@versini/auth0-react-thin 2.22.1 → 2.23.0

package/README.md

@@ -2,7 +2,7 @@
 
 > **Unofficial, community-maintained fork of [`@auth0/auth0-react`](https://www.npmjs.com/package/@auth0/auth0-react) — NOT affiliated with, endorsed by, sponsored by, or supported by Auth0 or Okta.**
 
-This is [`@auth0/auth0-react@2.22.1`](https://www.npmjs.com/package/@auth0/auth0-react/v/2.22.1)
+This is [`@auth0/auth0-react@2.23.0`](https://www.npmjs.com/package/@auth0/auth0-react/v/2.23.0)
 rebuilt with a single one-line Rollup change (`external: ['@auth0/auth0-spa-js']`) so it no
 longer inlines that dependency. That drops ~26 KB gzip of first-paint weight for apps that use
 only basic Auth0 login (no MFA/Passkey/MyAccount/DPoP). The public runtime API is otherwise

package/dist/auth0-provider.d.ts

@@ -90,6 +90,11 @@ export type Auth0ProviderOptions<TUser extends User = User> = Auth0ProviderWithC
  * ```
  *
  * Provides the Auth0Context to its child components.
+ *
+ * The SDK is a client-only module (its published ESM and CommonJS bundles ship the
+ * `'use client'` directive), so in a Next.js App Router app you can import and render
+ * `Auth0Provider` directly from a Server Component such as `app/layout.tsx`.
+ * Components that call hooks like `useAuth0` must still be Client Components.
  */
 declare const Auth0Provider: <TUser extends User = User>(opts: Auth0ProviderOptions<TUser>) => React.JSX.Element;
 export default Auth0Provider;

package/dist/auth0-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth0-provider.d.ts","sourceRoot":"","sources":["../src/auth0-provider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAON,MAAM,OAAO,CAAC;AACf,OAAO,EACL,WAAW,EACX,kBAAkB,EAMlB,IAAI,EAEJ,4BAA4B,EAC5B,YAAY,EAOb,MAAM,qBAAqB,CAAC;AAC7B,OAAqB,EACnB,qBAAqB,EAGtB,MAAM,iBAAiB,CAAC;AAUzB;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,4BAA4B,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC;AAEhG;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,CAAC;AAEF,KAAK,wBAAwB,CAAC,KAAK,SAAS,IAAI,GAAG,IAAI,IAAI;IACzD;;OAEG;IACH,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAC3B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;IACjE;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;CACvD,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,8BAA8B,CAAC,KAAK,SAAS,IAAI,GAAG,IAAI,IAClE,wBAAwB,CAAC,KAAK,CAAC,GAAG,kBAAkB,GAAG;IAAE,MAAM,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAE5E;;GAEG;AACH,MAAM,MAAM,8BAA8B,CAAC,KAAK,SAAS,IAAI,GAAG,IAAI,IAClE,wBAAwB,CAAC,KAAK,CAAC,GAAG;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,CAAC,KAAK,SAAS,IAAI,GAAG,IAAI,IACtD,8BAA8B,CAAC,KAAK,CAAC,GACrC,8BAA8B,CAAC,KAAK,CAAC,CAAC;AAoC1C;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,aAAa,GAAI,KAAK,SAAS,IAAI,GAAG,IAAI,EAAE,MAAM,oBAAoB,CAAC,KAAK,CAAC,sBAiVlF,CAAC;AAEF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"auth0-provider.d.ts","sourceRoot":"","sources":["../src/auth0-provider.tsx"],"names":[],"mappings":"AAAA,OAAO,KAON,MAAM,OAAO,CAAC;AACf,OAAO,EACL,WAAW,EACX,kBAAkB,EAMlB,IAAI,EAEJ,4BAA4B,EAC5B,YAAY,EAOb,MAAM,qBAAqB,CAAC;AAC7B,OAAqB,EACnB,qBAAqB,EAGtB,MAAM,iBAAiB,CAAC;AAUzB;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,4BAA4B,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC;AAEhG;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,aAAa,CAAC,EAAE,YAAY,CAAC;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,CAAC;AAEF,KAAK,wBAAwB,CAAC,KAAK,SAAS,IAAI,GAAG,IAAI,IAAI;IACzD;;OAEG;IACH,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;IAC3B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC;IACjE;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;CACvD,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,8BAA8B,CAAC,KAAK,SAAS,IAAI,GAAG,IAAI,IAClE,wBAAwB,CAAC,KAAK,CAAC,GAAG,kBAAkB,GAAG;IAAE,MAAM,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAE5E;;GAEG;AACH,MAAM,MAAM,8BAA8B,CAAC,KAAK,SAAS,IAAI,GAAG,IAAI,IAClE,wBAAwB,CAAC,KAAK,CAAC,GAAG;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,CAAC,KAAK,SAAS,IAAI,GAAG,IAAI,IACtD,8BAA8B,CAAC,KAAK,CAAC,GACrC,8BAA8B,CAAC,KAAK,CAAC,CAAC;AAoC1C;;;;;;;;;;;;;;;;GAgBG;AACH,QAAA,MAAM,aAAa,GAAI,KAAK,SAAS,IAAI,GAAG,IAAI,EAAE,MAAM,oBAAoB,CAAC,KAAK,CAAC,sBAiVlF,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/dist/auth0-react.cjs.js

@@ -1,3 +1,4 @@
+'use client';
 'use strict';
 
 var React = require('react');
@@ -255,7 +256,7 @@ var toAuth0ClientOptions = function (opts) {
     deprecateRedirectUri(opts);
     return __assign(__assign({}, opts), { auth0Client: {
             name: 'auth0-react',
-            version: '2.22.1',
+            version: '2.23.0',
         } });
 };
 /**
@@ -276,6 +277,11 @@ var defaultOnRedirectCallback = function (appState) {
  * ```
  *
  * Provides the Auth0Context to its child components.
+ *
+ * The SDK is a client-only module (its published ESM and CommonJS bundles ship the
+ * `'use client'` directive), so in a Next.js App Router app you can import and render
+ * `Auth0Provider` directly from a Server Component such as `app/layout.tsx`.
+ * Components that call hooks like `useAuth0` must still be Client Components.
  */
 var Auth0Provider = function (opts) {
     var _a = opts, children = _a.children, skipRedirectCallback = _a.skipRedirectCallback, _b = _a.onRedirectCallback, onRedirectCallback = _b === void 0 ? defaultOnRedirectCallback : _b, _c = _a.context, context = _c === void 0 ? Auth0Context : _c, providedClient = _a.client, clientOpts = __rest(_a, ["children", "skipRedirectCallback", "onRedirectCallback", "context", "client"]);
@@ -713,7 +719,12 @@ var defaultOnBeforeAuthentication = function () { return __awaiter(void 0, void
  * @ignore
  */
 var defaultReturnTo = function () {
-    return "".concat(window.location.pathname).concat(window.location.search);
+    // Normalize the pathname to prevent protocol-relative open redirects.
+    // A URL like https://app.example.com//evil.com produces a pathname of
+    // //evil.com, which routers (react-router, next.js, gatsby) interpret as a
+    // protocol-relative URL and redirect the user to an external host.
+    var pathname = window.location.pathname.replace(/^\/\/+/, '/');
+    return "".concat(pathname).concat(window.location.search);
 };
 /**
  * ```js

package/dist/auth0-react.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth0-react.cjs.js","sources":["../src/auth-state.tsx","../src/auth0-context.tsx","../src/errors.tsx","../src/utils.tsx","../src/reducer.tsx","../src/auth0-provider.tsx","../src/use-auth0.tsx","../src/with-auth0.tsx","../src/with-authentication-required.tsx"],"sourcesContent":["import { User } from '@auth0/auth0-spa-js';\n\n/**\n * The auth state which, when combined with the auth methods, make up the return object of the `useAuth0` hook.\n */\nexport interface AuthState<TUser extends User = User> {\n  error: Error | undefined;\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: TUser | undefined;\n}\n\n/**\n * The initial auth state.\n */\nexport const initialAuthState: AuthState = {\n  isAuthenticated: false,\n  isLoading: true,\n  error: undefined,\n  user: undefined,\n};\n","import {\n  GetTokenSilentlyOptions,\n  GetTokenWithPopupOptions,\n  IdToken,\n  LogoutOptions as SPALogoutOptions,\n  PopupLoginOptions,\n  PopupConfigOptions,\n  RedirectLoginResult,\n  User,\n  GetTokenSilentlyVerboseResponse,\n  RedirectLoginOptions as SPARedirectLoginOptions,\n  type Auth0Client,\n  RedirectConnectAccountOptions,\n  ConnectAccountRedirectResult,\n  CustomTokenExchangeOptions,\n  TokenEndpointResponse,\n  type RevokeRefreshTokenOptions,\n  type MfaApiClient,\n  type PasskeyApiClient,\n  type MyAccountApiClient\n} from '@auth0/auth0-spa-js';\nimport { createContext } from 'react';\nimport { AuthState, initialAuthState } from './auth-state';\nimport { AppState } from './auth0-provider';\n\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface LogoutOptions extends Omit<SPALogoutOptions, 'onRedirect'> {}\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface RedirectLoginOptions<TAppState = AppState>\n  extends Omit<SPARedirectLoginOptions<TAppState>, 'onRedirect'> {}\n\n/**\n * Contains the authenticated state and authentication methods provided by the `useAuth0` hook.\n */\nexport interface Auth0ContextInterface<TUser extends User = User>\n  extends AuthState<TUser> {\n  /**\n   * ```js\n   * const token = await getAccessTokenSilently(options);\n   * ```\n   *\n   * If there's a valid token stored, return it. Otherwise, opens an\n   * iframe with the `/authorize` URL using the parameters provided\n   * as arguments. Random and secure `state` and `nonce` parameters\n   * will be auto-generated. If the response is successful, results\n   * will be valid according to their expiration times.\n   *\n   * If refresh tokens are used, the token endpoint is called directly with the\n   * 'refresh_token' grant. If no refresh token is available to make this call,\n   * the SDK will only fall back to using an iframe to the '/authorize' URL if \n   * the `useRefreshTokensFallback` setting has been set to `true`. By default this\n   * setting is `false`.\n   *\n   * This method may use a web worker to perform the token call if the in-memory\n   * cache is used.\n   *\n   * If an `audience` value is given to this function, the SDK always falls\n   * back to using an iframe to make the token exchange.\n   *\n   * Note that in all cases, falling back to an iframe requires access to\n   * the `auth0` cookie.\n   */\n  getAccessTokenSilently: {\n    (\n      options: GetTokenSilentlyOptions & { detailedResponse: true }\n    ): Promise<GetTokenSilentlyVerboseResponse>;\n    (options?: GetTokenSilentlyOptions): Promise<string>;\n    (options: GetTokenSilentlyOptions): Promise<\n      GetTokenSilentlyVerboseResponse | string\n    >;\n  };\n\n  /**\n   * ```js\n   * const token = await getTokenWithPopup(options, config);\n   * ```\n   *\n   * Get an access token interactively.\n   *\n   * Opens a popup with the `/authorize` URL using the parameters\n   * provided as arguments. Random and secure `state` and `nonce`\n   * parameters will be auto-generated. If the response is successful,\n   * results will be valid according to their expiration times.\n   */\n  getAccessTokenWithPopup: (\n    options?: GetTokenWithPopupOptions,\n    config?: PopupConfigOptions\n  ) => Promise<string | undefined>;\n\n  /**\n   * ```js\n   * const claims = await getIdTokenClaims();\n   * ```\n   *\n   * Returns all claims from the id_token if available.\n   */\n  getIdTokenClaims: () => Promise<IdToken | undefined>;\n\n  /**\n   * ```js\n   * await loginWithCustomTokenExchange(options);\n   * ```\n   *\n   * Exchanges an external subject token for Auth0 tokens and logs the user in.\n   * This method implements the Custom Token Exchange grant as specified in RFC 8693.\n   *\n   * The exchanged tokens are automatically cached, establishing an authenticated session.\n   * After calling this method, you can use `getUser()`, `getIdTokenClaims()`, and\n   * `getTokenSilently()` to access the user's information and tokens.\n   *\n   * @param options - The options required to perform the token exchange.\n   *\n   * @returns A promise that resolves to the token endpoint response,\n   * which contains the issued Auth0 tokens (access_token, id_token, etc.).\n   *\n   * The request includes the following parameters:\n   * - `grant_type`: \"urn:ietf:params:oauth:grant-type:token-exchange\"\n   * - `subject_token`: The external token to exchange\n   * - `subject_token_type`: The type identifier of the external token\n   * - `scope`: Merged scopes from the request and SDK defaults\n   * - `audience`: Target audience (defaults to SDK configuration)\n   * - `organization`: Optional organization ID/name for org-scoped authentication\n   *\n   * **Example Usage:**\n   *\n   * ```js\n   * const options = {\n   *   subject_token: 'eyJhbGciOiJIUzI1NiIsInR5cCI6Ikp...',\n   *   subject_token_type: 'urn:acme:legacy-system-token',\n   *   scope: 'openid profile email',\n   *   audience: 'https://api.example.com',\n   *   organization: 'org_12345'\n   * };\n   *\n   * try {\n   *   const tokenResponse = await loginWithCustomTokenExchange(options);\n   *   console.log('Access token:', tokenResponse.access_token);\n   *\n   *   // User is now logged in - access user info\n   *   const user = await getUser();\n   *   console.log('Logged in user:', user);\n   * } catch (error) {\n   *   console.error('Token exchange failed:', error);\n   * }\n   * ```\n   */\n  loginWithCustomTokenExchange: (\n    options: CustomTokenExchangeOptions\n  ) => Promise<TokenEndpointResponse>;\n\n  /**\n   * ```js\n   * const tokenResponse = await customTokenExchange({\n   *   subject_token: 'ey...',\n   *   subject_token_type: 'urn:acme:legacy-system-token',\n   *   actor_token: 'ey...',\n   *   actor_token_type: 'https://idp.example.com/token-type/agent',\n   * });\n   * ```\n   *\n   * Exchanges an external subject token for Auth0 tokens without affecting the current session.\n   *\n   * Unlike `loginWithCustomTokenExchange`, this method has no side effects — it does not cache\n   * tokens, does not update the authenticated session, and does not affect `isAuthenticated`\n   * or `user`. Use this for delegation or impersonation scenarios where you need a downstream\n   * API token without changing who the current user is.\n   *\n   * When `actor_token` is present Auth0 suppresses refresh token issuance; a missing\n   * `refresh_token` in the response is expected and will not cause an error.\n   *\n   * @param options - The options required to perform the token exchange.\n   * @returns A promise that resolves to the token endpoint response.\n   */\n  customTokenExchange: (\n    options: CustomTokenExchangeOptions\n  ) => Promise<TokenEndpointResponse>;\n\n  /**\n   * @deprecated Use `loginWithCustomTokenExchange()` instead. This method will be removed in the next major version.\n   *\n   * ```js\n   * const tokenResponse = await exchangeToken({\n   *   subject_token: 'external_token_value',\n   *   subject_token_type: 'urn:acme:legacy-system-token',\n   *   scope: 'openid profile email'\n   * });\n   * ```\n   *\n   * Exchanges an external subject token for Auth0 tokens and logs the user in.\n   *\n   * This method implements the token exchange grant as specified in RFC 8693.\n   * It performs a token exchange by sending a request to the `/oauth/token` endpoint\n   * with the external token and returns Auth0 tokens (access token, ID token, etc.).\n   *\n   * **Example:**\n   * ```js\n   * // Instead of:\n   * const tokens = await exchangeToken(options);\n   *\n   * // Use:\n   * const tokens = await loginWithCustomTokenExchange(options);\n   * ```\n   *\n   * @param options - The options required to perform the token exchange\n   * @returns A promise that resolves to the token endpoint response containing Auth0 tokens\n   */\n  exchangeToken: (\n    options: CustomTokenExchangeOptions\n  ) => Promise<TokenEndpointResponse>;\n\n  /**\n   * ```js\n   * await loginWithRedirect(options);\n   * ```\n   *\n   * Performs a redirect to `/authorize` using the parameters\n   * provided as arguments. Random and secure `state` and `nonce`\n   * parameters will be auto-generated.\n   */\n  loginWithRedirect: (\n    options?: RedirectLoginOptions<AppState>\n  ) => Promise<void>;\n\n  /**\n   * ```js\n   * await loginWithPopup(options, config);\n   * ```\n   *\n   * Opens a popup with the `/authorize` URL using the parameters\n   * provided as arguments. Random and secure `state` and `nonce`\n   * parameters will be auto-generated. If the response is successful,\n   * results will be valid according to their expiration times.\n   *\n   * IMPORTANT: This method has to be called from an event handler\n   * that was started by the user like a button click, for example,\n   * otherwise the popup will be blocked in most browsers.\n   */\n  loginWithPopup: (\n    options?: PopupLoginOptions,\n    config?: PopupConfigOptions\n  ) => Promise<void>;\n\n  /**\n   * ```js\n   * await connectAccountWithRedirect({\n   *   connection: 'google-oauth2',\n   *   scopes: ['openid', 'profile', 'email', 'https://www.googleapis.com/auth/drive.readonly'],\n   *   authorization_params: {\n   *     // additional authorization params to forward to the authorization server\n   *   }\n   * });\n   * ```\n   *\n   * Redirects to the `/connect` URL using the parameters\n   * provided as arguments. This then redirects to the connection's login page\n   * where the user can authenticate and authorize the account to be connected.\n   *\n   * If connecting the account is successful `onRedirectCallback` will be called\n   * with the details of the connected account.\n   */\n  connectAccountWithRedirect: (\n    options: RedirectConnectAccountOptions\n  ) => Promise<void>;\n\n  /**\n   * ```js\n   * auth0.logout({ logoutParams: { returnTo: window.location.origin } });\n   * ```\n   *\n   * Clears the application session and performs a redirect to `/v2/logout`, using\n   * the parameters provided as arguments, to clear the Auth0 session.\n   * If the `logoutParams.federated` option is specified, it also clears the Identity Provider session.\n   * [Read more about how Logout works at Auth0](https://auth0.com/docs/logout).\n   */\n  logout: (options?: LogoutOptions) => Promise<void>;\n\n  /**\n   * ```js\n   * await revokeRefreshToken();\n   * // or for a specific audience:\n   * await revokeRefreshToken({ audience: 'https://api.example.com' });\n   * ```\n   *\n   * Revokes the refresh token via the `/oauth/revoke` endpoint. This invalidates the\n   * refresh token so it can no longer be used to obtain new access tokens.\n   *\n   * If `useRefreshTokens` is disabled, this method does nothing.\n   * When multiple audiences share the same refresh token, revoking for\n   * one audience invalidates it for all of them.\n   *\n   * **Online mode** (`refreshTokenMode: RefreshTokenMode.Online`): revoking the Online\n   * Refresh Token also terminates the Auth0 session server-side and clears the entire\n   * local cache. `isAuthenticated` and `user` update immediately to reflect the\n   * terminated session — no redirect required. Use `logout()` instead if you want a\n   * redirect-based sign-out.\n   *\n   * **Offline mode**: only the refresh token is invalidated; the cached access token\n   * and user profile remain valid until the access token expires. `isAuthenticated`\n   * and `user` are unaffected until then.\n   *\n   * @param options - Optional parameters to identify which refresh token to revoke.\n   *   Defaults to the audience configured in `authorizationParams`.\n   */\n  revokeRefreshToken: (options?: RevokeRefreshTokenOptions) => Promise<void>;\n\n  /**\n   * After the browser redirects back to the callback page,\n   * call `handleRedirectCallback` to handle success and error\n   * responses from Auth0. If the response is successful, results\n   * will be valid according to their expiration times.\n   *\n   * @param url The URL to that should be used to retrieve the `state` and `code` values. Defaults to `window.location.href` if not given.\n   */\n  handleRedirectCallback: (url?: string) => Promise<RedirectLoginResult | ConnectAccountRedirectResult>;\n\n  /**\n   * Returns the current DPoP nonce used for making requests to Auth0.\n   *\n   * It can return `undefined` because when starting fresh it will not\n   * be populated until after the first response from the server.\n   *\n   * It requires enabling the {@link Auth0ClientOptions.useDpop} option.\n   *\n   * @param nonce The nonce value.\n   * @param id    The identifier of a nonce: if absent, it will get the nonce\n   *              used for requests to Auth0. Otherwise, it will be used to\n   *              select a specific non-Auth0 nonce.\n   */\n  getDpopNonce: Auth0Client['getDpopNonce'];\n\n  /**\n   * Sets the current DPoP nonce used for making requests to Auth0.\n   *\n   * It requires enabling the {@link Auth0ClientOptions.useDpop} option.\n   *\n   * @param nonce The nonce value.\n   * @param id    The identifier of a nonce: if absent, it will set the nonce\n   *              used for requests to Auth0. Otherwise, it will be used to\n   *              select a specific non-Auth0 nonce.\n   */\n  setDpopNonce: Auth0Client['setDpopNonce'];\n\n  /**\n   * Returns a string to be used to demonstrate possession of the private\n   * key used to cryptographically bind access tokens with DPoP.\n   *\n   * It requires enabling the {@link Auth0ClientOptions.useDpop} option.\n   */\n  generateDpopProof: Auth0Client['generateDpopProof'];\n\n  /**\n   * Returns a new `Fetcher` class that will contain a `fetchWithAuth()` method.\n   * This is a drop-in replacement for the Fetch API's `fetch()` method, but will\n   * handle certain authentication logic for you, like building the proper auth\n   * headers or managing DPoP nonces and retries automatically.\n   *\n   * Check the `EXAMPLES.md` file for a deeper look into this method.\n   */\n  createFetcher: Auth0Client['createFetcher'];\n\n  /**\n   * ```js\n   * const config = getConfiguration();\n   * // { domain: 'tenant.auth0.com', clientId: 'abc123' }\n   * ```\n   *\n   * Returns a readonly copy of the initialization configuration\n   * containing the domain and clientId.\n   */\n  getConfiguration: Auth0Client['getConfiguration'];\n\n  /**\n   * ```js\n   * const { mfa } = useAuth0();\n   * const authenticators = await mfa.getAuthenticators(mfaToken);\n   * ```\n   *\n   * MFA API client for Multi-Factor Authentication operations.\n   *\n   * Provides access to all MFA-related methods:\n   * - `getAuthenticators(mfaToken)` - List enrolled authenticators\n   * - `enroll(params)` - Enroll new authenticators (OTP, SMS, Voice, Email, Push)\n   * - `challenge(params)` - Initiate MFA challenges\n   * - `verify(params)` - Verify MFA challenges and complete authentication\n   * - `getEnrollmentFactors(mfaToken)` - Get available enrollment factors\n   *\n   * @example\n   * ```js\n   * const { mfa, getAccessTokenSilently } = useAuth0();\n   *\n   * try {\n   *   await getAccessTokenSilently();\n   * } catch (error) {\n   *   if (error.error === 'mfa_required') {\n   *     // Check if enrollment is needed\n   *     const factors = await mfa.getEnrollmentFactors(error.mfa_token);\n   *\n   *     if (factors.length > 0) {\n   *       // Enroll in OTP\n   *       const enrollment = await mfa.enroll({\n   *         mfaToken: error.mfa_token,\n   *         factorType: 'otp'\n   *       });\n   *       console.log('QR Code:', enrollment.barcodeUri);\n   *     }\n   *\n   *     // Get authenticators and challenge\n   *     const authenticators = await mfa.getAuthenticators(error.mfa_token);\n   *     await mfa.challenge({\n   *       mfaToken: error.mfa_token,\n   *       challengeType: 'otp',\n   *       authenticatorId: authenticators[0].id\n   *     });\n   *\n   *     // Verify with user's code\n   *     const tokens = await mfa.verify({\n   *       mfaToken: error.mfa_token,\n   *       otp: userCode\n   *     });\n   *   }\n   * }\n   * ```\n   */\n  mfa: MfaApiClient;\n\n  /**\n   * ```js\n   * const { passkey } = useAuth0();\n   * const tokens = await passkey.signup({ email: 'user@example.com' });\n   * ```\n   *\n   * Passkey API client for WebAuthn-based passwordless authentication.\n   *\n   * - `signup(options)` — register a new user and create a passkey credential\n   * - `login(options?)` — authenticate an existing user via passkey assertion\n   *\n   * Both methods exchange the WebAuthn credential for Auth0 tokens and update\n   * `isAuthenticated` / `user` in the same way as `loginWithPopup`.\n   */\n  passkey: PasskeyApiClient;\n\n  /**\n   * ```js\n   * const { myAccount } = useAuth0();\n   * const factors = await myAccount.getFactors();\n   * ```\n   *\n   * MyAccount API client for self-service account management operations.\n   *\n   * Provides access to methods for managing the authenticated user's authentication\n   * methods and factors:\n   * - `getFactors()` - List available authentication factors\n   * - `getAuthenticationMethods(type?)` - List enrolled authentication methods, optionally filtered by type\n   * - `getAuthenticationMethod(id)` - Get a specific authentication method by ID\n   * - `updateAuthenticationMethod(id, data)` - Update an authentication method (e.g. rename)\n   * - `deleteAuthenticationMethod(id)` - Remove an enrolled authentication method\n   * - `enrollmentChallenge(options)` - Initiate a two-step enrollment challenge\n   * - `enrollmentVerify(options)` - Complete a two-step enrollment by verifying the challenge\n   *\n   * @example\n   * ```js\n   * const { myAccount } = useAuth0();\n   *\n   * // List all enrolled authentication methods\n   * const methods = await myAccount.getAuthenticationMethods();\n   *\n   * // Enroll a new passkey\n   * const challenge = await myAccount.enrollmentChallenge({ type: 'passkey' });\n   * const credential = await navigator.credentials.create({ publicKey: challenge.authn_params_public_key });\n   * await myAccount.enrollmentVerify({ type: 'passkey', auth_session: challenge.auth_session, location: challenge.location, authn_response: credential });\n   *\n   * // Remove an authentication method\n   * await myAccount.deleteAuthenticationMethod('method-id');\n   * ```\n   */\n  myAccount: MyAccountApiClient;\n}\n\n/**\n * @ignore\n */\nconst stub = (): never => {\n  throw new Error('You forgot to wrap your component in <Auth0Provider>.');\n};\n\n/**\n * @ignore\n */\nexport const initialContext = {\n  ...initialAuthState,\n  buildAuthorizeUrl: stub,\n  buildLogoutUrl: stub,\n  getAccessTokenSilently: stub,\n  getAccessTokenWithPopup: stub,\n  getIdTokenClaims: stub,\n  loginWithCustomTokenExchange: stub,\n  customTokenExchange: stub,\n  exchangeToken: stub,\n  loginWithRedirect: stub,\n  loginWithPopup: stub,\n  connectAccountWithRedirect: stub,\n  logout: stub,\n  revokeRefreshToken: stub,\n  handleRedirectCallback: stub,\n  getDpopNonce: stub,\n  setDpopNonce: stub,\n  generateDpopProof: stub,\n  createFetcher: stub,\n  getConfiguration: stub,\n  mfa: {\n    getAuthenticators: stub,\n    enroll: stub,\n    challenge: stub,\n    verify: stub,\n    getEnrollmentFactors: stub,\n  } as unknown as MfaApiClient,\n  passkey: {\n    signup: stub,\n    login: stub,\n  } as unknown as PasskeyApiClient,\n  myAccount: {\n    getFactors: stub,\n    getAuthenticationMethods: stub,\n    getAuthenticationMethod: stub,\n    updateAuthenticationMethod: stub,\n    deleteAuthenticationMethod: stub,\n    enrollmentChallenge: stub,\n    enrollmentVerify: stub,\n  } as unknown as MyAccountApiClient,\n};\n\n/**\n * The Auth0 Context\n */\nconst Auth0Context = createContext<Auth0ContextInterface>(initialContext);\n\nexport default Auth0Context;\n","/**\n * An OAuth2 error will come from the authorization server and will have at least an `error` property which will\n * be the error code. And possibly an `error_description` property\n *\n * See: https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.2.6\n */\nexport class OAuthError extends Error {\n  constructor(public error: string, public error_description?: string) {\n    super(error_description ?? error);\n\n    // https://github.com/Microsoft/TypeScript-wiki/blob/master/Breaking-Changes.md#extending-built-ins-like-error-array-and-map-may-no-longer-work\n    Object.setPrototypeOf(this, OAuthError.prototype);\n  }\n}\n","import { OAuthError } from './errors';\n\nconst CODE_RE = /[?&](?:connect_)?code=[^&]+/;\nconst STATE_RE = /[?&]state=[^&]+/;\nconst ERROR_RE = /[?&]error=[^&]+/;\n\ninterface WithError {\n  error: string;\n}\n\ninterface WithErrorAndDescription {\n  error: string;\n  error_description: string;\n}\n\nexport const hasAuthParams = (searchParams = window.location.search): boolean =>\n  (CODE_RE.test(searchParams) || ERROR_RE.test(searchParams)) &&\n  STATE_RE.test(searchParams);\n\nconst normalizeErrorFn =\n  (fallbackMessage: string) =>\n  (error: unknown): Error => {\n    if (error instanceof Error) {\n      return error;\n    }\n    // try to check errors of the following form: {error: string; error_description?: string}\n    if (\n      error !== null &&\n      typeof error === 'object' &&\n      'error' in error &&\n      typeof (error as WithError).error === 'string'\n    ) {\n      if (\n        'error_description' in error &&\n        typeof (error as WithErrorAndDescription).error_description === 'string'\n      ) {\n        const e = error as WithErrorAndDescription;\n        return new OAuthError(e.error, e.error_description);\n      }\n      const e = error as WithError;\n      return new OAuthError(e.error);\n    }\n    return new Error(fallbackMessage);\n  };\n\nexport const loginError = normalizeErrorFn('Login failed');\n\nexport const tokenError = normalizeErrorFn('Get access token failed');\n\n/**\n * @ignore\n * Helper function to map the v1 `redirectUri` option to the v2 `authorizationParams.redirect_uri`\n * and log a warning.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport const deprecateRedirectUri = (options?: any) => {\n  if (options?.redirectUri) {\n    console.warn(\n      'Using `redirectUri` has been deprecated, please use `authorizationParams.redirect_uri` instead as `redirectUri` will be no longer supported in a future version'\n    );\n    options.authorizationParams = options.authorizationParams ?? {};\n    options.authorizationParams.redirect_uri = options.redirectUri;\n    delete options.redirectUri;\n  }\n\n  if (options?.authorizationParams?.redirectUri) {\n    console.warn(\n      'Using `authorizationParams.redirectUri` has been deprecated, please use `authorizationParams.redirect_uri` instead as `authorizationParams.redirectUri` will be removed in a future version'\n    );\n    options.authorizationParams.redirect_uri =\n      options.authorizationParams.redirectUri;\n    delete options.authorizationParams.redirectUri;\n  }\n};\n","import { User } from '@auth0/auth0-spa-js';\nimport { AuthState } from './auth-state';\n\ntype Action =\n  | { type: 'LOGIN_POPUP_STARTED' }\n  | {\n      type:\n        | 'INITIALISED'\n        | 'LOGIN_POPUP_COMPLETE'\n        | 'GET_ACCESS_TOKEN_COMPLETE'\n        | 'HANDLE_REDIRECT_COMPLETE'\n        | 'SYNC_USER';\n      user: User | undefined;\n    }\n  | { type: 'LOGOUT' }\n  | { type: 'ERROR'; error: Error };\n\n/**\n * Handles how that state changes in the `useAuth0` hook.\n */\nexport const reducer = <TUser extends User = User>(state: AuthState<TUser>, action: Action): AuthState<TUser> => {\n  switch (action.type) {\n    case 'LOGIN_POPUP_STARTED':\n      return {\n        ...state,\n        isLoading: true,\n      };\n    case 'LOGIN_POPUP_COMPLETE':\n    case 'INITIALISED':\n      return {\n        ...state,\n        isAuthenticated: !!action.user,\n        user: action.user as TUser | undefined,\n        isLoading: false,\n        error: undefined,\n      };\n    case 'HANDLE_REDIRECT_COMPLETE':\n    case 'GET_ACCESS_TOKEN_COMPLETE':\n    case 'SYNC_USER':\n      if (state.user === action.user) {\n        return state;\n      }\n      return {\n        ...state,\n        isAuthenticated: !!action.user,\n        user: action.user as TUser | undefined,\n      };\n    case 'LOGOUT':\n      return {\n        ...state,\n        isAuthenticated: false,\n        user: undefined,\n      };\n    case 'ERROR':\n      return {\n        ...state,\n        isLoading: false,\n        error: action.error,\n      };\n  }\n};\n","import React, {\n  useCallback,\n  useEffect,\n  useMemo,\n  useReducer,\n  useRef,\n  useState,\n} from 'react';\nimport {\n  Auth0Client,\n  Auth0ClientOptions,\n  PopupLoginOptions,\n  PopupConfigOptions,\n  GetTokenWithPopupOptions,\n  RedirectLoginResult,\n  GetTokenSilentlyOptions,\n  User,\n  RedirectConnectAccountOptions,\n  ConnectAccountRedirectResult,\n  ResponseType,\n  CustomTokenExchangeOptions,\n  TokenEndpointResponse,\n  type RevokeRefreshTokenOptions,\n  type PasskeyApiClient,\n  type PasskeySignupOptions,\n  type PasskeyLoginOptions\n} from '@auth0/auth0-spa-js';\nimport Auth0Context, {\n  Auth0ContextInterface,\n  LogoutOptions,\n  RedirectLoginOptions,\n} from './auth0-context';\nimport {\n  hasAuthParams,\n  loginError,\n  tokenError,\n  deprecateRedirectUri,\n} from './utils';\nimport { reducer } from './reducer';\nimport { initialAuthState, type AuthState } from './auth-state';\n\n/**\n * The account that has been connected during the connect flow.\n */\nexport type ConnectedAccount = Omit<ConnectAccountRedirectResult, 'appState' | 'response_type'>;\n\n/**\n * The state of the application before the user was redirected to the login page\n * and any account that the user may have connected to.\n */\nexport type AppState = {\n  returnTo?: string;\n  connectedAccount?: ConnectedAccount;\n  response_type?: ResponseType;\n  [key: string]: any; // eslint-disable-line @typescript-eslint/no-explicit-any\n};\n\ntype Auth0ProviderBaseOptions<TUser extends User = User> = {\n  /**\n   * The child nodes your Provider has wrapped\n   */\n  children?: React.ReactNode;\n  /**\n   * By default this removes the code and state parameters from the url when you are redirected from the authorize page.\n   * It uses `window.history` but you might want to overwrite this if you are using a custom router, like `react-router-dom`\n   * See the EXAMPLES.md for more info.\n   */\n  onRedirectCallback?: (appState?: AppState, user?: TUser) => void;\n  /**\n   * By default, if the page url has code/state params, the SDK will treat them as Auth0's and attempt to exchange the\n   * code for a token. In some cases the code might be for something else (another OAuth SDK perhaps). In these\n   * instances you can instruct the client to ignore them eg\n   *\n   * ```jsx\n   * <Auth0Provider\n   *   clientId={clientId}\n   *   domain={domain}\n   *   skipRedirectCallback={window.location.pathname === '/stripe-oauth-callback'}\n   * >\n   * ```\n   */\n  skipRedirectCallback?: boolean;\n  /**\n   * Context to be used when creating the Auth0Provider, defaults to the internally created context.\n   *\n   * This allows multiple Auth0Providers to be nested within the same application, the context value can then be\n   * passed to useAuth0, withAuth0, or withAuthenticationRequired to use that specific Auth0Provider to access\n   * auth state and methods specifically tied to the provider that the context belongs to.\n   *\n   * When using multiple Auth0Providers in a single application you should do the following to ensure sessions are not\n   * overwritten:\n   *\n   * * Configure a different redirect_uri for each Auth0Provider, and set skipRedirectCallback for each provider to ignore\n   * the others redirect_uri\n   * * If using localstorage for both Auth0Providers, ensure that the audience and scope are different for so that the key\n   * used to store data is different\n   *\n   * For a sample on using multiple Auth0Providers review the [React Account Linking Sample](https://github.com/auth0-samples/auth0-link-accounts-sample/tree/react-variant)\n   */\n  context?: React.Context<Auth0ContextInterface<TUser>>;\n};\n\n/**\n * Options for `Auth0Provider` when configuring Auth0 via `domain` and `clientId`.\n * Use this type when building wrapper components around `Auth0Provider`.\n */\nexport type Auth0ProviderWithConfigOptions<TUser extends User = User> =\n  Auth0ProviderBaseOptions<TUser> & Auth0ClientOptions & { client?: never };\n\n/**\n * Options for `Auth0Provider` when supplying a pre-configured `Auth0Client` instance.\n */\nexport type Auth0ProviderWithClientOptions<TUser extends User = User> =\n  Auth0ProviderBaseOptions<TUser> & { client: Auth0Client };\n\n/**\n * The main configuration to instantiate the `Auth0Provider`.\n *\n * Either provide `domain` and `clientId` (`Auth0ProviderWithConfigOptions`)\n * or a pre-configured `client` instance (`Auth0ProviderWithClientOptions`).\n */\nexport type Auth0ProviderOptions<TUser extends User = User> =\n  | Auth0ProviderWithConfigOptions<TUser>\n  | Auth0ProviderWithClientOptions<TUser>;\n\n/**\n * Replaced by the package version at build time.\n * @ignore\n */\ndeclare const __VERSION__: string;\n\n/**\n * @ignore\n */\nconst toAuth0ClientOptions = (\n  opts: Auth0ClientOptions\n): Auth0ClientOptions => {\n  deprecateRedirectUri(opts);\n\n  return {\n    ...opts,\n    auth0Client: {\n      name: 'auth0-react',\n      version: __VERSION__,\n    },\n  };\n};\n\n/**\n * @ignore\n */\nconst defaultOnRedirectCallback = (appState?: AppState): void => {\n  window.history.replaceState(\n    {},\n    document.title,\n    appState!.returnTo ?? window.location.pathname\n  );\n};\n\n/**\n * ```jsx\n * <Auth0Provider\n *   domain={domain}\n *   clientId={clientId}\n *   authorizationParams={{ redirect_uri: window.location.origin }}>\n *   <MyApp />\n * </Auth0Provider>\n * ```\n *\n * Provides the Auth0Context to its child components.\n */\nconst Auth0Provider = <TUser extends User = User>(opts: Auth0ProviderOptions<TUser>) => {\n  const {\n    children,\n    skipRedirectCallback,\n    onRedirectCallback = defaultOnRedirectCallback,\n    context = Auth0Context,\n    client: providedClient,\n    ...clientOpts\n  } = opts as Auth0ProviderBaseOptions<TUser> & Auth0ClientOptions & { client?: Auth0Client };\n  if (providedClient && (clientOpts.domain || clientOpts.clientId)) {\n    console.warn(\n      'Auth0Provider: the `client` prop takes precedence over `domain`/`clientId` and other ' +\n      'configuration options. Remove `domain`, `clientId`, and any other Auth0Client configuration ' +\n      'props when using the `client` prop.'\n    );\n  }\n  const [client] = useState(\n    () => providedClient ?? new Auth0Client(toAuth0ClientOptions(clientOpts))\n  );\n  const [state, dispatch] = useReducer(reducer<TUser>, initialAuthState  as AuthState<TUser>);\n  const didInitialise = useRef(false);\n\n  const handleError = useCallback((error: Error) => {\n    dispatch({ type: 'ERROR', error });\n    return error;\n  }, []);\n\n  useEffect(() => {\n    if (didInitialise.current) {\n      return;\n    }\n    didInitialise.current = true;\n    (async (): Promise<void> => {\n      try {\n        let user: TUser | undefined;\n        if (hasAuthParams() && !skipRedirectCallback) {\n          const { appState = {}, response_type, ...result } = await client.handleRedirectCallback();\n          user = await client.getUser();\n          appState.response_type = response_type;\n          if (response_type === ResponseType.ConnectCode) {\n            appState.connectedAccount = result as ConnectedAccount;\n          }\n          onRedirectCallback(appState, user);\n        } else {\n          await client.checkSession();\n          user = await client.getUser();\n        }\n        dispatch({ type: 'INITIALISED', user });\n      } catch (error) {\n        handleError(loginError(error));\n      }\n    })();\n  }, [client, onRedirectCallback, skipRedirectCallback, handleError]);\n\n  const loginWithRedirect = useCallback(\n    (opts?: RedirectLoginOptions): Promise<void> => {\n      deprecateRedirectUri(opts);\n\n      return client.loginWithRedirect(opts);\n    },\n    [client]\n  );\n\n  const loginWithPopup = useCallback(\n    async (\n      options?: PopupLoginOptions,\n      config?: PopupConfigOptions\n    ): Promise<void> => {\n      dispatch({ type: 'LOGIN_POPUP_STARTED' });\n      try {\n        await client.loginWithPopup(options, config);\n      } catch (error) {\n        handleError(loginError(error));\n        return;\n      }\n      const user = await client.getUser();\n      dispatch({ type: 'LOGIN_POPUP_COMPLETE', user });\n    },\n    [client, handleError]\n  );\n\n  const logout = useCallback(\n    async (opts: LogoutOptions = {}): Promise<void> => {\n      await client.logout(opts);\n      if (opts.openUrl || opts.openUrl === false) {\n        dispatch({ type: 'LOGOUT' });\n      }\n    },\n    [client]\n  );\n\n  const revokeRefreshToken = useCallback(\n    async (opts?: RevokeRefreshTokenOptions): Promise<void> => {\n      try {\n        await client.revokeRefreshToken(opts);\n      } finally {\n        // Online mode clears the entire local session as part of revocation; offline\n        // mode leaves the cached access token/user untouched. Re-reading the user from\n        // the client after either case keeps isAuthenticated/user consistent with\n        // whatever the SDK actually did, without assuming which mode is active. If\n        // revocation fails, nothing was actually revoked, so this re-read simply\n        // reflects the unchanged cached user/session.\n        dispatch({\n          type: 'SYNC_USER',\n          user: await client.getUser(),\n        });\n      }\n    },\n    [client]\n  );\n\n  const getAccessTokenSilently = useCallback(\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async (opts?: GetTokenSilentlyOptions): Promise<any> => {\n      let token;\n      try {\n        token = await client.getTokenSilently(opts);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        dispatch({\n          type: 'GET_ACCESS_TOKEN_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n      return token;\n    },\n    [client]\n  );\n\n  const getAccessTokenWithPopup = useCallback(\n    async (\n      opts?: GetTokenWithPopupOptions,\n      config?: PopupConfigOptions\n    ): Promise<string | undefined> => {\n      let token;\n      try {\n        token = await client.getTokenWithPopup(opts, config);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        dispatch({\n          type: 'GET_ACCESS_TOKEN_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n      return token;\n    },\n    [client]\n  );\n\n  const connectAccountWithRedirect = useCallback(\n    (options: RedirectConnectAccountOptions) =>\n      client.connectAccountWithRedirect(options),\n    [client]\n  );\n\n  const getIdTokenClaims = useCallback(\n    () => client.getIdTokenClaims(),\n    [client]\n  );\n\n  const loginWithCustomTokenExchange = useCallback(\n    async (\n      options: CustomTokenExchangeOptions\n    ): Promise<TokenEndpointResponse> => {\n      let tokenResponse;\n      try {\n        tokenResponse = await client.loginWithCustomTokenExchange(options);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        // We dispatch the standard GET_ACCESS_TOKEN_COMPLETE action here to maintain\n        // backward compatibility and consistency with the getAccessTokenSilently flow.\n        // This ensures the SDK's internal state lifecycle (loading/user updates) remains\n        // identical regardless of whether the token was retrieved via silent auth or CTE.\n        dispatch({\n          type: 'GET_ACCESS_TOKEN_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n      return tokenResponse;\n    },\n    [client]\n  );\n\n  const customTokenExchange = useCallback(\n    (options: CustomTokenExchangeOptions): Promise<TokenEndpointResponse> =>\n      client.customTokenExchange(options),\n    [client]\n  );\n\n  const exchangeToken = useCallback(\n    async (\n      options: CustomTokenExchangeOptions\n    ): Promise<TokenEndpointResponse> => {\n      return loginWithCustomTokenExchange(options);\n    },\n    [loginWithCustomTokenExchange]\n  );\n\n  const handleRedirectCallback = useCallback(\n    async (\n      url?: string\n    ): Promise<RedirectLoginResult | ConnectAccountRedirectResult> => {\n      try {\n        return await client.handleRedirectCallback(url);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        dispatch({\n          type: 'HANDLE_REDIRECT_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n    },\n    [client]\n  );\n\n  const getDpopNonce = useCallback<Auth0Client['getDpopNonce']>(\n    (id) => client.getDpopNonce(id),\n    [client]\n  );\n\n  const setDpopNonce = useCallback<Auth0Client['setDpopNonce']>(\n    (nonce, id) => client.setDpopNonce(nonce, id),\n    [client]\n  );\n\n  const generateDpopProof = useCallback<Auth0Client['generateDpopProof']>(\n    (params) => client.generateDpopProof(params),\n    [client]\n  );\n\n  const createFetcher = useCallback<Auth0Client['createFetcher']>(\n    (config) => client.createFetcher(config),\n    [client]\n  );\n\n  const getConfiguration = useCallback<Auth0Client['getConfiguration']>(\n    () => client.getConfiguration(),\n    [client]\n  );\n\n  const mfa = useMemo(() => client.mfa, [client]);\n  const myAccount = useMemo(() => client.myAccount, [client]);\n\n  const passkeySignup = useCallback(\n    async (options: PasskeySignupOptions): Promise<TokenEndpointResponse> => {\n      let tokenResponse;\n      try {\n        tokenResponse = await client.passkey.signup(options);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        dispatch({\n          type: 'GET_ACCESS_TOKEN_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n      return tokenResponse;\n    },\n    [client]\n  );\n\n  const passkeyLogin = useCallback(\n    async (options?: PasskeyLoginOptions): Promise<TokenEndpointResponse> => {\n      let tokenResponse;\n      try {\n        tokenResponse = await client.passkey.login(options);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        dispatch({\n          type: 'GET_ACCESS_TOKEN_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n      return tokenResponse;\n    },\n    [client]\n  );\n\n  const passkey = useMemo(\n    () => ({ signup: passkeySignup, login: passkeyLogin }) as unknown as PasskeyApiClient,\n    [passkeySignup, passkeyLogin]\n  );\n\n  const contextValue = useMemo<Auth0ContextInterface<TUser>>(() => {\n    return {\n      ...state,\n      getAccessTokenSilently,\n      getAccessTokenWithPopup,\n      getIdTokenClaims,\n      loginWithCustomTokenExchange,\n      customTokenExchange,\n      exchangeToken,\n      loginWithRedirect,\n      loginWithPopup,\n      connectAccountWithRedirect,\n      logout,\n      revokeRefreshToken,\n      handleRedirectCallback,\n      getDpopNonce,\n      setDpopNonce,\n      generateDpopProof,\n      createFetcher,\n      getConfiguration,\n      mfa,\n      passkey,\n      myAccount,\n    };\n  }, [\n    state,\n    getAccessTokenSilently,\n    getAccessTokenWithPopup,\n    getIdTokenClaims,\n    loginWithCustomTokenExchange,\n    customTokenExchange,\n    exchangeToken,\n    loginWithRedirect,\n    loginWithPopup,\n    connectAccountWithRedirect,\n    logout,\n    revokeRefreshToken,\n    handleRedirectCallback,\n    getDpopNonce,\n    setDpopNonce,\n    generateDpopProof,\n    createFetcher,\n    getConfiguration,\n    mfa,\n    passkey,\n    myAccount,\n  ]);\n\n  return <context.Provider value={contextValue}>{children}</context.Provider>;\n};\n\nexport default Auth0Provider;\n","import { useContext } from 'react';\nimport { User } from '@auth0/auth0-spa-js';\nimport Auth0Context, { Auth0ContextInterface } from './auth0-context';\n\n/**\n * ```js\n * const {\n *   // Auth state:\n *   error,\n *   isAuthenticated,\n *   isLoading,\n *   user,\n *   // Auth methods:\n *   getAccessTokenSilently,\n *   getAccessTokenWithPopup,\n *   getIdTokenClaims,\n *   loginWithCustomTokenExchange,\n *   exchangeToken, // deprecated - use loginWithCustomTokenExchange\n *   loginWithRedirect,\n *   loginWithPopup,\n *   logout,\n * } = useAuth0<TUser>();\n * ```\n *\n * Use the `useAuth0` hook in your components to access the auth state and methods.\n *\n * TUser is an optional type param to provide a type to the `user` field.\n */\nconst useAuth0 = <TUser extends User = User>(\n  context = Auth0Context\n): Auth0ContextInterface<TUser> =>\n  useContext(context) as Auth0ContextInterface<TUser>;\n\nexport default useAuth0;\n","import React, { ComponentType } from 'react';\nimport Auth0Context, { Auth0ContextInterface } from './auth0-context';\n\n/**\n * Components wrapped in `withAuth0` will have an additional `auth0` prop\n */\nexport interface WithAuth0Props {\n  auth0: Auth0ContextInterface;\n}\n\n/**\n * ```jsx\n * class MyComponent extends Component {\n *   render() {\n *     // Access the auth context from the `auth0` prop\n *     const { user } = this.props.auth0;\n *     return <div>Hello {user.name}!</div>\n *   }\n * }\n * // Wrap your class component in withAuth0\n * export default withAuth0(MyComponent);\n * ```\n *\n * Wrap your class components in this Higher Order Component to give them access to the Auth0Context.\n *\n * Providing a context as the second argument allows you to configure the Auth0Provider the Auth0Context\n * should come from f you have multiple within your application.\n */\nconst withAuth0 = <P extends WithAuth0Props>(\n  Component: ComponentType<P>,\n  context = Auth0Context\n): ComponentType<Omit<P, keyof WithAuth0Props>> => {\n  return function WithAuth(props): React.JSX.Element {\n    return (\n      <context.Consumer>\n        {(auth: Auth0ContextInterface): React.JSX.Element => (\n          <Component {...(props as P)} auth0={auth} />\n        )}\n      </context.Consumer>\n    );\n  };\n};\n\nexport default withAuth0;\n","import React, { ComponentType, useEffect, FC } from 'react';\nimport useAuth0 from './use-auth0';\nimport Auth0Context, {\n  Auth0ContextInterface,\n  RedirectLoginOptions,\n} from './auth0-context';\n\n/**\n * @ignore\n */\nconst defaultOnRedirecting = (): React.JSX.Element => <></>;\n\n/**\n* @ignore\n*/\nconst defaultOnBeforeAuthentication = async (): Promise<void> => {/* noop */ };\n\n/**\n * @ignore\n */\nconst defaultReturnTo = (): string =>\n  `${window.location.pathname}${window.location.search}`;\n\n/**\n * Options for the withAuthenticationRequired Higher Order Component\n */\nexport interface WithAuthenticationRequiredOptions {\n  /**\n   * ```js\n   * withAuthenticationRequired(Profile, {\n   *   returnTo: '/profile'\n   * })\n   * ```\n   *\n   * or\n   *\n   * ```js\n   * withAuthenticationRequired(Profile, {\n   *   returnTo: () => window.location.hash.substr(1)\n   * })\n   * ```\n   *\n   * Add a path for the `onRedirectCallback` handler to return the user to after login.\n   */\n  returnTo?: string | (() => string);\n  /**\n   * ```js\n   * withAuthenticationRequired(Profile, {\n   *   onRedirecting: () => <div>Redirecting you to the login...</div>\n   * })\n   * ```\n   *\n   * Render a message to show that the user is being redirected to the login.\n   */\n  onRedirecting?: () => React.JSX.Element;\n  /**\n   * ```js\n   * withAuthenticationRequired(Profile, {\n   *   onBeforeAuthentication: () => { analyticsLibrary.track('login_triggered'); }\n   * })\n   * ```\n   *\n   * Allows executing logic before the user is redirected to the login page.\n   */\n  onBeforeAuthentication?: () => Promise<void>;\n  /**\n   * ```js\n   * withAuthenticationRequired(Profile, {\n   *   loginOptions: {\n   *     appState: {\n   *       customProp: 'foo'\n   *     }\n   *   }\n   * })\n   * ```\n   *\n   * Pass additional login options, like extra `appState` to the login page.\n   * This will be merged with the `returnTo` option used by the `onRedirectCallback` handler.\n   */\n  loginOptions?: RedirectLoginOptions;\n  /**\n   * The context to be used when calling useAuth0, this should only be provided if you are using multiple Auth0Providers\n   * within your application and you wish to tie a specific component to a Auth0Provider other than the Auth0Provider\n   * associated with the default Auth0Context.\n   */\n  context?: React.Context<Auth0ContextInterface>;\n}\n\n/**\n * ```js\n * const MyProtectedComponent = withAuthenticationRequired(MyComponent);\n * ```\n *\n * When you wrap your components in this Higher Order Component and an anonymous user visits your component\n * they will be redirected to the login page; after login they will be returned to the page they were redirected from.\n */\nconst withAuthenticationRequired = <P extends object>(\n  Component: ComponentType<P>,\n  options: WithAuthenticationRequiredOptions = {}\n): FC<P> => {\n  return function WithAuthenticationRequired(props: P): React.JSX.Element {\n    const {\n      returnTo = defaultReturnTo,\n      onRedirecting = defaultOnRedirecting,\n      onBeforeAuthentication = defaultOnBeforeAuthentication,\n      loginOptions,\n      context = Auth0Context,\n    } = options;\n\n    const { isAuthenticated, isLoading, loginWithRedirect } =\n      useAuth0(context);\n\n    useEffect(() => {\n      if (isLoading || isAuthenticated) {\n        return;\n      }\n      const opts = {\n        ...loginOptions,\n        appState: {\n          ...loginOptions?.appState,\n          returnTo: typeof returnTo === 'function' ? returnTo() : returnTo,\n        },\n      };\n      void (async (): Promise<void> => {\n        await onBeforeAuthentication();\n        await loginWithRedirect(opts);\n      })();\n    }, [\n      isLoading,\n      isAuthenticated,\n      loginWithRedirect,\n      onBeforeAuthentication,\n      loginOptions,\n      returnTo,\n    ]);\n\n    return isAuthenticated ? <Component {...props} /> : onRedirecting();\n  };\n};\n\nexport default withAuthenticationRequired;\n"],"names":["createContext","useState","Auth0Client","useReducer","useRef","useCallback","useEffect","ResponseType","useMemo","useContext"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA;;AAEG;AACI,IAAM,gBAAgB,GAAc;AACzC,IAAA,eAAe,EAAE,KAAK;AACtB,IAAA,SAAS,EAAE,IAAI;AACf,IAAA,KAAK,EAAE,SAAS;AAChB,IAAA,IAAI,EAAE,SAAS;CAChB;;AC0cD;;AAEG;AACH,IAAM,IAAI,GAAG,YAAA;AACX,IAAA,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;AAC3E,CAAC,CAAC;AAEF;;AAEG;AACU,IAAA,cAAc,GACtB,QAAA,CAAA,QAAA,CAAA,EAAA,EAAA,gBAAgB,KACnB,iBAAiB,EAAE,IAAI,EACvB,cAAc,EAAE,IAAI,EACpB,sBAAsB,EAAE,IAAI,EAC5B,uBAAuB,EAAE,IAAI,EAC7B,gBAAgB,EAAE,IAAI,EACtB,4BAA4B,EAAE,IAAI,EAClC,mBAAmB,EAAE,IAAI,EACzB,aAAa,EAAE,IAAI,EACnB,iBAAiB,EAAE,IAAI,EACvB,cAAc,EAAE,IAAI,EACpB,0BAA0B,EAAE,IAAI,EAChC,MAAM,EAAE,IAAI,EACZ,kBAAkB,EAAE,IAAI,EACxB,sBAAsB,EAAE,IAAI,EAC5B,YAAY,EAAE,IAAI,EAClB,YAAY,EAAE,IAAI,EAClB,iBAAiB,EAAE,IAAI,EACvB,aAAa,EAAE,IAAI,EACnB,gBAAgB,EAAE,IAAI,EACtB,GAAG,EAAE;AACH,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,SAAS,EAAE,IAAI;AACf,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,oBAAoB,EAAE,IAAI;AACA,KAAA,EAC5B,OAAO,EAAE;AACP,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,KAAK,EAAE,IAAI;AACmB,KAAA,EAChC,SAAS,EAAE;AACT,QAAA,UAAU,EAAE,IAAI;AAChB,QAAA,wBAAwB,EAAE,IAAI;AAC9B,QAAA,uBAAuB,EAAE,IAAI;AAC7B,QAAA,0BAA0B,EAAE,IAAI;AAChC,QAAA,0BAA0B,EAAE,IAAI;AAChC,QAAA,mBAAmB,EAAE,IAAI;AACzB,QAAA,gBAAgB,EAAE,IAAI;AACU,KAAA,EAAA,EAClC;AAEF;;AAEG;AACH,IAAM,YAAY,GAAGA,mBAAa,CAAwB,cAAc;;ACthBxE;;;;;AAKG;AACH,IAAA,UAAA,kBAAA,UAAA,MAAA,EAAA;IAAgC,SAAK,CAAA,UAAA,EAAA,MAAA,CAAA,CAAA;IACnC,SAAmB,UAAA,CAAA,KAAa,EAAS,iBAA0B,EAAA;QACjE,IAAA,KAAA,GAAA,MAAK,CAAC,IAAA,CAAA,IAAA,EAAA,iBAAiB,KAAjB,IAAA,IAAA,iBAAiB,cAAjB,iBAAiB,GAAI,KAAK,CAAC,IAAC,IAAA,CAAA;QADjB,KAAK,CAAA,KAAA,GAAL,KAAK,CAAQ;QAAS,KAAiB,CAAA,iBAAA,GAAjB,iBAAiB,CAAS;;QAIjE,MAAM,CAAC,cAAc,CAAC,KAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;;KACnD;IACH,OAAC,UAAA,CAAA;AAAD,CAPA,CAAgC,KAAK,CAOpC;;ACXD,IAAM,OAAO,GAAG,6BAA6B,CAAC;AAC9C,IAAM,QAAQ,GAAG,iBAAiB,CAAC;AACnC,IAAM,QAAQ,GAAG,iBAAiB,CAAC;AAW5B,IAAM,aAAa,GAAG,UAAC,YAAqC,EAAA;AAArC,IAAA,IAAA,YAAA,KAAA,KAAA,CAAA,EAAA,EAAA,YAAe,GAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,EAAA;AACjE,IAAA,OAAA,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;AAC1D,QAAA,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;AAD3B,CAC2B,CAAC;AAE9B,IAAM,gBAAgB,GACpB,UAAC,eAAuB,EAAA;AACxB,IAAA,OAAA,UAAC,KAAc,EAAA;AACb,QAAA,IAAI,KAAK,YAAY,KAAK,EAAE;AAC1B,YAAA,OAAO,KAAK,CAAC;SACd;;QAED,IACE,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,QAAQ;AACzB,YAAA,OAAO,IAAI,KAAK;AAChB,YAAA,OAAQ,KAAmB,CAAC,KAAK,KAAK,QAAQ,EAC9C;YACA,IACE,mBAAmB,IAAI,KAAK;AAC5B,gBAAA,OAAQ,KAAiC,CAAC,iBAAiB,KAAK,QAAQ,EACxE;gBACA,IAAM,GAAC,GAAG,KAAgC,CAAC;gBAC3C,OAAO,IAAI,UAAU,CAAC,GAAC,CAAC,KAAK,EAAE,GAAC,CAAC,iBAAiB,CAAC,CAAC;aACrD;YACD,IAAM,CAAC,GAAG,KAAkB,CAAC;AAC7B,YAAA,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;SAChC;AACD,QAAA,OAAO,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;KACnC,CAAA;AAtBD,CAsBC,CAAC;AAEG,IAAM,UAAU,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;AAEpD,IAAM,UAAU,GAAG,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;AAEtE;;;;AAIG;AACH;AACO,IAAM,oBAAoB,GAAG,UAAC,OAAa,EAAA;;IAChD,IAAI,OAAO,aAAP,OAAO,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAP,OAAO,CAAE,WAAW,EAAE;AACxB,QAAA,OAAO,CAAC,IAAI,CACV,iKAAiK,CAClK,CAAC;QACF,OAAO,CAAC,mBAAmB,GAAG,CAAA,EAAA,GAAA,OAAO,CAAC,mBAAmB,MAAI,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAA,EAAE,CAAC;QAChE,OAAO,CAAC,mBAAmB,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QAC/D,OAAO,OAAO,CAAC,WAAW,CAAC;KAC5B;IAED,IAAI,CAAA,EAAA,GAAA,OAAO,KAAA,IAAA,IAAP,OAAO,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAP,OAAO,CAAE,mBAAmB,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAE,WAAW,EAAE;AAC7C,QAAA,OAAO,CAAC,IAAI,CACV,6LAA6L,CAC9L,CAAC;QACF,OAAO,CAAC,mBAAmB,CAAC,YAAY;AACtC,YAAA,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC;AAC1C,QAAA,OAAO,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC;KAChD;AACH,CAAC;;ACxDD;;AAEG;AACI,IAAM,OAAO,GAAG,UAA4B,KAAuB,EAAE,MAAc,EAAA;AACxF,IAAA,QAAQ,MAAM,CAAC,IAAI;AACjB,QAAA,KAAK,qBAAqB;AACxB,YAAA,OAAA,QAAA,CAAA,QAAA,CAAA,EAAA,EACK,KAAK,CAAA,EAAA,EACR,SAAS,EAAE,IAAI,EACf,CAAA,CAAA;AACJ,QAAA,KAAK,sBAAsB,CAAC;AAC5B,QAAA,KAAK,aAAa;YAChB,OACK,QAAA,CAAA,QAAA,CAAA,EAAA,EAAA,KAAK,KACR,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAC9B,IAAI,EAAE,MAAM,CAAC,IAAyB,EACtC,SAAS,EAAE,KAAK,EAChB,KAAK,EAAE,SAAS,EAChB,CAAA,CAAA;AACJ,QAAA,KAAK,0BAA0B,CAAC;AAChC,QAAA,KAAK,2BAA2B,CAAC;AACjC,QAAA,KAAK,WAAW;YACd,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE;AAC9B,gBAAA,OAAO,KAAK,CAAC;aACd;AACD,YAAA,OAAA,QAAA,CAAA,QAAA,CAAA,EAAA,EACK,KAAK,CAAA,EAAA,EACR,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAC9B,IAAI,EAAE,MAAM,CAAC,IAAyB,EACtC,CAAA,CAAA;AACJ,QAAA,KAAK,QAAQ;YACX,OACK,QAAA,CAAA,QAAA,CAAA,EAAA,EAAA,KAAK,KACR,eAAe,EAAE,KAAK,EACtB,IAAI,EAAE,SAAS,EACf,CAAA,CAAA;AACJ,QAAA,KAAK,OAAO;YACV,OACK,QAAA,CAAA,QAAA,CAAA,EAAA,EAAA,KAAK,CACR,EAAA,EAAA,SAAS,EAAE,KAAK,EAChB,KAAK,EAAE,MAAM,CAAC,KAAK,EACnB,CAAA,CAAA;KACL;AACH,CAAC;;ACuED;;AAEG;AACH,IAAM,oBAAoB,GAAG,UAC3B,IAAwB,EAAA;IAExB,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAE1B,OACK,QAAA,CAAA,QAAA,CAAA,EAAA,EAAA,IAAI,CACP,EAAA,EAAA,WAAW,EAAE;AACX,YAAA,IAAI,EAAE,aAAa;AACnB,YAAA,OAAO,EAAE,QAAW;SACrB,EACD,CAAA,CAAA;AACJ,CAAC,CAAA;AAED;;AAEG;AACH,IAAM,yBAAyB,GAAG,UAAC,QAAmB,EAAA;;IACpD,MAAM,CAAC,OAAO,CAAC,YAAY,CACzB,EAAE,EACF,QAAQ,CAAC,KAAK,EACd,MAAA,QAAS,CAAC,QAAQ,MAAI,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAA,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAC/C,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;;;;AAWG;AACG,IAAA,aAAa,GAAG,UAA4B,IAAiC,EAAA;AACjF,IAAA,IAAM,EAOF,GAAA,IAAuF,EANzF,QAAQ,GAAA,EAAA,CAAA,QAAA,EACR,oBAAoB,GAAA,EAAA,CAAA,oBAAA,EACpB,EAAA,GAAA,EAAA,CAAA,kBAA8C,EAA9C,kBAAkB,mBAAG,yBAAyB,GAAA,EAAA,EAC9C,EAAA,GAAA,EAAA,CAAA,OAAsB,EAAtB,OAAO,GAAG,EAAA,KAAA,KAAA,CAAA,GAAA,YAAY,GAAA,EAAA,EACd,cAAc,GAAA,EAAA,CAAA,MAAA,EACnB,UAAU,GANT,MAAA,CAAA,EAAA,EAAA,CAAA,UAAA,EAAA,sBAAA,EAAA,oBAAA,EAAA,SAAA,EAAA,QAAA,CAOL,CAA0F,CAAA;AAC3F,IAAA,IAAI,cAAc,KAAK,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE;QAChE,OAAO,CAAC,IAAI,CACV,uFAAuF;YACvF,8FAA8F;AAC9F,YAAA,qCAAqC,CACtC,CAAA;KACH;IACO,IAAA,MAAM,GAAIC,cAAQ,CACvB,YAAA,EAAM,OAAA,cAAc,KAAA,IAAA,IAAd,cAAc,KAAA,KAAA,CAAA,GAAd,cAAc,GAAI,IAAIC,sBAAW,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAnE,EAAmE,CAC1E,CAAA,CAAA,CAFY,CAAA;AAGP,IAAA,IAAA,EAAoB,GAAAC,gBAAU,EAAC,OAAc,GAAE,gBAAqC,CAAC,EAApF,KAAK,GAAA,EAAA,CAAA,CAAA,CAAA,EAAE,QAAQ,QAAqE,CAAA;AAC3F,IAAA,IAAM,aAAa,GAAGC,YAAM,CAAC,KAAK,CAAC,CAAA;AAEnC,IAAA,IAAM,WAAW,GAAGC,iBAAW,CAAC,UAAC,KAAY,EAAA;QAC3C,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAA,KAAA,EAAE,CAAC,CAAA;AAClC,QAAA,OAAO,KAAK,CAAA;KACb,EAAE,EAAE,CAAC,CAAA;AAEN,IAAAC,eAAS,CAAC,YAAA;AACR,QAAA,IAAI,aAAa,CAAC,OAAO,EAAE;YACzB,OAAO;SACT;AACA,QAAA,aAAa,CAAC,OAAO,GAAG,IAAI,CAAA;QAC5B,CAAC,YAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;AAEO,wBAAA,IAAI,SAAmB,CAAA;AACvB,wBAAA,IAAA,EAAA,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAA,EAAxC,OAAwC,CAAA,CAAA,YAAA,CAAA,CAAA,CAAA;AACU,wBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,sBAAsB,EAAE,CAAA,CAAA;;AAAnF,wBAAA,EAAA,GAA8C,EAAqC,CAAA,IAAA,EAAA,EAAjF,EAAa,GAAA,EAAA,CAAA,QAAA,EAAb,QAAQ,GAAG,EAAA,KAAA,KAAA,CAAA,GAAA,EAAE,GAAA,EAAA,EAAE,aAAa,GAAA,EAAA,CAAA,aAAA,EAAK,MAAM,GAAA,MAAA,CAAA,EAAA,EAAzC,6BAA2C,CAAF,CAAA;AACxC,wBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;wBAA7B,IAAI,GAAG,SAAsB,CAAA;AAC7B,wBAAA,QAAQ,CAAC,aAAa,GAAG,aAAa,CAAA;AACtC,wBAAA,IAAI,aAAa,KAAKC,uBAAY,CAAC,WAAW,EAAE;AAC9C,4BAAA,QAAQ,CAAC,gBAAgB,GAAG,MAA0B,CAAA;yBACxD;AACA,wBAAA,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;;AAElC,oBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,YAAY,EAAE,CAAA,CAAA;;AAA3B,wBAAA,EAAA,CAAA,IAAA,EAA2B,CAAA;AACpB,wBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;wBAA7B,IAAI,GAAG,SAAsB,CAAA;;;wBAE/B,QAAQ,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAA,IAAA,EAAE,CAAC,CAAA;;;;AAEvC,wBAAA,WAAW,CAAC,UAAU,CAAC,OAAK,CAAC,CAAC,CAAA;;;;;AAEjC,SAAA,CAAA,CAAA,EAAA,GAAG,CAAA;KACL,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC,CAAA;AAEnE,IAAA,IAAM,iBAAiB,GAAGF,iBAAW,CACnC,UAAC,IAA2B,EAAA;QAC1B,oBAAoB,CAAC,IAAI,CAAC,CAAA;AAE1B,QAAA,OAAO,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;AACvC,KAAC,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,cAAc,GAAGA,iBAAW,CAChC,UACE,OAA2B,EAC3B,MAA2B,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;AAE3B,oBAAA,QAAQ,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAA;;;;oBAEvC,OAAM,CAAA,CAAA,YAAA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA,CAAA;;AAA5C,oBAAA,EAAA,CAAA,IAAA,EAA4C,CAAA;;;;AAE5C,oBAAA,WAAW,CAAC,UAAU,CAAC,OAAK,CAAC,CAAC,CAAA;oBAC9B,OAAO,CAAA,CAAA,YAAA,CAAA;AAEI,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;AAA7B,oBAAA,IAAI,GAAG,EAAsB,CAAA,IAAA,EAAA,CAAA;oBACnC,QAAQ,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAA,IAAA,EAAE,CAAC,CAAA;;;;AACjD,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,EAAE,WAAW,CAAC,CACtB,CAAA;IAED,IAAM,MAAM,GAAGA,iBAAW,CACxB,YAAA;;;;;oFAAO,IAAwB,EAAA;AAAxB,YAAA,IAAA,IAAA,KAAA,KAAA,CAAA,EAAA,EAAA,IAAwB,GAAA,EAAA,CAAA,EAAA;;;AAC7B,oBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA,CAAA;;AAAzB,wBAAA,EAAA,CAAA,IAAA,EAAyB,CAAA;wBACzB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE;AAC1C,4BAAA,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;yBAC9B;;;;;AACD,KAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,kBAAkB,GAAGA,iBAAW,CACpC,UAAO,IAAgC,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;AAEnC,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA,CAAA;;AAArC,oBAAA,EAAA,CAAA,IAAA,EAAqC,CAAA;;;;;;;;;AAQrC,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,WAAW;;AACX,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;;;;;;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;;;;AAEL,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,sBAAsB,GAAGA,iBAAW;;AAExC,IAAA,UAAO,IAA8B,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;AAGzB,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA,CAAA;;oBAA3C,KAAK,GAAG,SAAmC,CAAA;;;;AAE3C,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;AAEvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,2BAA2B;;AAC3B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;AAEJ,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,KAAK,CAAC,CAAA;;;AACd,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,uBAAuB,GAAGA,iBAAW,CACzC,UACE,IAA+B,EAC/B,MAA2B,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;oBAIjB,OAAM,CAAA,CAAA,YAAA,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA,CAAA;;oBAApD,KAAK,GAAG,SAA4C,CAAA;;;;AAEpD,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;AAEvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,2BAA2B;;AAC3B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;AAEJ,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,KAAK,CAAC,CAAA;;;AACd,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,0BAA0B,GAAGA,iBAAW,CAC5C,UAAC,OAAsC,EAAA;AACrC,QAAA,OAAA,MAAM,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAA;AAA1C,KAA0C,EAC5C,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,gBAAgB,GAAGA,iBAAW,CAClC,YAAA,EAAM,OAAA,MAAM,CAAC,gBAAgB,EAAE,GAAA,EAC/B,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,4BAA4B,GAAGA,iBAAW,CAC9C,UACE,OAAmC,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;AAIjB,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAA,CAAA;;oBAAlE,aAAa,GAAG,SAAkD,CAAA;;;;AAElE,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;;;;;AAMvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,2BAA2B;;AAC3B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;;;;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;AAEJ,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,aAAa,CAAC,CAAA;;;AACtB,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,mBAAmB,GAAGA,iBAAW,CACrC,UAAC,OAAmC,EAAA;AAClC,QAAA,OAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;AAAnC,KAAmC,EACrC,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,aAAa,GAAGA,iBAAW,CAC/B,UACE,OAAmC,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;AAEnC,YAAA,OAAA,CAAA,CAAA,aAAO,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAA;;AAC9C,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,4BAA4B,CAAC,CAC/B,CAAA;AAED,IAAA,IAAM,sBAAsB,GAAGA,iBAAW,CACxC,UACE,GAAY,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;AAGH,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAA,CAAA;AAA/C,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,SAAwC,CAAC,CAAA;;;AAEhD,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;AAEvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,0BAA0B;;AAC1B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;;;;AAEL,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,YAAY,GAAGA,iBAAW,CAC9B,UAAC,EAAE,EAAA,EAAK,OAAA,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAvB,EAAuB,EAC/B,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,YAAY,GAAGA,iBAAW,CAC9B,UAAC,KAAK,EAAE,EAAE,EAAK,EAAA,OAAA,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA,EAAA,EAC7C,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,iBAAiB,GAAGA,iBAAW,CACnC,UAAC,MAAM,EAAA,EAAK,OAAA,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAhC,EAAgC,EAC5C,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,aAAa,GAAGA,iBAAW,CAC/B,UAAC,MAAM,EAAA,EAAK,OAAA,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAA5B,EAA4B,EACxC,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,gBAAgB,GAAGA,iBAAW,CAClC,YAAA,EAAM,OAAA,MAAM,CAAC,gBAAgB,EAAE,GAAA,EAC/B,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,GAAG,GAAGG,aAAO,CAAC,YAAA,EAAM,OAAA,MAAM,CAAC,GAAG,CAAA,EAAA,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;AAC/C,IAAA,IAAM,SAAS,GAAGA,aAAO,CAAC,YAAA,EAAM,OAAA,MAAM,CAAC,SAAS,CAAA,EAAA,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;AAE3D,IAAA,IAAM,aAAa,GAAGH,iBAAW,CAC/B,UAAO,OAA6B,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;oBAGhB,OAAM,CAAA,CAAA,YAAA,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA,CAAA;;oBAApD,aAAa,GAAG,SAAoC,CAAA;;;;AAEpD,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;AAEvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,2BAA2B;;AAC3B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;AAEJ,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,aAAa,CAAC,CAAA;;;AACtB,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,YAAY,GAAGA,iBAAW,CAC9B,UAAO,OAA6B,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;oBAGhB,OAAM,CAAA,CAAA,YAAA,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA,CAAA;;oBAAnD,aAAa,GAAG,SAAmC,CAAA;;;;AAEnD,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;AAEvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,2BAA2B;;AAC3B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;AAEJ,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,aAAa,CAAC,CAAA;;;AACtB,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,OAAO,GAAGG,aAAO,CACrB,YAAA,EAAM,QAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,EAAgC,EAAA,EACrF,CAAC,aAAa,EAAE,YAAY,CAAC,CAC9B,CAAA;IAED,IAAM,YAAY,GAAGA,aAAO,CAA+B,YAAA;AACzD,QAAA,OAAA,QAAA,CAAA,QAAA,CAAA,EAAA,EACK,KAAK,CAAA,EAAA,EACR,sBAAsB,EAAA,sBAAA,EACtB,uBAAuB,EAAA,uBAAA,EACvB,gBAAgB,EAAA,gBAAA,EAChB,4BAA4B,EAAA,4BAAA,EAC5B,mBAAmB,EAAA,mBAAA,EACnB,aAAa,EAAA,aAAA,EACb,iBAAiB,EAAA,iBAAA,EACjB,cAAc,EAAA,cAAA,EACd,0BAA0B,EAAA,0BAAA,EAC1B,MAAM,EAAA,MAAA,EACN,kBAAkB,EAAA,kBAAA,EAClB,sBAAsB,EAAA,sBAAA,EACtB,YAAY,EAAA,YAAA,EACZ,YAAY,EAAA,YAAA,EACZ,iBAAiB,EAAA,iBAAA,EACjB,aAAa,EAAA,aAAA,EACb,gBAAgB,EAAA,gBAAA,EAChB,GAAG,EAAA,GAAA,EACH,OAAO,EAAA,OAAA,EACP,SAAS,WAAA,EACT,CAAA,CAAA;AACJ,KAAC,EAAE;QACD,KAAK;QACL,sBAAsB;QACtB,uBAAuB;QACvB,gBAAgB;QAChB,4BAA4B;QAC5B,mBAAmB;QACnB,aAAa;QACb,iBAAiB;QACjB,cAAc;QACd,0BAA0B;QAC1B,MAAM;QACN,kBAAkB;QAClB,sBAAsB;QACtB,YAAY;QACZ,YAAY;QACZ,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,GAAG;QACH,OAAO;QACP,SAAS;AACV,KAAA,CAAC,CAAA;IAEF,OAAO,KAAA,CAAA,aAAA,CAAC,OAAO,CAAC,QAAQ,EAAA,EAAC,KAAK,EAAE,YAAY,EAAA,EAAG,QAAQ,CAAoB,CAAA;AAC7E;;ACxfA;;;;;;;;;;;;;;;;;;;;;;;AAuBG;AACG,IAAA,QAAQ,GAAG,UACf,OAAsB,EAAA;AAAtB,IAAA,IAAA,OAAA,KAAA,KAAA,CAAA,EAAA,EAAA,OAAsB,GAAA,YAAA,CAAA,EAAA;IAEtB,OAAAC,gBAAU,CAAC,OAAO,CAAiC,CAAA;AAAnD;;ACrBF;;;;;;;;;;;;;;;;;AAiBG;AACH,IAAM,SAAS,GAAG,UAChB,SAA2B,EAC3B,OAAsB,EAAA;AAAtB,IAAA,IAAA,OAAA,KAAA,KAAA,CAAA,EAAA,EAAA,OAAsB,GAAA,YAAA,CAAA,EAAA;IAEtB,OAAO,SAAS,QAAQ,CAAC,KAAK,EAAA;QAC5B,QACE,KAAC,CAAA,aAAA,CAAA,OAAO,CAAC,QAAQ,QACd,UAAC,IAA2B,EAAwB,EAAA,QACnD,KAAA,CAAA,aAAA,CAAC,SAAS,EAAM,QAAA,CAAA,EAAA,EAAA,KAAW,EAAE,EAAA,KAAK,EAAE,IAAI,EAAI,CAAA,CAAA,EADO,EAEpD,CACgB,EACnB;AACJ,KAAC,CAAC;AACJ;;AClCA;;AAEG;AACH,IAAM,oBAAoB,GAAG,YAAA,EAAyB,OAAA,KAAK,CAAA,aAAA,CAAA,KAAA,CAAA,QAAA,EAAA,IAAA,CAAA,CAAA,EAAA,CAAC;AAE5D;;AAEE;AACF,IAAM,6BAA6B,GAAG,YAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA,EAAA,OAAA,WAAA,CAAA,IAAA,EAAA,UAAA,EAAA,EAAA;;SAAwC,CAAC;AAE/E;;AAEG;AACH,IAAM,eAAe,GAAG,YAAA;AACtB,IAAA,OAAA,EAAG,CAAA,MAAA,CAAA,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAG,CAAA,MAAA,CAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAE,CAAA;AAAtD,CAAsD,CAAC;AAmEzD;;;;;;;AAOG;AACH,IAAM,0BAA0B,GAAG,UACjC,SAA2B,EAC3B,OAA+C,EAAA;AAA/C,IAAA,IAAA,OAAA,KAAA,KAAA,CAAA,EAAA,EAAA,OAA+C,GAAA,EAAA,CAAA,EAAA;IAE/C,OAAO,SAAS,0BAA0B,CAAC,KAAQ,EAAA;QAA5C,IAqCN,KAAA,GAAA,IAAA,CAAA;AAnCG,QAAA,IAAA,KAKE,OAAO,CAAA,QALiB,EAA1B,QAAQ,GAAA,EAAA,KAAA,KAAA,CAAA,GAAG,eAAe,GAAA,EAAA,EAC1B,EAIE,GAAA,OAAO,cAJ2B,EAApC,aAAa,mBAAG,oBAAoB,GAAA,EAAA,EACpC,EAGE,GAAA,OAAO,CAH6C,sBAAA,EAAtD,sBAAsB,GAAG,EAAA,KAAA,KAAA,CAAA,GAAA,6BAA6B,KAAA,EACtD,YAAY,GAEV,OAAO,CAAA,YAFG,EACZ,EAAA,GACE,OAAO,CADa,OAAA,EAAtB,OAAO,GAAG,EAAA,KAAA,KAAA,CAAA,GAAA,YAAY,KAAA,CACZ;AAEN,QAAA,IAAA,EACJ,GAAA,QAAQ,CAAC,OAAO,CAAC,EADX,eAAe,GAAA,EAAA,CAAA,eAAA,EAAE,SAAS,GAAA,EAAA,CAAA,SAAA,EAAE,iBAAiB,uBAClC,CAAC;AAEpB,QAAAH,eAAS,CAAC,YAAA;AACR,YAAA,IAAI,SAAS,IAAI,eAAe,EAAE;gBAChC,OAAO;aACR;AACD,YAAA,IAAM,IAAI,GAAA,QAAA,CAAA,QAAA,CAAA,EAAA,EACL,YAAY,CAAA,EAAA,EACf,QAAQ,EAAA,QAAA,CAAA,QAAA,CAAA,EAAA,EACH,YAAY,KAAA,IAAA,IAAZ,YAAY,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAZ,YAAY,CAAE,QAAQ,CACzB,EAAA,EAAA,QAAQ,EAAE,OAAO,QAAQ,KAAK,UAAU,GAAG,QAAQ,EAAE,GAAG,QAAQ,MAEnE,CAAC;AACF,YAAA,KAAK,CAAC,YAAA,EAAA,OAAA,SAAA,CAAA,KAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;gCACJ,OAAM,CAAA,CAAA,YAAA,sBAAsB,EAAE,CAAA,CAAA;;AAA9B,4BAAA,EAAA,CAAA,IAAA,EAA8B,CAAC;AAC/B,4BAAA,OAAA,CAAA,CAAA,YAAM,iBAAiB,CAAC,IAAI,CAAC,CAAA,CAAA;;AAA7B,4BAAA,EAAA,CAAA,IAAA,EAA6B,CAAC;;;;AAC/B,aAAA,CAAA,CAAA,EAAA,GAAG,CAAC;AACP,SAAC,EAAE;YACD,SAAS;YACT,eAAe;YACf,iBAAiB;YACjB,sBAAsB;YACtB,YAAY;YACZ,QAAQ;AACT,SAAA,CAAC,CAAC;AAEH,QAAA,OAAO,eAAe,GAAG,oBAAC,SAAS,EAAA,QAAA,CAAA,EAAA,EAAK,KAAK,CAAA,CAAI,GAAG,aAAa,EAAE,CAAC;AACtE,KAAC,CAAC;AACJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"auth0-react.cjs.js","sources":["../src/auth-state.tsx","../src/auth0-context.tsx","../src/errors.tsx","../src/utils.tsx","../src/reducer.tsx","../src/auth0-provider.tsx","../src/use-auth0.tsx","../src/with-auth0.tsx","../src/with-authentication-required.tsx"],"sourcesContent":["import { User } from '@auth0/auth0-spa-js';\n\n/**\n * The auth state which, when combined with the auth methods, make up the return object of the `useAuth0` hook.\n */\nexport interface AuthState<TUser extends User = User> {\n  error: Error | undefined;\n  isAuthenticated: boolean;\n  isLoading: boolean;\n  user: TUser | undefined;\n}\n\n/**\n * The initial auth state.\n */\nexport const initialAuthState: AuthState = {\n  isAuthenticated: false,\n  isLoading: true,\n  error: undefined,\n  user: undefined,\n};\n","import {\n  GetTokenSilentlyOptions,\n  GetTokenWithPopupOptions,\n  IdToken,\n  LogoutOptions as SPALogoutOptions,\n  PopupLoginOptions,\n  PopupConfigOptions,\n  RedirectLoginResult,\n  User,\n  GetTokenSilentlyVerboseResponse,\n  RedirectLoginOptions as SPARedirectLoginOptions,\n  type Auth0Client,\n  RedirectConnectAccountOptions,\n  ConnectAccountRedirectResult,\n  CustomTokenExchangeOptions,\n  TokenEndpointResponse,\n  type RevokeRefreshTokenOptions,\n  type MfaApiClient,\n  type PasskeyApiClient,\n  type MyAccountApiClient\n} from '@auth0/auth0-spa-js';\nimport { createContext } from 'react';\nimport { AuthState, initialAuthState } from './auth-state';\nimport { AppState } from './auth0-provider';\n\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface LogoutOptions extends Omit<SPALogoutOptions, 'onRedirect'> {}\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nexport interface RedirectLoginOptions<TAppState = AppState>\n  extends Omit<SPARedirectLoginOptions<TAppState>, 'onRedirect'> {}\n\n/**\n * Contains the authenticated state and authentication methods provided by the `useAuth0` hook.\n */\nexport interface Auth0ContextInterface<TUser extends User = User>\n  extends AuthState<TUser> {\n  /**\n   * ```js\n   * const token = await getAccessTokenSilently(options);\n   * ```\n   *\n   * If there's a valid token stored, return it. Otherwise, opens an\n   * iframe with the `/authorize` URL using the parameters provided\n   * as arguments. Random and secure `state` and `nonce` parameters\n   * will be auto-generated. If the response is successful, results\n   * will be valid according to their expiration times.\n   *\n   * If refresh tokens are used, the token endpoint is called directly with the\n   * 'refresh_token' grant. If no refresh token is available to make this call,\n   * the SDK will only fall back to using an iframe to the '/authorize' URL if \n   * the `useRefreshTokensFallback` setting has been set to `true`. By default this\n   * setting is `false`.\n   *\n   * This method may use a web worker to perform the token call if the in-memory\n   * cache is used.\n   *\n   * If an `audience` value is given to this function, the SDK always falls\n   * back to using an iframe to make the token exchange.\n   *\n   * Note that in all cases, falling back to an iframe requires access to\n   * the `auth0` cookie.\n   */\n  getAccessTokenSilently: {\n    (\n      options: GetTokenSilentlyOptions & { detailedResponse: true }\n    ): Promise<GetTokenSilentlyVerboseResponse>;\n    (options?: GetTokenSilentlyOptions): Promise<string>;\n    (options: GetTokenSilentlyOptions): Promise<\n      GetTokenSilentlyVerboseResponse | string\n    >;\n  };\n\n  /**\n   * ```js\n   * const token = await getTokenWithPopup(options, config);\n   * ```\n   *\n   * Get an access token interactively.\n   *\n   * Opens a popup with the `/authorize` URL using the parameters\n   * provided as arguments. Random and secure `state` and `nonce`\n   * parameters will be auto-generated. If the response is successful,\n   * results will be valid according to their expiration times.\n   */\n  getAccessTokenWithPopup: (\n    options?: GetTokenWithPopupOptions,\n    config?: PopupConfigOptions\n  ) => Promise<string | undefined>;\n\n  /**\n   * ```js\n   * const claims = await getIdTokenClaims();\n   * ```\n   *\n   * Returns all claims from the id_token if available.\n   */\n  getIdTokenClaims: () => Promise<IdToken | undefined>;\n\n  /**\n   * ```js\n   * await loginWithCustomTokenExchange(options);\n   * ```\n   *\n   * Exchanges an external subject token for Auth0 tokens and logs the user in.\n   * This method implements the Custom Token Exchange grant as specified in RFC 8693.\n   *\n   * The exchanged tokens are automatically cached, establishing an authenticated session.\n   * After calling this method, you can use `getUser()`, `getIdTokenClaims()`, and\n   * `getTokenSilently()` to access the user's information and tokens.\n   *\n   * @param options - The options required to perform the token exchange.\n   *\n   * @returns A promise that resolves to the token endpoint response,\n   * which contains the issued Auth0 tokens (access_token, id_token, etc.).\n   *\n   * The request includes the following parameters:\n   * - `grant_type`: \"urn:ietf:params:oauth:grant-type:token-exchange\"\n   * - `subject_token`: The external token to exchange\n   * - `subject_token_type`: The type identifier of the external token\n   * - `scope`: Merged scopes from the request and SDK defaults\n   * - `audience`: Target audience (defaults to SDK configuration)\n   * - `organization`: Optional organization ID/name for org-scoped authentication\n   *\n   * **Example Usage:**\n   *\n   * ```js\n   * const options = {\n   *   subject_token: 'eyJhbGciOiJIUzI1NiIsInR5cCI6Ikp...',\n   *   subject_token_type: 'urn:acme:legacy-system-token',\n   *   scope: 'openid profile email',\n   *   audience: 'https://api.example.com',\n   *   organization: 'org_12345'\n   * };\n   *\n   * try {\n   *   const tokenResponse = await loginWithCustomTokenExchange(options);\n   *   console.log('Access token:', tokenResponse.access_token);\n   *\n   *   // User is now logged in - access user info\n   *   const user = await getUser();\n   *   console.log('Logged in user:', user);\n   * } catch (error) {\n   *   console.error('Token exchange failed:', error);\n   * }\n   * ```\n   */\n  loginWithCustomTokenExchange: (\n    options: CustomTokenExchangeOptions\n  ) => Promise<TokenEndpointResponse>;\n\n  /**\n   * ```js\n   * const tokenResponse = await customTokenExchange({\n   *   subject_token: 'ey...',\n   *   subject_token_type: 'urn:acme:legacy-system-token',\n   *   actor_token: 'ey...',\n   *   actor_token_type: 'https://idp.example.com/token-type/agent',\n   * });\n   * ```\n   *\n   * Exchanges an external subject token for Auth0 tokens without affecting the current session.\n   *\n   * Unlike `loginWithCustomTokenExchange`, this method has no side effects — it does not cache\n   * tokens, does not update the authenticated session, and does not affect `isAuthenticated`\n   * or `user`. Use this for delegation or impersonation scenarios where you need a downstream\n   * API token without changing who the current user is.\n   *\n   * When `actor_token` is present Auth0 suppresses refresh token issuance; a missing\n   * `refresh_token` in the response is expected and will not cause an error.\n   *\n   * @param options - The options required to perform the token exchange.\n   * @returns A promise that resolves to the token endpoint response.\n   */\n  customTokenExchange: (\n    options: CustomTokenExchangeOptions\n  ) => Promise<TokenEndpointResponse>;\n\n  /**\n   * @deprecated Use `loginWithCustomTokenExchange()` instead. This method will be removed in the next major version.\n   *\n   * ```js\n   * const tokenResponse = await exchangeToken({\n   *   subject_token: 'external_token_value',\n   *   subject_token_type: 'urn:acme:legacy-system-token',\n   *   scope: 'openid profile email'\n   * });\n   * ```\n   *\n   * Exchanges an external subject token for Auth0 tokens and logs the user in.\n   *\n   * This method implements the token exchange grant as specified in RFC 8693.\n   * It performs a token exchange by sending a request to the `/oauth/token` endpoint\n   * with the external token and returns Auth0 tokens (access token, ID token, etc.).\n   *\n   * **Example:**\n   * ```js\n   * // Instead of:\n   * const tokens = await exchangeToken(options);\n   *\n   * // Use:\n   * const tokens = await loginWithCustomTokenExchange(options);\n   * ```\n   *\n   * @param options - The options required to perform the token exchange\n   * @returns A promise that resolves to the token endpoint response containing Auth0 tokens\n   */\n  exchangeToken: (\n    options: CustomTokenExchangeOptions\n  ) => Promise<TokenEndpointResponse>;\n\n  /**\n   * ```js\n   * await loginWithRedirect(options);\n   * ```\n   *\n   * Performs a redirect to `/authorize` using the parameters\n   * provided as arguments. Random and secure `state` and `nonce`\n   * parameters will be auto-generated.\n   */\n  loginWithRedirect: (\n    options?: RedirectLoginOptions<AppState>\n  ) => Promise<void>;\n\n  /**\n   * ```js\n   * await loginWithPopup(options, config);\n   * ```\n   *\n   * Opens a popup with the `/authorize` URL using the parameters\n   * provided as arguments. Random and secure `state` and `nonce`\n   * parameters will be auto-generated. If the response is successful,\n   * results will be valid according to their expiration times.\n   *\n   * IMPORTANT: This method has to be called from an event handler\n   * that was started by the user like a button click, for example,\n   * otherwise the popup will be blocked in most browsers.\n   */\n  loginWithPopup: (\n    options?: PopupLoginOptions,\n    config?: PopupConfigOptions\n  ) => Promise<void>;\n\n  /**\n   * ```js\n   * await connectAccountWithRedirect({\n   *   connection: 'google-oauth2',\n   *   scopes: ['openid', 'profile', 'email', 'https://www.googleapis.com/auth/drive.readonly'],\n   *   authorization_params: {\n   *     // additional authorization params to forward to the authorization server\n   *   }\n   * });\n   * ```\n   *\n   * Redirects to the `/connect` URL using the parameters\n   * provided as arguments. This then redirects to the connection's login page\n   * where the user can authenticate and authorize the account to be connected.\n   *\n   * If connecting the account is successful `onRedirectCallback` will be called\n   * with the details of the connected account.\n   */\n  connectAccountWithRedirect: (\n    options: RedirectConnectAccountOptions\n  ) => Promise<void>;\n\n  /**\n   * ```js\n   * auth0.logout({ logoutParams: { returnTo: window.location.origin } });\n   * ```\n   *\n   * Clears the application session and performs a redirect to `/v2/logout`, using\n   * the parameters provided as arguments, to clear the Auth0 session.\n   * If the `logoutParams.federated` option is specified, it also clears the Identity Provider session.\n   * [Read more about how Logout works at Auth0](https://auth0.com/docs/logout).\n   */\n  logout: (options?: LogoutOptions) => Promise<void>;\n\n  /**\n   * ```js\n   * await revokeRefreshToken();\n   * // or for a specific audience:\n   * await revokeRefreshToken({ audience: 'https://api.example.com' });\n   * ```\n   *\n   * Revokes the refresh token via the `/oauth/revoke` endpoint. This invalidates the\n   * refresh token so it can no longer be used to obtain new access tokens.\n   *\n   * If `useRefreshTokens` is disabled, this method does nothing.\n   * When multiple audiences share the same refresh token, revoking for\n   * one audience invalidates it for all of them.\n   *\n   * **Online mode** (`refreshTokenMode: RefreshTokenMode.Online`): revoking the Online\n   * Refresh Token also terminates the Auth0 session server-side and clears the entire\n   * local cache. `isAuthenticated` and `user` update immediately to reflect the\n   * terminated session — no redirect required. Use `logout()` instead if you want a\n   * redirect-based sign-out.\n   *\n   * **Offline mode**: only the refresh token is invalidated; the cached access token\n   * and user profile remain valid until the access token expires. `isAuthenticated`\n   * and `user` are unaffected until then.\n   *\n   * @param options - Optional parameters to identify which refresh token to revoke.\n   *   Defaults to the audience configured in `authorizationParams`.\n   */\n  revokeRefreshToken: (options?: RevokeRefreshTokenOptions) => Promise<void>;\n\n  /**\n   * After the browser redirects back to the callback page,\n   * call `handleRedirectCallback` to handle success and error\n   * responses from Auth0. If the response is successful, results\n   * will be valid according to their expiration times.\n   *\n   * @param url The URL to that should be used to retrieve the `state` and `code` values. Defaults to `window.location.href` if not given.\n   */\n  handleRedirectCallback: (url?: string) => Promise<RedirectLoginResult | ConnectAccountRedirectResult>;\n\n  /**\n   * Returns the current DPoP nonce used for making requests to Auth0.\n   *\n   * It can return `undefined` because when starting fresh it will not\n   * be populated until after the first response from the server.\n   *\n   * It requires enabling the {@link Auth0ClientOptions.useDpop} option.\n   *\n   * @param nonce The nonce value.\n   * @param id    The identifier of a nonce: if absent, it will get the nonce\n   *              used for requests to Auth0. Otherwise, it will be used to\n   *              select a specific non-Auth0 nonce.\n   */\n  getDpopNonce: Auth0Client['getDpopNonce'];\n\n  /**\n   * Sets the current DPoP nonce used for making requests to Auth0.\n   *\n   * It requires enabling the {@link Auth0ClientOptions.useDpop} option.\n   *\n   * @param nonce The nonce value.\n   * @param id    The identifier of a nonce: if absent, it will set the nonce\n   *              used for requests to Auth0. Otherwise, it will be used to\n   *              select a specific non-Auth0 nonce.\n   */\n  setDpopNonce: Auth0Client['setDpopNonce'];\n\n  /**\n   * Returns a string to be used to demonstrate possession of the private\n   * key used to cryptographically bind access tokens with DPoP.\n   *\n   * It requires enabling the {@link Auth0ClientOptions.useDpop} option.\n   */\n  generateDpopProof: Auth0Client['generateDpopProof'];\n\n  /**\n   * Returns a new `Fetcher` class that will contain a `fetchWithAuth()` method.\n   * This is a drop-in replacement for the Fetch API's `fetch()` method, but will\n   * handle certain authentication logic for you, like building the proper auth\n   * headers or managing DPoP nonces and retries automatically.\n   *\n   * Check the `EXAMPLES.md` file for a deeper look into this method.\n   */\n  createFetcher: Auth0Client['createFetcher'];\n\n  /**\n   * ```js\n   * const config = getConfiguration();\n   * // { domain: 'tenant.auth0.com', clientId: 'abc123' }\n   * ```\n   *\n   * Returns a readonly copy of the initialization configuration\n   * containing the domain and clientId.\n   */\n  getConfiguration: Auth0Client['getConfiguration'];\n\n  /**\n   * ```js\n   * const { mfa } = useAuth0();\n   * const authenticators = await mfa.getAuthenticators(mfaToken);\n   * ```\n   *\n   * MFA API client for Multi-Factor Authentication operations.\n   *\n   * Provides access to all MFA-related methods:\n   * - `getAuthenticators(mfaToken)` - List enrolled authenticators\n   * - `enroll(params)` - Enroll new authenticators (OTP, SMS, Voice, Email, Push)\n   * - `challenge(params)` - Initiate MFA challenges\n   * - `verify(params)` - Verify MFA challenges and complete authentication\n   * - `getEnrollmentFactors(mfaToken)` - Get available enrollment factors\n   *\n   * @example\n   * ```js\n   * const { mfa, getAccessTokenSilently } = useAuth0();\n   *\n   * try {\n   *   await getAccessTokenSilently();\n   * } catch (error) {\n   *   if (error.error === 'mfa_required') {\n   *     // Check if enrollment is needed\n   *     const factors = await mfa.getEnrollmentFactors(error.mfa_token);\n   *\n   *     if (factors.length > 0) {\n   *       // Enroll in OTP\n   *       const enrollment = await mfa.enroll({\n   *         mfaToken: error.mfa_token,\n   *         factorType: 'otp'\n   *       });\n   *       console.log('QR Code:', enrollment.barcodeUri);\n   *     }\n   *\n   *     // Get authenticators and challenge\n   *     const authenticators = await mfa.getAuthenticators(error.mfa_token);\n   *     await mfa.challenge({\n   *       mfaToken: error.mfa_token,\n   *       challengeType: 'otp',\n   *       authenticatorId: authenticators[0].id\n   *     });\n   *\n   *     // Verify with user's code\n   *     const tokens = await mfa.verify({\n   *       mfaToken: error.mfa_token,\n   *       otp: userCode\n   *     });\n   *   }\n   * }\n   * ```\n   */\n  mfa: MfaApiClient;\n\n  /**\n   * ```js\n   * const { passkey } = useAuth0();\n   * const tokens = await passkey.signup({ email: 'user@example.com' });\n   * ```\n   *\n   * Passkey API client for WebAuthn-based passwordless authentication.\n   *\n   * - `signup(options)` — register a new user and create a passkey credential\n   * - `login(options?)` — authenticate an existing user via passkey assertion\n   *\n   * Both methods exchange the WebAuthn credential for Auth0 tokens and update\n   * `isAuthenticated` / `user` in the same way as `loginWithPopup`.\n   */\n  passkey: PasskeyApiClient;\n\n  /**\n   * ```js\n   * const { myAccount } = useAuth0();\n   * const factors = await myAccount.getFactors();\n   * ```\n   *\n   * MyAccount API client for self-service account management operations.\n   *\n   * Provides access to methods for managing the authenticated user's authentication\n   * methods and factors:\n   * - `getFactors()` - List available authentication factors\n   * - `getAuthenticationMethods(type?)` - List enrolled authentication methods, optionally filtered by type\n   * - `getAuthenticationMethod(id)` - Get a specific authentication method by ID\n   * - `updateAuthenticationMethod(id, data)` - Update an authentication method (e.g. rename)\n   * - `deleteAuthenticationMethod(id)` - Remove an enrolled authentication method\n   * - `enrollmentChallenge(options)` - Initiate a two-step enrollment challenge\n   * - `enrollmentVerify(options)` - Complete a two-step enrollment by verifying the challenge\n   *\n   * @example\n   * ```js\n   * const { myAccount } = useAuth0();\n   *\n   * // List all enrolled authentication methods\n   * const methods = await myAccount.getAuthenticationMethods();\n   *\n   * // Enroll a new passkey\n   * const challenge = await myAccount.enrollmentChallenge({ type: 'passkey' });\n   * const credential = await navigator.credentials.create({ publicKey: challenge.authn_params_public_key });\n   * await myAccount.enrollmentVerify({ type: 'passkey', auth_session: challenge.auth_session, location: challenge.location, authn_response: credential });\n   *\n   * // Remove an authentication method\n   * await myAccount.deleteAuthenticationMethod('method-id');\n   * ```\n   */\n  myAccount: MyAccountApiClient;\n}\n\n/**\n * @ignore\n */\nconst stub = (): never => {\n  throw new Error('You forgot to wrap your component in <Auth0Provider>.');\n};\n\n/**\n * @ignore\n */\nexport const initialContext = {\n  ...initialAuthState,\n  buildAuthorizeUrl: stub,\n  buildLogoutUrl: stub,\n  getAccessTokenSilently: stub,\n  getAccessTokenWithPopup: stub,\n  getIdTokenClaims: stub,\n  loginWithCustomTokenExchange: stub,\n  customTokenExchange: stub,\n  exchangeToken: stub,\n  loginWithRedirect: stub,\n  loginWithPopup: stub,\n  connectAccountWithRedirect: stub,\n  logout: stub,\n  revokeRefreshToken: stub,\n  handleRedirectCallback: stub,\n  getDpopNonce: stub,\n  setDpopNonce: stub,\n  generateDpopProof: stub,\n  createFetcher: stub,\n  getConfiguration: stub,\n  mfa: {\n    getAuthenticators: stub,\n    enroll: stub,\n    challenge: stub,\n    verify: stub,\n    getEnrollmentFactors: stub,\n  } as unknown as MfaApiClient,\n  passkey: {\n    signup: stub,\n    login: stub,\n  } as unknown as PasskeyApiClient,\n  myAccount: {\n    getFactors: stub,\n    getAuthenticationMethods: stub,\n    getAuthenticationMethod: stub,\n    updateAuthenticationMethod: stub,\n    deleteAuthenticationMethod: stub,\n    enrollmentChallenge: stub,\n    enrollmentVerify: stub,\n  } as unknown as MyAccountApiClient,\n};\n\n/**\n * The Auth0 Context\n */\nconst Auth0Context = createContext<Auth0ContextInterface>(initialContext);\n\nexport default Auth0Context;\n","/**\n * An OAuth2 error will come from the authorization server and will have at least an `error` property which will\n * be the error code. And possibly an `error_description` property\n *\n * See: https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.2.6\n */\nexport class OAuthError extends Error {\n  constructor(public error: string, public error_description?: string) {\n    super(error_description ?? error);\n\n    // https://github.com/Microsoft/TypeScript-wiki/blob/master/Breaking-Changes.md#extending-built-ins-like-error-array-and-map-may-no-longer-work\n    Object.setPrototypeOf(this, OAuthError.prototype);\n  }\n}\n","import { OAuthError } from './errors';\n\nconst CODE_RE = /[?&](?:connect_)?code=[^&]+/;\nconst STATE_RE = /[?&]state=[^&]+/;\nconst ERROR_RE = /[?&]error=[^&]+/;\n\ninterface WithError {\n  error: string;\n}\n\ninterface WithErrorAndDescription {\n  error: string;\n  error_description: string;\n}\n\nexport const hasAuthParams = (searchParams = window.location.search): boolean =>\n  (CODE_RE.test(searchParams) || ERROR_RE.test(searchParams)) &&\n  STATE_RE.test(searchParams);\n\nconst normalizeErrorFn =\n  (fallbackMessage: string) =>\n  (error: unknown): Error => {\n    if (error instanceof Error) {\n      return error;\n    }\n    // try to check errors of the following form: {error: string; error_description?: string}\n    if (\n      error !== null &&\n      typeof error === 'object' &&\n      'error' in error &&\n      typeof (error as WithError).error === 'string'\n    ) {\n      if (\n        'error_description' in error &&\n        typeof (error as WithErrorAndDescription).error_description === 'string'\n      ) {\n        const e = error as WithErrorAndDescription;\n        return new OAuthError(e.error, e.error_description);\n      }\n      const e = error as WithError;\n      return new OAuthError(e.error);\n    }\n    return new Error(fallbackMessage);\n  };\n\nexport const loginError = normalizeErrorFn('Login failed');\n\nexport const tokenError = normalizeErrorFn('Get access token failed');\n\n/**\n * @ignore\n * Helper function to map the v1 `redirectUri` option to the v2 `authorizationParams.redirect_uri`\n * and log a warning.\n */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport const deprecateRedirectUri = (options?: any) => {\n  if (options?.redirectUri) {\n    console.warn(\n      'Using `redirectUri` has been deprecated, please use `authorizationParams.redirect_uri` instead as `redirectUri` will be no longer supported in a future version'\n    );\n    options.authorizationParams = options.authorizationParams ?? {};\n    options.authorizationParams.redirect_uri = options.redirectUri;\n    delete options.redirectUri;\n  }\n\n  if (options?.authorizationParams?.redirectUri) {\n    console.warn(\n      'Using `authorizationParams.redirectUri` has been deprecated, please use `authorizationParams.redirect_uri` instead as `authorizationParams.redirectUri` will be removed in a future version'\n    );\n    options.authorizationParams.redirect_uri =\n      options.authorizationParams.redirectUri;\n    delete options.authorizationParams.redirectUri;\n  }\n};\n","import { User } from '@auth0/auth0-spa-js';\nimport { AuthState } from './auth-state';\n\ntype Action =\n  | { type: 'LOGIN_POPUP_STARTED' }\n  | {\n      type:\n        | 'INITIALISED'\n        | 'LOGIN_POPUP_COMPLETE'\n        | 'GET_ACCESS_TOKEN_COMPLETE'\n        | 'HANDLE_REDIRECT_COMPLETE'\n        | 'SYNC_USER';\n      user: User | undefined;\n    }\n  | { type: 'LOGOUT' }\n  | { type: 'ERROR'; error: Error };\n\n/**\n * Handles how that state changes in the `useAuth0` hook.\n */\nexport const reducer = <TUser extends User = User>(state: AuthState<TUser>, action: Action): AuthState<TUser> => {\n  switch (action.type) {\n    case 'LOGIN_POPUP_STARTED':\n      return {\n        ...state,\n        isLoading: true,\n      };\n    case 'LOGIN_POPUP_COMPLETE':\n    case 'INITIALISED':\n      return {\n        ...state,\n        isAuthenticated: !!action.user,\n        user: action.user as TUser | undefined,\n        isLoading: false,\n        error: undefined,\n      };\n    case 'HANDLE_REDIRECT_COMPLETE':\n    case 'GET_ACCESS_TOKEN_COMPLETE':\n    case 'SYNC_USER':\n      if (state.user === action.user) {\n        return state;\n      }\n      return {\n        ...state,\n        isAuthenticated: !!action.user,\n        user: action.user as TUser | undefined,\n      };\n    case 'LOGOUT':\n      return {\n        ...state,\n        isAuthenticated: false,\n        user: undefined,\n      };\n    case 'ERROR':\n      return {\n        ...state,\n        isLoading: false,\n        error: action.error,\n      };\n  }\n};\n","import React, {\n  useCallback,\n  useEffect,\n  useMemo,\n  useReducer,\n  useRef,\n  useState,\n} from 'react';\nimport {\n  Auth0Client,\n  Auth0ClientOptions,\n  PopupLoginOptions,\n  PopupConfigOptions,\n  GetTokenWithPopupOptions,\n  RedirectLoginResult,\n  GetTokenSilentlyOptions,\n  User,\n  RedirectConnectAccountOptions,\n  ConnectAccountRedirectResult,\n  ResponseType,\n  CustomTokenExchangeOptions,\n  TokenEndpointResponse,\n  type RevokeRefreshTokenOptions,\n  type PasskeyApiClient,\n  type PasskeySignupOptions,\n  type PasskeyLoginOptions\n} from '@auth0/auth0-spa-js';\nimport Auth0Context, {\n  Auth0ContextInterface,\n  LogoutOptions,\n  RedirectLoginOptions,\n} from './auth0-context';\nimport {\n  hasAuthParams,\n  loginError,\n  tokenError,\n  deprecateRedirectUri,\n} from './utils';\nimport { reducer } from './reducer';\nimport { initialAuthState, type AuthState } from './auth-state';\n\n/**\n * The account that has been connected during the connect flow.\n */\nexport type ConnectedAccount = Omit<ConnectAccountRedirectResult, 'appState' | 'response_type'>;\n\n/**\n * The state of the application before the user was redirected to the login page\n * and any account that the user may have connected to.\n */\nexport type AppState = {\n  returnTo?: string;\n  connectedAccount?: ConnectedAccount;\n  response_type?: ResponseType;\n  [key: string]: any; // eslint-disable-line @typescript-eslint/no-explicit-any\n};\n\ntype Auth0ProviderBaseOptions<TUser extends User = User> = {\n  /**\n   * The child nodes your Provider has wrapped\n   */\n  children?: React.ReactNode;\n  /**\n   * By default this removes the code and state parameters from the url when you are redirected from the authorize page.\n   * It uses `window.history` but you might want to overwrite this if you are using a custom router, like `react-router-dom`\n   * See the EXAMPLES.md for more info.\n   */\n  onRedirectCallback?: (appState?: AppState, user?: TUser) => void;\n  /**\n   * By default, if the page url has code/state params, the SDK will treat them as Auth0's and attempt to exchange the\n   * code for a token. In some cases the code might be for something else (another OAuth SDK perhaps). In these\n   * instances you can instruct the client to ignore them eg\n   *\n   * ```jsx\n   * <Auth0Provider\n   *   clientId={clientId}\n   *   domain={domain}\n   *   skipRedirectCallback={window.location.pathname === '/stripe-oauth-callback'}\n   * >\n   * ```\n   */\n  skipRedirectCallback?: boolean;\n  /**\n   * Context to be used when creating the Auth0Provider, defaults to the internally created context.\n   *\n   * This allows multiple Auth0Providers to be nested within the same application, the context value can then be\n   * passed to useAuth0, withAuth0, or withAuthenticationRequired to use that specific Auth0Provider to access\n   * auth state and methods specifically tied to the provider that the context belongs to.\n   *\n   * When using multiple Auth0Providers in a single application you should do the following to ensure sessions are not\n   * overwritten:\n   *\n   * * Configure a different redirect_uri for each Auth0Provider, and set skipRedirectCallback for each provider to ignore\n   * the others redirect_uri\n   * * If using localstorage for both Auth0Providers, ensure that the audience and scope are different for so that the key\n   * used to store data is different\n   *\n   * For a sample on using multiple Auth0Providers review the [React Account Linking Sample](https://github.com/auth0-samples/auth0-link-accounts-sample/tree/react-variant)\n   */\n  context?: React.Context<Auth0ContextInterface<TUser>>;\n};\n\n/**\n * Options for `Auth0Provider` when configuring Auth0 via `domain` and `clientId`.\n * Use this type when building wrapper components around `Auth0Provider`.\n */\nexport type Auth0ProviderWithConfigOptions<TUser extends User = User> =\n  Auth0ProviderBaseOptions<TUser> & Auth0ClientOptions & { client?: never };\n\n/**\n * Options for `Auth0Provider` when supplying a pre-configured `Auth0Client` instance.\n */\nexport type Auth0ProviderWithClientOptions<TUser extends User = User> =\n  Auth0ProviderBaseOptions<TUser> & { client: Auth0Client };\n\n/**\n * The main configuration to instantiate the `Auth0Provider`.\n *\n * Either provide `domain` and `clientId` (`Auth0ProviderWithConfigOptions`)\n * or a pre-configured `client` instance (`Auth0ProviderWithClientOptions`).\n */\nexport type Auth0ProviderOptions<TUser extends User = User> =\n  | Auth0ProviderWithConfigOptions<TUser>\n  | Auth0ProviderWithClientOptions<TUser>;\n\n/**\n * Replaced by the package version at build time.\n * @ignore\n */\ndeclare const __VERSION__: string;\n\n/**\n * @ignore\n */\nconst toAuth0ClientOptions = (\n  opts: Auth0ClientOptions\n): Auth0ClientOptions => {\n  deprecateRedirectUri(opts);\n\n  return {\n    ...opts,\n    auth0Client: {\n      name: 'auth0-react',\n      version: __VERSION__,\n    },\n  };\n};\n\n/**\n * @ignore\n */\nconst defaultOnRedirectCallback = (appState?: AppState): void => {\n  window.history.replaceState(\n    {},\n    document.title,\n    appState!.returnTo ?? window.location.pathname\n  );\n};\n\n/**\n * ```jsx\n * <Auth0Provider\n *   domain={domain}\n *   clientId={clientId}\n *   authorizationParams={{ redirect_uri: window.location.origin }}>\n *   <MyApp />\n * </Auth0Provider>\n * ```\n *\n * Provides the Auth0Context to its child components.\n *\n * The SDK is a client-only module (its published ESM and CommonJS bundles ship the\n * `'use client'` directive), so in a Next.js App Router app you can import and render\n * `Auth0Provider` directly from a Server Component such as `app/layout.tsx`.\n * Components that call hooks like `useAuth0` must still be Client Components.\n */\nconst Auth0Provider = <TUser extends User = User>(opts: Auth0ProviderOptions<TUser>) => {\n  const {\n    children,\n    skipRedirectCallback,\n    onRedirectCallback = defaultOnRedirectCallback,\n    context = Auth0Context,\n    client: providedClient,\n    ...clientOpts\n  } = opts as Auth0ProviderBaseOptions<TUser> & Auth0ClientOptions & { client?: Auth0Client };\n  if (providedClient && (clientOpts.domain || clientOpts.clientId)) {\n    console.warn(\n      'Auth0Provider: the `client` prop takes precedence over `domain`/`clientId` and other ' +\n      'configuration options. Remove `domain`, `clientId`, and any other Auth0Client configuration ' +\n      'props when using the `client` prop.'\n    );\n  }\n  const [client] = useState(\n    () => providedClient ?? new Auth0Client(toAuth0ClientOptions(clientOpts))\n  );\n  const [state, dispatch] = useReducer(reducer<TUser>, initialAuthState  as AuthState<TUser>);\n  const didInitialise = useRef(false);\n\n  const handleError = useCallback((error: Error) => {\n    dispatch({ type: 'ERROR', error });\n    return error;\n  }, []);\n\n  useEffect(() => {\n    if (didInitialise.current) {\n      return;\n    }\n    didInitialise.current = true;\n    (async (): Promise<void> => {\n      try {\n        let user: TUser | undefined;\n        if (hasAuthParams() && !skipRedirectCallback) {\n          const { appState = {}, response_type, ...result } = await client.handleRedirectCallback();\n          user = await client.getUser();\n          appState.response_type = response_type;\n          if (response_type === ResponseType.ConnectCode) {\n            appState.connectedAccount = result as ConnectedAccount;\n          }\n          onRedirectCallback(appState, user);\n        } else {\n          await client.checkSession();\n          user = await client.getUser();\n        }\n        dispatch({ type: 'INITIALISED', user });\n      } catch (error) {\n        handleError(loginError(error));\n      }\n    })();\n  }, [client, onRedirectCallback, skipRedirectCallback, handleError]);\n\n  const loginWithRedirect = useCallback(\n    (opts?: RedirectLoginOptions): Promise<void> => {\n      deprecateRedirectUri(opts);\n\n      return client.loginWithRedirect(opts);\n    },\n    [client]\n  );\n\n  const loginWithPopup = useCallback(\n    async (\n      options?: PopupLoginOptions,\n      config?: PopupConfigOptions\n    ): Promise<void> => {\n      dispatch({ type: 'LOGIN_POPUP_STARTED' });\n      try {\n        await client.loginWithPopup(options, config);\n      } catch (error) {\n        handleError(loginError(error));\n        return;\n      }\n      const user = await client.getUser();\n      dispatch({ type: 'LOGIN_POPUP_COMPLETE', user });\n    },\n    [client, handleError]\n  );\n\n  const logout = useCallback(\n    async (opts: LogoutOptions = {}): Promise<void> => {\n      await client.logout(opts);\n      if (opts.openUrl || opts.openUrl === false) {\n        dispatch({ type: 'LOGOUT' });\n      }\n    },\n    [client]\n  );\n\n  const revokeRefreshToken = useCallback(\n    async (opts?: RevokeRefreshTokenOptions): Promise<void> => {\n      try {\n        await client.revokeRefreshToken(opts);\n      } finally {\n        // Online mode clears the entire local session as part of revocation; offline\n        // mode leaves the cached access token/user untouched. Re-reading the user from\n        // the client after either case keeps isAuthenticated/user consistent with\n        // whatever the SDK actually did, without assuming which mode is active. If\n        // revocation fails, nothing was actually revoked, so this re-read simply\n        // reflects the unchanged cached user/session.\n        dispatch({\n          type: 'SYNC_USER',\n          user: await client.getUser(),\n        });\n      }\n    },\n    [client]\n  );\n\n  const getAccessTokenSilently = useCallback(\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    async (opts?: GetTokenSilentlyOptions): Promise<any> => {\n      let token;\n      try {\n        token = await client.getTokenSilently(opts);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        dispatch({\n          type: 'GET_ACCESS_TOKEN_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n      return token;\n    },\n    [client]\n  );\n\n  const getAccessTokenWithPopup = useCallback(\n    async (\n      opts?: GetTokenWithPopupOptions,\n      config?: PopupConfigOptions\n    ): Promise<string | undefined> => {\n      let token;\n      try {\n        token = await client.getTokenWithPopup(opts, config);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        dispatch({\n          type: 'GET_ACCESS_TOKEN_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n      return token;\n    },\n    [client]\n  );\n\n  const connectAccountWithRedirect = useCallback(\n    (options: RedirectConnectAccountOptions) =>\n      client.connectAccountWithRedirect(options),\n    [client]\n  );\n\n  const getIdTokenClaims = useCallback(\n    () => client.getIdTokenClaims(),\n    [client]\n  );\n\n  const loginWithCustomTokenExchange = useCallback(\n    async (\n      options: CustomTokenExchangeOptions\n    ): Promise<TokenEndpointResponse> => {\n      let tokenResponse;\n      try {\n        tokenResponse = await client.loginWithCustomTokenExchange(options);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        // We dispatch the standard GET_ACCESS_TOKEN_COMPLETE action here to maintain\n        // backward compatibility and consistency with the getAccessTokenSilently flow.\n        // This ensures the SDK's internal state lifecycle (loading/user updates) remains\n        // identical regardless of whether the token was retrieved via silent auth or CTE.\n        dispatch({\n          type: 'GET_ACCESS_TOKEN_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n      return tokenResponse;\n    },\n    [client]\n  );\n\n  const customTokenExchange = useCallback(\n    (options: CustomTokenExchangeOptions): Promise<TokenEndpointResponse> =>\n      client.customTokenExchange(options),\n    [client]\n  );\n\n  const exchangeToken = useCallback(\n    async (\n      options: CustomTokenExchangeOptions\n    ): Promise<TokenEndpointResponse> => {\n      return loginWithCustomTokenExchange(options);\n    },\n    [loginWithCustomTokenExchange]\n  );\n\n  const handleRedirectCallback = useCallback(\n    async (\n      url?: string\n    ): Promise<RedirectLoginResult | ConnectAccountRedirectResult> => {\n      try {\n        return await client.handleRedirectCallback(url);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        dispatch({\n          type: 'HANDLE_REDIRECT_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n    },\n    [client]\n  );\n\n  const getDpopNonce = useCallback<Auth0Client['getDpopNonce']>(\n    (id) => client.getDpopNonce(id),\n    [client]\n  );\n\n  const setDpopNonce = useCallback<Auth0Client['setDpopNonce']>(\n    (nonce, id) => client.setDpopNonce(nonce, id),\n    [client]\n  );\n\n  const generateDpopProof = useCallback<Auth0Client['generateDpopProof']>(\n    (params) => client.generateDpopProof(params),\n    [client]\n  );\n\n  const createFetcher = useCallback<Auth0Client['createFetcher']>(\n    (config) => client.createFetcher(config),\n    [client]\n  );\n\n  const getConfiguration = useCallback<Auth0Client['getConfiguration']>(\n    () => client.getConfiguration(),\n    [client]\n  );\n\n  const mfa = useMemo(() => client.mfa, [client]);\n  const myAccount = useMemo(() => client.myAccount, [client]);\n\n  const passkeySignup = useCallback(\n    async (options: PasskeySignupOptions): Promise<TokenEndpointResponse> => {\n      let tokenResponse;\n      try {\n        tokenResponse = await client.passkey.signup(options);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        dispatch({\n          type: 'GET_ACCESS_TOKEN_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n      return tokenResponse;\n    },\n    [client]\n  );\n\n  const passkeyLogin = useCallback(\n    async (options?: PasskeyLoginOptions): Promise<TokenEndpointResponse> => {\n      let tokenResponse;\n      try {\n        tokenResponse = await client.passkey.login(options);\n      } catch (error) {\n        throw tokenError(error);\n      } finally {\n        dispatch({\n          type: 'GET_ACCESS_TOKEN_COMPLETE',\n          user: await client.getUser(),\n        });\n      }\n      return tokenResponse;\n    },\n    [client]\n  );\n\n  const passkey = useMemo(\n    () => ({ signup: passkeySignup, login: passkeyLogin }) as unknown as PasskeyApiClient,\n    [passkeySignup, passkeyLogin]\n  );\n\n  const contextValue = useMemo<Auth0ContextInterface<TUser>>(() => {\n    return {\n      ...state,\n      getAccessTokenSilently,\n      getAccessTokenWithPopup,\n      getIdTokenClaims,\n      loginWithCustomTokenExchange,\n      customTokenExchange,\n      exchangeToken,\n      loginWithRedirect,\n      loginWithPopup,\n      connectAccountWithRedirect,\n      logout,\n      revokeRefreshToken,\n      handleRedirectCallback,\n      getDpopNonce,\n      setDpopNonce,\n      generateDpopProof,\n      createFetcher,\n      getConfiguration,\n      mfa,\n      passkey,\n      myAccount,\n    };\n  }, [\n    state,\n    getAccessTokenSilently,\n    getAccessTokenWithPopup,\n    getIdTokenClaims,\n    loginWithCustomTokenExchange,\n    customTokenExchange,\n    exchangeToken,\n    loginWithRedirect,\n    loginWithPopup,\n    connectAccountWithRedirect,\n    logout,\n    revokeRefreshToken,\n    handleRedirectCallback,\n    getDpopNonce,\n    setDpopNonce,\n    generateDpopProof,\n    createFetcher,\n    getConfiguration,\n    mfa,\n    passkey,\n    myAccount,\n  ]);\n\n  return <context.Provider value={contextValue}>{children}</context.Provider>;\n};\n\nexport default Auth0Provider;\n","import { useContext } from 'react';\nimport { User } from '@auth0/auth0-spa-js';\nimport Auth0Context, { Auth0ContextInterface } from './auth0-context';\n\n/**\n * ```js\n * const {\n *   // Auth state:\n *   error,\n *   isAuthenticated,\n *   isLoading,\n *   user,\n *   // Auth methods:\n *   getAccessTokenSilently,\n *   getAccessTokenWithPopup,\n *   getIdTokenClaims,\n *   loginWithCustomTokenExchange,\n *   exchangeToken, // deprecated - use loginWithCustomTokenExchange\n *   loginWithRedirect,\n *   loginWithPopup,\n *   logout,\n * } = useAuth0<TUser>();\n * ```\n *\n * Use the `useAuth0` hook in your components to access the auth state and methods.\n *\n * TUser is an optional type param to provide a type to the `user` field.\n */\nconst useAuth0 = <TUser extends User = User>(\n  context = Auth0Context\n): Auth0ContextInterface<TUser> =>\n  useContext(context) as Auth0ContextInterface<TUser>;\n\nexport default useAuth0;\n","import React, { ComponentType } from 'react';\nimport Auth0Context, { Auth0ContextInterface } from './auth0-context';\n\n/**\n * Components wrapped in `withAuth0` will have an additional `auth0` prop\n */\nexport interface WithAuth0Props {\n  auth0: Auth0ContextInterface;\n}\n\n/**\n * ```jsx\n * class MyComponent extends Component {\n *   render() {\n *     // Access the auth context from the `auth0` prop\n *     const { user } = this.props.auth0;\n *     return <div>Hello {user.name}!</div>\n *   }\n * }\n * // Wrap your class component in withAuth0\n * export default withAuth0(MyComponent);\n * ```\n *\n * Wrap your class components in this Higher Order Component to give them access to the Auth0Context.\n *\n * Providing a context as the second argument allows you to configure the Auth0Provider the Auth0Context\n * should come from f you have multiple within your application.\n */\nconst withAuth0 = <P extends WithAuth0Props>(\n  Component: ComponentType<P>,\n  context = Auth0Context\n): ComponentType<Omit<P, keyof WithAuth0Props>> => {\n  return function WithAuth(props): React.JSX.Element {\n    return (\n      <context.Consumer>\n        {(auth: Auth0ContextInterface): React.JSX.Element => (\n          <Component {...(props as P)} auth0={auth} />\n        )}\n      </context.Consumer>\n    );\n  };\n};\n\nexport default withAuth0;\n","import React, { ComponentType, useEffect, FC } from 'react';\nimport useAuth0 from './use-auth0';\nimport Auth0Context, {\n  Auth0ContextInterface,\n  RedirectLoginOptions,\n} from './auth0-context';\n\n/**\n * @ignore\n */\nconst defaultOnRedirecting = (): React.JSX.Element => <></>;\n\n/**\n* @ignore\n*/\nconst defaultOnBeforeAuthentication = async (): Promise<void> => {/* noop */ };\n\n/**\n * @ignore\n */\nconst defaultReturnTo = (): string => {\n  // Normalize the pathname to prevent protocol-relative open redirects.\n  // A URL like https://app.example.com//evil.com produces a pathname of\n  // //evil.com, which routers (react-router, next.js, gatsby) interpret as a\n  // protocol-relative URL and redirect the user to an external host.\n  const pathname = window.location.pathname.replace(/^\\/\\/+/, '/');\n  return `${pathname}${window.location.search}`;\n};\n\n/**\n * Options for the withAuthenticationRequired Higher Order Component\n */\nexport interface WithAuthenticationRequiredOptions {\n  /**\n   * ```js\n   * withAuthenticationRequired(Profile, {\n   *   returnTo: '/profile'\n   * })\n   * ```\n   *\n   * or\n   *\n   * ```js\n   * withAuthenticationRequired(Profile, {\n   *   returnTo: () => window.location.hash.substr(1)\n   * })\n   * ```\n   *\n   * Add a path for the `onRedirectCallback` handler to return the user to after login.\n   */\n  returnTo?: string | (() => string);\n  /**\n   * ```js\n   * withAuthenticationRequired(Profile, {\n   *   onRedirecting: () => <div>Redirecting you to the login...</div>\n   * })\n   * ```\n   *\n   * Render a message to show that the user is being redirected to the login.\n   */\n  onRedirecting?: () => React.JSX.Element;\n  /**\n   * ```js\n   * withAuthenticationRequired(Profile, {\n   *   onBeforeAuthentication: () => { analyticsLibrary.track('login_triggered'); }\n   * })\n   * ```\n   *\n   * Allows executing logic before the user is redirected to the login page.\n   */\n  onBeforeAuthentication?: () => Promise<void>;\n  /**\n   * ```js\n   * withAuthenticationRequired(Profile, {\n   *   loginOptions: {\n   *     appState: {\n   *       customProp: 'foo'\n   *     }\n   *   }\n   * })\n   * ```\n   *\n   * Pass additional login options, like extra `appState` to the login page.\n   * This will be merged with the `returnTo` option used by the `onRedirectCallback` handler.\n   */\n  loginOptions?: RedirectLoginOptions;\n  /**\n   * The context to be used when calling useAuth0, this should only be provided if you are using multiple Auth0Providers\n   * within your application and you wish to tie a specific component to a Auth0Provider other than the Auth0Provider\n   * associated with the default Auth0Context.\n   */\n  context?: React.Context<Auth0ContextInterface>;\n}\n\n/**\n * ```js\n * const MyProtectedComponent = withAuthenticationRequired(MyComponent);\n * ```\n *\n * When you wrap your components in this Higher Order Component and an anonymous user visits your component\n * they will be redirected to the login page; after login they will be returned to the page they were redirected from.\n */\nconst withAuthenticationRequired = <P extends object>(\n  Component: ComponentType<P>,\n  options: WithAuthenticationRequiredOptions = {}\n): FC<P> => {\n  return function WithAuthenticationRequired(props: P): React.JSX.Element {\n    const {\n      returnTo = defaultReturnTo,\n      onRedirecting = defaultOnRedirecting,\n      onBeforeAuthentication = defaultOnBeforeAuthentication,\n      loginOptions,\n      context = Auth0Context,\n    } = options;\n\n    const { isAuthenticated, isLoading, loginWithRedirect } =\n      useAuth0(context);\n\n    useEffect(() => {\n      if (isLoading || isAuthenticated) {\n        return;\n      }\n      const opts = {\n        ...loginOptions,\n        appState: {\n          ...loginOptions?.appState,\n          returnTo: typeof returnTo === 'function' ? returnTo() : returnTo,\n        },\n      };\n      void (async (): Promise<void> => {\n        await onBeforeAuthentication();\n        await loginWithRedirect(opts);\n      })();\n    }, [\n      isLoading,\n      isAuthenticated,\n      loginWithRedirect,\n      onBeforeAuthentication,\n      loginOptions,\n      returnTo,\n    ]);\n\n    return isAuthenticated ? <Component {...props} /> : onRedirecting();\n  };\n};\n\nexport default withAuthenticationRequired;\n"],"names":["createContext","useState","Auth0Client","useReducer","useRef","useCallback","useEffect","ResponseType","useMemo","useContext"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA;;AAEG;AACI,IAAM,gBAAgB,GAAc;AACzC,IAAA,eAAe,EAAE,KAAK;AACtB,IAAA,SAAS,EAAE,IAAI;AACf,IAAA,KAAK,EAAE,SAAS;AAChB,IAAA,IAAI,EAAE,SAAS;CAChB;;AC0cD;;AAEG;AACH,IAAM,IAAI,GAAG,YAAA;AACX,IAAA,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;AAC3E,CAAC,CAAC;AAEF;;AAEG;AACU,IAAA,cAAc,GACtB,QAAA,CAAA,QAAA,CAAA,EAAA,EAAA,gBAAgB,KACnB,iBAAiB,EAAE,IAAI,EACvB,cAAc,EAAE,IAAI,EACpB,sBAAsB,EAAE,IAAI,EAC5B,uBAAuB,EAAE,IAAI,EAC7B,gBAAgB,EAAE,IAAI,EACtB,4BAA4B,EAAE,IAAI,EAClC,mBAAmB,EAAE,IAAI,EACzB,aAAa,EAAE,IAAI,EACnB,iBAAiB,EAAE,IAAI,EACvB,cAAc,EAAE,IAAI,EACpB,0BAA0B,EAAE,IAAI,EAChC,MAAM,EAAE,IAAI,EACZ,kBAAkB,EAAE,IAAI,EACxB,sBAAsB,EAAE,IAAI,EAC5B,YAAY,EAAE,IAAI,EAClB,YAAY,EAAE,IAAI,EAClB,iBAAiB,EAAE,IAAI,EACvB,aAAa,EAAE,IAAI,EACnB,gBAAgB,EAAE,IAAI,EACtB,GAAG,EAAE;AACH,QAAA,iBAAiB,EAAE,IAAI;AACvB,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,SAAS,EAAE,IAAI;AACf,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,oBAAoB,EAAE,IAAI;AACA,KAAA,EAC5B,OAAO,EAAE;AACP,QAAA,MAAM,EAAE,IAAI;AACZ,QAAA,KAAK,EAAE,IAAI;AACmB,KAAA,EAChC,SAAS,EAAE;AACT,QAAA,UAAU,EAAE,IAAI;AAChB,QAAA,wBAAwB,EAAE,IAAI;AAC9B,QAAA,uBAAuB,EAAE,IAAI;AAC7B,QAAA,0BAA0B,EAAE,IAAI;AAChC,QAAA,0BAA0B,EAAE,IAAI;AAChC,QAAA,mBAAmB,EAAE,IAAI;AACzB,QAAA,gBAAgB,EAAE,IAAI;AACU,KAAA,EAAA,EAClC;AAEF;;AAEG;AACH,IAAM,YAAY,GAAGA,mBAAa,CAAwB,cAAc;;ACthBxE;;;;;AAKG;AACH,IAAA,UAAA,kBAAA,UAAA,MAAA,EAAA;IAAgC,SAAK,CAAA,UAAA,EAAA,MAAA,CAAA,CAAA;IACnC,SAAmB,UAAA,CAAA,KAAa,EAAS,iBAA0B,EAAA;QACjE,IAAA,KAAA,GAAA,MAAK,CAAC,IAAA,CAAA,IAAA,EAAA,iBAAiB,KAAjB,IAAA,IAAA,iBAAiB,cAAjB,iBAAiB,GAAI,KAAK,CAAC,IAAC,IAAA,CAAA;QADjB,KAAK,CAAA,KAAA,GAAL,KAAK,CAAQ;QAAS,KAAiB,CAAA,iBAAA,GAAjB,iBAAiB,CAAS;;QAIjE,MAAM,CAAC,cAAc,CAAC,KAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;;KACnD;IACH,OAAC,UAAA,CAAA;AAAD,CAPA,CAAgC,KAAK,CAOpC;;ACXD,IAAM,OAAO,GAAG,6BAA6B,CAAC;AAC9C,IAAM,QAAQ,GAAG,iBAAiB,CAAC;AACnC,IAAM,QAAQ,GAAG,iBAAiB,CAAC;AAW5B,IAAM,aAAa,GAAG,UAAC,YAAqC,EAAA;AAArC,IAAA,IAAA,YAAA,KAAA,KAAA,CAAA,EAAA,EAAA,YAAe,GAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAA,EAAA;AACjE,IAAA,OAAA,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;AAC1D,QAAA,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;AAD3B,CAC2B,CAAC;AAE9B,IAAM,gBAAgB,GACpB,UAAC,eAAuB,EAAA;AACxB,IAAA,OAAA,UAAC,KAAc,EAAA;AACb,QAAA,IAAI,KAAK,YAAY,KAAK,EAAE;AAC1B,YAAA,OAAO,KAAK,CAAC;SACd;;QAED,IACE,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,QAAQ;AACzB,YAAA,OAAO,IAAI,KAAK;AAChB,YAAA,OAAQ,KAAmB,CAAC,KAAK,KAAK,QAAQ,EAC9C;YACA,IACE,mBAAmB,IAAI,KAAK;AAC5B,gBAAA,OAAQ,KAAiC,CAAC,iBAAiB,KAAK,QAAQ,EACxE;gBACA,IAAM,GAAC,GAAG,KAAgC,CAAC;gBAC3C,OAAO,IAAI,UAAU,CAAC,GAAC,CAAC,KAAK,EAAE,GAAC,CAAC,iBAAiB,CAAC,CAAC;aACrD;YACD,IAAM,CAAC,GAAG,KAAkB,CAAC;AAC7B,YAAA,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;SAChC;AACD,QAAA,OAAO,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;KACnC,CAAA;AAtBD,CAsBC,CAAC;AAEG,IAAM,UAAU,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;AAEpD,IAAM,UAAU,GAAG,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;AAEtE;;;;AAIG;AACH;AACO,IAAM,oBAAoB,GAAG,UAAC,OAAa,EAAA;;IAChD,IAAI,OAAO,aAAP,OAAO,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAP,OAAO,CAAE,WAAW,EAAE;AACxB,QAAA,OAAO,CAAC,IAAI,CACV,iKAAiK,CAClK,CAAC;QACF,OAAO,CAAC,mBAAmB,GAAG,CAAA,EAAA,GAAA,OAAO,CAAC,mBAAmB,MAAI,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAA,EAAE,CAAC;QAChE,OAAO,CAAC,mBAAmB,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QAC/D,OAAO,OAAO,CAAC,WAAW,CAAC;KAC5B;IAED,IAAI,CAAA,EAAA,GAAA,OAAO,KAAA,IAAA,IAAP,OAAO,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAP,OAAO,CAAE,mBAAmB,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAE,WAAW,EAAE;AAC7C,QAAA,OAAO,CAAC,IAAI,CACV,6LAA6L,CAC9L,CAAC;QACF,OAAO,CAAC,mBAAmB,CAAC,YAAY;AACtC,YAAA,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC;AAC1C,QAAA,OAAO,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC;KAChD;AACH,CAAC;;ACxDD;;AAEG;AACI,IAAM,OAAO,GAAG,UAA4B,KAAuB,EAAE,MAAc,EAAA;AACxF,IAAA,QAAQ,MAAM,CAAC,IAAI;AACjB,QAAA,KAAK,qBAAqB;AACxB,YAAA,OAAA,QAAA,CAAA,QAAA,CAAA,EAAA,EACK,KAAK,CAAA,EAAA,EACR,SAAS,EAAE,IAAI,EACf,CAAA,CAAA;AACJ,QAAA,KAAK,sBAAsB,CAAC;AAC5B,QAAA,KAAK,aAAa;YAChB,OACK,QAAA,CAAA,QAAA,CAAA,EAAA,EAAA,KAAK,KACR,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAC9B,IAAI,EAAE,MAAM,CAAC,IAAyB,EACtC,SAAS,EAAE,KAAK,EAChB,KAAK,EAAE,SAAS,EAChB,CAAA,CAAA;AACJ,QAAA,KAAK,0BAA0B,CAAC;AAChC,QAAA,KAAK,2BAA2B,CAAC;AACjC,QAAA,KAAK,WAAW;YACd,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE;AAC9B,gBAAA,OAAO,KAAK,CAAC;aACd;AACD,YAAA,OAAA,QAAA,CAAA,QAAA,CAAA,EAAA,EACK,KAAK,CAAA,EAAA,EACR,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAC9B,IAAI,EAAE,MAAM,CAAC,IAAyB,EACtC,CAAA,CAAA;AACJ,QAAA,KAAK,QAAQ;YACX,OACK,QAAA,CAAA,QAAA,CAAA,EAAA,EAAA,KAAK,KACR,eAAe,EAAE,KAAK,EACtB,IAAI,EAAE,SAAS,EACf,CAAA,CAAA;AACJ,QAAA,KAAK,OAAO;YACV,OACK,QAAA,CAAA,QAAA,CAAA,EAAA,EAAA,KAAK,CACR,EAAA,EAAA,SAAS,EAAE,KAAK,EAChB,KAAK,EAAE,MAAM,CAAC,KAAK,EACnB,CAAA,CAAA;KACL;AACH,CAAC;;ACuED;;AAEG;AACH,IAAM,oBAAoB,GAAG,UAC3B,IAAwB,EAAA;IAExB,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAE1B,OACK,QAAA,CAAA,QAAA,CAAA,EAAA,EAAA,IAAI,CACP,EAAA,EAAA,WAAW,EAAE;AACX,YAAA,IAAI,EAAE,aAAa;AACnB,YAAA,OAAO,EAAE,QAAW;SACrB,EACD,CAAA,CAAA;AACJ,CAAC,CAAA;AAED;;AAEG;AACH,IAAM,yBAAyB,GAAG,UAAC,QAAmB,EAAA;;IACpD,MAAM,CAAC,OAAO,CAAC,YAAY,CACzB,EAAE,EACF,QAAQ,CAAC,KAAK,EACd,MAAA,QAAS,CAAC,QAAQ,MAAI,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAA,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAC/C,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;AAgBG;AACG,IAAA,aAAa,GAAG,UAA4B,IAAiC,EAAA;AACjF,IAAA,IAAM,EAOF,GAAA,IAAuF,EANzF,QAAQ,GAAA,EAAA,CAAA,QAAA,EACR,oBAAoB,GAAA,EAAA,CAAA,oBAAA,EACpB,EAAA,GAAA,EAAA,CAAA,kBAA8C,EAA9C,kBAAkB,mBAAG,yBAAyB,GAAA,EAAA,EAC9C,EAAA,GAAA,EAAA,CAAA,OAAsB,EAAtB,OAAO,GAAG,EAAA,KAAA,KAAA,CAAA,GAAA,YAAY,GAAA,EAAA,EACd,cAAc,GAAA,EAAA,CAAA,MAAA,EACnB,UAAU,GANT,MAAA,CAAA,EAAA,EAAA,CAAA,UAAA,EAAA,sBAAA,EAAA,oBAAA,EAAA,SAAA,EAAA,QAAA,CAOL,CAA0F,CAAA;AAC3F,IAAA,IAAI,cAAc,KAAK,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE;QAChE,OAAO,CAAC,IAAI,CACV,uFAAuF;YACvF,8FAA8F;AAC9F,YAAA,qCAAqC,CACtC,CAAA;KACH;IACO,IAAA,MAAM,GAAIC,cAAQ,CACvB,YAAA,EAAM,OAAA,cAAc,KAAA,IAAA,IAAd,cAAc,KAAA,KAAA,CAAA,GAAd,cAAc,GAAI,IAAIC,sBAAW,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAnE,EAAmE,CAC1E,CAAA,CAAA,CAFY,CAAA;AAGP,IAAA,IAAA,EAAoB,GAAAC,gBAAU,EAAC,OAAc,GAAE,gBAAqC,CAAC,EAApF,KAAK,GAAA,EAAA,CAAA,CAAA,CAAA,EAAE,QAAQ,QAAqE,CAAA;AAC3F,IAAA,IAAM,aAAa,GAAGC,YAAM,CAAC,KAAK,CAAC,CAAA;AAEnC,IAAA,IAAM,WAAW,GAAGC,iBAAW,CAAC,UAAC,KAAY,EAAA;QAC3C,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAA,KAAA,EAAE,CAAC,CAAA;AAClC,QAAA,OAAO,KAAK,CAAA;KACb,EAAE,EAAE,CAAC,CAAA;AAEN,IAAAC,eAAS,CAAC,YAAA;AACR,QAAA,IAAI,aAAa,CAAC,OAAO,EAAE;YACzB,OAAO;SACT;AACA,QAAA,aAAa,CAAC,OAAO,GAAG,IAAI,CAAA;QAC5B,CAAC,YAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;AAEO,wBAAA,IAAI,SAAmB,CAAA;AACvB,wBAAA,IAAA,EAAA,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAA,EAAxC,OAAwC,CAAA,CAAA,YAAA,CAAA,CAAA,CAAA;AACU,wBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,sBAAsB,EAAE,CAAA,CAAA;;AAAnF,wBAAA,EAAA,GAA8C,EAAqC,CAAA,IAAA,EAAA,EAAjF,EAAa,GAAA,EAAA,CAAA,QAAA,EAAb,QAAQ,GAAG,EAAA,KAAA,KAAA,CAAA,GAAA,EAAE,GAAA,EAAA,EAAE,aAAa,GAAA,EAAA,CAAA,aAAA,EAAK,MAAM,GAAA,MAAA,CAAA,EAAA,EAAzC,6BAA2C,CAAF,CAAA;AACxC,wBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;wBAA7B,IAAI,GAAG,SAAsB,CAAA;AAC7B,wBAAA,QAAQ,CAAC,aAAa,GAAG,aAAa,CAAA;AACtC,wBAAA,IAAI,aAAa,KAAKC,uBAAY,CAAC,WAAW,EAAE;AAC9C,4BAAA,QAAQ,CAAC,gBAAgB,GAAG,MAA0B,CAAA;yBACxD;AACA,wBAAA,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;;AAElC,oBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,YAAY,EAAE,CAAA,CAAA;;AAA3B,wBAAA,EAAA,CAAA,IAAA,EAA2B,CAAA;AACpB,wBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;wBAA7B,IAAI,GAAG,SAAsB,CAAA;;;wBAE/B,QAAQ,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAA,IAAA,EAAE,CAAC,CAAA;;;;AAEvC,wBAAA,WAAW,CAAC,UAAU,CAAC,OAAK,CAAC,CAAC,CAAA;;;;;AAEjC,SAAA,CAAA,CAAA,EAAA,GAAG,CAAA;KACL,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC,CAAA;AAEnE,IAAA,IAAM,iBAAiB,GAAGF,iBAAW,CACnC,UAAC,IAA2B,EAAA;QAC1B,oBAAoB,CAAC,IAAI,CAAC,CAAA;AAE1B,QAAA,OAAO,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;AACvC,KAAC,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,cAAc,GAAGA,iBAAW,CAChC,UACE,OAA2B,EAC3B,MAA2B,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;AAE3B,oBAAA,QAAQ,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAA;;;;oBAEvC,OAAM,CAAA,CAAA,YAAA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA,CAAA;;AAA5C,oBAAA,EAAA,CAAA,IAAA,EAA4C,CAAA;;;;AAE5C,oBAAA,WAAW,CAAC,UAAU,CAAC,OAAK,CAAC,CAAC,CAAA;oBAC9B,OAAO,CAAA,CAAA,YAAA,CAAA;AAEI,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;AAA7B,oBAAA,IAAI,GAAG,EAAsB,CAAA,IAAA,EAAA,CAAA;oBACnC,QAAQ,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAA,IAAA,EAAE,CAAC,CAAA;;;;AACjD,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,EAAE,WAAW,CAAC,CACtB,CAAA;IAED,IAAM,MAAM,GAAGA,iBAAW,CACxB,YAAA;;;;;oFAAO,IAAwB,EAAA;AAAxB,YAAA,IAAA,IAAA,KAAA,KAAA,CAAA,EAAA,EAAA,IAAwB,GAAA,EAAA,CAAA,EAAA;;;AAC7B,oBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA,CAAA;;AAAzB,wBAAA,EAAA,CAAA,IAAA,EAAyB,CAAA;wBACzB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE;AAC1C,4BAAA,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;yBAC9B;;;;;AACD,KAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,kBAAkB,GAAGA,iBAAW,CACpC,UAAO,IAAgC,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;AAEnC,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAA,CAAA;;AAArC,oBAAA,EAAA,CAAA,IAAA,EAAqC,CAAA;;;;;;;;;AAQrC,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,WAAW;;AACX,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;;;;;;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;;;;AAEL,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,sBAAsB,GAAGA,iBAAW;;AAExC,IAAA,UAAO,IAA8B,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;AAGzB,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA,CAAA;;oBAA3C,KAAK,GAAG,SAAmC,CAAA;;;;AAE3C,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;AAEvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,2BAA2B;;AAC3B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;AAEJ,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,KAAK,CAAC,CAAA;;;AACd,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,uBAAuB,GAAGA,iBAAW,CACzC,UACE,IAA+B,EAC/B,MAA2B,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;oBAIjB,OAAM,CAAA,CAAA,YAAA,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA,CAAA;;oBAApD,KAAK,GAAG,SAA4C,CAAA;;;;AAEpD,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;AAEvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,2BAA2B;;AAC3B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;AAEJ,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,KAAK,CAAC,CAAA;;;AACd,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,0BAA0B,GAAGA,iBAAW,CAC5C,UAAC,OAAsC,EAAA;AACrC,QAAA,OAAA,MAAM,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAA;AAA1C,KAA0C,EAC5C,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,gBAAgB,GAAGA,iBAAW,CAClC,YAAA,EAAM,OAAA,MAAM,CAAC,gBAAgB,EAAE,GAAA,EAC/B,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,4BAA4B,GAAGA,iBAAW,CAC9C,UACE,OAAmC,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;AAIjB,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAA,CAAA;;oBAAlE,aAAa,GAAG,SAAkD,CAAA;;;;AAElE,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;;;;;AAMvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,2BAA2B;;AAC3B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;;;;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;AAEJ,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,aAAa,CAAC,CAAA;;;AACtB,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,mBAAmB,GAAGA,iBAAW,CACrC,UAAC,OAAmC,EAAA;AAClC,QAAA,OAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;AAAnC,KAAmC,EACrC,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,aAAa,GAAGA,iBAAW,CAC/B,UACE,OAAmC,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;AAEnC,YAAA,OAAA,CAAA,CAAA,aAAO,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAA;;AAC9C,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,4BAA4B,CAAC,CAC/B,CAAA;AAED,IAAA,IAAM,sBAAsB,GAAGA,iBAAW,CACxC,UACE,GAAY,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;AAGH,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAA,CAAA;AAA/C,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,SAAwC,CAAC,CAAA;;;AAEhD,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;AAEvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,0BAA0B;;AAC1B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;;;;AAEL,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,YAAY,GAAGA,iBAAW,CAC9B,UAAC,EAAE,EAAA,EAAK,OAAA,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAvB,EAAuB,EAC/B,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,YAAY,GAAGA,iBAAW,CAC9B,UAAC,KAAK,EAAE,EAAE,EAAK,EAAA,OAAA,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA,EAAA,EAC7C,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,iBAAiB,GAAGA,iBAAW,CACnC,UAAC,MAAM,EAAA,EAAK,OAAA,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAhC,EAAgC,EAC5C,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,aAAa,GAAGA,iBAAW,CAC/B,UAAC,MAAM,EAAA,EAAK,OAAA,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAA5B,EAA4B,EACxC,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,gBAAgB,GAAGA,iBAAW,CAClC,YAAA,EAAM,OAAA,MAAM,CAAC,gBAAgB,EAAE,GAAA,EAC/B,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,GAAG,GAAGG,aAAO,CAAC,YAAA,EAAM,OAAA,MAAM,CAAC,GAAG,CAAA,EAAA,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;AAC/C,IAAA,IAAM,SAAS,GAAGA,aAAO,CAAC,YAAA,EAAM,OAAA,MAAM,CAAC,SAAS,CAAA,EAAA,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;AAE3D,IAAA,IAAM,aAAa,GAAGH,iBAAW,CAC/B,UAAO,OAA6B,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;oBAGhB,OAAM,CAAA,CAAA,YAAA,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA,CAAA;;oBAApD,aAAa,GAAG,SAAoC,CAAA;;;;AAEpD,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;AAEvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,2BAA2B;;AAC3B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;AAEJ,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,aAAa,CAAC,CAAA;;;AACtB,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;AAED,IAAA,IAAM,YAAY,GAAGA,iBAAW,CAC9B,UAAO,OAA6B,EAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;;;;;oBAGhB,OAAM,CAAA,CAAA,YAAA,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA,CAAA;;oBAAnD,aAAa,GAAG,SAAmC,CAAA;;;;AAEnD,oBAAA,MAAM,UAAU,CAAC,OAAK,CAAC,CAAA;;AAEvB,oBAAA,EAAA,GAAA,QAAQ,CAAA;;AACN,wBAAA,IAAI,EAAE,2BAA2B;;AAC3B,oBAAA,OAAA,CAAA,CAAA,YAAM,MAAM,CAAC,OAAO,EAAE,CAAA,CAAA;;oBAF9B,EAEE,CAAA,KAAA,CAAA,KAAA,CAAA,EAAA,EAAA,EAAA,CAAA,IAAI,GAAE,EAAsB,CAAA,IAAA,EAAA;iCAC5B,CAAA;;AAEJ,gBAAA,KAAA,CAAA,EAAA,OAAA,CAAA,CAAA,aAAO,aAAa,CAAC,CAAA;;;AACtB,KAAA,CAAA,CAAA,EAAA,EACD,CAAC,MAAM,CAAC,CACT,CAAA;IAED,IAAM,OAAO,GAAGG,aAAO,CACrB,YAAA,EAAM,QAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,EAAgC,EAAA,EACrF,CAAC,aAAa,EAAE,YAAY,CAAC,CAC9B,CAAA;IAED,IAAM,YAAY,GAAGA,aAAO,CAA+B,YAAA;AACzD,QAAA,OAAA,QAAA,CAAA,QAAA,CAAA,EAAA,EACK,KAAK,CAAA,EAAA,EACR,sBAAsB,EAAA,sBAAA,EACtB,uBAAuB,EAAA,uBAAA,EACvB,gBAAgB,EAAA,gBAAA,EAChB,4BAA4B,EAAA,4BAAA,EAC5B,mBAAmB,EAAA,mBAAA,EACnB,aAAa,EAAA,aAAA,EACb,iBAAiB,EAAA,iBAAA,EACjB,cAAc,EAAA,cAAA,EACd,0BAA0B,EAAA,0BAAA,EAC1B,MAAM,EAAA,MAAA,EACN,kBAAkB,EAAA,kBAAA,EAClB,sBAAsB,EAAA,sBAAA,EACtB,YAAY,EAAA,YAAA,EACZ,YAAY,EAAA,YAAA,EACZ,iBAAiB,EAAA,iBAAA,EACjB,aAAa,EAAA,aAAA,EACb,gBAAgB,EAAA,gBAAA,EAChB,GAAG,EAAA,GAAA,EACH,OAAO,EAAA,OAAA,EACP,SAAS,WAAA,EACT,CAAA,CAAA;AACJ,KAAC,EAAE;QACD,KAAK;QACL,sBAAsB;QACtB,uBAAuB;QACvB,gBAAgB;QAChB,4BAA4B;QAC5B,mBAAmB;QACnB,aAAa;QACb,iBAAiB;QACjB,cAAc;QACd,0BAA0B;QAC1B,MAAM;QACN,kBAAkB;QAClB,sBAAsB;QACtB,YAAY;QACZ,YAAY;QACZ,iBAAiB;QACjB,aAAa;QACb,gBAAgB;QAChB,GAAG;QACH,OAAO;QACP,SAAS;AACV,KAAA,CAAC,CAAA;IAEF,OAAO,KAAA,CAAA,aAAA,CAAC,OAAO,CAAC,QAAQ,EAAA,EAAC,KAAK,EAAE,YAAY,EAAA,EAAG,QAAQ,CAAoB,CAAA;AAC7E;;AC7fA;;;;;;;;;;;;;;;;;;;;;;;AAuBG;AACG,IAAA,QAAQ,GAAG,UACf,OAAsB,EAAA;AAAtB,IAAA,IAAA,OAAA,KAAA,KAAA,CAAA,EAAA,EAAA,OAAsB,GAAA,YAAA,CAAA,EAAA;IAEtB,OAAAC,gBAAU,CAAC,OAAO,CAAiC,CAAA;AAAnD;;ACrBF;;;;;;;;;;;;;;;;;AAiBG;AACH,IAAM,SAAS,GAAG,UAChB,SAA2B,EAC3B,OAAsB,EAAA;AAAtB,IAAA,IAAA,OAAA,KAAA,KAAA,CAAA,EAAA,EAAA,OAAsB,GAAA,YAAA,CAAA,EAAA;IAEtB,OAAO,SAAS,QAAQ,CAAC,KAAK,EAAA;QAC5B,QACE,KAAC,CAAA,aAAA,CAAA,OAAO,CAAC,QAAQ,QACd,UAAC,IAA2B,EAAwB,EAAA,QACnD,KAAA,CAAA,aAAA,CAAC,SAAS,EAAM,QAAA,CAAA,EAAA,EAAA,KAAW,EAAE,EAAA,KAAK,EAAE,IAAI,EAAI,CAAA,CAAA,EADO,EAEpD,CACgB,EACnB;AACJ,KAAC,CAAC;AACJ;;AClCA;;AAEG;AACH,IAAM,oBAAoB,GAAG,YAAA,EAAyB,OAAA,KAAK,CAAA,aAAA,CAAA,KAAA,CAAA,QAAA,EAAA,IAAA,CAAA,CAAA,EAAA,CAAC;AAE5D;;AAEE;AACF,IAAM,6BAA6B,GAAG,YAAA,EAAA,OAAA,SAAA,CAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA,EAAA,OAAA,WAAA,CAAA,IAAA,EAAA,UAAA,EAAA,EAAA;;SAAwC,CAAC;AAE/E;;AAEG;AACH,IAAM,eAAe,GAAG,YAAA;;;;;AAKtB,IAAA,IAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACjE,OAAO,EAAA,CAAA,MAAA,CAAG,QAAQ,CAAG,CAAA,MAAA,CAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAE,CAAC;AAChD,CAAC,CAAC;AAmEF;;;;;;;AAOG;AACH,IAAM,0BAA0B,GAAG,UACjC,SAA2B,EAC3B,OAA+C,EAAA;AAA/C,IAAA,IAAA,OAAA,KAAA,KAAA,CAAA,EAAA,EAAA,OAA+C,GAAA,EAAA,CAAA,EAAA;IAE/C,OAAO,SAAS,0BAA0B,CAAC,KAAQ,EAAA;QAA5C,IAqCN,KAAA,GAAA,IAAA,CAAA;AAnCG,QAAA,IAAA,KAKE,OAAO,CAAA,QALiB,EAA1B,QAAQ,GAAA,EAAA,KAAA,KAAA,CAAA,GAAG,eAAe,GAAA,EAAA,EAC1B,EAIE,GAAA,OAAO,cAJ2B,EAApC,aAAa,mBAAG,oBAAoB,GAAA,EAAA,EACpC,EAGE,GAAA,OAAO,CAH6C,sBAAA,EAAtD,sBAAsB,GAAG,EAAA,KAAA,KAAA,CAAA,GAAA,6BAA6B,KAAA,EACtD,YAAY,GAEV,OAAO,CAAA,YAFG,EACZ,EAAA,GACE,OAAO,CADa,OAAA,EAAtB,OAAO,GAAG,EAAA,KAAA,KAAA,CAAA,GAAA,YAAY,KAAA,CACZ;AAEN,QAAA,IAAA,EACJ,GAAA,QAAQ,CAAC,OAAO,CAAC,EADX,eAAe,GAAA,EAAA,CAAA,eAAA,EAAE,SAAS,GAAA,EAAA,CAAA,SAAA,EAAE,iBAAiB,uBAClC,CAAC;AAEpB,QAAAH,eAAS,CAAC,YAAA;AACR,YAAA,IAAI,SAAS,IAAI,eAAe,EAAE;gBAChC,OAAO;aACR;AACD,YAAA,IAAM,IAAI,GAAA,QAAA,CAAA,QAAA,CAAA,EAAA,EACL,YAAY,CAAA,EAAA,EACf,QAAQ,EAAA,QAAA,CAAA,QAAA,CAAA,EAAA,EACH,YAAY,KAAA,IAAA,IAAZ,YAAY,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAZ,YAAY,CAAE,QAAQ,CACzB,EAAA,EAAA,QAAQ,EAAE,OAAO,QAAQ,KAAK,UAAU,GAAG,QAAQ,EAAE,GAAG,QAAQ,MAEnE,CAAC;AACF,YAAA,KAAK,CAAC,YAAA,EAAA,OAAA,SAAA,CAAA,KAAA,EAAA,KAAA,CAAA,EAAA,KAAA,CAAA,EAAA,YAAA;;;gCACJ,OAAM,CAAA,CAAA,YAAA,sBAAsB,EAAE,CAAA,CAAA;;AAA9B,4BAAA,EAAA,CAAA,IAAA,EAA8B,CAAC;AAC/B,4BAAA,OAAA,CAAA,CAAA,YAAM,iBAAiB,CAAC,IAAI,CAAC,CAAA,CAAA;;AAA7B,4BAAA,EAAA,CAAA,IAAA,EAA6B,CAAC;;;;AAC/B,aAAA,CAAA,CAAA,EAAA,GAAG,CAAC;AACP,SAAC,EAAE;YACD,SAAS;YACT,eAAe;YACf,iBAAiB;YACjB,sBAAsB;YACtB,YAAY;YACZ,QAAQ;AACT,SAAA,CAAC,CAAC;AAEH,QAAA,OAAO,eAAe,GAAG,oBAAC,SAAS,EAAA,QAAA,CAAA,EAAA,EAAK,KAAK,CAAA,CAAI,GAAG,aAAa,EAAE,CAAC;AACtE,KAAC,CAAC;AACJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/auth0-react.esm.js

@@ -1,3 +1,4 @@
+'use client';
 import React, { createContext, useState, useReducer, useRef, useCallback, useEffect, useMemo, useContext } from 'react';
 import { Auth0Client, ResponseType } from '@auth0/auth0-spa-js';
 export { AuthenticationError, ConnectError, GenericError, InMemoryCache, InvalidConfigurationError, LocalStorageCache, MfaChallengeError, MfaEnrollmentError, MfaEnrollmentFactorsError, MfaError, MfaListAuthenticatorsError, MfaRequiredError, MfaVerifyError, MissingRefreshTokenError, MissingScopesError, MyAccountApiError, PasskeyChallengeError, PasskeyError, PasskeyGetTokenError, PasskeyRegisterError, PopupCancelledError, PopupOpenError, PopupTimeoutError, RefreshTokenMode, ResponseType, TimeoutError, UseDpopNonceError, User } from '@auth0/auth0-spa-js';
@@ -254,7 +255,7 @@ var toAuth0ClientOptions = function (opts) {
     deprecateRedirectUri(opts);
     return __assign(__assign({}, opts), { auth0Client: {
             name: 'auth0-react',
-            version: '2.22.1',
+            version: '2.23.0',
         } });
 };
 /**
@@ -275,6 +276,11 @@ var defaultOnRedirectCallback = function (appState) {
  * ```
  *
  * Provides the Auth0Context to its child components.
+ *
+ * The SDK is a client-only module (its published ESM and CommonJS bundles ship the
+ * `'use client'` directive), so in a Next.js App Router app you can import and render
+ * `Auth0Provider` directly from a Server Component such as `app/layout.tsx`.
+ * Components that call hooks like `useAuth0` must still be Client Components.
  */
 var Auth0Provider = function (opts) {
     var _a = opts, children = _a.children, skipRedirectCallback = _a.skipRedirectCallback, _b = _a.onRedirectCallback, onRedirectCallback = _b === void 0 ? defaultOnRedirectCallback : _b, _c = _a.context, context = _c === void 0 ? Auth0Context : _c, providedClient = _a.client, clientOpts = __rest(_a, ["children", "skipRedirectCallback", "onRedirectCallback", "context", "client"]);
@@ -712,7 +718,12 @@ var defaultOnBeforeAuthentication = function () { return __awaiter(void 0, void
  * @ignore
  */
 var defaultReturnTo = function () {
-    return "".concat(window.location.pathname).concat(window.location.search);
+    // Normalize the pathname to prevent protocol-relative open redirects.
+    // A URL like https://app.example.com//evil.com produces a pathname of
+    // //evil.com, which routers (react-router, next.js, gatsby) interpret as a
+    // protocol-relative URL and redirect the user to an external host.
+    var pathname = window.location.pathname.replace(/^\/\/+/, '/');
+    return "".concat(pathname).concat(window.location.search);
 };
 /**
  * ```js