https://static.ksta.de/__assets/_nuxt/Bz1WQjgM.js

1import{s as e}from"./D_on4AFH.js";import{t}from"./CUahCeih.js";import{n}from"./CZlIYBPH.js";import{h as r,m as i,t as a}from"./BvtST-mO.js";import"./DDk3fIqD.js";new TextEncoder;var o=new TextDecoder,s=new TextDecoder(`utf-8`,{fatal:!0});function c(...e){let t=e.reduce((e,{length:t})=>e+t,0),n=new Uint8Array(t),r=0;for(let t of e)n.set(t,r),r+=t.length;return n}function l(e){let t=new Uint8Array(e.length);for(let n=0;n<e.length;n++){let r=e.charCodeAt(n);if(r>127)throw TypeError(`non-ASCII string encountered in encode()`);t[n]=r}return t}var u=(e,t=`algorithm.name`)=>TypeError(`CryptoKey does not support this operation, its ${t} must be ${e}`);function d(e,t){if(t&&!e.usages.includes(t))throw TypeError(`CryptoKey does not support this operation, its usages must include ${t}.`)}function f(e,t){let{modulusLength:n}=t.algorithm;if(typeof n!=`number`||n<2048)throw TypeError(`${e} requires key modulusLength to be 2048 bits or larger`)}function p(e,t,n){let r=e.algorithm;if(r.name!==t.name)throw u(t.name);if(t.hash&&r.hash?.name!==t.hash)throw u(t.hash,`algorithm.hash`);if(t.namedCurve&&r.namedCurve!==t.namedCurve)throw u(t.namedCurve,`algorithm.namedCurve`);if(t.length!==void 0&&r.length!==t.length)throw u(t.length,`algorithm.length`);d(e,n)}function m(e,t,...n){if(n.length>2){let t=n.pop();e+=`one of type ${n.join(`, `)}, or ${t}.`}else n.length===2?e+=`one of type ${n[0]} or ${n[1]}.`:e+=`of type ${n[0]}.`;return t==null?e+=` Received ${t}`:typeof t==`function`&&t.name?e+=` Received function ${t.name}`:typeof t==`object`&&t&&t.constructor?.name&&(e+=` Received an instance of ${t.constructor.name}`),e}var h=(e,t,...n)=>m(`Key for the ${e} algorithm must be `,t,...n),g=class extends Error{static code=`ERR_JOSE_GENERIC`;code=`ERR_JOSE_GENERIC`;constructor(e,t){super(e,t),this.name=this.constructor.name,Error.captureStackTrace?.(this,this.constructor)}},_=class extends g{static code=`ERR_JWT_CLAIM_VALIDATION_FAILED`;code=`ERR_JWT_CLAIM_VALIDATION_FAILED`;claim;reason;payload;constructor(e,t,n=`unspecified`,r=`unspecified`){super(e,{cause:{claim:n,reason:r,payload:t}}),this.claim=n,this.reason=r,this.payload=t}},v=class extends g{static code=`ERR_JWT_EXPIRED`;code=`ERR_JWT_EXPIRED`;claim;reason;payload;constructor(e,t,n=`unspecified`,r=`unspecified`){super(e,{cause:{claim:n,reason:r,payload:t}}),this.claim=n,this.reason=r,this.payload=t}},y=class extends g{static code=`ERR_JOSE_ALG_NOT_ALLOWED`;code=`ERR_JOSE_ALG_NOT_ALLOWED`},b=class extends g{static code=`ERR_JOSE_NOT_SUPPORTED`;code=`ERR_JOSE_NOT_SUPPORTED`},x=class extends g{static code=`ERR_JWS_INVALID`;code=`ERR_JWS_INVALID`},S=class extends g{static code=`ERR_JWT_INVALID`;code=`ERR_JWT_INVALID`},ee=class extends g{static code=`ERR_JWS_SIGNATURE_VERIFICATION_FAILED`;code=`ERR_JWS_SIGNATURE_VERIFICATION_FAILED`;constructor(e=`signature verification failed`,t){super(e,t)}},C=e=>{if(e?.[Symbol.toStringTag]===`CryptoKey`)return!0;try{return e instanceof CryptoKey}catch{return!1}},te=e=>e?.[Symbol.toStringTag]===`KeyObject`,ne=e=>C(e)||te(e);function re(e){if(Uint8Array.fromBase64)return Uint8Array.fromBase64(e);let t=atob(e),n=new Uint8Array(t.length);for(let e=0;e<t.length;e++)n[e]=t.charCodeAt(e);return n}var w=`The input to be decoded is not correctly encoded.`;function T(e){if(Uint8Array.fromBase64)try{return Uint8Array.fromBase64(typeof e==`string`?e:o.decode(e),{alphabet:`base64url`})}catch(e){throw TypeError(w,{cause:e})}let t=e;if(t instanceof Uint8Array&&(t=o.decode(t)),t.includes(`+`)||t.includes(`/`))throw TypeError(w);t=t.replace(/-/g,`+`).replace(/_/g,`/`);try{return re(t)}catch{throw TypeError(w)}}function E(e){if(typeof e!=`object`||!e||Object.prototype.toString.call(e)!==`[object Object]`)return!1;let t=Object.getPrototypeOf(e);return t===null||Object.getPrototypeOf(t)===null}function D(e,t,n){try{return T(e)}catch{throw new n(`Failed to base64url decode the ${t}`)}}function ie(e,t,n){try{return l(e)}catch{throw new n(`The ${t} is not a valid base64url string`)}}function ae(e,t,n){let r;try{r=JSON.parse(s.decode(T(e)))}catch{throw new t(n)}if(!E(r))throw new t(n);return r}async function oe(e,t){if(t.kty===`RSA`&&`oth`in t&&t.oth!==void 0)throw new b(`RSA JWK "oth" (Other Primes Info) Parameter value is not supported`);if(!e.kty.includes(t.kty))throw new b(`Invalid or unsupported JWK "alg" (Algorithm) Parameter value`);let n=e.resolve?.({kty:t.kty,crv:t.crv})??e.subtle,r=!!(t.d||t.priv),i={...t};return i.kty!==`AKP`&&delete i.alg,delete i.use,crypto.subtle.importKey(`jwk`,i,n,t.ext??!r,t.key_ops??e.usages[+!!r])}function se(e){return{__proto__:null,...e}}function ce(e){let t=se(e);if(t.ext!==void 0&&typeof t.ext!=`boolean`)throw TypeError(`"ext" (Extractable) Parameter must be a boolean`);if(t.key_ops!==void 0){let e=t.key_ops,n=Array.isArray(e)?[...e]:void 0;if(!n||n.some(e=>typeof e!=`string`)||new Set(n).size!==n.length)throw TypeError(`"key_ops" (Key Operations) Parameter must be an array of unique strings`);t.key_ops=n}return t}var O=e=>

1e[Symbol.toStringTag],le=(e,t,n)=>{let{alg:r}=e;if(t.use!==void 0){let e=n===`sign`||n===`verify`?`sig`:`enc`;if(t.use!==e)throw TypeError(`Invalid key for this operation, its "use" must be "${e}" when present`)}if(t.alg!==void 0&&t.alg!==r)throw TypeError(`Invalid key for this operation, its "alg" must be "${r}" when present`);if(Array.isArray(t.key_ops)){let r=n===`encrypt`||n===`decrypt`?e.ops?.[n===`encrypt`?0:1]:n;if(r&&!t.key_ops.includes(r))throw TypeError(`Invalid key for this operation, its "key_ops" must include "${r}" when present`)}};function ue(e,t,n){let{alg:r,secret:i}=e,a=n===`decrypt`||n===`sign`;if(i&&t instanceof Uint8Array)return[de,t];if(E(t)){let o=ce(t);if(typeof o.kty!=`string`)throw TypeError(i?h(r,t,`CryptoKey`,`KeyObject`,`JSON Web Key`,`Uint8Array`):h(r,t,`CryptoKey`,`KeyObject`,`JSON Web Key`));if(!(i?o.kty===`oct`&&typeof o.k==`string`:o.kty!==`oct`&&(a?o.kty===`AKP`&&typeof o.priv==`string`||typeof o.d==`string`:o.d===void 0&&o.priv===void 0)))throw TypeError(i?`JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present`:`JSON Web Key for this operation must be a ${a?`private`:`public`} JWK`);return le(e,o,n),[me,t,o]}if(!ne(t))throw TypeError(i?h(r,t,`CryptoKey`,`KeyObject`,`JSON Web Key`,`Uint8Array`):h(r,t,`CryptoKey`,`KeyObject`,`JSON Web Key`));if(i){if(t.type!==`secret`)throw TypeError(`${O(t)} instances for symmetric algorithms must be of type "secret"`)}else{if(t.type===`secret`)throw TypeError(`${O(t)} instances for asymmetric algorithms must not be of type "secret"`);let e=a?`private`:`public`;if((t.type===`public`||t.type===`private`)&&t.type!==e){let r=n===`sign`?`signing`:n===`verify`?`verifying`:`${n.slice(0,-1)}tion`;throw TypeError(`${O(t)} instances for asymmetric algorithm ${r} must be of type "${e}"`)}}return C(t)?[fe,t]:[pe,t]}var de=0,fe=1,pe=2,me=3,k,he={__proto__:null,prime256v1:`P-256`,secp384r1:`P-384`,secp521r1:`P-521`};function A(e,t,n){k||=new WeakMap;let r=k.get(e);return n&&(r?r[t]=n:k.set(e,{[t]:n})),n??r?.[t]}var ge=async(e,t,n)=>A(e,n.alg)??A(e,n.alg,await oe(n,{...t,alg:n.alg})),_e=(e,t)=>{let n=A(e,t.alg);if(n)return n;let r=e.type===`public`,i=t.usages[+!r],{asymmetricKeyType:a}=e,o=he[e.asymmetricKeyDetails?.namedCurve],s=t.resolve?.({crv:o,asymmetricKeyType:a})??t.subtle;return A(e,t.alg,e.toCryptoKey(s,r,i))};async function ve(e,t,n){let r=ue(e,t,n);switch(r[0]){case de:case fe:return r[1];case me:{let t=r[1],n=r[2];if(n.kty===`oct`)return T(n.k);if(!Object.isFrozen(t)){let{key_ops:e}=t;Array.isArray(e)&&Object.freeze(e),Object.freeze(t)}return ge(t,n,e)}case pe:{let t=r[1];return t.type===`secret`?t.export():`toCryptoKey`in t&&typeof t.toCryptoKey==`function`?_e(t,e):ge(t,t.export({format:`jwk`}),e)}}}function j(e){let t={__proto__:null};for(let n in e)t[n]={...e[n],alg:n};return t}var ye=[[`encrypt`,`wrapKey`],[`decrypt`,`unwrapKey`]],be=[[],[`deriveBits`]],M=[[],[]];function N(e){return{kty:[`RSA`],subtle:{name:`RSA-OAEP`,hash:`SHA-${e}`},usages:ye,ops:[`wrapKey`,`unwrapKey`]}}function P(){return{kty:[`EC`,`OKP`],subtle:{name:`ECDH`},resolve:({kty:e,crv:t,asymmetricKeyType:n})=>{if(t===`X25519`||n===`x25519`)return{name:`X25519`};if(e===`OKP`)throw new b(`Invalid or unsupported JWK "alg" (Algorithm) Parameter value`);return{name:`ECDH`,namedCurve:t}},usages:be,ops:[void 0,`deriveBits`]}}function F(e,t=!1){return{kty:[`oct`],secret:!0,subtle:{name:t?`AES-GCM`:`AES-KW`,length:e},usages:M,ops:t?[`encrypt`,`decrypt`]:[`wrapKey`,`unwrapKey`]}}function I(){return{kty:[`oct`],secret:!0,subtle:{name:`PBKDF2`},usages:M,ops:[`deriveBits`,`deriveBits`]}}var xe=j({dir:{kty:[`oct`],secret:!0,subtle:{name:`AES-GCM`},usages:M,ops:[`encrypt`,`decrypt`]},"RSA-OAEP":N(1),"RSA-OAEP-256":N(256),"RSA-OAEP-384":N(384),"RSA-OAEP-512":N(512),"ECDH-ES":P(),"ECDH-ES+A128KW":P(),"ECDH-ES+A192KW":P(),"ECDH-ES+A256KW":P(),A128KW:F(128),A192KW:F(192),A256KW:F(256),A128GCMKW:F(128,!0),A192GCMKW:F(192,!0),A256GCMKW:F(256,!0),"PBES2-HS256+A128KW":I(),"PBES2-HS384+A192KW":I(),"PBES2-HS512+A256KW":I()}),Se=[`encrypt`,`decrypt`];function L(e,t=!1){return{kty:[`oct`],secret:!0,subtle:{name:t?`AES-CBC`:`AES-GCM`,length:e},usages:M,ops:Se,cekBits:e,ivBits:t?128:96,cbc:t}}j({A128GCM:L(128),A192GCM:L(192),A256GCM:L(256),"A128CBC-HS256":L(256,!0),"A192CBC-HS384":L(384,!0),"A256CBC-HS512":L(512,!0)});var Ce={__proto__:null,b64:!0};function we(e,t){if(t!==void 0&&(!Array.isArray(t)||t.some(e=>typeof e!=`string`)))throw TypeError(`"${e}

1" option must be an array of strings`);if(t)return new Set(t)}function Te(e,t,n,r,i){if(i.crit!==void 0&&r?.crit===void 0)throw new e(`"crit" (Critical) Header Parameter MUST be integrity protected`);if(!r||r.crit===void 0)return[];if(!Array.isArray(r.crit)||r.crit.length===0||r.crit.some(e=>typeof e!=`string`||e.length===0))throw new e(`"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present`);let a=n===void 0?t:{__proto__:null,...n,...t};for(let t of r.crit){if(!(t in a))throw new b(`Extension Header Parameter "${t}" is not recognized`);if(!Object.hasOwn(i,t)||i[t]===void 0)throw new e(`Extension Header Parameter "${t}" is missing`);if(a[t]&&(!Object.hasOwn(r,t)||r[t]===void 0))throw new e(`Extension Header Parameter "${t}" MUST be integrity protected`)}return r.crit}function Ee(e,t){if(t.includes(`b64`)){let t=e.b64;if(typeof t!=`boolean`)throw new x(`The "b64" (base64url-encode payload) Header Parameter must be a boolean`);return t}return!0}async function De(e,t,n){return t instanceof Uint8Array?crypto.subtle.importKey(`raw`,t,e.subtle,!1,[n]):(p(t,e.subtle,n),e.minRsaBits&&f(e.alg,t),t)}async function Oe(e,t,n,r){let i=await De(e,t,`verify`);try{return await crypto.subtle.verify(e.signing,i,n,r)}catch{return!1}}var R=[[`verify`],[`sign`]];function z(e){let t={name:`HMAC`,hash:`SHA-${e}`};return{kty:[`oct`],secret:!0,subtle:t,signing:t,usages:R}}function B(e,t){let n={name:t?`RSA-PSS`:`RSASSA-PKCS1-v1_5`,hash:`SHA-${e}`};return{kty:[`RSA`],subtle:n,signing:t?{...n,saltLength:t}:n,usages:R,minRsaBits:2048}}function V(e,t){return{kty:[`EC`],crv:e,subtle:{name:`ECDSA`,namedCurve:e},signing:{name:`ECDSA`,hash:`SHA-${t}`},usages:R}}function H(){let e={name:`Ed25519`};return{kty:[`OKP`],crv:`Ed25519`,subtle:e,signing:e,usages:R}}function U(e){let t={name:`ML-DSA-${e}`};return{kty:[`AKP`],subtle:t,signing:t,usages:R}}var W=j({HS256:z(256),HS384:z(384),HS512:z(512),RS256:B(256),RS384:B(384),RS512:B(512),PS256:B(256,32),PS384:B(384,48),PS512:B(512,64),ES256:V(`P-256`,256),ES384:V(`P-384`,384),ES512:V(`P-521`,512),EdDSA:H(),Ed25519:H(),"ML-DSA-44":U(44),"ML-DSA-65":U(65),"ML-DSA-87":U(87)});function ke(e){let t=typeof e==`string`?W[e]:void 0;if(!t)throw new b(`alg ${e} is not supported either by JOSE or your javascript runtime`);return t}function Ae(e){return[e&&we(`algorithms`,e.algorithms),e?.crit]}function je(e,t=e===void 0?{}:ae(e,x,`JWS Protected Header is invalid`)){return t}function Me(e,t,n){let r=Ee(e,Te(x,Ce,n[1],e,t)),i=t.alg;if(typeof i!=`string`||!i)throw new x(`JWS "alg" (Algorithm) Header Parameter missing or invalid`);if(n[0]&&!n[0].has(i))throw new y(`"alg" (Algorithm) Header Parameter value not allowed`);return[r,i]}function Ne(e){try{return l(e)}catch{throw new x(`JWS Compact Serialization payload must use only ASCII characters`)}}async function Pe(e,t,n,r,i,a,o){let s=!1;typeof n==`function`&&(n=await n(i,e),s=!0);let u=typeof o==`string`,d=ke(a),f=c(r===void 0?new Uint8Array:l(r),l(`.`),u?t[2]??=ie(o,`payload`,x):o),p=D(e.signature,`signature`,x),m=await ve(d,n,`verify`);if(!await Oe(d,m,p,f))throw new ee;return[u?D(o,`payload`,x):o,i,u,m,s]}async function Fe(e,t,n){if(e instanceof Uint8Array&&(e=o.decode(e)),typeof e!=`string`)throw new x(`Compact JWS must be a string or Uint8Array`);let{0:r,1:i,2:a,length:s}=e.split(`.`);if(s!==3)throw new x(`Invalid Compact JWS`);let c={payload:i,protected:r,signature:a},l=je(r),[u,d]=Me(l,l,t);return Pe(c,t,n,r,l,d,u?i:Ne(i))}var Ie=e=>Math.floor(e.getTime()/1e3),Le={s:1,m:60,h:3600,d:86400,w:604800,y:31557600},Re=/^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i,G=`check_failed`;function K(){throw TypeError(`Invalid time period format`)}function ze(e){typeof e!=`string`&&K();let t=Re.exec(e);(!t||t[4]&&t[1])&&K();let n=parseFloat(t[2]),r=Math.round(n*Le[t[3][0].toLowerCase()]);return Number.isFinite(r)||K(),t[1]===`-`||t[4]===`ago`?-r:r}function q(e,t){if(!Number.isFinite(t))throw TypeError(`Invalid ${e} input`);return t}var Be=e=>{let t=e.toLowerCase();return e.includes(`/`)?t:`application/${t}`},Ve=(e,t)=>typeof e==`string`?t.includes(e):Array.isArray(e)?t.some(t=>e.includes(t)):!1;function J(e,t,n=!1){let r=e[t];

1if(!(r===void 0&&!n)){if(typeof r!=`number`)throw new _(`"${t}" claim must be a number`,e,t,`invalid`);return r}}function Y(e,t){throw new _(`unexpected "${t}" claim value`,e,t,G)}function He(e,t,n={}){let r;try{r=JSON.parse(s.decode(t))}catch{}if(!E(r))throw new S(`JWT Claims Set must be a top-level JSON object`);let{typ:i}=n;if(i!==void 0&&(typeof e.typ!=`string`||Be(e.typ)!==Be(i)))throw new _(`unexpected "typ" JWT header value`,r,`typ`,G);let{requiredClaims:a=[],issuer:o,subject:c,audience:l,maxTokenAge:u}=n,d=[...a];u!==void 0&&d.push(`iat`),l!==void 0&&d.push(`aud`),c!==void 0&&d.push(`sub`),o!==void 0&&d.push(`iss`);for(let e of new Set(d.reverse()))if(!Object.hasOwn(r,e))throw new _(`missing required "${e}" claim`,r,e,`missing`);o!==void 0&&!(Array.isArray(o)?o:[o]).includes(r.iss)&&Y(r,`iss`),c!==void 0&&r.sub!==c&&Y(r,`sub`),l!==void 0&&!Ve(r.aud,typeof l==`string`?[l]:l)&&Y(r,`aud`);let{clockTolerance:f}=n,p=0;if(typeof f==`string`)p=ze(f);else if(f!==void 0){if(typeof f!=`number`)throw TypeError(`Invalid clockTolerance option type`);p=f}q(`clockTolerance option`,p);let{currentDate:m}=n,h=q(`currentDate option`,Ie(m===void 0?new Date:m)),g=J(r,`iat`,u!==void 0),y=J(r,`nbf`);if(y!==void 0&&y>h+p)throw new _(`"nbf" claim timestamp check failed`,r,`nbf`,G);let b=J(r,`exp`);if(b!==void 0&&b<=h-p)throw new v(`"exp" claim timestamp check failed`,r,`exp`,G);if(u!==void 0){let e=h-g,t=q(`maxTokenAge option`,typeof u==`number`?u:ze(u));if(e-p>t)throw new v(`"iat" claim timestamp check failed (too far in the past)`,r,`iat`,G);if(e<-p)throw new _(`"iat" claim timestamp check failed (it should be in the past)`,r,`iat`,G)}return r}async function Ue(e,t,n){let r=await Fe(e,Ae(n),t);

1if(!r[2])throw new S(`JWTs MUST NOT use unencoded payload`);let i={payload:He(r[1],r[0],n),protectedHeader:r[1]};return typeof t==`function`?{...i,key:r[3]}:i}var We=`"alg" (Algorithm)`;function Ge(e=`JWK "alg" (Algorithm) Parameter`){throw new b(`Invalid or unsupported ${e} value`)}function Ke(e,t){return(typeof e==`string`?W[e]??xe[e]:void 0)??Ge(t)}function qe(e){if(e!==void 0&&typeof e!=`boolean`)throw TypeError(`"extractable" option must be a boolean`);return e}var X=(e,t)=>{if(e.byteLength!==t.length)return!1;for(let n=0;n<e.byteLength;n++)if(e[n]!==t[n])return!1;return!0},Je=e=>({data:e,pos:0}),Z=e=>{let t=e.data[e.pos++];if(t===void 0)throw Error(`Unexpected end of ASN.1 input`);return t},Q=e=>{let t=Z(e);if(t&128){let n=t&127,r=0;for(let t=0;t<n;t++)r=r<<8|Z(e);return r}return t},$=(e,t,n)=>{if(Z(e)!==t)throw Error(n)},Ye=(e,t)=>{if(t<0||e.pos+t>e.data.length)throw Error(`Unexpected end of ASN.1 input`);let n=e.data.subarray(e.pos,e.pos+t);return e.pos+=t,n},Xe=e=>($(e,6,`Expected algorithm OID`),Ye(e,Q(e)));function Ze(e,t){if($(e,48,`Invalid ${t===`spki`?`SPKI`:`PKCS#8`} structure`),Q(e),t===`pkcs8`){$(e,2,`Expected version field`);let t=Q(e);e.pos+=t}$(e,48,`Expected algorithm identifier`),Q(e)}var Qe=e=>{let t=Xe(e);if(X(t,[43,101,110]))return`X25519`;if(!X(t,[42,134,72,206,61,2,1]))throw Error(`Unsupported key algorithm`);$(e,6,`Expected curve OID`);let n=Ye(e,Q(e));if(X(n,[42,134,72,206,61,3,1,7]))return`P-256`;if(X(n,[43,129,4,0,34]))return`P-384`;if(X(n,[43,129,4,0,35]))return`P-521`;throw Error(`Unsupported named curve`)},$e=async(e,t,n,r)=>{let i=qe(r?.extractable),a=Ke(n,We);a.secret&&Ge(We);let o=e===`spki`,s;if(a.resolve)try{let n=Je(t);Ze(n,e),s=a.resolve({crv:Qe(n)})}catch{throw new b(`Invalid or unsupported key format`)}else s=a.subtle;return crypto.subtle.importKey(e,t,s,i??o,a.usages[+!o])},et=(e,t)=>re(e.replace(t,``)),tt=(e,t,n)=>$e(`spki`,et(e,/(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g),t,n);async function nt(e,t,n){if(typeof e!=`string`||e.indexOf(`-----BEGIN PUBLIC KEY-----`)!==0)throw TypeError(`"spki" must be SPKI formatted string`);return tt(e,t,n)}async function rt(t){let n=e().$auth.faPublicKey.value,r=a(),o=(await Ue(t,await nt(n,`RS256`))).payload,s=typeof o.email_verified!=`boolean`||o.email_verified;if((!r.loginStatus||o.email!==r.userData?.email||o.sub!==r.userData?.ssoId||o.subscriptionRoles?.toString()!==r.userData?.roles.toString()||o.salutation!==r.userData?.salutation||o.firstName!==r.userData?.firstName||o.lastName!==r.userData?.lastName||o!==r.userData?.jwt)&&(r.$patch({userData:{salutation:o.salutation,firstName:o.firstName,lastName:o.lastName,email:o.email,emailVerified:s,roles:o.subscriptionRoles,ssoId:o.sub,expiresAt:o.exp?new Date(o.exp*1e3).toISOString():new Date().toISOString(),jwt:o},loginStatus:!0}),await r.afterLogin(),window&&window.adHandler)){let e=r.userData?.roles.includes(i.PLUS)?`ja`:`nein`;window.adHandler.service?.setTargeting(`plususer`,e)}}async function it(e){await t(`/api/validate`,{responseType:`json`,headers:{"Cache-Control":`no-cache`},query:{forceRefresh:e}});let i=n(r.idToken);i.value&&await rt(i.value)}async function at(e=!1){let t=a(),n=t.userData?.expiresAt,r=n&&n<new Date().toISOString()||e;if(r)try{await it(r)}catch{t.resetLoginState()}}export{rt as n,it as r,at as t};