oidc-spa 8.2.10 → 8.2.11

package/README.md

@@ -24,37 +24,170 @@
   <a href="https://docs.oidc-spa.dev">Documentation</a>
 </p>
 
+## At a glance
+
+The Framework Agnostic Adapter:
+
+```ts
+import { createOidc } from "oidc-spa/core";
+import { z } from "zod";
+
+const oidc = await createOidc({
+    issuerUri: "https://auth.my-domain.net/realms/myrealm",
+    //issuerUri: "https://login.microsoftonline.com/...",
+    //issuerUri: "https://xxx.us.auth0.com/..."
+    //issuerUri: "https://accounts.google.com/o/oauth2/v2/auth"
+    clientId: "myclient",
+    decodedIdTokenSchema: z.object({
+        name: z.string(),
+        picture: z.string().optional(),
+        email: z.string(),
+        realm_access: z.object({ roles: z.array(z.string()) })
+    })
+});
+
+if (!oidc.isUserLoggedIn) {
+    oidc.login();
+    return;
+}
+
+const { name, realm_access } = oidc.getDecodedIdToken();
+
+console.log(`Hello ${name}`);
+
+const { accessToken } = await oidc.getTokens();
+
+await fetch("https://my-domain.net/api/todos", {
+    headers: {
+        Authorization: `Bearer ${accessToken}`
+    }
+});
+
+if (realm_access.roles.includes("realm-admin")) {
+    // User is an admin
+}
+```
+
+Higher level adapters, example with React + TanStack Router:
+
+<img width="1835" height="942" alt="Image" src="https://github.com/user-attachments/assets/a7a18bbc-998a-459c-8cfa-93b599a45524" />
+
 ## What this is
 
-oidc-spa is an OpenID Connect client for browser-centric web applications implementing the [Authorization Code Flow with PKCE](resources/why-no-client-secret.md).
+oidc-spa is a framework-agnostic OpenID Connect client for browser-centric web applications implementing the [Authorization Code Flow with PKCE](https://docs.oidc-spa.dev/resources/why-no-client-secret).
 
-oidc-spa replaces provider-specific SDKs like [keycloak-js](https://www.npmjs.com/package/keycloak-js), [auth0-spa-js](https://www.npmjs.com/package/@auth0/auth0-spa-js), or [@azure/msal-browser](https://www.npmjs.com/package/@azure/msal-browser) with one unified API that works with Keycloak, Auth0, Entra ID, and any other spec-compliant OIDC provider.
+It work with any spec compliant OIDC provider like [Keycloak](https://www.keycloak.org/), [Auth0](https://auth0.com/) or [Microsoft EntraID](https://www.microsoft.com/fr-fr/security/business/identity-access/microsoft-entra-id) and replace provider-specific SDKs like [keycloak-js](https://www.npmjs.com/package/keycloak-js), [auth0-spa-js](https://www.npmjs.com/package/@auth0/auth0-spa-js), or [@azure/msal-browser](https://www.npmjs.com/package/@azure/msal-browser) with one unified API, freeing your app from vendor lock-in and making it deployable in any IT system.  
+Concretely this mean that it let you build an app and sell it to different companies ensuring they will be able to deploy it in their environment regardless of what auth platform they use internally. &#x20;
 
-oidc-spa provides strong guarantees regarding the [protection of your tokens **even in case of successful XSS or supply chain attacks**](resources/why-no-client-secret.md#how-oidc-spa-mitigates-the-risks-of-token-exposure). No other solution does that.
+oidc-spa provides strong guarantees regarding the protection of your tokens [**even in case of successful XSS or supply chain attacks**](https://docs.oidc-spa.dev/v/v8/resources/xss-and-supply-chain-attack-protection). No other implementation can currently claim that. &#x20;
 
-oidc-spa is uncompromising in terms of performance, security, DX, and UX. You get a state-of-the-art authentication and authorization system out of the box with zero glue code to write and no knobs to adjust.
+It is uncompromising in terms of performance, security, DX, and UX. You get a state-of-the-art authentication and authorization system out of the box with zero glue code to write and no knobs to adjust.
 
-Unlike server-centric solutions such as [NextAuth](https://next-auth.js.org/), oidc-spa makes the frontend the OIDC client.
+Unlike server-centric solutions such as [Auth.js](https://authjs.dev/), oidc-spa makes the frontend the OIDC client in your IdP model's representation.
 
-Your backend becomes a simple OAuth2 resource server, and tokens can be validated offline. oidc-spa [also provides the tools for token validation on the server side](integration-guides/tanstack-router-+-node-rest-api.md).
+Your backend becomes a simple OAuth2 resource server that you frontend query with the access token attached as Authorization header. oidc-spa also provides the tools for token validation on the server side:
 
-That means no database, no session store, and **enterprise-grade UX** out of the box, while scaling naturally to edge runtimes.
+-   As an unified solution for [TanStack Start](https://tanstack.com/router/latest)&#x20;
+-   Or, as [a separate adapter](integration-guides/tanstack-router-+-node-rest-api.md) for creating authed APIs with [tRCP](https://trpc.io/), [Express](https://expressjs.com/), [Hono](https://hono.dev/), [Nest.js](https://nestjs.com/), ect.
 
-oidc-spa exposes real OIDC primitives, ID tokens, access tokens, and claims—instead of hiding them behind a “user” object, helping you understand and control your security posture.
+That means **no database,** no session store, and **enterprise-grade UX** out of the box, while scaling naturally to edge runtimes.
+
+oidc-spa exposes real OIDC primitives, decoded ID tokens, access tokens, and claims, instead of hiding them behind a “user” object, helping you understand and control your security posture.
 
 It’s infra-light, open-standard, transparent, and ready to work in minutes.
 
-## Integration
+<details>
+
+<summary>But in details? I want to understand the tradeoffs.</summary>  
+<br />
+  
+In the modern tech ecosystem, no one “rolls their own auth” anymore, not even OpenAI or Vercel.\
+Authentication has become a **platform concern**. Whether you host your own identity provider like **Keycloak**, or use a service such as **Auth0** or **Microsoft Entra ID**, authentication today means **redirecting users to your auth provider**.
 
-It's at its core [a framework-agnostic solution](https://docs.oidc-spa.dev/integration-guides/usage). But, in an effort to minimize the amount of glue code you have to write, it also exposes specific adapters for popular environments alongside implementation examples:
+---
+
+**Why not** [**BetterAuth**](https://www.better-auth.com/) **or** [**Auth.js**](https://authjs.dev/)
+
+These are great for what they are, but they’re “roll your own auth” solutions.\
+With oidc-spa, you delegate authentication to a specialized identity provider such as Keycloak, Auth0, Okta, or Clerk.
+
+With BetterAuth, your backend _is_ the authorization server, even if you can integrate third party identity providers id doesn't change that fact.\
+That’s very battery-included, but also far heavier infrastructure-wise.\
+Today, very few companies still roll their own auth, not even OpenAI or Vercel.
+
+Another big difference: oidc-spa is **browser-centric**. The token exchange happens on the client,\
+and the backend server is merely an OAuth2 resource server in the OIDC model.
+
+If you use BetterAuth to provide login via Keycloak, your backend becomes the OIDC client application,\
+which has some security benefits over browser token exchange, but at the cost of centralization and requiring backend infrastructure.
 
--   Full Stack: [TanStack Start](https://docs.oidc-spa.dev/integration-guides/tanstack-start)
--   React SPAs: With [React Router](https://docs.oidc-spa.dev/integration-guides/react-router) and TanStack Router integration.
--   [Angular](https://docs.oidc-spa.dev/integration-guides/angular)
--   ...more are coming
+One clear advantage BetterAuth has over oidc-spa is more natural SSR support. In the oidc-spa model, the server doesn’t know the authentication state of the user at all time, which makes it difficult to integrate with traditional full-stack frameworks that rely on server-side rendering.
+
+---
+
+**Server Side Rendering**
+
+The only SSR-capable framework we currently support is [TanStack Start](https://tanstack.com/start/latest), because it provides the low-level primitives needed to render as much as possible on the server while deferring rendering of auth aware components to the client.
+
+This approach achieves a similar UX and performance to server-centric frameworks, but it’s inherently less transparent than streaming fully authenticated components to the client.
+
+Try the TansStack Start example deployment with JavaScript disabled to get a feel of what can and can't be SSR'd: [https://example-tanstack-start.oidc-spa.dev/](https://example-tanstack-start.oidc-spa.dev/)
+
+---
+
+**Security and XSS resilience**
+
+Yes; client-side authentication raises valid security concerns.\
+But this isn’t a fatal flaw; it’s an **engineering challenge**, and oidc-spa addresses it head-on.
+
+It treats the browser as a **hostile environment**, going to great lengths to protect tokens even under **XSS or supply-chain attacks**.\
+These mitigations [are documented here](resources/why-no-client-secret.md).
+
+---
+
+**Limitations regarding backend delegation**
+
+The main limitation is with **long-running background operations**.\
+If your backend must call third-party APIs **on behalf of the user** while they’re offline, you’ll need **service accounts** for those APIs or take charge of rotating tokens yourself which [can be tricky](https://authjs.dev/guides/refresh-token-rotation).\
+Beyond that, everything else scalability, DX, performance, works in your favor.
+
+---
+
+If that all sounds good to you…\
+**Let’s get started.**
+
+</details>
+
+## Integration
+
+-   Full Stack - all in one auth solution:
+    -   [TanStack Start](https://docs.oidc-spa.dev/integration-guides/tanstack-start)
+-   Single Page Apps (SPAs):
+    -   [Framework Agnostic](https://docs.oidc-spa.dev/integration-guides/usage)
+    -   [React Router](https://docs.oidc-spa.dev/integration-guides/react-router)
+    -   [Tanstack Router](https://docs.oidc-spa.dev/integration-guides/tanstack-router-start/react-router)
+    -   [Angular](https://docs.oidc-spa.dev/integration-guides/angular)
+    -   ...More to come...
+-   Backend: [Express, Hono, tRPC, Nest.js ...](https://docs.oidc-spa.dev/integration-guides/tanstack-router-+-node-rest-api)
 
 ## Comparison with Existing Libraries
 
+With other OIDC clients, you'll get something that works in the happy path.  
+But then you will face issues like:
+
+-   The user cannot navigate back from the login page to your app.
+-   User get hit with "your session has expired please login again" after spending an hours filling your form.
+-   User logged out or logged in on one tabe but the state is not propagated to the other tabs.
+-   Random 401 from your API with "token expired"
+-   You can't run E2E test without having to actually connect to a real server.
+
+Plus you'll realize that your configuration works with one provider in one devloppement configuration,
+try to switch IdP and the all thing fall appart, you'll be met with criptic errors and have to spend
+days tweeking knobs again.
+
+With oidc-spa, there's no knobs to adjust, things just work out of the box.  
+And you get XSS and suply chain attack protection, unlike with any other client side solution.
+
 ### [oidc-client-ts](https://github.com/authts/oidc-client-ts)
 
 It is a great low-level implementation of the OIDC primitives.  
@@ -65,12 +198,13 @@ code that has no business living in application-level logic.
 Example of what you get out of the box with oidc-spa:
 
 -   **Login/logout propagation** across tabs
--   **Automatic silent sign-in when possible**, with full-page redirect fallback
+-   **SSO that just works**, regardless of the deployment configuration.
 -   **Seamless browser back/forward cache (bfcache) management**
--   **Auto logout countdown** so users are warned before inactivity logout
+-   **Auto logout**: avoid "your session has expired please login again" after the used just spend an hour filling your form.
 -   **Never getting an expired access token error**, even after waking from sleep
 -   **Graceful handling when the provider lacks refresh tokens or a logout endpoint** (e.g. Google OAuth)
 -   **Mock support**, run with a mock identity without contacting a server
+-   **Helpfull debug logs** important if you sell your solution, to streamline deployment.
 
 oidc-spa just works. You provide the few parameters required to talk to your IdP, and that’s it.
 
@@ -115,27 +249,27 @@ oidc-spa exposes an Angular adapter: [oidc-spa/angular](https://docs.oidc-spa.de
 This is a solid generic OIDC adapter.  
 However, `oidc-spa/angular` still has several advantages:
 
--   [Better security guarantees](https://docs.oidc-spa.dev/resources/why-no-client-secret#how-oidc-spa-mitigates-the-risks-of-token-exposure) (angular-oauth2-oidc does not protect tokens from XSS or supply-chain attacks)
--   Better performance due to early initialization
+-   [Better security guarantees](https://docs.oidc-spa.dev/resources/xss-and-supply-chain-attack-protection) (angular-oauth2-oidc does not protect tokens from XSS or supply-chain attacks)
+-   DX more aligned with modern Angular.
 -   Auto logout overlay (“Are you still there?” countdown)
 -   Stronger type safety with propagated user profile types
 -   Ability to start rendering before session restoration settles
 -   Support for multiple resource servers
 -   Clearer and more actionable error messages for misconfiguration
 
-### [BetterAuth](https://www.better-auth.com/) / [NextAuth.js](https://next-auth.js.org/)
+### [BetterAuth](https://www.better-auth.com/) / [Auth.js](https://authjs.dev/)
 
-These are great for what they are—but they’re “roll your own auth” solutions.  
+These are great for what they are, but they’re “roll your own auth” solutions.  
 With oidc-spa, you delegate authentication to a specialized identity provider such as Keycloak, Auth0, Okta, or Clerk.
 
-With BetterAuth, your backend _is_ the authorization server.  
+With BetterAuth, your backend _is_ the authorization server. (even if you can integrate third party provider).  
 That’s very battery-included, but also far heavier infrastructure-wise.  
 Today, very few companies still roll their own auth—including OpenAI and Vercel.
 
 Another big difference: oidc-spa is **browser-centric**. The token exchange happens on the client,  
 and the backend server is merely an OAuth2 resource server in the OIDC model.
 
-If you use BetterAuth to provide login via Keycloak, your backend becomes the OIDC client application—  
+If you use BetterAuth to provide login via Keycloak, your backend becomes the OIDC client application,  
 which has some security benefits over browser token exchange, but at the cost of centralization and requiring backend infrastructure.
 
 One clear advantage BetterAuth has over oidc-spa is SSR support.

package/core/createOidc.js

@@ -71,7 +71,7 @@ const instancesThatCantUseIframes_1 = require("./instancesThatCantUseIframes");
 const desiredPostLoginRedirectUrl_1 = require("./desiredPostLoginRedirectUrl");
 const homeAndRedirectUri_1 = require("./homeAndRedirectUri");
 // NOTE: Replaced at build time
-const VERSION = "8.2.10";
+const VERSION = "8.2.11";
 const globalContext = {
     prOidcByConfigId: new Map(),
     hasLogoutBeenCalled: (0, id_1.id)(false)

package/esm/core/createOidc.js

@@ -34,7 +34,7 @@ import { evtIsThereMoreThanOneInstanceThatCantUserIframes, notifyNewInstanceThat
 import { getDesiredPostLoginRedirectUrl } from "./desiredPostLoginRedirectUrl";
 import { getHomeAndRedirectUri } from "./homeAndRedirectUri";
 // NOTE: Replaced at build time
-const VERSION = "8.2.10";
+const VERSION = "8.2.11";
 const globalContext = {
     prOidcByConfigId: new Map(),
     hasLogoutBeenCalled: id(false)

package/esm/react-spa/createOidcSpaApi.js

@@ -76,7 +76,7 @@ export function createOidcSpaApi(params) {
                 break check_assertion;
             }
             const getMessage = (v) => [
-                "There is a logic error in the application.",
+                "oidc-spa: There is a logic error in the application.",
                 `If this component is mounted the user is supposed ${v}.`,
                 "An explicit assertion was made in this sense."
             ].join(" ");

package/esm/react-spa/createOidcSpaApi.js.map

@@ -1 +1 @@
-{"version":3,"file":"createOidcSpaApi.js","sourceRoot":"","sources":["../../src/react-spa/createOidcSpaApi.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAsC,MAAM,OAAO,CAAC;AAI5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAe,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF,MAAM,UAAU,gBAAgB,CAG9B,MAMD;IACG,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,GAAG,MAAM,CAAC;IAExE,MAAM,kBAAkB,GAAG,IAAI,QAAQ,EAAgD,CAAC;IAExF,MAAM,8BAA8B,GAAG,IAAI,QAAQ,EAEhD,CAAC;IAEJ,MAAM,kBAAkB,GAAG,iBAAiB,CACxC,GAAG,EAAE,CAAC,CAAC;QACH,oBAAoB,EAAE,KAAK;KAC9B,CAAC,CACL,CAAC;IAEF,8BAA8B,CAAC,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,EAAE;QACnE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC;QAEhF,MAAM,CAAC,WAAW,CAAC,CAAC;QAEpB,IAAI,iBAAiB,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;YAC9C,OAAO;QACX,CAAC;QACD,MAA+D,CAAC;QAEhE,MAAM,EAAE,+BAA+B,GAAG,EAAE,EAAE,GAAG,iBAAiB,CAAC;QAEnE,IACI,6BAA6B,KAAK,SAAS;YAC3C,6BAA6B,YAAY,uBAAuB,EAClE,CAAC;YACC,OAAO;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,6BAA6B,CAAC;QAE/C,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO;QACX,CAAC;QAED,QAAQ,CAAC,8BAA8B,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;YACxD,MAAM,QAAQ,GAAsD,CAAC,GAAG,EAAE;gBACtE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC5B,OAAO;wBACH,oBAAoB,EAAE,KAAK;qBAC9B,CAAC;gBACN,CAAC;gBAED,IAAI,WAAW,GAAG,+BAA+B,EAAE,CAAC;oBAChD,OAAO;wBACH,oBAAoB,EAAE,KAAK;qBAC9B,CAAC;gBACN,CAAC;gBAED,OAAO;oBACH,oBAAoB,EAAE,IAAI;oBAC1B,2BAA2B,EAAE,WAAW;iBAC3C,CAAC;YACN,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBACrF,OAAO;YACX,CAAC;YAED,kBAAkB,CAAC,OAAO,GAAG,QAAQ,CAAC;QAC1C,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,SAAS,OAAO,CAAC,MAEhB;QACG,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAE/C,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACX;gBACI,kDAAkD;gBAClD,6DAA6D;gBAC7D,gDAAgD;aACnD,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,8BAA8B,CAAC,QAAQ,EAAE,CAAC;QAEnF,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,8BAA8B,CAAC,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,QAAQ,YAAY,uBAAuB,EAAE,CAAC;YAC9C,MAAM,QAAQ,CAAC;QACnB,CAAC;QAED,eAAe,EAAE,CAAC;YACd,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,eAAe,CAAC;YAC1B,CAAC;YAED,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,EAAE,CAC7B;gBACI,4CAA4C;gBAC5C,qDAAqD,CAAC,GAAG;gBACzD,+CAA+C;aAClD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEhB,QAAQ,aAAa,EAAE,CAAC;gBACpB,KAAK,gBAAgB;oBACjB,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;wBAC3B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,0CAA0C,CAAC,CAAC,CAAC;oBAC5E,CAAC;oBACD,MAAM;gBACV,KAAK,oBAAoB;oBACrB,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;wBAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,4CAA4C,CAAC,CAAC,CAAC;oBAC9E,CAAC;oBACD,MAAM;gBACV;oBACI,MAAM,CAAsC,KAAK,CAAC,CAAC;YAC3D,CAAC;QACL,CAAC;QAED,MAAM,CAAC,EAAE,+BAA+B,CAAC,GAAG,QAAQ,CAA6B,GAAG,EAAE;YAClF,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,uBAAuB,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAU,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAE1F,SAAS,CAAC,GAAG,EAAE;YACX,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC3B,OAAO;YACX,CAAC;YAED,IAAI,QAAQ,GAAG,IAAI,CAAC;YAEpB,IAAI,WAAW,GAA6B,SAAS,CAAC;YAEtD,CAAC,KAAK,IAAI,EAAE;gBACR,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,CAAC;oBACnC,MAAM,mBAAmB,GAAG,IAAI,QAAQ,EAAQ,CAAC;oBAEjD,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAAG,EAAE;wBAC9E,iBAAiB,EAAE,CAAC;wBACpB,mBAAmB,CAAC,OAAO,EAAE,CAAC;oBAClC,CAAC,CAAC,CAAC;oBACH,WAAW,GAAG,iBAAiB,CAAC;oBAEhC,MAAM,mBAAmB,CAAC,EAAE,CAAC;oBAE7B,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACZ,OAAO;oBACX,CAAC;gBACL,CAAC;gBAED,+BAA+B,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBAE9D,WAAW,GAAG,QAAQ,CAAC,uBAAuB,CAAC,GAAG,EAAE;oBAChD,+BAA+B,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC,WAAW,CAAC;YACnB,CAAC,CAAC,EAAE,CAAC;YAEL,OAAO,GAAG,EAAE;gBACR,QAAQ,GAAG,KAAK,CAAC;gBACjB,WAAW,EAAE,EAAE,CAAC;YACpB,CAAC,CAAC;QACN,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,MAAM,CAAC,wBAAwB,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAU,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAE3F,MAAM,CAAC,EAAE,gCAAgC,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAExF,SAAS,CAAC,GAAG,EAAE;YACX,IAAI,QAAQ,GAAG,IAAI,CAAC;YACpB,IAAI,WAAW,GAA6B,SAAS,CAAC;YAEtD,CAAC,KAAK,IAAI,EAAE;gBACR,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,CAAC;oBACpC,MAAM,oBAAoB,GAAG,IAAI,QAAQ,EAAQ,CAAC;oBAElD,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,wBAAwB,CAAC,SAAS,CAAC,GAAG,EAAE;wBAC/E,iBAAiB,EAAE,CAAC;wBACpB,oBAAoB,CAAC,OAAO,EAAE,CAAC;oBACnC,CAAC,CAAC,CAAC;oBACH,WAAW,GAAG,iBAAiB,CAAC;oBAEhC,MAAM,oBAAoB,CAAC,EAAE,CAAC;oBAE9B,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACZ,OAAO;oBACX,CAAC;gBACL,CAAC;gBAED,gCAAgC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBAE7D,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC,WAAW,CAAC;YAC7F,CAAC,CAAC,EAAE,CAAC;YAEL,OAAO,GAAG,EAAE;gBACR,QAAQ,GAAG,KAAK,CAAC;gBACjB,WAAW,EAAE,EAAE,CAAC;YACpB,CAAC,CAAC;QACN,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,EAAE,CAA2B;gBAChC,cAAc,EAAE,KAAK;gBACrB,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;gBAClC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB;gBAClD,eAAe,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;gBAChD,KAAK,EAAE,MAAM,CAAC,EAAE,CACZ,QAAQ,CAAC,KAAK,CAAC;oBACX,2BAA2B,EAAE,KAAK;oBAClC,GAAG,MAAM;iBACZ,CAAC;aACT,CAAC,CAAC;QACP,CAAC;QAED,OAAO,EAAE,CAAwC;YAC7C,cAAc,EAAE,IAAI;YACpB,IAAI,cAAc;gBACd,uBAAuB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACvC,OAAO,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YACxC,CAAC;YACD,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,IAAI,eAAe;gBACf,wBAAwB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACxC,OAAO,kBAAkB,CAAC,OAAO,CAAC;YACtC,CAAC;YACD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;YACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;YAClC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB;SACrD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,MAEtB;QACG,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC,EAAE,CAAC;QAEzD,IAAI,QAAQ,YAAY,uBAAuB,EAAE,CAAC;YAC9C,OAAO,IAAI,OAAO,CAAQ,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,MAAM,EAAE,MAAM,KAAK,gBAAgB,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACX;gBACI,wDAAwD;gBACxD,0CAA0C;aAC7C,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;QACN,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,KAAK,oBAAoB,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CACX;gBACI,4DAA4D;gBAC5D,sCAAsC;aACzC,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;QACN,CAAC;QAED,OAAO,QAAQ,CAAC,cAAc;YAC1B,CAAC,CAAC,EAAE,CAAwC;gBACtC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;gBAClC,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,KAAK,IAAI,EAAE;oBACvB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACnD,OAAO,WAAW,CAAC;gBACvB,CAAC;gBACD,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,0BAA0B,EAAE,IAAI,CAAC,EAAE;oBAC/B,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;oBAEjC,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBAE3D,OAAO,EAAE,8BAA8B,EAAE,WAAW,EAAE,CAAC;gBAC3D,CAAC;aACJ,CAAC;YACJ,CAAC,CAAC,EAAE,CAA2B;gBACzB,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;gBAClC,cAAc,EAAE,KAAK;gBACrB,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,KAAK,EAAE,QAAQ,CAAC,KAAK;aACxB,CAAC,CAAC;IACb,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEhE,IAAI,wBAAwB,GAA8B,SAAS,CAAC;IAEpE,MAAM,aAAa,GAAG,CAClB,iBAA+D,EAClD,EAAE;QACf,IAAI,wBAAwB,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,wBAAwB,CAAC;QACpC,CAAC;QAED,wBAAwB,GAAG,8BAA8B,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAE5E,CAAC,KAAK,IAAI,EAAE;YACR,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO;YACX,CAAC;YAED,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;YAEnC,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAE9C,QAAQ,iBAAiB,CAAC,cAAc,EAAE,CAAC;gBACvC,KAAK,MAAM;oBACP,CAAC;wBACG,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;wBAExD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC;4BAClC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;4BACpC,uFAAuF;4BACvF,SAAS,EAAE,SAAkB;4BAC7B,oDAAoD;4BACpD,uBAAuB,EAAE,iBAAiB,CAAC,uBAAwB;4BACnE,YAAY,EAAE;gCACV,QAAQ,EAAE,iBAAiB,CAAC,aAAa;gCACzC,SAAS,EAAE,iBAAiB,CAAC,cAAc;6BAC9C;4BACD,YAAY,EAAE;gCACV,cAAc,EACV,iBAAiB,CAAC,mBAAmB;oCACrC,mBAAmB;oCACnB,gCAAgC,CAAiB;wCAC7C,YAAY,EAAE;4CACV,8DAA8D;4CAC9D,gEAAgE;4CAChE,uDAAuD;4CACvD,0DAA0D;yCAC7D,CAAC,IAAI,CAAC,GAAG,CAAC;qCACd,CAAC;6BACT;yBACJ,CAAC,CAAC;wBAEH,8BAA8B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACrD,CAAC;oBACD,MAAM;gBACV,KAAK,MAAM;oBACP,CAAC;wBACG,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,YAAY,CAAC;wBAE1C,IAAI,6BAEyB,CAAC;wBAE9B,IAAI,CAAC;4BACD,6BAA6B,GAAG,MAAM,UAAU,CAAC;gCAC7C,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;gCACpC,SAAS;gCACT,oBAAoB;gCACpB,SAAS,EAAE,iBAAiB,CAAC,SAAS;gCACtC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;gCACpC,4BAA4B,EACxB,iBAAiB,CAAC,4BAA4B;gCAClD,MAAM,EAAE,iBAAiB,CAAC,MAAM;gCAChC,0BAA0B,EAAE,iBAAiB,CAAC,0BAA0B;gCACxE,gBAAgB,EAAE,iBAAiB,CAAC,gBAAgB;gCACpD,gBAAgB,EAAE,iBAAiB,CAAC,gBAAgB;gCACpD,wBAAwB,EAAE,iBAAiB,CAAC,wBAAwB;gCACpE,SAAS,EAAE,iBAAiB,CAAC,SAAS;gCACtC,qBAAqB,EAAE,iBAAiB,CAAC,qBAAqB;gCAC9D,UAAU,EAAE,iBAAiB,CAAC,UAAU;gCACxC,gCAAgC,EAC5B,iBAAiB,CAAC,gCAAgC;gCACtD,gBAAgB,EAAE,iBAAiB,CAAC,gBAAgB;6BACvD,CAAC,CAAC;wBACP,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACb,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC,EAAE,CAAC;gCAC9C,MAAM,KAAK,CAAC;4BAChB,CAAC;4BACD,8BAA8B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;4BAC9C,OAAO;wBACX,CAAC;wBAED,8BAA8B,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;oBAC1E,CAAC;oBACD,MAAM;YACd,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,wBAAwB,CAAC;IACpC,CAAC,CAAC;IAEF,KAAK,UAAU,YAAY,CAAC,aAM3B;QACG,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC;QAEhC,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;YACtB,IAAI,aAAa,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC3C,OAAO,mBAAmB,CAAC;oBACvB,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG;oBACjC,qBAAqB,EAAE,KAAK;iBAC/B,CAAC,CAAC;YACP,CAAC;YAED,IAAI,aAAa,CAAC,QAAQ,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7C,OAAO,mBAAmB,CAAC;oBACvB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI;oBACnC,qBAAqB,EAAE,KAAK;iBAC/B,CAAC,CAAC;YACP,CAAC;YAED,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAChC,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;QAE7B,MAAM,oBAAoB,GACtB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE/E,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACX,0FAA0F,CAC7F,CAAC;YACN,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC;gBACb,WAAW;gBACX,2BAA2B,EAAE,oBAAoB;aACpD,CAAC,CAAC;QACP,CAAC;QAED,qCAAqC,EAAE,CAAC;YACpC,IAAI,oBAAoB,EAAE,CAAC;gBACvB,MAAM,qCAAqC,CAAC;YAChD,CAAC;YAED,8BAA8B,CAAC,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC,CAAC;YAEtE,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;YAC5C,MAAM,oBAAoB,GAAG,OAAO,CAAC,YAAY,CAAC;YAElD,MAAM,WAAW,GAAG,GAAG,EAAE;gBACrB,OAAO,CAAC,SAAS,GAAG,iBAAiB,CAAC;gBACtC,OAAO,CAAC,YAAY,GAAG,oBAAoB,CAAC;gBAC5C,8BAA8B,CAAC,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC;YACxE,CAAC,CAAC;YAEF,OAAO,CAAC,SAAS,GAAG,SAAS,SAAS,CAAC,GAAG,IAAI;gBAC1C,WAAW,EAAE,CAAC;gBACd,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC;YAEF,OAAO,CAAC,YAAY,GAAG,SAAS,YAAY,CAAC,GAAG,IAAI;gBAChD,WAAW,EAAE,CAAC;gBACd,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;YACvD,CAAC,CAAC;QACN,CAAC;IACL,CAAC;IAED,SAAS,2BAA2B,CAAC,KAKpC;QACG,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAE3D,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,iCAAiC,EAAE,GAC3D,8BAA8B,CAAC,QAAQ,EAAE,CAAC;QAE9C,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,8BAA8B,CAAC,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,iCAAiC,YAAY,uBAAuB,EAAE,CAAC;YACvE,MAAM,uBAAuB,GAAG,iCAAiC,CAAC;YAElE,OAAO,KAAC,cAAc,IAAC,uBAAuB,EAAE,uBAAuB,GAAI,CAAC;QAChF,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,SAAS,sBAAsB,CAAC,KAAoD;QAChF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAErC,MAAM,EAAE,WAAW,EAAE,GAAG,8BAA8B,CAAC,QAAQ,EAAE,CAAC;QAElE,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/C,SAAS,CAAC,GAAG,EAAE;YACX,IAAI,WAAW,EAAE,CAAC;gBACd,OAAO;YACX,CAAC;YAED,IAAI,QAAQ,GAAG,IAAI,CAAC;YAEpB,8BAA8B,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACZ,OAAO;gBACX,CAAC;gBACD,QAAQ,EAAE,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,OAAO,GAAG,EAAE;gBACR,QAAQ,GAAG,KAAK,CAAC;YACrB,CAAC,CAAC;QACN,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,SAAS,iBAAiB,CACtB,SAA+B;QAE/B,MAAM,SAAS,GAAG,SAAS,CAAC;QAE5B,SAAS,0BAA0B,CAAC,KAAY;YAC5C,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,8BAA8B,CAAC,QAAQ,EAAE,CAAC;YAEnF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACf,MAAM,8BAA8B,CAAC,EAAE,CAAC;YAC5C,CAAC;YAED,IAAI,QAAQ,YAAY,uBAAuB,EAAE,CAAC;gBAC9C,MAAM,QAAQ,CAAC;YACnB,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC3B,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;QACpC,CAAC;QAED,0BAA0B,CAAC,WAAW,GAAG,GACrC,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI,IAAI,WAC/C,mBAAmB,CAAC;QAEpB,OAAO,0BAA0B,CAAC;IACtC,CAAC;IAED,mBAAmB;IACnB,OAAO;QACH,aAAa;QACb,OAAO;QACP,OAAO;QACP,sBAAsB;QACtB,2BAA2B;QAC3B,YAAY;QACZ,iBAAiB;KACpB,CAAC;AACN,CAAC"}
+{"version":3,"file":"createOidcSpaApi.js","sourceRoot":"","sources":["../../src/react-spa/createOidcSpaApi.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAsC,MAAM,OAAO,CAAC;AAI5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAe,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF,MAAM,UAAU,gBAAgB,CAG9B,MAMD;IACG,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,GAAG,MAAM,CAAC;IAExE,MAAM,kBAAkB,GAAG,IAAI,QAAQ,EAAgD,CAAC;IAExF,MAAM,8BAA8B,GAAG,IAAI,QAAQ,EAEhD,CAAC;IAEJ,MAAM,kBAAkB,GAAG,iBAAiB,CACxC,GAAG,EAAE,CAAC,CAAC;QACH,oBAAoB,EAAE,KAAK;KAC9B,CAAC,CACL,CAAC;IAEF,8BAA8B,CAAC,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,EAAE;QACnE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,kBAAkB,CAAC,QAAQ,EAAE,CAAC;QAEhF,MAAM,CAAC,WAAW,CAAC,CAAC;QAEpB,IAAI,iBAAiB,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;YAC9C,OAAO;QACX,CAAC;QACD,MAA+D,CAAC;QAEhE,MAAM,EAAE,+BAA+B,GAAG,EAAE,EAAE,GAAG,iBAAiB,CAAC;QAEnE,IACI,6BAA6B,KAAK,SAAS;YAC3C,6BAA6B,YAAY,uBAAuB,EAClE,CAAC;YACC,OAAO;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,6BAA6B,CAAC;QAE/C,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO;QACX,CAAC;QAED,QAAQ,CAAC,8BAA8B,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE;YACxD,MAAM,QAAQ,GAAsD,CAAC,GAAG,EAAE;gBACtE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC5B,OAAO;wBACH,oBAAoB,EAAE,KAAK;qBAC9B,CAAC;gBACN,CAAC;gBAED,IAAI,WAAW,GAAG,+BAA+B,EAAE,CAAC;oBAChD,OAAO;wBACH,oBAAoB,EAAE,KAAK;qBAC9B,CAAC;gBACN,CAAC;gBAED,OAAO;oBACH,oBAAoB,EAAE,IAAI;oBAC1B,2BAA2B,EAAE,WAAW;iBAC3C,CAAC;YACN,CAAC,CAAC,EAAE,CAAC;YAEL,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBACrF,OAAO;YACX,CAAC;YAED,kBAAkB,CAAC,OAAO,GAAG,QAAQ,CAAC;QAC1C,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,SAAS,OAAO,CAAC,MAEhB;QACG,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAE/C,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACX;gBACI,kDAAkD;gBAClD,6DAA6D;gBAC7D,gDAAgD;aACnD,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;QACN,CAAC;QAED,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,8BAA8B,CAAC,QAAQ,EAAE,CAAC;QAEnF,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,8BAA8B,CAAC,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,QAAQ,YAAY,uBAAuB,EAAE,CAAC;YAC9C,MAAM,QAAQ,CAAC;QACnB,CAAC;QAED,eAAe,EAAE,CAAC;YACd,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,eAAe,CAAC;YAC1B,CAAC;YAED,MAAM,UAAU,GAAG,CAAC,CAAS,EAAE,EAAE,CAC7B;gBACI,sDAAsD;gBACtD,qDAAqD,CAAC,GAAG;gBACzD,+CAA+C;aAClD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEhB,QAAQ,aAAa,EAAE,CAAC;gBACpB,KAAK,gBAAgB;oBACjB,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;wBAC3B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,0CAA0C,CAAC,CAAC,CAAC;oBAC5E,CAAC;oBACD,MAAM;gBACV,KAAK,oBAAoB;oBACrB,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;wBAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,4CAA4C,CAAC,CAAC,CAAC;oBAC9E,CAAC;oBACD,MAAM;gBACV;oBACI,MAAM,CAAsC,KAAK,CAAC,CAAC;YAC3D,CAAC;QACL,CAAC;QAED,MAAM,CAAC,EAAE,+BAA+B,CAAC,GAAG,QAAQ,CAA6B,GAAG,EAAE;YAClF,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,uBAAuB,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAU,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAE1F,SAAS,CAAC,GAAG,EAAE;YACX,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC3B,OAAO;YACX,CAAC;YAED,IAAI,QAAQ,GAAG,IAAI,CAAC;YAEpB,IAAI,WAAW,GAA6B,SAAS,CAAC;YAEtD,CAAC,KAAK,IAAI,EAAE;gBACR,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,CAAC;oBACnC,MAAM,mBAAmB,GAAG,IAAI,QAAQ,EAAQ,CAAC;oBAEjD,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,uBAAuB,CAAC,SAAS,CAAC,GAAG,EAAE;wBAC9E,iBAAiB,EAAE,CAAC;wBACpB,mBAAmB,CAAC,OAAO,EAAE,CAAC;oBAClC,CAAC,CAAC,CAAC;oBACH,WAAW,GAAG,iBAAiB,CAAC;oBAEhC,MAAM,mBAAmB,CAAC,EAAE,CAAC;oBAE7B,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACZ,OAAO;oBACX,CAAC;gBACL,CAAC;gBAED,+BAA+B,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBAE9D,WAAW,GAAG,QAAQ,CAAC,uBAAuB,CAAC,GAAG,EAAE;oBAChD,+BAA+B,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC,WAAW,CAAC;YACnB,CAAC,CAAC,EAAE,CAAC;YAEL,OAAO,GAAG,EAAE;gBACR,QAAQ,GAAG,KAAK,CAAC;gBACjB,WAAW,EAAE,EAAE,CAAC;YACpB,CAAC,CAAC;QACN,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,MAAM,CAAC,wBAAwB,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAU,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAE3F,MAAM,CAAC,EAAE,gCAAgC,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAExF,SAAS,CAAC,GAAG,EAAE;YACX,IAAI,QAAQ,GAAG,IAAI,CAAC;YACpB,IAAI,WAAW,GAA6B,SAAS,CAAC;YAEtD,CAAC,KAAK,IAAI,EAAE;gBACR,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,CAAC;oBACpC,MAAM,oBAAoB,GAAG,IAAI,QAAQ,EAAQ,CAAC;oBAElD,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,GAAG,wBAAwB,CAAC,SAAS,CAAC,GAAG,EAAE;wBAC/E,iBAAiB,EAAE,CAAC;wBACpB,oBAAoB,CAAC,OAAO,EAAE,CAAC;oBACnC,CAAC,CAAC,CAAC;oBACH,WAAW,GAAG,iBAAiB,CAAC;oBAEhC,MAAM,oBAAoB,CAAC,EAAE,CAAC;oBAE9B,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACZ,OAAO;oBACX,CAAC;gBACL,CAAC;gBAED,gCAAgC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBAE7D,WAAW,GAAG,kBAAkB,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC,WAAW,CAAC;YAC7F,CAAC,CAAC,EAAE,CAAC;YAEL,OAAO,GAAG,EAAE;gBACR,QAAQ,GAAG,KAAK,CAAC;gBACjB,WAAW,EAAE,EAAE,CAAC;YACpB,CAAC,CAAC;QACN,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,EAAE,CAA2B;gBAChC,cAAc,EAAE,KAAK;gBACrB,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;gBAClC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB;gBAClD,eAAe,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;gBAChD,KAAK,EAAE,MAAM,CAAC,EAAE,CACZ,QAAQ,CAAC,KAAK,CAAC;oBACX,2BAA2B,EAAE,KAAK;oBAClC,GAAG,MAAM;iBACZ,CAAC;aACT,CAAC,CAAC;QACP,CAAC;QAED,OAAO,EAAE,CAAwC;YAC7C,cAAc,EAAE,IAAI;YACpB,IAAI,cAAc;gBACd,uBAAuB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACvC,OAAO,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YACxC,CAAC;YACD,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,IAAI,eAAe;gBACf,wBAAwB,CAAC,OAAO,GAAG,IAAI,CAAC;gBACxC,OAAO,kBAAkB,CAAC,OAAO,CAAC;YACtC,CAAC;YACD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;YACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;YAClC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB;SACrD,CAAC,CAAC;IACP,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,MAEtB;QACG,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC,EAAE,CAAC;QAEzD,IAAI,QAAQ,YAAY,uBAAuB,EAAE,CAAC;YAC9C,OAAO,IAAI,OAAO,CAAQ,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,MAAM,EAAE,MAAM,KAAK,gBAAgB,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACX;gBACI,wDAAwD;gBACxD,0CAA0C;aAC7C,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;QACN,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,KAAK,oBAAoB,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CACX;gBACI,4DAA4D;gBAC5D,sCAAsC;aACzC,CAAC,IAAI,CAAC,GAAG,CAAC,CACd,CAAC;QACN,CAAC;QAED,OAAO,QAAQ,CAAC,cAAc;YAC1B,CAAC,CAAC,EAAE,CAAwC;gBACtC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;gBAClC,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,KAAK,IAAI,EAAE;oBACvB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACnD,OAAO,WAAW,CAAC;gBACvB,CAAC;gBACD,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,0BAA0B,EAAE,IAAI,CAAC,EAAE;oBAC/B,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;oBAEjC,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBAE3D,OAAO,EAAE,8BAA8B,EAAE,WAAW,EAAE,CAAC;gBAC3D,CAAC;aACJ,CAAC;YACJ,CAAC,CAAC,EAAE,CAA2B;gBACzB,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS;gBACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;gBAClC,cAAc,EAAE,KAAK;gBACrB,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,KAAK,EAAE,QAAQ,CAAC,KAAK;aACxB,CAAC,CAAC;IACb,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEhE,IAAI,wBAAwB,GAA8B,SAAS,CAAC;IAEpE,MAAM,aAAa,GAAG,CAClB,iBAA+D,EAClD,EAAE;QACf,IAAI,wBAAwB,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,wBAAwB,CAAC;QACpC,CAAC;QAED,wBAAwB,GAAG,8BAA8B,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAE5E,CAAC,KAAK,IAAI,EAAE;YACR,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO;YACX,CAAC;YAED,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;YAEnC,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAE9C,QAAQ,iBAAiB,CAAC,cAAc,EAAE,CAAC;gBACvC,KAAK,MAAM;oBACP,CAAC;wBACG,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;wBAExD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC;4BAClC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;4BACpC,uFAAuF;4BACvF,SAAS,EAAE,SAAkB;4BAC7B,oDAAoD;4BACpD,uBAAuB,EAAE,iBAAiB,CAAC,uBAAwB;4BACnE,YAAY,EAAE;gCACV,QAAQ,EAAE,iBAAiB,CAAC,aAAa;gCACzC,SAAS,EAAE,iBAAiB,CAAC,cAAc;6BAC9C;4BACD,YAAY,EAAE;gCACV,cAAc,EACV,iBAAiB,CAAC,mBAAmB;oCACrC,mBAAmB;oCACnB,gCAAgC,CAAiB;wCAC7C,YAAY,EAAE;4CACV,8DAA8D;4CAC9D,gEAAgE;4CAChE,uDAAuD;4CACvD,0DAA0D;yCAC7D,CAAC,IAAI,CAAC,GAAG,CAAC;qCACd,CAAC;6BACT;yBACJ,CAAC,CAAC;wBAEH,8BAA8B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACrD,CAAC;oBACD,MAAM;gBACV,KAAK,MAAM;oBACP,CAAC;wBACG,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,YAAY,CAAC;wBAE1C,IAAI,6BAEyB,CAAC;wBAE9B,IAAI,CAAC;4BACD,6BAA6B,GAAG,MAAM,UAAU,CAAC;gCAC7C,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;gCACpC,SAAS;gCACT,oBAAoB;gCACpB,SAAS,EAAE,iBAAiB,CAAC,SAAS;gCACtC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;gCACpC,4BAA4B,EACxB,iBAAiB,CAAC,4BAA4B;gCAClD,MAAM,EAAE,iBAAiB,CAAC,MAAM;gCAChC,0BAA0B,EAAE,iBAAiB,CAAC,0BAA0B;gCACxE,gBAAgB,EAAE,iBAAiB,CAAC,gBAAgB;gCACpD,gBAAgB,EAAE,iBAAiB,CAAC,gBAAgB;gCACpD,wBAAwB,EAAE,iBAAiB,CAAC,wBAAwB;gCACpE,SAAS,EAAE,iBAAiB,CAAC,SAAS;gCACtC,qBAAqB,EAAE,iBAAiB,CAAC,qBAAqB;gCAC9D,UAAU,EAAE,iBAAiB,CAAC,UAAU;gCACxC,gCAAgC,EAC5B,iBAAiB,CAAC,gCAAgC;gCACtD,gBAAgB,EAAE,iBAAiB,CAAC,gBAAgB;6BACvD,CAAC,CAAC;wBACP,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACb,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC,EAAE,CAAC;gCAC9C,MAAM,KAAK,CAAC;4BAChB,CAAC;4BACD,8BAA8B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;4BAC9C,OAAO;wBACX,CAAC;wBAED,8BAA8B,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;oBAC1E,CAAC;oBACD,MAAM;YACd,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,wBAAwB,CAAC;IACpC,CAAC,CAAC;IAEF,KAAK,UAAU,YAAY,CAAC,aAM3B;QACG,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC;QAEhC,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;YACtB,IAAI,aAAa,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC3C,OAAO,mBAAmB,CAAC;oBACvB,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG;oBACjC,qBAAqB,EAAE,KAAK;iBAC/B,CAAC,CAAC;YACP,CAAC;YAED,IAAI,aAAa,CAAC,QAAQ,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7C,OAAO,mBAAmB,CAAC;oBACvB,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI;oBACnC,qBAAqB,EAAE,KAAK;iBAC/B,CAAC,CAAC;YACP,CAAC;YAED,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAChC,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;QAE7B,MAAM,oBAAoB,GACtB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE/E,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CACX,0FAA0F,CAC7F,CAAC;YACN,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC;gBACb,WAAW;gBACX,2BAA2B,EAAE,oBAAoB;aACpD,CAAC,CAAC;QACP,CAAC;QAED,qCAAqC,EAAE,CAAC;YACpC,IAAI,oBAAoB,EAAE,CAAC;gBACvB,MAAM,qCAAqC,CAAC;YAChD,CAAC;YAED,8BAA8B,CAAC,EAAE,oBAAoB,EAAE,WAAW,EAAE,CAAC,CAAC;YAEtE,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;YAC5C,MAAM,oBAAoB,GAAG,OAAO,CAAC,YAAY,CAAC;YAElD,MAAM,WAAW,GAAG,GAAG,EAAE;gBACrB,OAAO,CAAC,SAAS,GAAG,iBAAiB,CAAC;gBACtC,OAAO,CAAC,YAAY,GAAG,oBAAoB,CAAC;gBAC5C,8BAA8B,CAAC,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC;YACxE,CAAC,CAAC;YAEF,OAAO,CAAC,SAAS,GAAG,SAAS,SAAS,CAAC,GAAG,IAAI;gBAC1C,WAAW,EAAE,CAAC;gBACd,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;YACpD,CAAC,CAAC;YAEF,OAAO,CAAC,YAAY,GAAG,SAAS,YAAY,CAAC,GAAG,IAAI;gBAChD,WAAW,EAAE,CAAC;gBACd,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;YACvD,CAAC,CAAC;QACN,CAAC;IACL,CAAC;IAED,SAAS,2BAA2B,CAAC,KAKpC;QACG,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAE3D,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,iCAAiC,EAAE,GAC3D,8BAA8B,CAAC,QAAQ,EAAE,CAAC;QAE9C,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,8BAA8B,CAAC,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,iCAAiC,YAAY,uBAAuB,EAAE,CAAC;YACvE,MAAM,uBAAuB,GAAG,iCAAiC,CAAC;YAElE,OAAO,KAAC,cAAc,IAAC,uBAAuB,EAAE,uBAAuB,GAAI,CAAC;QAChF,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,SAAS,sBAAsB,CAAC,KAAoD;QAChF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;QAErC,MAAM,EAAE,WAAW,EAAE,GAAG,8BAA8B,CAAC,QAAQ,EAAE,CAAC;QAElE,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/C,SAAS,CAAC,GAAG,EAAE;YACX,IAAI,WAAW,EAAE,CAAC;gBACd,OAAO;YACX,CAAC;YAED,IAAI,QAAQ,GAAG,IAAI,CAAC;YAEpB,8BAA8B,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACZ,OAAO;gBACX,CAAC;gBACD,QAAQ,EAAE,CAAC;YACf,CAAC,CAAC,CAAC;YAEH,OAAO,GAAG,EAAE;gBACR,QAAQ,GAAG,KAAK,CAAC;YACrB,CAAC,CAAC;QACN,CAAC,EAAE,EAAE,CAAC,CAAC;QAEP,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACpD,CAAC;QAED,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,SAAS,iBAAiB,CACtB,SAA+B;QAE/B,MAAM,SAAS,GAAG,SAAS,CAAC;QAE5B,SAAS,0BAA0B,CAAC,KAAY;YAC5C,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,8BAA8B,CAAC,QAAQ,EAAE,CAAC;YAEnF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACf,MAAM,8BAA8B,CAAC,EAAE,CAAC;YAC5C,CAAC;YAED,IAAI,QAAQ,YAAY,uBAAuB,EAAE,CAAC;gBAC9C,MAAM,QAAQ,CAAC;YACnB,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC3B,MAAM,QAAQ,CAAC,KAAK,CAAC,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,OAAO,KAAC,SAAS,OAAK,KAAK,GAAI,CAAC;QACpC,CAAC;QAED,0BAA0B,CAAC,WAAW,GAAG,GACrC,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI,IAAI,WAC/C,mBAAmB,CAAC;QAEpB,OAAO,0BAA0B,CAAC;IACtC,CAAC;IAED,mBAAmB;IACnB,OAAO;QACH,aAAa;QACb,OAAO;QACP,OAAO;QACP,sBAAsB;QACtB,2BAA2B;QAC3B,YAAY;QACZ,iBAAiB;KACpB,CAAC;AACN,CAAC"}

package/esm/react-spa/types.d.ts

@@ -28,12 +28,10 @@ export declare namespace UseOidc {
         initializationError?: never;
     });
     namespace Oidc {
-        type Common = {
+        type NotLoggedIn = {
             issuerUri: string;
             clientId: string;
             validRedirectUri: string;
-        };
-        export type NotLoggedIn = Common & {
             login: (params?: {
                 extraQueryParams?: Record<string, string | undefined>;
                 redirectUrl?: string;
@@ -45,7 +43,10 @@ export declare namespace UseOidc {
             isUserLoggedIn: false;
             initializationError: OidcInitializationError | undefined;
         };
-        export type LoggedIn<DecodedIdToken> = Common & {
+        type LoggedIn<DecodedIdToken> = {
+            issuerUri: string;
+            clientId: string;
+            validRedirectUri: string;
             isUserLoggedIn: true;
             decodedIdToken: DecodedIdToken;
             logout: Oidc_core.LoggedIn["logout"];
@@ -60,7 +61,6 @@ export declare namespace UseOidc {
                 shouldDisplayWarning: false;
             };
         };
-        export {};
     }
 }
 export type GetOidc<DecodedIdToken> = {

package/esm/tanstack-start/react/createOidcSpaApi.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-import { useState, useEffect, createContext, useContext } from "react";
+import { useState, useEffect, useReducer } from "react";
 import { OidcInitializationError } from "../../core/OidcInitializationError";
 import { Deferred } from "../../tools/Deferred";
 import { isBrowser } from "../../tools/isBrowser";
@@ -60,11 +60,93 @@ export function createOidcSpaApi(params) {
             evtAutoLogoutState.current = newState;
         });
     });
-    function useOidc() {
+    function useOidc(params) {
+        const { assert: assert_params } = params ?? {};
+        /*
+        if (!isBrowser) {
+            throw new Error(
+                [
+                    "oidc-spa: useOidc() can't be used on the server.",
+                    "You can prevent this component from rendering on the server",
+                    "by wrapping it into <OidcInitializationGate />"
+                ].join(" ")
+            );
+        }
+        */
         const { hasResolved, value: oidcCore } = dOidcCoreOrInitializationError.getState();
-        assert(hasResolved);
-        assert(!(oidcCore instanceof OidcInitializationError));
+        if (oidcCore instanceof OidcInitializationError) {
+            throw oidcCore;
+        }
+        check_assertion: {
+            if (assert_params === undefined) {
+                break check_assertion;
+            }
+            if (assert_params === "init completed") {
+                if (!hasResolved) {
+                    throw new Error([
+                        "oidc-spa: There is a logic error in the application.",
+                        "you called useOidc({ assert: 'init completed' }) but",
+                        ...(isBrowser
+                            ? [
+                                "the component making this call was rendered before",
+                                "the oidc initialization has completed."
+                            ]
+                            : ["we are on the server, this assertion will always be wrong."]),
+                        "\nTo avoid this error make sure you call this within",
+                        "<OidcInitializationGate /> or remove the assertion and check",
+                        "the hasInitCompleted property."
+                    ].join(" "));
+                }
+                break check_assertion;
+            }
+            if (!hasResolved) {
+                throw new Error([
+                    "oidc-spa: There is a logic error in the application.",
+                    `you called useOidc({ assert: "${assert_params}" }) but`,
+                    "initialization hasn't completed yet, we don't know yet if the",
+                    "user is logged in or not."
+                ].join(" "));
+            }
+            const getMessage = (v) => [
+                "oidc-spa: There is a logic error in the application.",
+                `If this component is mounted the user is supposed ${v}.`,
+                "An explicit assertion was made in this sense."
+            ].join(" ");
+            switch (assert_params) {
+                case "user logged in":
+                    if (!oidcCore.isUserLoggedIn) {
+                        throw new Error(getMessage("to be logged in but currently they arn't"));
+                    }
+                    break;
+                case "user not logged in":
+                    if (oidcCore.isUserLoggedIn) {
+                        throw new Error(getMessage("not to be logged in but currently they are"));
+                    }
+                    break;
+                default:
+                    assert(false);
+            }
+        }
+        const [, reRender] = useReducer(n => n + 1, 0);
+        useEffect(() => {
+            if (hasResolved) {
+                return;
+            }
+            let isActive = true;
+            dOidcCoreOrInitializationError.pr.then(() => {
+                if (!isActive) {
+                    return;
+                }
+                reRender();
+            });
+            return () => {
+                isActive = false;
+            };
+        }, []);
         const [, reRenderIfDecodedIdTokenChanged] = useState(() => {
+            if (oidcCore === undefined) {
+                return undefined;
+            }
             if (!oidcCore.isUserLoggedIn) {
                 return undefined;
             }
@@ -72,6 +154,9 @@ export function createOidcSpaApi(params) {
         });
         const [evtIsDecodedIdTokenUsed] = useState(() => createStatefulEvt(() => false));
         useEffect(() => {
+            if (oidcCore === undefined) {
+                return undefined;
+            }
             if (!oidcCore.isUserLoggedIn) {
                 return;
             }
@@ -126,8 +211,24 @@ export function createOidcSpaApi(params) {
                 unsubscribe?.();
             };
         }, []);
+        const [hasHydrated, setHasHydratedToTrue] = useReducer(() => true, assert_params !== undefined ? undefined : false);
+        useEffect(() => {
+            if (hasHydrated === undefined) {
+                return;
+            }
+            setHasHydratedToTrue();
+        }, []);
+        if (!hasResolved || hasHydrated === false) {
+            return id({
+                hasInitCompleted: false,
+                autoLogoutState: {
+                    shouldDisplayWarning: false
+                }
+            });
+        }
         if (!oidcCore.isUserLoggedIn) {
             return id({
+                hasInitCompleted: true,
                 isUserLoggedIn: false,
                 initializationError: oidcCore.initializationError,
                 issuerUri: oidcCore.params.issuerUri,
@@ -141,6 +242,7 @@ export function createOidcSpaApi(params) {
             });
         }
         return id({
+            hasInitCompleted: true,
             isUserLoggedIn: true,
             get decodedIdToken() {
                 evtIsDecodedIdTokenUsed.current = true;
@@ -160,89 +262,6 @@ export function createOidcSpaApi(params) {
             validRedirectUri: oidcCore.params.validRedirectUri
         });
     }
-    const context_isFreeOfSsrHydrationConcern = createContext(false);
-    function createOidcComponent(params) {
-        const { assert: assert_params, pendingComponent: PendingComponent, component: Component } = params;
-        const checkAssertion = assert_params === undefined
-            ? undefined
-            : (params) => {
-                const { isUserLoggedIn } = params;
-                switch (assert_params) {
-                    case "user not logged in":
-                        if (isUserLoggedIn) {
-                            throw new Error([
-                                "oidc-spa: Asserted the user should not be logged in",
-                                "but they are. Check your control flow."
-                            ].join(" "));
-                        }
-                        break;
-                    case "user logged in":
-                        if (!isUserLoggedIn) {
-                            throw new Error([
-                                "oidc-spa: Asserted the user should be logged in",
-                                "but they arn't. Check your control flow."
-                            ].join(" "));
-                        }
-                        break;
-                    default:
-                        assert;
-                }
-            };
-        function ComponentWithOidc(props) {
-            const renderFallback = () => PendingComponent === undefined ? null : _jsx(PendingComponent, { ...props });
-            if (!isBrowser) {
-                return renderFallback();
-            }
-            // NOTE: When the user assert that the user is logged in or not, they know.
-            // if they knows it means that they learned it somewhere so we are post SSR.
-            // Additionally, in autoLogin mode, the typedef don't allow this param to be provided.
-            const isFreeOfSsrHydrationConcern = useContext(context_isFreeOfSsrHydrationConcern) || assert_params !== undefined;
-            const [oidcCore, setOidcCore] = useState(() => {
-                if (!isFreeOfSsrHydrationConcern) {
-                    return undefined;
-                }
-                const { hasResolved, value: oidcCore } = dOidcCoreOrInitializationError.getState();
-                if (!hasResolved) {
-                    return undefined;
-                }
-                if (oidcCore instanceof OidcInitializationError) {
-                    return undefined;
-                }
-                checkAssertion?.({
-                    isUserLoggedIn: oidcCore.isUserLoggedIn
-                });
-                return oidcCore;
-            });
-            useEffect(() => {
-                if (oidcCore !== undefined) {
-                    return;
-                }
-                let isActive = true;
-                dOidcCoreOrInitializationError.pr.then(oidcCore => {
-                    if (!isActive) {
-                        return;
-                    }
-                    if (oidcCore instanceof OidcInitializationError) {
-                        return;
-                    }
-                    checkAssertion?.({
-                        isUserLoggedIn: oidcCore.isUserLoggedIn
-                    });
-                    setOidcCore(oidcCore);
-                });
-                return () => {
-                    isActive = false;
-                };
-            }, []);
-            if (oidcCore === undefined) {
-                return PendingComponent === undefined ? null : _jsx(PendingComponent, { ...props });
-            }
-            return (_jsx(context_isFreeOfSsrHydrationConcern.Provider, { value: true, children: _jsx(Component, { ...props }) }));
-        }
-        ComponentWithOidc.displayName = `${Component.displayName ?? Component.name ?? "Component"}WithOidc`;
-        ComponentWithOidc.useOidc = useOidc;
-        return ComponentWithOidc;
-    }
     async function getOidc(params) {
         if (!isBrowser) {
             throw new UnifiedClientRetryForSsrLoadersError([
@@ -684,7 +703,7 @@ export function createOidcSpaApi(params) {
     }
     // @ts-expect-error
     return {
-        createOidcComponent,
+        useOidc,
         getOidc,
         bootstrapOidc,
         enforceLogin,