try {
-        const _ = await Wt(g.data);
-        return g = await L({
-          accessToken: p,
+        const I = await Wt(f.data);
+        return f = await H({
+          accessToken: u,
           clientId: n,
-          type: H.VERIFY_AUTHENTICATION,
+          type: K.VERIFY_AUTHENTICATION,
           params: {
             clientId: n,
-            id: E,
-            authentication: _,
+            id: w,
+            authentication: I,
             nonce: c,
             domain: r,
-            fingerprint: u.current
+            fingerprint: y.current
           }
-        }), g.data.status === "success" ? (y(g.data.idToken), l(g.data.accessToken), S(g.data.refreshToken), o({
-          type: V,
+        }), f.data.status === "success" ? (p(f.data.idToken), d(f.data.accessToken), B(f.data.refreshToken), o({
+          type: Y,
           payload: {
             authenticationType: j.PASSKEY,
             user: {
-              userId: g.data.userId,
-              username: g.data.username
+              userId: f.data.userId,
+              username: f.data.username
             }
           }
-        }), !0) : ($(re), !1);
+        }), !0) : (U(re), !1);
       } catch {
-        return await L({
-          accessToken: p,
+        return await H({
+          accessToken: u,
           clientId: n,
-          type: H.VERIFY_AUTHENTICATION,
+          type: K.VERIFY_AUTHENTICATION,
           params: {
             clientId: n,
-            id: E,
+            id: w,
             authentication: {},
             nonce: c,
             domain: r
           }
-        }), $(re), !1;
+        }), U(re), !1;
       }
   };
-  return /* @__PURE__ */ ke(Er.Provider, { value: { state: s, dispatch: o }, children: /* @__PURE__ */ ke(
+  return /* @__PURE__ */ ke(Sr.Provider, { value: { state: s, dispatch: o }, children: /* @__PURE__ */ ke(
     yt.Provider,
     {
       value: {
@@ -2203,9 +2216,10 @@ const W = () => {
       children: e
     }
   ) });
-}, Cr = (e = yt) => Nt(e);
+}, Nr = (e = yt) => Nt(e);
 export {
   j as AUTH_TYPES,
-  Pr as AuthProvider,
-  Cr as useAuth
+  Or as AuthProvider,
+  Pr as isGranted,
+  Nr as useAuth
 };