@versini/auth-provider 7.0.0 → 7.1.1

package/dist/index.js

@@ -4,13 +4,13 @@ var j = (e, t, r) => mt(e, typeof t != "symbol" ? t + "" : t, r);
 import { jsx as be } from "react/jsx-runtime";
 import wt, { useSyncExternalStore as St, useCallback as N, useEffect as He, createContext as At, useReducer as Tt, useRef as Rt, useContext as _t } from "react";
 /*!
-  @versini/auth-provider v7.0.0
+  @versini/auth-provider v7.1.1
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_CLIENT__ || (window.__VERSINI_AUTH_CLIENT__ = {
-    version: "7.0.0",
-    buildTime: "08/19/2024 06:11 PM EDT",
+    version: "7.1.1",
+    buildTime: "08/25/2024 03:19 PM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
@@ -141,12 +141,12 @@ class bt {
     }
   }
 }
-const Je = new bt(), Ot = ["cross-platform", "platform"];
+const Je = new bt(), vt = ["cross-platform", "platform"];
 function Ye(e) {
-  if (e && !(Ot.indexOf(e) < 0))
+  if (e && !(vt.indexOf(e) < 0))
     return e;
 }
-async function vt(e) {
+async function Ot(e) {
   if (!Se())
     throw new Error("WebAuthn is not supported in this browser");
   const r = { publicKey: {
@@ -162,35 +162,35 @@ async function vt(e) {
   let n;
   try {
     n = await navigator.credentials.create(r);
-  } catch (l) {
-    throw It({ error: l, options: r });
+  } catch (u) {
+    throw It({ error: u, options: r });
   }
   if (!n)
     throw new Error("Registration was not completed");
   const { id: a, rawId: o, response: s, type: i } = n;
   let c;
   typeof s.getTransports == "function" && (c = s.getTransports());
-  let u;
+  let h;
   if (typeof s.getPublicKeyAlgorithm == "function")
     try {
-      u = s.getPublicKeyAlgorithm();
-    } catch (l) {
-      he("getPublicKeyAlgorithm()", l);
+      h = s.getPublicKeyAlgorithm();
+    } catch (u) {
+      he("getPublicKeyAlgorithm()", u);
     }
-  let p;
+  let f;
   if (typeof s.getPublicKey == "function")
     try {
-      const l = s.getPublicKey();
-      l !== null && (p = _(l));
-    } catch (l) {
-      he("getPublicKey()", l);
+      const u = s.getPublicKey();
+      u !== null && (f = _(u));
+    } catch (u) {
+      he("getPublicKey()", u);
     }
-  let f;
+  let p;
   if (typeof s.getAuthenticatorData == "function")
     try {
-      f = _(s.getAuthenticatorData());
-    } catch (l) {
-      he("getAuthenticatorData()", l);
+      p = _(s.getAuthenticatorData());
+    } catch (u) {
+      he("getAuthenticatorData()", u);
     }
   return {
     id: a,
@@ -199,9 +199,9 @@ async function vt(e) {
       attestationObject: _(s.attestationObject),
       clientDataJSON: _(s.clientDataJSON),
       transports: c,
-      publicKeyAlgorithm: u,
-      publicKey: p,
-      authenticatorData: f
+      publicKeyAlgorithm: h,
+      publicKey: f,
+      authenticatorData: p
     },
     type: i,
     clientExtensionResults: n.getClientExtensionResults(),
@@ -280,23 +280,23 @@ async function Ct(e, t = !1) {
   let o;
   try {
     o = await navigator.credentials.get(a);
-  } catch (f) {
-    throw Pt({ error: f, options: a });
+  } catch (p) {
+    throw Pt({ error: p, options: a });
   }
   if (!o)
     throw new Error("Authentication was not completed");
-  const { id: s, rawId: i, response: c, type: u } = o;
-  let p;
-  return c.userHandle && (p = _(c.userHandle)), {
+  const { id: s, rawId: i, response: c, type: h } = o;
+  let f;
+  return c.userHandle && (f = _(c.userHandle)), {
     id: s,
     rawId: _(i),
     response: {
       authenticatorData: _(c.authenticatorData),
       clientDataJSON: _(c.clientDataJSON),
       signature: _(c.signature),
-      userHandle: p
+      userHandle: f
     },
-    type: u,
+    type: h,
     clientExtensionResults: o.getClientExtensionResults(),
     authenticatorAttachment: Ye(o.authenticatorAttachment)
   };
@@ -308,7 +308,7 @@ async function Ct(e, t = !1) {
 try {
   window.__VERSINI_AUTH_COMMON__ || (window.__VERSINI_AUTH_COMMON__ = {
     version: "4.0.0",
-    buildTime: "08/19/2024 06:11 PM EDT",
+    buildTime: "08/25/2024 03:19 PM EDT",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
@@ -387,7 +387,7 @@ class R extends D {
     super(t), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = n, this.reason = a, this.payload = r;
   }
 }
-class Oe extends D {
+class ve extends D {
   static get code() {
     return "ERR_JWT_EXPIRED";
   }
@@ -419,7 +419,7 @@ class m extends D {
     return "ERR_JWS_INVALID";
   }
 }
-let O = class extends D {
+let v = class extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JWT_INVALID";
   }
@@ -427,7 +427,7 @@ let O = class extends D {
     return "ERR_JWT_INVALID";
   }
 };
-class Lt extends D {
+class $t extends D {
   constructor() {
     super(...arguments), this.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED", this.message = "signature verification failed";
   }
@@ -444,7 +444,7 @@ function B(e, t) {
 function pe(e) {
   return parseInt(e.name.slice(4), 10);
 }
-function $t(e) {
+function Lt(e) {
   switch (e) {
     case "ES256":
       return "P-256";
@@ -508,7 +508,7 @@ function Wt(e, t, ...r) {
     case "ES512": {
       if (!B(e.algorithm, "ECDSA"))
         throw b("ECDSA");
-      const n = $t(t);
+      const n = Lt(t);
       if (e.algorithm.namedCurve !== n)
         throw b(n, "algorithm.namedCurve");
       break;
@@ -526,7 +526,7 @@ function Ve(e, t, ...r) {
   } else r.length === 2 ? e += `one of type ${r[0]} or ${r[1]}.` : e += `of type ${r[0]}.`;
   return t == null ? e += ` Received ${t}` : typeof t == "function" && t.name ? e += ` Received function ${t.name}` : typeof t == "object" && t != null && (n = t.constructor) != null && n.name && (e += ` Received an instance of ${t.constructor.name}`), e;
 }
-const ve = (e, ...t) => Ve("Key must be ", e, ...t);
+const Oe = (e, ...t) => Ve("Key must be ", e, ...t);
 function je(e, t, ...r) {
   return Ve(`Key for the ${e} algorithm must be `, t, ...r);
 }
@@ -670,28 +670,28 @@ const qe = (e) => e?.[Symbol.toStringTag] === "KeyObject", ze = async (e, t, r,
     return r.k ? Be(r.k) : (fe || (fe = /* @__PURE__ */ new WeakMap()), ze(fe, e, r, t));
   }
   return e;
-}, Ft = { normalizePublicKey: Vt, normalizePrivateKey: jt }, v = (e, t, r = 0) => {
+}, Ft = { normalizePublicKey: Vt, normalizePrivateKey: jt }, O = (e, t, r = 0) => {
   r === 0 && (t.unshift(t.length), t.unshift(6));
   const n = e.indexOf(t[0], r);
   if (n === -1)
     return !1;
   const a = e.subarray(n, n + t.length);
-  return a.length !== t.length ? !1 : a.every((o, s) => o === t[s]) || v(e, t, n + 1);
+  return a.length !== t.length ? !1 : a.every((o, s) => o === t[s]) || O(e, t, n + 1);
 }, ke = (e) => {
   switch (!0) {
-    case v(e, [42, 134, 72, 206, 61, 3, 1, 7]):
+    case O(e, [42, 134, 72, 206, 61, 3, 1, 7]):
       return "P-256";
-    case v(e, [43, 129, 4, 0, 34]):
+    case O(e, [43, 129, 4, 0, 34]):
       return "P-384";
-    case v(e, [43, 129, 4, 0, 35]):
+    case O(e, [43, 129, 4, 0, 35]):
       return "P-521";
-    case v(e, [43, 101, 110]):
+    case O(e, [43, 101, 110]):
       return "X25519";
-    case v(e, [43, 101, 111]):
+    case O(e, [43, 101, 111]):
       return "X448";
-    case v(e, [43, 101, 112]):
+    case O(e, [43, 101, 112]):
       return "Ed25519";
-    case v(e, [43, 101, 113]):
+    case O(e, [43, 101, 113]):
       return "Ed448";
     default:
       throw new k("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
@@ -823,10 +823,10 @@ async function nr(e, t, r) {
     return Wt(t, e, r), t;
   if (t instanceof Uint8Array) {
     if (!e.startsWith("HS"))
-      throw new TypeError(ve(t, ...ne));
+      throw new TypeError(Oe(t, ...ne));
     return ce.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [r]);
   }
-  throw new TypeError(ve(t, ...ne, "Uint8Array"));
+  throw new TypeError(Oe(t, ...ne, "Uint8Array"));
 }
 const ar = async (e, t, r, n) => {
   const a = await nr(e, t, "verify");
@@ -879,27 +879,27 @@ async function sr(e, t, r) {
       throw new m("JWS Payload must be a string");
   } else if (typeof e.payload != "string" && !(e.payload instanceof Uint8Array))
     throw new m("JWS Payload must be a string or an Uint8Array instance");
-  let u = !1;
-  typeof t == "function" && (t = await t(n, e), u = !0), Zt(i, t, "verify");
-  const p = Dt(F.encode(e.protected ?? ""), F.encode("."), typeof e.payload == "string" ? F.encode(e.payload) : e.payload);
-  let f;
+  let h = !1;
+  typeof t == "function" && (t = await t(n, e), h = !0), Zt(i, t, "verify");
+  const f = Dt(F.encode(e.protected ?? ""), F.encode("."), typeof e.payload == "string" ? F.encode(e.payload) : e.payload);
+  let p;
   try {
-    f = Y(e.signature);
+    p = Y(e.signature);
   } catch {
     throw new m("Failed to base64url decode the signature");
   }
-  if (!await ar(i, t, f, p))
-    throw new Lt();
-  let l;
+  if (!await ar(i, t, p, f))
+    throw new $t();
+  let u;
   if (s)
     try {
-      l = Y(e.payload);
+      u = Y(e.payload);
     } catch {
       throw new m("Failed to base64url decode the payload");
     }
-  else typeof e.payload == "string" ? l = F.encode(e.payload) : l = e.payload;
-  const A = { payload: l };
-  return e.protected !== void 0 && (A.protectedHeader = n), e.header !== void 0 && (A.unprotectedHeader = e.header), u ? { ...A, key: t } : A;
+  else typeof e.payload == "string" ? u = F.encode(e.payload) : u = e.payload;
+  const A = { payload: u };
+  return e.protected !== void 0 && (A.protectedHeader = n), e.header !== void 0 && (A.unprotectedHeader = e.header), h ? { ...A, key: t } : A;
 }
 async function or(e, t, r) {
   if (e instanceof Uint8Array && (e = G.decode(e)), typeof e != "string")
@@ -960,13 +960,13 @@ const ir = (e) => Math.floor(e.getTime() / 1e3), Qe = 60, Xe = Qe * 60, Ae = Xe
   } catch {
   }
   if (!ae(n))
-    throw new O("JWT Claims Set must be a top-level JSON object");
+    throw new v("JWT Claims Set must be a top-level JSON object");
   const { typ: a } = r;
   if (a && (typeof e.typ != "string" || Ce(e.typ) !== Ce(a)))
     throw new R('unexpected "typ" JWT header value', n, "typ", "check_failed");
-  const { requiredClaims: o = [], issuer: s, subject: i, audience: c, maxTokenAge: u } = r, p = [...o];
-  u !== void 0 && p.push("iat"), c !== void 0 && p.push("aud"), i !== void 0 && p.push("sub"), s !== void 0 && p.push("iss");
-  for (const T of new Set(p.reverse()))
+  const { requiredClaims: o = [], issuer: s, subject: i, audience: c, maxTokenAge: h } = r, f = [...o];
+  h !== void 0 && f.push("iat"), c !== void 0 && f.push("aud"), i !== void 0 && f.push("sub"), s !== void 0 && f.push("iss");
+  for (const T of new Set(f.reverse()))
     if (!(T in n))
       throw new R(`missing required "${T}" claim`, n, T, "missing");
   if (s && !(Array.isArray(s) ? s : [s]).includes(n.iss))
@@ -975,40 +975,40 @@ const ir = (e) => Math.floor(e.getTime() / 1e3), Qe = 60, Xe = Qe * 60, Ae = Xe
     throw new R('unexpected "sub" claim value', n, "sub", "check_failed");
   if (c && !dr(n.aud, typeof c == "string" ? [c] : c))
     throw new R('unexpected "aud" claim value', n, "aud", "check_failed");
-  let f;
+  let p;
   switch (typeof r.clockTolerance) {
     case "string":
-      f = Pe(r.clockTolerance);
+      p = Pe(r.clockTolerance);
       break;
     case "number":
-      f = r.clockTolerance;
+      p = r.clockTolerance;
       break;
     case "undefined":
-      f = 0;
+      p = 0;
       break;
     default:
       throw new TypeError("Invalid clockTolerance option type");
   }
-  const { currentDate: l } = r, A = ir(l || /* @__PURE__ */ new Date());
-  if ((n.iat !== void 0 || u) && typeof n.iat != "number")
+  const { currentDate: u } = r, A = ir(u || /* @__PURE__ */ new Date());
+  if ((n.iat !== void 0 || h) && typeof n.iat != "number")
     throw new R('"iat" claim must be a number', n, "iat", "invalid");
   if (n.nbf !== void 0) {
     if (typeof n.nbf != "number")
       throw new R('"nbf" claim must be a number', n, "nbf", "invalid");
-    if (n.nbf > A + f)
+    if (n.nbf > A + p)
       throw new R('"nbf" claim timestamp check failed', n, "nbf", "check_failed");
   }
   if (n.exp !== void 0) {
     if (typeof n.exp != "number")
       throw new R('"exp" claim must be a number', n, "exp", "invalid");
-    if (n.exp <= A - f)
-      throw new Oe('"exp" claim timestamp check failed', n, "exp", "check_failed");
+    if (n.exp <= A - p)
+      throw new ve('"exp" claim timestamp check failed', n, "exp", "check_failed");
   }
-  if (u) {
-    const T = A - n.iat, le = typeof u == "number" ? u : Pe(u);
-    if (T - f > le)
-      throw new Oe('"iat" claim timestamp check failed (too far in the past)', n, "iat", "check_failed");
-    if (T < 0 - f)
+  if (h) {
+    const T = A - n.iat, le = typeof h == "number" ? h : Pe(h);
+    if (T - p > le)
+      throw new ve('"iat" claim timestamp check failed (too far in the past)', n, "iat", "check_failed");
+    if (T < 0 - p)
       throw new R('"iat" claim timestamp check failed (it should be in the past)', n, "iat", "check_failed");
   }
   return n;
@@ -1017,35 +1017,35 @@ async function pr(e, t, r) {
   var n;
   const a = await or(e, t, r);
   if ((n = a.protectedHeader.crit) != null && n.includes("b64") && a.protectedHeader.b64 === !1)
-    throw new O("JWTs MUST NOT use unencoded payload");
+    throw new v("JWTs MUST NOT use unencoded payload");
   const o = { payload: hr(a.protectedHeader, a.payload, r), protectedHeader: a.protectedHeader };
   return typeof t == "function" ? { ...o, key: a.key } : o;
 }
 const fr = Y;
 function yr(e) {
   if (typeof e != "string")
-    throw new O("JWTs must use Compact JWS serialization, JWT must be a string");
+    throw new v("JWTs must use Compact JWS serialization, JWT must be a string");
   const { 1: t, length: r } = e.split(".");
   if (r === 5)
-    throw new O("Only JWTs using Compact JWS serialization can be decoded");
+    throw new v("Only JWTs using Compact JWS serialization can be decoded");
   if (r !== 3)
-    throw new O("Invalid JWT");
+    throw new v("Invalid JWT");
   if (!t)
-    throw new O("JWTs must contain a payload");
+    throw new v("JWTs must contain a payload");
   let n;
   try {
     n = fr(t);
   } catch {
-    throw new O("Failed to base64url decode the payload");
+    throw new v("Failed to base64url decode the payload");
   }
   let a;
   try {
     a = JSON.parse(G.decode(n));
   } catch {
-    throw new O("Failed to parse the decoded payload as JSON");
+    throw new v("Failed to parse the decoded payload as JSON");
   }
   if (!ae(a))
-    throw new O("Invalid JWT Claims Set");
+    throw new v("Invalid JWT Claims Set");
   return a;
 }
 const H = async (e) => {
@@ -1125,12 +1125,12 @@ const Ke = (e, t) => {
   window.localStorage.setItem(e, r), Ze(e, r);
 }, Ir = (e) => {
   window.localStorage.removeItem(e), Ze(e, null);
-}, Le = (e) => window.localStorage.getItem(e), br = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
+}, $e = (e) => window.localStorage.getItem(e), br = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
 function z({
   key: e,
   initialValue: t
 }) {
-  const r = St(br, () => Le(e)), n = N(
+  const r = St(br, () => $e(e)), n = N(
     (s) => {
       try {
         const i = typeof s == "function" ? s(JSON.parse(r)) : s;
@@ -1147,7 +1147,7 @@ function z({
   }, [n]);
   return He(() => {
     try {
-      Le(e) === null && typeof t < "u" && Ke(e, t);
+      $e(e) === null && typeof t < "u" && Ke(e, t);
     } catch (s) {
       console.warn(s);
     }
@@ -1156,25 +1156,25 @@ function z({
 var E = [];
 for (var Ee = 0; Ee < 256; ++Ee)
   E.push((Ee + 256).toString(16).slice(1));
-function Or(e, t = 0) {
+function vr(e, t = 0) {
   return (E[e[t + 0]] + E[e[t + 1]] + E[e[t + 2]] + E[e[t + 3]] + "-" + E[e[t + 4]] + E[e[t + 5]] + "-" + E[e[t + 6]] + E[e[t + 7]] + "-" + E[e[t + 8]] + E[e[t + 9]] + "-" + E[e[t + 10]] + E[e[t + 11]] + E[e[t + 12]] + E[e[t + 13]] + E[e[t + 14]] + E[e[t + 15]]).toLowerCase();
 }
-var Q, vr = new Uint8Array(16);
+var Q, Or = new Uint8Array(16);
 function kr() {
   if (!Q && (Q = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !Q))
     throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return Q(vr);
+  return Q(Or);
 }
 var Pr = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
-const $e = {
+const Le = {
   randomUUID: Pr
 };
 function me(e, t, r) {
-  if ($e.randomUUID && !t && !e)
-    return $e.randomUUID();
+  if (Le.randomUUID && !t && !e)
+    return Le.randomUUID();
   e = e || {};
   var n = e.random || (e.rng || kr)();
-  return n[6] = n[6] & 15 | 64, n[8] = n[8] & 63 | 128, Or(n);
+  return n[6] = n[6] & 15 | 64, n[8] = n[8] & 63 | 128, vr(n);
 }
 const U = "Your session has expired. For your security, please log in again to continue.", Cr = "Your session has been successfully terminated.", we = "Login failed. Please try again.", Nr = "Error getting access token, please re-authenticate.", Dr = "You forgot to wrap your component in <AuthProvider>.", se = {
   dev: "https://auth.gizmette.local.com:3003",
@@ -1241,14 +1241,16 @@ const U = "Your session has expired. For your security, please log in again to c
 		$authentication: AuthenticationOptionsInput!,
 		$nonce: String!,
 		$domain: String,
-		$sessionExpiration: String) {
+		$sessionExpiration: String,
+		$ua: String) {
 		verifyPasskeyAuthentication(
 			clientId: $clientId,
 			id: $id,
 			authentication: $authentication,
 			nonce: $nonce,
 			domain: $domain,
-			sessionExpiration: $sessionExpiration) {
+			sessionExpiration: $sessionExpiration,
+			ua: $ua) {
 				status,
 				idToken,
 				accessToken,
@@ -1274,35 +1276,35 @@ const U = "Your session has expired. For your security, please log in again to c
     schema: Z.VERIFY_AUTHENTICATION,
     method: "verifyPasskeyAuthentication"
   }
-}, L = async ({
+}, $ = async ({
   accessToken: e,
   type: t,
   clientId: r,
   params: n = {}
 }) => {
   try {
-    const a = n, o = `Bearer ${e}`, s = await fetch(
+    const a = `Bearer ${e}`, o = await fetch(
       at ? `${se.dev}/graphql` : `${se.prod}/graphql`,
       {
         credentials: tt,
         method: rt,
         headers: {
-          authorization: o,
+          authorization: a,
           "Content-Type": nt,
           [Ge.CLIENT_ID]: `${r}`
         },
         body: JSON.stringify({
           query: t.schema,
-          variables: a
+          variables: n
         })
       }
     );
-    if (s.status !== 200)
+    if (o.status !== 200)
       return { status: I, data: [] };
-    const { data: i } = await s.json();
+    const { data: s } = await o.json();
     return {
       status: M,
-      data: i[t.method]
+      data: s[t.method]
     };
   } catch (a) {
     return console.error(a), { status: I, data: [] };
@@ -1348,7 +1350,7 @@ const U = "Your session has expired. For your security, please log in again to c
   } catch {
     return "";
   }
-}, Lr = async ({
+}, $r = async ({
   userId: e,
   clientId: t,
   domain: r
@@ -1369,7 +1371,7 @@ const U = "Your session has expired. For your security, please log in again to c
       status: I
     };
   }
-}, $r = async ({
+}, Lr = async ({
   username: e,
   password: t,
   clientId: r,
@@ -1378,10 +1380,11 @@ const U = "Your session has expired. For your security, please log in again to c
   sessionExpiration: o,
   code: s,
   code_verifier: i,
-  domain: c
+  domain: c,
+  ua: h
 }) => {
   try {
-    const u = await ue({
+    const f = await ue({
       type: ie.LOGIN,
       clientId: r,
       params: {
@@ -1392,13 +1395,14 @@ const U = "Your session has expired. For your security, please log in again to c
         nonce: n,
         code: s,
         code_verifier: i,
-        domain: c
+        domain: c,
+        ua: h
       }
-    }), p = await H(u?.data?.idToken);
+    }), p = await H(f?.data?.idToken);
     return p && p.payload[S.USER_ID_KEY] !== "" && p.payload[S.NONCE_KEY] === n ? {
-      idToken: u.data.idToken,
-      accessToken: u.data.accessToken,
-      refreshToken: u.data.refreshToken,
+      idToken: f.data.idToken,
+      accessToken: f.data.accessToken,
+      refreshToken: f.data.refreshToken,
       userId: p.payload[S.USER_ID_KEY],
       status: !0
     } : {
@@ -1531,17 +1535,17 @@ const Jr = (e) => N(
     e && console.info(`==> [Auth ${Date.now()}]: `, ...t);
   },
   [e]
-), $ = () => {
+), L = () => {
   throw new Error(Dr);
 }, ot = At({
   isAuthenticated: !1,
   isLoading: !1,
-  login: $,
-  logout: $,
-  getAccessToken: $,
-  getIdToken: $,
-  registeringForPasskey: $,
-  loginWithPasskey: $,
+  login: L,
+  logout: L,
+  getAccessToken: L,
+  getIdToken: L,
+  registeringForPasskey: L,
+  loginWithPasskey: L,
   logoutReason: ""
 }), Yr = wt.createContext({
   state: st,
@@ -1572,9 +1576,9 @@ const Jr = (e) => N(
   const [o, s] = Tt(Gr, {
     ...st,
     debug: a
-  }), i = Jr(a), c = Rt(!1), [u, p, , f] = z({
+  }), i = Jr(a), c = Rt(!1), [h, f, , p] = z({
     key: `${X}::${r}::@@user@@`
-  }), [l, A, , T] = z({
+  }), [u, A, , T] = z({
     key: `${X}::${r}::@@access@@`
   }), [le, de, , Te] = z(
     {
@@ -1582,52 +1586,52 @@ const Jr = (e) => N(
     }
   ), [it, Re, , _e] = z({
     key: `${X}::${r}::@@nonce@@`
-  }), ct = new xr(l, le), V = N(() => {
-    i("removeLocalStorage: removing local storage"), f(), T(), Te(), _e();
+  }), ct = new xr(u, le), V = N(() => {
+    i("removeLocalStorage: removing local storage"), p(), T(), Te(), _e();
   }, [
     T,
-    f,
+    p,
     _e,
     Te,
     i
   ]), W = N(
-    (d) => {
+    (l) => {
       i(
         "removeStateAndLocalStorage: removing state and local storage with reason: ",
-        d
+        l
       ), s({
         type: et,
         payload: {
-          logoutReason: d || U
+          logoutReason: l || U
         }
       }), V(), s({ type: J, payload: { isLoading: !1 } });
     },
     [V, i]
   ), P = N(
-    async (d) => {
+    async (l) => {
       i("invalidateAndLogout: invalidating and logging out");
-      const { user: y } = o, h = y?.userId || Kr(u);
-      h || i(
+      const { user: y } = o, d = y?.userId || Kr(h);
+      d || i(
         "invalidateAndLogout: user cannot be identified, logging out without userId"
-      ), await Lr({
-        userId: h,
+      ), await $r({
+        userId: d,
         clientId: r,
         domain: n
-      }), W(d || U);
+      }), W(l || U);
     },
-    [u, o, r, n, W, i]
+    [h, o, r, n, W, i]
   );
   He(() => {
     if (!c.current)
-      return o.isLoading && u !== null ? (async () => {
+      return o.isLoading && h !== null ? (async () => {
         try {
-          const d = await H(u);
-          d && d.payload[S.USER_ID_KEY] !== "" ? (i("useEffect: setting the authentication state"), s({
+          const l = await H(h);
+          l && l.payload[S.USER_ID_KEY] !== "" ? (i("useEffect: setting the authentication state"), s({
             type: te,
             payload: {
               user: {
-                userId: d.payload[S.USER_ID_KEY],
-                username: d.payload[S.USERNAME_KEY]
+                userId: l.payload[S.USER_ID_KEY],
+                username: l.payload[S.USERNAME_KEY]
               }
             }
           })) : (i("useEffect: invalid JWT, invalidating and logging out"), await P(U));
@@ -1639,59 +1643,60 @@ const Jr = (e) => N(
       })() : (i("useEffect: setting the loading state to false"), s({ type: J, payload: { isLoading: !1 } })), () => {
         c.current = !0;
       };
-  }, [o.isLoading, u, P, i]);
-  const ut = async (d, y) => {
+  }, [o.isLoading, h, P, i]);
+  const ut = async (l, y) => {
     s({ type: J, payload: { isLoading: !0 } }), V();
-    const h = me();
-    Re(h), i("login: Logging in with password");
+    const d = me();
+    Re(d), i("login: Logging in with password");
     const C = oe.CODE, { code_verifier: yt, code_challenge: gt } = await _r(), Ie = await Hr({
-      nonce: h,
+      nonce: d,
       clientId: r,
       code_challenge: gt
     });
     if (Ie.status) {
-      const x = await $r({
-        username: d,
+      const x = await Lr({
+        username: l,
         password: y,
         clientId: r,
         sessionExpiration: t,
-        nonce: h,
+        nonce: d,
         type: C,
         code: Ie.data,
         code_verifier: yt,
-        domain: n
+        domain: n,
+        ua: navigator.userAgent
       });
-      return x.status ? (p(x.idToken), A(x.accessToken), de(x.refreshToken), s({
+      return x.status ? (f(x.idToken), A(x.accessToken), de(x.refreshToken), s({
         type: te,
         payload: {
           user: {
             userId: x.userId,
-            username: d
+            username: l
           }
         }
       }), !0) : (W(we), !1);
     }
     return !1;
-  }, lt = async (d) => {
-    d?.preventDefault(), await P(Cr);
+  }, lt = async (l) => {
+    l?.preventDefault(), await P(Cr);
   }, dt = async () => {
-    const { isAuthenticated: d, user: y } = o;
+    const { isAuthenticated: l, user: y } = o;
     try {
-      if (d && y && y.userId) {
-        if (l) {
+      if (l && y && y.userId) {
+        if (u) {
           i("getAccessToken");
-          const C = await H(l);
+          const C = await H(u);
           if (C && C.payload[S.USER_ID_KEY] !== "")
-            return l;
+            return u;
         }
         i("getAccessToken: invalid access token, trying to refresh it");
-        const h = await ct.refreshtoken({
+        const d = await ct.refreshtoken({
           clientId: r,
           userId: y.userId,
           nonce: it,
           domain: n
         });
-        return h.status && h.status === "success" && h.newAccessToken ? (A(h.newAccessToken), de(h.newRefreshToken), h.newAccessToken) : (i(
+        return d.status && d.status === "success" && d.newAccessToken ? (A(d.newAccessToken), de(d.newRefreshToken), d.newAccessToken) : (i(
           "getAccessToken: invalid refresh token, need to re-authenticate"
         ), await P(U), "");
       }
@@ -1703,41 +1708,41 @@ const Jr = (e) => N(
         "getAccessToken: exception occurred, invalidating and logging out"
       ), await P(Nr), "";
     }
-  }, ht = () => o.isAuthenticated && u ? u : "", pt = async () => {
-    const { user: d } = o;
-    let y = await L({
-      accessToken: l,
+  }, ht = () => o.isAuthenticated && h ? h : "", pt = async () => {
+    const { user: l } = o;
+    let y = await $({
+      accessToken: u,
       clientId: r,
       type: K.GET_REGISTRATION_OPTIONS,
       params: {
         clientId: r,
-        id: d?.userId,
-        username: d?.username
+        id: l?.userId,
+        username: l?.username
       }
     });
     if (y.status)
       try {
-        const h = await vt(y.data);
-        return y = await L({
-          accessToken: l,
+        const d = await Ot(y.data);
+        return y = await $({
+          accessToken: u,
           clientId: r,
           type: K.VERIFY_REGISTRATION,
           params: {
             clientId: r,
-            id: d?.userId,
-            username: d?.username,
-            registration: h
+            id: l?.userId,
+            username: l?.username,
+            registration: d
           }
         }), !!(y.status && y.data.length > 0);
       } catch {
-        return await L({
-          accessToken: l,
+        return await $({
+          accessToken: u,
           clientId: r,
           type: K.VERIFY_REGISTRATION,
           params: {
             clientId: r,
-            id: d?.userId,
-            username: d?.username,
+            id: l?.userId,
+            username: l?.username,
             registration: {}
           }
         }), !1;
@@ -1745,11 +1750,11 @@ const Jr = (e) => N(
     return !1;
   }, ft = async () => {
     s({ type: J, payload: { isLoading: !0 } }), V();
-    const d = me();
-    Re(d), i("loginWithPasskey");
+    const l = me();
+    Re(l), i("loginWithPasskey");
     const y = me();
-    let h = await L({
-      accessToken: l,
+    let d = await $({
+      accessToken: u,
       clientId: r,
       type: K.GET_AUTHENTICATION_OPTIONS,
       params: {
@@ -1757,40 +1762,41 @@ const Jr = (e) => N(
         clientId: r
       }
     });
-    if (h.status)
+    if (d.status)
       try {
-        const C = await Ct(h.data);
-        return h = await L({
-          accessToken: l,
+        const C = await Ct(d.data);
+        return d = await $({
+          accessToken: u,
           clientId: r,
           type: K.VERIFY_AUTHENTICATION,
           params: {
             clientId: r,
             id: y,
             authentication: C,
-            nonce: d,
+            nonce: l,
             domain: n,
-            sessionExpiration: t
+            sessionExpiration: t,
+            ua: navigator.userAgent
           }
-        }), h.data.status === M ? (p(h.data.idToken), A(h.data.accessToken), de(h.data.refreshToken), s({
+        }), d.data.status === M ? (f(d.data.idToken), A(d.data.accessToken), de(d.data.refreshToken), s({
           type: te,
           payload: {
             user: {
-              userId: h.data.userId,
-              username: h.data.username
+              userId: d.data.userId,
+              username: d.data.username
             }
           }
         }), !0) : (W(we), !1);
       } catch {
-        return await L({
-          accessToken: l,
+        return await $({
+          accessToken: u,
           clientId: r,
           type: K.VERIFY_AUTHENTICATION,
           params: {
             clientId: r,
             id: y,
             authentication: {},
-            nonce: d,
+            nonce: l,
             domain: n,
             sessionExpiration: t
           }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@versini/auth-provider",
-	"version": "7.0.0",
+	"version": "7.1.1",
 	"license": "MIT",
 	"author": "Arno Versini",
 	"publishConfig": {
@@ -46,9 +46,9 @@
 	"dependencies": {
 		"@simplewebauthn/browser": "10.0.0",
 		"@versini/auth-common": "4.0.0",
-		"@versini/ui-hooks": "4.0.1",
-		"jose": "5.6.3",
+		"@versini/ui-hooks": "4.1.0",
+		"jose": "5.7.0",
 		"uuid": "10.0.0"
 	},
-	"gitHead": "810b2920c2281e78b52ffbe1db7e52f4fefa8cbe"
+	"gitHead": "f91f2bce0bb2cc3887be4b53132b0a96549877d7"
 }