@versini/auth-provider 7.3.3 → 7.4.0

package/dist/index.js

@@ -2,45 +2,45 @@ var At = Object.defineProperty;
 var Tt = (e, t, r) => t in e ? At(e, t, { enumerable: !0, configurable: !0, writable: !0, value: r }) : e[t] = r;
 var X = (e, t, r) => Tt(e, typeof t != "symbol" ? t + "" : t, r);
 import { jsx as Oe } from "react/jsx-runtime";
-import Rt, { useSyncExternalStore as bt, useCallback as D, useEffect as xe, createContext as _t, useReducer as It, useRef as kt, useContext as vt } from "react";
+import Rt, { useSyncExternalStore as _t, useCallback as D, useEffect as Je, createContext as It, useReducer as bt, useRef as kt, useContext as Ot } from "react";
 /*!
-  @versini/auth-provider v7.3.3
+  @versini/auth-provider v7.4.0
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_CLIENT__ || (window.__VERSINI_AUTH_CLIENT__ = {
-    version: "7.3.3",
-    buildTime: "09/30/2024 01:36 PM EDT",
+    version: "7.4.0",
+    buildTime: "12/18/2024 02:36 PM EST",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
 } catch {
 }
-function b(e) {
+function k(e) {
   const t = new Uint8Array(e);
   let r = "";
   for (const a of t)
     r += String.fromCharCode(a);
   return btoa(r).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
-function ie(e) {
+function oe(e) {
   const t = e.replace(/-/g, "+").replace(/_/g, "/"), r = (4 - t.length % 4) % 4, n = t.padEnd(t.length + r, "="), a = atob(n), s = new ArrayBuffer(a.length), o = new Uint8Array(s);
   for (let i = 0; i < a.length; i++)
     o[i] = a.charCodeAt(i);
   return s;
 }
-function Re() {
+function Te() {
   return window?.PublicKeyCredential !== void 0 && typeof window.PublicKeyCredential == "function";
 }
-function Ge(e) {
+function Ye(e) {
   const { id: t } = e;
   return {
     ...e,
-    id: ie(t),
+    id: oe(t),
     transports: e.transports
   };
 }
-function Me(e) {
+function xe(e) {
   return e === "localhost" || /^([a-z0-9]+(-[a-z0-9]+)*\.)+[a-z]{2,}$/i.test(e);
 }
 class S extends Error {
@@ -48,7 +48,7 @@ class S extends Error {
     super(t, { cause: n }), this.name = a ?? n.name, this.code = r;
   }
 }
-function Ot({ error: e, options: t }) {
+function vt({ error: e, options: t }) {
   const { publicKey: r } = t;
   if (!r)
     throw Error("options was missing required publicKey property");
@@ -97,7 +97,7 @@ function Ot({ error: e, options: t }) {
       });
     if (e.name === "SecurityError") {
       const n = window.location.hostname;
-      if (Me(n)) {
+      if (xe(n)) {
         if (r.rp.id !== n)
           return new S({
             message: `The RP ID "${r.rp.id}" is invalid for this domain`,
@@ -141,29 +141,29 @@ class Pt {
     }
   }
 }
-const Ve = new Pt(), Ct = ["cross-platform", "platform"];
-function je(e) {
+const Me = new Pt(), Ct = ["cross-platform", "platform"];
+function Ge(e) {
   if (e && !(Ct.indexOf(e) < 0))
     return e;
 }
 async function Nt(e) {
-  if (!Re())
+  if (!Te())
     throw new Error("WebAuthn is not supported in this browser");
   const r = { publicKey: {
     ...e,
-    challenge: ie(e.challenge),
+    challenge: oe(e.challenge),
     user: {
       ...e.user,
-      id: ie(e.user.id)
+      id: oe(e.user.id)
     },
-    excludeCredentials: e.excludeCredentials?.map(Ge)
+    excludeCredentials: e.excludeCredentials?.map(Ye)
   } };
-  r.signal = Ve.createNewAbortSignal();
+  r.signal = Me.createNewAbortSignal();
   let n;
   try {
     n = await navigator.credentials.create(r);
   } catch (l) {
-    throw Ot({ error: l, options: r });
+    throw vt({ error: l, options: r });
   }
   if (!n)
     throw new Error("Registration was not completed");
@@ -175,29 +175,29 @@ async function Nt(e) {
     try {
       h = o.getPublicKeyAlgorithm();
     } catch (l) {
-      ge("getPublicKeyAlgorithm()", l);
+      ye("getPublicKeyAlgorithm()", l);
     }
   let y;
   if (typeof o.getPublicKey == "function")
     try {
       const l = o.getPublicKey();
-      l !== null && (y = b(l));
+      l !== null && (y = k(l));
     } catch (l) {
-      ge("getPublicKey()", l);
+      ye("getPublicKey()", l);
     }
   let p;
   if (typeof o.getAuthenticatorData == "function")
     try {
-      p = b(o.getAuthenticatorData());
+      p = k(o.getAuthenticatorData());
     } catch (l) {
-      ge("getAuthenticatorData()", l);
+      ye("getAuthenticatorData()", l);
     }
   return {
     id: a,
-    rawId: b(s),
+    rawId: k(s),
     response: {
-      attestationObject: b(o.attestationObject),
-      clientDataJSON: b(o.clientDataJSON),
+      attestationObject: k(o.attestationObject),
+      clientDataJSON: k(o.clientDataJSON),
       transports: c,
       publicKeyAlgorithm: h,
       publicKey: y,
@@ -205,20 +205,20 @@ async function Nt(e) {
     },
     type: i,
     clientExtensionResults: n.getClientExtensionResults(),
-    authenticatorAttachment: je(n.authenticatorAttachment)
+    authenticatorAttachment: Ge(n.authenticatorAttachment)
   };
 }
-function ge(e, t) {
+function ye(e, t) {
   console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
 `, t);
 }
-function Dt() {
-  if (!Re())
+function Kt() {
+  if (!Te())
     return new Promise((t) => t(!1));
   const e = window.PublicKeyCredential;
   return e.isConditionalMediationAvailable === void 0 ? new Promise((t) => t(!1)) : e.isConditionalMediationAvailable();
 }
-function Kt({ error: e, options: t }) {
+function Dt({ error: e, options: t }) {
   const { publicKey: r } = t;
   if (!r)
     throw Error("options was missing required publicKey property");
@@ -238,7 +238,7 @@ function Kt({ error: e, options: t }) {
       });
     if (e.name === "SecurityError") {
       const n = window.location.hostname;
-      if (Me(n)) {
+      if (xe(n)) {
         if (r.rpId !== n)
           return new S({
             message: `The RP ID "${r.rpId}" is invalid for this domain`,
@@ -260,68 +260,68 @@ function Kt({ error: e, options: t }) {
   return e;
 }
 async function Ut(e, t = !1) {
-  if (!Re())
+  if (!Te())
     throw new Error("WebAuthn is not supported in this browser");
   let r;
-  e.allowCredentials?.length !== 0 && (r = e.allowCredentials?.map(Ge));
+  e.allowCredentials?.length !== 0 && (r = e.allowCredentials?.map(Ye));
   const n = {
     ...e,
-    challenge: ie(e.challenge),
+    challenge: oe(e.challenge),
     allowCredentials: r
   }, a = {};
   if (t) {
-    if (!await Dt())
+    if (!await Kt())
       throw Error("Browser does not support WebAuthn autofill");
     if (document.querySelectorAll("input[autocomplete$='webauthn']").length < 1)
       throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');
     a.mediation = "conditional", n.allowCredentials = [];
   }
-  a.publicKey = n, a.signal = Ve.createNewAbortSignal();
+  a.publicKey = n, a.signal = Me.createNewAbortSignal();
   let s;
   try {
     s = await navigator.credentials.get(a);
   } catch (p) {
-    throw Kt({ error: p, options: a });
+    throw Dt({ error: p, options: a });
   }
   if (!s)
     throw new Error("Authentication was not completed");
   const { id: o, rawId: i, response: c, type: h } = s;
   let y;
-  return c.userHandle && (y = b(c.userHandle)), {
+  return c.userHandle && (y = k(c.userHandle)), {
     id: o,
-    rawId: b(i),
+    rawId: k(i),
     response: {
-      authenticatorData: b(c.authenticatorData),
-      clientDataJSON: b(c.clientDataJSON),
-      signature: b(c.signature),
+      authenticatorData: k(c.authenticatorData),
+      clientDataJSON: k(c.clientDataJSON),
+      signature: k(c.signature),
       userHandle: y
     },
     type: h,
     clientExtensionResults: s.getClientExtensionResults(),
-    authenticatorAttachment: je(s.authenticatorAttachment)
+    authenticatorAttachment: Ge(s.authenticatorAttachment)
   };
 }
 /*!
-  @versini/auth-common v4.1.3
+  @versini/auth-common v4.2.0
   © 2024 gizmette.com
 */
 try {
   window.__VERSINI_AUTH_COMMON__ || (window.__VERSINI_AUTH_COMMON__ = {
-    version: "4.1.3",
-    buildTime: "09/30/2024 01:36 PM EDT",
+    version: "4.2.0",
+    buildTime: "12/18/2024 02:36 PM EST",
     homepage: "https://github.com/aversini/auth-client",
     license: "MIT"
   });
 } catch {
 }
-const G = {
+const M = {
   ID_TOKEN: "id_token",
   ACCESS_TOKEN: "token",
   ID_AND_ACCESS_TOKEN: "id_token token",
   CODE: "code",
   REFRESH_TOKEN: "refresh_token",
   PASSKEY: "passkey"
-}, Fe = {
+}, Ve = {
   CLIENT_ID: "X-Auth-ClientId"
 }, f = {
   ALG: "RS256",
@@ -336,7 +336,7 @@ const G = {
   SCOPES_KEY: "scopes",
   CLIENT_ID_KEY: "aud",
   ISSUER: "gizmette.com"
-}, $t = `-----BEGIN PUBLIC KEY-----
+}, Lt = `-----BEGIN PUBLIC KEY-----
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6i3Jd9fY/3COqCw/m7
 w5PKyTYLGAI2I6SIIdpe6i6DOCbEkmDz7LdVsBqwNtVi8gvWYIj+8ol6rU3qu1v5
 i1Jd45GSK4kzkVdgCmQZbM5ak0KI99q5wsrAIzUd+LRJ2HRvWtr5IYdsIiXaQjle
@@ -344,108 +344,134 @@ aMwPFOIcJH+rKfFgNcHLcaS5syp7zU1ANwZ+trgR+DifBr8TLVkBynmNeTyhDm2+
 l0haqjMk0UoNPPE8iYBWUHQJJE1Dqstj65d6Eh5g64Pao25y4cmYJbKjiblIGEkE
 sjqybA9mARAqh9k/eiIopecWSiffNQTwVQVd2I9ZH3BalhEXHlqFgrjz51kFqg81
 awIDAQAB
------END PUBLIC KEY-----`, de = {
+-----END PUBLIC KEY-----`, ue = {
   CODE: "code",
   LOGOUT: "logout",
   LOGIN: "login",
   REFRESH: "refresh"
-}, he = crypto, Be = (e) => e instanceof CryptoKey, Z = new TextEncoder(), q = new TextDecoder();
-function Ht(...e) {
+}, le = crypto, je = (e) => e instanceof CryptoKey, Z = new TextEncoder(), q = new TextDecoder();
+function Wt(...e) {
   const t = e.reduce((a, { length: s }) => a + s, 0), r = new Uint8Array(t);
   let n = 0;
   for (const a of e)
     r.set(a, n), n += a.length;
   return r;
 }
-const Lt = (e) => {
+const Ht = (e) => {
   const t = atob(e), r = new Uint8Array(t.length);
   for (let n = 0; n < t.length; n++)
     r[n] = t.charCodeAt(n);
   return r;
-}, P = (e) => {
+}, C = (e) => {
   let t = e;
   t instanceof Uint8Array && (t = q.decode(t)), t = t.replace(/-/g, "+").replace(/_/g, "/").replace(/\s/g, "");
   try {
-    return Lt(t);
+    return Ht(t);
   } catch {
     throw new TypeError("The input to be decoded is not correctly encoded.");
   }
 };
-class K extends Error {
-  static get code() {
-    return "ERR_JOSE_GENERIC";
-  }
-  constructor(t) {
-    var r;
-    super(t), this.code = "ERR_JOSE_GENERIC", this.name = this.constructor.name, (r = Error.captureStackTrace) == null || r.call(Error, this, this.constructor);
-  }
-}
-class R extends K {
-  static get code() {
-    return "ERR_JWT_CLAIM_VALIDATION_FAILED";
+let A = class extends Error {
+  constructor(t, r) {
+    var n;
+    super(t, r), this.code = "ERR_JOSE_GENERIC", this.name = this.constructor.name, (n = Error.captureStackTrace) == null || n.call(Error, this, this.constructor);
   }
+};
+A.code = "ERR_JOSE_GENERIC";
+class _ extends A {
   constructor(t, r, n = "unspecified", a = "unspecified") {
-    super(t), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = n, this.reason = a, this.payload = r;
+    super(t, { cause: { claim: n, reason: a, payload: r } }), this.code = "ERR_JWT_CLAIM_VALIDATION_FAILED", this.claim = n, this.reason = a, this.payload = r;
   }
 }
-class Pe extends K {
-  static get code() {
-    return "ERR_JWT_EXPIRED";
-  }
+_.code = "ERR_JWT_CLAIM_VALIDATION_FAILED";
+class Se extends A {
   constructor(t, r, n = "unspecified", a = "unspecified") {
-    super(t), this.code = "ERR_JWT_EXPIRED", this.claim = n, this.reason = a, this.payload = r;
+    super(t, { cause: { claim: n, reason: a, payload: r } }), this.code = "ERR_JWT_EXPIRED", this.claim = n, this.reason = a, this.payload = r;
   }
 }
-class Wt extends K {
+Se.code = "ERR_JWT_EXPIRED";
+class Fe extends A {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_ALG_NOT_ALLOWED";
   }
-  static get code() {
-    return "ERR_JOSE_ALG_NOT_ALLOWED";
-  }
 }
-class _ extends K {
+Fe.code = "ERR_JOSE_ALG_NOT_ALLOWED";
+class I extends A {
   constructor() {
     super(...arguments), this.code = "ERR_JOSE_NOT_SUPPORTED";
   }
-  static get code() {
-    return "ERR_JOSE_NOT_SUPPORTED";
+}
+I.code = "ERR_JOSE_NOT_SUPPORTED";
+class $t extends A {
+  constructor(t = "decryption operation failed", r) {
+    super(t, r), this.code = "ERR_JWE_DECRYPTION_FAILED";
   }
 }
-class w extends K {
+$t.code = "ERR_JWE_DECRYPTION_FAILED";
+class Jt extends A {
   constructor() {
-    super(...arguments), this.code = "ERR_JWS_INVALID";
+    super(...arguments), this.code = "ERR_JWE_INVALID";
   }
-  static get code() {
-    return "ERR_JWS_INVALID";
+}
+Jt.code = "ERR_JWE_INVALID";
+class E extends A {
+  constructor() {
+    super(...arguments), this.code = "ERR_JWS_INVALID";
   }
 }
-let v = class extends K {
+E.code = "ERR_JWS_INVALID";
+let b = class extends A {
   constructor() {
     super(...arguments), this.code = "ERR_JWT_INVALID";
   }
-  static get code() {
-    return "ERR_JWT_INVALID";
-  }
 };
-class Jt extends K {
+b.code = "ERR_JWT_INVALID";
+class Yt extends A {
   constructor() {
-    super(...arguments), this.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED", this.message = "signature verification failed";
+    super(...arguments), this.code = "ERR_JWK_INVALID";
   }
-  static get code() {
-    return "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
+}
+Yt.code = "ERR_JWK_INVALID";
+class xt extends A {
+  constructor() {
+    super(...arguments), this.code = "ERR_JWKS_INVALID";
+  }
+}
+xt.code = "ERR_JWKS_INVALID";
+class Mt extends A {
+  constructor(t = "no applicable key found in the JSON Web Key Set", r) {
+    super(t, r), this.code = "ERR_JWKS_NO_MATCHING_KEY";
   }
 }
-function k(e, t = "algorithm.name") {
+Mt.code = "ERR_JWKS_NO_MATCHING_KEY";
+class Gt extends A {
+  constructor(t = "multiple matching keys found in the JSON Web Key Set", r) {
+    super(t, r), this.code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
+  }
+}
+Gt.code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
+class Vt extends A {
+  constructor(t = "request timed out", r) {
+    super(t, r), this.code = "ERR_JWKS_TIMEOUT";
+  }
+}
+Vt.code = "ERR_JWKS_TIMEOUT";
+class Be extends A {
+  constructor(t = "signature verification failed", r) {
+    super(t, r), this.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
+  }
+}
+Be.code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
+function v(e, t = "algorithm.name") {
   return new TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`);
 }
 function ee(e, t) {
   return e.name === t;
 }
-function Ee(e) {
+function fe(e) {
   return parseInt(e.name.slice(4), 10);
 }
-function Yt(e) {
+function jt(e) {
   switch (e) {
     case "ES256":
       return "P-256";
@@ -457,7 +483,7 @@ function Yt(e) {
       throw new Error("unreachable");
   }
 }
-function xt(e, t) {
+function Ft(e, t) {
   if (t.length && !t.some((r) => e.usages.includes(r))) {
     let r = "CryptoKey does not support this operation, its usages must include ";
     if (t.length > 2) {
@@ -467,57 +493,57 @@ function xt(e, t) {
     throw new TypeError(r);
   }
 }
-function Gt(e, t, ...r) {
+function Bt(e, t, ...r) {
   switch (t) {
     case "HS256":
     case "HS384":
     case "HS512": {
       if (!ee(e.algorithm, "HMAC"))
-        throw k("HMAC");
+        throw v("HMAC");
       const n = parseInt(t.slice(2), 10);
-      if (Ee(e.algorithm.hash) !== n)
-        throw k(`SHA-${n}`, "algorithm.hash");
+      if (fe(e.algorithm.hash) !== n)
+        throw v(`SHA-${n}`, "algorithm.hash");
       break;
     }
     case "RS256":
     case "RS384":
     case "RS512": {
       if (!ee(e.algorithm, "RSASSA-PKCS1-v1_5"))
-        throw k("RSASSA-PKCS1-v1_5");
+        throw v("RSASSA-PKCS1-v1_5");
       const n = parseInt(t.slice(2), 10);
-      if (Ee(e.algorithm.hash) !== n)
-        throw k(`SHA-${n}`, "algorithm.hash");
+      if (fe(e.algorithm.hash) !== n)
+        throw v(`SHA-${n}`, "algorithm.hash");
       break;
     }
     case "PS256":
     case "PS384":
     case "PS512": {
       if (!ee(e.algorithm, "RSA-PSS"))
-        throw k("RSA-PSS");
+        throw v("RSA-PSS");
       const n = parseInt(t.slice(2), 10);
-      if (Ee(e.algorithm.hash) !== n)
-        throw k(`SHA-${n}`, "algorithm.hash");
+      if (fe(e.algorithm.hash) !== n)
+        throw v(`SHA-${n}`, "algorithm.hash");
       break;
     }
     case "EdDSA": {
       if (e.algorithm.name !== "Ed25519" && e.algorithm.name !== "Ed448")
-        throw k("Ed25519 or Ed448");
+        throw v("Ed25519 or Ed448");
       break;
     }
     case "ES256":
     case "ES384":
     case "ES512": {
       if (!ee(e.algorithm, "ECDSA"))
-        throw k("ECDSA");
-      const n = Yt(t);
+        throw v("ECDSA");
+      const n = jt(t);
       if (e.algorithm.namedCurve !== n)
-        throw k(n, "algorithm.namedCurve");
+        throw v(n, "algorithm.namedCurve");
       break;
     }
     default:
       throw new TypeError("CryptoKey does not support this operation");
   }
-  xt(e, r);
+  Ft(e, r);
 }
 function qe(e, t, ...r) {
   var n;
@@ -527,11 +553,11 @@ function qe(e, t, ...r) {
   } else r.length === 2 ? e += `one of type ${r[0]} or ${r[1]}.` : e += `of type ${r[0]}.`;
   return t == null ? e += ` Received ${t}` : typeof t == "function" && t.name ? e += ` Received function ${t.name}` : typeof t == "object" && t != null && (n = t.constructor) != null && n.name && (e += ` Received an instance of ${t.constructor.name}`), e;
 }
-const Ce = (e, ...t) => qe("Key must be ", e, ...t);
+const ve = (e, ...t) => qe("Key must be ", e, ...t);
 function ze(e, t, ...r) {
   return qe(`Key for the ${e} algorithm must be `, t, ...r);
 }
-const Qe = (e) => Be(e) ? !0 : e?.[Symbol.toStringTag] === "KeyObject", ce = ["CryptoKey"], Mt = (...e) => {
+const Qe = (e) => je(e) ? !0 : e?.[Symbol.toStringTag] === "KeyObject", se = ["CryptoKey"], qt = (...e) => {
   const t = e.filter(Boolean);
   if (t.length === 0 || t.length === 1)
     return !0;
@@ -550,11 +576,11 @@ const Qe = (e) => Be(e) ? !0 : e?.[Symbol.toStringTag] === "KeyObject", ce = ["C
   }
   return !0;
 };
-function Vt(e) {
+function zt(e) {
   return typeof e == "object" && e !== null;
 }
-function M(e) {
-  if (!Vt(e) || Object.prototype.toString.call(e) !== "[object Object]")
+function G(e) {
+  if (!zt(e) || Object.prototype.toString.call(e) !== "[object Object]")
     return !1;
   if (Object.getPrototypeOf(e) === null)
     return !0;
@@ -563,7 +589,7 @@ function M(e) {
     t = Object.getPrototypeOf(t);
   return Object.getPrototypeOf(e) === t;
 }
-const jt = (e, t) => {
+const Qt = (e, t) => {
   if (e.startsWith("RS") || e.startsWith("PS")) {
     const { modulusLength: r } = t.algorithm;
     if (typeof r != "number" || r < 2048)
@@ -571,18 +597,18 @@ const jt = (e, t) => {
   }
 };
 function j(e) {
-  return M(e) && typeof e.kty == "string";
+  return G(e) && typeof e.kty == "string";
 }
-function Ft(e) {
+function Xt(e) {
   return e.kty !== "oct" && typeof e.d == "string";
 }
-function Bt(e) {
+function Zt(e) {
   return e.kty !== "oct" && typeof e.d > "u";
 }
-function qt(e) {
+function er(e) {
   return j(e) && e.kty === "oct" && typeof e.k == "string";
 }
-function zt(e) {
+function tr(e) {
   let t, r;
   switch (e.kty) {
     case "RSA": {
@@ -607,7 +633,7 @@ function zt(e) {
           }, r = e.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
           break;
         default:
-          throw new _('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new I('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
@@ -629,7 +655,7 @@ function zt(e) {
           t = { name: "ECDH", namedCurve: e.crv }, r = e.d ? ["deriveBits"] : [];
           break;
         default:
-          throw new _('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new I('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
@@ -645,71 +671,71 @@ function zt(e) {
           t = { name: e.crv }, r = e.d ? ["deriveBits"] : [];
           break;
         default:
-          throw new _('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+          throw new I('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
       }
       break;
     }
     default:
-      throw new _('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
+      throw new I('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
   }
   return { algorithm: t, keyUsages: r };
 }
 const Xe = async (e) => {
   if (!e.alg)
     throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
-  const { algorithm: t, keyUsages: r } = zt(e), n = [
+  const { algorithm: t, keyUsages: r } = tr(e), n = [
     t,
     e.ext ?? !1,
     e.key_ops ?? r
   ], a = { ...e };
-  return delete a.alg, delete a.use, he.subtle.importKey("jwk", a, ...n);
-}, Ze = (e) => P(e);
-let $, H;
-const et = (e) => e?.[Symbol.toStringTag] === "KeyObject", ue = async (e, t, r, n, a = !1) => {
+  return delete a.alg, delete a.use, le.subtle.importKey("jwk", a, ...n);
+}, Ze = (e) => C(e);
+let L, W;
+const et = (e) => e?.[Symbol.toStringTag] === "KeyObject", ie = async (e, t, r, n, a = !1) => {
   let s = e.get(t);
   if (s != null && s[n])
     return s[n];
   const o = await Xe({ ...r, alg: n });
   return a && Object.freeze(t), s ? s[n] = o : e.set(t, { [n]: o }), o;
-}, Qt = (e, t) => {
+}, rr = (e, t) => {
   if (et(e)) {
     let r = e.export({ format: "jwk" });
-    return delete r.d, delete r.dp, delete r.dq, delete r.p, delete r.q, delete r.qi, r.k ? Ze(r.k) : (H || (H = /* @__PURE__ */ new WeakMap()), ue(H, e, r, t));
+    return delete r.d, delete r.dp, delete r.dq, delete r.p, delete r.q, delete r.qi, r.k ? Ze(r.k) : (W || (W = /* @__PURE__ */ new WeakMap()), ie(W, e, r, t));
   }
-  return j(e) ? e.k ? P(e.k) : (H || (H = /* @__PURE__ */ new WeakMap()), ue(H, e, e, t, !0)) : e;
-}, Xt = (e, t) => {
+  return j(e) ? e.k ? C(e.k) : (W || (W = /* @__PURE__ */ new WeakMap()), ie(W, e, e, t, !0)) : e;
+}, nr = (e, t) => {
   if (et(e)) {
     let r = e.export({ format: "jwk" });
-    return r.k ? Ze(r.k) : ($ || ($ = /* @__PURE__ */ new WeakMap()), ue($, e, r, t));
+    return r.k ? Ze(r.k) : (L || (L = /* @__PURE__ */ new WeakMap()), ie(L, e, r, t));
   }
-  return j(e) ? e.k ? P(e.k) : ($ || ($ = /* @__PURE__ */ new WeakMap()), ue($, e, e, t, !0)) : e;
-}, Zt = { normalizePublicKey: Qt, normalizePrivateKey: Xt }, O = (e, t, r = 0) => {
+  return j(e) ? e.k ? C(e.k) : (L || (L = /* @__PURE__ */ new WeakMap()), ie(L, e, e, t, !0)) : e;
+}, ar = { normalizePublicKey: rr, normalizePrivateKey: nr }, P = (e, t, r = 0) => {
   r === 0 && (t.unshift(t.length), t.unshift(6));
   const n = e.indexOf(t[0], r);
   if (n === -1)
     return !1;
   const a = e.subarray(n, n + t.length);
-  return a.length !== t.length ? !1 : a.every((s, o) => s === t[o]) || O(e, t, n + 1);
-}, Ne = (e) => {
+  return a.length !== t.length ? !1 : a.every((s, o) => s === t[o]) || P(e, t, n + 1);
+}, Pe = (e) => {
   switch (!0) {
-    case O(e, [42, 134, 72, 206, 61, 3, 1, 7]):
+    case P(e, [42, 134, 72, 206, 61, 3, 1, 7]):
       return "P-256";
-    case O(e, [43, 129, 4, 0, 34]):
+    case P(e, [43, 129, 4, 0, 34]):
       return "P-384";
-    case O(e, [43, 129, 4, 0, 35]):
+    case P(e, [43, 129, 4, 0, 35]):
       return "P-521";
-    case O(e, [43, 101, 110]):
+    case P(e, [43, 101, 110]):
       return "X25519";
-    case O(e, [43, 101, 111]):
+    case P(e, [43, 101, 111]):
       return "X448";
-    case O(e, [43, 101, 112]):
+    case P(e, [43, 101, 112]):
       return "Ed25519";
-    case O(e, [43, 101, 113]):
+    case P(e, [43, 101, 113]):
       return "Ed448";
     default:
-      throw new _("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
+      throw new I("Invalid or unsupported EC Key Curve or OKP Key Sub Type");
   }
-}, er = async (e, t, r, n, a) => {
+}, or = async (e, t, r, n, a) => {
   let s, o;
   const i = new Uint8Array(atob(r.replace(e, "")).split("").map((c) => c.charCodeAt(0)));
   switch (n) {
@@ -745,42 +771,42 @@ const et = (e) => e?.[Symbol.toStringTag] === "KeyObject", ue = async (e, t, r,
     case "ECDH-ES+A128KW":
     case "ECDH-ES+A192KW":
     case "ECDH-ES+A256KW": {
-      const c = Ne(i);
+      const c = Pe(i);
       s = c.startsWith("P-") ? { name: "ECDH", namedCurve: c } : { name: c }, o = [];
       break;
     }
     case "EdDSA":
-      s = { name: Ne(i) }, o = ["verify"];
+      s = { name: Pe(i) }, o = ["verify"];
       break;
     default:
-      throw new _('Invalid or unsupported "alg" (Algorithm) value');
+      throw new I('Invalid or unsupported "alg" (Algorithm) value');
   }
-  return he.subtle.importKey(t, i, s, !1, o);
-}, tr = (e, t, r) => er(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
-async function rr(e, t, r) {
+  return le.subtle.importKey(t, i, s, !1, o);
+}, sr = (e, t, r) => or(/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g, "spki", e, t);
+async function ir(e, t, r) {
   if (e.indexOf("-----BEGIN PUBLIC KEY-----") !== 0)
     throw new TypeError('"spki" must be SPKI formatted string');
-  return tr(e, t);
+  return sr(e, t);
 }
-async function nr(e, t) {
-  if (!M(e))
+async function cr(e, t) {
+  if (!G(e))
     throw new TypeError("JWK must be an object");
   switch (t || (t = e.alg), e.kty) {
     case "oct":
       if (typeof e.k != "string" || !e.k)
         throw new TypeError('missing "k" (Key Value) Parameter value');
-      return P(e.k);
+      return C(e.k);
     case "RSA":
       if (e.oth !== void 0)
-        throw new _('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
+        throw new I('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
     case "EC":
     case "OKP":
       return Xe({ ...e, alg: t });
     default:
-      throw new _('Unsupported "kty" (Key Type) Parameter value');
+      throw new I('Unsupported "kty" (Key Type) Parameter value');
   }
 }
-const x = (e) => e?.[Symbol.toStringTag], Te = (e, t, r) => {
+const x = (e) => e?.[Symbol.toStringTag], Ae = (e, t, r) => {
   var n, a;
   if (t.use !== void 0 && t.use !== "sig")
     throw new TypeError("Invalid key for this operation, when present its use must be sig");
@@ -789,32 +815,32 @@ const x = (e) => e?.[Symbol.toStringTag], Te = (e, t, r) => {
   if (t.alg !== void 0 && t.alg !== e)
     throw new TypeError(`Invalid key for this operation, when present its alg must be ${e}`);
   return !0;
-}, ar = (e, t, r, n) => {
+}, ur = (e, t, r, n) => {
   if (!(t instanceof Uint8Array)) {
     if (n && j(t)) {
-      if (qt(t) && Te(e, t, r))
+      if (er(t) && Ae(e, t, r))
         return;
       throw new TypeError('JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present');
     }
     if (!Qe(t))
-      throw new TypeError(ze(e, t, ...ce, "Uint8Array", n ? "JSON Web Key" : null));
+      throw new TypeError(ze(e, t, ...se, "Uint8Array", n ? "JSON Web Key" : null));
     if (t.type !== "secret")
       throw new TypeError(`${x(t)} instances for symmetric algorithms must be of type "secret"`);
   }
-}, or = (e, t, r, n) => {
+}, lr = (e, t, r, n) => {
   if (n && j(t))
     switch (r) {
       case "sign":
-        if (Ft(t) && Te(e, t, r))
+        if (Xt(t) && Ae(e, t, r))
           return;
         throw new TypeError("JSON Web Key for this operation be a private JWK");
       case "verify":
-        if (Bt(t) && Te(e, t, r))
+        if (Zt(t) && Ae(e, t, r))
           return;
         throw new TypeError("JSON Web Key for this operation be a public JWK");
     }
   if (!Qe(t))
-    throw new TypeError(ze(e, t, ...ce, n ? "JSON Web Key" : null));
+    throw new TypeError(ze(e, t, ...se, n ? "JSON Web Key" : null));
   if (t.type === "secret")
     throw new TypeError(`${x(t)} instances for asymmetric algorithms must not be of type "secret"`);
   if (r === "sign" && t.type === "public")
@@ -827,11 +853,11 @@ const x = (e) => e?.[Symbol.toStringTag], Te = (e, t, r) => {
     throw new TypeError(`${x(t)} instances for asymmetric algorithm encryption must be of type "public"`);
 };
 function tt(e, t, r, n) {
-  t.startsWith("HS") || t === "dir" || t.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(t) ? ar(t, r, n, e) : or(t, r, n, e);
+  t.startsWith("HS") || t === "dir" || t.startsWith("PBES2") || /^A\d{3}(?:GCM)?KW$/.test(t) ? ur(t, r, n, e) : lr(t, r, n, e);
 }
 tt.bind(void 0, !1);
-const De = tt.bind(void 0, !0);
-function sr(e, t, r, n, a) {
+const Ce = tt.bind(void 0, !0);
+function dr(e, t, r, n, a) {
   if (a.crit !== void 0 && n?.crit === void 0)
     throw new e('"crit" (Critical) Header Parameter MUST be integrity protected');
   if (!n || n.crit === void 0)
@@ -842,7 +868,7 @@ function sr(e, t, r, n, a) {
   r !== void 0 ? s = new Map([...Object.entries(r), ...t.entries()]) : s = t;
   for (const o of n.crit) {
     if (!s.has(o))
-      throw new _(`Extension Header Parameter "${o}" is not recognized`);
+      throw new I(`Extension Header Parameter "${o}" is not recognized`);
     if (a[o] === void 0)
       throw new e(`Extension Header Parameter "${o}" is missing`);
     if (s.get(o) && n[o] === void 0)
@@ -850,13 +876,13 @@ function sr(e, t, r, n, a) {
   }
   return new Set(n.crit);
 }
-const ir = (e, t) => {
+const hr = (e, t) => {
   if (t !== void 0 && (!Array.isArray(t) || t.some((r) => typeof r != "string")))
     throw new TypeError(`"${e}" option must be an array of strings`);
   if (t)
     return new Set(t);
 };
-function cr(e, t) {
+function pr(e, t) {
   const r = `SHA-${e.slice(-3)}`;
   switch (e) {
     case "HS256":
@@ -878,103 +904,103 @@ function cr(e, t) {
     case "EdDSA":
       return { name: t.name };
     default:
-      throw new _(`alg ${e} is not supported either by JOSE or your javascript runtime`);
+      throw new I(`alg ${e} is not supported either by JOSE or your javascript runtime`);
   }
 }
-async function ur(e, t, r) {
-  if (t = await Zt.normalizePublicKey(t, e), Be(t))
-    return Gt(t, e, r), t;
+async function yr(e, t, r) {
+  if (t = await ar.normalizePublicKey(t, e), je(t))
+    return Bt(t, e, r), t;
   if (t instanceof Uint8Array) {
     if (!e.startsWith("HS"))
-      throw new TypeError(Ce(t, ...ce));
-    return he.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [r]);
+      throw new TypeError(ve(t, ...se));
+    return le.subtle.importKey("raw", t, { hash: `SHA-${e.slice(-3)}`, name: "HMAC" }, !1, [r]);
   }
-  throw new TypeError(Ce(t, ...ce, "Uint8Array", "JSON Web Key"));
+  throw new TypeError(ve(t, ...se, "Uint8Array", "JSON Web Key"));
 }
-const lr = async (e, t, r, n) => {
-  const a = await ur(e, t, "verify");
-  jt(e, a);
-  const s = cr(e, a.algorithm);
+const fr = async (e, t, r, n) => {
+  const a = await yr(e, t, "verify");
+  Qt(e, a);
+  const s = pr(e, a.algorithm);
   try {
-    return await he.subtle.verify(s, a, r, n);
+    return await le.subtle.verify(s, a, r, n);
   } catch {
     return !1;
   }
 };
-async function dr(e, t, r) {
-  if (!M(e))
-    throw new w("Flattened JWS must be an object");
+async function Er(e, t, r) {
+  if (!G(e))
+    throw new E("Flattened JWS must be an object");
   if (e.protected === void 0 && e.header === void 0)
-    throw new w('Flattened JWS must have either of the "protected" or "header" members');
+    throw new E('Flattened JWS must have either of the "protected" or "header" members');
   if (e.protected !== void 0 && typeof e.protected != "string")
-    throw new w("JWS Protected Header incorrect type");
+    throw new E("JWS Protected Header incorrect type");
   if (e.payload === void 0)
-    throw new w("JWS Payload missing");
+    throw new E("JWS Payload missing");
   if (typeof e.signature != "string")
-    throw new w("JWS Signature missing or incorrect type");
-  if (e.header !== void 0 && !M(e.header))
-    throw new w("JWS Unprotected Header incorrect type");
+    throw new E("JWS Signature missing or incorrect type");
+  if (e.header !== void 0 && !G(e.header))
+    throw new E("JWS Unprotected Header incorrect type");
   let n = {};
   if (e.protected)
     try {
-      const T = P(e.protected);
-      n = JSON.parse(q.decode(T));
+      const R = C(e.protected);
+      n = JSON.parse(q.decode(R));
     } catch {
-      throw new w("JWS Protected Header is invalid");
+      throw new E("JWS Protected Header is invalid");
     }
-  if (!Mt(n, e.header))
-    throw new w("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
+  if (!qt(n, e.header))
+    throw new E("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
   const a = {
     ...n,
     ...e.header
-  }, s = sr(w, /* @__PURE__ */ new Map([["b64", !0]]), r?.crit, n, a);
+  }, s = dr(E, /* @__PURE__ */ new Map([["b64", !0]]), r?.crit, n, a);
   let o = !0;
   if (s.has("b64") && (o = n.b64, typeof o != "boolean"))
-    throw new w('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
+    throw new E('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
   const { alg: i } = a;
   if (typeof i != "string" || !i)
-    throw new w('JWS "alg" (Algorithm) Header Parameter missing or invalid');
-  const c = r && ir("algorithms", r.algorithms);
+    throw new E('JWS "alg" (Algorithm) Header Parameter missing or invalid');
+  const c = r && hr("algorithms", r.algorithms);
   if (c && !c.has(i))
-    throw new Wt('"alg" (Algorithm) Header Parameter value not allowed');
+    throw new Fe('"alg" (Algorithm) Header Parameter value not allowed');
   if (o) {
     if (typeof e.payload != "string")
-      throw new w("JWS Payload must be a string");
+      throw new E("JWS Payload must be a string");
   } else if (typeof e.payload != "string" && !(e.payload instanceof Uint8Array))
-    throw new w("JWS Payload must be a string or an Uint8Array instance");
+    throw new E("JWS Payload must be a string or an Uint8Array instance");
   let h = !1;
-  typeof t == "function" ? (t = await t(n, e), h = !0, De(i, t, "verify"), j(t) && (t = await nr(t, i))) : De(i, t, "verify");
-  const y = Ht(Z.encode(e.protected ?? ""), Z.encode("."), typeof e.payload == "string" ? Z.encode(e.payload) : e.payload);
+  typeof t == "function" ? (t = await t(n, e), h = !0, Ce(i, t, "verify"), j(t) && (t = await cr(t, i))) : Ce(i, t, "verify");
+  const y = Wt(Z.encode(e.protected ?? ""), Z.encode("."), typeof e.payload == "string" ? Z.encode(e.payload) : e.payload);
   let p;
   try {
-    p = P(e.signature);
+    p = C(e.signature);
   } catch {
-    throw new w("Failed to base64url decode the signature");
+    throw new E("Failed to base64url decode the signature");
   }
-  if (!await lr(i, t, p, y))
-    throw new Jt();
+  if (!await fr(i, t, p, y))
+    throw new Be();
   let l;
   if (o)
     try {
-      l = P(e.payload);
+      l = C(e.payload);
     } catch {
-      throw new w("Failed to base64url decode the payload");
+      throw new E("Failed to base64url decode the payload");
     }
   else typeof e.payload == "string" ? l = Z.encode(e.payload) : l = e.payload;
-  const A = { payload: l };
-  return e.protected !== void 0 && (A.protectedHeader = n), e.header !== void 0 && (A.unprotectedHeader = e.header), h ? { ...A, key: t } : A;
+  const T = { payload: l };
+  return e.protected !== void 0 && (T.protectedHeader = n), e.header !== void 0 && (T.unprotectedHeader = e.header), h ? { ...T, key: t } : T;
 }
-async function hr(e, t, r) {
+async function gr(e, t, r) {
   if (e instanceof Uint8Array && (e = q.decode(e)), typeof e != "string")
-    throw new w("Compact JWS must be a string or Uint8Array");
+    throw new E("Compact JWS must be a string or Uint8Array");
   const { 0: n, 1: a, 2: s, length: o } = e.split(".");
   if (o !== 3)
-    throw new w("Invalid Compact JWS");
-  const i = await dr({ payload: a, protected: n, signature: s }, t, r), c = { payload: i.payload, protectedHeader: i.protectedHeader };
+    throw new E("Invalid Compact JWS");
+  const i = await Er({ payload: a, protected: n, signature: s }, t, r), c = { payload: i.payload, protectedHeader: i.protectedHeader };
   return typeof t == "function" ? { ...c, key: i.key } : c;
 }
-const pr = (e) => Math.floor(e.getTime() / 1e3), rt = 60, nt = rt * 60, be = nt * 24, yr = be * 7, fr = be * 365.25, gr = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, Ke = (e) => {
-  const t = gr.exec(e);
+const mr = (e) => Math.floor(e.getTime() / 1e3), rt = 60, nt = rt * 60, Re = nt * 24, wr = Re * 7, Sr = Re * 365.25, Ar = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, Ne = (e) => {
+  const t = Ar.exec(e);
   if (!t || t[4] && t[1])
     throw new TypeError("Invalid time period format");
   const r = parseFloat(t[2]), n = t[3].toLowerCase();
@@ -1004,44 +1030,44 @@ const pr = (e) => Math.floor(e.getTime() / 1e3), rt = 60, nt = rt * 60, be = nt
     case "day":
     case "days":
     case "d":
-      a = Math.round(r * be);
+      a = Math.round(r * Re);
       break;
     case "week":
     case "weeks":
     case "w":
-      a = Math.round(r * yr);
+      a = Math.round(r * wr);
       break;
     default:
-      a = Math.round(r * fr);
+      a = Math.round(r * Sr);
       break;
   }
   return t[1] === "-" || t[4] === "ago" ? -a : a;
-}, Ue = (e) => e.toLowerCase().replace(/^application\//, ""), Er = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, mr = (e, t, r = {}) => {
+}, Ke = (e) => e.toLowerCase().replace(/^application\//, ""), Tr = (e, t) => typeof e == "string" ? t.includes(e) : Array.isArray(e) ? t.some(Set.prototype.has.bind(new Set(e))) : !1, Rr = (e, t, r = {}) => {
   let n;
   try {
     n = JSON.parse(q.decode(t));
   } catch {
   }
-  if (!M(n))
-    throw new v("JWT Claims Set must be a top-level JSON object");
+  if (!G(n))
+    throw new b("JWT Claims Set must be a top-level JSON object");
   const { typ: a } = r;
-  if (a && (typeof e.typ != "string" || Ue(e.typ) !== Ue(a)))
-    throw new R('unexpected "typ" JWT header value', n, "typ", "check_failed");
+  if (a && (typeof e.typ != "string" || Ke(e.typ) !== Ke(a)))
+    throw new _('unexpected "typ" JWT header value', n, "typ", "check_failed");
   const { requiredClaims: s = [], issuer: o, subject: i, audience: c, maxTokenAge: h } = r, y = [...s];
   h !== void 0 && y.push("iat"), c !== void 0 && y.push("aud"), i !== void 0 && y.push("sub"), o !== void 0 && y.push("iss");
-  for (const T of new Set(y.reverse()))
-    if (!(T in n))
-      throw new R(`missing required "${T}" claim`, n, T, "missing");
+  for (const R of new Set(y.reverse()))
+    if (!(R in n))
+      throw new _(`missing required "${R}" claim`, n, R, "missing");
   if (o && !(Array.isArray(o) ? o : [o]).includes(n.iss))
-    throw new R('unexpected "iss" claim value', n, "iss", "check_failed");
+    throw new _('unexpected "iss" claim value', n, "iss", "check_failed");
   if (i && n.sub !== i)
-    throw new R('unexpected "sub" claim value', n, "sub", "check_failed");
-  if (c && !Er(n.aud, typeof c == "string" ? [c] : c))
-    throw new R('unexpected "aud" claim value', n, "aud", "check_failed");
+    throw new _('unexpected "sub" claim value', n, "sub", "check_failed");
+  if (c && !Tr(n.aud, typeof c == "string" ? [c] : c))
+    throw new _('unexpected "aud" claim value', n, "aud", "check_failed");
   let p;
   switch (typeof r.clockTolerance) {
     case "string":
-      p = Ke(r.clockTolerance);
+      p = Ne(r.clockTolerance);
       break;
     case "number":
       p = r.clockTolerance;
@@ -1052,123 +1078,123 @@ const pr = (e) => Math.floor(e.getTime() / 1e3), rt = 60, nt = rt * 60, be = nt
     default:
       throw new TypeError("Invalid clockTolerance option type");
   }
-  const { currentDate: l } = r, A = pr(l || /* @__PURE__ */ new Date());
+  const { currentDate: l } = r, T = mr(l || /* @__PURE__ */ new Date());
   if ((n.iat !== void 0 || h) && typeof n.iat != "number")
-    throw new R('"iat" claim must be a number', n, "iat", "invalid");
+    throw new _('"iat" claim must be a number', n, "iat", "invalid");
   if (n.nbf !== void 0) {
     if (typeof n.nbf != "number")
-      throw new R('"nbf" claim must be a number', n, "nbf", "invalid");
-    if (n.nbf > A + p)
-      throw new R('"nbf" claim timestamp check failed', n, "nbf", "check_failed");
+      throw new _('"nbf" claim must be a number', n, "nbf", "invalid");
+    if (n.nbf > T + p)
+      throw new _('"nbf" claim timestamp check failed', n, "nbf", "check_failed");
   }
   if (n.exp !== void 0) {
     if (typeof n.exp != "number")
-      throw new R('"exp" claim must be a number', n, "exp", "invalid");
-    if (n.exp <= A - p)
-      throw new Pe('"exp" claim timestamp check failed', n, "exp", "check_failed");
+      throw new _('"exp" claim must be a number', n, "exp", "invalid");
+    if (n.exp <= T - p)
+      throw new Se('"exp" claim timestamp check failed', n, "exp", "check_failed");
   }
   if (h) {
-    const T = A - n.iat, ye = typeof h == "number" ? h : Ke(h);
-    if (T - p > ye)
-      throw new Pe('"iat" claim timestamp check failed (too far in the past)', n, "iat", "check_failed");
-    if (T < 0 - p)
-      throw new R('"iat" claim timestamp check failed (it should be in the past)', n, "iat", "check_failed");
+    const R = T - n.iat, he = typeof h == "number" ? h : Ne(h);
+    if (R - p > he)
+      throw new Se('"iat" claim timestamp check failed (too far in the past)', n, "iat", "check_failed");
+    if (R < 0 - p)
+      throw new _('"iat" claim timestamp check failed (it should be in the past)', n, "iat", "check_failed");
   }
   return n;
 };
-async function wr(e, t, r) {
+async function _r(e, t, r) {
   var n;
-  const a = await hr(e, t, r);
+  const a = await gr(e, t, r);
   if ((n = a.protectedHeader.crit) != null && n.includes("b64") && a.protectedHeader.b64 === !1)
-    throw new v("JWTs MUST NOT use unencoded payload");
-  const s = { payload: mr(a.protectedHeader, a.payload, r), protectedHeader: a.protectedHeader };
+    throw new b("JWTs MUST NOT use unencoded payload");
+  const s = { payload: Rr(a.protectedHeader, a.payload, r), protectedHeader: a.protectedHeader };
   return typeof t == "function" ? { ...s, key: a.key } : s;
 }
-const Sr = P;
-function Ar(e) {
+const Ir = C;
+function br(e) {
   if (typeof e != "string")
-    throw new v("JWTs must use Compact JWS serialization, JWT must be a string");
+    throw new b("JWTs must use Compact JWS serialization, JWT must be a string");
   const { 1: t, length: r } = e.split(".");
   if (r === 5)
-    throw new v("Only JWTs using Compact JWS serialization can be decoded");
+    throw new b("Only JWTs using Compact JWS serialization can be decoded");
   if (r !== 3)
-    throw new v("Invalid JWT");
+    throw new b("Invalid JWT");
   if (!t)
-    throw new v("JWTs must contain a payload");
+    throw new b("JWTs must contain a payload");
   let n;
   try {
-    n = Sr(t);
+    n = Ir(t);
   } catch {
-    throw new v("Failed to base64url decode the payload");
+    throw new b("Failed to base64url decode the payload");
   }
   let a;
   try {
     a = JSON.parse(q.decode(n));
   } catch {
-    throw new v("Failed to parse the decoded payload as JSON");
+    throw new b("Failed to parse the decoded payload as JSON");
   }
-  if (!M(a))
-    throw new v("Invalid JWT Claims Set");
+  if (!G(a))
+    throw new b("Invalid JWT Claims Set");
   return a;
 }
 const V = async (e) => {
   try {
-    const t = f.ALG, r = await rr($t, t);
-    return await wr(e, r, {
+    const t = f.ALG, r = await ir(Lt, t);
+    return await _r(e, r, {
       issuer: f.ISSUER
     });
   } catch {
     return;
   }
-}, Tr = (e) => {
+}, kr = (e) => {
   try {
-    return Ar(e);
+    return br(e);
   } catch {
     return;
   }
-};
-var E = [];
-for (var me = 0; me < 256; ++me)
-  E.push((me + 256).toString(16).slice(1));
-function Rr(e, t = 0) {
-  return (E[e[t + 0]] + E[e[t + 1]] + E[e[t + 2]] + E[e[t + 3]] + "-" + E[e[t + 4]] + E[e[t + 5]] + "-" + E[e[t + 6]] + E[e[t + 7]] + "-" + E[e[t + 8]] + E[e[t + 9]] + "-" + E[e[t + 10]] + E[e[t + 11]] + E[e[t + 12]] + E[e[t + 13]] + E[e[t + 14]] + E[e[t + 15]]).toLowerCase();
-}
-var te, br = new Uint8Array(16);
-function _r() {
-  if (!te && (te = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !te))
-    throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return te(br);
-}
-var Ir = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
-const $e = {
-  randomUUID: Ir
-};
-function He(e, t, r) {
-  if ($e.randomUUID && !t && !e)
-    return $e.randomUUID();
+}, m = [];
+for (let e = 0; e < 256; ++e)
+  m.push((e + 256).toString(16).slice(1));
+function Or(e, t = 0) {
+  return (m[e[t + 0]] + m[e[t + 1]] + m[e[t + 2]] + m[e[t + 3]] + "-" + m[e[t + 4]] + m[e[t + 5]] + "-" + m[e[t + 6]] + m[e[t + 7]] + "-" + m[e[t + 8]] + m[e[t + 9]] + "-" + m[e[t + 10]] + m[e[t + 11]] + m[e[t + 12]] + m[e[t + 13]] + m[e[t + 14]] + m[e[t + 15]]).toLowerCase();
+}
+let Ee;
+const vr = new Uint8Array(16);
+function Pr() {
+  if (!Ee) {
+    if (typeof crypto > "u" || !crypto.getRandomValues)
+      throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
+    Ee = crypto.getRandomValues.bind(crypto);
+  }
+  return Ee(vr);
+}
+const Cr = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto), De = { randomUUID: Cr };
+function Ue(e, t, r) {
+  if (De.randomUUID && !t && !e)
+    return De.randomUUID();
   e = e || {};
-  var n = e.random || (e.rng || _r)();
-  return n[6] = n[6] & 15 | 64, n[8] = n[8] & 63 | 128, Rr(n);
+  const n = e.random || (e.rng || Pr)();
+  return n[6] = n[6] & 15 | 64, n[8] = n[8] & 63 | 128, Or(n);
 }
-const Le = globalThis.crypto, kr = (e) => `${He()}${He()}`.slice(0, e), vr = (e) => btoa(
+const Le = globalThis.crypto, Nr = (e) => `${Ue()}${Ue()}`.slice(0, e), Kr = (e) => btoa(
   [...new Uint8Array(e)].map((t) => String.fromCharCode(t)).join("")
 );
-async function Or(e) {
+async function Dr(e) {
   if (!Le.subtle)
     throw new Error(
       "crypto.subtle is available only in secure contexts (HTTPS)."
     );
   const t = new TextEncoder().encode(e), r = await Le.subtle.digest("SHA-256", t);
-  return vr(r).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  return Kr(r).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-async function Pr(e) {
-  const r = kr(43), n = await Or(r);
+async function Ur(e) {
+  const r = Nr(43), n = await Dr(r);
   return {
     code_verifier: r,
     code_challenge: n
   };
 }
-const en = async (e, t) => {
+const sn = async (e, t) => {
   var r;
   const n = await V(e);
   if (!n || !Array.isArray((r = n.payload) == null ? void 0 : r[f.SCOPES_KEY]))
@@ -1186,18 +1212,18 @@ const We = (e, t) => {
     typeof t == "function" ? t() : t
   );
   window.localStorage.setItem(e, r), at(e, r);
-}, Cr = (e) => {
+}, Lr = (e) => {
   window.localStorage.removeItem(e), at(e, null);
-}, Je = (e) => window.localStorage.getItem(e), Nr = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
-function re({
+}, He = (e) => window.localStorage.getItem(e), Wr = (e) => (window.addEventListener("storage", e), () => window.removeEventListener("storage", e));
+function te({
   key: e,
   initialValue: t
 }) {
-  const r = bt(Nr, () => Je(e)), n = D(
+  const r = _t(Wr, () => He(e)), n = D(
     (o) => {
       try {
         const i = typeof o == "function" ? o(JSON.parse(r)) : o;
-        i == null ? Cr(e) : We(e, i);
+        i == null ? Lr(e) : We(e, i);
       } catch (i) {
         console.warn(i);
       }
@@ -1208,41 +1234,42 @@ function re({
   }, [t, n]), s = D(() => {
     n(null);
   }, [n]);
-  return xe(() => {
+  return Je(() => {
     try {
-      Je(e) === null && typeof t < "u" && We(e, t);
+      He(e) === null && typeof t < "u" && We(e, t);
     } catch (o) {
       console.warn(o);
     }
   }, [e, t]), [r ? JSON.parse(r) : null, n, a, s];
 }
-var m = [];
-for (var we = 0; we < 256; ++we)
-  m.push((we + 256).toString(16).slice(1));
-function Dr(e, t = 0) {
-  return (m[e[t + 0]] + m[e[t + 1]] + m[e[t + 2]] + m[e[t + 3]] + "-" + m[e[t + 4]] + m[e[t + 5]] + "-" + m[e[t + 6]] + m[e[t + 7]] + "-" + m[e[t + 8]] + m[e[t + 9]] + "-" + m[e[t + 10]] + m[e[t + 11]] + m[e[t + 12]] + m[e[t + 13]] + m[e[t + 14]] + m[e[t + 15]]).toLowerCase();
+const w = [];
+for (let e = 0; e < 256; ++e)
+  w.push((e + 256).toString(16).slice(1));
+function Hr(e, t = 0) {
+  return (w[e[t + 0]] + w[e[t + 1]] + w[e[t + 2]] + w[e[t + 3]] + "-" + w[e[t + 4]] + w[e[t + 5]] + "-" + w[e[t + 6]] + w[e[t + 7]] + "-" + w[e[t + 8]] + w[e[t + 9]] + "-" + w[e[t + 10]] + w[e[t + 11]] + w[e[t + 12]] + w[e[t + 13]] + w[e[t + 14]] + w[e[t + 15]]).toLowerCase();
 }
-var ne, Kr = new Uint8Array(16);
-function Ur() {
-  if (!ne && (ne = typeof crypto < "u" && crypto.getRandomValues && crypto.getRandomValues.bind(crypto), !ne))
-    throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
-  return ne(Kr);
+let ge;
+const $r = new Uint8Array(16);
+function Jr() {
+  if (!ge) {
+    if (typeof crypto > "u" || !crypto.getRandomValues)
+      throw new Error("crypto.getRandomValues() not supported. See https://github.com/uuidjs/uuid#getrandomvalues-not-supported");
+    ge = crypto.getRandomValues.bind(crypto);
+  }
+  return ge($r);
 }
-var $r = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto);
-const Ye = {
-  randomUUID: $r
-};
-function Se(e, t, r) {
-  if (Ye.randomUUID && !t && !e)
-    return Ye.randomUUID();
+const Yr = typeof crypto < "u" && crypto.randomUUID && crypto.randomUUID.bind(crypto), $e = { randomUUID: Yr };
+function me(e, t, r) {
+  if ($e.randomUUID && !t && !e)
+    return $e.randomUUID();
   e = e || {};
-  var n = e.random || (e.rng || Ur)();
-  return n[6] = n[6] & 15 | 64, n[8] = n[8] & 63 | 128, Dr(n);
+  const n = e.random || (e.rng || Jr)();
+  return n[6] = n[6] & 15 | 64, n[8] = n[8] & 63 | 128, Hr(n);
 }
-const L = "Your session has expired. For your security, please log in again to continue.", Hr = "Your session has been successfully terminated.", Ae = "Login failed. Please try again.", Lr = "Error getting access token, please re-authenticate.", Wr = "You forgot to wrap your component in <AuthProvider>.", le = {
+const H = "Your session has expired. For your security, please log in again to continue.", xr = "Your session has been successfully terminated.", we = "Login failed. Please try again.", Mr = "Error getting access token, please re-authenticate.", Gr = "You forgot to wrap your component in <AuthProvider>.", ce = {
   dev: "https://auth.gizmette.local.com:3003",
   prod: "https://mylogin.gizmette.com/auth"
-}, ae = "@@auth@@", B = "LOADING", se = "LOGIN", ot = "LOGOUT", z = "success", I = "failure", st = "include", it = "POST", ct = "application/json", oe = {
+}, re = "@@auth@@", B = "LOADING", ae = "LOGIN", ot = "LOGOUT", z = "success", O = "failure", st = "include", it = "POST", ct = "application/json", ne = {
   GET_REGISTRATION_OPTIONS: `mutation GetPasskeyRegistrationOptions(
 	$clientId: String!,
 	$username: String!,
@@ -1323,21 +1350,21 @@ const L = "Your session has expired. For your security, please log in again to c
 				email
 		}
 	}`
-}, W = {
+}, $ = {
   GET_REGISTRATION_OPTIONS: {
-    schema: oe.GET_REGISTRATION_OPTIONS,
+    schema: ne.GET_REGISTRATION_OPTIONS,
     method: "getPasskeyRegistrationOptions"
   },
   VERIFY_REGISTRATION: {
-    schema: oe.VERIFY_REGISTRATION,
+    schema: ne.VERIFY_REGISTRATION,
     method: "verifyPasskeyRegistration"
   },
   GET_AUTHENTICATION_OPTIONS: {
-    schema: oe.GET_AUTHENTICATION_OPTIONS,
+    schema: ne.GET_AUTHENTICATION_OPTIONS,
     method: "getPasskeyAuthenticationOptions"
   },
   VERIFY_AUTHENTICATION: {
-    schema: oe.VERIFY_AUTHENTICATION,
+    schema: ne.VERIFY_AUTHENTICATION,
     method: "verifyPasskeyAuthentication"
   }
 }, J = async ({
@@ -1348,14 +1375,14 @@ const L = "Your session has expired. For your security, please log in again to c
 }) => {
   try {
     const a = `Bearer ${e}`, s = await fetch(
-      ut ? `${le.dev}/graphql` : `${le.prod}/graphql`,
+      ut ? `${ce.dev}/graphql` : `${ce.prod}/graphql`,
       {
         credentials: st,
         method: it,
         headers: {
           authorization: a,
           "Content-Type": ct,
-          [Fe.CLIENT_ID]: `${r}`
+          [Ve.CLIENT_ID]: `${r}`
         },
         body: JSON.stringify({
           query: t.schema,
@@ -1364,58 +1391,58 @@ const L = "Your session has expired. For your security, please log in again to c
       }
     );
     if (s.status !== 200)
-      return { status: I, data: [] };
+      return { status: O, data: [] };
     const { data: o } = await s.json();
     return {
       status: z,
       data: o[t.method]
     };
   } catch (a) {
-    return console.error(a), { status: I, data: [] };
+    return console.error(a), { status: O, data: [] };
   }
-}, pe = async ({
+}, de = async ({
   type: e,
   clientId: t,
   params: r = {}
 }) => {
   try {
     const n = await fetch(
-      ut ? `${le.dev}/${e}` : `${le.prod}/${e}`,
+      ut ? `${ce.dev}/${e}` : `${ce.prod}/${e}`,
       {
         credentials: st,
         method: it,
         headers: {
           "Content-Type": ct,
-          [Fe.CLIENT_ID]: `${t}`
+          [Ve.CLIENT_ID]: `${t}`
         },
         body: JSON.stringify(r)
       }
     );
     if (n.status !== 200)
-      return { status: I, data: [] };
+      return { status: O, data: [] };
     const { data: a } = await n.json();
     return {
       status: z,
       data: a || []
     };
   } catch (n) {
-    return console.error(n), { status: I, data: [] };
+    return console.error(n), { status: O, data: [] };
   }
-}, Jr = process.env.NODE_ENV === "production", ut = !Jr, lt = {
+}, Vr = process.env.NODE_ENV === "production", ut = !Vr, lt = {
   isLoading: !0,
   isAuthenticated: !1,
   user: void 0,
   logoutReason: "",
   debug: !1,
   authenticationType: ""
-}, Yr = (e) => {
+}, jr = (e) => {
   try {
-    const t = Tr(e);
+    const t = kr(e);
     return t ? t[f.USER_ID_KEY] : "";
   } catch {
     return "";
   }
-}, xr = async ({
+}, Fr = async ({
   userId: e,
   clientId: t,
   domain: r,
@@ -1423,22 +1450,22 @@ const L = "Your session has expired. For your security, please log in again to c
 }) => {
   try {
     return {
-      status: (await pe({
-        type: de.LOGOUT,
+      status: (await de({
+        type: ue.LOGOUT,
         clientId: t,
         params: {
           userId: e,
           domain: r,
           idToken: n
         }
-      }))?.status || I
+      }))?.status || O
     };
   } catch {
     return {
-      status: I
+      status: O
     };
   }
-}, Gr = async ({
+}, Br = async ({
   username: e,
   password: t,
   clientId: r,
@@ -1451,11 +1478,11 @@ const L = "Your session has expired. For your security, please log in again to c
   ua: h
 }) => {
   try {
-    const y = await pe({
-      type: de.LOGIN,
+    const y = await de({
+      type: ue.LOGIN,
       clientId: r,
       params: {
-        type: a || G.ID_AND_ACCESS_TOKEN,
+        type: a || M.ID_AND_ACCESS_TOKEN,
         username: e,
         password: t,
         sessionExpiration: s,
@@ -1481,17 +1508,17 @@ const L = "Your session has expired. For your security, please log in again to c
       status: !1
     };
   }
-}, Mr = async ({
+}, qr = async ({
   nonce: e,
   clientId: t,
   code_challenge: r
 }) => {
   try {
-    const n = await pe({
-      type: de.CODE,
+    const n = await de({
+      type: ue.CODE,
       clientId: t,
       params: {
-        type: G.CODE,
+        type: M.CODE,
         nonce: e,
         code_challenge: r
       }
@@ -1500,16 +1527,16 @@ const L = "Your session has expired. For your security, please log in again to c
       status: z,
       data: n.data.code
     } : {
-      status: I,
+      status: O,
       data: ""
     };
   } catch {
     return {
-      status: I,
+      status: O,
       data: ""
     };
   }
-}, Vr = async ({
+}, zr = async ({
   clientId: e,
   userId: t,
   nonce: r,
@@ -1518,11 +1545,11 @@ const L = "Your session has expired. For your security, please log in again to c
   domain: s
 }) => {
   try {
-    const o = await pe({
-      type: de.REFRESH,
+    const o = await de({
+      type: ue.REFRESH,
       clientId: e,
       params: {
-        type: G.REFRESH_TOKEN,
+        type: M.REFRESH_TOKEN,
         userId: t,
         nonce: r,
         refreshToken: n,
@@ -1544,7 +1571,7 @@ const L = "Your session has expired. For your security, please log in again to c
     };
   }
 };
-class jr {
+class Qr {
   constructor(t = null, r = null) {
     X(this, "refreshTokenPromise", null);
     X(this, "accessToken");
@@ -1577,7 +1604,7 @@ class jr {
   }) {
     const s = await V(this.refreshToken);
     if (s && s.payload[f.USER_ID_KEY] !== "") {
-      const o = await Vr({
+      const o = await zr({
         clientId: t,
         userId: r,
         nonce: n,
@@ -1590,22 +1617,22 @@ class jr {
         newAccessToken: o.accessToken,
         newRefreshToken: o.refreshToken
       }) : {
-        status: I
+        status: O
       };
     } else
       return {
-        status: I
+        status: O
       };
   }
 }
-const Fr = (e) => D(
+const Xr = (e) => D(
   (...t) => {
     e && console.info(`==> [Auth ${Date.now()}]: `, ...t);
   },
   [e]
 ), Y = () => {
-  throw new Error(Wr);
-}, dt = _t({
+  throw new Error(Gr);
+}, dt = It({
   isAuthenticated: !1,
   isLoading: !1,
   login: Y,
@@ -1616,14 +1643,14 @@ const Fr = (e) => D(
   loginWithPasskey: Y,
   logoutReason: "",
   authenticationType: ""
-}), Br = Rt.createContext({
+}), Zr = Rt.createContext({
   state: lt,
   dispatch: () => {
   }
-}), qr = (e, t) => t?.type === B ? {
+}), en = (e, t) => t?.type === B ? {
   ...e,
   isLoading: t.payload.isLoading
-} : t?.type === se ? {
+} : t?.type === ae ? {
   ...e,
   isLoading: !1,
   isAuthenticated: !0,
@@ -1637,32 +1664,32 @@ const Fr = (e) => D(
   user: void 0,
   authenticationType: "",
   logoutReason: t.payload.logoutReason
-} : e, tn = ({
+} : e, cn = ({
   children: e,
   sessionExpiration: t,
   clientId: r,
   domain: n = "",
   debug: a = !1
 }) => {
-  const [s, o] = It(qr, {
+  const [s, o] = bt(en, {
     ...lt,
     debug: a
-  }), i = Fr(a), c = kt(!1), [h, y, , p] = re({
-    key: `${ae}::${r}::@@user@@`
-  }), [l, A, , T] = re({
-    key: `${ae}::${r}::@@access@@`
-  }), [ye, fe, , _e] = re(
+  }), i = Xr(a), c = kt(!1), [h, y, , p] = te({
+    key: `${re}::${r}::@@user@@`
+  }), [l, T, , R] = te({
+    key: `${re}::${r}::@@access@@`
+  }), [he, pe, , _e] = te(
     {
-      key: `${ae}::${r}::@@refresh@@`
+      key: `${re}::${r}::@@refresh@@`
     }
-  ), [ht, Ie, , ke] = re({
-    key: `${ae}::${r}::@@nonce@@`
-  }), pt = new jr(l, ye), Q = D(() => {
-    i("removeLocalStorage: removing local storage"), p(), T(), _e(), ke();
+  ), [ht, Ie, , be] = te({
+    key: `${re}::${r}::@@nonce@@`
+  }), pt = new Qr(l, he), Q = D(() => {
+    i("removeLocalStorage: removing local storage"), p(), R(), _e(), be();
   }, [
-    T,
+    R,
     p,
-    ke,
+    be,
     _e,
     i
   ]), F = D(
@@ -1673,33 +1700,33 @@ const Fr = (e) => D(
       ), o({
         type: ot,
         payload: {
-          logoutReason: u || L
+          logoutReason: u || H
         }
       }), Q(), o({ type: B, payload: { isLoading: !1 } });
     },
     [Q, i]
-  ), C = D(
+  ), N = D(
     async (u) => {
       i("invalidateAndLogout: invalidating and logging out");
-      const { user: g } = s, d = g?.userId || Yr(h);
+      const { user: g } = s, d = g?.userId || jr(h);
       d || i(
         "invalidateAndLogout: user cannot be identified, logging out without userId"
-      ), await xr({
+      ), await Fr({
         userId: d,
         clientId: r,
         domain: n,
         idToken: h
-      }), F(u || L);
+      }), F(u || H);
     },
     [h, s, r, n, F, i]
   );
-  xe(() => {
+  Je(() => {
     if (!c.current)
       return s.isLoading && h !== null ? (async () => {
         try {
           const u = await V(h);
           u && u.payload[f.USER_ID_KEY] !== "" ? (i("useEffect: setting the authentication state"), o({
-            type: se,
+            type: ae,
             payload: {
               authenticationType: u.payload[f.AUTH_TYPE_KEY],
               user: {
@@ -1708,61 +1735,61 @@ const Fr = (e) => D(
                 email: u.payload[f.EMAIL_KEY]
               }
             }
-          })) : (i("useEffect: invalid JWT, invalidating and logging out"), await C(L));
+          })) : (i("useEffect: invalid JWT, invalidating and logging out"), await N(H));
         } catch {
           i(
             "useEffect: exception validating JWT, invalidating and logging out"
-          ), await C(L);
+          ), await N(H);
         }
       })() : (i("useEffect: setting the loading state to false"), o({ type: B, payload: { isLoading: !1 } })), () => {
         c.current = !0;
       };
-  }, [s.isLoading, h, C, i]);
+  }, [s.isLoading, h, N, i]);
   const yt = async (u, g) => {
     o({ type: B, payload: { isLoading: !0 } }), Q();
-    const d = Se();
+    const d = me();
     Ie(d), i("login: Logging in with password");
-    const { code_verifier: N, code_challenge: St } = await Pr(), ve = await Mr({
+    const { code_verifier: K, code_challenge: St } = await Ur(), ke = await qr({
       nonce: d,
       clientId: r,
       code_challenge: St
     });
-    if (ve.status) {
-      const U = await Gr({
+    if (ke.status) {
+      const U = await Br({
         username: u,
         password: g,
         clientId: r,
         sessionExpiration: t,
         nonce: d,
-        type: G.CODE,
-        code: ve.data,
-        code_verifier: N,
+        type: M.CODE,
+        code: ke.data,
+        code_verifier: K,
         domain: n,
         ua: navigator.userAgent
       });
-      return U.status ? (y(U.idToken), A(U.accessToken), fe(U.refreshToken), o({
-        type: se,
+      return U.status ? (y(U.idToken), T(U.accessToken), pe(U.refreshToken), o({
+        type: ae,
         payload: {
-          authenticationType: G.CODE,
+          authenticationType: M.CODE,
           user: {
             userId: U.userId,
             username: u,
             email: U.email
           }
         }
-      }), !0) : (F(Ae), !1);
+      }), !0) : (F(we), !1);
     }
     return !1;
   }, ft = async (u) => {
-    u?.preventDefault(), await C(Hr);
-  }, gt = async () => {
+    u?.preventDefault(), await N(xr);
+  }, Et = async () => {
     const { isAuthenticated: u, user: g } = s;
     try {
       if (u && g && g.userId) {
         if (l) {
           i("getAccessToken");
-          const N = await V(l);
-          if (N && N.payload[f.USER_ID_KEY] !== "")
+          const K = await V(l);
+          if (K && K.payload[f.USER_ID_KEY] !== "")
             return l;
         }
         i("getAccessToken: invalid access token, trying to refresh it");
@@ -1772,24 +1799,24 @@ const Fr = (e) => D(
           nonce: ht,
           domain: n
         });
-        return d.status && d.status === "success" && d.newAccessToken ? (A(d.newAccessToken), fe(d.newRefreshToken), d.newAccessToken) : (i(
+        return d.status && d.status === "success" && d.newAccessToken ? (T(d.newAccessToken), pe(d.newRefreshToken), d.newAccessToken) : (i(
           "getAccessToken: invalid refresh token, need to re-authenticate"
-        ), await C(L), "");
+        ), await N(H), "");
       }
       return i(
         "getAccessToken: user is not authenticated, cannot get access token"
-      ), await C(L), "";
+      ), await N(H), "";
     } catch {
       return i(
         "getAccessToken: exception occurred, invalidating and logging out"
-      ), await C(Lr), "";
+      ), await N(Mr), "";
     }
-  }, Et = () => s.isAuthenticated && h ? h : "", mt = async () => {
+  }, gt = () => s.isAuthenticated && h ? h : "", mt = async () => {
     const { user: u } = s;
     let g = await J({
       accessToken: l,
       clientId: r,
-      type: W.GET_REGISTRATION_OPTIONS,
+      type: $.GET_REGISTRATION_OPTIONS,
       params: {
         clientId: r,
         id: u?.userId,
@@ -1802,7 +1829,7 @@ const Fr = (e) => D(
         return g = await J({
           accessToken: l,
           clientId: r,
-          type: W.VERIFY_REGISTRATION,
+          type: $.VERIFY_REGISTRATION,
           params: {
             clientId: r,
             id: u?.userId,
@@ -1814,7 +1841,7 @@ const Fr = (e) => D(
         return await J({
           accessToken: l,
           clientId: r,
-          type: W.VERIFY_REGISTRATION,
+          type: $.VERIFY_REGISTRATION,
           params: {
             clientId: r,
             id: u?.userId,
@@ -1826,13 +1853,13 @@ const Fr = (e) => D(
     return !1;
   }, wt = async () => {
     o({ type: B, payload: { isLoading: !0 } }), Q();
-    const u = Se();
+    const u = me();
     Ie(u), i("loginWithPasskey");
-    const g = Se();
+    const g = me();
     let d = await J({
       accessToken: l,
       clientId: r,
-      type: W.GET_AUTHENTICATION_OPTIONS,
+      type: $.GET_AUTHENTICATION_OPTIONS,
       params: {
         id: g,
         clientId: r
@@ -1840,36 +1867,36 @@ const Fr = (e) => D(
     });
     if (d.status)
       try {
-        const N = await Ut(d.data);
+        const K = await Ut(d.data);
         return d = await J({
           accessToken: l,
           clientId: r,
-          type: W.VERIFY_AUTHENTICATION,
+          type: $.VERIFY_AUTHENTICATION,
           params: {
             clientId: r,
             id: g,
-            authentication: N,
+            authentication: K,
             nonce: u,
             domain: n,
             sessionExpiration: t,
             ua: navigator.userAgent
           }
-        }), d.data.status === z ? (y(d.data.idToken), A(d.data.accessToken), fe(d.data.refreshToken), o({
-          type: se,
+        }), d.data.status === z ? (y(d.data.idToken), T(d.data.accessToken), pe(d.data.refreshToken), o({
+          type: ae,
           payload: {
-            authenticationType: G.PASSKEY,
+            authenticationType: M.PASSKEY,
             user: {
               userId: d.data.userId,
               username: d.data.username,
               email: d.data.email
             }
           }
-        }), !0) : (F(Ae), !1);
+        }), !0) : (F(we), !1);
       } catch {
         return await J({
           accessToken: l,
           clientId: r,
-          type: W.VERIFY_AUTHENTICATION,
+          type: $.VERIFY_AUTHENTICATION,
           params: {
             clientId: r,
             id: g,
@@ -1878,29 +1905,29 @@ const Fr = (e) => D(
             domain: n,
             sessionExpiration: t
           }
-        }), F(Ae), !1;
+        }), F(we), !1;
       }
     return !1;
   };
-  return /* @__PURE__ */ Oe(Br.Provider, { value: { state: s, dispatch: o }, children: /* @__PURE__ */ Oe(
+  return /* @__PURE__ */ Oe(Zr.Provider, { value: { state: s, dispatch: o }, children: /* @__PURE__ */ Oe(
     dt.Provider,
     {
       value: {
         ...s,
         login: yt,
         logout: ft,
-        getAccessToken: gt,
-        getIdToken: Et,
+        getAccessToken: Et,
+        getIdToken: gt,
         registeringForPasskey: mt,
         loginWithPasskey: wt
       },
       children: e
     }
   ) });
-}, rn = (e = dt) => vt(e);
+}, un = (e = dt) => Ot(e);
 export {
-  G as AUTH_TYPES,
-  tn as AuthProvider,
-  en as isGranted,
-  rn as useAuth
+  M as AUTH_TYPES,
+  cn as AuthProvider,
+  sn as isGranted,
+  un as useAuth
 };