@versini/auth-provider 6.3.3 → 6.3.5

package/dist/index.js

@@ -1,16 +1,16 @@
-var It = Object.defineProperty;
-var _t = (e, t, n) => t in e ? It(e, t, { enumerable: !0, configurable: !0, writable: !0, value: n }) : e[t] = n;
-var Q = (e, t, n) => _t(e, typeof t != "symbol" ? t + "" : t, n);
+var vt = Object.defineProperty;
+var Ct = (e, t, n) => t in e ? vt(e, t, { enumerable: !0, configurable: !0, writable: !0, value: n }) : e[t] = n;
+var Q = (e, t, n) => Ct(e, typeof t != "symbol" ? t + "" : t, n);
 import { jsx as ve } from "react/jsx-runtime";
-import vt, { useSyncExternalStore as kt, useCallback as x, useEffect as Ae, createContext as Ct, useReducer as Pt, useRef as ke, useContext as Ot } from "react";
+import Pt, { useSyncExternalStore as kt, useCallback as x, useEffect as Ae, createContext as Ot, useReducer as Nt, useRef as Ce, useContext as Dt } from "react";
 /*!
-  @versini/auth-provider v6.3.3
+  @versini/auth-provider v6.3.5
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_CLIENT__ || (window.__VERSINI_AUTH_CLIENT__ = {
-    version: "6.3.3",
-    buildTime: "07/24/2024 07:46 AM EDT",
+    version: "6.3.5",
+    buildTime: "07/24/2024 07:48 PM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
@@ -30,9 +30,9 @@ function ie(e) {
   return s;
 }
 function Te() {
-  return (window == null ? void 0 : window.PublicKeyCredential) !== void 0 && typeof window.PublicKeyCredential == "function";
+  return window?.PublicKeyCredential !== void 0 && typeof window.PublicKeyCredential == "function";
 }
-function Je(e) {
+function Ye(e) {
   const { id: t } = e;
   return {
     ...e,
@@ -40,7 +40,7 @@ function Je(e) {
     transports: e.transports
   };
 }
-function Ye(e) {
+function Ve(e) {
   return e === "localhost" || /^([a-z0-9]+(-[a-z0-9]+)*\.)+[a-z]{2,}$/i.test(e);
 }
 class b extends Error {
@@ -48,8 +48,7 @@ class b extends Error {
     super(t, { cause: r }), this.name = a ?? r.name, this.code = n;
   }
 }
-function Nt({ error: e, options: t }) {
-  var r, a;
+function Ut({ error: e, options: t }) {
   const { publicKey: n } = t;
   if (!n)
     throw Error("options was missing required publicKey property");
@@ -61,13 +60,13 @@ function Nt({ error: e, options: t }) {
         cause: e
       });
   } else if (e.name === "ConstraintError") {
-    if (((r = n.authenticatorSelection) == null ? void 0 : r.requireResidentKey) === !0)
+    if (n.authenticatorSelection?.requireResidentKey === !0)
       return new b({
         message: "Discoverable credentials were required but no available authenticator supported it",
         code: "ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",
         cause: e
       });
-    if (((a = n.authenticatorSelection) == null ? void 0 : a.userVerification) === "required")
+    if (n.authenticatorSelection?.userVerification === "required")
       return new b({
         message: "User verification was required but no available authenticator supported it",
         code: "ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",
@@ -87,7 +86,7 @@ function Nt({ error: e, options: t }) {
         cause: e
       });
     if (e.name === "NotSupportedError")
-      return n.pubKeyCredParams.filter((o) => o.type === "public-key").length === 0 ? new b({
+      return n.pubKeyCredParams.filter((a) => a.type === "public-key").length === 0 ? new b({
         message: 'No entry in pubKeyCredParams was of type "public-key"',
         code: "ERROR_MALFORMED_PUBKEYCREDPARAMS",
         cause: e
@@ -97,9 +96,9 @@ function Nt({ error: e, options: t }) {
         cause: e
       });
     if (e.name === "SecurityError") {
-      const s = window.location.hostname;
-      if (Ye(s)) {
-        if (n.rp.id !== s)
+      const r = window.location.hostname;
+      if (Ve(r)) {
+        if (n.rp.id !== r)
           return new b({
             message: `The RP ID "${n.rp.id}" is invalid for this domain`,
             code: "ERROR_INVALID_RP_ID",
@@ -126,7 +125,7 @@ function Nt({ error: e, options: t }) {
   }
   return e;
 }
-class Dt {
+class $t {
   createNewAbortSignal() {
     if (this.controller) {
       const n = new Error("Cancelling existing WebAuthn API call for new one");
@@ -142,13 +141,12 @@ class Dt {
     }
   }
 }
-const Ve = new Dt(), Ut = ["cross-platform", "platform"];
-function je(e) {
-  if (e && !(Ut.indexOf(e) < 0))
+const je = new $t(), Kt = ["cross-platform", "platform"];
+function Fe(e) {
+  if (e && !(Kt.indexOf(e) < 0))
     return e;
 }
-async function $t(e) {
-  var m;
+async function Ht(e) {
   if (!Te())
     throw new Error("WebAuthn is not supported in this browser");
   const n = { publicKey: {
@@ -158,41 +156,41 @@ async function $t(e) {
       ...e.user,
       id: ie(e.user.id)
     },
-    excludeCredentials: (m = e.excludeCredentials) == null ? void 0 : m.map(Je)
+    excludeCredentials: e.excludeCredentials?.map(Ye)
   } };
-  n.signal = Ve.createNewAbortSignal();
+  n.signal = je.createNewAbortSignal();
   let r;
   try {
     r = await navigator.credentials.create(n);
-  } catch (u) {
-    throw Nt({ error: u, options: n });
+  } catch (y) {
+    throw Ut({ error: y, options: n });
   }
   if (!r)
     throw new Error("Registration was not completed");
   const { id: a, rawId: s, response: o, type: i } = r;
-  let l;
-  typeof o.getTransports == "function" && (l = o.getTransports());
-  let y;
+  let c;
+  typeof o.getTransports == "function" && (c = o.getTransports());
+  let g;
   if (typeof o.getPublicKeyAlgorithm == "function")
     try {
-      y = o.getPublicKeyAlgorithm();
-    } catch (u) {
-      fe("getPublicKeyAlgorithm()", u);
+      g = o.getPublicKeyAlgorithm();
+    } catch (y) {
+      fe("getPublicKeyAlgorithm()", y);
     }
-  let h;
+  let l;
   if (typeof o.getPublicKey == "function")
     try {
-      const u = o.getPublicKey();
-      u !== null && (h = v(u));
-    } catch (u) {
-      fe("getPublicKey()", u);
+      const y = o.getPublicKey();
+      y !== null && (l = v(y));
+    } catch (y) {
+      fe("getPublicKey()", y);
     }
-  let p;
+  let h;
   if (typeof o.getAuthenticatorData == "function")
     try {
-      p = v(o.getAuthenticatorData());
-    } catch (u) {
-      fe("getAuthenticatorData()", u);
+      h = v(o.getAuthenticatorData());
+    } catch (y) {
+      fe("getAuthenticatorData()", y);
     }
   return {
     id: a,
@@ -200,27 +198,27 @@ async function $t(e) {
     response: {
       attestationObject: v(o.attestationObject),
       clientDataJSON: v(o.clientDataJSON),
-      transports: l,
-      publicKeyAlgorithm: y,
-      publicKey: h,
-      authenticatorData: p
+      transports: c,
+      publicKeyAlgorithm: g,
+      publicKey: l,
+      authenticatorData: h
     },
     type: i,
     clientExtensionResults: r.getClientExtensionResults(),
-    authenticatorAttachment: je(r.authenticatorAttachment)
+    authenticatorAttachment: Fe(r.authenticatorAttachment)
   };
 }
 function fe(e, t) {
   console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
 `, t);
 }
-function Kt() {
+function Lt() {
   if (!Te())
     return new Promise((t) => t(!1));
   const e = window.PublicKeyCredential;
   return e.isConditionalMediationAvailable === void 0 ? new Promise((t) => t(!1)) : e.isConditionalMediationAvailable();
 }
-function Ht({ error: e, options: t }) {
+function Wt({ error: e, options: t }) {
   const { publicKey: n } = t;
   if (!n)
     throw Error("options was missing required publicKey property");
@@ -240,7 +238,7 @@ function Ht({ error: e, options: t }) {
       });
     if (e.name === "SecurityError") {
       const r = window.location.hostname;
-      if (Ye(r)) {
+      if (Ve(r)) {
         if (n.rpId !== r)
           return new b({
             message: `The RP ID "${n.rpId}" is invalid for this domain`,
@@ -261,47 +259,46 @@ function Ht({ error: e, options: t }) {
   }
   return e;
 }
-async function Lt(e, t = !1) {
-  var p, m;
+async function xt(e, t = !1) {
   if (!Te())
     throw new Error("WebAuthn is not supported in this browser");
   let n;
-  ((p = e.allowCredentials) == null ? void 0 : p.length) !== 0 && (n = (m = e.allowCredentials) == null ? void 0 : m.map(Je));
+  e.allowCredentials?.length !== 0 && (n = e.allowCredentials?.map(Ye));
   const r = {
     ...e,
     challenge: ie(e.challenge),
     allowCredentials: n
   }, a = {};
   if (t) {
-    if (!await Kt())
+    if (!await Lt())
       throw Error("Browser does not support WebAuthn autofill");
     if (document.querySelectorAll("input[autocomplete$='webauthn']").length < 1)
       throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');
     a.mediation = "conditional", r.allowCredentials = [];
   }
-  a.publicKey = r, a.signal = Ve.createNewAbortSignal();
+  a.publicKey = r, a.signal = je.createNewAbortSignal();
   let s;
   try {
     s = await navigator.credentials.get(a);
-  } catch (u) {
-    throw Ht({ error: u, options: a });
+  } catch (h) {
+    throw Wt({ error: h, options: a });
   }
   if (!s)
     throw new Error("Authentication was not completed");
-  const { id: o, rawId: i, response: l, type: y } = s;
-  let h;
-  return l.userHandle && (h = v(l.userHandle)), {
+  const { id: o, rawId: i, response: c, type: g } = s;
+  let l;
+  return c.userHandle && (l = v(c.userHandle)), {
     id: o,
     rawId: v(i),
     response: {
-      authenticatorData: v(l.authenticatorData),
-      clientDataJSON: v(l.clientDataJSON),
-      signature: v(l.signature),
-      userHandle: h
+      authenticatorData: v(c.authenticatorData),
+      clientDataJSON: v(c.clientDataJSON),
+      signature: v(c.signature),
+      userHandle: l
     },
-    type: y,
+    type: g,
     clientExtensionResults: s.getClientExtensionResults(),
-    authenticatorAttachment: je(s.authenticatorAttachment)
+    authenticatorAttachment: Fe(s.authenticatorAttachment)
   };
 }
 /*!
@@ -311,7 +308,7 @@ async function Lt(e, t = !1) {
 try {
   window.__VERSINI_AUTH_COMMON__ || (window.__VERSINI_AUTH_COMMON__ = {
     version: "3.3.0",
-    buildTime: "07/24/2024 07:46 AM EDT",
+    buildTime: "07/24/2024 07:48 PM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
@@ -324,9 +321,9 @@ const F = {
   CODE: "code",
   REFRESH_TOKEN: "refresh_token",
   PASSKEY: "passkey"
-}, Fe = {
+}, Be = {
   CLIENT_ID: "X-Auth-ClientId"
-}, T = {
+}, A = {
   ALG: "RS256",
   USER_ID_KEY: "sub",
   TOKEN_ID_KEY: "__raw",
@@ -337,7 +334,7 @@ const F = {
   CREATED_AT_KEY: "iat",
   SCOPES_KEY: "scopes",
   ISSUER: "gizmette.com"
-}, Wt = `-----BEGIN PUBLIC KEY-----
+}, Mt = `-----BEGIN PUBLIC KEY-----
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6i3Jd9fY/3COqCw/m7
 w5PKyTYLGAI2I6SIIdpe6i6DOCbEkmDz7LdVsBqwNtVi8gvWYIj+8ol6rU3qu1v5
 i1Jd45GSK4kzkVdgCmQZbM5ak0KI99q5wsrAIzUd+LRJ2HRvWtr5IYdsIiXaQjle
@@ -349,15 +346,15 @@ awIDAQAB
   AUTHENTICATE: "authenticate",
   CODE: "code",
   LOGOUT: "logout"
-}, he = crypto, Be = (e) => e instanceof CryptoKey, X = new TextEncoder(), B = new TextDecoder();
-function xt(...e) {
+}, he = crypto, qe = (e) => e instanceof CryptoKey, X = new TextEncoder(), B = new TextDecoder();
+function Gt(...e) {
   const t = e.reduce((a, { length: s }) => a + s, 0), n = new Uint8Array(t);
   let r = 0;
   for (const a of e)
     n.set(a, r), r += a.length;
   return n;
 }
-const Mt = (e) => {
+const Jt = (e) => {
   const t = atob(e), n = new Uint8Array(t.length);
   for (let r = 0; r < t.length; r++)
     n[r] = t.charCodeAt(r);
@@ -366,7 +363,7 @@ const Mt = (e) => {
   let t = e;
   t instanceof Uint8Array && (t = B.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
   try {
-    return Mt(t);
+    return Jt(t);
   } catch {
     throw new TypeError("The input to be decoded is not correctly encoded.");
   }
@@ -386,7 +383,7 @@ let D = class extends Error {
   constructor(t, n, r = "unspecified", a = "unspecified") {
     super(t), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = r, this.reason = a, this.payload = n;
   }
-}, Ce = class extends D {
+}, Pe = class extends D {
   static get code() {
     return "ERR_JWT_EXPIRED";
   }
@@ -394,7 +391,7 @@ let D = class extends Error {
     super(t), this.code = "ERR_JWT_EXPIRED", this.claim = r, this.reason = a, this.payload = n;
   }
 };
-class Gt extends D {
+class Yt extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_ALG_NOT_ALLOWED";
   }
@@ -410,7 +407,7 @@ let O = class extends D {
     return "ERR_JOSE_NOT_SUPPORTED";
   }
 };
-class A extends D {
+class S extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_INVALID";
   }
@@ -418,7 +415,7 @@ class A extends D {
     return "ERR_JWS_INVALID";
   }
 }
-let C = class extends D {
+let P = class extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JWT_INVALID";
   }
@@ -426,7 +423,7 @@ let C = class extends D {
     return "ERR_JWT_INVALID";
   }
 };
-class Jt extends D {
+class Vt extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED", this.message = "signature verification failed";
   }
@@ -434,7 +431,7 @@ class Jt extends D {
     return "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
   }
 }
-function k(e, t = "algorithm.name") {
+function C(e, t = "algorithm.name") {
   return new TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`);
 }
 function Z(e, t) {
@@ -443,7 +440,7 @@ function Z(e, t) {
 function ye(e) {
   return parseInt(e.name.slice(4), 10);
 }
-function Yt(e) {
+function jt(e) {
   switch (e) {
     case "ES256":
       return "P-256";
@@ -455,7 +452,7 @@ function Yt(e) {
       throw new Error("unreachable");
   }
 }
-function Vt(e, t) {
+function Ft(e, t) {
   if (t.length && !t.some((n) => e.usages.includes(n))) {
     let n = "CryptoKey does not support this operation, its usages must include ";
     if (t.length > 2) {
@@ -465,59 +462,59 @@ function Vt(e, t) {
     throw new TypeError(n);
   }
 }
-function jt(e, t, ...n) {
+function Bt(e, t, ...n) {
   switch (t) {
     case "HS256":
     case "HS384":
     case "HS512": {
       if (!Z(e.algorithm, "HMAC"))
-        throw k("HMAC");
+        throw C("HMAC");
       const r = parseInt(t.slice(2), 10);
       if (ye(e.algorithm.hash) !== r)
-        throw k(`SHA-${r}`, "algorithm.hash");
+        throw C(`SHA-${r}`, "algorithm.hash");
       break;
     }
     case "RS256":
     case "RS384":
     case "RS512": {
       if (!Z(e.algorithm, "RSASSA-PKCS1-v1_5"))
-        throw k("RSASSA-PKCS1-v1_5");
+        throw C("RSASSA-PKCS1-v1_5");
       const r = parseInt(t.slice(2), 10);
       if (ye(e.algorithm.hash) !== r)
-        throw k(`SHA-${r}`, "algorithm.hash");
+        throw C(`SHA-${r}`, "algorithm.hash");
       break;
     }
     case "PS256":
     case "PS384":
     case "PS512": {
       if (!Z(e.algorithm, "RSA-PSS"))
-        throw k("RSA-PSS");
+        throw C("RSA-PSS");
       const r = parseInt(t.slice(2), 10);
       if (ye(e.algorithm.hash) !== r)
-        throw k(`SHA-${r}`, "algorithm.hash");
+        throw C(`SHA-${r}`, "algorithm.hash");
       break;
     }
     case "EdDSA": {
       if (e.algorithm.name !== "Ed25519" && e.algorithm.name !== "Ed448")
-        throw k("Ed25519 or Ed448");
+        throw C("Ed25519 or Ed448");
       break;
     }
     case "ES256":
     case "ES384":
     case "ES512": {
       if (!Z(e.algorithm, "ECDSA"))
-        throw k("ECDSA");
-      const r = Yt(t);
+        throw C("ECDSA");
+      const r = jt(t);
       if (e.algorithm.namedCurve !== r)
-        throw k(r, "algorithm.namedCurve");
+        throw C(r, "algorithm.namedCurve");
       break;
     }
     default:
       throw new TypeError("CryptoKey does not support this operation");
   }
-  Vt(e, n);
+  Ft(e, n);
 }
-function qe(e, t, ...n) {
+function ze(e, t, ...n) {
   var r;
   if (n.length > 2) {
     const a = n.pop();
@@ -525,11 +522,11 @@ function qe(e, t, ...n) {
   } else n.length === 2 ? e += `one of type ${n[0]} or ${n[1]}.` : e += `of type ${n[0]}.`;
   return t == null ? e += ` Received ${t}` : typeof t == "function" && t.name ? e += ` Received function ${t.name}` : typeof t == "object" && t != null && (r = t.constructor) != null && r.name && (e += ` Received an instance of ${t.constructor.name}`), e;
 }
-const Pe = (e, ...t) => qe("Key must be ", e, ...t);
-function ze(e, t, ...n) {
-  return qe(`Key for the ${e} algorithm must be `, t, ...n);
+const ke = (e, ...t) => ze("Key must be ", e, ...t);
+function Qe(e, t, ...n) {
+  return ze(`Key for the ${e} algorithm must be `, t, ...n);
 }
-const Qe = (e) => Be(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", ce = ["CryptoKey"], Ft = (...e) => {
+const Xe = (e) => qe(e) ? !0 : e?.[Symbol.toStringTag] === "KeyObject", ce = ["CryptoKey"], qt = (...e) => {
   const t = e.filter(Boolean);
   if (t.length === 0 || t.length === 1)
     return !0;
@@ -548,11 +545,11 @@ const Qe = (e) => Be(e) ? !0 : (e == null ? void 0 : e[Symbol.toStringTag]) ===
   }
   return !0;
 };
-function Bt(e) {
+function zt(e) {
   return typeof e == "object" && e !== null;
 }
 function ue(e) {
-  if (!Bt(e) || Object.prototype.toString.call(e) !== "[object Object]")
+  if (!zt(e) || Object.prototype.toString.call(e) !== "[object Object]")
     return !1;
   if (Object.getPrototypeOf(e) === null)
     return !0;
@@ -561,14 +558,14 @@ function ue(e) {
     t = Object.getPrototypeOf(t);
   return Object.getPrototypeOf(e) === t;
 }
-const qt = (e, t) => {
+const Qt = (e, t) => {
   if (e.startsWith("RS") || e.startsWith("PS")) {
     const { modulusLength: n } = t.algorithm;
     if (typeof n != "number" || n < 2048)
       throw new TypeError(`${e} requires key modulusLength to be 2048 bits or larger`);
   }
 };
-function zt(e) {
+function Xt(e) {
   let t, n;
   switch (e.kty) {
     case "RSA": {
@@ -640,64 +637,64 @@ function zt(e) {
   }
   return { algorithm: t, keyUsages: n };
 }
-const Qt = async (e) => {
+const Zt = async (e) => {
   if (!e.alg)
     throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
-  const { algorithm: t, keyUsages: n } = zt(e), r = [
+  const { algorithm: t, keyUsages: n } = Xt(e), r = [
     t,
     e.ext ?? !1,
     e.key_ops ?? n
   ], a = { ...e };
   return delete a.alg, delete a.use, he.subtle.importKey("jwk", a, ...r);
-}, Xe = (e) => j(e);
+}, Ze = (e) => j(e);
 let ge, me;
-const Ze = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject", et = async (e, t, n, r) => {
+const et = (e) => e?.[Symbol.toStringTag] === "KeyObject", tt = async (e, t, n, r) => {
   let a = e.get(t);
   if (a != null && a[r])
     return a[r];
-  const s = await Qt({ ...n, alg: r });
+  const s = await Zt({ ...n, alg: r });
   return a ? a[r] = s : e.set(t, { [r]: s }), s;
-}, Xt = (e, t) => {
-  if (Ze(e)) {
+}, en = (e, t) => {
+  if (et(e)) {
     let n = e.export({ format: "jwk" });
-    return delete n.d, delete n.dp, delete n.dq, delete n.p, delete n.q, delete n.qi, n.k ? Xe(n.k) : (me || (me = /* @__PURE__ */ new WeakMap()), et(me, e, n, t));
+    return delete n.d, delete n.dp, delete n.dq, delete n.p, delete n.q, delete n.qi, n.k ? Ze(n.k) : (me || (me = /* @__PURE__ */ new WeakMap()), tt(me, e, n, t));
   }
   return e;
-}, Zt = (e, t) => {
-  if (Ze(e)) {
+}, tn = (e, t) => {
+  if (et(e)) {
     let n = e.export({ format: "jwk" });
-    return n.k ? Xe(n.k) : (ge || (ge = /* @__PURE__ */ new WeakMap()), et(ge, e, n, t));
+    return n.k ? Ze(n.k) : (ge || (ge = /* @__PURE__ */ new WeakMap()), tt(ge, e, n, t));
   }
   return e;
-}, en = { normalizePublicKey: Xt, normalizePrivateKey: Zt }, P = (e, t, n = 0) => {
+}, nn = { normalizePublicKey: en, normalizePrivateKey: tn }, k = (e, t, n = 0) => {
   n === 0 && (t.unshift(t.length), t.unshift(6));
   const r = e.indexOf(t[0], n);
   if (r === -1)
     return !1;
   const a = e.subarray(r, r + t.length);
-  return a.length !== t.length ? !1 : a.every((s, o) => s === t[o]) || P(e, t, r + 1);
+  return a.length !== t.length ? !1 : a.every((s, o) => s === t[o]) || k(e, t, r + 1);
 }, Oe = (e) => {
   switch (!0) {
-    case P(e, [42, 134, 72, 206, 61, 3, 1, 7]):
+    case k(e, [42, 134, 72, 206, 61, 3, 1, 7]):
       return "P-256";
-    case P(e, [43, 129, 4, 0, 34]):
+    case k(e, [43, 129, 4, 0, 34]):
       return "P-384";
-    case P(e, [43, 129, 4, 0, 35]):
+    case k(e, [43, 129, 4, 0, 35]):
       return "P-521";
-    case P(e, [43, 101, 110]):
+    case k(e, [43, 101, 110]):
       return "X25519";
-    case P(e, [43, 101, 111]):
+    case k(e, [43, 101, 111]):
       return "X448";
-    case P(e, [43, 101, 112]):
+    case k(e, [43, 101, 112]):
       return "Ed25519";
-    case P(e, [43, 101, 113]):
+    case k(e, [43, 101, 113]):
       return "Ed448";
     default:
       throw new O("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
   }
-}, tn = async (e, t, n, r, a) => {
+}, rn = async (e, t, n, r, a) => {
   let s, o;
-  const i = new Uint8Array(atob(n.replace(e, "")).split("").map((l) => l.charCodeAt(0)));
+  const i = new Uint8Array(atob(n.replace(e, "")).split("").map((c) => c.charCodeAt(0)));
   switch (r) {
     case "PS256":
     case "PS384":
@@ -731,8 +728,8 @@ const Ze = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject",
     case "ECDH-ES+A128KW":
     case "ECDH-ES+A192KW":
     case "ECDH-ES+A256KW": {
-      const l = Oe(i);
-      s = l.startsWith("P-") ? { name: "ECDH", namedCurve: l } : { name: l }, o = [];
+      const c = Oe(i);
+      s = c.startsWith("P-") ? { name: "ECDH", namedCurve: c } : { name: c }, o = [];
       break;
     }
     case "EdDSA":
@@ -742,33 +739,33 @@ const Ze = (e) => (e == null ? void 0 : e[Symbol.toStringTag]) === "KeyObject",
       throw new O('Invalid or unsupported "alg" (Algorithm) value');
   }
   return he.subtle.importKey(t, i, s, !1, o);
-}, nn = (e, t, n) => tn(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
-async function rn(e, t, n) {
+}, an = (e, t, n) => rn(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
+async function on(e, t, n) {
   if (e.indexOf("-----BEGIN PUBLIC KEY-----") !== 0)
     throw new TypeError('"spki" must be SPKI formatted string');
-  return nn(e, t);
+  return an(e, t);
 }
-const se = (e) => e == null ? void 0 : e[Symbol.toStringTag], an = (e, t) => {
+const se = (e) => e?.[Symbol.toStringTag], sn = (e, t) => {
   if (!(t instanceof Uint8Array)) {
-    if (!Qe(t))
-      throw new TypeError(ze(e, t, ...ce, "Uint8Array"));
+    if (!Xe(t))
+      throw new TypeError(Qe(e, t, ...ce, "Uint8Array"));
     if (t.type !== "secret")
       throw new TypeError(`${se(t)} instances for symmetric algorithms must be of type "secret"`);
   }
-}, on = (e, t, n) => {
-  if (!Qe(t))
-    throw new TypeError(ze(e, t, ...ce));
+}, cn = (e, t, n) => {
+  if (!Xe(t))
+    throw new TypeError(Qe(e, t, ...ce));
   if (t.type === "secret")
     throw new TypeError(`${se(t)} instances for asymmetric algorithms must not be of type "secret"`);
   if (t.algorithm && n === "verify" && t.type === "private")
     throw new TypeError(`${se(t)} instances for asymmetric algorithm verifying must be of type "public"`);
   if (t.algorithm && n === "encrypt" && t.type === "private")
     throw new TypeError(`${se(t)} instances for asymmetric algorithm encryption must be of type "public"`);
-}, sn = (e, t, n) => {
-  e.startsWith("HS") || e === "dir" || e.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(e) ? an(e, t) : on(e, t, n);
+}, un = (e, t, n) => {
+  e.startsWith("HS") || e === "dir" || e.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(e) ? sn(e, t) : cn(e, t, n);
 };
-function cn(e, t, n, r, a) {
-  if (a.crit !== void 0 && (r == null ? void 0 : r.crit) === void 0)
+function ln(e, t, n, r, a) {
+  if (a.crit !== void 0 && r?.crit === void 0)
     throw new e('"crit" (Critical) Header Parameter MUST be integrity protected');
   if (!r || r.crit === void 0)
     return /* @__PURE__ */ new Set();
@@ -786,13 +783,13 @@ function cn(e, t, n, r, a) {
   }
   return new Set(r.crit);
 }
-const un = (e, t) => {
+const dn = (e, t) => {
   if (t !== void 0 && (!Array.isArray(t) || t.some((n) => typeof n != "string")))
     throw new TypeError(`"${e}" option must be an array of strings`);
   if (t)
     return new Set(t);
 };
-function ln(e, t) {
+function hn(e, t) {
   const n = `SHA-${e.slice(-3)}`;
   switch (e) {
     case "HS256":
@@ -817,100 +814,100 @@ function ln(e, t) {
       throw new O(`alg ${e} is not supported either by JOSE or your javascript runtime`);
   }
 }
-async function dn(e, t, n) {
-  if (t = await en.normalizePublicKey(t, e), Be(t))
-    return jt(t, e, n), t;
+async function pn(e, t, n) {
+  if (t = await nn.normalizePublicKey(t, e), qe(t))
+    return Bt(t, e, n), t;
   if (t instanceof Uint8Array) {
     if (!e.startsWith("HS"))
-      throw new TypeError(Pe(t, ...ce));
+      throw new TypeError(ke(t, ...ce));
     return he.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [n]);
   }
-  throw new TypeError(Pe(t, ...ce, "Uint8Array"));
+  throw new TypeError(ke(t, ...ce, "Uint8Array"));
 }
-const hn = async (e, t, n, r) => {
-  const a = await dn(e, t, "verify");
-  qt(e, a);
-  const s = ln(e, a.algorithm);
+const fn = async (e, t, n, r) => {
+  const a = await pn(e, t, "verify");
+  Qt(e, a);
+  const s = hn(e, a.algorithm);
   try {
     return await he.subtle.verify(s, a, n, r);
   } catch {
     return !1;
   }
 };
-async function pn(e, t, n) {
+async function yn(e, t, n) {
   if (!ue(e))
-    throw new A("Flattened JWS must be an object");
+    throw new S("Flattened JWS must be an object");
   if (e.protected === void 0 && e.header === void 0)
-    throw new A('Flattened JWS must have either of the "protected" or "header" members');
+    throw new S('Flattened JWS must have either of the "protected" or "header" members');
   if (e.protected !== void 0 && typeof e.protected != "string")
-    throw new A("JWS Protected Header incorrect type");
+    throw new S("JWS Protected Header incorrect type");
   if (e.payload === void 0)
-    throw new A("JWS Payload missing");
+    throw new S("JWS Payload missing");
   if (typeof e.signature != "string")
-    throw new A("JWS Signature missing or incorrect type");
+    throw new S("JWS Signature missing or incorrect type");
   if (e.header !== void 0 && !ue(e.header))
-    throw new A("JWS Unprotected Header incorrect type");
+    throw new S("JWS Unprotected Header incorrect type");
   let r = {};
   if (e.protected)
     try {
-      const d = j(e.protected);
-      r = JSON.parse(B.decode(d));
+      const u = j(e.protected);
+      r = JSON.parse(B.decode(u));
     } catch {
-      throw new A("JWS Protected Header is invalid");
+      throw new S("JWS Protected Header is invalid");
     }
-  if (!Ft(r, e.header))
-    throw new A("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
+  if (!qt(r, e.header))
+    throw new S("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
   const a = {
     ...r,
     ...e.header
-  }, s = cn(A, /* @__PURE__ */ new Map([["b64", !0]]), n == null ? void 0 : n.crit, r, a);
+  }, s = ln(S, /* @__PURE__ */ new Map([["b64", !0]]), n?.crit, r, a);
   let o = !0;
   if (s.has("b64") && (o = r.b64, typeof o != "boolean"))
-    throw new A('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
+    throw new S('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
   const { alg: i } = a;
   if (typeof i != "string" || !i)
-    throw new A('JWS "alg" (Algorithm) Header Parameter missing or invalid');
-  const l = n && un("algorithms", n.algorithms);
-  if (l && !l.has(i))
-    throw new Gt('"alg" (Algorithm) Header Parameter value not allowed');
+    throw new S('JWS "alg" (Algorithm) Header Parameter missing or invalid');
+  const c = n && dn("algorithms", n.algorithms);
+  if (c && !c.has(i))
+    throw new Yt('"alg" (Algorithm) Header Parameter value not allowed');
   if (o) {
     if (typeof e.payload != "string")
-      throw new A("JWS Payload must be a string");
+      throw new S("JWS Payload must be a string");
   } else if (typeof e.payload != "string" && !(e.payload instanceof Uint8Array))
-    throw new A("JWS Payload must be a string or an Uint8Array instance");
-  let y = !1;
-  typeof t == "function" && (t = await t(r, e), y = !0), sn(i, t, "verify");
-  const h = xt(X.encode(e.protected ?? ""), X.encode("."), typeof e.payload == "string" ? X.encode(e.payload) : e.payload);
-  let p;
+    throw new S("JWS Payload must be a string or an Uint8Array instance");
+  let g = !1;
+  typeof t == "function" && (t = await t(r, e), g = !0), un(i, t, "verify");
+  const l = Gt(X.encode(e.protected ?? ""), X.encode("."), typeof e.payload == "string" ? X.encode(e.payload) : e.payload);
+  let h;
   try {
-    p = j(e.signature);
+    h = j(e.signature);
   } catch {
-    throw new A("Failed to base64url decode the signature");
+    throw new S("Failed to base64url decode the signature");
   }
-  if (!await hn(i, t, p, h))
-    throw new Jt();
-  let m;
+  if (!await fn(i, t, h, l))
+    throw new Vt();
+  let y;
   if (o)
     try {
-      m = j(e.payload);
+      y = j(e.payload);
     } catch {
-      throw new A("Failed to base64url decode the payload");
+      throw new S("Failed to base64url decode the payload");
     }
-  else typeof e.payload == "string" ? m = X.encode(e.payload) : m = e.payload;
-  const u = { payload: m };
-  return e.protected !== void 0 && (u.protectedHeader = r), e.header !== void 0 && (u.unprotectedHeader = e.header), y ? { ...u, key: t } : u;
+  else typeof e.payload == "string" ? y = X.encode(e.payload) : y = e.payload;
+  const p = { payload: y };
+  return e.protected !== void 0 && (p.protectedHeader = r), e.header !== void 0 && (p.unprotectedHeader = e.header), g ? { ...p, key: t } : p;
 }
-async function fn(e, t, n) {
+async function gn(e, t, n) {
   if (e instanceof Uint8Array && (e = B.decode(e)), typeof e != "string")
-    throw new A("Compact JWS must be a string or Uint8Array");
+    throw new S("Compact JWS must be a string or Uint8Array");
   const { 0: r, 1: a, 2: s, length: o } = e.split(".");
   if (o !== 3)
-    throw new A("Invalid Compact JWS");
-  const i = await pn({ payload: a, protected: r, signature: s }, t, n), l = { payload: i.payload, protectedHeader: i.protectedHeader };
-  return typeof t == "function" ? { ...l, key: i.key } : l;
+    throw new S("Invalid Compact JWS");
+  const i = await yn({ payload: a, protected: r, signature: s }, t, n), c = { payload: i.payload, protectedHeader: i.protectedHeader };
+  return typeof t == "function" ? { ...c, key: i.key } : c;
 }
-const yn = (e) => Math.floor(e.getTime() / 1e3), tt = 60, nt = tt * 60, Re = nt * 24, gn = Re * 7, mn = Re * 365.25, wn = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, Ne = (e) => {
-  const t = wn.exec(e);
+const mn = (e) => Math.floor(e.getTime() / 1e3), nt = 60, rt = nt * 60, Re = rt * 24, wn = Re * 7, En = Re * 365.25, Sn = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, Ne = (e) => {
+  const t = Sn.exec(e);
   if (!t || t[4] && t[1])
     throw new TypeError("Invalid time period format");
   const n = parseFloat(t[2]), r = t[3].toLowerCase();
@@ -928,14 +925,14 @@ const yn = (e) => Math.floor(e.getTime() / 1e3), tt = 60, nt = tt * 60, Re = nt
     case "min":
     case "mins":
     case "m":
-      a = Math.round(n * tt);
+      a = Math.round(n * nt);
       break;
     case "hour":
     case "hours":
     case "hr":
     case "hrs":
     case "h":
-      a = Math.round(n * nt);
+      a = Math.round(n * rt);
       break;
     case "day":
     case "days":
@@ -945,135 +942,135 @@ const yn = (e) => Math.floor(e.getTime() / 1e3), tt = 60, nt = tt * 60, Re = nt
     case "week":
     case "weeks":
     case "w":
-      a = Math.round(n * gn);
+      a = Math.round(n * wn);
       break;
     default:
-      a = Math.round(n * mn);
+      a = Math.round(n * En);
       break;
   }
   return t[1] === "-" || t[4] === "ago" ? -a : a;
-}, De = (e) => e.toLowerCase().replace(/^application\//, ""), En = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, Sn = (e, t, n = {}) => {
+}, De = (e) => e.toLowerCase().replace(/^application\//, ""), An = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, Tn = (e, t, n = {}) => {
   let r;
   try {
     r = JSON.parse(B.decode(t));
   } catch {
   }
   if (!ue(r))
-    throw new C("JWT Claims Set must be a top-level JSON object");
+    throw new P("JWT Claims Set must be a top-level JSON object");
   const { typ: a } = n;
   if (a && (typeof e.typ != "string" || De(e.typ) !== De(a)))
     throw new _('unexpected "typ" JWT header value', r, "typ", "check_failed");
-  const { requiredClaims: s = [], issuer: o, subject: i, audience: l, maxTokenAge: y } = n, h = [...s];
-  y !== void 0 && h.push("iat"), l !== void 0 && h.push("aud"), i !== void 0 && h.push("sub"), o !== void 0 && h.push("iss");
-  for (const d of new Set(h.reverse()))
-    if (!(d in r))
-      throw new _(`missing required "${d}" claim`, r, d, "missing");
+  const { requiredClaims: s = [], issuer: o, subject: i, audience: c, maxTokenAge: g } = n, l = [...s];
+  g !== void 0 && l.push("iat"), c !== void 0 && l.push("aud"), i !== void 0 && l.push("sub"), o !== void 0 && l.push("iss");
+  for (const u of new Set(l.reverse()))
+    if (!(u in r))
+      throw new _(`missing required "${u}" claim`, r, u, "missing");
   if (o && !(Array.isArray(o) ? o : [o]).includes(r.iss))
     throw new _('unexpected "iss" claim value', r, "iss", "check_failed");
   if (i && r.sub !== i)
     throw new _('unexpected "sub" claim value', r, "sub", "check_failed");
-  if (l && !En(r.aud, typeof l == "string" ? [l] : l))
+  if (c && !An(r.aud, typeof c == "string" ? [c] : c))
     throw new _('unexpected "aud" claim value', r, "aud", "check_failed");
-  let p;
+  let h;
   switch (typeof n.clockTolerance) {
     case "string":
-      p = Ne(n.clockTolerance);
+      h = Ne(n.clockTolerance);
       break;
     case "number":
-      p = n.clockTolerance;
+      h = n.clockTolerance;
       break;
     case "undefined":
-      p = 0;
+      h = 0;
       break;
     default:
       throw new TypeError("Invalid clockTolerance option type");
   }
-  const { currentDate: m } = n, u = yn(m || /* @__PURE__ */ new Date());
-  if ((r.iat !== void 0 || y) && typeof r.iat != "number")
+  const { currentDate: y } = n, p = mn(y || /* @__PURE__ */ new Date());
+  if ((r.iat !== void 0 || g) && typeof r.iat != "number")
     throw new _('"iat" claim must be a number', r, "iat", "invalid");
   if (r.nbf !== void 0) {
     if (typeof r.nbf != "number")
       throw new _('"nbf" claim must be a number', r, "nbf", "invalid");
-    if (r.nbf > u + p)
+    if (r.nbf > p + h)
       throw new _('"nbf" claim timestamp check failed', r, "nbf", "check_failed");
   }
   if (r.exp !== void 0) {
     if (typeof r.exp != "number")
       throw new _('"exp" claim must be a number', r, "exp", "invalid");
-    if (r.exp <= u - p)
-      throw new Ce('"exp" claim timestamp check failed', r, "exp", "check_failed");
-  }
-  if (y) {
-    const d = u - r.iat, g = typeof y == "number" ? y : Ne(y);
-    if (d - p > g)
-      throw new Ce('"iat" claim timestamp check failed (too far in the past)', r, "iat", "check_failed");
-    if (d < 0 - p)
+    if (r.exp <= p - h)
+      throw new Pe('"exp" claim timestamp check failed', r, "exp", "check_failed");
+  }
+  if (g) {
+    const u = p - r.iat, m = typeof g == "number" ? g : Ne(g);
+    if (u - h > m)
+      throw new Pe('"iat" claim timestamp check failed (too far in the past)', r, "iat", "check_failed");
+    if (u < 0 - h)
       throw new _('"iat" claim timestamp check failed (it should be in the past)', r, "iat", "check_failed");
   }
   return r;
 };
-async function An(e, t, n) {
+async function Rn(e, t, n) {
   var r;
-  const a = await fn(e, t, n);
+  const a = await gn(e, t, n);
   if ((r = a.protectedHeader.crit) != null && r.includes("b64") && a.protectedHeader.b64 === !1)
-    throw new C("JWTs MUST NOT use unencoded payload");
-  const s = { payload: Sn(a.protectedHeader, a.payload, n), protectedHeader: a.protectedHeader };
+    throw new P("JWTs MUST NOT use unencoded payload");
+  const s = { payload: Tn(a.protectedHeader, a.payload, n), protectedHeader: a.protectedHeader };
   return typeof t == "function" ? { ...s, key: a.key } : s;
 }
-const Tn = j;
-function Rn(e) {
+const bn = j;
+function In(e) {
   if (typeof e != "string")
-    throw new C("JWTs must use Compact JWS serialization, JWT must be a string");
+    throw new P("JWTs must use Compact JWS serialization, JWT must be a string");
   const { 1: t, length: n } = e.split(".");
   if (n === 5)
-    throw new C("Only JWTs using Compact JWS serialization can be decoded");
+    throw new P("Only JWTs using Compact JWS serialization can be decoded");
   if (n !== 3)
-    throw new C("Invalid JWT");
+    throw new P("Invalid JWT");
   if (!t)
-    throw new C("JWTs must contain a payload");
+    throw new P("JWTs must contain a payload");
   let r;
   try {
-    r = Tn(t);
+    r = bn(t);
   } catch {
-    throw new C("Failed to base64url decode the payload");
+    throw new P("Failed to base64url decode the payload");
   }
   let a;
   try {
     a = JSON.parse(B.decode(r));
   } catch {
-    throw new C("Failed to parse the decoded payload as JSON");
+    throw new P("Failed to parse the decoded payload as JSON");
   }
   if (!ue(a))
-    throw new C("Invalid JWT Claims Set");
+    throw new P("Invalid JWT Claims Set");
   return a;
 }
 const M = async (e) => {
   try {
-    const t = T.ALG, n = await rn(Wt, t);
-    return await An(e, n, {
-      issuer: T.ISSUER
+    const t = A.ALG, n = await on(Mt, t);
+    return await Rn(e, n, {
+      issuer: A.ISSUER
     });
   } catch {
     return;
   }
-}, bn = (e) => {
+}, _n = (e) => {
   try {
-    return Rn(e);
+    return In(e);
   } catch {
     return;
   }
 };
-var E = [];
+var w = [];
 for (var we = 0; we < 256; ++we)
-  E.push((we + 256).toString(16).slice(1));
-function In(e, t = 0) {
-  return (E[e[t + 0]] + E[e[t + 1]] + E[e[t + 2]] + E[e[t + 3]] + "-" + E[e[t + 4]] + E[e[t + 5]] + "-" + E[e[t + 6]] + E[e[t + 7]] + "-" + E[e[t + 8]] + E[e[t + 9]] + "-" + E[e[t + 10]] + E[e[t + 11]] + E[e[t + 12]] + E[e[t + 13]] + E[e[t + 14]] + E[e[t + 15]]).toLowerCase();
+  w.push((we + 256).toString(16).slice(1));
+function vn(e, t = 0) {
+  return (w[e[t + 0]] + w[e[t + 1]] + w[e[t + 2]] + w[e[t + 3]] + "-" + w[e[t + 4]] + w[e[t + 5]] + "-" + w[e[t + 6]] + w[e[t + 7]] + "-" + w[e[t + 8]] + w[e[t + 9]] + "-" + w[e[t + 10]] + w[e[t + 11]] + w[e[t + 12]] + w[e[t + 13]] + w[e[t + 14]] + w[e[t + 15]]).toLowerCase();
 }
-var ee, _n = new Uint8Array(16);
-function vn() {
+var ee, Cn = new Uint8Array(16);
+function Pn() {
   if (!ee && (ee = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !ee))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return ee(_n);
+  return ee(Cn);
 }
 var kn = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
 const Ue = {
@@ -1083,57 +1080,57 @@ function $e(e, t, n) {
   if (Ue.randomUUID && !t && !e)
     return Ue.randomUUID();
   e = e || {};
-  var r = e.random || (e.rng || vn)();
-  return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, In(r);
+  var r = e.random || (e.rng || Pn)();
+  return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, vn(r);
 }
-const Ke = globalThis.crypto, Cn = (e) => `${$e()}${$e()}`.slice(0, e), Pn = (e) => btoa(
+const Ke = globalThis.crypto, On = (e) => `${$e()}${$e()}`.slice(0, e), Nn = (e) => btoa(
   [...new Uint8Array(e)].map((t) => String.fromCharCode(t)).join("")
 );
-async function On(e) {
+async function Dn(e) {
   if (!Ke.subtle)
     throw new Error(
       "crypto.subtle is available only in secure contexts (HTTPS)."
     );
   const t = new TextEncoder().encode(e), n = await Ke.subtle.digest("SHA-256", t);
-  return Pn(n).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  return Nn(n).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-async function Nn(e) {
-  const n = Cn(43), r = await On(n);
+async function Un(e) {
+  const n = On(43), r = await Dn(n);
   return {
     code_verifier: n,
     code_challenge: r
   };
 }
-const Pr = async (e, t) => {
+const Dr = async (e, t) => {
   var n;
   const r = await M(e);
-  if (!r || !Array.isArray((n = r.payload) == null ? void 0 : n[T.SCOPES_KEY]))
+  if (!r || !Array.isArray((n = r.payload) == null ? void 0 : n[A.SCOPES_KEY]))
     return !1;
-  const a = r.payload[T.SCOPES_KEY];
+  const a = r.payload[A.SCOPES_KEY];
   return Array.isArray(t) ? t.every((s) => a.includes(s)) : Object.keys(t).some(
     (s) => t[s].every((o) => a.includes(o))
   );
 };
-function rt(e, t) {
+function at(e, t) {
   window.dispatchEvent(new StorageEvent("storage", { key: e, newValue: t }));
 }
 const He = (e, t) => {
   const n = JSON.stringify(
     typeof t == "function" ? t() : t
   );
-  window.localStorage.setItem(e, n), rt(e, n);
-}, Dn = (e) => {
-  window.localStorage.removeItem(e), rt(e, null);
-}, Le = (e) => window.localStorage.getItem(e), Un = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
+  window.localStorage.setItem(e, n), at(e, n);
+}, $n = (e) => {
+  window.localStorage.removeItem(e), at(e, null);
+}, Le = (e) => window.localStorage.getItem(e), Kn = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
 function te({
   key: e,
   initialValue: t
 }) {
-  const n = kt(Un, () => Le(e)), r = x(
+  const n = kt(Kn, () => Le(e)), r = x(
     (o) => {
       try {
         const i = typeof o == "function" ? o(JSON.parse(n)) : o;
-        i == null ? Dn(e) : He(e, i);
+        i == null ? $n(e) : He(e, i);
       } catch (i) {
         console.warn(i);
       }
@@ -1152,29 +1149,33 @@ function te({
     }
   }, [e, t]), [n ? JSON.parse(n) : null, r, a, s];
 }
-var S = [];
+var E = [];
 for (var Ee = 0; Ee < 256; ++Ee)
-  S.push((Ee + 256).toString(16).slice(1));
-function $n(e, t = 0) {
-  return (S[e[t + 0]] + S[e[t + 1]] + S[e[t + 2]] + S[e[t + 3]] + "-" + S[e[t + 4]] + S[e[t + 5]] + "-" + S[e[t + 6]] + S[e[t + 7]] + "-" + S[e[t + 8]] + S[e[t + 9]] + "-" + S[e[t + 10]] + S[e[t + 11]] + S[e[t + 12]] + S[e[t + 13]] + S[e[t + 14]] + S[e[t + 15]]).toLowerCase();
+  E.push((Ee + 256).toString(16).slice(1));
+function Hn(e, t = 0) {
+  return (E[e[t + 0]] + E[e[t + 1]] + E[e[t + 2]] + E[e[t + 3]] + "-" + E[e[t + 4]] + E[e[t + 5]] + "-" + E[e[t + 6]] + E[e[t + 7]] + "-" + E[e[t + 8]] + E[e[t + 9]] + "-" + E[e[t + 10]] + E[e[t + 11]] + E[e[t + 12]] + E[e[t + 13]] + E[e[t + 14]] + E[e[t + 15]]).toLowerCase();
 }
-var ne, Kn = new Uint8Array(16);
-function Hn() {
+var ne, Ln = new Uint8Array(16);
+function Wn() {
   if (!ne && (ne = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !ne))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return ne(Kn);
+  return ne(Ln);
 }
-var Ln = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
+var xn = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
 const We = {
-  randomUUID: Ln
+  randomUUID: xn
 };
 function Se(e, t, n) {
   if (We.randomUUID && !t && !e)
     return We.randomUUID();
   e = e || {};
-  var r = e.random || (e.rng || Hn)();
-  return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, $n(r);
+  var r = e.random || (e.rng || Wn)();
+  return r[6] = r[6] & 15 | 64, r[8] = r[8] & 63 | 128, Hn(r);
 }
+const $ = "Oops! It looks like your session has expired. For your security, please log in again to continue.", Mn = "Your session has been successfully terminated.", re = "Login failed. Please try again.", Gn = "Error getting access token, please re-authenticate.", Jn = "You forgot to wrap your component in <AuthProvider>.", le = {
+  dev: "https://auth.gizmette.local.com:3003",
+  prod: "https://mylogin.gizmette.com/auth"
+}, ae = "@@auth@@", Y = "LOADING", V = "LOGIN", ot = "LOGOUT", Yn = "success", xe = "failure";
 /*!
   @versini/ui-fingerprint v1.0.1
   © 2024 gizmette.com
@@ -1188,52 +1189,52 @@ try {
   });
 } catch {
 }
-const Wn = (e) => Array.from(e).map((t) => t.toString(16).padStart(2, "0")).join(""), at = async (e) => {
+const Vn = (e) => Array.from(e).map((t) => t.toString(16).padStart(2, "0")).join(""), st = async (e) => {
   if (e === "")
     return "";
   const t = new TextEncoder().encode(e), n = await crypto.subtle.digest("SHA-256", t);
   return Array.from(new Uint8Array(n)).map((r) => r.toString(16).padStart(2, "0")).join("");
 };
-function xe(e, t) {
+function Me(e, t) {
   return new Promise((n) => setTimeout(n, e, t));
 }
-async function xn(e, t, n = 50) {
+async function jn(e, t, n = 50) {
   var r, a, s;
   const o = document;
   for (; !o.body; )
-    await xe(n);
+    await Me(n);
   const i = o.createElement("iframe");
   try {
-    for (await new Promise((l, y) => {
-      let h = !1;
-      const p = () => {
-        h = !0, l();
-      }, m = (g) => {
-        h = !0, y(g);
+    for (await new Promise((c, g) => {
+      let l = !1;
+      const h = () => {
+        l = !0, c();
+      }, y = (m) => {
+        l = !0, g(m);
       };
-      i.onload = p, i.onerror = m;
-      const { style: u } = i;
-      u.setProperty("display", "block", "important"), u.position = "absolute", u.top = "0", u.left = "0", u.visibility = "hidden", i.src = "about:blank", o.body.appendChild(i);
-      const d = () => {
-        var g, R;
-        h || (((R = (g = i.contentWindow) == null ? void 0 : g.document) == null ? void 0 : R.readyState) === "complete" ? p() : setTimeout(d, 10));
+      i.onload = h, i.onerror = y;
+      const { style: p } = i;
+      p.setProperty("display", "block", "important"), p.position = "absolute", p.top = "0", p.left = "0", p.visibility = "hidden", i.src = "about:blank", o.body.appendChild(i);
+      const u = () => {
+        var m, T;
+        l || (((T = (m = i.contentWindow) == null ? void 0 : m.document) == null ? void 0 : T.readyState) === "complete" ? h() : setTimeout(u, 10));
       };
-      d();
+      u();
     }); !((a = (r = i.contentWindow) == null ? void 0 : r.document) != null && a.body); )
-      await xe(n);
+      await Me(n);
     return await e(i, i.contentWindow);
   } finally {
     (s = i.parentNode) == null || s.removeChild(i);
   }
 }
-const Mn = {
+const Fn = {
   audio: {
     sampleHash: "",
     oscillator: "",
     maxChannels: 0,
     channelCountMode: ""
   }
-}, Gn = async (e) => new Promise((t) => {
+}, Bn = async (e) => new Promise((t) => {
   try {
     const n = new window.OfflineAudioContext(1, 5e3, 44100), r = n.createBufferSource(), a = n.createOscillator();
     a.frequency.value = 1e3;
@@ -1242,7 +1243,7 @@ const Mn = {
       const i = o.renderedBuffer.getChannelData(0);
       a.disconnect(), s.disconnect(), t({
         audio: {
-          sampleHash: Wn(i),
+          sampleHash: Vn(i),
           oscillator: a.type,
           maxChannels: n.destination.maxChannelCount,
           channelCountMode: r.channelCountMode
@@ -1259,25 +1260,25 @@ const Mn = {
       }
     });
   }
-}), ot = { browser: "" }, Jn = async (e) => typeof navigator > "u" ? ot : { browser: navigator.userAgent }, st = {
+}), it = { browser: "" }, qn = async (e) => typeof navigator > "u" ? it : { browser: navigator.userAgent }, ct = {
   canvas: {
     data: ""
   }
-}, Yn = async (e) => {
+}, zn = async (e) => {
   try {
     const t = Array.from(
       { length: 3 },
-      () => Vn(300, 30)
-    ), n = Fn(t, 300, 30);
+      () => Qn(300, 30)
+    ), n = Zn(t, 300, 30);
     return {
       canvas: {
-        data: (await at(n.data.toString())).toString()
+        data: (await st(n.data.toString())).toString()
       }
     };
   } catch {
-    return st;
+    return ct;
   }
-}, Vn = (e, t) => {
+}, Qn = (e, t) => {
   const n = document.createElement("canvas"), r = n.getContext("2d");
   if (!r)
     return new ImageData(1, 1);
@@ -1286,7 +1287,7 @@ const Mn = {
   a.addColorStop(0, "red"), a.addColorStop(1 / 6, "orange"), a.addColorStop(2 / 6, "yellow"), a.addColorStop(3 / 6, "green"), a.addColorStop(4 / 6, "blue"), a.addColorStop(5 / 6, "indigo"), a.addColorStop(1, "violet"), r.fillStyle = a, r.fillRect(0, 0, n.width, n.height);
   const s = "mmMwWLliI0O&1 - Les sanglots longs des violons de l'automne blessent mon coeur d'une langueur monotone";
   return r.font = "26.321px Arial", r.fillStyle = "black", r.fillText(s, -5, 15), r.fillStyle = "rgba(0, 0, 255, 0.5)", r.fillText(s, -3.3, 17.7), r.beginPath(), r.moveTo(0, 0), r.lineTo(n.width * 2 / 7, n.height), r.strokeStyle = "white", r.lineWidth = 2, r.stroke(), r.getImageData(0, 0, n.width, n.height);
-}, jn = (e) => {
+}, Xn = (e) => {
   if (e.length === 0)
     return 0;
   const t = {};
@@ -1296,17 +1297,17 @@ const Mn = {
   for (const r in t)
     t[r] > t[n] && (n = parseInt(r, 10));
   return n;
-}, Fn = (e, t, n) => {
+}, Zn = (e, t, n) => {
   const r = [];
   for (let o = 0; o < e[0].data.length; o++) {
     const i = [];
-    for (let l = 0; l < e.length; l++)
-      i.push(e[l].data[o]);
-    r.push(jn(i));
+    for (let c = 0; c < e.length; c++)
+      i.push(e[c].data[o]);
+    r.push(Xn(i));
   }
   const a = r, s = new Uint8ClampedArray(a);
   return new ImageData(s, t, n);
-}, Bn = [], qn = "mmMwWLliI0O&1", zn = "48px", $ = ["monospace", "sans-serif", "serif"], Me = [
+}, er = [], tr = "mmMwWLliI0O&1", nr = "48px", K = ["monospace", "sans-serif", "serif"], Ge = [
   "sans-serif-thin",
   "ARNO PRO",
   "Agency FB",
@@ -1344,44 +1345,44 @@ const Mn = {
   "TRAJAN PRO",
   "Univers CE 55 Medium",
   "ZWAdobeF"
-], Qn = async (e) => xn(async (t, { document: n }) => {
+], rr = async (e) => jn(async (t, { document: n }) => {
   const r = n.body;
-  r.style.fontSize = zn;
+  r.style.fontSize = nr;
   const a = n.createElement("div");
   a.style.setProperty("visibility", "hidden", "important");
-  const s = {}, o = {}, i = (d) => {
-    const g = n.createElement("span"), { style: R } = g;
-    return R.position = "absolute", R.top = "0", R.left = "0", R.fontFamily = d, g.textContent = qn, a.appendChild(g), g;
-  }, l = (d, g) => i(`'${d}',${g}`), y = () => $.map(i), h = () => {
-    const d = {};
-    for (const g of Me)
-      d[g] = $.map(
-        (R) => l(g, R)
+  const s = {}, o = {}, i = (u) => {
+    const m = n.createElement("span"), { style: T } = m;
+    return T.position = "absolute", T.top = "0", T.left = "0", T.fontFamily = u, m.textContent = tr, a.appendChild(m), m;
+  }, c = (u, m) => i(`'${u}',${m}`), g = () => K.map(i), l = () => {
+    const u = {};
+    for (const m of Ge)
+      u[m] = K.map(
+        (T) => c(m, T)
       );
-    return d;
-  }, p = (d) => $.some(
-    (g, R) => d[R].offsetWidth !== s[g] || d[R].offsetHeight !== o[g]
-  ), m = y(), u = h();
+    return u;
+  }, h = (u) => K.some(
+    (m, T) => u[T].offsetWidth !== s[m] || u[T].offsetHeight !== o[m]
+  ), y = g(), p = l();
   r.appendChild(a);
-  for (let d = 0; d < $.length; d++)
-    s[$[d]] = m[d].offsetWidth, o[$[d]] = m[d].offsetHeight;
-  return Me.filter((d) => p(u[d]));
-}), it = {
+  for (let u = 0; u < K.length; u++)
+    s[K[u]] = y[u].offsetWidth, o[K[u]] = y[u].offsetHeight;
+  return Ge.filter((u) => h(p[u]));
+}), ut = {
   vendor: "",
   vendorUnmasked: "",
   renderer: "",
   rendererUnmasked: "",
   version: "",
   shadingLanguageVersion: ""
-}, ct = {
+}, lt = {
   hardware: {
-    videocard: it,
+    videocard: ut,
     architecture: 0,
     deviceMemory: "undefined",
     jsHeapSizeLimit: 0
   }
 };
-function Xn() {
+function ar() {
   const e = document.createElement("canvas"), t = e.getContext("webgl") ?? e.getContext("experimental-webgl");
   if (t && "getParameter" in t) {
     const n = t.getExtension("WEBGL_debug_renderer_info");
@@ -1394,41 +1395,41 @@ function Xn() {
       shadingLanguageVersion: (t.getParameter(t.SHADING_LANGUAGE_VERSION) || "").toString()
     };
   }
-  return it;
+  return ut;
 }
-function Zn() {
+function or() {
   const e = new Float32Array(1), t = new Uint8Array(e.buffer);
   return e[0] = 1 / 0, e[0] = e[0] - e[0], t[3];
 }
-const er = () => navigator.deviceMemory || 0, tr = () => window.performance && window.performance.memory || {
+const sr = () => navigator.deviceMemory || 0, ir = () => window.performance && window.performance.memory || {
   jsHeapSizeLimit: 0
-}, nr = async (e) => new Promise((t) => {
+}, cr = async (e) => new Promise((t) => {
   try {
-    const n = er(), r = tr();
+    const n = sr(), r = ir();
     t({
       hardware: {
-        videocard: Xn(),
-        architecture: Zn(),
+        videocard: ar(),
+        architecture: or(),
         deviceMemory: n.toString() || "undefined",
         jsHeapSizeLimit: r.jsHeapSizeLimit || 0
       }
     });
   } catch {
-    t(ct);
+    t(lt);
   }
-}), rr = {
+}), ur = {
   locales: {
     languages: "",
     timezone: ""
   }
-}, ar = async (e) => new Promise((t) => {
+}, lr = async (e) => new Promise((t) => {
   t({
     locales: {
       languages: navigator.language,
       timezone: Intl.DateTimeFormat().resolvedOptions().timeZone
     }
   });
-}), ut = {
+}), dt = {
   screen: {
     colorDepth: 0,
     pixelDepth: 0,
@@ -1436,7 +1437,7 @@ const er = () => navigator.deviceMemory || 0, tr = () => window.performance && w
     maxTouchPoints: 0,
     mediaMatches: []
   }
-}, or = async (e) => new Promise((t) => {
+}, dr = async (e) => new Promise((t) => {
   try {
     const n = window.screen, r = {
       screen: {
@@ -1444,15 +1445,15 @@ const er = () => navigator.deviceMemory || 0, tr = () => window.performance && w
         pixelDepth: n.pixelDepth,
         isTouchScreen: navigator.maxTouchPoints > 0,
         maxTouchPoints: navigator.maxTouchPoints,
-        mediaMatches: sr()
+        mediaMatches: hr()
       }
     };
     t(r);
   } catch {
-    t(ut);
+    t(dt);
   }
 });
-function sr() {
+function hr() {
   const e = [], t = {
     "prefers-contrast": [
       "high",
@@ -1480,7 +1481,7 @@ function sr() {
     });
   }), e;
 }
-const ir = async (e) => {
+const pr = async (e) => {
   try {
     return {
       system: {
@@ -1491,55 +1492,175 @@ const ir = async (e) => {
       }
     };
   } catch {
-    return lt;
+    return ht;
   }
-}, lt = {
+}, ht = {
   system: {
     platform: "",
     cookieEnabled: !1,
     productSub: "",
     product: ""
   }
-}, cr = async (e) => {
+}, fr = async (e) => {
   try {
     return Promise.all([
-      Gn(),
-      Jn(),
-      Yn(),
-      Qn(),
-      nr(),
-      ar(),
-      or(),
-      ir()
+      Bn(e),
+      qn(),
+      zn(e),
+      rr(),
+      cr(e),
+      lr(),
+      dr(e),
+      pr(e)
     ]);
   } catch {
     return [
-      Mn,
-      ot,
-      st,
-      Bn,
+      Fn,
+      it,
       ct,
-      rr,
-      ut,
-      lt
+      er,
+      lt,
+      ur,
+      dt,
+      ht
     ];
   }
-}, ur = async (e) => {
+}, yr = async (e) => {
   try {
-    const t = await cr();
-    return await at(JSON.stringify(t));
+    const t = await fr(e);
+    return await st(JSON.stringify(t));
   } catch {
     return "";
   }
-}, K = "Oops! It looks like your session has expired. For your security, please log in again to continue.", lr = "Your session has been successfully terminated.", re = "Login failed. Please try again.", dr = "Error getting access token, please re-authenticate.", hr = "You forgot to wrap your component in <AuthProvider>.", le = {
-  dev: "https://auth.gizmette.local.com:3003",
-  prod: "https://mylogin.gizmette.com/auth"
-}, ae = "@@auth@@", Y = "LOADING", V = "LOGIN", dt = "LOGOUT", pr = process.env.NODE_ENV === "production", ht = !pr, fr = (e) => {
+}, oe = {
+  GET_REGISTRATION_OPTIONS: `mutation GetPasskeyRegistrationOptions(
+	$clientId: String!,
+	$username: String!,
+	$id: String!) {
+		getPasskeyRegistrationOptions(clientId: $clientId, username: $username, id: $id) {
+			challenge
+			rp {
+				id
+				name
+			}
+			user {
+				id
+				name
+				displayName
+			}
+			pubKeyCredParams {
+				type
+				alg
+			}
+			timeout
+			attestation
+		}
+	}`,
+  VERIFY_REGISTRATION: `mutation VerifyPasskeyRegistration(
+		$clientId: String!,
+		$username: String!,
+		$id: String!,
+		$registration: RegistrationOptionsInput!) {
+		verifyPasskeyRegistration(
+			clientId: $clientId,
+			username: $username,
+			id: $id,
+			registration: $registration) {
+			status
+			message
+		}
+	}`,
+  GET_AUTHENTICATION_OPTIONS: `mutation GetPasskeyAuthenticationOptions(
+		$id: String!,
+		$clientId: String!,
+		) {
+		getPasskeyAuthenticationOptions(
+			id: $id,
+			clientId: $clientId) {
+				rpId,
+				challenge,
+				allowCredentials {
+					id,
+					type,
+					transports
+				}
+				timeout,
+				userVerification,
+		}
+	}`,
+  VERIFY_AUTHENTICATION: `mutation VerifyPasskeyAuthentication(
+		$clientId: String!,
+		$id: String!,
+		$authentication: AuthenticationOptionsInput!,
+		$nonce: String!,
+		$domain: String,
+		$fingerprint: String) {
+		verifyPasskeyAuthentication(
+			clientId: $clientId,
+			id: $id,
+			authentication: $authentication,
+			nonce: $nonce,
+			domain: $domain,
+			fingerprint: $fingerprint) {
+				status,
+				idToken,
+				accessToken,
+				refreshToken,
+				userId,
+				username,
+		}
+	}`
+}, H = {
+  GET_REGISTRATION_OPTIONS: {
+    schema: oe.GET_REGISTRATION_OPTIONS,
+    method: "getPasskeyRegistrationOptions"
+  },
+  VERIFY_REGISTRATION: {
+    schema: oe.VERIFY_REGISTRATION,
+    method: "verifyPasskeyRegistration"
+  },
+  GET_AUTHENTICATION_OPTIONS: {
+    schema: oe.GET_AUTHENTICATION_OPTIONS,
+    method: "getPasskeyAuthenticationOptions"
+  },
+  VERIFY_AUTHENTICATION: {
+    schema: oe.VERIFY_AUTHENTICATION,
+    method: "verifyPasskeyAuthentication"
+  }
+}, L = async ({
+  accessToken: e,
+  type: t,
+  clientId: n,
+  params: r = {}
+}) => {
   try {
-    const t = bn(e);
-    return t ? t[T.USER_ID_KEY] : "";
-  } catch {
-    return "";
+    const a = t?.data ? t.data(r) : r, s = `Bearer ${e}`, o = await fetch(
+      pt ? `${le.dev}/graphql` : `${le.prod}/graphql`,
+      {
+        method: "POST",
+        credentials: "include",
+        headers: {
+          authorization: s,
+          "Content-Type": "application/json",
+          Accept: "application/json",
+          [Be.CLIENT_ID]: `${n}`
+        },
+        body: JSON.stringify({
+          query: t.schema,
+          variables: a
+        })
+      }
+    );
+    if (o.status !== 200)
+      return { status: o.status, data: [] };
+    const { data: i, errors: c } = await o.json();
+    return {
+      status: o.status,
+      data: i[t.method],
+      errors: c
+    };
+  } catch (a) {
+    return console.error(a), { status: 500, data: [] };
   }
 }, pe = async ({
   type: e,
@@ -1548,13 +1669,13 @@ const ir = async (e) => {
 }) => {
   try {
     const r = await fetch(
-      ht ? `${le.dev}/${e}` : `${le.prod}/${e}`,
+      pt ? `${le.dev}/${e}` : `${le.prod}/${e}`,
       {
         credentials: "include",
         method: "POST",
         headers: {
           "Content-Type": "application/json",
-          [Fe.CLIENT_ID]: `${t}`
+          [Be.CLIENT_ID]: `${t}`
         },
         body: JSON.stringify(n)
       }
@@ -1570,7 +1691,21 @@ const ir = async (e) => {
   } catch (r) {
     return console.error(r), { status: 500, data: [] };
   }
-}, yr = async ({
+}, gr = process.env.NODE_ENV === "production", pt = !gr, ft = {
+  isLoading: !0,
+  isAuthenticated: !1,
+  authenticationType: null,
+  user: void 0,
+  logoutReason: "",
+  debug: !1
+}, mr = (e) => {
+  try {
+    const t = _n(e);
+    return t ? t[A.USER_ID_KEY] : "";
+  } catch {
+    return "";
+  }
+}, wr = async ({
   userId: e,
   idToken: t,
   accessToken: n,
@@ -1590,14 +1725,14 @@ const ir = async (e) => {
           refreshToken: r,
           domain: s
         }
-      })).status === 200
+      }))?.status === 200
     };
   } catch {
     return {
       status: !1
     };
   }
-}, Ge = async ({
+}, Je = async ({
   username: e,
   password: t,
   clientId: n,
@@ -1606,11 +1741,11 @@ const ir = async (e) => {
   sessionExpiration: s,
   code: o,
   code_verifier: i,
-  domain: l,
-  fingerprint: y
+  domain: c,
+  fingerprint: g
 }) => {
   try {
-    const h = await pe({
+    const l = await pe({
       type: de.AUTHENTICATE,
       clientId: n,
       params: {
@@ -1621,15 +1756,15 @@ const ir = async (e) => {
         nonce: r,
         code: o,
         code_verifier: i,
-        domain: l,
-        fingerprint: y
+        domain: c,
+        fingerprint: g
       }
-    }), p = await M(h.data.idToken);
-    return p && p.payload[T.USER_ID_KEY] !== "" && p.payload[T.NONCE_KEY] === r ? {
-      idToken: h.data.idToken,
-      accessToken: h.data.accessToken,
-      refreshToken: h.data.refreshToken,
-      userId: p.payload[T.USER_ID_KEY],
+    }), h = await M(l?.data?.idToken);
+    return h && h.payload[A.USER_ID_KEY] !== "" && h.payload[A.NONCE_KEY] === r ? {
+      idToken: l.data.idToken,
+      accessToken: l.data.accessToken,
+      refreshToken: l.data.refreshToken,
+      userId: h.payload[A.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -1639,7 +1774,7 @@ const ir = async (e) => {
       status: !1
     };
   }
-}, gr = async ({
+}, Er = async ({
   nonce: e,
   clientId: t,
   code_challenge: n
@@ -1654,7 +1789,7 @@ const ir = async (e) => {
         code_challenge: n
       }
     });
-    return r.data.code ? {
+    return r?.data?.code ? {
       status: !0,
       code: r.data.code
     } : {
@@ -1665,7 +1800,7 @@ const ir = async (e) => {
       status: !1
     };
   }
-}, mr = async ({
+}, Sr = async ({
   clientId: e,
   userId: t,
   nonce: n,
@@ -1684,13 +1819,13 @@ const ir = async (e) => {
         refreshToken: r,
         accessToken: a,
         domain: s,
-        fingerprint: await pt()
+        fingerprint: await yt()
       }
-    }), i = await M(o.data.accessToken);
-    return i && i.payload[T.USER_ID_KEY] !== "" && i.payload[T.NONCE_KEY] === n ? {
+    }), i = await M(o?.data?.accessToken);
+    return i && i.payload[A.USER_ID_KEY] !== "" && i.payload[A.NONCE_KEY] === n ? {
       accessToken: o.data.accessToken,
       refreshToken: o.data.refreshToken,
-      userId: i.payload[T.USER_ID_KEY],
+      userId: i.payload[A.USER_ID_KEY],
       status: !0
     } : {
       status: !1
@@ -1700,144 +1835,14 @@ const ir = async (e) => {
       status: !1
     };
   }
-}, oe = {
-  GET_REGISTRATION_OPTIONS: `mutation GetPasskeyRegistrationOptions(
-	$clientId: String!,
-	$username: String!,
-	$id: String!) {
-		getPasskeyRegistrationOptions(clientId: $clientId, username: $username, id: $id) {
-			challenge
-			rp {
-				id
-				name
-			}
-			user {
-				id
-				name
-				displayName
-			}
-			pubKeyCredParams {
-				type
-				alg
-			}
-			timeout
-			attestation
-		}
-	}`,
-  VERIFY_REGISTRATION: `mutation VerifyPasskeyRegistration(
-		$clientId: String!,
-		$username: String!,
-		$id: String!,
-		$registration: RegistrationOptionsInput!) {
-		verifyPasskeyRegistration(
-			clientId: $clientId,
-			username: $username,
-			id: $id,
-			registration: $registration) {
-			status
-			message
-		}
-	}`,
-  GET_AUTHENTICATION_OPTIONS: `mutation GetPasskeyAuthenticationOptions(
-		$id: String!,
-		$clientId: String!,
-		) {
-		getPasskeyAuthenticationOptions(
-			id: $id,
-			clientId: $clientId) {
-				rpId,
-				challenge,
-				allowCredentials {
-					id,
-					type,
-					transports
-				}
-				timeout,
-				userVerification,
-		}
-	}`,
-  VERIFY_AUTHENTICATION: `mutation VerifyPasskeyAuthentication(
-		$clientId: String!,
-		$id: String!,
-		$authentication: AuthenticationOptionsInput!,
-		$nonce: String!,
-		$domain: String,
-		$fingerprint: String) {
-		verifyPasskeyAuthentication(
-			clientId: $clientId,
-			id: $id,
-			authentication: $authentication,
-			nonce: $nonce,
-			domain: $domain,
-			fingerprint: $fingerprint) {
-				status,
-				idToken,
-				accessToken,
-				refreshToken,
-				userId,
-				username,
-		}
-	}`
-}, H = {
-  GET_REGISTRATION_OPTIONS: {
-    schema: oe.GET_REGISTRATION_OPTIONS,
-    method: "getPasskeyRegistrationOptions"
-  },
-  VERIFY_REGISTRATION: {
-    schema: oe.VERIFY_REGISTRATION,
-    method: "verifyPasskeyRegistration"
-  },
-  GET_AUTHENTICATION_OPTIONS: {
-    schema: oe.GET_AUTHENTICATION_OPTIONS,
-    method: "getPasskeyAuthenticationOptions"
-  },
-  VERIFY_AUTHENTICATION: {
-    schema: oe.VERIFY_AUTHENTICATION,
-    method: "verifyPasskeyAuthentication"
-  }
-}, L = async ({
-  accessToken: e,
-  type: t,
-  clientId: n,
-  params: r = {}
-}) => {
-  try {
-    const a = t != null && t.data ? t.data(r) : r, s = `Bearer ${e}`, o = await fetch(
-      ht ? `${le.dev}/graphql` : `${le.prod}/graphql`,
-      {
-        method: "POST",
-        credentials: "include",
-        headers: {
-          authorization: s,
-          "Content-Type": "application/json",
-          Accept: "application/json",
-          [Fe.CLIENT_ID]: `${n}`
-        },
-        body: JSON.stringify({
-          query: t.schema,
-          variables: a
-        })
-      }
-    );
-    if (o.status !== 200)
-      return { status: o.status, data: [] };
-    const { data: i, errors: l } = await o.json();
-    return {
-      status: o.status,
-      data: i[t.method],
-      errors: l
-    };
-  } catch (a) {
-    return console.error(a), { status: 500, data: [] };
-  }
-}, pt = async () => {
+}, yt = async () => {
   try {
-    return await ur();
+    return await yr();
   } catch {
     return "";
   }
 };
-class wr {
+class Ar {
   constructor(t = null, n = null) {
     Q(this, "refreshTokenPromise", null);
     Q(this, "accessToken");
@@ -1869,8 +1874,8 @@ class wr {
     domain: a
   }) {
     const s = await M(this.refreshToken);
-    if (s && s.payload[T.USER_ID_KEY] !== "") {
-      const o = await mr({
+    if (s && s.payload[A.USER_ID_KEY] !== "") {
+      const o = await Sr({
         clientId: t,
         userId: n,
         nonce: r,
@@ -1879,26 +1884,26 @@ class wr {
         domain: a
       });
       return o.status ? (this.accessToken = o.accessToken, this.refreshToken = o.refreshToken, {
-        status: "success",
+        status: Yn,
         newAccessToken: o.accessToken,
         newRefreshToken: o.refreshToken
       }) : {
-        status: "failure"
+        status: xe
       };
     } else
       return {
-        status: "failure"
+        status: xe
       };
   }
 }
-const Er = (e) => x(
+const Tr = (e) => x(
   (...t) => {
     e && console.info(`==> [Auth ${Date.now()}]: `, ...t);
   },
   [e]
 ), W = () => {
-  throw new Error(hr);
-}, ft = Ct({
+  throw new Error(Jn);
+}, gt = Ot({
   isAuthenticated: !1,
   isLoading: !1,
   authenticationType: null,
@@ -1909,279 +1914,268 @@ const Er = (e) => x(
   registeringForPasskey: W,
   loginWithPasskey: W,
   logoutReason: ""
-}), Sr = vt.createContext({
-  state: {
-    isLoading: !0,
-    isAuthenticated: !1,
-    authenticationType: null,
-    user: void 0,
-    logoutReason: "",
-    debug: !1
-  },
+}), Rr = Pt.createContext({
+  state: ft,
   dispatch: () => {
   }
-}), Ar = (e, t) => (t == null ? void 0 : t.type) === Y ? {
+}), br = (e, t) => t?.type === Y ? {
   ...e,
   isLoading: t.payload.isLoading
-} : (t == null ? void 0 : t.type) === V ? {
+} : t?.type === V ? {
   ...e,
   isLoading: !1,
   isAuthenticated: !0,
   user: t.payload.user,
   authenticationType: t.payload.authenticationType,
   logoutReason: ""
-} : (t == null ? void 0 : t.type) === dt ? {
+} : t?.type === ot ? {
   ...e,
   isLoading: !1,
   isAuthenticated: !1,
   user: void 0,
   authenticationType: null,
   logoutReason: t.payload.logoutReason
-} : e, Or = ({
+} : e, Ur = ({
   children: e,
   sessionExpiration: t,
   clientId: n,
   domain: r = "",
   debug: a = !1
 }) => {
-  const [s, o] = Pt(Ar, {
-    isLoading: !0,
-    isAuthenticated: !1,
-    authenticationType: null,
-    user: void 0,
-    logoutReason: "",
+  const [s, o] = Nt(br, {
+    ...ft,
     debug: a
-  }), i = Er(a), l = ke(!1), y = ke(""), [h, p, , m] = te({
+  }), i = Tr(a), c = Ce(!1), g = Ce(""), [l, h, , y] = te({
     key: `${ae}::${n}::@@user@@`
-  }), [u, d, , g] = te({
+  }), [p, u, , m] = te({
     key: `${ae}::${n}::@@access@@`
-  }), [R, q, , z] = te(
+  }), [T, q, , z] = te(
     {
       key: `${ae}::${n}::@@refresh@@`
     }
-  ), [yt, be, , Ie] = te({
+  ), [mt, be, , Ie] = te({
     key: `${ae}::${n}::@@nonce@@`
-  }), gt = new wr(u, R), U = x(
-    (c) => {
+  }), wt = new Ar(p, T), U = x(
+    (d) => {
       i(
         "removeStateAndLocalStorage: removing state and local storage with reason: ",
-        c
+        d
       ), o({
-        type: dt,
+        type: ot,
         payload: {
-          logoutReason: c || K
+          logoutReason: d || $
         }
-      }), m(), g(), z(), Ie(), o({ type: Y, payload: { isLoading: !1 } });
+      }), y(), m(), z(), Ie(), o({ type: Y, payload: { isLoading: !1 } });
     },
-    [g, m, Ie, z, i]
+    [m, y, Ie, z, i]
   ), N = x(
-    async (c) => {
+    async (d) => {
       i("invalidateAndLogout: invalidating and logging out");
-      const { user: w } = s, f = (w == null ? void 0 : w.userId) || fr(h);
+      const { user: R } = s, f = R?.userId || mr(l);
       f || i(
         "invalidateAndLogout: user cannot be identified, logging out without userId"
-      ), await yr({
+      ), await wr({
         userId: f,
-        idToken: h,
-        accessToken: u,
-        refreshToken: R,
+        idToken: l,
+        accessToken: p,
+        refreshToken: T,
         clientId: n,
         domain: r
-      }), U(c || K);
+      }), U(d || $);
     },
     [
-      u,
+      p,
       s,
       n,
       r,
-      h,
-      R,
+      l,
+      T,
       U,
       i
     ]
   );
-  Ae(() => ((async () => (i("useEffect: setting the fingerprint"), y.current = await pt()))(), () => {
-    i("useEffect: cleaning up the fingerprint"), y.current = "";
+  Ae(() => ((async () => (i("useEffect: setting the fingerprint"), g.current = await yt()))(), () => {
+    i("useEffect: cleaning up the fingerprint"), g.current = "";
   }), []), Ae(() => {
-    if (!l.current)
-      return s.isLoading && h !== null ? (async () => {
+    if (!c.current)
+      return s.isLoading && l !== null ? (async () => {
         try {
-          const c = await M(h);
-          c && c.payload[T.USER_ID_KEY] !== "" ? (i("useEffect: setting the authentication state"), o({
+          const d = await M(l);
+          d && d.payload[A.USER_ID_KEY] !== "" ? (i("useEffect: setting the authentication state"), o({
             type: V,
             payload: {
-              authenticationType: c.payload[T.AUTH_TYPE_KEY],
+              authenticationType: d.payload[A.AUTH_TYPE_KEY],
               user: {
-                userId: c.payload[T.USER_ID_KEY],
-                username: c.payload[T.USERNAME_KEY]
+                userId: d.payload[A.USER_ID_KEY],
+                username: d.payload[A.USERNAME_KEY]
               }
             }
-          })) : (i("useEffect: invalid JWT, invalidating and logging out"), await N(K));
+          })) : (i("useEffect: invalid JWT, invalidating and logging out"), await N($));
         } catch {
           i(
             "useEffect: exception validating JWT, invalidating and logging out"
-          ), await N(K);
+          ), await N($);
         }
       })() : (i("useEffect: setting the loading state to false"), o({ type: Y, payload: { isLoading: !1 } })), () => {
-        l.current = !0;
+        c.current = !0;
       };
-  }, [s.isLoading, h, N, i]);
-  const mt = async (c, w, f) => {
+  }, [s.isLoading, l, N, i]);
+  const Et = async (d, R, f) => {
     const I = Se();
-    if (be(I), o({ type: Y, payload: { isLoading: !0 } }), m(), g(), z(), i("login: Logging in with type: ", f), f === F.CODE) {
-      const { code_verifier: Rt, code_challenge: bt } = await Nn(), _e = await gr({
+    if (be(I), o({ type: Y, payload: { isLoading: !0 } }), y(), m(), z(), i("login: Logging in with type: ", f), f === F.CODE) {
+      const { code_verifier: It, code_challenge: _t } = await Un(), _e = await Er({
         nonce: I,
         clientId: n,
-        code_challenge: bt
+        code_challenge: _t
       });
       if (_e.status) {
-        const J = await Ge({
-          username: c,
-          password: w,
+        const J = await Je({
+          username: d,
+          password: R,
           clientId: n,
           sessionExpiration: t,
           nonce: I,
           type: f,
           code: _e.code,
-          code_verifier: Rt,
+          code_verifier: It,
           domain: r,
-          fingerprint: y.current
+          fingerprint: g.current
         });
-        return J.status ? (p(J.idToken), d(J.accessToken), q(J.refreshToken), o({
+        return J.status ? (h(J.idToken), u(J.accessToken), q(J.refreshToken), o({
           type: V,
           payload: {
             authenticationType: f,
             user: {
               userId: J.userId,
-              username: c
+              username: d
             }
           }
         }), !0) : (U(re), !1);
       }
       return !1;
     }
-    const G = await Ge({
-      username: c,
-      password: w,
+    const G = await Je({
+      username: d,
+      password: R,
       clientId: n,
       sessionExpiration: t,
       nonce: I,
       type: f,
       domain: r,
-      fingerprint: y.current
+      fingerprint: g.current
     });
-    return G.status ? (p(G.idToken), d(G.accessToken), q(G.refreshToken), o({
+    return G.status ? (h(G.idToken), u(G.accessToken), q(G.refreshToken), o({
       type: V,
       payload: {
         authenticationType: f,
         user: {
           userId: G.userId,
-          username: c
+          username: d
         }
       }
     }), !0) : (U(re), !1);
-  }, wt = async (c) => {
-    c == null || c.preventDefault(), await N(lr);
-  }, Et = async () => {
-    const { isAuthenticated: c, user: w } = s;
+  }, St = async (d) => {
+    d?.preventDefault(), await N(Mn);
+  }, At = async () => {
+    const { isAuthenticated: d, user: R } = s;
     try {
-      if (c && w && w.userId) {
-        if (u) {
+      if (d && R && R.userId) {
+        if (p) {
           i("getAccessToken");
-          const I = await M(u);
-          if (I && I.payload[T.USER_ID_KEY] !== "")
-            return u;
+          const I = await M(p);
+          if (I && I.payload[A.USER_ID_KEY] !== "")
+            return p;
         }
         i("getAccessToken: invalid access token, trying to refresh it");
-        const f = await gt.refreshtoken({
+        const f = await wt.refreshtoken({
           clientId: n,
-          userId: w.userId,
-          nonce: yt,
+          userId: R.userId,
+          nonce: mt,
           domain: r
         });
-        return f.status && f.status === "success" ? (d(f.newAccessToken), q(f.newRefreshToken), f.newAccessToken) : (i(
+        return f.status && f.status === "success" ? (u(f.newAccessToken), q(f.newRefreshToken), f.newAccessToken) : (i(
           "getAccessToken: invalid refresh token, need to re-authenticate"
-        ), await N(K), "");
+        ), await N($), "");
       }
       return i(
         "getAccessToken: user is not authenticated, cannot get access token"
-      ), await N(K), "";
+      ), await N($), "";
     } catch {
       return i(
         "getAccessToken: exception occurred, invalidating and logging out"
-      ), await N(dr), "";
+      ), await N(Gn), "";
     }
-  }, St = () => {
-    if (s.isAuthenticated && h)
-      return h;
-  }, At = async () => {
-    const { user: c } = s;
-    let w = await L({
-      accessToken: u,
+  }, Tt = () => {
+    if (s.isAuthenticated && l)
+      return l;
+  }, Rt = async () => {
+    const { user: d } = s;
+    let R = await L({
+      accessToken: p,
       clientId: n,
       type: H.GET_REGISTRATION_OPTIONS,
       params: {
         clientId: n,
-        id: c == null ? void 0 : c.userId,
-        username: c == null ? void 0 : c.username
+        id: d?.userId,
+        username: d?.username
       }
     });
-    if (w.status)
+    if (R.status)
       try {
-        const f = await $t(w.data);
-        w = await L({
-          accessToken: u,
+        const f = await Ht(R.data);
+        R = await L({
+          accessToken: p,
           clientId: n,
           type: H.VERIFY_REGISTRATION,
           params: {
             clientId: n,
-            id: c == null ? void 0 : c.userId,
-            username: c == null ? void 0 : c.username,
+            id: d?.userId,
+            username: d?.username,
             registration: f
           }
         });
       } catch {
         return await L({
-          accessToken: u,
+          accessToken: p,
           clientId: n,
           type: H.VERIFY_REGISTRATION,
           params: {
             clientId: n,
-            id: c == null ? void 0 : c.userId,
-            username: c == null ? void 0 : c.username,
+            id: d?.userId,
+            username: d?.username,
             registration: {}
           }
         }), !1;
       }
-  }, Tt = async () => {
-    const c = Se();
-    be(c), o({ type: Y, payload: { isLoading: !0 } }), m(), g(), z(), i("loginWithPasskey");
-    const w = Se();
+  }, bt = async () => {
+    const d = Se();
+    be(d), o({ type: Y, payload: { isLoading: !0 } }), y(), m(), z(), i("loginWithPasskey");
+    const R = Se();
     let f = await L({
-      accessToken: u,
+      accessToken: p,
       clientId: n,
       type: H.GET_AUTHENTICATION_OPTIONS,
       params: {
-        id: w,
+        id: R,
         clientId: n
       }
     });
     if (f.status)
       try {
-        const I = await Lt(f.data);
+        const I = await xt(f.data);
         return f = await L({
-          accessToken: u,
+          accessToken: p,
           clientId: n,
           type: H.VERIFY_AUTHENTICATION,
           params: {
             clientId: n,
-            id: w,
+            id: R,
             authentication: I,
-            nonce: c,
+            nonce: d,
             domain: r,
-            fingerprint: y.current
+            fingerprint: g.current
           }
-        }), f.data.status === "success" ? (p(f.data.idToken), d(f.data.accessToken), q(f.data.refreshToken), o({
+        }), f.data.status === "success" ? (h(f.data.idToken), u(f.data.accessToken), q(f.data.refreshToken), o({
           type: V,
           payload: {
             authenticationType: F.PASSKEY,
@@ -2193,38 +2187,38 @@ const Er = (e) => x(
         }), !0) : (U(re), !1);
       } catch {
         return await L({
-          accessToken: u,
+          accessToken: p,
           clientId: n,
           type: H.VERIFY_AUTHENTICATION,
           params: {
             clientId: n,
-            id: w,
+            id: R,
             authentication: {},
-            nonce: c,
+            nonce: d,
             domain: r
           }
         }), U(re), !1;
       }
   };
-  return /* @__PURE__ */ ve(Sr.Provider, { value: { state: s, dispatch: o }, children: /* @__PURE__ */ ve(
-    ft.Provider,
+  return /* @__PURE__ */ ve(Rr.Provider, { value: { state: s, dispatch: o }, children: /* @__PURE__ */ ve(
+    gt.Provider,
     {
       value: {
         ...s,
-        login: mt,
-        logout: wt,
-        getAccessToken: Et,
-        getIdToken: St,
-        registeringForPasskey: At,
-        loginWithPasskey: Tt
+        login: Et,
+        logout: St,
+        getAccessToken: At,
+        getIdToken: Tt,
+        registeringForPasskey: Rt,
+        loginWithPasskey: bt
       },
       children: e
     }
   ) });
-}, Nr = (e = ft) => Ot(e);
+}, $r = (e = gt) => Dt(e);
 export {
   F as AUTH_TYPES,
-  Or as AuthProvider,
-  Pr as isGranted,
-  Nr as useAuth
+  Ur as AuthProvider,
+  Dr as isGranted,
+  $r as useAuth
 };