authhero 0.259.0 → 0.261.0

package/dist/authhero.mjs

@@ -1480,7 +1480,7 @@ const It = o.object({
   email: o.string().optional(),
   login_count: o.number().default(0),
   identities: o.array(x1).optional()
-}), _n = c0, BK = du.extend({
+}), mn = c0, BK = du.extend({
   login_count: o.number(),
   multifactor: o.array(o.string()).optional(),
   last_ip: o.string().optional(),
@@ -1876,12 +1876,12 @@ const P1 = o.object({
   created_at: !0,
   updated_at: !0
 });
-var Ut = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(Ut || {}), an = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(an || {}), uu = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(uu || {});
+var Ht = /* @__PURE__ */ ((t) => (t.TOKEN = "token", t.TOKEN_ID_TOKEN = "token id_token", t.CODE = "code", t))(Ht || {}), vn = /* @__PURE__ */ ((t) => (t.QUERY = "query", t.FRAGMENT = "fragment", t.FORM_POST = "form_post", t.WEB_MESSAGE = "web_message", t.SAML_POST = "saml_post", t))(vn || {}), uu = /* @__PURE__ */ ((t) => (t.S256 = "S256", t.Plain = "plain", t))(uu || {});
 const As = o.object({
   client_id: o.string(),
   act_as: o.string().optional(),
-  response_type: o.nativeEnum(Ut).optional(),
-  response_mode: o.nativeEnum(an).optional(),
+  response_type: o.nativeEnum(Ht).optional(),
+  response_mode: o.nativeEnum(vn).optional(),
   redirect_uri: o.string().optional(),
   audience: o.string().optional(),
   organization: o.string().optional(),
@@ -4900,10 +4900,19 @@ function Uw(t) {
       tenant_id: e,
       email: n.email
     });
-    return r ? (await t.users.create(e, {
+    if (!r)
+      return t.users.create(e, n);
+    await t.users.create(e, {
       ...n,
       linked_to: r.user_id
-    }), r) : t.users.create(e, n);
+    });
+    const i = await t.users.get(
+      e,
+      r.user_id
+    );
+    if (!i)
+      throw new Error("Failed to fetch primary user after linking");
+    return i;
   };
 }
 function $e(t, e) {
@@ -7576,11 +7585,11 @@ async function M0(t, { user: e, client: n, loginSession: r }) {
     session_id: i.id
   }), i;
 }
-async function dn(t, e) {
+async function cn(t, e) {
   var m, y;
   const { authParams: n, client: r, ticketAuth: i } = e;
   let { user: s } = e;
-  const a = n.response_type || Ut.CODE, l = n.response_mode || an.QUERY;
+  const a = n.response_type || Ht.CODE, l = n.response_mode || vn.QUERY;
   if (i) {
     if (!e.loginSession)
       throw new te(500, {
@@ -7623,7 +7632,7 @@ async function dn(t, e) {
       loginSession: e.loginSession
     })).id;
   }
-  if (!c && ((y = n.scope) != null && y.split(" ").includes("offline_access")) && ![Ut.TOKEN, Ut.CODE].includes(
+  if (!c && ((y = n.scope) != null && y.split(" ").includes("offline_access")) && ![Ht.TOKEN, Ht.CODE].includes(
     a
   ) && !e.impersonatingUser && (c = (await D0(t, {
     user: s,
@@ -7631,7 +7640,7 @@ async function dn(t, e) {
     session_id: d,
     scope: n.scope,
     audience: n.audience
-  })).id), l === an.SAML_POST) {
+  })).id), l === vn.SAML_POST) {
     if (!d)
       throw new S(500, {
         message: "Session ID not available for SAML response"
@@ -7659,7 +7668,7 @@ async function dn(t, e) {
   });
   if (u instanceof Response)
     return u;
-  if (l === an.WEB_MESSAGE) {
+  if (l === vn.WEB_MESSAGE) {
     if (!n.redirect_uri)
       throw new te(400, {
         message: "Redirect URI not allowed for WEB_MESSAGE response mode."
@@ -7724,7 +7733,7 @@ async function dn(t, e) {
 async function I2(t, e) {
   var l, c, d, u, f, h;
   let { user: n } = e;
-  const r = e.responseType || Ut.TOKEN;
+  const r = e.responseType || Ht.TOKEN;
   if (n && e.organization && !(await t.env.data.userOrganizations.list(
     e.client.tenant.id,
     {
@@ -7805,7 +7814,7 @@ async function I2(t, e) {
       return m;
     n = m;
   }
-  if (r === Ut.CODE) {
+  if (r === Ht.CODE) {
     if (!n || !e.loginSession)
       throw new te(500, {
         message: "User and loginSession is required for code flow"
@@ -7857,7 +7866,7 @@ async function _u(t, e, n, r) {
     client: s,
     authParams: {
       client_id: cf,
-      response_type: Ut.TOKEN,
+      response_type: Ht.TOKEN,
       scope: n
     }
   });
@@ -8626,7 +8635,7 @@ function gt(t) {
     };
 }
 const ff = It.extend({
-  users: o.array(_n)
+  users: o.array(mn)
 }), H2 = It.extend({
   sessions: o.array(pu)
 }), K2 = It.extend({
@@ -8652,7 +8661,7 @@ const ff = It.extend({
         content: {
           "application/json": {
             schema: o.union([
-              o.array(_n),
+              o.array(mn),
               ff
             ])
           }
@@ -8682,7 +8691,7 @@ const ff = It.extend({
         throw new S(500, {
           message: "Primary account not found"
         });
-      return t.json([_n.parse(m)]);
+      return t.json([mn.parse(m)]);
     }
     const a = ["-_exists_:linked_to"];
     s && a.push(s);
@@ -8700,7 +8709,7 @@ const ff = It.extend({
         start: l.start,
         limit: l.limit
       })
-    ) : t.json(o.array(_n).parse(c));
+    ) : t.json(o.array(mn).parse(c));
   }
 ).openapi(
   I({
@@ -8724,7 +8733,7 @@ const ff = It.extend({
       200: {
         content: {
           "application/json": {
-            schema: _n
+            schema: mn
           }
         },
         description: "List of users"
@@ -8813,7 +8822,7 @@ const ff = It.extend({
       201: {
         content: {
           "application/json": {
-            schema: _n
+            schema: mn
           }
         },
         description: "Status"
@@ -8834,7 +8843,7 @@ const ff = It.extend({
       password: d
     } = e, u = e.user_id, f = u ? es(u) : wa(), h = `${e.provider}|${f}`;
     try {
-      const m = await t.env.data.users.create(t.var.tenant_id, {
+      const m = {
         email: n,
         user_id: h,
         name: i || n || r,
@@ -8846,36 +8855,40 @@ const ff = It.extend({
         last_ip: "",
         is_social: !1,
         last_login: (/* @__PURE__ */ new Date()).toISOString()
-      });
+      }, y = await t.env.data.users.create(
+        t.var.tenant_id,
+        m
+      );
       if (d) {
-        const b = {
-          user_id: m.user_id,
+        const E = {
+          user_id: h,
+          // Use the original user_id, not result.user_id
           password: await Qr.hash(d, 10),
           algorithm: "bcrypt"
         };
         await t.env.data.passwords.create(
           t.var.tenant_id,
-          b
+          E
         );
       }
-      t.set("user_id", m.user_id);
-      const y = $e(t, {
+      t.set("user_id", y.user_id);
+      const v = $e(t, {
         type: ve.SUCCESS_API_OPERATION,
         description: "User created"
       });
-      ke(t, t.env.data.logs.create(t.var.tenant_id, y));
-      const v = {
-        ...m,
+      ke(t, t.env.data.logs.create(t.var.tenant_id, v));
+      const b = y.identities ? y : {
+        ...y,
         identities: [
           {
-            connection: m.connection,
-            provider: m.provider,
-            user_id: es(m.user_id),
-            isSocial: m.is_social
+            connection: y.connection,
+            provider: y.provider,
+            user_id: es(y.user_id),
+            isSocial: y.is_social
           }
         ]
       };
-      return t.json(_n.parse(v), {
+      return t.json(mn.parse(b), {
         status: 201
       });
     } catch (m) {
@@ -9106,7 +9119,7 @@ const ff = It.extend({
       200: {
         content: {
           "application/json": {
-            schema: o.array(_n)
+            schema: o.array(mn)
           }
         },
         description: "Status"
@@ -9124,7 +9137,7 @@ const ff = It.extend({
     const i = await t.env.data.users.get(t.var.tenant_id, e);
     if (!i)
       throw new S(404);
-    return t.json([_n.parse(i)]);
+    return t.json([mn.parse(i)]);
   }
 ).openapi(
   I({
@@ -9957,9 +9970,9 @@ var hf;
                 var Fe = Un(Te);
                 if (!Fe)
                   return;
-                var zt = it(Fe);
-                if (zt.isProviderFor(se, be))
-                  return Ii(Te), zt;
+                var Ft = it(Fe);
+                if (Ft.isProviderFor(se, be))
+                  return Ii(Te), Ft;
               }
           }
         }
@@ -9982,8 +9995,8 @@ var hf;
         if (Fe !== Te) {
           if (!F(Fe))
             return !1;
-          var zt = ue.get(se);
-          F(zt) && (zt = new h(), ue.set(se, zt)), zt.set(be, Te);
+          var Ft = ue.get(se);
+          F(Ft) && (Ft = new h(), ue.set(se, Ft)), Ft.set(be, Te);
         }
         return !0;
       }
@@ -10063,13 +10076,13 @@ var hf;
         );
         if (F(be))
           return se;
-        for (var Te = be.keys(), Fe = rt(Te), zt = 0; ; ) {
+        for (var Te = be.keys(), Fe = rt(Te), Ft = 0; ; ) {
           var Rp = Un(Fe);
           if (!Rp)
-            return se.length = zt, se;
+            return se.length = Ft, se;
           var t1 = it(Rp);
           try {
-            se[zt] = t1;
+            se[Ft] = t1;
           } catch (n1) {
             try {
               Ii(Fe);
@@ -10077,7 +10090,7 @@ var hf;
               throw n1;
             }
           }
-          zt++;
+          Ft++;
         }
       }
       function X(ne, oe, se) {
@@ -10801,7 +10814,7 @@ class Sa {
   }
 }
 const Ri = [new Uint8Array([1])], mf = "0123456789", Bl = "name", _f = "valueHexView", tb = "isHexOnly", nb = "idBlock", rb = "tagClass", ib = "tagNumber", ob = "isConstructed", sb = "fromBER", ab = "toBER", lb = "local", St = "", Qt = new ArrayBuffer(0), Aa = new Uint8Array(0), ro = "EndOfContent", G0 = "OCTET STRING", W0 = "BIT STRING";
-function pn(t) {
+function un(t) {
   var e;
   return e = class extends t {
     get valueHex() {
@@ -10868,7 +10881,7 @@ class bt extends Cr {
   }
 }
 bt.NAME = "valueBlock";
-class J0 extends pn(Cr) {
+class J0 extends un(Cr) {
   constructor({ idBlock: e = {} } = {}) {
     var n, r, i, s;
     super(), e ? (this.isHexOnly = (n = e.isHexOnly) !== null && n !== void 0 ? n : !1, this.valueHexView = e.valueHex ? W.toUint8Array(e.valueHex) : Aa, this.tagClass = (r = e.tagClass) !== null && r !== void 0 ? r : -1, this.tagNumber = (i = e.tagNumber) !== null && i !== void 0 ? i : -1, this.isConstructed = (s = e.isConstructed) !== null && s !== void 0 ? s : !1) : (this.tagClass = -1, this.tagNumber = -1, this.isConstructed = !1);
@@ -11123,7 +11136,7 @@ class bu extends lt {
   }
 }
 bu.NAME = "BaseStringBlock";
-class Y0 extends pn(bt) {
+class Y0 extends un(bt) {
   constructor({ isHexOnly: e = !0, ...n } = {}) {
     super(n), this.isHexOnly = e;
   }
@@ -11417,7 +11430,7 @@ class hr extends lt {
 rm = hr;
 Q.Null = rm;
 hr.NAME = "NULL";
-class im extends pn(bt) {
+class im extends un(bt) {
   get value() {
     for (const e of this.valueHexView)
       if (e > 0)
@@ -11463,7 +11476,7 @@ let Ea = class extends lt {
 om = Ea;
 Q.Boolean = om;
 Ea.NAME = "BOOLEAN";
-class sm extends pn(qn) {
+class sm extends un(qn) {
   constructor({ isConstructed: e = !1, ...n } = {}) {
     super(n), this.isConstructed = e;
   }
@@ -11546,7 +11559,7 @@ let cr = class extends lt {
 ku = cr;
 Q.OctetString = ku;
 cr.NAME = G0;
-class am extends pn(qn) {
+class am extends un(qn) {
   constructor({ unusedBits: e = 0, isConstructed: n = !1, ...r } = {}) {
     super(r), this.unusedBits = e, this.isConstructed = n, this.blockLength = this.valueHexView.byteLength;
   }
@@ -11705,7 +11718,7 @@ function pb(t, e) {
       }
   return s.slice();
 }
-class xu extends pn(bt) {
+class xu extends un(bt) {
   setValueHex() {
     this.valueHexView.length >= 4 ? (this.warnings.push("Too big Integer for decoding, hex only"), this.isHexOnly = !0, this._valueDec = 0) : (this.isHexOnly = !1, this.valueHexView.length > 0 && (this._valueDec = K0.call(this)));
   }
@@ -11832,7 +11845,7 @@ class Na extends wi {
 dm = Na;
 Q.Enumerated = dm;
 Na.NAME = "ENUMERATED";
-class jc extends pn(bt) {
+class jc extends un(bt) {
   constructor({ valueDec: e = -1, isFirstSid: n = !1, ...r } = {}) {
     super(r), this.valueDec = e, this.isFirstSid = n;
   }
@@ -12007,7 +12020,7 @@ class Ca extends lt {
 pm = Ca;
 Q.ObjectIdentifier = pm;
 Ca.NAME = "OBJECT IDENTIFIER";
-class Ic extends pn(Cr) {
+class Ic extends un(Cr) {
   constructor({ valueDec: e = 0, ...n } = {}) {
     super(n), this.valueDec = e;
   }
@@ -12150,15 +12163,15 @@ gm = Kt;
 Q.Sequence = gm;
 Kt.NAME = "SEQUENCE";
 var mm;
-let ln = class extends vt {
+let an = class extends vt {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 17;
   }
 };
-mm = ln;
+mm = an;
 Q.Set = mm;
-ln.NAME = "SET";
-class _m extends pn(bt) {
+an.NAME = "SET";
+class _m extends un(bt) {
   constructor({ ...e } = {}) {
     super(e), this.isHexOnly = !0, this.value = St;
   }
@@ -12828,7 +12841,7 @@ const Fm = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   GeneralString: Ua,
   GeneralizedTime: Ma,
   GraphicString: La,
-  HexBlock: pn,
+  HexBlock: un,
   IA5String: Ba,
   Integer: wi,
   Null: hr,
@@ -12841,7 +12854,7 @@ const Fm = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   RelativeObjectIdentifier: Su,
   Repeated: Is,
   Sequence: Kt,
-  Set: ln,
+  Set: an,
   TIME: ju,
   TeletexString: Pa,
   TimeOfDay: Eu,
@@ -12961,13 +12974,13 @@ const gb = {
   fromASN: (t) => new Se(t.getValue()),
   toASN: (t) => t.toASN()
 };
-function Ft(t) {
+function Mt(t) {
   return {
     fromASN: (e) => e.valueBlock.value,
     toASN: (e) => new t({ value: e })
   };
 }
-const zm = Ft(jn), $b = Ft(ja), kb = Ft(Ia), xb = Ft(Oa), Sb = Ft(Ta), Ab = Ft(Pa), Eb = Ft(Ra), Nb = Ft(Ba), Cb = Ft(La), jb = Ft(So), Ib = Ft(Ua), Ob = Ft(Da), Tb = {
+const zm = Mt(jn), $b = Mt(ja), kb = Mt(Ia), xb = Mt(Oa), Sb = Mt(Ta), Ab = Mt(Pa), Eb = Mt(Ra), Nb = Mt(Ba), Cb = Mt(La), jb = Mt(So), Ib = Mt(Ua), Ob = Mt(Da), Tb = {
   fromASN: (t) => t.toDate(),
   toASN: (t) => new Ao({ valueDate: t })
 }, Pb = {
@@ -13027,8 +13040,8 @@ function Wi(t) {
       return null;
   }
 }
-function vn(t) {
-  return typeof t == "function" && t.prototype ? t.prototype.toASN && t.prototype.fromASN ? !0 : vn(t.prototype) : !!(t && typeof t == "object" && "toASN" in t && "fromASN" in t);
+function wn(t) {
+  return typeof t == "function" && t.prototype ? t.prototype.toASN && t.prototype.fromASN ? !0 : wn(t.prototype) : !!(t && typeof t == "object" && "toASN" in t && "fromASN" in t);
 }
 function qm(t) {
   var e;
@@ -13080,11 +13093,11 @@ class Lb {
         if (!f)
           throw new Error(`Cannot get ASN1 class by name '${u}'`);
         c = new f({ name: l });
-      } else vn(a.type) ? c = new a.type().toSchema(l) : a.optional ? this.get(a.type).type === U.Choice ? c = new gr({ name: l }) : (c = this.create(a.type, !1), c.name = l) : c = new gr({ name: l });
+      } else wn(a.type) ? c = new a.type().toSchema(l) : a.optional ? this.get(a.type).type === U.Choice ? c = new gr({ name: l }) : (c = this.create(a.type, !1), c.name = l) : c = new gr({ name: l });
       const d = !!a.optional || a.defaultValue !== void 0;
       if (a.repeated) {
         c.name = "";
-        const u = a.repeated === "set" ? ln : Kt;
+        const u = a.repeated === "set" ? an : Kt;
         c = new u({
           name: "",
           value: [new Is({ name: l, value: c })]
@@ -13092,7 +13105,7 @@ class Lb {
       }
       if (a.context !== null && a.context !== void 0)
         if (a.implicit)
-          if (typeof a.type == "number" || vn(a.type)) {
+          if (typeof a.type == "number" || wn(a.type)) {
             const u = a.repeated ? vt : xo;
             i.push(new u({ name: l, optional: d, idBlock: { tagClass: 3, tagNumber: a.context } }));
           } else {
@@ -13119,7 +13132,7 @@ class Lb {
       case U.Sequence:
         return new Kt({ value: i, name: "" });
       case U.Set:
-        return new ln({ value: i, name: "" });
+        return new an({ value: i, name: "" });
       case U.Choice:
         return new Iu({ value: i, name: "" });
       default:
@@ -13163,7 +13176,7 @@ class Ub {
   }
   static fromASN(e, n) {
     try {
-      if (vn(n))
+      if (wn(n))
         return new n().fromASN(e);
       const r = Ze.get(n);
       Ze.cache(n);
@@ -13311,19 +13324,19 @@ class Ub {
       if (!s)
         continue;
       const a = e.items[i], l = a.type;
-      typeof l == "number" || vn(l) ? r[i] = this.processPrimitiveSchemaItem(s, a, l) : r[i] = this.processComplexSchemaItem(s, a, l);
+      typeof l == "number" || wn(l) ? r[i] = this.processPrimitiveSchemaItem(s, a, l) : r[i] = this.processComplexSchemaItem(s, a, l);
     }
   }
   static processPrimitiveSchemaItem(e, n, r) {
     var i;
-    const s = (i = n.converter) !== null && i !== void 0 ? i : vn(r) ? new r() : null;
+    const s = (i = n.converter) !== null && i !== void 0 ? i : wn(r) ? new r() : null;
     if (!s)
       throw new Error("Converter is empty");
     return n.repeated ? this.processRepeatedPrimitiveItem(e, n, s) : this.processSinglePrimitiveItem(e, n, r, s);
   }
   static processRepeatedPrimitiveItem(e, n, r) {
     if (n.implicit) {
-      const i = n.repeated === "sequence" ? Kt : ln, s = new i();
+      const i = n.repeated === "sequence" ? Kt : an, s = new i();
       s.valueBlock = e.valueBlock;
       const a = Wr(s.toBER(!1));
       if (a.offset === -1)
@@ -13339,7 +13352,7 @@ class Ub {
     let s = e;
     if (n.implicit) {
       let a;
-      if (vn(r))
+      if (wn(r))
         a = new r().toSchema("");
       else {
         const l = x[r], c = Fm[l];
@@ -13378,7 +13391,7 @@ class Ub {
         if ("value" in e.valueBlock && Array.isArray(e.valueBlock.value) && "value" in s.valueBlock)
           return s.valueBlock.value = e.valueBlock.value, s;
       } else if (i.type === U.Set) {
-        const s = new ln();
+        const s = new an();
         if ("value" in e.valueBlock && Array.isArray(e.valueBlock.value) && "value" in s.valueBlock)
           return s.valueBlock.value = e.valueBlock.value, s;
       }
@@ -13391,7 +13404,7 @@ class Ou {
     return e instanceof lt ? e.toBER(!1) : this.toASN(e).toBER(!1);
   }
   static toASN(e) {
-    if (e && typeof e == "object" && vn(e))
+    if (e && typeof e == "object" && wn(e))
       return e.toASN();
     if (!(e && typeof e == "object"))
       throw new TypeError("Parameter 1 should be type of Object.");
@@ -13416,7 +13429,7 @@ class Ou {
         const d = Ou.toAsnItem(l, a, n, c);
         if (typeof l.context == "number")
           if (l.implicit)
-            if (!l.repeated && (typeof l.type == "number" || vn(l.type))) {
+            if (!l.repeated && (typeof l.type == "number" || wn(l.type))) {
               const u = {};
               u.valueHex = d instanceof hr ? d.valueBeforeDecodeView : d.valueBlock.toBER(), i.push(new xo({
                 optional: l.optional,
@@ -13452,7 +13465,7 @@ class Ou {
         s = new Kt({ value: i });
         break;
       case U.Set:
-        s = new ln({ value: i });
+        s = new an({ value: i });
         break;
       case U.Choice:
         if (!i[0])
@@ -13471,7 +13484,7 @@ class Ou {
       if (e.repeated) {
         if (!Array.isArray(i))
           throw new TypeError("Parameter 'objProp' should be type of Array.");
-        const l = Array.from(i, (d) => a.toASN(d)), c = e.repeated === "sequence" ? Kt : ln;
+        const l = Array.from(i, (d) => a.toASN(d)), c = e.repeated === "sequence" ? Kt : an;
         s = new c({
           value: l
         });
@@ -13480,7 +13493,7 @@ class Ou {
     } else if (e.repeated) {
       if (!Array.isArray(i))
         throw new TypeError("Parameter 'objProp' should be type of Array.");
-      const a = Array.from(i, (c) => this.toASN(c)), l = e.repeated === "sequence" ? Kt : ln;
+      const a = Array.from(i, (c) => this.toASN(c)), l = e.repeated === "sequence" ? Kt : an;
       s = new l({
         value: a
       });
@@ -13952,14 +13965,14 @@ Sf = g([
 ], Sf);
 var zc;
 const qc = `${In}.31`;
-var qt;
+var zt;
 (function(t) {
   t[t.unused = 1] = "unused", t[t.keyCompromise = 2] = "keyCompromise", t[t.cACompromise = 4] = "cACompromise", t[t.affiliationChanged = 8] = "affiliationChanged", t[t.superseded = 16] = "superseded", t[t.cessationOfOperation = 32] = "cessationOfOperation", t[t.certificateHold = 64] = "certificateHold", t[t.privilegeWithdrawn = 128] = "privilegeWithdrawn", t[t.aACompromise = 256] = "aACompromise";
-})(qt || (qt = {}));
+})(zt || (zt = {}));
 class Km extends Fa {
   toJSON() {
     const e = [], n = this.toNumber();
-    return n & qt.aACompromise && e.push("aACompromise"), n & qt.affiliationChanged && e.push("affiliationChanged"), n & qt.cACompromise && e.push("cACompromise"), n & qt.certificateHold && e.push("certificateHold"), n & qt.cessationOfOperation && e.push("cessationOfOperation"), n & qt.keyCompromise && e.push("keyCompromise"), n & qt.privilegeWithdrawn && e.push("privilegeWithdrawn"), n & qt.superseded && e.push("superseded"), n & qt.unused && e.push("unused"), e;
+    return n & zt.aACompromise && e.push("aACompromise"), n & zt.affiliationChanged && e.push("affiliationChanged"), n & zt.cACompromise && e.push("cACompromise"), n & zt.certificateHold && e.push("certificateHold"), n & zt.cessationOfOperation && e.push("cessationOfOperation"), n & zt.keyCompromise && e.push("keyCompromise"), n & zt.privilegeWithdrawn && e.push("privilegeWithdrawn"), n & zt.superseded && e.push("superseded"), n & zt.unused && e.push("unused"), e;
   }
   toString() {
     return `[${this.toJSON().join(", ")}]`;
@@ -14119,14 +14132,14 @@ Ef = Jc = g([
   z({ type: U.Sequence })
 ], Ef);
 const Jm = `${In}.15`;
-var Vt;
+var qt;
 (function(t) {
   t[t.digitalSignature = 1] = "digitalSignature", t[t.nonRepudiation = 2] = "nonRepudiation", t[t.keyEncipherment = 4] = "keyEncipherment", t[t.dataEncipherment = 8] = "dataEncipherment", t[t.keyAgreement = 16] = "keyAgreement", t[t.keyCertSign = 32] = "keyCertSign", t[t.cRLSign = 64] = "cRLSign", t[t.encipherOnly = 128] = "encipherOnly", t[t.decipherOnly = 256] = "decipherOnly";
-})(Vt || (Vt = {}));
+})(qt || (qt = {}));
 class Ll extends Fa {
   toJSON() {
     const e = this.toNumber(), n = [];
-    return e & Vt.cRLSign && n.push("crlSign"), e & Vt.dataEncipherment && n.push("dataEncipherment"), e & Vt.decipherOnly && n.push("decipherOnly"), e & Vt.digitalSignature && n.push("digitalSignature"), e & Vt.encipherOnly && n.push("encipherOnly"), e & Vt.keyAgreement && n.push("keyAgreement"), e & Vt.keyCertSign && n.push("keyCertSign"), e & Vt.keyEncipherment && n.push("keyEncipherment"), e & Vt.nonRepudiation && n.push("nonRepudiation"), n;
+    return e & qt.cRLSign && n.push("crlSign"), e & qt.dataEncipherment && n.push("dataEncipherment"), e & qt.decipherOnly && n.push("decipherOnly"), e & qt.digitalSignature && n.push("digitalSignature"), e & qt.encipherOnly && n.push("encipherOnly"), e & qt.keyAgreement && n.push("keyAgreement"), e & qt.keyCertSign && n.push("keyCertSign"), e & qt.keyEncipherment && n.push("keyEncipherment"), e & qt.nonRepudiation && n.push("nonRepudiation"), n;
   }
   toString() {
     return `[${this.toJSON().join(", ")}]`;
@@ -14305,17 +14318,17 @@ g([
     optional: !0
   })
 ], Z.prototype, "parameters", void 0);
-class Ht {
+class Vt {
   constructor(e = {}) {
     this.algorithm = new Z(), this.subjectPublicKey = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 g([
   _({ type: Z })
-], Ht.prototype, "algorithm", void 0);
+], Vt.prototype, "algorithm", void 0);
 g([
   _({ type: x.BitString })
-], Ht.prototype, "subjectPublicKey", void 0);
+], Vt.prototype, "subjectPublicKey", void 0);
 let st = class {
   constructor(e) {
     if (e)
@@ -14357,31 +14370,31 @@ g([
   _({ type: st })
 ], No.prototype, "notAfter", void 0);
 var nd;
-let Dt = class r_ {
+let Ut = class r_ {
   constructor(e = {}) {
     this.extnID = "", this.critical = r_.CRITICAL, this.extnValue = new Se(), Object.assign(this, e);
   }
 };
-Dt.CRITICAL = !1;
+Ut.CRITICAL = !1;
 g([
   _({ type: x.ObjectIdentifier })
-], Dt.prototype, "extnID", void 0);
+], Ut.prototype, "extnID", void 0);
 g([
   _({
     type: x.Boolean,
-    defaultValue: Dt.CRITICAL
+    defaultValue: Ut.CRITICAL
   })
-], Dt.prototype, "critical", void 0);
+], Ut.prototype, "critical", void 0);
 g([
   _({ type: Se })
-], Dt.prototype, "extnValue", void 0);
+], Ut.prototype, "extnValue", void 0);
 let Gn = nd = class extends Ne {
   constructor(e) {
     super(e), Object.setPrototypeOf(this, nd.prototype);
   }
 };
 Gn = nd = g([
-  z({ type: U.Sequence, itemType: Dt })
+  z({ type: U.Sequence, itemType: Ut })
 ], Gn);
 var _r;
 (function(t) {
@@ -14389,7 +14402,7 @@ var _r;
 })(_r || (_r = {}));
 class Tt {
   constructor(e = {}) {
-    this.version = _r.v1, this.serialNumber = new ArrayBuffer(0), this.signature = new Z(), this.issuer = new He(), this.validity = new No(), this.subject = new He(), this.subjectPublicKeyInfo = new Ht(), Object.assign(this, e);
+    this.version = _r.v1, this.serialNumber = new ArrayBuffer(0), this.signature = new Z(), this.issuer = new He(), this.validity = new No(), this.subject = new He(), this.subjectPublicKeyInfo = new Vt(), Object.assign(this, e);
   }
 }
 g([
@@ -14418,7 +14431,7 @@ g([
   _({ type: He })
 ], Tt.prototype, "subject", void 0);
 g([
-  _({ type: Ht })
+  _({ type: Vt })
 ], Tt.prototype, "subjectPublicKeyInfo", void 0);
 g([
   _({
@@ -14460,7 +14473,7 @@ g([
   _({ type: st })
 ], Ka.prototype, "revocationDate", void 0);
 g([
-  _({ type: Dt, optional: !0, repeated: "sequence" })
+  _({ type: Ut, optional: !0, repeated: "sequence" })
 ], Ka.prototype, "crlEntryExtensions", void 0);
 class On {
   constructor(e = {}) {
@@ -14486,7 +14499,7 @@ g([
   _({ type: Ka, repeated: "sequence", optional: !0 })
 ], On.prototype, "revokedCertificates", void 0);
 g([
-  _({ type: Dt, optional: !0, context: 0, repeated: "sequence" })
+  _({ type: Ut, optional: !0, context: 0, repeated: "sequence" })
 ], On.prototype, "crlExtensions", void 0);
 class Mu {
   constructor(e = {}) {
@@ -14541,11 +14554,11 @@ let Ds = class extends Z {
 Ds = g([
   z({ type: U.Sequence })
 ], Ds);
-let un = class extends Z {
+let dn = class extends Z {
 };
-un = g([
+dn = g([
   z({ type: U.Sequence })
-], un);
+], dn);
 let Ms = class extends Z {
 };
 Ms = g([
@@ -14573,46 +14586,46 @@ g([
   _({ type: x.Any, repeated: "set" })
 ], ki.prototype, "attrValues", void 0);
 var id;
-class fn {
+class pn {
   constructor(e = {}) {
     this.version = kn.v0, this.sid = new oi(), this.digestAlgorithm = new oo(), this.signatureAlgorithm = new Ds(), this.signature = new Se(), Object.assign(this, e);
   }
 }
 g([
   _({ type: x.Integer })
-], fn.prototype, "version", void 0);
+], pn.prototype, "version", void 0);
 g([
   _({ type: oi })
-], fn.prototype, "sid", void 0);
+], pn.prototype, "sid", void 0);
 g([
   _({ type: oo })
-], fn.prototype, "digestAlgorithm", void 0);
+], pn.prototype, "digestAlgorithm", void 0);
 g([
   _({ type: ki, repeated: "set", context: 0, implicit: !0, optional: !0 })
-], fn.prototype, "signedAttrs", void 0);
+], pn.prototype, "signedAttrs", void 0);
 g([
   _({ type: Ds })
-], fn.prototype, "signatureAlgorithm", void 0);
+], pn.prototype, "signatureAlgorithm", void 0);
 g([
   _({ type: Se })
-], fn.prototype, "signature", void 0);
+], pn.prototype, "signature", void 0);
 g([
   _({ type: ki, repeated: "set", context: 1, implicit: !0, optional: !0 })
-], fn.prototype, "unsignedAttrs", void 0);
+], pn.prototype, "unsignedAttrs", void 0);
 let Fs = id = class extends Ne {
   constructor(e) {
     super(e), Object.setPrototypeOf(this, id.prototype);
   }
 };
 Fs = id = g([
-  z({ type: U.Set, itemType: fn })
+  z({ type: U.Set, itemType: pn })
 ], Fs);
 let Of = class extends st {
 };
 Of = g([
   z({ type: U.Choice })
 ], Of);
-let Tf = class extends fn {
+let Tf = class extends pn {
 };
 Tf = g([
   z({ type: U.Sequence })
@@ -15122,7 +15135,7 @@ wr = g([
 ], wr);
 class Si {
   constructor(e = {}) {
-    this.version = kn.v3, this.originator = new wr(), this.keyEncryptionAlgorithm = new un(), this.recipientEncryptedKeys = new Hs(), Object.assign(this, e);
+    this.version = kn.v3, this.originator = new wr(), this.keyEncryptionAlgorithm = new dn(), this.recipientEncryptedKeys = new Hs(), Object.assign(this, e);
   }
 }
 g([
@@ -15135,7 +15148,7 @@ g([
   _({ type: Se, context: 1, optional: !0 })
 ], Si.prototype, "ukm", void 0);
 g([
-  _({ type: un })
+  _({ type: dn })
 ], Si.prototype, "keyEncryptionAlgorithm", void 0);
 g([
   _({ type: Hs })
@@ -15156,7 +15169,7 @@ di = g([
 ], di);
 class Io {
   constructor(e = {}) {
-    this.version = kn.v0, this.rid = new di(), this.keyEncryptionAlgorithm = new un(), this.encryptedKey = new Se(), Object.assign(this, e);
+    this.version = kn.v0, this.rid = new di(), this.keyEncryptionAlgorithm = new dn(), this.encryptedKey = new Se(), Object.assign(this, e);
   }
 }
 g([
@@ -15166,7 +15179,7 @@ g([
   _({ type: di })
 ], Io.prototype, "rid", void 0);
 g([
-  _({ type: un })
+  _({ type: dn })
 ], Io.prototype, "keyEncryptionAlgorithm", void 0);
 g([
   _({ type: Se })
@@ -15187,7 +15200,7 @@ g([
 ], Oo.prototype, "other", void 0);
 class To {
   constructor(e = {}) {
-    this.version = kn.v4, this.kekid = new Oo(), this.keyEncryptionAlgorithm = new un(), this.encryptedKey = new Se(), Object.assign(this, e);
+    this.version = kn.v4, this.kekid = new Oo(), this.keyEncryptionAlgorithm = new dn(), this.encryptedKey = new Se(), Object.assign(this, e);
   }
 }
 g([
@@ -15197,14 +15210,14 @@ g([
   _({ type: Oo })
 ], To.prototype, "kekid", void 0);
 g([
-  _({ type: un })
+  _({ type: dn })
 ], To.prototype, "keyEncryptionAlgorithm", void 0);
 g([
   _({ type: Se })
 ], To.prototype, "encryptedKey", void 0);
 class Po {
   constructor(e = {}) {
-    this.version = kn.v0, this.keyEncryptionAlgorithm = new un(), this.encryptedKey = new Se(), Object.assign(this, e);
+    this.version = kn.v0, this.keyEncryptionAlgorithm = new dn(), this.encryptedKey = new Se(), Object.assign(this, e);
   }
 }
 g([
@@ -15214,7 +15227,7 @@ g([
   _({ type: rd, context: 0, optional: !0 })
 ], Po.prototype, "keyDerivationAlgorithm", void 0);
 g([
-  _({ type: un })
+  _({ type: dn })
 ], Po.prototype, "keyEncryptionAlgorithm", void 0);
 g([
   _({ type: Se })
@@ -15611,41 +15624,41 @@ let $d = bd = class extends Ne {
 $d = bd = g([
   z({ type: U.Sequence, itemType: al })
 ], $d);
-class hn {
+class fn {
   constructor(e = {}) {
     this.version = 0, this.modulus = new ArrayBuffer(0), this.publicExponent = new ArrayBuffer(0), this.privateExponent = new ArrayBuffer(0), this.prime1 = new ArrayBuffer(0), this.prime2 = new ArrayBuffer(0), this.exponent1 = new ArrayBuffer(0), this.exponent2 = new ArrayBuffer(0), this.coefficient = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 g([
   _({ type: x.Integer })
-], hn.prototype, "version", void 0);
+], fn.prototype, "version", void 0);
 g([
   _({ type: x.Integer, converter: Pe })
-], hn.prototype, "modulus", void 0);
+], fn.prototype, "modulus", void 0);
 g([
   _({ type: x.Integer, converter: Pe })
-], hn.prototype, "publicExponent", void 0);
+], fn.prototype, "publicExponent", void 0);
 g([
   _({ type: x.Integer, converter: Pe })
-], hn.prototype, "privateExponent", void 0);
+], fn.prototype, "privateExponent", void 0);
 g([
   _({ type: x.Integer, converter: Pe })
-], hn.prototype, "prime1", void 0);
+], fn.prototype, "prime1", void 0);
 g([
   _({ type: x.Integer, converter: Pe })
-], hn.prototype, "prime2", void 0);
+], fn.prototype, "prime2", void 0);
 g([
   _({ type: x.Integer, converter: Pe })
-], hn.prototype, "exponent1", void 0);
+], fn.prototype, "exponent1", void 0);
 g([
   _({ type: x.Integer, converter: Pe })
-], hn.prototype, "exponent2", void 0);
+], fn.prototype, "exponent2", void 0);
 g([
   _({ type: x.Integer, converter: Pe })
-], hn.prototype, "coefficient", void 0);
+], fn.prototype, "coefficient", void 0);
 g([
   _({ type: $d, optional: !0 })
-], hn.prototype, "otherPrimeInfos", void 0);
+], fn.prototype, "otherPrimeInfos", void 0);
 class ep {
   constructor(e = {}) {
     this.modulus = new ArrayBuffer(0), this.publicExponent = new ArrayBuffer(0), Object.assign(this, e);
@@ -16505,7 +16518,7 @@ g([
 Dd = g([
   z({ type: U.Choice })
 ], Dd);
-let Qf = class extends fn {
+let Qf = class extends pn {
 };
 Qf = g([
   z({ type: U.Sequence })
@@ -16569,7 +16582,7 @@ la = zd = g([
 ], la);
 class Ei {
   constructor(e = {}) {
-    this.version = 0, this.subject = new He(), this.subjectPKInfo = new Ht(), this.attributes = new la(), Object.assign(this, e);
+    this.version = 0, this.subject = new He(), this.subjectPKInfo = new Vt(), this.attributes = new la(), Object.assign(this, e);
   }
 }
 g([
@@ -16579,7 +16592,7 @@ g([
   _({ type: He })
 ], Ei.prototype, "subject", void 0);
 g([
-  _({ type: Ht })
+  _({ type: Vt })
 ], Ei.prototype, "subjectPKInfo", void 0);
 g([
   _({ type: la, implicit: !0, context: 0 })
@@ -16962,11 +16975,11 @@ Qn.NAME = "ASN";
 class Pt extends Qn {
   constructor(...e) {
     let n;
-    W.isBufferSource(e[0]) ? n = W.toArrayBuffer(e[0]) : n = H.serialize(new Dt({
+    W.isBufferSource(e[0]) ? n = W.toArrayBuffer(e[0]) : n = H.serialize(new Ut({
       extnID: e[0],
       critical: e[1],
       extnValue: new Se(W.toArrayBuffer(e[2]))
-    })), super(n, Dt);
+    })), super(n, Ut);
   }
   onInit(e) {
     this.type = e.extnID, this.critical = e.critical, this.value = e.extnValue.buffer;
@@ -17497,13 +17510,13 @@ class Gt extends Sn {
     }
   }
   constructor(e) {
-    Sn.isAsnEncoded(e) ? super(e, Ht) : super(e), this.tag = jt.PublicKeyTag;
+    Sn.isAsnEncoded(e) ? super(e, Vt) : super(e), this.tag = jt.PublicKeyTag;
   }
   async export(...e) {
     let n, r = ["verify"], i = { hash: "SHA-256", ...this.algorithm };
     e.length > 1 ? (i = e[0] || i, r = e[1] || r, n = e[2] || ot.get()) : n = e[0] || ot.get();
     let s = this.rawData;
-    const a = H.parse(this.rawData, Ht);
+    const a = H.parse(this.rawData, Vt);
     return a.algorithm.algorithm === Zi && (s = U3(a, s)), n.subtle.importKey("spki", s, i, !0, r);
   }
   onInit(e) {
@@ -17524,11 +17537,11 @@ class Gt extends Sn {
   async getKeyIdentifier(...e) {
     let n, r = "SHA-1";
     e.length === 1 ? typeof e[0] == "string" ? (r = e[0], n = ot.get()) : n = e[0] : e.length === 2 ? (r = e[0], n = e[1]) : n = ot.get();
-    const i = H.parse(this.rawData, Ht);
+    const i = H.parse(this.rawData, Vt);
     return await n.subtle.digest(r, i.subjectPublicKey);
   }
   toTextObject() {
-    const e = this.toTextObjectEmpty(), n = H.parse(this.rawData, Ht);
+    const e = this.toTextObjectEmpty(), n = H.parse(this.rawData, Vt);
     switch (e.Algorithm = xr.serializeAlgorithm(n.algorithm), n.algorithm.algorithm) {
       case lo:
         e["EC Point"] = n.subjectPublicKey;
@@ -17878,7 +17891,7 @@ class ap extends Ni {
     else {
       const r = e[0], i = new Gn();
       for (const s of r)
-        i.push(H.parse(s.rawData, Dt));
+        i.push(H.parse(s.rawData, Ut));
       super(rp, [H.serialize(i)]);
     }
     (n = this.items) !== null && n !== void 0 || (this.items = []);
@@ -18312,8 +18325,8 @@ class F3 {
           notBefore: a,
           notAfter: l
         }),
-        extensions: new Gn(((r = e.extensions) === null || r === void 0 ? void 0 : r.map((b) => H.parse(b.rawData, Dt))) || []),
-        subjectPublicKeyInfo: H.parse(i, Ht)
+        extensions: new Gn(((r = e.extensions) === null || r === void 0 ? void 0 : r.map((b) => H.parse(b.rawData, Ut))) || []),
+        subjectPublicKeyInfo: H.parse(i, Vt)
       })
     });
     if (e.subject) {
@@ -24721,7 +24734,7 @@ async function sg(t, { code: e, state: n }) {
     isSocial: !0,
     ip: t.var.ip
   });
-  return dn(t, {
+  return cn(t, {
     client: a,
     authParams: s.authParams,
     loginSession: s,
@@ -25364,7 +25377,7 @@ async function Ik(t, e) {
       state: r.state,
       nonce: r.nonce,
       // Ensure WEB_MESSAGE is explicitly passed, as createAuthResponse relies on it
-      response_mode: an.WEB_MESSAGE,
+      response_mode: vn.WEB_MESSAGE,
       // Pass through other relevant authParams from the loginSession or original request if necessary
       // For authorization_code grant, these are usually fixed or derived, not directly from params
       client_id: n.client_id,
@@ -25431,7 +25444,7 @@ async function Tk(t, e) {
       client_id: n.client_id,
       audience: s == null ? void 0 : s.audience,
       scope: s == null ? void 0 : s.scopes,
-      response_mode: an.WEB_MESSAGE
+      response_mode: vn.WEB_MESSAGE
     }
   };
 }
@@ -26567,7 +26580,7 @@ function wo(t) {
     return n.__proto__ || Object.getPrototypeOf(n);
   }, wo(t);
 }
-var yn = /* @__PURE__ */ function(t) {
+var _n = /* @__PURE__ */ function(t) {
   V5(n, t);
   var e = H5(n);
   function n(r) {
@@ -26769,7 +26782,7 @@ function h6(t) {
 function g6(t, e) {
   var n = e.extractFormattedPhoneNumber, r = f6(t);
   if (!h6(r))
-    throw new yn("NOT_A_NUMBER");
+    throw new _n("NOT_A_NUMBER");
   var i;
   if (r === null)
     i = n(t) || "";
@@ -26787,27 +26800,27 @@ function g6(t, e) {
 var m6 = 250, _6 = new RegExp("[" + bp + Zt + "]"), y6 = new RegExp("[^" + Zt + "#]+$");
 function w6(t, e, n) {
   if (e = e || {}, n = new $t(n), e.defaultCountry && !n.hasCountry(e.defaultCountry))
-    throw e.v2 ? new yn("INVALID_COUNTRY") : new Error("Unknown country: ".concat(e.defaultCountry));
+    throw e.v2 ? new _n("INVALID_COUNTRY") : new Error("Unknown country: ".concat(e.defaultCountry));
   var r = b6(t, e.v2, e.extract), i = r.number, s = r.ext, a = r.error;
   if (!i) {
     if (e.v2)
-      throw a === "TOO_SHORT" ? new yn("TOO_SHORT") : new yn("NOT_A_NUMBER");
+      throw a === "TOO_SHORT" ? new _n("TOO_SHORT") : new _n("NOT_A_NUMBER");
     return {};
   }
   var l = k6(i, e.defaultCountry, e.defaultCallingCode, n), c = l.country, d = l.nationalNumber, u = l.countryCallingCode, f = l.countryCallingCodeSource, h = l.carrierCode;
   if (!n.hasSelectedNumberingPlan()) {
     if (e.v2)
-      throw new yn("INVALID_COUNTRY");
+      throw new _n("INVALID_COUNTRY");
     return {};
   }
   if (!d || d.length < vp) {
     if (e.v2)
-      throw new yn("TOO_SHORT");
+      throw new _n("TOO_SHORT");
     return {};
   }
   if (d.length > e5) {
     if (e.v2)
-      throw new yn("TOO_LONG");
+      throw new _n("TOO_LONG");
     return {};
   }
   if (e.v2) {
@@ -26829,7 +26842,7 @@ function v6(t, e, n) {
   if (t) {
     if (t.length > m6) {
       if (n)
-        throw new yn("TOO_LONG");
+        throw new _n("TOO_LONG");
       return;
     }
     if (e === !1)
@@ -27033,7 +27046,7 @@ function R6(t, e, n) {
   try {
     return S6(t, e, n);
   } catch (r) {
-    if (!(r instanceof yn)) throw r;
+    if (!(r instanceof _n)) throw r;
   }
 }
 function B6() {
@@ -27209,7 +27222,7 @@ async function Ey(t, {
 }
 async function kp(t, e) {
   const n = await Ey(t, e);
-  return dn(t, {
+  return cn(t, {
     authParams: n.authParams,
     client: n.client,
     user: n.user,
@@ -27956,7 +27969,7 @@ const W6 = new ce().openapi(
     request: {
       query: o.object({
         scope: o.string(),
-        response_type: o.nativeEnum(Ut),
+        response_type: o.nativeEnum(Ht),
         redirect_uri: o.string(),
         state: o.string(),
         nonce: o.string().optional(),
@@ -28158,7 +28171,7 @@ async function Oy(t, e, n, r, i) {
       }
     }
   );
-  return a instanceof Response ? a : (s.user = a, dn(t, {
+  return a instanceof Response ? a : (s.user = a, cn(t, {
     ...s,
     ticketAuth: i,
     strategy: "Username-Password-Authentication"
@@ -28357,7 +28370,7 @@ async function Z6({
     if ((h == null ? void 0 : h.email) === s)
       return await t.env.data.loginSessions.update(n.tenant.id, f.id, {
         session_id: e.id
-      }), dn(t, {
+      }), cn(t, {
         client: n,
         loginSession: { ...f, session_id: e.id },
         authParams: r,
@@ -28424,7 +28437,7 @@ async function Q6(t, e, n, r, i) {
     client: c,
     loginSession: l
   });
-  return dn(t, {
+  return cn(t, {
     authParams: {
       scope: (h = l.authParams) == null ? void 0 : h.scope,
       ...r
@@ -28505,7 +28518,7 @@ async function ex({
     },
     user: E,
     session_id: n.id
-  }, R = u === Ut.CODE ? await U0(t, {
+  }, R = u === Ht.CODE ? await U0(t, {
     user: E,
     client: e,
     authParams: M.authParams,
@@ -28562,8 +28575,8 @@ const tx = ["email", "sms", "Username-Password-Authentication"], nx = new ce().o
         scope: o.string().optional(),
         state: o.string(),
         prompt: o.string().optional(),
-        response_mode: o.nativeEnum(an).optional(),
-        response_type: o.nativeEnum(Ut).optional(),
+        response_mode: o.nativeEnum(vn).optional(),
+        response_type: o.nativeEnum(Ht).optional(),
         audience: o.string().optional(),
         connection: o.string().optional(),
         nonce: o.string().optional(),
@@ -29071,7 +29084,7 @@ const _e = /* @__PURE__ */ v0(sx), Tn = ({
 }) => /* @__PURE__ */ p("div", { className: _e("p-6 pt-0", e), children: t }), ax = ({
   children: t,
   className: e
-}) => /* @__PURE__ */ p("div", { className: _e("flex items-center p-6 pt-0", e), children: t }), cn = ({
+}) => /* @__PURE__ */ p("div", { className: _e("flex items-center p-6 pt-0", e), children: t }), ln = ({
   id: t,
   type: e = "text",
   name: n,
@@ -29148,7 +29161,7 @@ const _e = /* @__PURE__ */ v0(sx), Tn = ({
     style: n,
     children: r
   }
-), ut = ({ children: t, className: e }) => /* @__PURE__ */ p("div", { className: _e("mb-2 text-sm text-red", e), children: t }), gn = ({ theme: t, branding: e }) => {
+), ut = ({ children: t, className: e }) => /* @__PURE__ */ p("div", { className: _e("mb-2 text-sm text-red", e), children: t }), hn = ({ theme: t, branding: e }) => {
   var r;
   const n = ((r = t == null ? void 0 : t.widget) == null ? void 0 : r.logo_url) || (e == null ? void 0 : e.logo_url);
   return n ? /* @__PURE__ */ p("div", { className: "inline-flex h-9 items-center", children: /* @__PURE__ */ p("img", { src: n, className: "h-full w-auto", alt: "Logo" }) }) : /* @__PURE__ */ p(kl, {});
@@ -29193,7 +29206,7 @@ const _e = /* @__PURE__ */ v0(sx), Tn = ({
   }, V = ((Zo = e == null ? void 0 : e.widget) == null ? void 0 : Zo.logo_position) || "center", q = V === "left" ? "text-left" : V === "right" ? "text-right" : "text-center", Y = ((Yo = e == null ? void 0 : e.widget) == null ? void 0 : Yo.logo_url) || (n == null ? void 0 : n.logo_url), ae = V !== "none" && Y;
   return /* @__PURE__ */ p("div", { className: _e("flex flex-col gap-6 w-full max-w-sm", a), children: /* @__PURE__ */ p(Tn, { style: A, className: "border", children: [
     /* @__PURE__ */ p(Pn, { children: [
-      ae && /* @__PURE__ */ p("div", { className: _e("mb-4", q), children: /* @__PURE__ */ p(gn, { theme: e, branding: n }) }),
+      ae && /* @__PURE__ */ p("div", { className: _e("mb-4", q), children: /* @__PURE__ */ p(hn, { theme: e, branding: n }) }),
       /* @__PURE__ */ p(Rn, { style: k, children: w.t("welcome", "Login") }),
       /* @__PURE__ */ p(Bn, { style: $, children: w.t("login_description_template", {
         authMethod: w.t(f, {
@@ -29209,7 +29222,7 @@ const _e = /* @__PURE__ */ v0(sx), Tn = ({
           c && d ? "Email or Phone Number" : c ? "Email" : "Phone Number"
         ) }),
         /* @__PURE__ */ p(
-          cn,
+          ln,
           {
             id: "username",
             name: "username",
@@ -29388,7 +29401,7 @@ const _e = /* @__PURE__ */ v0(sx), Tn = ({
           style: s,
           children: /* @__PURE__ */ p("div", { className: "row-up-left w-[calc(100%-theme(space.2)-theme(space.2))] max-w-[1295px] !flex-nowrap sm:w-[calc(100%-theme(space.16)-theme(space.16))]", children: /* @__PURE__ */ p("div", { className: "column-left w-full sm:w-auto", children: [
             /* @__PURE__ */ p("div", { className: "relative flex w-full flex-col rounded-2xl bg-white px-5 py-10 dark:bg-gray-800 dark:text-white sm:min-h-[700px] sm:max-w-md sm:px-14 sm:py-14 md:min-w-[448px] short:min-h-[558px] min-h-[calc(100vh-83px)]", children: [
-              /* @__PURE__ */ p("div", { className: "mb-16", children: /* @__PURE__ */ p(gn, { theme: n, branding: r }) }),
+              /* @__PURE__ */ p("div", { className: "mb-16", children: /* @__PURE__ */ p(hn, { theme: n, branding: r }) }),
               /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col", children: [
                 e,
                 /* @__PURE__ */ p(lx, { theme: n, branding: r, client: i })
@@ -29507,7 +29520,7 @@ const _e = /* @__PURE__ */ v0(sx), Tn = ({
       ]
     }
   );
-}, mn = ({ children: t, className: e }) => /* @__PURE__ */ p("form", { id: "form", method: "post", className: e, children: t }), nc = ({
+}, gn = ({ children: t, className: e }) => /* @__PURE__ */ p("form", { id: "form", method: "post", className: e, children: t }), nc = ({
   error: t,
   theme: e,
   branding: n,
@@ -29541,7 +29554,7 @@ const _e = /* @__PURE__ */ v0(sx), Tn = ({
           defaultValue: "Sign in with your {{authMethod}}"
         }) }),
         /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: [
-          u && /* @__PURE__ */ p(mn, { className: "mb-7", children: [
+          u && /* @__PURE__ */ p(gn, { className: "mb-7", children: [
             /* @__PURE__ */ p(
               "input",
               {
@@ -29897,7 +29910,7 @@ const _e = /* @__PURE__ */ v0(sx), Tn = ({
       language: E
     }), t.redirect(`/u/enter-code?state=${n}`);
   }
-), Mt = (t) => /* @__PURE__ */ p(
+), Dt = (t) => /* @__PURE__ */ p(
   "a",
   {
     className: "block text-primary hover:text-primaryHover text-center",
@@ -29911,7 +29924,7 @@ var vo = "_hp", yx = {
 }, wx = {
   svg: "2000/svg",
   math: "1998/Math/MathML"
-}, bo = [], iu = /* @__PURE__ */ new WeakMap(), gi = void 0, vx = () => gi, wn = (t) => "t" in t, rc = {
+}, bo = [], iu = /* @__PURE__ */ new WeakMap(), gi = void 0, vx = () => gi, yn = (t) => "t" in t, rc = {
   onClick: ["click", !1]
 }, Bg = (t) => {
   if (!t.startsWith("on"))
@@ -29987,7 +30000,7 @@ var vo = "_hp", yx = {
   var s, a;
   (s = t.vR) != null && s.length && (r.push(...t.vR), delete t.vR), typeof t.tag == "function" && ((a = t[Me][1][Dy]) == null || a.forEach((l) => i.push(l))), t.vC.forEach((l) => {
     var c;
-    if (wn(l))
+    if (yn(l))
       n.push(l);
     else if (typeof l.tag == "function" || l.tag === "") {
       l.c = e;
@@ -30009,7 +30022,7 @@ var vo = "_hp", yx = {
   }
 }, By = (t) => {
   var e, n, r, i, s, a;
-  wn(t) || ((n = (e = t[Me]) == null ? void 0 : e[1][Dy]) == null || n.forEach((l) => {
+  yn(t) || ((n = (e = t[Me]) == null ? void 0 : e[1][Dy]) == null || n.forEach((l) => {
     var c;
     return (c = l[2]) == null ? void 0 : c.call(l);
   }), (r = iu.get(t.e)) == null || r(), t.p === 2 && ((i = t.vC) == null || i.forEach((l) => l.p = 2)), (s = t.vC) == null || s.forEach(By)), t.p || ((a = t.e) == null || a.remove(), delete t.e), typeof t.tag == "function" && (Vi.delete(t), vs.delete(t), delete t[Me][3], t.a = !0);
@@ -30042,7 +30055,7 @@ var vo = "_hp", yx = {
       m = h.e, h.s = !1;
     else {
       const y = n || !h.e;
-      wn(h) ? (h.e && h.d && (h.e.textContent = h.t), h.d = !1, m = h.e || (h.e = document.createTextNode(h.t))) : (m = h.e || (h.e = h.n ? document.createElementNS(h.n, h.tag) : document.createElement(h.tag)), bx(m, h.props, h.pP), Uy(h, m, y));
+      yn(h) ? (h.e && h.d && (h.e.textContent = h.t), h.d = !1, m = h.e || (h.e = document.createTextNode(h.t))) : (m = h.e || (h.e = h.n ? document.createElementNS(h.n, h.tag) : document.createElement(h.tag)), bx(m, h.props, h.pP), Uy(h, m, y));
     }
     h.tag === vo ? l-- : n ? m.parentNode || e.appendChild(m) : a[l] !== m && a[l - 1] !== m && (a[l + 1] === m ? e.appendChild(a[l]) : e.insertBefore(m, c || a[l] || null));
   }
@@ -30071,12 +30084,12 @@ var vo = "_hp", yx = {
         let b;
         if (f && f.length) {
           const E = f.findIndex(
-            wn(v) ? (P) => wn(P) : v.key !== void 0 ? (P) => P.key === v.key && P.tag === v.tag : (P) => P.tag === v.tag
+            yn(v) ? (P) => yn(P) : v.key !== void 0 ? (P) => P.key === v.key && P.tag === v.tag : (P) => P.tag === v.tag
           );
           E !== -1 && (b = f[E], f.splice(E, 1));
         }
         if (b)
-          if (wn(v))
+          if (yn(v))
             b.t !== v.t && (b.t = v.t, b.d = !0), v = b;
           else {
             const E = b.pP = b.props;
@@ -30086,12 +30099,12 @@ var vo = "_hp", yx = {
             }
             v = b;
           }
-        else if (!wn(v) && gi) {
+        else if (!yn(v) && gi) {
           const E = Ci(gi);
           E && (v.n = E);
         }
-        if (!wn(v) && !v.s && (ou(t, v), delete v.f), h.push(v), m && !m.s && !v.s)
-          for (let E = m; E && !wn(E); E = (d = E.vC) == null ? void 0 : d.at(-1))
+        if (!yn(v) && !v.s && (ou(t, v), delete v.f), h.push(v), m && !m.s && !v.s)
+          for (let E = m; E && !yn(E); E = (d = E.vC) == null ? void 0 : d.at(-1))
             E.nN = v;
         m = v;
       }
@@ -30516,7 +30529,7 @@ const Nr = (t) => {
           }
         ) }),
         /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: [
-          /* @__PURE__ */ p(mn, { className: "pt-2", children: [
+          /* @__PURE__ */ p(gn, { className: "pt-2", children: [
             /* @__PURE__ */ p(
               "input",
               {
@@ -30565,7 +30578,7 @@ const Nr = (t) => {
               )
             ] })
           ] }),
-          /* @__PURE__ */ p(Mt, { state: i })
+          /* @__PURE__ */ p(Dt, { state: i })
         ] })
       ]
     }
@@ -30644,7 +30657,7 @@ const Nr = (t) => {
   return /* @__PURE__ */ p("div", { className: _e("flex flex-col gap-6 w-full max-w-sm", a), children: [
     /* @__PURE__ */ p(Tn, { style: R, className: "border", children: [
       /* @__PURE__ */ p(Pn, { children: [
-        j && /* @__PURE__ */ p("div", { className: _e("mb-4", G), children: /* @__PURE__ */ p(gn, { theme: e, branding: n }) }),
+        j && /* @__PURE__ */ p("div", { className: _e("mb-4", G), children: /* @__PURE__ */ p(hn, { theme: e, branding: n }) }),
         /* @__PURE__ */ p(Rn, { style: L, children: w.t("verify_your_email", "Verify your email") }),
         /* @__PURE__ */ p(Bn, { style: J, children: /* @__PURE__ */ p(
           Nr,
@@ -30758,14 +30771,14 @@ const Nr = (t) => {
         ] })
       ] }) }) })
     ] }),
-    /* @__PURE__ */ p(Mt, { state: i })
+    /* @__PURE__ */ p(Dt, { state: i })
   ] });
 }, Yt = (t) => {
   const { message: e, theme: n, branding: r, client: i, pageTitle: s, state: a } = t;
   return /* @__PURE__ */ p(Ge, { title: "Login", theme: n, branding: r, client: i, children: [
     s ? /* @__PURE__ */ p("div", { className: "mb-4 text-2xl font-medium", children: s }) : "",
     /* @__PURE__ */ p("div", { className: "text-gray-300 mb-12", children: e }),
-    a ? /* @__PURE__ */ p(Mt, { state: a }) : ""
+    a ? /* @__PURE__ */ p(Dt, { state: a }) : ""
   ] });
 }, qx = new ce().openapi(
   I({
@@ -31015,9 +31028,9 @@ const Nr = (t) => {
             /* @__PURE__ */ p(Je, { className: "text-base", name: "info-bubble" }),
             /* @__PURE__ */ p("div", { className: "text-sm text-gray-300 md:text-sm", children: w.t("sent_code_spam") })
           ] }),
-          /* @__PURE__ */ p(Mt, { state: i })
+          /* @__PURE__ */ p(Dt, { state: i })
         ] }),
-        /* @__PURE__ */ p(Mt, { state: i })
+        /* @__PURE__ */ p(Dt, { state: i })
       ]
     }
   );
@@ -31102,7 +31115,7 @@ const lc = (t) => {
         /* @__PURE__ */ p("div", { className: "mb-4 text-lg font-medium sm:text-2xl", children: w.t("enter_password") }),
         /* @__PURE__ */ p("div", { className: "mb-6 text-gray-300", children: w.t("enter_password_description") }),
         /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: [
-          /* @__PURE__ */ p(mn, { className: "mb-7", children: [
+          /* @__PURE__ */ p(gn, { className: "mb-7", children: [
             /* @__PURE__ */ p(
               "input",
               {
@@ -31146,7 +31159,7 @@ const lc = (t) => {
               }
             )
           ] }),
-          /* @__PURE__ */ p(Mt, { state: s })
+          /* @__PURE__ */ p(Dt, { state: s })
         ] }),
         m4(Wg || (Wg = Wx([`
         <script>
@@ -31210,7 +31223,7 @@ const lc = (t) => {
   }, j = ((rt = e == null ? void 0 : e.widget) == null ? void 0 : rt.logo_position) || "center", C = j === "left" ? "text-left" : j === "right" ? "text-right" : "text-center", A = ((it = e == null ? void 0 : e.widget) == null ? void 0 : it.logo_url) || (n == null ? void 0 : n.logo_url), k = j !== "none" && A;
   return /* @__PURE__ */ p("div", { className: _e("flex flex-col gap-6 w-full max-w-sm", s), children: /* @__PURE__ */ p(Tn, { style: J, className: "border", children: [
     /* @__PURE__ */ p(Pn, { children: [
-      k && /* @__PURE__ */ p("div", { className: _e("mb-4", C), children: /* @__PURE__ */ p(gn, { theme: e, branding: n }) }),
+      k && /* @__PURE__ */ p("div", { className: _e("mb-4", C), children: /* @__PURE__ */ p(hn, { theme: e, branding: n }) }),
       /* @__PURE__ */ p(Rn, { style: re, children: w.t("enter_password", "Enter your password") }),
       /* @__PURE__ */ p(Bn, { style: ee, children: w.t(
         "enter_password_description",
@@ -31221,7 +31234,7 @@ const lc = (t) => {
       /* @__PURE__ */ p("div", { className: "grid gap-2", children: [
         /* @__PURE__ */ p(Xt, { htmlFor: "email", style: ee, children: w.t("email", "Email") }),
         /* @__PURE__ */ p(
-          cn,
+          ln,
           {
             id: "email",
             name: "username",
@@ -31248,7 +31261,7 @@ const lc = (t) => {
         ] }),
         /* @__PURE__ */ p("div", { className: "relative", "data-password-toggle": !0, children: [
           /* @__PURE__ */ p(
-            cn,
+            ln,
             {
               id: "password",
               name: "password",
@@ -31554,7 +31567,7 @@ const lc = (t) => {
         /* @__PURE__ */ p("div", { className: "mb-4 text-lg font-medium sm:text-2xl", children: w.t("create_account_title") }),
         /* @__PURE__ */ p("div", { className: "mb-6 text-gray-300", children: w.t("create_account_description") }),
         /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: [
-          /* @__PURE__ */ p(mn, { children: [
+          /* @__PURE__ */ p(gn, { children: [
             /* @__PURE__ */ p("input", { type: "hidden", name: "code", value: l }),
             /* @__PURE__ */ p(
               "input",
@@ -31589,7 +31602,7 @@ const lc = (t) => {
             e && /* @__PURE__ */ p(ut, { children: e }),
             /* @__PURE__ */ p(Ke, { className: "sm:mt-4 !text-base", children: w.t("continue") })
           ] }),
-          /* @__PURE__ */ p(Mt, { state: a })
+          /* @__PURE__ */ p(Dt, { state: a })
         ] })
       ]
     }
@@ -31629,7 +31642,7 @@ const lc = (t) => {
   }, C = ((it = e == null ? void 0 : e.widget) == null ? void 0 : it.logo_position) || "center", A = C === "left" ? "text-left" : C === "right" ? "text-right" : "text-center", k = ((Un = e == null ? void 0 : e.widget) == null ? void 0 : Un.logo_url) || (n == null ? void 0 : n.logo_url), $ = C !== "none" && k;
   return /* @__PURE__ */ p("div", { className: _e("flex flex-col gap-6 w-full max-w-sm", a), children: /* @__PURE__ */ p(Tn, { style: re, className: "border", children: [
     /* @__PURE__ */ p(Pn, { children: [
-      $ && /* @__PURE__ */ p("div", { className: _e("mb-4", A), children: /* @__PURE__ */ p(gn, { theme: e, branding: n }) }),
+      $ && /* @__PURE__ */ p("div", { className: _e("mb-4", A), children: /* @__PURE__ */ p(hn, { theme: e, branding: n }) }),
       /* @__PURE__ */ p(Rn, { style: ee, children: w.t("create_account_title", "Create Account") }),
       /* @__PURE__ */ p(Bn, { style: G, children: w.t("create_account_description", "Sign up to get started") })
     ] }),
@@ -31647,7 +31660,7 @@ const lc = (t) => {
         /* @__PURE__ */ p("div", { className: "space-y-2", children: [
           /* @__PURE__ */ p(Xt, { htmlFor: "username", style: G, children: w.t("email_label", "Email") }),
           /* @__PURE__ */ p(
-            cn,
+            ln,
             {
               id: "username",
               type: "email",
@@ -31665,7 +31678,7 @@ const lc = (t) => {
           /* @__PURE__ */ p(Xt, { htmlFor: "password", style: G, children: w.t("password", "Password") }),
           /* @__PURE__ */ p("div", { className: "relative", "data-password-toggle": !0, children: [
             /* @__PURE__ */ p(
-              cn,
+              ln,
               {
                 id: "password",
                 name: "password",
@@ -31742,7 +31755,7 @@ const lc = (t) => {
           /* @__PURE__ */ p(Xt, { htmlFor: "re-enter-password", style: G, children: w.t("confirm_password", "Confirm Password") }),
           /* @__PURE__ */ p("div", { className: "relative", "data-password-toggle": !0, children: [
             /* @__PURE__ */ p(
-              cn,
+              ln,
               {
                 id: "re-enter-password",
                 name: "re-enter-password",
@@ -32125,7 +32138,7 @@ const lc = (t) => {
         },
         l
       );
-      return dn(t, M);
+      return cn(t, M);
     } catch (h) {
       let m = w.t("unknown_error_message"), y = 400;
       return h instanceof S ? (m = h.message || m, y = h.status === 400 ? 400 : 500) : h instanceof Fr ? m = h.message || m : h instanceof Error && (m = h.message || m, y = 500), c ? t.html(
@@ -32180,7 +32193,7 @@ const lc = (t) => {
       children: [
         /* @__PURE__ */ p("div", { className: "mb-4 text-lg font-medium sm:text-2xl", children: w.t("reset_password_title") }),
         /* @__PURE__ */ p("div", { className: "mb-6 text-gray-300", children: `${w.t("reset_password_description")} ${s}` }),
-        /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: /* @__PURE__ */ p(mn, { children: [
+        /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: /* @__PURE__ */ p(gn, { children: [
           /* @__PURE__ */ p(
             su,
             {
@@ -32235,7 +32248,7 @@ const lc = (t) => {
   }, j = ((rt = e == null ? void 0 : e.widget) == null ? void 0 : rt.logo_position) || "center", C = j === "left" ? "text-left" : j === "right" ? "text-right" : "text-center", A = ((it = e == null ? void 0 : e.widget) == null ? void 0 : it.logo_url) || (n == null ? void 0 : n.logo_url), k = j !== "none" && A;
   return /* @__PURE__ */ p("div", { className: _e("flex flex-col gap-6 w-full max-w-sm", s), children: /* @__PURE__ */ p(Tn, { style: J, className: "border", children: [
     /* @__PURE__ */ p(Pn, { children: [
-      k && /* @__PURE__ */ p("div", { className: _e("mb-4", C), children: /* @__PURE__ */ p(gn, { theme: e, branding: n }) }),
+      k && /* @__PURE__ */ p("div", { className: _e("mb-4", C), children: /* @__PURE__ */ p(hn, { theme: e, branding: n }) }),
       /* @__PURE__ */ p(Rn, { style: re, children: w.t("reset_password_title", "Reset Password") }),
       /* @__PURE__ */ p(Bn, { style: ee, children: `${w.t("reset_password_description", "Set a new password for")} ${i}` })
     ] }),
@@ -32252,7 +32265,7 @@ const lc = (t) => {
         /* @__PURE__ */ p(Xt, { htmlFor: "password", style: ee, children: w.t("new_password", "New Password") }),
         /* @__PURE__ */ p("div", { className: "relative", "data-password-toggle": !0, children: [
           /* @__PURE__ */ p(
-            cn,
+            ln,
             {
               id: "password",
               name: "password",
@@ -32329,7 +32342,7 @@ const lc = (t) => {
         /* @__PURE__ */ p(Xt, { htmlFor: "re-enter-password", style: ee, children: w.t("confirm_password", "Confirm Password") }),
         /* @__PURE__ */ p("div", { className: "relative", "data-password-toggle": !0, children: [
           /* @__PURE__ */ p(
-            cn,
+            ln,
             {
               id: "re-enter-password",
               name: "re-enter-password",
@@ -32702,7 +32715,7 @@ const lc = (t) => {
         /* @__PURE__ */ p("div", { className: "mb-4 text-lg font-medium sm:text-2xl", children: w.t("forgot_password_title") }),
         /* @__PURE__ */ p("div", { className: "mb-6 text-gray-300", children: w.t("forgot_password_description") }),
         /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: [
-          /* @__PURE__ */ p(mn, { className: "pt-2", children: [
+          /* @__PURE__ */ p(gn, { className: "pt-2", children: [
             /* @__PURE__ */ p(
               "input",
               {
@@ -32717,7 +32730,7 @@ const lc = (t) => {
             e && /* @__PURE__ */ p(ut, { children: e }),
             /* @__PURE__ */ p(Ke, { className: "sm:mt-4 !text-base", children: w.t("forgot_password_cta") })
           ] }),
-          /* @__PURE__ */ p(Mt, { state: a })
+          /* @__PURE__ */ p(Dt, { state: a })
         ] })
       ]
     }
@@ -32756,7 +32769,7 @@ const lc = (t) => {
   }, j = ((rt = e == null ? void 0 : e.widget) == null ? void 0 : rt.logo_position) || "center", C = j === "left" ? "text-left" : j === "right" ? "text-right" : "text-center", A = ((it = e == null ? void 0 : e.widget) == null ? void 0 : it.logo_url) || (n == null ? void 0 : n.logo_url), k = j !== "none" && A;
   return /* @__PURE__ */ p("div", { className: _e("flex flex-col gap-6 w-full max-w-sm", s), children: /* @__PURE__ */ p(Tn, { style: J, className: "border", children: [
     /* @__PURE__ */ p(Pn, { children: [
-      k && /* @__PURE__ */ p("div", { className: _e("mb-4", C), children: /* @__PURE__ */ p(gn, { theme: e, branding: n }) }),
+      k && /* @__PURE__ */ p("div", { className: _e("mb-4", C), children: /* @__PURE__ */ p(hn, { theme: e, branding: n }) }),
       /* @__PURE__ */ p(Rn, { style: re, children: w.t("forgot_password_title", "Forgot Password") }),
       /* @__PURE__ */ p(Bn, { style: ee, children: w.t(
         "forgot_password_description",
@@ -32784,7 +32797,7 @@ const lc = (t) => {
             }
           ),
           /* @__PURE__ */ p(
-            cn,
+            ln,
             {
               id: "username",
               type: "email",
@@ -32831,7 +32844,7 @@ const lc = (t) => {
         /* @__PURE__ */ p("div", { className: "text-sm text-gray-300 md:text-sm", children: w.t("sent_code_spam") })
       ] })
     ] }),
-    /* @__PURE__ */ p(Mt, { state: i })
+    /* @__PURE__ */ p(Dt, { state: i })
   ] });
 }, t8 = new ce().openapi(
   I({
@@ -32961,7 +32974,7 @@ const lc = (t) => {
         he("continue_with_sso_provider_headline")
       ] }),
       /* @__PURE__ */ p("div", { className: "space-y-6", children: [
-        /* @__PURE__ */ p(mn, { children: /* @__PURE__ */ p(Ke, { className: "!text-base", children: /* @__PURE__ */ p("span", { children: w.t("yes_continue_with_existing_account") }) }) }),
+        /* @__PURE__ */ p(gn, { children: /* @__PURE__ */ p(Ke, { className: "!text-base", children: /* @__PURE__ */ p("span", { children: w.t("yes_continue_with_existing_account") }) }) }),
         /* @__PURE__ */ p(
           "a",
           {
@@ -33004,7 +33017,7 @@ const lc = (t) => {
   }, L = ((Ce = t == null ? void 0 : t.widget) == null ? void 0 : Ce.logo_position) || "center", J = L === "left" ? "text-left" : L === "right" ? "text-right" : "text-center", re = ((je = t == null ? void 0 : t.widget) == null ? void 0 : je.logo_url) || (e == null ? void 0 : e.logo_url), ee = L !== "none" && re;
   return /* @__PURE__ */ p("div", { className: _e("flex flex-col gap-6 w-full max-w-sm", i), children: /* @__PURE__ */ p(Tn, { style: b, className: "border", children: [
     /* @__PURE__ */ p(Pn, { children: [
-      ee && /* @__PURE__ */ p("div", { className: _e("mb-4", J), children: /* @__PURE__ */ p(gn, { theme: t, branding: e }) }),
+      ee && /* @__PURE__ */ p("div", { className: _e("mb-4", J), children: /* @__PURE__ */ p(hn, { theme: t, branding: e }) }),
       /* @__PURE__ */ p(Rn, { style: E, children: w.t("continue_with_account", "Continue with account") }),
       /* @__PURE__ */ p(Bn, { style: P, children: [
         /* @__PURE__ */ p(
@@ -33211,7 +33224,7 @@ const lc = (t) => {
     await e.data.loginSessions.update(s.tenant.id, a.id, {
       session_id: c.id
     });
-    const u = await dn(t, {
+    const u = await cn(t, {
       user: d,
       authParams: a.authParams,
       client: s,
@@ -33442,7 +33455,7 @@ const lc = (t) => {
           /* @__PURE__ */ p("div", { className: "font-medium text-base text-gray-800", children: r.email || w.t("no_email_address") })
         ] }),
         /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: [
-          /* @__PURE__ */ p(mn, { children: [
+          /* @__PURE__ */ p(gn, { children: [
             /* @__PURE__ */ p(
               "input",
               {
@@ -33688,7 +33701,7 @@ const lc = (t) => {
         }
       ) }),
       /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: [
-        /* @__PURE__ */ p(mn, { className: "pt-2", children: [
+        /* @__PURE__ */ p(gn, { className: "pt-2", children: [
           /* @__PURE__ */ p(
             "input",
             {
@@ -33968,7 +33981,7 @@ const lc = (t) => {
       children: [
         /* @__PURE__ */ p("div", { className: "mb-4 text-lg font-medium sm:text-2xl", children: w.t("create_password_account_title") }),
         /* @__PURE__ */ p("div", { className: "mb-6 text-gray-300", children: w.t("enter_email_for_verification_description") }),
-        /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: /* @__PURE__ */ p(mn, { className: "pt-2", children: [
+        /* @__PURE__ */ p("div", { className: "flex flex-1 flex-col justify-center", children: /* @__PURE__ */ p(gn, { className: "pt-2", children: [
           /* @__PURE__ */ p(
             "input",
             {
@@ -33983,7 +33996,7 @@ const lc = (t) => {
           ),
           /* @__PURE__ */ p(Ke, { className: "sm:mt-4 !text-base", children: w.t("send") })
         ] }) }),
-        /* @__PURE__ */ p(Mt, { state: s })
+        /* @__PURE__ */ p(Dt, { state: s })
       ]
     }
   );
@@ -34213,7 +34226,7 @@ const lc = (t) => {
   }, R = ((fe = t == null ? void 0 : t.widget) == null ? void 0 : fe.logo_position) || "center", L = R === "left" ? "text-left" : R === "right" ? "text-right" : "text-center", J = ((Ce = t == null ? void 0 : t.widget) == null ? void 0 : Ce.logo_url) || (e == null ? void 0 : e.logo_url), re = R !== "none" && J;
   return /* @__PURE__ */ p("div", { className: _e("flex flex-col gap-6 w-full max-w-sm", r), children: /* @__PURE__ */ p(Tn, { style: b, className: "border", children: [
     /* @__PURE__ */ p(Pn, { children: [
-      re && /* @__PURE__ */ p("div", { className: _e("mb-4", L), children: /* @__PURE__ */ p(gn, { theme: t, branding: e }) }),
+      re && /* @__PURE__ */ p("div", { className: _e("mb-4", L), children: /* @__PURE__ */ p(hn, { theme: t, branding: e }) }),
       /* @__PURE__ */ p("div", { className: "flex justify-center mb-4", children: /* @__PURE__ */ p(
         "div",
         {
@@ -34391,7 +34404,7 @@ const lc = (t) => {
             /* @__PURE__ */ p("div", { className: "text-sm text-gray-300 md:text-sm", children: w.t("sent_code_spam") })
           ] })
         ] }),
-        /* @__PURE__ */ p(Mt, { state: s })
+        /* @__PURE__ */ p(Dt, { state: s })
       ]
     }
   );
@@ -34690,7 +34703,7 @@ const dc = ({
       );
       if (!v)
         throw new Error("Session expired");
-      return await dn(t, {
+      return await cn(t, {
         authParams: m.authParams,
         client: a,
         user: v,
@@ -34775,7 +34788,7 @@ const dc = ({
               ) })
             ] })
           ] }),
-          /* @__PURE__ */ p(Mt, { state: s })
+          /* @__PURE__ */ p(Dt, { state: s })
         ] }),
         /* @__PURE__ */ p("style", { children: `
         details[open] .details-arrow {
@@ -34836,7 +34849,7 @@ const dc = ({
   }, G = ((De = e == null ? void 0 : e.widget) == null ? void 0 : De.logo_position) || "center", pe = G === "left" ? "text-left" : G === "right" ? "text-right" : "text-center", j = ((We = e == null ? void 0 : e.widget) == null ? void 0 : We.logo_url) || (n == null ? void 0 : n.logo_url), C = G !== "none" && j;
   return /* @__PURE__ */ p("div", { className: _e("flex flex-col gap-6 w-full max-w-sm", s), children: /* @__PURE__ */ p(Tn, { style: P, className: "border", children: [
     /* @__PURE__ */ p(Pn, { children: [
-      C && /* @__PURE__ */ p("div", { className: _e("mb-4", pe), children: /* @__PURE__ */ p(gn, { theme: e, branding: n }) }),
+      C && /* @__PURE__ */ p("div", { className: _e("mb-4", pe), children: /* @__PURE__ */ p(hn, { theme: e, branding: n }) }),
       /* @__PURE__ */ p(Rn, { style: M, children: w.t("impersonation", "Impersonation") }),
       /* @__PURE__ */ p(Bn, { style: R, children: w.t(
         "impersonation_description",
@@ -34944,7 +34957,7 @@ const dc = ({
                       "User ID to Impersonate"
                     ) }),
                     /* @__PURE__ */ p(
-                      cn,
+                      ln,
                       {
                         type: "text",
                         id: "user_id",
@@ -35128,7 +35141,7 @@ const dc = ({
       throw new S(403, {
         message: "Access denied: insufficient permissions"
       });
-    return dn(t, {
+    return cn(t, {
       client: n,
       authParams: r.authParams,
       loginSession: r,
@@ -35264,13 +35277,9 @@ const dc = ({
       strategy: h.connection,
       strategy_type: h.is_social ? "social" : "database"
     });
-    return ke(t, t.env.data.logs.create(s.tenant.id, m)), dn(t, {
+    return ke(t, t.env.data.logs.create(s.tenant.id, m)), cn(t, {
       client: s,
-      authParams: {
-        ...a.authParams,
-        response_type: Ut.TOKEN_ID_TOKEN,
-        response_mode: an.QUERY
-      },
+      authParams: a.authParams,
       loginSession: a,
       user: h,
       sessionId: c.id,
@@ -36999,7 +37008,7 @@ const r9 = new ce().openapi(
             requestId: s["samlp:AuthnRequest"]["@_ID"],
             relayState: r
           }),
-          response_mode: an.SAML_POST,
+          response_mode: vn.SAML_POST,
           redirect_uri: (
             // TODO: validate this URL against the saml settings
             s["samlp:AuthnRequest"]["@_AssertionConsumerServiceURL"]
@@ -38566,11 +38575,11 @@ function cJ(t) {
   };
 }
 export {
-  gn as AppLogo,
+  hn as AppLogo,
   ew as Auth0Client,
   Le as AuthLayout,
-  an as AuthorizationResponseMode,
-  Ut as AuthorizationResponseType,
+  vn as AuthorizationResponseMode,
+  Ht as AuthorizationResponseType,
   Ke as Button,
   Nn as ButtonUI,
   Ln as CardContent,
@@ -38590,15 +38599,15 @@ export {
   lx as Footer,
   Yx as ForgotPasswordPage,
   e8 as ForgotPasswordSentPage,
-  mn as FormComponent,
-  Mt as GoBack,
+  gn as FormComponent,
+  Dt as GoBack,
   oJ as GoogleLogo,
   rn as GrantType,
   E2 as HttpSamlSigner,
   Je as Icon,
   tc as IdentifierForm,
   nc as IdentifierPage,
-  cn as InputUI,
+  ln as InputUI,
   f8 as InvalidSession,
   Xt as LabelUI,
   Ge as Layout,
@@ -38617,7 +38626,7 @@ export {
   aJ as VippsLogo,
   UK as auth0FlowInsertSchema,
   M1 as auth0FlowSchema,
-  _n as auth0UserResponseSchema,
+  mn as auth0UserResponseSchema,
   As as authParamsSchema,
   du as baseUserSchema,
   rw as bordersSchema,