authhero 0.47.0 → 0.49.0

package/dist/authhero.mjs

@@ -1442,7 +1442,7 @@ const mn = a.object({
   email: a.string(),
   login_count: a.number(),
   identities: a.array(jh).optional()
-}), xt = bd, R3 = Da.extend({
+}), St = bd, R3 = Da.extend({
   email: a.string(),
   login_count: a.number(),
   multifactor: a.array(a.string()).optional(),
@@ -1720,7 +1720,7 @@ const Ph = a.enum([
   created_at: a.string(),
   updated_at: a.string()
 });
-var we = /* @__PURE__ */ ((n) => (n.FAILED_SILENT_AUTH = "fsa", n.FAILED_SIGNUP = "fs", n.FAILED_LOGIN = "f", n.FAILED_LOGIN_INCORRECT_PASSWORD = "fp", n.FAILED_CHANGE_PASSWORD = "fcp", n.FAILED_BY_CONNECTOR = "fc", n.FAILED_LOGIN_INVALID_EMAIL_USERNAME = "fu", n.FAILED_HOOK = "fh", n.FAILED_CROSS_ORIGIN_AUTHENTICATION = "fcoa", n.SUCCESS_API_OPERATION = "sapi", n.SUCCESS_CHANGE_PASSWORD = "scp", n.SUCCESS_CHANGE_PASSWORD_REQUEST = "scpr", n.SUCCESS_CHANGE_USERNAME = "scu", n.SUCCESS_CROSS_ORIGIN_AUTHENTICATION = "scoa", n.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN = "seacft", n.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN = "serft", n.SUCCESS_LOGIN = "s", n.SUCCESS_LOGOUT = "slo", n.SUCCESS_SIGNUP = "ss", n.SUCCESS_SILENT_AUTH = "ssa", n.SUCCESS_VERIFICATION_EMAIL = "sv", n.SUCCESS_VERIFICATION_EMAIL_REQUEST = "svr", n.CODE_LINK_SENT = "cls", n.BLOCKED_ACCOUNT_EMAIL = "limit_wc", n.BLOCKED_ACCOUNT_IP = "limit_sul", n.BLOCKED_IP_ADDRESS = "limit_mu", n))(we || {});
+var ye = /* @__PURE__ */ ((n) => (n.FAILED_SILENT_AUTH = "fsa", n.FAILED_SIGNUP = "fs", n.FAILED_LOGIN = "f", n.FAILED_LOGIN_INCORRECT_PASSWORD = "fp", n.FAILED_CHANGE_PASSWORD = "fcp", n.FAILED_BY_CONNECTOR = "fc", n.FAILED_LOGIN_INVALID_EMAIL_USERNAME = "fu", n.FAILED_HOOK = "fh", n.FAILED_CROSS_ORIGIN_AUTHENTICATION = "fcoa", n.SUCCESS_API_OPERATION = "sapi", n.SUCCESS_CHANGE_PASSWORD = "scp", n.SUCCESS_CHANGE_PASSWORD_REQUEST = "scpr", n.SUCCESS_CHANGE_USERNAME = "scu", n.SUCCESS_CROSS_ORIGIN_AUTHENTICATION = "scoa", n.SUCCESS_EXCHANGE_AUTHORIZATION_CODE_FOR_ACCESS_TOKEN = "seacft", n.SUCCESS_EXCHANGE_REFRESH_TOKEN_FOR_ACCESS_TOKEN = "serft", n.SUCCESS_LOGIN = "s", n.SUCCESS_LOGOUT = "slo", n.SUCCESS_SIGNUP = "ss", n.SUCCESS_SILENT_AUTH = "ssa", n.SUCCESS_VERIFICATION_EMAIL = "sv", n.SUCCESS_VERIFICATION_EMAIL_REQUEST = "svr", n.CODE_LINK_SENT = "cls", n.BLOCKED_ACCOUNT_EMAIL = "limit_wc", n.BLOCKED_ACCOUNT_IP = "limit_sul", n.BLOCKED_IP_ADDRESS = "limit_mu", n))(ye || {});
 const Mh = a.enum([
   "cls",
   // CODE_LINK_SENT
@@ -3719,7 +3719,7 @@ function Fn(n) {
       sort_order: i
     };
 }
-function Se(n, e) {
+function xe(n, e) {
   return {
     type: e.type,
     description: e.description || "",
@@ -3764,11 +3764,11 @@ var lg = {
   }
   return typeof (n == null ? void 0 : n.EdgeRuntime) == "string" ? "edge-light" : (n == null ? void 0 : n.fastly) !== void 0 ? "fastly" : ((i = (t = n == null ? void 0 : n.process) == null ? void 0 : t.release) == null ? void 0 : i.name) === "node" ? "node" : "other";
 }, dg = (n) => navigator.userAgent.startsWith(n);
-function Pt(n, e) {
+function _t(n, e) {
   ug() === "workerd" && n.executionCtx.waitUntil(e);
 }
 const yl = mn.extend({
-  users: a.array(xt)
+  users: a.array(St)
 }), pg = mn.extend({
   sessions: a.array(Sd)
 }), fg = new _e().openapi(
@@ -3792,7 +3792,7 @@ const yl = mn.extend({
         content: {
           "application/json": {
             schema: a.union([
-              a.array(xt),
+              a.array(St),
               yl
             ])
           }
@@ -3822,7 +3822,7 @@ const yl = mn.extend({
         throw new O(500, {
           message: "Primary account not found"
         });
-      return n.json([xt.parse(h)]);
+      return n.json([St.parse(h)]);
     }
     const c = ["-_exists_:linked_to"];
     s && c.push(s);
@@ -3840,7 +3840,7 @@ const yl = mn.extend({
         start: l.start,
         limit: l.limit
       })
-    ) : n.json(a.array(xt).parse(u));
+    ) : n.json(a.array(St).parse(u));
   }
 ).openapi(
   Z({
@@ -3864,7 +3864,7 @@ const yl = mn.extend({
       200: {
         content: {
           "application/json": {
-            schema: xt
+            schema: St
           }
         },
         description: "List of users"
@@ -3937,7 +3937,7 @@ const yl = mn.extend({
       200: {
         content: {
           "application/json": {
-            schema: xt
+            schema: St
           }
         },
         description: "Status"
@@ -3966,11 +3966,11 @@ const yl = mn.extend({
         last_login: (/* @__PURE__ */ new Date()).toISOString()
       });
       n.set("user_id", o.user_id);
-      const c = Se(n, {
-        type: we.SUCCESS_API_OPERATION,
+      const c = xe(n, {
+        type: ye.SUCCESS_API_OPERATION,
         description: "User created"
       });
-      Pt(n, n.env.data.logs.create(e, c));
+      _t(n, n.env.data.logs.create(e, c));
       const l = {
         ...o,
         identities: [
@@ -3982,7 +3982,7 @@ const yl = mn.extend({
           }
         ]
       };
-      return n.json(xt.parse(l), {
+      return n.json(St.parse(l), {
         status: 201
       });
     } catch (o) {
@@ -4162,7 +4162,7 @@ const yl = mn.extend({
       200: {
         content: {
           "application/json": {
-            schema: a.array(xt)
+            schema: a.array(St)
           }
         },
         description: "Status"
@@ -4180,7 +4180,7 @@ const yl = mn.extend({
     const s = await n.env.data.users.get(e, t);
     if (!s)
       throw new O(404);
-    return n.json([xt.parse(s)]);
+    return n.json([St.parse(s)]);
   }
 ).openapi(
   Z({
@@ -4384,11 +4384,11 @@ var vl;
     }
     function A(k, I, j, L) {
       for (var X = k.length - 1; X >= 0; --X) {
-        var Ee = k[X], xe = Ee(I, j, L);
-        if (!z(xe) && !Ie(xe)) {
-          if (!pe(xe))
+        var Ee = k[X], Se = Ee(I, j, L);
+        if (!z(Se) && !Ie(Se)) {
+          if (!pe(Se))
             throw new TypeError();
-          L = xe;
+          L = Se;
         }
       }
       return L;
@@ -4445,15 +4445,15 @@ var vl;
         return j;
       if (j.length <= 0)
         return X;
-      for (var Ee = new x(), xe = [], ie = 0, M = j; ie < M.length; ie++) {
+      for (var Ee = new x(), Se = [], ie = 0, M = j; ie < M.length; ie++) {
         var H = M[ie], G = Ee.has(H);
-        G || (Ee.add(H), xe.push(H));
+        G || (Ee.add(H), Se.push(H));
       }
       for (var J = 0, re = X; J < re.length; J++) {
         var H = re[J], G = Ee.has(H);
-        G || (Ee.add(H), xe.push(H));
+        G || (Ee.add(H), Se.push(H));
       }
-      return xe;
+      return Se;
     }
     function te(k, I) {
       var j = ei(
@@ -4612,12 +4612,12 @@ var vl;
       var k;
       !z(_) && typeof t.Reflect < "u" && !(_ in t.Reflect) && typeof t.Reflect.defineMetadata == "function" && (k = ih(t.Reflect));
       var I, j, L, X = new h(), Ee = {
-        registerProvider: xe,
+        registerProvider: Se,
         getProvider: M,
         setProvider: G
       };
       return Ee;
-      function xe(J) {
+      function Se(J) {
         if (!Object.isExtensible(Ee))
           throw new Error("Cannot add provider to a frozen registry.");
         switch (!0) {
@@ -4647,10 +4647,10 @@ var vl;
               return I;
             if (!z(L))
               for (var he = Yc(L); ; ) {
-                var ye = Qc(he);
-                if (!ye)
+                var ve = Qc(he);
+                if (!ve)
                   return;
-                var st = Xc(ye);
+                var st = Xc(ve);
                 if (st.isProviderFor(J, re))
                   return el(he), st;
               }
@@ -4660,8 +4660,8 @@ var vl;
           return k;
       }
       function M(J, re) {
-        var he = X.get(J), ye;
-        return z(he) || (ye = he.get(re)), z(ye) && (ye = ie(J, re), z(ye) || (z(he) && (he = new m(), X.set(J, he)), he.set(re, ye))), ye;
+        var he = X.get(J), ve;
+        return z(he) || (ve = he.get(re)), z(ve) && (ve = ie(J, re), z(ve) || (z(he) && (he = new m(), X.set(J, he)), he.set(re, ve))), ve;
       }
       function H(J) {
         if (z(J))
@@ -4671,9 +4671,9 @@ var vl;
       function G(J, re, he) {
         if (!H(he))
           throw new Error("Metadata provider not registered.");
-        var ye = M(J, re);
-        if (ye !== he) {
-          if (!z(ye))
+        var ve = M(J, re);
+        if (ve !== he) {
+          if (!z(ve))
             return !1;
           var st = X.get(J);
           z(st) && (st = new m(), X.set(J, st)), st.set(re, he);
@@ -4696,7 +4696,7 @@ var vl;
           var J = I.get(H);
           return z(J) ? !1 : J.has(G);
         },
-        OrdinaryDefineOwnMetadata: xe,
+        OrdinaryDefineOwnMetadata: Se,
         OrdinaryHasOwnMetadata: X,
         OrdinaryGetOwnMetadata: Ee,
         OrdinaryOwnMetadataKeys: ie,
@@ -4710,14 +4710,14 @@ var vl;
             return;
           re = new m(), I.set(H, re), he = !0;
         }
-        var ye = re.get(G);
-        if (z(ye)) {
+        var ve = re.get(G);
+        if (z(ve)) {
           if (!J)
             return;
-          if (ye = new m(), re.set(G, ye), !k.setProvider(H, G, j))
+          if (ve = new m(), re.set(G, ve), !k.setProvider(H, G, j))
             throw re.delete(G), he && I.delete(H), new Error("Wrong provider for target.");
         }
-        return ye;
+        return ve;
       }
       function X(H, G, J) {
         var re = L(
@@ -4738,7 +4738,7 @@ var vl;
         if (!z(re))
           return re.get(H);
       }
-      function xe(H, G, J, re) {
+      function Se(H, G, J, re) {
         var he = L(
           J,
           re,
@@ -4756,8 +4756,8 @@ var vl;
         );
         if (z(re))
           return J;
-        for (var he = re.keys(), ye = Yc(he), st = 0; ; ) {
-          var tl = Qc(ye);
+        for (var he = re.keys(), ve = Yc(he), st = 0; ; ) {
+          var tl = Qc(ve);
           if (!tl)
             return J.length = st, J;
           var ah = Xc(tl);
@@ -4765,7 +4765,7 @@ var vl;
             J[st] = ah;
           } catch (ch) {
             try {
-              el(ye);
+              el(ve);
             } finally {
               throw ch;
             }
@@ -4790,10 +4790,10 @@ var vl;
       }
     }
     function ih(k) {
-      var I = k.defineMetadata, j = k.hasOwnMetadata, L = k.getOwnMetadata, X = k.getOwnMetadataKeys, Ee = k.deleteMetadata, xe = new h(), ie = {
+      var I = k.defineMetadata, j = k.hasOwnMetadata, L = k.getOwnMetadata, X = k.getOwnMetadataKeys, Ee = k.deleteMetadata, Se = new h(), ie = {
         isProviderFor: function(M, H) {
-          var G = xe.get(M);
-          return !z(G) && G.has(H) ? !0 : X(M, H).length ? (z(G) && (G = new x(), xe.set(M, G)), G.add(H), !0) : !1;
+          var G = Se.get(M);
+          return !z(G) && G.has(H) ? !0 : X(M, H).length ? (z(G) && (G = new x(), Se.set(M, G)), G.add(H), !0) : !1;
         },
         OrdinaryDefineOwnMetadata: I,
         OrdinaryHasOwnMetadata: j,
@@ -4888,7 +4888,7 @@ var vl;
           }, ie.prototype.values = function() {
             return new j(this._keys, this._values, Ee);
           }, ie.prototype.entries = function() {
-            return new j(this._keys, this._values, xe);
+            return new j(this._keys, this._values, Se);
           }, ie.prototype["@@iterator"] = function() {
             return this.entries();
           }, ie.prototype[o] = function() {
@@ -4913,7 +4913,7 @@ var vl;
       function Ee(ie, M) {
         return M;
       }
-      function xe(ie, M) {
+      function Se(ie, M) {
         return [ie, M];
       }
     }
@@ -5014,7 +5014,7 @@ var vl;
           M[G] = Math.random() * 255 | 0;
         return M;
       }
-      function xe(M) {
+      function Se(M) {
         if (typeof Uint8Array == "function") {
           var H = new Uint8Array(M);
           return typeof crypto < "u" ? crypto.getRandomValues(H) : typeof msCrypto < "u" ? msCrypto.getRandomValues(H) : Ee(H, M), H;
@@ -5022,7 +5022,7 @@ var vl;
         return Ee(new Array(M), M);
       }
       function ie() {
-        var M = xe(k);
+        var M = Se(k);
         M[6] = M[6] & 79 | 64, M[8] = M[8] & 191 | 128;
         for (var H = "", G = 0; G < k; ++G) {
           var J = M[G];
@@ -5479,7 +5479,7 @@ function Wa(n) {
   }
   return i.buffer;
 }
-function Ot(n, e, t, i) {
+function Bt(n, e, t, i) {
   return e instanceof Uint8Array ? e.byteLength ? t < 0 ? (n.error = "Wrong parameter: inputOffset less than zero", !1) : i < 0 ? (n.error = "Wrong parameter: inputLength less than zero", !1) : e.byteLength - t - i < 0 ? (n.error = "End of input reached before message was fully decoded (inconsistent offset and length values)", !1) : !0 : (n.error = "Wrong parameter: inputBuffer has zero length", !1) : (n.error = "Wrong parameter: inputBuffer must be 'Uint8Array'", !1);
 }
 class Xr {
@@ -5494,7 +5494,7 @@ class Xr {
   }
 }
 const ni = [new Uint8Array([1])], bl = "0123456789", Xs = "name", kl = "valueHexView", bg = "isHexOnly", kg = "idBlock", xg = "tagClass", Sg = "tagNumber", Ag = "isConstructed", Ig = "fromBER", Eg = "toBER", $g = "local", Me = "", ut = new ArrayBuffer(0), Qr = new Uint8Array(0), _i = "EndOfContent", jd = "OCTET STRING", Nd = "BIT STRING";
-function vt(n) {
+function wt(n) {
   var e;
   return e = class extends n {
     constructor(...i) {
@@ -5511,7 +5511,7 @@ function vt(n) {
     }
     fromBER(i, r, s) {
       const o = i instanceof ArrayBuffer ? new Uint8Array(i) : i;
-      if (!Ot(this, o, r, s))
+      if (!Bt(this, o, r, s))
         return -1;
       const c = r + s;
       return this.valueHexView = o.subarray(r, c), this.valueHexView.length ? (this.blockLength = s, c) : (this.warnings.push("Zero buffer length"), r);
@@ -5561,7 +5561,7 @@ class Le extends yn {
   }
 }
 Le.NAME = "valueBlock";
-class Od extends vt(yn) {
+class Od extends wt(yn) {
   constructor({ idBlock: e = {} } = {}) {
     var t, i, r, s;
     super(), e ? (this.isHexOnly = (t = e.isHexOnly) !== null && t !== void 0 ? t : !1, this.valueHexView = e.valueHex ? V.toUint8Array(e.valueHex) : Qr, this.tagClass = (i = e.tagClass) !== null && i !== void 0 ? i : -1, this.tagNumber = (r = e.tagNumber) !== null && r !== void 0 ? r : -1, this.isConstructed = (s = e.isConstructed) !== null && s !== void 0 ? s : !1) : (this.tagClass = -1, this.tagNumber = -1, this.isConstructed = !1);
@@ -5612,7 +5612,7 @@ class Od extends vt(yn) {
   }
   fromBER(e, t, i) {
     const r = V.toUint8Array(e);
-    if (!Ot(this, r, t, i))
+    if (!Bt(this, r, t, i))
       return -1;
     const s = r.subarray(t, t + i);
     if (s.length === 0)
@@ -5692,7 +5692,7 @@ class Bd extends yn {
   }
   fromBER(e, t, i) {
     const r = V.toUint8Array(e);
-    if (!Ot(this, r, t, i))
+    if (!Bt(this, r, t, i))
       return -1;
     const s = r.subarray(t, t + i);
     if (s.length === 0)
@@ -5814,7 +5814,7 @@ class Ga extends je {
   }
 }
 Ga.NAME = "BaseStringBlock";
-class Pd extends vt(Le) {
+class Pd extends wt(Le) {
   constructor({ isHexOnly: e = !0, ...t } = {}) {
     super(t), this.isHexOnly = e;
   }
@@ -5839,7 +5839,7 @@ function Hn(n, e = 0, t = n.length) {
   const i = e;
   let r = new je({}, Le);
   const s = new yn();
-  if (!Ot(s, n, e, t))
+  if (!Bt(s, n, e, t))
     return r.error = s.error, {
       offset: -1,
       result: r
@@ -6010,7 +6010,7 @@ class Ut extends Le {
   }
   fromBER(e, t, i) {
     const r = V.toUint8Array(e);
-    if (!Ot(this, r, t, i))
+    if (!Bt(this, r, t, i))
       return -1;
     if (this.valueBeforeDecodeView = r.subarray(t, t + i), this.valueBeforeDecodeView.length === 0)
       return this.warnings.push("Zero buffer length"), t;
@@ -6108,7 +6108,7 @@ class on extends je {
 Md = on;
 F.Null = Md;
 on.NAME = "NULL";
-class zd extends vt(Le) {
+class zd extends wt(Le) {
   constructor({ value: e, ...t } = {}) {
     super(t), t.valueHex ? this.valueHexView = V.toUint8Array(t.valueHex) : this.valueHexView = new Uint8Array(1), e && (this.value = e);
   }
@@ -6123,7 +6123,7 @@ class zd extends vt(Le) {
   }
   fromBER(e, t, i) {
     const r = V.toUint8Array(e);
-    return Ot(this, r, t, i) ? (this.valueHexView = r.subarray(t, t + i), i > 1 && this.warnings.push("Boolean value encoded in more then 1 octet"), this.isHexOnly = !0, Cd.call(this), this.blockLength = i, t + i) : -1;
+    return Bt(this, r, t, i) ? (this.valueHexView = r.subarray(t, t + i), i > 1 && this.warnings.push("Boolean value encoded in more then 1 octet"), this.isHexOnly = !0, Cd.call(this), this.blockLength = i, t + i) : -1;
   }
   toBER() {
     return this.valueHexView.slice();
@@ -6154,7 +6154,7 @@ class es extends je {
 Dd = es;
 F.Boolean = Dd;
 es.NAME = "BOOLEAN";
-class Fd extends vt(Ut) {
+class Fd extends wt(Ut) {
   constructor({ isConstructed: e = !1, ...t } = {}) {
     super(t), this.isConstructed = e;
   }
@@ -6234,7 +6234,7 @@ let Qt = class qd extends je {
 Hd = Qt;
 F.OctetString = Hd;
 Qt.NAME = jd;
-class Kd extends vt(Ut) {
+class Kd extends wt(Ut) {
   constructor({ unusedBits: e = 0, isConstructed: t = !1, ...i } = {}) {
     super(i), this.unusedBits = e, this.isConstructed = t, this.blockLength = this.valueHexView.byteLength;
   }
@@ -6262,7 +6262,7 @@ class Kd extends vt(Ut) {
       return r;
     }
     const s = V.toUint8Array(e);
-    if (!Ot(this, s, t, i))
+    if (!Bt(this, s, t, i))
       return -1;
     const o = s.subarray(t, t + i);
     if (this.unusedBits = o[0], this.unusedBits > 7)
@@ -6393,7 +6393,7 @@ function Og(n, e) {
       }
   return s.slice();
 }
-class Za extends vt(Le) {
+class Za extends wt(Le) {
   constructor({ value: e, ...t } = {}) {
     super(t), this._valueDec = 0, t.valueHex && this.setValueHex(), e !== void 0 && (this.valueDec = e);
   }
@@ -6476,7 +6476,7 @@ Object.defineProperty(Gd.prototype, "valueHex", {
   }
 });
 var Jd;
-class _t extends je {
+class mt extends je {
   constructor(e = {}) {
     super(e, Za), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 2;
   }
@@ -6493,16 +6493,16 @@ class _t extends je {
       p[0] |= 128, i.write(p);
     } else
       s[0] & 128 && i.write(new Uint8Array([0])), i.write(s);
-    return new _t({
+    return new mt({
       valueHex: i.final()
     });
   }
   convertToDER() {
-    const e = new _t({ valueHex: this.valueBlock.valueHexView });
+    const e = new mt({ valueHex: this.valueBlock.valueHexView });
     return e.valueBlock.toDER(), e;
   }
   convertFromDER() {
-    return new _t({
+    return new mt({
       valueHex: this.valueBlock.valueHexView[0] === 0 ? this.valueBlock.valueHexView.subarray(1) : this.valueBlock.valueHexView
     });
   }
@@ -6510,11 +6510,11 @@ class _t extends je {
     return `${this.constructor.NAME} : ${this.valueBlock.toString()}`;
   }
 }
-Jd = _t;
+Jd = mt;
 F.Integer = Jd;
-_t.NAME = "INTEGER";
+mt.NAME = "INTEGER";
 var Zd;
-class ts extends _t {
+class ts extends mt {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 10;
   }
@@ -6522,7 +6522,7 @@ class ts extends _t {
 Zd = ts;
 F.Enumerated = Zd;
 ts.NAME = "ENUMERATED";
-class bo extends vt(Le) {
+class bo extends wt(Le) {
   constructor({ valueDec: e = -1, isFirstSid: t = !1, ...i } = {}) {
     super(i), this.valueDec = e, this.isFirstSid = t;
   }
@@ -6530,7 +6530,7 @@ class bo extends vt(Le) {
     if (!i)
       return t;
     const r = V.toUint8Array(e);
-    if (!Ot(this, r, t, i))
+    if (!Bt(this, r, t, i))
       return -1;
     const s = r.subarray(t, t + i);
     this.valueHexView = new Uint8Array(i);
@@ -6697,7 +6697,7 @@ class ns extends je {
 Xd = ns;
 F.ObjectIdentifier = Xd;
 ns.NAME = "OBJECT IDENTIFIER";
-class ko extends vt(yn) {
+class ko extends wt(yn) {
   constructor({ valueDec: e = 0, ...t } = {}) {
     super(t), this.valueDec = e;
   }
@@ -6705,7 +6705,7 @@ class ko extends vt(yn) {
     if (i === 0)
       return t;
     const r = V.toUint8Array(e);
-    if (!Ot(this, r, t, i))
+    if (!Bt(this, r, t, i))
       return -1;
     const s = r.subarray(t, t + i);
     this.valueHexView = new Uint8Array(i);
@@ -6831,24 +6831,24 @@ ep = Ya;
 F.RelativeObjectIdentifier = ep;
 Ya.NAME = "RelativeObjectIdentifier";
 var tp;
-class At extends ze {
+class It extends ze {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 16;
   }
 }
-tp = At;
+tp = It;
 F.Sequence = tp;
-At.NAME = "SEQUENCE";
+It.NAME = "SEQUENCE";
 var np;
-let It = class extends ze {
+let Et = class extends ze {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 17;
   }
 };
-np = It;
+np = Et;
 F.Set = np;
-It.NAME = "SET";
-class ip extends vt(Le) {
+Et.NAME = "SET";
+class ip extends wt(Le) {
   constructor({ ...e } = {}) {
     super(e), this.isHexOnly = !0, this.value = Me;
   }
@@ -6893,14 +6893,14 @@ class sp extends Je {
 }
 sp.NAME = "Utf8StringValueBlock";
 var op;
-class Bt extends sp {
+class Tt extends sp {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 12;
   }
 }
-op = Bt;
+op = Tt;
 F.Utf8String = op;
-Bt.NAME = "UTF8String";
+Tt.NAME = "UTF8String";
 class ap extends Je {
   fromBuffer(e) {
     this.valueBlock.value = W.ToUtf16String(e), this.valueBlock.valueHexView = V.toUint8Array(e);
@@ -7214,7 +7214,7 @@ bp = fs;
 F.GeneralizedTime = bp;
 fs.NAME = "GeneralizedTime";
 var kp;
-class Xa extends Bt {
+class Xa extends Tt {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 31;
   }
@@ -7223,7 +7223,7 @@ kp = Xa;
 F.DATE = kp;
 Xa.NAME = "DATE";
 var xp;
-class Qa extends Bt {
+class Qa extends Tt {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 32;
   }
@@ -7232,7 +7232,7 @@ xp = Qa;
 F.TimeOfDay = xp;
 Qa.NAME = "TimeOfDay";
 var Sp;
-class ec extends Bt {
+class ec extends Tt {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 33;
   }
@@ -7241,7 +7241,7 @@ Sp = ec;
 F.DateTime = Sp;
 ec.NAME = "DateTime";
 var Ap;
-class tc extends Bt {
+class tc extends Tt {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 34;
   }
@@ -7250,7 +7250,7 @@ Ap = tc;
 F.Duration = Ap;
 tc.NAME = "Duration";
 var Ip;
-class nc extends Bt {
+class nc extends Tt {
   constructor(e = {}) {
     super(e), this.idBlock.tagClass = 1, this.idBlock.tagNumber = 14;
   }
@@ -7521,9 +7521,9 @@ const Ep = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   GeneralString: ds,
   GeneralizedTime: fs,
   GraphicString: us,
-  HexBlock: vt,
+  HexBlock: wt,
   IA5String: ls,
-  Integer: _t,
+  Integer: mt,
   Null: on,
   NumericString: ss,
   ObjectIdentifier: ns,
@@ -7533,14 +7533,14 @@ const Ep = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   RawData: Bg,
   RelativeObjectIdentifier: Ya,
   Repeated: hr,
-  Sequence: At,
-  Set: It,
+  Sequence: It,
+  Set: Et,
   TIME: nc,
   TeletexString: as,
   TimeOfDay: Qa,
   UTCTime: Oi,
   UniversalString: rs,
-  Utf8String: Bt,
+  Utf8String: Tt,
   ValueBlock: Le,
   VideotexString: cs,
   ViewWriter: Xr,
@@ -7631,13 +7631,13 @@ const Pg = {
   }
 }, Rg = {
   fromASN: (n) => n.valueBlock.valueHexView.byteLength >= 4 ? n.valueBlock.toString() : n.valueBlock.valueDec,
-  toASN: (n) => new _t({ value: +n })
+  toASN: (n) => new mt({ value: +n })
 }, Lg = {
   fromASN: (n) => n.valueBlock.valueDec,
   toASN: (n) => new ts({ value: n })
 }, ge = {
   fromASN: (n) => n.valueBlock.valueHexView,
-  toASN: (n) => new _t({ valueHex: n })
+  toASN: (n) => new mt({ valueHex: n })
 }, Ug = {
   fromASN: (n) => n.valueBlock.valueHexView,
   toASN: (n) => new en({ valueHex: n })
@@ -7660,7 +7660,7 @@ function tt(n) {
     toASN: (e) => new n({ value: e })
   };
 }
-const $p = tt(Bt), Dg = tt(is), Fg = tt(rs), Hg = tt(ss), qg = tt(os), Kg = tt(as), Wg = tt(cs), Gg = tt(ls), Jg = tt(us), Zg = tt(Ni), Yg = tt(ds), Xg = tt(ps), Qg = {
+const $p = tt(Tt), Dg = tt(is), Fg = tt(rs), Hg = tt(ss), qg = tt(os), Kg = tt(as), Wg = tt(cs), Gg = tt(ls), Jg = tt(us), Zg = tt(Ni), Yg = tt(ds), Xg = tt(ps), Qg = {
   fromASN: (n) => n.toDate(),
   toASN: (n) => new Oi({ valueDate: n })
 }, e_ = {
@@ -7720,8 +7720,8 @@ function rc(n) {
       return null;
   }
 }
-function St(n) {
-  return typeof n == "function" && n.prototype ? n.prototype.toASN && n.prototype.fromASN ? !0 : St(n.prototype) : !!(n && typeof n == "object" && "toASN" in n && "fromASN" in n);
+function At(n) {
+  return typeof n == "function" && n.prototype ? n.prototype.toASN && n.prototype.fromASN ? !0 : At(n.prototype) : !!(n && typeof n == "object" && "toASN" in n && "fromASN" in n);
 }
 function Cp(n) {
   var e;
@@ -7776,11 +7776,11 @@ class i_ {
         if (!g)
           throw new Error(`Cannot get ASN1 class by name '${p}'`);
         l = new g({ name: c });
-      } else St(o.type) ? l = new o.type().toSchema(c) : o.optional ? this.get(o.type).type === N.Choice ? l = new an({ name: c }) : (l = this.create(o.type, !1), l.name = c) : l = new an({ name: c });
+      } else At(o.type) ? l = new o.type().toSchema(c) : o.optional ? this.get(o.type).type === N.Choice ? l = new an({ name: c }) : (l = this.create(o.type, !1), l.name = c) : l = new an({ name: c });
       const u = !!o.optional || o.defaultValue !== void 0;
       if (o.repeated) {
         l.name = "";
-        const p = o.repeated === "set" ? It : At;
+        const p = o.repeated === "set" ? Et : It;
         l = new p({
           name: "",
           value: [
@@ -7793,7 +7793,7 @@ class i_ {
       }
       if (o.context !== null && o.context !== void 0)
         if (o.implicit)
-          if (typeof o.type == "number" || St(o.type)) {
+          if (typeof o.type == "number" || At(o.type)) {
             const p = o.repeated ? ze : ji;
             r.push(new p({
               name: c,
@@ -7831,9 +7831,9 @@ class i_ {
     }
     switch (i.type) {
       case N.Sequence:
-        return new At({ value: r, name: "" });
-      case N.Set:
         return new It({ value: r, name: "" });
+      case N.Set:
+        return new Et({ value: r, name: "" });
       case N.Choice:
         return new ic({ value: r, name: "" });
       default:
@@ -7878,7 +7878,7 @@ class r_ {
   static fromASN(e, t) {
     var i;
     try {
-      if (St(t))
+      if (At(t))
         return new t().fromASN(e);
       const r = Ye.get(t);
       Ye.cache(t);
@@ -7915,13 +7915,13 @@ class r_ {
         if (!u)
           continue;
         const p = r.items[l], g = p.type;
-        if (typeof g == "number" || St(g)) {
-          const m = (i = p.converter) !== null && i !== void 0 ? i : St(g) ? new g() : null;
+        if (typeof g == "number" || At(g)) {
+          const m = (i = p.converter) !== null && i !== void 0 ? i : At(g) ? new g() : null;
           if (!m)
             throw new Error("Converter is empty");
           if (p.repeated)
             if (p.implicit) {
-              const x = p.repeated === "sequence" ? At : It, h = new x();
+              const x = p.repeated === "sequence" ? It : Et, h = new x();
               h.valueBlock = u.valueBlock;
               const _ = En(h.toBER(!1));
               if (_.offset === -1)
@@ -7936,7 +7936,7 @@ class r_ {
             let x = u;
             if (p.implicit) {
               let h;
-              if (St(g))
+              if (At(g))
                 h = new g().toSchema("");
               else {
                 const _ = y[g], b = Ep[_];
@@ -7966,7 +7966,7 @@ class sc {
     return e instanceof je ? e.toBER(!1) : this.toASN(e).toBER(!1);
   }
   static toASN(e) {
-    if (e && typeof e == "object" && St(e))
+    if (e && typeof e == "object" && At(e))
       return e.toASN();
     if (!(e && typeof e == "object"))
       throw new TypeError("Parameter 1 should be type of Object.");
@@ -7991,7 +7991,7 @@ class sc {
         const u = sc.toAsnItem(c, o, t, l);
         if (typeof c.context == "number")
           if (c.implicit)
-            if (!c.repeated && (typeof c.type == "number" || St(c.type))) {
+            if (!c.repeated && (typeof c.type == "number" || At(c.type))) {
               const p = {};
               p.valueHex = u instanceof on ? u.valueBeforeDecodeView : u.valueBlock.toBER(), r.push(new ji({
                 optional: c.optional,
@@ -8024,10 +8024,10 @@ class sc {
     let s;
     switch (i.type) {
       case N.Sequence:
-        s = new At({ value: r });
+        s = new It({ value: r });
         break;
       case N.Set:
-        s = new It({ value: r });
+        s = new Et({ value: r });
         break;
       case N.Choice:
         if (!r[0])
@@ -8046,7 +8046,7 @@ class sc {
       if (e.repeated) {
         if (!Array.isArray(r))
           throw new TypeError("Parameter 'objProp' should be type of Array.");
-        const c = Array.from(r, (u) => o.toASN(u)), l = e.repeated === "sequence" ? At : It;
+        const c = Array.from(r, (u) => o.toASN(u)), l = e.repeated === "sequence" ? It : Et;
         s = new l({
           value: c
         });
@@ -8055,7 +8055,7 @@ class sc {
     } else if (e.repeated) {
       if (!Array.isArray(r))
         throw new TypeError("Parameter 'objProp' should be type of Array.");
-      const o = Array.from(r, (l) => this.toASN(l)), c = e.repeated === "sequence" ? At : It;
+      const o = Array.from(r, (l) => this.toASN(l)), c = e.repeated === "sequence" ? It : Et;
       s = new c({
         value: o
       });
@@ -8829,7 +8829,7 @@ Nl = No = d([
 ], Nl);
 var Oo;
 const Op = `${Ft}.32`;
-let Et = class {
+let $t = class {
   constructor(e = {}) {
     Object.assign(this, e);
   }
@@ -8839,26 +8839,26 @@ let Et = class {
 };
 d([
   f({ type: y.IA5String })
-], Et.prototype, "ia5String", void 0);
+], $t.prototype, "ia5String", void 0);
 d([
   f({ type: y.VisibleString })
-], Et.prototype, "visibleString", void 0);
+], $t.prototype, "visibleString", void 0);
 d([
   f({ type: y.BmpString })
-], Et.prototype, "bmpString", void 0);
+], $t.prototype, "bmpString", void 0);
 d([
   f({ type: y.Utf8String })
-], Et.prototype, "utf8String", void 0);
-Et = d([
+], $t.prototype, "utf8String", void 0);
+$t = d([
   T({ type: N.Choice })
-], Et);
+], $t);
 class lc {
   constructor(e = {}) {
-    this.organization = new Et(), this.noticeNumbers = [], Object.assign(this, e);
+    this.organization = new $t(), this.noticeNumbers = [], Object.assign(this, e);
   }
 }
 d([
-  f({ type: Et })
+  f({ type: $t })
 ], lc.prototype, "organization", void 0);
 d([
   f({ type: y.Integer, repeated: "sequence" })
@@ -8872,7 +8872,7 @@ d([
   f({ type: lc, optional: !0 })
 ], uc.prototype, "noticeRef", void 0);
 d([
-  f({ type: Et, optional: !0 })
+  f({ type: $t, optional: !0 })
 ], uc.prototype, "explicitText", void 0);
 let mr = class {
   constructor(e = {}) {
@@ -9182,17 +9182,17 @@ let Ho = Fo = class extends Re {
 Ho = Fo = d([
   T({ type: N.Sequence })
 ], Ho);
-let $t = class {
+let Ct = class {
   constructor(e = {}) {
     this.type = "", this.values = [], Object.assign(this, e);
   }
 };
 d([
   f({ type: y.ObjectIdentifier })
-], $t.prototype, "type", void 0);
+], Ct.prototype, "type", void 0);
 d([
   f({ type: y.Any, repeated: "set" })
-], $t.prototype, "values", void 0);
+], Ct.prototype, "values", void 0);
 var qo;
 let Rl = qo = class extends ue {
   constructor(e) {
@@ -9200,7 +9200,7 @@ let Rl = qo = class extends ue {
   }
 };
 Rl = qo = d([
-  T({ type: N.Sequence, itemType: $t })
+  T({ type: N.Sequence, itemType: Ct })
 ], Rl);
 const Vp = `${Ft}.14`;
 class Vt extends cc {
@@ -9425,39 +9425,39 @@ d([
 d([
   f({ type: et, optional: !0, repeated: "sequence" })
 ], vs.prototype, "crlEntryExtensions", void 0);
-class Tt {
+class Pt {
   constructor(e = {}) {
     this.signature = new D(), this.issuer = new be(), this.thisUpdate = new Ce(), Object.assign(this, e);
   }
 }
 d([
   f({ type: y.Integer, optional: !0 })
-], Tt.prototype, "version", void 0);
+], Pt.prototype, "version", void 0);
 d([
   f({ type: D })
-], Tt.prototype, "signature", void 0);
+], Pt.prototype, "signature", void 0);
 d([
   f({ type: be })
-], Tt.prototype, "issuer", void 0);
+], Pt.prototype, "issuer", void 0);
 d([
   f({ type: Ce })
-], Tt.prototype, "thisUpdate", void 0);
+], Pt.prototype, "thisUpdate", void 0);
 d([
   f({ type: Ce, optional: !0 })
-], Tt.prototype, "nextUpdate", void 0);
+], Pt.prototype, "nextUpdate", void 0);
 d([
   f({ type: vs, repeated: "sequence", optional: !0 })
-], Tt.prototype, "revokedCertificates", void 0);
+], Pt.prototype, "revokedCertificates", void 0);
 d([
   f({ type: et, optional: !0, context: 0, repeated: "sequence" })
-], Tt.prototype, "crlExtensions", void 0);
+], Pt.prototype, "crlExtensions", void 0);
 class fc {
   constructor(e = {}) {
-    this.tbsCertList = new Tt(), this.signatureAlgorithm = new D(), this.signature = new ArrayBuffer(0), Object.assign(this, e);
+    this.tbsCertList = new Pt(), this.signatureAlgorithm = new D(), this.signature = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 d([
-  f({ type: Tt })
+  f({ type: Pt })
 ], fc.prototype, "tbsCertList", void 0);
 d([
   f({ type: D })
@@ -9490,10 +9490,10 @@ d([
 Tn = d([
   T({ type: N.Choice })
 ], Tn);
-var Ct;
+var jt;
 (function(n) {
   n[n.v0 = 0] = "v0", n[n.v1 = 1] = "v1", n[n.v2 = 2] = "v2", n[n.v3 = 3] = "v3", n[n.v4 = 4] = "v4", n[n.v5 = 5] = "v5";
-})(Ct || (Ct = {}));
+})(jt || (jt = {}));
 let yi = class extends D {
 };
 yi = d([
@@ -9504,11 +9504,11 @@ let kr = class extends D {
 kr = d([
   T({ type: N.Sequence })
 ], kr);
-let mt = class extends D {
+let yt = class extends D {
 };
-mt = d([
+yt = d([
   T({ type: N.Sequence })
-], mt);
+], yt);
 let xr = class extends D {
 };
 xr = d([
@@ -9536,46 +9536,46 @@ d([
   f({ type: y.Any, repeated: "set" })
 ], Gn.prototype, "attrValues", void 0);
 var Jo;
-class wt {
+class bt {
   constructor(e = {}) {
-    this.version = Ct.v0, this.sid = new Tn(), this.digestAlgorithm = new yi(), this.signatureAlgorithm = new kr(), this.signature = new se(), Object.assign(this, e);
+    this.version = jt.v0, this.sid = new Tn(), this.digestAlgorithm = new yi(), this.signatureAlgorithm = new kr(), this.signature = new se(), Object.assign(this, e);
   }
 }
 d([
   f({ type: y.Integer })
-], wt.prototype, "version", void 0);
+], bt.prototype, "version", void 0);
 d([
   f({ type: Tn })
-], wt.prototype, "sid", void 0);
+], bt.prototype, "sid", void 0);
 d([
   f({ type: yi })
-], wt.prototype, "digestAlgorithm", void 0);
+], bt.prototype, "digestAlgorithm", void 0);
 d([
   f({ type: Gn, repeated: "set", context: 0, implicit: !0, optional: !0 })
-], wt.prototype, "signedAttrs", void 0);
+], bt.prototype, "signedAttrs", void 0);
 d([
   f({ type: kr })
-], wt.prototype, "signatureAlgorithm", void 0);
+], bt.prototype, "signatureAlgorithm", void 0);
 d([
   f({ type: se })
-], wt.prototype, "signature", void 0);
+], bt.prototype, "signature", void 0);
 d([
   f({ type: Gn, repeated: "set", context: 1, implicit: !0, optional: !0 })
-], wt.prototype, "unsignedAttrs", void 0);
+], bt.prototype, "unsignedAttrs", void 0);
 let Sr = Jo = class extends ue {
   constructor(e) {
     super(e), Object.setPrototypeOf(this, Jo.prototype);
   }
 };
 Sr = Jo = d([
-  T({ type: N.Set, itemType: wt })
+  T({ type: N.Set, itemType: bt })
 ], Sr);
 let Vl = class extends Ce {
 };
 Vl = d([
   T({ type: N.Choice })
 ], Vl);
-let Ml = class extends wt {
+let Ml = class extends bt {
 };
 Ml = d([
   T({ type: N.Sequence })
@@ -9592,7 +9592,7 @@ d([
   f({ type: y.Integer })
 ], hc.prototype, "acSerial", void 0);
 d([
-  f({ type: $t, repeated: "sequence" })
+  f({ type: Ct, repeated: "sequence" })
 ], hc.prototype, "attrs", void 0);
 var Zo;
 let Ar = Zo = class extends ue {
@@ -9736,7 +9736,7 @@ d([
   f({ type: ks })
 ], dt.prototype, "attrCertValidityPeriod", void 0);
 d([
-  f({ type: $t, repeated: "sequence" })
+  f({ type: Ct, repeated: "sequence" })
 ], dt.prototype, "attributes", void 0);
 d([
   f({ type: y.BitString, optional: !0 })
@@ -10078,7 +10078,7 @@ dn = d([
 ], dn);
 class Zn {
   constructor(e = {}) {
-    this.version = Ct.v3, this.originator = new dn(), this.keyEncryptionAlgorithm = new mt(), this.recipientEncryptedKeys = new $r(), Object.assign(this, e);
+    this.version = jt.v3, this.originator = new dn(), this.keyEncryptionAlgorithm = new yt(), this.recipientEncryptedKeys = new $r(), Object.assign(this, e);
   }
 }
 d([
@@ -10091,7 +10091,7 @@ d([
   f({ type: se, context: 1, optional: !0 })
 ], Zn.prototype, "ukm", void 0);
 d([
-  f({ type: mt })
+  f({ type: yt })
 ], Zn.prototype, "keyEncryptionAlgorithm", void 0);
 d([
   f({ type: $r })
@@ -10112,7 +10112,7 @@ Vn = d([
 ], Vn);
 class Li {
   constructor(e = {}) {
-    this.version = Ct.v0, this.rid = new Vn(), this.keyEncryptionAlgorithm = new mt(), this.encryptedKey = new se(), Object.assign(this, e);
+    this.version = jt.v0, this.rid = new Vn(), this.keyEncryptionAlgorithm = new yt(), this.encryptedKey = new se(), Object.assign(this, e);
   }
 }
 d([
@@ -10122,7 +10122,7 @@ d([
   f({ type: Vn })
 ], Li.prototype, "rid", void 0);
 d([
-  f({ type: mt })
+  f({ type: yt })
 ], Li.prototype, "keyEncryptionAlgorithm", void 0);
 d([
   f({ type: se })
@@ -10143,7 +10143,7 @@ d([
 ], Ui.prototype, "other", void 0);
 class Vi {
   constructor(e = {}) {
-    this.version = Ct.v4, this.kekid = new Ui(), this.keyEncryptionAlgorithm = new mt(), this.encryptedKey = new se(), Object.assign(this, e);
+    this.version = jt.v4, this.kekid = new Ui(), this.keyEncryptionAlgorithm = new yt(), this.encryptedKey = new se(), Object.assign(this, e);
   }
 }
 d([
@@ -10153,14 +10153,14 @@ d([
   f({ type: Ui })
 ], Vi.prototype, "kekid", void 0);
 d([
-  f({ type: mt })
+  f({ type: yt })
 ], Vi.prototype, "keyEncryptionAlgorithm", void 0);
 d([
   f({ type: se })
 ], Vi.prototype, "encryptedKey", void 0);
 class Mi {
   constructor(e = {}) {
-    this.version = Ct.v0, this.keyEncryptionAlgorithm = new mt(), this.encryptedKey = new se(), Object.assign(this, e);
+    this.version = jt.v0, this.keyEncryptionAlgorithm = new yt(), this.encryptedKey = new se(), Object.assign(this, e);
   }
 }
 d([
@@ -10170,7 +10170,7 @@ d([
   f({ type: Go, context: 0, optional: !0 })
 ], Mi.prototype, "keyDerivationAlgorithm", void 0);
 d([
-  f({ type: mt })
+  f({ type: yt })
 ], Mi.prototype, "keyEncryptionAlgorithm", void 0);
 d([
   f({ type: se })
@@ -10271,7 +10271,7 @@ ca = aa = d([
 ], ca);
 class zi {
   constructor(e = {}) {
-    this.version = Ct.v0, this.recipientInfos = new Cr(), this.encryptedContentInfo = new Ri(), Object.assign(this, e);
+    this.version = jt.v0, this.recipientInfos = new Cr(), this.encryptedContentInfo = new Ri(), Object.assign(this, e);
   }
 }
 d([
@@ -10301,7 +10301,7 @@ Or = la = d([
 ], Or);
 class Yn {
   constructor(e = {}) {
-    this.version = Ct.v0, this.digestAlgorithms = new Or(), this.encapContentInfo = new Is(), this.signerInfos = new Sr(), Object.assign(this, e);
+    this.version = jt.v0, this.digestAlgorithms = new Or(), this.encapContentInfo = new Is(), this.signerInfos = new Sr(), Object.assign(this, e);
   }
 }
 d([
@@ -10366,32 +10366,32 @@ var ua;
 (function(n) {
   n[n.ecpVer1 = 1] = "ecpVer1";
 })(ua || (ua = {}));
-let jt = class {
+let Nt = class {
   constructor(e = {}) {
     this.version = ua.ecpVer1, Object.assign(this, e);
   }
 };
 d([
   f({ type: y.Integer })
-], jt.prototype, "version", void 0);
+], Nt.prototype, "version", void 0);
 d([
   f({ type: ki })
-], jt.prototype, "fieldID", void 0);
+], Nt.prototype, "fieldID", void 0);
 d([
   f({ type: Mn })
-], jt.prototype, "curve", void 0);
+], Nt.prototype, "curve", void 0);
 d([
   f({ type: y_ })
-], jt.prototype, "base", void 0);
+], Nt.prototype, "base", void 0);
 d([
   f({ type: y.Integer, converter: ge })
-], jt.prototype, "order", void 0);
+], Nt.prototype, "order", void 0);
 d([
   f({ type: y.Integer, optional: !0 })
-], jt.prototype, "cofactor", void 0);
-jt = d([
+], Nt.prototype, "cofactor", void 0);
+Nt = d([
   T({ type: N.Sequence })
-], jt);
+], Nt);
 let Dt = class {
   constructor(e = {}) {
     Object.assign(this, e);
@@ -10404,7 +10404,7 @@ d([
   f({ type: y.Null })
 ], Dt.prototype, "implicitCurve", void 0);
 d([
-  f({ type: jt })
+  f({ type: Nt })
 ], Dt.prototype, "specifiedCurve", void 0);
 Dt = d([
   T({ type: N.Choice })
@@ -10546,41 +10546,41 @@ let fa = pa = class extends ue {
 fa = pa = d([
   T({ type: N.Sequence, itemType: Ts })
 ], fa);
-class bt {
+class kt {
   constructor(e = {}) {
     this.version = 0, this.modulus = new ArrayBuffer(0), this.publicExponent = new ArrayBuffer(0), this.privateExponent = new ArrayBuffer(0), this.prime1 = new ArrayBuffer(0), this.prime2 = new ArrayBuffer(0), this.exponent1 = new ArrayBuffer(0), this.exponent2 = new ArrayBuffer(0), this.coefficient = new ArrayBuffer(0), Object.assign(this, e);
   }
 }
 d([
   f({ type: y.Integer })
-], bt.prototype, "version", void 0);
+], kt.prototype, "version", void 0);
 d([
   f({ type: y.Integer, converter: ge })
-], bt.prototype, "modulus", void 0);
+], kt.prototype, "modulus", void 0);
 d([
   f({ type: y.Integer, converter: ge })
-], bt.prototype, "publicExponent", void 0);
+], kt.prototype, "publicExponent", void 0);
 d([
   f({ type: y.Integer, converter: ge })
-], bt.prototype, "privateExponent", void 0);
+], kt.prototype, "privateExponent", void 0);
 d([
   f({ type: y.Integer, converter: ge })
-], bt.prototype, "prime1", void 0);
+], kt.prototype, "prime1", void 0);
 d([
   f({ type: y.Integer, converter: ge })
-], bt.prototype, "prime2", void 0);
+], kt.prototype, "prime2", void 0);
 d([
   f({ type: y.Integer, converter: ge })
-], bt.prototype, "exponent1", void 0);
+], kt.prototype, "exponent1", void 0);
 d([
   f({ type: y.Integer, converter: ge })
-], bt.prototype, "exponent2", void 0);
+], kt.prototype, "exponent2", void 0);
 d([
   f({ type: y.Integer, converter: ge })
-], bt.prototype, "coefficient", void 0);
+], kt.prototype, "coefficient", void 0);
 d([
   f({ type: fa, optional: !0 })
-], bt.prototype, "otherPrimeInfos", void 0);
+], kt.prototype, "otherPrimeInfos", void 0);
 class Ec {
   constructor(e = {}) {
     this.modulus = new ArrayBuffer(0), this.publicExponent = new ArrayBuffer(0), Object.assign(this, e);
@@ -11201,7 +11201,7 @@ let ba = va = class extends ue {
   }
 };
 ba = va = d([
-  T({ type: N.Sequence, itemType: $t })
+  T({ type: N.Sequence, itemType: Ct })
 ], ba);
 class Fi {
   constructor(e = {}) {
@@ -11434,7 +11434,7 @@ d([
 ja = d([
   T({ type: N.Choice })
 ], ja);
-let au = class extends wt {
+let au = class extends bt {
 };
 au = d([
   T({ type: N.Sequence })
@@ -11494,7 +11494,7 @@ let qr = Ba = class extends ue {
   }
 };
 qr = Ba = d([
-  T({ type: N.Sequence, itemType: $t })
+  T({ type: N.Sequence, itemType: Ct })
 ], qr);
 class Xn {
   constructor(e = {}) {
@@ -12376,7 +12376,7 @@ We.CrlTag = "CRL";
 We.CertificateRequestTag = "CERTIFICATE REQUEST";
 We.PublicKeyTag = "PUBLIC KEY";
 We.PrivateKeyTag = "PRIVATE KEY";
-class Nt extends qt {
+class Ot extends qt {
   static isAsnEncoded(e) {
     return V.isBufferSource(e) || typeof e == "string";
   }
@@ -12397,7 +12397,7 @@ class Nt extends qt {
     }
   }
   constructor(...e) {
-    Nt.isAsnEncoded(e[0]) ? super(Nt.toArrayBuffer(e[0]), e[1]) : super(e[0]);
+    Ot.isAsnEncoded(e[0]) ? super(Ot.toArrayBuffer(e[0]), e[1]) : super(e[0]);
   }
   toString(e = "pem") {
     switch (e) {
@@ -12408,7 +12408,7 @@ class Nt extends qt {
     }
   }
 }
-class lt extends Nt {
+class lt extends Ot {
   static async create(e, t = $e.get()) {
     if (e instanceof lt)
       return e;
@@ -12426,7 +12426,7 @@ class lt extends Nt {
     }
   }
   constructor(e) {
-    Nt.isAsnEncoded(e) ? super(e, ct) : super(e), this.tag = We.PublicKeyTag;
+    Ot.isAsnEncoded(e) ? super(e, ct) : super(e), this.tag = We.PublicKeyTag;
   }
   async export(...e) {
     let t, i = ["verify"], r = { hash: "SHA-256", ...this.algorithm };
@@ -12740,9 +12740,9 @@ class Qn extends qt {
       t = V.toArrayBuffer(e[0]);
     else {
       const i = e[0], r = Array.isArray(e[1]) ? e[1].map((s) => V.toArrayBuffer(s)) : [];
-      t = U.serialize(new $t({ type: i, values: r }));
+      t = U.serialize(new Ct({ type: i, values: r }));
     }
-    super(t, $t);
+    super(t, Ct);
   }
   onInit(e) {
     this.type = e.type, this.values = e.values;
@@ -13032,9 +13032,9 @@ Ra = d([
   Ps()
 ], Ra);
 Oe.registerSingleton(qi, Ra);
-class o0 extends Nt {
+class o0 extends Ot {
   constructor(e) {
-    Nt.isAsnEncoded(e) ? super(e, xi) : super(e), this.tag = We.CertificateRequestTag;
+    Ot.isAsnEncoded(e) ? super(e, xi) : super(e), this.tag = We.CertificateRequestTag;
   }
   onInit(e) {
     this.tbs = U.serialize(e.certificationRequestInfo), this.publicKey = new lt(e.certificationRequestInfo.subjectPKInfo);
@@ -13092,9 +13092,9 @@ class o0 extends Nt {
   }
 }
 o0.NAME = "PKCS#10 Certificate Request";
-class Pc extends Nt {
+class Pc extends Ot {
   constructor(e) {
-    Nt.isAsnEncoded(e) ? super(e, un) : super(e), this.tag = We.CertificateTag;
+    Ot.isAsnEncoded(e) ? super(e, un) : super(e), this.tag = We.CertificateTag;
   }
   onInit(e) {
     const t = e.tbsCertificate;
@@ -15622,10 +15622,10 @@ zs.omit({
   at_hash: !0,
   c_hash: !0
 });
-function yt(n) {
+function vt(n) {
   return n.UNIVERSAL_LOGIN_URL || `${n.ISSUER}u/`;
 }
-function kt(n) {
+function xt(n) {
   return n.OAUTH_API_URL || n.ISSUER;
 }
 function Of(n) {
@@ -15642,7 +15642,7 @@ async function am(n, e) {
     t.team_id,
     t.kid,
     i,
-    `${kt(n.env)}callback`
+    `${xt(n.env)}callback`
   ), s = Ge(), o = await r.createAuthorizationURL(
     s,
     ((l = t.scope) == null ? void 0 : l.split(" ")) || ["name", "email"]
@@ -15658,7 +15658,7 @@ async function cm(n, e, t) {
     i.team_id,
     i.kid,
     r,
-    `${kt(n.env)}callback`
+    `${xt(n.env)}callback`
   ).validateAuthorizationCode(t), c = Uc(o.idToken());
   if (!c)
     throw new Error("Invalid ID token");
@@ -15686,7 +15686,7 @@ async function um(n, e) {
   const i = new jf(
     t.client_id,
     t.client_secret,
-    `${kt(n.env)}callback`
+    `${xt(n.env)}callback`
   ), r = Ge();
   return {
     redirectUrl: i.createAuthorizationURL(
@@ -15703,7 +15703,7 @@ async function dm(n, e, t) {
   const s = await new jf(
     i.client_id,
     i.client_secret,
-    `${kt(n.env)}callback`
+    `${xt(n.env)}callback`
   ).validateAuthorizationCode(t), o = await fetch(
     "https://graph.facebook.com/v16.0/me?fields=id,email,name",
     {
@@ -15734,7 +15734,7 @@ async function fm(n, e) {
   const i = new Nf(
     t.client_id,
     t.client_secret,
-    `${kt(n.env)}callback`
+    `${xt(n.env)}callback`
   ), r = Ge(), s = H0();
   return {
     redirectUrl: i.createAuthorizationURL(
@@ -15753,7 +15753,7 @@ async function hm(n, e, t, i) {
   const o = await new Nf(
     r.client_id,
     r.client_secret,
-    `${kt(n.env)}callback`
+    `${xt(n.env)}callback`
   ).validateAuthorizationCode(t, i);
   console.log("got here");
   const c = Uc(o.idToken());
@@ -15783,7 +15783,7 @@ async function _m(n, e) {
   const i = new Rc(
     t.client_id,
     t.client_secret,
-    `${kt(n.env)}callback`
+    `${xt(n.env)}callback`
   ), r = Ge(), s = i.createAuthorizationURL(
     "https://api.vipps.no/access-management-1.0/access/oauth2/auth",
     r,
@@ -15808,7 +15808,7 @@ async function mm(n, e, t) {
   const s = await new Rc(
     i.client_id,
     i.client_secret,
-    `${kt(n.env)}callback`
+    `${xt(n.env)}callback`
   ).validateAuthorizationCode(
     "https://api.vipps.no/access-management-1.0/access/oauth2/token",
     t,
@@ -15872,7 +15872,7 @@ async function Vc(n, e) {
     web_origins: [
       ...(i == null ? void 0 : i.web_origins) || [],
       ...t.web_origins || [],
-      `${yt(n)}login`
+      `${vt(n)}login`
     ],
     allowed_logout_urls: [
       ...(i == null ? void 0 : i.allowed_logout_urls) || [],
@@ -15882,7 +15882,7 @@ async function Vc(n, e) {
     callbacks: [
       ...(i == null ? void 0 : i.callbacks) || [],
       ...t.callbacks || [],
-      `${yt(n)}info`
+      `${vt(n)}info`
     ],
     connections: o,
     domains: [...t.domains || [], ...(i == null ? void 0 : i.domains) || []],
@@ -15892,12 +15892,16 @@ async function Vc(n, e) {
     }
   };
 }
-function Ds(n, e = []) {
+function Ds(n, e = [], t = {}) {
   try {
-    const t = new URL(n);
-    return e.some((i) => {
+    const i = new URL(n);
+    return e.some((r) => {
       try {
-        return vm(t, new URL(i));
+        return vm(
+          i,
+          new URL(r),
+          t.allowPathWildcards
+        );
       } catch {
         return !1;
       }
@@ -15906,17 +15910,18 @@ function Ds(n, e = []) {
     return !1;
   }
 }
-function vm(n, e) {
-  if (n.protocol !== e.protocol || n.pathname !== e.pathname)
+function vm(n, e, t) {
+  if (n.protocol !== e.protocol)
     return !1;
-  if (
-    // Only allow wildcard domains with a single subdomain
-    e.hostname.startsWith("*.") && // Ensure that it's not a top-level wildcard domain
-    e.hostname.split(".").length > 2 && // Ensure that the protocol is HTTP or HTTPS
-    ["http:", "https:"].includes(e.protocol)
-  ) {
-    const t = e.hostname.split(".").slice(1).join(".");
-    return n.hostname.endsWith(t);
+  if (t && e.pathname.includes("*")) {
+    const i = e.pathname.replace(/\*/g, ".*").replace(/\//g, "\\/");
+    if (!new RegExp(`^${i}$`).test(n.pathname))
+      return !1;
+  } else if (n.pathname !== e.pathname)
+    return !1;
+  if (e.hostname.startsWith("*.") && e.hostname.split(".").length > 2 && ["http:", "https:"].includes(e.protocol)) {
+    const i = e.hostname.split(".").slice(1).join(".");
+    return n.hostname.endsWith(i);
   }
   return n.hostname === e.hostname;
 }
@@ -16042,11 +16047,11 @@ zc.validate = function(n, e) {
           l += n[s];
         if (l = l.trim(), l[l.length - 1] === "/" && (l = l.substring(0, l.length - 1), s--), !Om(l)) {
           let g;
-          return l.trim().length === 0 ? g = "Invalid space after '<'." : g = "Tag '" + l + "' is an invalid name.", ve("InvalidTag", g, Pe(n, s));
+          return l.trim().length === 0 ? g = "Invalid space after '<'." : g = "Tag '" + l + "' is an invalid name.", we("InvalidTag", g, Pe(n, s));
         }
         const u = Em(n, s);
         if (u === !1)
-          return ve("InvalidAttr", "Attributes for '" + l + "' have open quote.", Pe(n, s));
+          return we("InvalidAttr", "Attributes for '" + l + "' have open quote.", Pe(n, s));
         let p = u.value;
         if (s = u.index, p[p.length - 1] === "/") {
           const g = s - p.length;
@@ -16055,18 +16060,18 @@ zc.validate = function(n, e) {
           if (m === !0)
             i = !0;
           else
-            return ve(m.err.code, m.err.msg, Pe(n, g + m.err.line));
+            return we(m.err.code, m.err.msg, Pe(n, g + m.err.line));
         } else if (c)
           if (u.tagClosed) {
             if (p.trim().length > 0)
-              return ve("InvalidTag", "Closing tag '" + l + "' can't have attributes or invalid starting.", Pe(n, o));
+              return we("InvalidTag", "Closing tag '" + l + "' can't have attributes or invalid starting.", Pe(n, o));
             if (t.length === 0)
-              return ve("InvalidTag", "Closing tag '" + l + "' has not been opened.", Pe(n, o));
+              return we("InvalidTag", "Closing tag '" + l + "' has not been opened.", Pe(n, o));
             {
               const g = t.pop();
               if (l !== g.tagName) {
                 let m = Pe(n, g.tagStartPos);
-                return ve(
+                return we(
                   "InvalidTag",
                   "Expected closing tag '" + g.tagName + "' (opened in line " + m.line + ", col " + m.col + ") instead of closing tag '" + l + "'.",
                   Pe(n, o)
@@ -16074,13 +16079,13 @@ zc.validate = function(n, e) {
               }
               t.length == 0 && (r = !0);
             }
-          } else return ve("InvalidTag", "Closing tag '" + l + "' doesn't have proper closing.", Pe(n, s));
+          } else return we("InvalidTag", "Closing tag '" + l + "' doesn't have proper closing.", Pe(n, s));
         else {
           const g = ld(p, e);
           if (g !== !0)
-            return ve(g.err.code, g.err.msg, Pe(n, s - p.length + g.err.line));
+            return we(g.err.code, g.err.msg, Pe(n, s - p.length + g.err.line));
           if (r === !0)
-            return ve("InvalidXml", "Multiple possible root nodes found.", Pe(n, s));
+            return we("InvalidXml", "Multiple possible root nodes found.", Pe(n, s));
           e.unpairedTags.indexOf(l) !== -1 || t.push({ tagName: l, tagStartPos: o }), i = !0;
         }
         for (s++; s < n.length; s++)
@@ -16095,23 +16100,23 @@ zc.validate = function(n, e) {
           else if (n[s] === "&") {
             const g = jm(n, s);
             if (g == -1)
-              return ve("InvalidChar", "char '&' is not expected.", Pe(n, s));
+              return we("InvalidChar", "char '&' is not expected.", Pe(n, s));
             s = g;
           } else if (r === !0 && !od(n[s]))
-            return ve("InvalidXml", "Extra text at the end", Pe(n, s));
+            return we("InvalidXml", "Extra text at the end", Pe(n, s));
         n[s] === "<" && s--;
       }
     } else {
       if (od(n[s]))
         continue;
-      return ve("InvalidChar", "char '" + n[s] + "' is not expected.", Pe(n, s));
+      return we("InvalidChar", "char '" + n[s] + "' is not expected.", Pe(n, s));
     }
   if (i) {
     if (t.length == 1)
-      return ve("InvalidTag", "Unclosed tag '" + t[0].tagName + "'.", Pe(n, t[0].tagStartPos));
+      return we("InvalidTag", "Unclosed tag '" + t[0].tagName + "'.", Pe(n, t[0].tagStartPos));
     if (t.length > 0)
-      return ve("InvalidXml", "Invalid '" + JSON.stringify(t.map((s) => s.tagName), null, 4).replace(/\r?\n/g, "") + "' found.", { line: 1, col: 1 });
-  } else return ve("InvalidXml", "Start tag expected.", 1);
+      return we("InvalidXml", "Invalid '" + JSON.stringify(t.map((s) => s.tagName), null, 4).replace(/\r?\n/g, "") + "' found.", { line: 1, col: 1 });
+  } else return we("InvalidXml", "Start tag expected.", 1);
   return !0;
 };
 function od(n) {
@@ -16124,7 +16129,7 @@ function ad(n, e) {
     if (n[e] == "?" || n[e] == " ") {
       const i = n.substr(t, e - t);
       if (e > 5 && i === "xml")
-        return ve("InvalidXml", "XML declaration allowed only at the start of the document.", Pe(n, e));
+        return we("InvalidXml", "XML declaration allowed only at the start of the document.", Pe(n, e));
       if (n[e] == "?" && n[e + 1] == ">") {
         e++;
         break;
@@ -16179,18 +16184,18 @@ function ld(n, e) {
   const t = Dc.getAllMatches(n, $m), i = {};
   for (let r = 0; r < t.length; r++) {
     if (t[r][1].length === 0)
-      return ve("InvalidAttr", "Attribute '" + t[r][2] + "' has no space in starting.", ii(t[r]));
+      return we("InvalidAttr", "Attribute '" + t[r][2] + "' has no space in starting.", ii(t[r]));
     if (t[r][3] !== void 0 && t[r][4] === void 0)
-      return ve("InvalidAttr", "Attribute '" + t[r][2] + "' is without value.", ii(t[r]));
+      return we("InvalidAttr", "Attribute '" + t[r][2] + "' is without value.", ii(t[r]));
     if (t[r][3] === void 0 && !e.allowBooleanAttributes)
-      return ve("InvalidAttr", "boolean attribute '" + t[r][2] + "' is not allowed.", ii(t[r]));
+      return we("InvalidAttr", "boolean attribute '" + t[r][2] + "' is not allowed.", ii(t[r]));
     const s = t[r][2];
     if (!Nm(s))
-      return ve("InvalidAttr", "Attribute '" + s + "' is an invalid name.", ii(t[r]));
+      return we("InvalidAttr", "Attribute '" + s + "' is an invalid name.", ii(t[r]));
     if (!i.hasOwnProperty(s))
       i[s] = 1;
     else
-      return ve("InvalidAttr", "Attribute '" + s + "' is repeated.", ii(t[r]));
+      return we("InvalidAttr", "Attribute '" + s + "' is repeated.", ii(t[r]));
   }
   return !0;
 }
@@ -16218,7 +16223,7 @@ function jm(n, e) {
     }
   return e;
 }
-function ve(n, e, t) {
+function we(n, e, t) {
   return {
     err: {
       code: n,
@@ -17428,27 +17433,39 @@ async function Hf(n, e, t) {
   });
 }
 async function Gi(n, e) {
-  const { authParams: t, user: i, client: r } = e, s = e.sid || (await Hf(n, i, r)).session_id;
+  const { authParams: t, user: i, client: r } = e, s = xe(n, {
+    type: ye.SUCCESS_LOGIN,
+    description: `Successful login for ${i.user_id}`,
+    userId: i.user_id
+  });
+  _t(n, n.env.data.logs.create(r.tenant.id, s)), _t(
+    n,
+    n.env.data.users.update(r.tenant.id, i.user_id, {
+      last_login: (/* @__PURE__ */ new Date()).toISOString(),
+      last_ip: n.req.header("x-real-ip") || ""
+    })
+  );
+  const o = e.sid || (await Hf(n, i, r)).session_id;
   if (e.authParams.response_mode === jn.SAML_POST)
-    return Fy(n, e.client, e.authParams, i, s);
-  const o = await Hc(n, {
+    return Fy(n, e.client, e.authParams, i, o);
+  const c = await Hc(n, {
     authParams: t,
     user: i,
     client: r,
-    sid: s
-  }), c = new Headers({
-    "set-cookie": Rf(r.tenant.id, s)
+    sid: o
+  }), l = new Headers({
+    "set-cookie": Rf(r.tenant.id, o)
   });
   if (t.response_mode === jn.WEB_MESSAGE)
-    return n.json(o, {
-      headers: c
+    return n.json(c, {
+      headers: l
     });
   if ((t.response_type || nn.CODE) === nn.CODE) {
     if (!e.loginSession)
       throw new O(500, {
         message: "Login session not found"
       });
-    const u = await n.env.data.codes.create(r.tenant.id, {
+    const p = await n.env.data.codes.create(r.tenant.id, {
       code_id: Ge(),
       user_id: i.user_id,
       code_type: "authorization_code",
@@ -17457,14 +17474,14 @@ async function Gi(n, e) {
         Date.now() + B0 * 1e3
       ).toISOString()
     });
-    c.set(
+    l.set(
       "location",
-      `${t.redirect_uri}?state=${e.authParams.state}&code=${u.code_id}`
+      `${t.redirect_uri}?state=${e.authParams.state}&code=${p.code_id}`
     );
   }
   return new Response("Redirecting", {
     status: 302,
-    headers: c
+    headers: l
   });
 }
 function qy(n) {
@@ -17491,8 +17508,8 @@ async function qf(n, e, t) {
       },
       body: JSON.stringify(t)
     })).ok) {
-      const s = Se(n, {
-        type: we.FAILED_LOGIN_INCORRECT_PASSWORD,
+      const s = xe(n, {
+        type: ye.FAILED_LOGIN_INCORRECT_PASSWORD,
         description: "Invalid password"
       });
       await t.logs.create(n.var.tenant_id, s);
@@ -17535,8 +17552,8 @@ async function Jy(n, e, t, i) {
     tenant_id: e.tenant.id,
     email: i
   })) {
-    const s = Se(n, {
-      type: we.FAILED_SIGNUP,
+    const s = xe(n, {
+      type: ye.FAILED_SIGNUP,
       description: "Public signup is disabled"
     });
     throw await n.env.data.logs.create(e.tenant.id, s), new O(400, {
@@ -17557,8 +17574,8 @@ async function Yy(n, e, t, i) {
   const r = e.connections.find((l) => l.name === t);
   if (!r) {
     n.set("client_id", e.id);
-    const l = Se(n, {
-      type: we.FAILED_LOGIN,
+    const l = xe(n, {
+      type: ye.FAILED_LOGIN,
       description: "Connection not found"
     });
     throw await n.env.data.logs.create(e.tenant.id, l), new O(403, { message: "Connection Not Found" });
@@ -17610,25 +17627,26 @@ async function pd(n, { code: e, state: t }) {
     (_) => _.id === r.connection_id
   );
   if (!c) {
-    const _ = Se(n, {
-      type: we.FAILED_LOGIN,
+    const _ = xe(n, {
+      type: ye.FAILED_LOGIN,
       description: "Connection not found"
     });
     throw await i.data.logs.create(o.tenant.id, _), new O(403, { message: "Connection not found" });
   }
   if (n.set("connection", c.name), !s.authParams.redirect_uri) {
-    const _ = Se(n, {
-      type: we.FAILED_LOGIN,
+    const _ = xe(n, {
+      type: ye.FAILED_LOGIN,
       description: "Redirect URI not defined"
     });
     throw await i.data.logs.create(o.tenant.id, _), new O(403, { message: "Redirect URI not defined" });
   }
   if (!Ds(
     s.authParams.redirect_uri,
-    o.callbacks || []
+    o.callbacks || [],
+    { allowPathWildcards: !0 }
   )) {
-    const _ = `Invalid redirect URI - ${s.authParams.redirect_uri}`, b = Se(n, {
-      type: we.FAILED_LOGIN,
+    const _ = `Invalid redirect URI - ${s.authParams.redirect_uri}`, b = xe(n, {
+      type: ye.FAILED_LOGIN,
       description: _
     });
     throw await i.data.logs.create(o.tenant.id, b), new O(403, {
@@ -17697,11 +17715,11 @@ async function fd(n, e, t, i, r, s) {
   const { redirect_uri: l } = c.authParams;
   if (!l)
     throw new O(400, { message: "Redirect uri not found" });
-  const u = Se(n, {
-    type: we.FAILED_LOGIN,
+  const u = xe(n, {
+    type: ye.FAILED_LOGIN,
     description: `Failed connection login: ${r} ${t}, ${i}`
   });
-  Pt(n, n.env.data.logs.create(n.var.tenant_id, u));
+  _t(n, n.env.data.logs.create(n.var.tenant_id, u));
   const p = new URL(l);
   return N0(p, {
     error: t,
@@ -17710,7 +17728,7 @@ async function fd(n, e, t, i, r, s) {
     error_code: r,
     state: c.authParams.state
   }), n.redirect(
-    `${yt(n.env)}enter-email?state=${c.login_id}&error=${t}`
+    `${vt(n.env)}enter-email?state=${c.login_id}&error=${t}`
   );
 }
 const Xy = new _e().openapi(
@@ -17844,10 +17862,14 @@ const Xy = new _e().openapi(
     const s = t || n.req.header("referer");
     if (!s)
       return n.text("OK");
-    if (!Ds(s, [
-      ...i.allowed_logout_urls || [],
-      ...(r == null ? void 0 : r.allowed_logout_urls) || []
-    ]))
+    if (!Ds(
+      s,
+      [
+        ...i.allowed_logout_urls || [],
+        ...(r == null ? void 0 : r.allowed_logout_urls) || []
+      ],
+      { allowPathWildcards: !0 }
+    ))
       throw new O(400, {
         message: "Invalid redirect uri"
       });
@@ -17869,8 +17891,8 @@ const Xy = new _e().openapi(
         await n.env.data.sessions.remove(i.tenant.id, l);
       }
     }
-    const c = Se(n, {
-      type: we.SUCCESS_LOGOUT,
+    const c = xe(n, {
+      type: ye.SUCCESS_LOGOUT,
       description: "User successfully logged out"
     });
     return await n.env.data.logs.create(i.tenant.id, c), new Response("Redirecting", {
@@ -18315,14 +18337,14 @@ async function uv(n, e, t, i) {
   const r = await n.env.data.tenants.get(n.var.tenant_id);
   if (!r)
     throw new O(500, { message: "Tenant not found" });
-  const s = `${yt(n.env)}reset-password?state=${i}&code=${t}`, o = {
+  const s = `${vt(n.env)}reset-password?state=${i}&code=${t}`, o = {
     vendorName: r.name,
     lng: r.language || "en"
   };
   await Hs(n, {
     to: e,
     subject: "Reset your password",
-    html: `Click here to reset your password: ${yt(n.env)}reset-password?state=${i}&code=${t}`,
+    html: `Click here to reset your password: ${vt(n.env)}reset-password?state=${i}&code=${t}`,
     template: "auth-password-reset",
     data: {
       vendorName: r.name,
@@ -18354,14 +18376,14 @@ async function dv(n, e, t) {
   await Hs(n, {
     to: e,
     subject: de("code_email_subject", r),
-    html: `Click here to validate your email: ${yt(n.env)}validate-email`,
+    html: `Click here to validate your email: ${vt(n.env)}validate-email`,
     template: "auth-link",
     data: {
       code: t,
       vendorName: i.name,
       logo: i.logo || "",
       supportUrl: i.support_url || "",
-      magicLink: `${kt(n.env)}passwordless/verify_redirect?ticket=${t}`,
+      magicLink: `${xt(n.env)}passwordless/verify_redirect?ticket=${t}`,
       buttonColor: i.primary_color || "",
       welcomeToYourAccount: de("welcome_to_your_account", r),
       linkEmailClickToLogin: de("link_email_click_to_login", r),
@@ -18373,11 +18395,11 @@ async function dv(n, e, t) {
       copyright: de("copyright", r)
     }
   });
-  const s = Se(n, {
-    type: we.CODE_LINK_SENT,
+  const s = xe(n, {
+    type: ye.CODE_LINK_SENT,
     description: e
   });
-  Pt(n, n.env.data.logs.create(i.id, s));
+  _t(n, n.env.data.logs.create(i.id, s));
 }
 async function Gf(n, e, t) {
   const i = await n.env.data.tenants.get(n.var.tenant_id);
@@ -18391,14 +18413,14 @@ async function Gf(n, e, t) {
   await Hs(n, {
     to: e,
     subject: de("code_email_subject", r),
-    html: `Click here to validate your email: ${yt(n.env)}validate-email`,
+    html: `Click here to validate your email: ${vt(n.env)}validate-email`,
     template: "auth-link",
     data: {
       code: t,
       vendorName: i.name,
       logo: i.logo || "",
       supportUrl: i.support_url || "",
-      magicLink: `${kt(n.env)}passwordless/verify_redirect?ticket=${t}`,
+      magicLink: `${xt(n.env)}passwordless/verify_redirect?ticket=${t}`,
       buttonColor: i.primary_color || "",
       welcomeToYourAccount: de("welcome_to_your_account", r),
       linkEmailClickToLogin: de("link_email_click_to_login", r),
@@ -18410,11 +18432,11 @@ async function Gf(n, e, t) {
       copyright: de("copyright", r)
     }
   });
-  const s = Se(n, {
-    type: we.CODE_LINK_SENT,
+  const s = xe(n, {
+    type: ye.CODE_LINK_SENT,
     description: e
   });
-  Pt(n, n.env.data.logs.create(i.id, s));
+  _t(n, n.env.data.logs.create(i.id, s));
 }
 async function Jf(n, e) {
   const t = await n.env.data.tenants.get(n.var.tenant_id);
@@ -18427,12 +18449,12 @@ async function Jf(n, e) {
   await Hs(n, {
     to: e.email,
     subject: "Validate your email address",
-    html: `Click here to validate your email: ${yt(n.env)}validate-email`,
+    html: `Click here to validate your email: ${vt(n.env)}validate-email`,
     template: "auth-verify-email",
     data: {
       vendorName: t.name,
       logo: t.logo || "",
-      emailValidationUrl: `${yt(n.env)}validate-email`,
+      emailValidationUrl: `${vt(n.env)}validate-email`,
       supportUrl: t.support_url || "https://support.sesamy.com",
       buttonColor: t.primary_color || "#7d68f4",
       welcomeToYourAccount: de("welcome_to_your_account", i),
@@ -18511,8 +18533,8 @@ const pv = new _e().openapi(
       password: c,
       algorithm: "bcrypt"
     }), await Jf(n, o);
-    const l = Se(n, {
-      type: we.SUCCESS_SIGNUP,
+    const l = xe(n, {
+      type: ye.SUCCESS_SIGNUP,
       description: "Successful signup"
     });
     return await n.env.data.logs.create(r.tenant.id, l), n.json({
@@ -18696,9 +18718,11 @@ const fv = new _e().openapi(
     const h = Dn(n.req);
     if (x.ip !== h.ip)
       return n.redirect(
-        `${yt(n.env)}invalid-session?state=${x.login_id}`
+        `${vt(n.env)}invalid-session?state=${x.login_id}`
       );
-    if (!Ds(s, g.callbacks))
+    if (!Ds(s, g.callbacks, {
+      allowPathWildcards: !0
+    }))
       throw new O(400, {
         message: `Invalid redirect URI - ${s}`
       });
@@ -18749,11 +18773,11 @@ async function hv(n, e, t) {
     provider: "auth2"
   });
   if (!s) {
-    const m = Se(n, {
-      type: we.FAILED_LOGIN_INCORRECT_PASSWORD,
+    const m = xe(n, {
+      type: ye.FAILED_LOGIN_INCORRECT_PASSWORD,
       description: "Invalid user"
     });
-    throw Pt(n, n.env.data.logs.create(e.tenant.id, m)), new si(403, {
+    throw _t(n, n.env.data.logs.create(e.tenant.id, m)), new si(403, {
       message: "User not found",
       code: "USER_NOT_FOUND"
     });
@@ -18770,11 +18794,11 @@ async function hv(n, e, t) {
     s.user_id
   );
   if (!await Ha.compare(t.password, c)) {
-    const m = Se(n, {
-      type: we.FAILED_LOGIN_INCORRECT_PASSWORD,
+    const m = xe(n, {
+      type: ye.FAILED_LOGIN_INCORRECT_PASSWORD,
       description: "Invalid password"
     });
-    throw Pt(n, n.env.data.logs.create(e.tenant.id, m)), new si(403, {
+    throw _t(n, n.env.data.logs.create(e.tenant.id, m)), new si(403, {
       message: "Invalid password",
       code: "INVALID_PASSWORD"
     });
@@ -18785,22 +18809,22 @@ async function hv(n, e, t) {
     include_totals: !1,
     q: `user_id:${o.user_id}`
   })).logs.filter(
-    (m) => m.type === we.FAILED_LOGIN_INCORRECT_PASSWORD && new Date(m.date) > new Date(Date.now() - 1e3 * 60 * 5)
+    (m) => m.type === ye.FAILED_LOGIN_INCORRECT_PASSWORD && new Date(m.date) > new Date(Date.now() - 1e3 * 60 * 5)
   ).length >= 3) {
-    const m = Se(n, {
+    const m = xe(n, {
       // TODO: change to BLOCKED_ACCOUNT_EMAIL
-      type: we.FAILED_LOGIN,
+      type: ye.FAILED_LOGIN,
       description: "Too many failed login attempts"
     });
-    throw Pt(n, n.env.data.logs.create(e.tenant.id, m)), new si(403, {
+    throw _t(n, n.env.data.logs.create(e.tenant.id, m)), new si(403, {
       message: "Too many failed login attempts",
       code: "TOO_MANY_FAILED_LOGINS"
     });
   }
   if (!s.email_verified && e.email_validation === "enforced") {
     await Jf(n, s);
-    const m = Se(n, {
-      type: we.FAILED_LOGIN,
+    const m = xe(n, {
+      type: ye.FAILED_LOGIN,
       description: "Email not verified"
     });
     throw await n.env.data.logs.create(e.tenant.id, m), new si(403, {
@@ -18808,13 +18832,13 @@ async function hv(n, e, t) {
       code: "EMAIL_NOT_VERIFIED"
     });
   }
-  const g = Se(n, {
-    type: we.SUCCESS_LOGIN,
+  const g = xe(n, {
+    type: ye.SUCCESS_LOGIN,
     description: "Successful login",
     strategy_type: "Username-Password-Authentication",
     strategy: "Username-Password-Authentication"
   });
-  return Pt(n, n.env.data.logs.create(e.tenant.id, g)), o;
+  return _t(n, n.env.data.logs.create(e.tenant.id, g)), o;
 }
 function gv() {
   const n = new Uint8Array(32);
@@ -19138,8 +19162,8 @@ async function bv({
       await p.data.sessions.update(e.tenant.id, t.session_id, {
         used_at: (/* @__PURE__ */ new Date()).toISOString()
       });
-      const S = Se(n, {
-        type: we.SUCCESS_SILENT_AUTH,
+      const S = xe(n, {
+        type: ye.SUCCESS_SILENT_AUTH,
         description: "Successful silent authentication"
       });
       return await n.env.data.logs.create(e.tenant.id, S), n.html(
@@ -19153,8 +19177,8 @@ async function bv({
       );
     }
   }
-  const m = Se(n, {
-    type: we.FAILED_SILENT_AUTH,
+  const m = xe(n, {
+    type: ye.FAILED_SILENT_AUTH,
     description: "Login required"
   });
   return await n.env.data.logs.create(e.tenant.id, m), n.html(
@@ -19249,7 +19273,9 @@ const kv = new _e().openapi(
       throw new O(403, {
         message: `Origin ${fe} not allowed`
       });
-    if (ae.redirect_uri && !Ds(ae.redirect_uri, q.callbacks || []))
+    if (ae.redirect_uri && !Ds(ae.redirect_uri, q.callbacks || [], {
+      allowPathWildcards: !0
+    }))
       throw new O(400, {
         message: `Invalid redirect URI - ${ae.redirect_uri}`
       });
@@ -20242,10 +20268,10 @@ export {
   nn as AuthorizationResponseType,
   Fa as CodeChallengeMethod,
   vo as GrantType,
-  we as LogTypes,
+  ye as LogTypes,
   ho as applicationInsertSchema,
   An as applicationSchema,
-  xt as auth0UserResponseSchema,
+  St as auth0UserResponseSchema,
   kd as authParamsSchema,
   Da as baseUserSchema,
   Hh as bordersSchema,