1(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,31453,47293,17595,64342,e=>{"use strict";let t,n,r;class o extends Error{}function i(e,t){let n;if("string"!=typeof e)throw new o("Invalid token specified: must be a string");t||(t={});let r=+(!0!==t.header),i=e.split(".")[r];if("string"!=typeof i)throw new o(`Invalid token specified: missing part #${r+1}`);try{n=function(e){let t=e.replace(/-/g,"+").replace(/_/g,"/");switch(t.length%4){case 0:break;case 2:t+="==";break;case 3:t+="=";break;default:throw Error("base64 string is not of the correct length")}try{var n;return n=t,decodeURIComponent(atob(n).replace(/(.)/g,(e,t)=>{let n=t.charCodeAt(0).toString(16).toUpperCase();return n.length<2&&(n="0"+n),"%"+n}))}catch(e){return atob(t)}}(i)}catch(e){throw new o(`Invalid token specified: invalid base64 for part #${r+1} (${e.message})`)}try{return JSON.parse(n)}catch(e){throw new o(`Invalid token specified: invalid json for part #${r+1} (${e.message})`)}}o.prototype.name="InvalidTokenError",e.s(["jwtDecode",0,i],47293);var a=e.i(90571),s="/v1/auth/accesskey/exchange",l="/v1/auth/otp/verify",u="/v1/auth/otp/signin",d="/v1/auth/otp/signup",c={email:"/v1/auth/otp/update/email",phone:"/v1/auth/otp/update/phone"},p="/v1/auth/otp/signup-in",g="/v1/auth/magiclink/verify",h="/v1/auth/magiclink/signin",f="/v1/auth/magiclink/signup",v={email:"/v1/auth/magiclink/update/email",phone:"/v1/auth/magiclink/update/phone"},w="/v1/auth/magiclink/signup-in",m="/v1/auth/enchantedlink/verify",y="/v1/auth/enchantedlink/signin",b="/v1/auth/enchantedlink/signup",k="/v1/auth/enchantedlink/pending-session",I={email:"/v1/auth/enchantedlink/update/email"},O="/v1/auth/enchantedlink/signup-in",S="/v1/auth/oauth/authorize",j="/v1/auth/oauth/exchange",_="v1/auth/oauth/native/start",T="v1/auth/oauth/native/finish",R={getOneTapClientId:"/v1/auth/onetap/clientid/{provider}",exchangeOneTapIDToken:"/v1/auth/onetap/idtoken/exchange",verifyOneTapIDToken:"/v1/auth/onetap/idtoken/verify"},U="/v1/outbound/oauth/connect",x="/v1/auth/saml/authorize",E="/v1/auth/saml/exchange",C="/v1/auth/totp/verify",P="/v1/auth/totp/signup",D="/v1/auth/totp/update",A="/v1/auth/notp/whatsapp/signin",$="/v1/auth/notp/whatsapp/signup",q="/v1/auth/notp/whatsapp/signup-in",N="/v1/auth/notp/pending-session",L={start:"/v1/auth/webauthn/signup/start",finish:"/v1/auth/webauthn/signup/finish"},J={start:"/v1/auth/webauthn/signin/start",finish:"/v1/auth/webauthn/signin/finish"},M={start:"/v1/auth/webauthn/signup-in/start"},K={start:"v1/auth/webauthn/update/start",finish:"/v1/auth/webauthn/update/finish"},B="/v1/auth/password/signup",V="/v1/auth/password/signin",F="/v1/auth/password/reset",H="/v1/auth/password/update",W="/v1/auth/password/replace",z="/v1/auth/password/policy",G="/v1/flow/start",Z="/v1/flow/next";let X="<region>",Y=`https://api.${X}descope.com`,Q=()=>{let e={};return{headers(t){return e.Headers=JSON.stringify("function"==typeof t.entries?Object.fromEntries(t.entries()):t),this},body(t){return e.Body=t,this},url(t){return e.Url=t.toString(),this},method(t){return e.Method=t,this},title(t){return e.Title=t,this},status(t){return e.Status=t,this},retries(t){return e.Retries=t,this},build:()=>Object.keys(e).flatMap(t=>e[t]?[`${"Title"!==t?`${t}: `:""}${e[t]}`]:[]).join("\n")}},ee=[503,520,521,522,524,530],et=[100,5e3,5e3],en=e=>new Promise(t=>setTimeout(t,e)),er=e=>async function(...t){let n=await e(...t),r=0;for(;ee.includes(n.status)&&r<et.length;)await en(et[r]),n=await e(...t),r++;r>0&&(n.retries=r);let o=await n.text();return n.text=()=>Promise.resolve(o),n.json=()=>Promise.resolve(JSON.parse(o)),n.clone=()=>n,n};(tk=tj||(tj={})).get="GET",tk.delete="DELETE",tk.post="POST",tk.put="PUT",tk.patch="PATCH";let eo=({path:e,baseUrl:t,queryParams:n,projectId:r})=>{let o=r.slice(1,-27);t=t.replace(X,o?o+".":"");let i=e?`${t.replace(/\/$/,"")}/${null==e?void 0:e.replace(/^\//,"")}`:t;if(n){let e=Object.keys(n);e.forEach((t,r)=>{i=`${i}${0===r?"?":""}${t}=${encodeURIComponent(n[t])}${r===e.length-1?"":"&"}`})}return i},ei={"Content-Type":"application/json"};var ea=(n=({baseUrl:e,projectId:n,baseConfig:r,refreshCookieName:o,logger:i,hooks:a,cookiePolicy:s,fetch:l})=>{let u,d=e||Y,c=((u=l||fetch)||null==i||i.warn("Fetch is not defined, you will not be able to send http requests, if you are running in a test, make sure fetch is defined globally"),i?async function(...e){if(!u)throw Error("Cannot send http request, fetch is not defined, if you are running in a test, make sure fetch is defined globally");i.log(Q().title("Request").url(e[0]).method(e[1].method).headers(e[1].headers).body(e[1].body).build());let t=await er(u)(...e);return i[t.ok?"log":"error"](await (async e=>{let t=await e.text();return Q().title("Response").url(e.url.toString()).status(`${e.status} ${e.statusText}`).headers(e.headers).body(t).retries(e.retries).build()})(t)),t}:er(u)),p=async e=>{var i;let l,{path:u,body:p,headers:g,queryParams:h,method:f,token:v}=(null==a?void 0:a.beforeRequest)?a.beforeRequest(e):e,w=void 0===p?void 0:JSON.stringify(p),m={headers:((...e)=>new Headers(e.reduce((e,t)=>
1((Array.isArray(t)?t:t instanceof Headers?Array.from(t.entries()):t?Object.entries(t):[]).forEach(([t,n])=>{e[t]="function"==typeof n?n():n}),e),{})))(((e,t="")=>{let n=e;return t&&(n=n+":"+t),{Authorization:`Bearer ${n}`}})(n,v),(l={"x-descope-sdk-session-id":(()=>{if(t)return t;let e=new Date,n=`${e.getUTCFullYear().toString()}-${(e.getUTCMonth()+1).toString().padStart(2,"0")}-${e.getUTCDate().toString().padStart(2,"0")}-${e.getUTCHours().toString().padStart(2,"0")}:${e.getUTCMinutes().toString().padStart(2,"0")}:${e.getUTCSeconds().toString().padStart(2,"0")}:${e.getUTCMilliseconds().toString()}`,r=Math.floor(1e3+9e3*Math.random());return t=`${n}-${r}`})(),"x-descope-sdk-name":"core-js","x-descope-sdk-version":"2.66.0","x-descope-project-id":n},o&&(l["x-descope-refresh-cookie-name"]=o),l),(null==r?void 0:r.baseHeaders)||{},(e=>{try{e=JSON.parse(e)}catch(e){return!1}return"object"==typeof e&&null!==e})(w)?ei:{},g),method:f,body:w};null!==s&&(m.credentials=s||"include");let y=await c(eo({path:u,baseUrl:d,queryParams:h,projectId:n}),m);
1if((null==a?void 0:a.afterRequest)&&await a.afterRequest(e,null==y?void 0:y.clone()),null==a?void 0:a.transformResponse){let e=await y.json(),t=Object.fromEntries((function(e){if(!e)return[];let t=[],n=0;function r(){for(;n<e.length&&/\s/.test(e.charAt(n));)n+=1;return n<e.length}for(;n<e.length;){let o=n,i,a,s=!1;for(;r();)if(","===e.charAt(n)){for(i=n,n+=1,r(),a=n;n<e.length&&function(){let t=e.charAt(n);return"="!==t&&";"!==t&&","!==t}();)n+=1;if(n<e.length&&"="===e.charAt(n)){s=!0,n=a,t.push(e.substring(o,i));break}n=i+1}else n+=1;(!s||n>=e.length)&&t.push(e.substring(o,e.length))}return t})((null==(i=y.headers)?void 0:i.get("set-cookie"))||"").map(e=>{let t=e.split(";")[0],n=t.indexOf("=");return n<1?null:[t.substring(0,n).trim(),t.substring(n+1).trim()]}).filter(Boolean)),n=Object.assign(Object.assign({},y),{json:()=>Promise.resolve(e),cookies:t});return n.clone=()=>n,a.transformResponse(n)}return y};return{get:(e,{headers:t,queryParams:n,token:r}={})=>p({path:e,headers:t,queryParams:n,body:void 0,method:tj.get,token:r}),post:(e,t,{headers:n,queryParams:r,token:o}={})=>p({path:e,headers:n,queryParams:r,body:t,method:tj.post,token:o}),patch:(e,t,{headers:n,queryParams:r,token:o}={})=>p({path:e,headers:n,queryParams:r,body:t,method:tj.patch,token:o}),put:(e,t,{headers:n,queryParams:r,token:o}={})=>p({path:e,headers:n,queryParams:r,body:t,method:tj.put,token:o}),delete:(e,{headers:t,queryParams:n,token:r}={})=>p({path:e,headers:t,queryParams:n,body:void 0,method:tj.delete,token:r}),hooks:a,buildUrl:(e,t)=>eo({projectId:n,baseUrl:d,path:e,queryParams:t})}},e=>{var t;return n(Object.assign(Object.assign({},e),{hooks:{beforeRequest:t=>{var n;let r=[].concat((null==(n=e.hooks)?void 0:n.beforeRequest)||[]);return null==r?void 0:r.reduce((e,t)=>t(e),t)},afterRequest:async(t,n)=>{var r;let o=[].concat((null==(r=e.hooks)?void 0:r.afterRequest)||[]);0!=o.length&&(await Promise.allSettled(null==o?void 0:o.map(e=>e(t,null==n?void 0:n.clone())))).forEach(t=>{var n;return"rejected"===t.status&&(null==(n=e.logger)?void 0:n.error(t.reason))})},transformResponse:null==(t=e.hooks)?void 0:t.transformResponse}}))});
1function es(e,t,n){var r;let o=el(e);if(t){if(!(null==o?void 0:o.tenants)&&(null==o?void 0:o.dct)===t)return(null==o?void 0:o[n])||[];o=null==(r=null==o?void 0:o.tenants)?void 0:r[t]}let i=null==o?void 0:o[n];return Array.isArray(i)?i:[]}function el(e){if("string"!=typeof e||!e)throw Error("Invalid token provided");return i(e)}function eu(e){let{exp:t}=el(e);return(new Date).getTime()/1e3>t}function ed(e){let t=el(e),n=Object.keys(null==t?void 0:t.tenants);return Array.isArray(n)?n:[]}function ec(e,t){return es(e,t,"permissions")}function ep(e,t){return es(e,t,"roles")}let eg=(...e)=>e.join("/").replace(/\/{2,}/g,"/");async function eh(e,t){var n;let r=await e,o={code:r.status,ok:r.ok,response:r},i=await r.clone().json();return r.ok?o.data=t?t(i):i:(o.error=i,429===r.status&&Object.assign(o.error,{retryAfter:Number.parseInt(null==(n=r.headers)?void 0:n.get("retry-after"))||0})),o}function ef(e){var t;return(null==(t=el(e))?void 0:t.dct)||""}let ev=(e,t)=>(n=t)=>t=>!e(t)&&n.replace("{val}",t),ew=(e,t)=>(n=t)=>t=>{let r=e.filter(e=>e(t));return!(r.length<e.length)&&(n?n.replace("{val}",t):r.join(" OR "))},em=(...e)=>({validate:t=>(e.forEach(e=>{let n=e(t);if(n)throw Error(n)}),!0)}),ey=e=>t=>e.test(t),eb=ey(/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*$/),ek=ey(/^\+[1-9]{1}[0-9]{3,14}$/),eI=ev(eb,'"{val}" is not a valid email'),eO=ev(ek,'"{val}" is not a valid phone number'),eS=ev(e=>e.length>=1,"Minimum length is 1"),ej=ev(e=>"string"==typeof e,"Input is not a string"),e_=ev(e=>Array.isArray(e),"Input is not an array"),eT=ev(e=>"boolean"==typeof e,"Input is not a boolean"),eR=ev(e=>void 0===e,"Input is defined"),eU=ew([ej(),eR()],"Input is not a string or undefined"),ex=ew([e_(),eT()],"Input is not an array or boolean"),eE=(...e)=>t=>(...n)=>(e.forEach((e,t)=>em(...e).validate(n[t])),t(...n)),eC=e=>[ej(`"${e}" must be a string`)],eP=e=>[eU(`"${e}" must be string or undefined`)],eD=e=>[ej(`"${e}" must be a string`),eS(`"${e}" must not be empty`)],eA=e=>[ej(`"${e}" must be a string`),eI()],e$=e=>[ej(`"${e}" must be a string`),eO()],eq=eE(eD("accessKey")),eN=({pollingIntervalMs:e=1e3,timeoutMs:t=6e5}={})=>({pollingIntervalMs:Math.max(e||1e3,1e3),timeoutMs:Math.min(t||6e5,6e5)});(tI=t_||(t_={})).sms="sms",tI.voice="voice",tI.whatsapp="whatsapp",tI.im="im",(tT||(tT={})).email="email";let eL=Object.assign(Object.assign({},t_),tT);(tO=tR||(tR={})).waiting="waiting",tO.running="running",tO.completed="completed",tO.failed="failed";let eJ=eD("loginId"),eM=eE(eD("token")),eK=eE(eJ),eB=eE(eD("pendingRef")),eV=eE(eJ,eA("email")),eF=eE(eD("flowId")),eH=eE(eD("executionId"),eD("stepId"),eD("interactionId")),eW=eD("loginId"),ez=eE(eD("token")),eG=eE(eW),eZ=eE(eW,e$("phone")),eX=eE(eW,eA("email")),eY=Object.keys(eL).filter(e=>e!==t_.voice&&e!==t_.im);(tS=tU||(tU={})).facebook="facebook",tS.github="github",tS.google="google",tS.microsoft="microsoft",tS.gitlab="gitlab",tS.apple="apple",tS.discord="discord",tS.linkedin="linkedin",tS.slack="slack";let eQ=eE(eD("code")),e0=eE(eD("appId")),e1=eD("loginId"),e3=eE(e1,eD("code")),e2=eE(e1),e6=eE(e1,e$("phone")),e5=eE(e1,eA("email")),e4=eE(eD("tenant")),e7=eE(eD("code")),e9=e=>({start:e4((t,n,r,o,i,a,s,l)=>eh(e.post(x,r||{},Object.assign({queryParams:Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({tenant:t},n&&{redirectURL:n}),i&&{ssoId:i}),a&&{forceAuthn:"true"}),s&&{loginHint:s}),l&&{initiatedEmail:t})},o&&{token:o})))),exchange:e7(t=>eh(e.post(E,{code:t})))}),e8=eD("loginId"),te=eE(e8,eD("code")),tt=eE(e8),tn=eE(e8),tr=eD("loginId"),to=eD("newPassword"),ti=eE(tr,eD("password")),ta=eE(tr),ts=eE(tr,to),tl=eE(tr,eD("oldPassword"),to),tu=eC("loginId"),td=eD("loginId"),tc=eD("origin"),tp=eE(td,tc,eD("name")),tg=eE(td,tc),th=eE(tu,tc),tf=eE(td,tc,eP("token")),tv=eE(eD("transactionId"),eD("response")),tw=eE(eC("loginId")),tm=eE(eD("pendingRef")),ty=eE(eD("token")),tb=eE(eP("token"));var tk,tI,tO,tS,tj,t_,tT,tR,tU,tx=Object.assign(eE([ev((r=eD("projectId"),e=>em(...r).validate(((e,t)=>{let n=(Array.isArray(t)?t.join("."):String(t)).replace(/\[\\?("|')?(\w|d)+\\?("|')?\]/g,(e,t,n)=>"."+n).split("."),r=n.length,o=0,i=e===Object(e)?e:void 0;for(;null!=i&&o<r;)i=i[n[o++]];return o&&o===r&&void 0!==i?i:void 0})(e,"projectId"))))()])(e=>{var t;let n,{projectId:r,logger:o,baseUrl:i,cookiePolicy:x,baseHeaders:E={},refreshCookieName:X,fetch:Y}=e;return{accessKey:(n=t=ea({baseUrl:i,projectId:r,logger:o,hooks:{get beforeRequest(){var Q;return null==(Q=e.hooks)?void 0:Q.beforeRequest}
1,get afterRequest(){var ee;return null==(ee=e.hooks)?void 0:ee.afterRequest},get transformResponse(){var et;return null==(et=e.hooks)?void 0:et.transformResponse}},cookiePolicy:x,baseConfig:{baseHeaders:E},refreshCookieName:X,fetch:Y}),{exchange:eq((e,t)=>eh(n.post(s,{loginOptions:t},{token:e})))}),otp:{verify:Object.keys(eL).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:e3((e,r)=>eh(t.post(eg(l,n),{code:r,loginId:e})))}),{}),signIn:Object.keys(eL).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:e2((e,r={},o)=>{var{providerId:i}=r,s=(0,a.__rest)(r,["providerId"]);return eh(t.post(eg(u,n),{loginId:e,loginOptions:s,providerId:i},{token:o}))})}),{}),signUp:Object.keys(eL).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:e2((e,r,o={})=>{var{providerId:i}=o,s=(0,a.__rest)(o,["providerId"]);return eh(t.post(eg(d,n),{loginId:e,user:r,loginOptions:s,providerId:i}))})}),{}),signUpOrIn:Object.keys(eL).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:e2((e,r={})=>{var{providerId:o}=r,i=(0,a.__rest)(r,["providerId"]);return eh(t.post(eg(p,n),{loginId:e,loginOptions:i,providerId:o}))})}),{}),update:{email:e5((e,n,r,o)=>eh(t.post(c.email,Object.assign({loginId:e,email:n},o),{token:r}))),phone:Object.keys(t_).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:e6((e,r,o,i)=>eh(t.post(eg(c.phone,n),Object.assign({loginId:e,phone:r},i),{token:o})))}),{})}},magicLink:{verify:ez(e=>eh(t.post(g,{token:e}))),signIn:eY.reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:eG((e,r,o={},i)=>{var{providerId:s}=o,l=(0,a.__rest)(o,["providerId"]);return eh(t.post(eg(h,n),{loginId:e,URI:r,loginOptions:l,providerId:s},{token:i}))})}),{}),signUp:eY.reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:eG((e,r,o,i={})=>{var{providerId:s}=i,l=(0,a.__rest)(i,["providerId"]);return eh(t.post(eg(f,n),{loginId:e,URI:r,user:o,loginOptions:l,providerId:s}))})}),{}),signUpOrIn:eY.reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:eG((e,r,o={})=>{var{providerId:i}=o,s=(0,a.__rest)(o,["providerId"]);return eh(t.post(eg(w,n),{loginId:e,URI:r,loginOptions:s,providerId:i}))})}),{}),update:{email:eX((e,n,r,o,i)=>eh(t.post(v.email,Object.assign({loginId:e,email:n,URI:r},i),{token:o}))),phone:Object.keys(t_).filter(e=>e!==t_.voice).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:eZ((e,r,o,i,a)=>eh(t.post(eg(v.phone,n),Object.assign({loginId:e,phone:r,URI:o},a),{token:i})))}),{})}},enchantedLink:{verify:eM(e=>eh(t.post(m,{token:e}))),signIn:eK((e,n,r={},o)=>{var{providerId:i}=r,s=(0,a.__rest)(r,["providerId"]);return eh(t.post(eg(y,eL.email),{loginId:e,URI:n,loginOptions:s,providerId:i},{token:o}))}),signUpOrIn:eK((e,n,r={})=>{var{providerId:o}=r,i=(0,a.__rest)(r,["providerId"]);return eh(t.post(eg(O,eL.email),{loginId:e,URI:n,loginOptions:i,providerId:o}))}),signUp:eK((e,n,r,o={})=>{var{providerId:i}=o,s=(0,a.__rest)(o,["providerId"]);return eh(t.post(eg(b,eL.email),{loginId:e,URI:n,user:r,loginOptions:s,providerId:i}))}),waitForSession:eB((e,n)=>new Promise(r=>{let o,{pollingIntervalMs:i,timeoutMs:a}=eN(n),s=setInterval(async()=>{let n=await t.post(k,{pendingRef:e});n.ok&&(clearInterval(s),o&&clearTimeout(o),r(eh(Promise.resolve(n))))},i);o=setTimeout(()=>{r({error:{errorDescription:`Session polling timeout exceeded: ${a}ms`,errorCode:"0"},ok:!1}),clearInterval(s)},a)})),update:{email:eV((e,n,r,o,i)=>eh(t.post(I.email,Object.assign({loginId:e,email:n,URI:r},i),{token:o})))}},oauth:{start:Object.assign((e,n,r,o,i)=>eh(t.post(S,r||{},{queryParams:Object.assign(Object.assign({provider:e},n&&{redirectURL:n}),i&&{loginHint:i}),token:o})),Object.keys(tU).reduce((e,n)=>Object.assign(Object.assign({},e),{[n]:(e,r,o,i)=>eh(t.post(S,r||{},{queryParams:Object.assign(Object.assign({provider:n},e&&{redirectURL:e}),i&&{loginHint:i}),token:o}))}),{})),exchange:eQ(e=>eh(t.post(j,{code:e}))),startNative:(e,n,r)=>eh(t.post(_,{provider:e,loginOptions:n,implicit:r})),finishNative:(e,n,r,o,i)=>eh(t.post(T,{provider:e,stateId:n,user:r,code:o,idToken:i})),getOneTapClientId:e=>eh(t.get(R.getOneTapClientId.replace("{provider}",e))),verifyOneTapIDToken:(e,n,r,o)=>eh(t.post(R.verifyOneTapIDToken,{provider:e,idToken:n,nonce:r,loginOptions:o}
1)),exchangeOneTapIDToken:(e,n,r,o)=>eh(t.post(R.exchangeOneTapIDToken,{provider:e,idToken:n,nonce:r,loginOptions:o}))},outbound:{connect:e0((e,n,r)=>{let o=null==n?void 0:n.tenantId,i=null==n?void 0:n.tenantLevel;return null==n||delete n.tenantId,null==n||delete n.tenantLevel,eh(t.post(U,{appId:e,tenantId:o,tenantLevel:i,options:n},{token:r}))})},sso:e9(t),saml:e9(t),totp:{signUp:tt((e,n)=>eh(t.post(P,{loginId:e,user:n}))),verify:te((e,n,r,o)=>eh(t.post(C,{loginId:e,code:n,loginOptions:r},{token:o}))),update:tn((e,n)=>eh(t.post(D,{loginId:e},{token:n})))},notp:{signUpOrIn:tw((e,n={})=>{var{providerId:r}=n,o=(0,a.__rest)(n,["providerId"]);return eh(t.post(q,{loginId:e,loginOptions:o,providerId:r}))}),signUp:tw((e,n,r={})=>{var{providerId:o}=r,i=(0,a.__rest)(r,["providerId"]);return eh(t.post($,{loginId:e,user:n,providerId:o,loginOptions:i}))}),signIn:tw((e,n={},r)=>{var{providerId:o}=n,i=(0,a.__rest)(n,["providerId"]);return eh(t.post(A,{loginId:e,loginOptions:i,providerId:o},{token:r}))}),waitForSession:tm((e,n)=>new Promise(r=>{let o,{pollingIntervalMs:i,timeoutMs:a}=eN(n),s=setInterval(async()=>{let n=await t.post(N,{pendingRef:e});n.ok&&(clearInterval(s),o&&clearTimeout(o),r(eh(Promise.resolve(n))))},i);o=setTimeout(()=>{r({error:{errorDescription:`Session polling timeout exceeded: ${a}ms`,errorCode:"0"},ok:!1}),clearInterval(s)},a)}))},webauthn:{signUp:{start:tp((e,n,r,o,i)=>eh(t.post(L.start,{user:{loginId:e,name:r},origin:n,loginOptions:i,passkeyOptions:o}))),finish:tv((e,n)=>eh(t.post(L.finish,{transactionId:e,response:n})))},signIn:{start:th((e,n,r,o,i)=>eh(t.post(J.start,{loginId:e,origin:n,loginOptions:r,passkeyOptions:i},{token:o}))),finish:tv((e,n)=>eh(t.post(J.finish,{transactionId:e,response:n})))},signUpOrIn:{start:tg((e,n,r,o)=>eh(t.post(M.start,{loginId:e,origin:n,loginOptions:o,passkeyOptions:r})))},update:{start:tf((e,n,r,o,i)=>eh(t.post(K.start,{loginId:e,origin:n,passkeyOptions:o,mfa:i},{token:r}))),finish:tv((e,n)=>eh(t.post(K.finish,{transactionId:e,response:n})))}},password:{signUp:ti((e,n,r,o={})=>{var{providerId:i}=o,s=(0,a.__rest)(o,["providerId"]);return eh(t.post(B,{loginId:e,password:n,user:r,loginOptions:s,providerId:i}))}),signIn:ti((e,n,r={})=>{var{providerId:o}=r,i=(0,a.__rest)(r,["providerId"]);return eh(t.post(V,{loginId:e,password:n,loginOptions:i,providerId:o}))}),sendReset:ta((e,n,r)=>eh(t.post(F,{loginId:e,redirectUrl:n,templateOptions:r}))),update:ts((e,n,r)=>eh(t.post(H,{loginId:e,newPassword:n},{token:r}))),replace:tl((e,n,r)=>eh(t.post(W,{loginId:e,oldPassword:n,newPassword:r}))),policy:()=>eh(t.get(z))},flow:{start:eF((e,n,r,o,i,a,s,l=!1)=>eh(t.post(G,{flowId:e,options:n,conditionInteractionId:r,interactionId:o,componentsVersion:i,flowVersions:a,input:s,isCustomScreen:l}))),next:eH((e,n,r,o,i,a,s=!1)=>eh(t.post(Z,{executionId:e,stepId:n,interactionId:r,version:o,componentsVersion:i,input:a,isCustomScreen:s})))},refresh:tb((e,n,r,o)=>{let i={};return r&&(i.externalToken=r),eh(t.post(o?"/v1/auth/try-refresh":"/v1/auth/refresh",i,{token:e,queryParams:n}))}),selectTenant:eE([ej("tenantId")],[eU('"token" must be string or undefined')])((e,n)=>eh(t.post("/v1/auth/tenant/select",{tenant:e},{token:n}))),logout:tb(e=>eh(t.post("/v1/auth/logout",{},{token:e}))),logoutAll:tb(e=>eh(t.post("/v1/auth/logoutall",{},{token:e}))),me:tb(e=>eh(t.get("/v1/auth/me",{token:e}))),myTenants:eE([ex('"tenants" must a string array or a boolean')],[eU('"token" must be string or undefined')])((e,n)=>{let r={};return"boolean"==typeof e?r.dct=e:r.ids=e,eh(t.post("/v1/auth/me/tenants",r,{token:n}))}),history:tb(e=>eh(t.get("/v1/auth/me/history",{token:e}))),isJwtExpired:ty(eu),getTenants:ty(ed),getJwtPermissions:ty(ec),getJwtRoles:ty(ep),getCurrentTenant:ty(ef),httpClient:t}}),{DeliveryMethods:eL});function tE(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)"__proto__"!==r&&(e[r]=n[r])}return e}e.s(["default",0,tx,"wrapWith",0,(e,t,n)=>(t.forEach(t=>{let r=t.split("."),o=r.shift(),i=e;for(;r.length>0;){if(i=i[o],!o||!i)throw Error(`Invalid path "${t}", "${o}" is missing or has no value`);
1o=r.shift()}if("function"!=typeof i[o])throw Error(`"${t}" is not a function`);let a=i[o];i[o]=n(a)}),e)],31453);var tC=function e(t,n){function r(e,r,o){if("u">typeof document){"number"==typeof(o=tE({},n,o)).expires&&(o.expires=new Date(Date.now()+864e5*o.expires)),o.expires&&(o.expires=o.expires.toUTCString()),e=encodeURIComponent(e).replace(/%(2[346B]|5E|60|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var i="";for(var a in o)o[a]&&(i+="; "+a,!0!==o[a]&&(i+="="+o[a].split(";")[0]));return document.cookie=e+"="+t.write(r,e)+i}}return Object.create({set:r,get:function(e){if("u">typeof document&&(!arguments.length||e)){for(var n=document.cookie?document.cookie.split("; "):[],r={},o=0;o<n.length;o++){var i=n[o].split("="),a=i.slice(1).join("=");try{var s=decodeURIComponent(i[0]);if(s in r||(r[s]=t.read(a,s)),e===s)break}catch(e){}}return e?r[e]:r}},remove:function(e,t){r(e,"",tE({},t,{expires:-1}))},withAttributes:function(t){return e(this.converter,tE({},this.attributes,t))},withConverter:function(t){return e(tE({},this.converter,t),this.attributes)}},{attributes:{value:Object.freeze(n)},converter:{value:Object.freeze(t)}})}({read:function(e){return'"'===e[0]&&(e=e.slice(1,-1)),e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)},write:function(e){return encodeURIComponent(e).replace(/%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g,decodeURIComponent)}},{path:"/"});e.s(["default",0,tC],17595);var tP="Blocked by CSP",tD="The endpoint parameter is not a valid URL",tA="Failed to load the JS script of the agent",t$="9319",tq="https://fpnpmcdn.net/v<version>/<apiKey>/loader_v<loaderVersion>.js";function tN(e){var t,n,r,o,i,a,s;return(t=function(){return new Promise(function(t,n){if(function(e){if(URL.prototype)try{return new URL(e,location.href),!1}catch(e){if(e instanceof Error&&"TypeError"===e.name)return!0;throw e}}(e))throw Error(tD);var r=document.createElement("script"),o=function(){var e;return null==(e=r.parentNode)?void 0:e.removeChild(r)},i=document.head||document.getElementsByTagName("head")[0];r.onload=function(){o(),t()},r.onerror=function(){o(),n(Error(tA))},r.async=!0,r.src=e,i.appendChild(r)})},n=function(){throw Error(tP)},o=document,i="securitypolicyviolation",a=function(t){var n=new URL(e,location.href),o=t.blockedURI;o!==n.href&&o!==n.protocol.slice(0,-1)&&o!==n.origin||(r=t,s())},o.addEventListener(i,a),s=function(){return o.removeEventListener(i,a)},Promise.resolve().then(t).then(function(e){return s(),e},function(e){return new Promise(function(e){var t=new MessageChannel;t.port1.onmessage=function(){return e()},t.port2.postMessage(null)}).then(function(){if(s(),r)return n();throw e})})).then(tL)}function tL(){var e,t,n=window,r="__fpjs_p_l_b",o=n[r];if((null==(t=null==(e=Object.getOwnPropertyDescriptor)?void 0:e.call(Object,n,r))?void 0:t.configurable)?delete n[r]:t&&!t.writable||(n[r]=void 0),"function"!=typeof(null==o?void 0:o.load))throw Error(t$);return o}e.s(["defaultEndpoint",0,{default:"endpoint"},"defaultScriptUrlPattern",0,tq,"load",0,function(e){e.scriptUrlPattern;var t,n,r,o,i,s,l,u=e.token,d=e.apiKey,c=void 0===d?u:d,p=(0,a.__rest)(e,["scriptUrlPattern","token","apiKey"]),g=null!==(t="scriptUrlPattern",l=Object.prototype.hasOwnProperty.call(e,t)?e[t]:void 0)&&void 0!==l?l:tq,h=(o=[],r="visibilitychange",i=function(){o.push({time:new Date,state:document.visibilityState})},(n=document).addEventListener(r,i,void 0),s=function(){return n.removeEventListener(r,i,void 0)},i(),[o,s]),f=h[0],v=h[1];return Promise.resolve().then(function(){if(!c||"string"!=typeof c)throw Error("API key required");return function(e,t){var n,r,o,i,s,l,u=[],d=(n=(0,a.__spreadArray)([],e,!0),r={current:function(){return n[0]},postpone:function(){var e=n.shift();void 0!==e&&n.push(e)},exclude:function(){n.shift()}},s=0,o=function(){return Math.random()*Math.min(3e3,100*Math.pow(2,s++))},i=new Set,[r.current(),function(e,t){var n,a=t instanceof Error?t.message:"";if(a===tP||a===tD)r.exclude(),n=0;else if(a===t$)r.exclude();else if(a===tA){var s=Date.now()-e.getTime()<50,l=r.current();l&&s&&!i.has(l)&&(i.add(l),n=0),r.postpone()}else r.postpone();var u=r.current();return void 0===u?void 0:[u,null!=n?n:e.getTime()+o()-Date.now()]}]),c=d[0],p=d[1];if(void 0===c)return Promise.reject(TypeError("The list of script URL patterns is empty"));var g=function(e){var n=new Date,r=function(t){return u.push({url:e,startedAt:n,finishedAt:new Date,error:t})},o=t(e);return o.then(function(){return r()},r),o.catch(function(e){if(null!=l||(l=e),u.length>=5)throw l;var t=p(n,e);if(!t)throw l;var r=t[0],o=t[1];return new Promise(function(e){return setTimeout(e,o)}).then(function(){return g(r)})})};return g(c).then(function(e){return[e,u]})}((Array.isArray(g)?g:[g]).map(function(e){var t,n;return t=String(e),n=encodeURIComponent,t.replace(/<[^<>]+>
1/g,function(e){return"<version>"===e?"3":"<apiKey>"===e?n(c):"<loaderVersion>"===e?n("3.11.6"):e})}),tN)}).catch(function(e){throw v(),e instanceof Error&&e.message===t$?Error(tA):e}).then(function(e){var t=e[0],n=e[1];return v(),t.load((0,a.__assign)((0,a.__assign)({},p),{ldi:{attempts:n,visibilityStates:f}}))})}],64342)},63133,e=>{"use strict";let t="u">typeof window;e.s(["IS_BROWSER",0,t,"baseHeaders",0,{"x-descope-sdk-name":"react","x-descope-sdk-version":"2.30.3"}])},29737,e=>{"use strict";let t=e.i(71645).default.createContext(void 0);e.s(["default",0,t])},80385,e=>{"use strict";let t;var n=e.i(70064),r=e.i(63133),o=e.i(78313);let i=e=>{let o=(0,n.createSdk)(Object.assign({persistTokens:r.IS_BROWSER,autoRefresh:r.IS_BROWSER},e));return t=o,o},a=()=>i({projectId:"temp pid",persistTokens:!1,autoRefresh:!1,storeLastAuthenticatedUser:!1});t=a();let s=()=>r.IS_BROWSER?null==t?void 0:t.getSessionToken():(console.warn("Get session token is not supported in SSR"),""),l=()=>r.IS_BROWSER?null==t?void 0:t.getRefreshToken():(console.warn("Get refresh token is not supported in SSR"),""),u=(0,o.wrapInTry)((e=s(),n)=>null==t?void 0:t.getJwtPermissions(e,n)),d=(0,o.wrapInTry)((e=s(),n)=>null==t?void 0:t.getJwtRoles(e,n)),c=(0,o.wrapInTry)((e=s())=>null==t?void 0:t.getCurrentTenant(e));e.s(["createTempSdk",0,a,"default",0,i,"getCurrentTenant",0,c,"getGlobalSdk",0,()=>t,"getJwtPermissions",0,u,"getJwtRoles",0,d,"getRefreshToken",0,l,"getSessionToken",0,s,"isRefreshTokenExpired",0,(e=l())=>null==t?void 0:t.isJwtExpired(e),"isSessionTokenExpired",0,(e=s())=>null==t?void 0:t.isJwtExpired(e),"refresh",0,(e=l())=>null==t?void 0:t.refresh(e)])},78313,e=>{"use strict";e.s(["isDescopeBridge",0,()=>"u">typeof window&&!!window.descopeBridge,"withValidation",0,e=>(...t)=>{if(!e)throw Error("You can only use this function after sdk initialization. Make sure to supply 'projectId' to <AuthProvider /> component");return e(...t)},"wrapInTry",0,e=>(...t)=>{let n;try{n=e(...t)}catch(e){console.error(e)}return n}])},70064,e=>{"use strict";let t,n;var r=e.i(90571),o=e.i(47293),i=e.i(31453),a=e.i(17595),s=e.i(64342);let l="3.2.0",u="u">typeof window,d=`https://descopecdn.com/npm/oidc-client-ts@${l}/dist/browser/oidc-client-ts.min.js`,c=`https://cdn.jsdelivr.net/npm/oidc-client-ts@${l}/dist/browser/oidc-client-ts.min.js`,p=["/v1/auth/refresh","/v1/auth/try-refresh","/v1/auth/me","/v1/auth/me/tenants","/v1/auth/me/history"],g=e=>{try{return(0,o.jwtDecode)(e).exp}catch(e){return null}},h=e=>{let{access_token:t,id_token:n,refresh_token:o,refresh_expire_in:i}=e,a=(0,r.__rest)(e,["access_token","id_token","refresh_token","refresh_expire_in"]);return Object.assign({sessionJwt:e.sessionJwt||t,idToken:n,refreshJwt:e.refreshJwt||o,sessionExpiration:e.sessionExpiration||(e=>{let{expires_in:t,expires_at:n,access_token:r}=e;return n||(t?Math.floor(Date.now()/1e3)+t:r?g(r):void 0)})(e),cookieExpiration:e.cookieExpiration||(e=>{let{refresh_expire_in:t,refresh_token:n}=e;return t?Math.floor(Date.now()/1e3)+t:g(n)})(e)},a)},f=(e,t)=>{var n;return["beforeRequest","afterRequest"].reduce((n,r)=>{var o;return n[r]=[].concat((null==(o=e.hooks)?void 0:o[r])||[]).concat((null==t?void 0:t[r])||[]),n},null!=(n=e.hooks)?n:e.hooks={}),e},v=async e=>{if(!(null==e?void 0:e.ok))return{};let t=await (null==e?void 0:e.clone().json());return h((null==t?void 0:t.authInfo)||t||{})},w=(e,t)=>{if(!((null==t?void 0:t.status)>=400&&(null==t?void 0:t.status)<500))return!1;let n=(null==e?void 0:e.path)||"";return p.includes(n)},m=void 0!==t||u&&void 0!==window.localStorage,y=(e,n)=>{var r,o;return null==(o=null==(r=t||u&&window.localStorage)?void 0:r.setItem)?void 0:o.call(r,e,n)},b=e=>{var n,r;return null==(r=null==(n=t||u&&window.localStorage)?void 0:n.getItem)?void 0:r.call(n,e)},k=e=>{var n,r;return null==(r=null==(n=t||u&&window.localStorage)?void 0:n.removeItem)?void 0:r.call(n,e)},I=e=>{var n,r,o,i,a;return null!=(a=null!=(r=null==(n=null==t?void 0:t.key)?void 0:n.call(t,e))?r:u&&(null==(i=null==(o=window.localStorage)?void 0:o.key)?void 0:i.call(o,e)))?a:null},O=(...e)=>{console.debug(...e)},S=(...e)=>{console.warn(...e)},j="DSRCN";function _(e,t,n){if(t){let{cookieDomain:r,cookiePath:o,cookieSameSite:i,cookieExpiration:s,cookieSecure:l}=n,u=new Date(1e3*s),d=T(r);a.default.set(e,t,{path:o,domain:d?r:void 0,expires:u,sameSite:i,secure:l})}}function T(e){let t=window.location.hostname.split("."),n=null==e?void 0:e.split(".");return t.slice(-(null==n?void 0:n.length)).join(".")===e}let R=e=>(null==e?void 0:e.cookieName)||"DS",U=e=>(null==e?void 0:e.cookieName)||"DSR";function x(e="",t){return a.default.get(U(t))||b(`${e}DSR`)||""}
1function E(e="",t){return a.default.get(R(t))||b(`${e}DS`)||""}function C(e=""){return b(`${e}DSI`)||""}function P(e="",t,n,r){k(`${e}DSR`),k(`${e}DS`),k(`${e}DSI`),k(`${e}${j}`);let o=R(t);a.default.remove(o,null==r?void 0:r.session);let i=U(n);a.default.remove(i,null==r?void 0:r.refresh)}let D=u&&(null==localStorage?void 0:localStorage.getItem("fingerprint.endpoint.url"))||"https://api.descope.com",A=(e=!1)=>{let t=b("fp");if(!t)return null;let n=JSON.parse(t);return(new Date).getTime()>n.expiry&&!e?null:n.value},$=async(e,t=D)=>{try{let n;if(A())return;let r=(Date.now().toString(36)+Math.random().toString(36).substring(2)+Math.random().toString(36).substring(2)).substring(0,27),o=new URL(t);o.pathname="/fXj8gt3x8VulJBna/x96Emn69oZwcd7I6";let i=new URL(t);i.pathname="/fXj8gt3x8VulJBna/w78aRZnnDZ3Aqw0I";let a=i.toString()+"?apiKey=<apiKey>&version=<version>&loaderVersion=<loaderVersion>",l=(0,s.load)({apiKey:e,endpoint:[o.toString(),s.defaultEndpoint],scriptUrlPattern:[a,s.defaultScriptUrlPattern]}),u=await l,{requestId:d}=await u.get({linkedId:r});n={value:{vsid:r,vrid:d},expiry:(new Date).getTime()+864e5},y("fp",JSON.stringify(n))}catch(e){console.warn("Could not load fingerprint",e)}},q=e=>{let t=A(!0);return t&&e.body&&(e.body.fpData=t),e},N="descopeFlowNonce",L="X-Descope-Flow-Nonce",J="/v1/flow/start",M="/v1/flow/next",K=(e,t=N)=>`${t}${e}`,B=e=>{var t;return(null==(t=/.*\|#\|(.*)/.exec(e))?void 0:t[1])||null},V=e=>{var t;return e.path===M&&(null==(t=e.body)?void 0:t.executionId)?B(e.body.executionId):null},F="dls_last_user_login_id",H="dls_last_user_display_name",W=()=>b(F),z=()=>b(H),G=e=>async(...t)=>{t[1]=t[1]||{};let[,n={}]=t,r=W(),o=z();return r&&(null!=n.lastAuth||(n.lastAuth={}),n.lastAuth.loginId=r,n.lastAuth.name=o),await e(...t)},Z="DSLI",X=e=>async(...t)=>{let n=await e(...t);return k(Z),n};function Y(){let e=[];return{pub:t=>{e.forEach(e=>e(t))},sub:t=>{let n=e.push(t)-1;return()=>e.splice(n,1)}}}async function Q(e){var t;let n,r=((n=JSON.parse(e)).publicKey.challenge=ea(n.publicKey.challenge),n.publicKey.user.id=ea(n.publicKey.user.id),null==(t=n.publicKey.excludeCredentials)||t.forEach(e=>{e.id=ea(e.id)}),n);try{let e=await navigator.credentials.create(r);return JSON.stringify({id:e.id,rawId:es(e.rawId),type:e.type,response:{attestationObject:es(e.response.attestationObject),clientDataJSON:es(e.response.clientDataJSON)}})}catch(e){throw await en(e,r,!0)}}async function ee(e){let t=eo(e);try{return ei(await navigator.credentials.get(t))}catch(e){throw await en(e,t,!1)}}async function et(e,t){let n=eo(e);n.signal=t.signal,n.mediation="conditional";try{return ei(await navigator.credentials.get(n))}catch(e){throw await en(e,n,!1)}}async function en(e,t,n){if(e&&"object"==typeof e)try{e.reason=await async function(e,t,n){var r,o;let i=null==e?void 0:e.name;if("AbortError"===i&&(null==t?void 0:t.signal)instanceof AbortSignal)return"aborted";if("InvalidStateError"===i&&n)return"authenticator_already_registered";if("NotSupportedError"===i)return"no_supported_algorithm";if("ConstraintError"===i)return"authenticator_constraints_unsupported";if("SecurityError"===i){let e=window.location.hostname;return"localhost"===e||/^([a-z0-9]+(-[a-z0-9]+)*\.)+[a-z]{2,}$/i.test(e)?"invalid_rpid":"invalid_domain"}if(!await er())return"webauthn_unsupported";let a="platform"===(null==(o=null==(r=null==t?void 0:t.publicKey)?void 0:r.authenticatorSelection)?void 0:o.authenticatorAttachment);return n&&a&&!await er(!0)?"platform_authenticator_unsupported":"NotAllowedError"===i?"not_allowed":"unknown"}(e,t,n)}catch(e){}return e}async function er(e=!1){var t,n;if(!u)return Promise.resolve(!1);if(u&&window.descopeBridge){let e=null==(n=null==(t=window.descopeBridge)?void 0:t.hostInfo)?void 0:n.webauthn;if("boolean"==typeof e)return e}let r=!!(window.PublicKeyCredential&&navigator.credentials&&navigator.credentials.create&&navigator.credentials.get);return r&&e&&PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable?PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable():r}function eo(e){var t;let n=JSON.parse(e);return n.publicKey.challenge=ea(n.publicKey.challenge),null==(t=n.publicKey.allowCredentials)||t.forEach(e
1=>{e.id=ea(e.id)}),n}function ei(e){return JSON.stringify({id:e.id,rawId:es(e.rawId),type:e.type,response:{authenticatorData:es(e.response.authenticatorData),clientDataJSON:es(e.response.clientDataJSON),signature:es(e.response.signature),userHandle:e.response.userHandle?es(e.response.userHandle):void 0}})}function ea(e){let t=e.replace(/_/g,"/").replace(/-/g,"+");return Uint8Array.from(atob(t),e=>e.charCodeAt(0)).buffer}function es(e){return btoa(String.fromCharCode.apply(null,new Uint8Array(e))).replace(/\//g,"_").replace(/\+/g,"-").replace(/=/g,"")}var el,eu=(el=e=>({async signUp(t,n,r){let o=await e.webauthn.signUp.start(t,window.location.origin,n,r);if(!o.ok)return o;let i=await Q(o.data.options);return await e.webauthn.signUp.finish(o.data.transactionId,i)},async signIn(t,n){let r=await e.webauthn.signIn.start(t,window.location.origin,void 0,void 0,n);if(!r.ok)return r;let o=await ee(r.data.options);return await e.webauthn.signIn.finish(r.data.transactionId,o)},async signUpOrIn(t,n){var r;let o=await e.webauthn.signUpOrIn.start(t,window.location.origin,n);if(!o.ok)return o;if(null==(r=o.data)?void 0:r.create){let t=await Q(o.data.options);
1return await e.webauthn.signUp.finish(o.data.transactionId,t)}{let t=await ee(o.data.options);return await e.webauthn.signIn.finish(o.data.transactionId,t)}},async update(t,n,r){let o=await e.webauthn.update.start(t,window.location.origin,n,r);if(!o.ok)return o;let i=await Q(o.data.options);return await e.webauthn.update.finish(o.data.transactionId,i)},helpers:{create:Q,get:ee,isSupported:er,conditional:et}}),(...e)=>{let t=el(...e);return Object.assign(t.signUp,e[0].webauthn.signUp),Object.assign(t.signIn,e[0].webauthn.signIn),Object.assign(t.signUpOrIn,e[0].webauthn.signUpOrIn),Object.assign(t.update,e[0].webauthn.update),t});let ed="/fedcm/config";async function ec(e,t){var n;try{await ep(e,t)}catch(e){null==(n=null==t?void 0:t.onFailed)||n.call(t,e)}}async function ep(e,t){var n,r;let o=await async function(e,t="google",n,r,o){let i=(()=>{if(window.crypto&&window.crypto.getRandomValues){let e=new Uint8Array(16);return window.crypto.getRandomValues(e),Array.from(e,e=>e.toString(16).padStart(2,"0")).join("")}return Math.random().toString(36).substring(2)})(),a=await async function(){return new Promise((e,t)=>{if(window.google)return void e(window.google.accounts.id);let n=document.getElementById("google-gsi-client-script");n||(n=document.createElement("script"),document.head.appendChild(n),n.async=!0,n.defer=!0,n.id="google-gsi-client-script",n.src="https://accounts.google.com/gsi/client"),n.onload=function(){window.google?e(window.google.accounts.id):t("Failed to load Google GSI client script - not loaded properly")},n.onerror=function(){t("Failed to load Google GSI client script - failed to load")}})}(),s=await e.oauth.getOneTapClientId(t);if(!s.ok)throw Error("Failed to get OneTap client ID for provider "+t);let l=s.data.clientId;return new Promise(e=>{var s,u;let d=n=>{e({provider:t,nonce:i,credential:null==n?void 0:n.credential})};a.initialize(Object.assign(Object.assign({},n),{itp_support:null==(s=null==n?void 0:n.itp_support)||s,use_fedcm_for_prompt:null==(u=null==n?void 0:n.use_fedcm_for_prompt)||u,client_id:l,callback:d,nonce:i})),a.prompt(e=>{var t,n;if(o&&(null==e?void 0:e.isDismissedMoment())){let n=null==(t=e.getDismissedReason)?void 0:t.call(e);return null==o||o(n),void d()}if(r&&(null==e?void 0:e.isSkippedMoment())){let t=null==(n=e.getSkippedReason)?void 0:n.call(e);return null==r||r(t),void d()}})})}(e,t.provider,t.oneTapConfig,t.onSkipped,t.onDismissed);if(!o.credential)return null;if(null==t?void 0:t.onCodeReceived){let r=await e.oauth.verifyOneTapIDToken(o.provider,o.credential,o.nonce,null==t?void 0:t.loginOptions);if(!r.ok||!r.data)throw Error("Failed to verify OneTap client ID for provider "+o.provider);null==(n=null==t?void 0:t.onCodeReceived)||n.call(t,r.data.code)}else{let n=await e.oauth.exchangeOneTapIDToken(o.provider,o.credential,o.nonce,null==t?void 0:t.loginOptions);if(!n.ok||!n.data)throw Error("Failed to exchange OneTap client ID for provider "+o.provider);null==(r=null==t?void 0:t.onAuthenticated)||r.call(t,n.data)}}let eg=(e,t)=>new Promise((n,r)=>{if(!e.length)return r(Error("No URLs provided to loadScriptWithFallback"));let o=t();if(o)return n(o);let i=e.shift(),a=document.createElement("script");a.src=i,a.id=(e=>{let t=0;for(let n=0;n<e.length;n++)t=(t<<5)-t+e.charCodeAt(n)|0;return Math.abs(t).toString(16)})(i),a.onload=()=>{let e=t();if(e)return n(e);throw Error("Could not get entry after loading script from URL")},a.addEventListener("error",()=>{eg(e,t),a.setAttribute("data-error","true")}),document.body.appendChild(a)}),eh=async(e,t,r)=>{let o,i,a,s;n||(n=(async()=>{try{let e=Error("Cannot find module 'oidc-client-ts'");throw e.code="MODULE_NOT_FOUND",e}catch(e){return eg([d,c],()=>window.oidc)}})());let{OidcClient:l,WebStorageStateStore:u}=await n;if(!l)throw Error("oidc-client-ts is not installed. Please install it by running `npm install oidc-client-ts`");let p=(null==r?void 0:r.redirectUri)||window.location.href;if(null==r?void 0:r.issuer){if(!r.clientId)throw Error("clientId is required when providing a custom issuer/authority");o=r.issuer,i=r.clientId,a=`${i}_user`,s="openid"}else(null==r?void 0:r.applicationId)?(o=e.httpClient.buildUrl(t),o=`${o}/${r.applicationId}`):o=e.httpClient.buildUrl(t),i=t,a=`${i}_user`,s="openid email roles descope.custom_claims offline_access";let g={authority:o,client_id:i,redirect_uri:p,response_type:"code",scope:(null==r?void 0:r.scope)||s,stateStore:new u({store:window.localStorage,prefix:i}),loadUserInfo:!0,fetchRequestCredentials:"same-origin"};return(null==r?void 0:r.redirectUri)&&(g.redirect_uri=r.redirectUri),{client:new l(g),stateUserKey:a}},ef=(function(...e){return t=>e.reduce((e,t)=>
1t(e),t)})(e=>n=>(t=n.customStorage,e(n)),e=>t=>{var{fpKey:n,fpLoad:o}=t,i=(0,r.__rest)(t,["fpKey","fpLoad"]);return u?(n&&o&&$(n).catch(()=>null),e(f(i,{beforeRequest:q}))):e(i)},e=>t=>e(Object.assign(Object.assign({},t),{baseHeaders:Object.assign({"x-descope-sdk-name":"web-js","x-descope-sdk-version":"1.51.1"},t.baseHeaders)})),e=>t=>{let n=Y(),r=Y(),o=Y(),a=Y(),s=e(f(t,{afterRequest:async(e,t)=>{if(w(e,t))O("Session invalidated, notifying subscribers with empty values"),r.pub(null),o.pub(null),n.pub(null),a.pub(null);else{let e=await (async e=>{let t=await v(e);return(null==t?void 0:t.user)||((null==t?void 0:t.hasOwnProperty("userId"))?t:void 0)})(t);e&&o.pub(e);let{sessionJwt:i,sessionExpiration:s,claims:l}=await v(t);i&&r.pub(i),l&&a.pub(l),(s||i)&&n.pub(s||42)}}}));return Object.assign((0,i.wrapWith)(s,["logout","logoutAll","oidc.logout"],e=>async(...t)=>{let i=await e(...t);return r.pub(null),o.pub(null),n.pub(null),a.pub(null),i}),{onSessionTokenChange:r.sub,onUserChange:o.sub,onClaimsChange:a.sub,onIsAuthenticatedChange:e=>n.sub(t=>{e(!!t)})})},e=>n=>{var o;let{enableFlowNonce:i=!0,nonceStoragePrefix:a=N}=n,s=(0,r.__rest)(n,["enableFlowNonce","nonceStoragePrefix"]);if(!i)return e(s);((e=N)=>{var n,r,o;try{if(!m)return;for(let i=0;i<(n=void 0,r=void 0,o=void 0,null!=(o=null!=(n=null==t?void 0:t.length)?n:u&&(null==(r=window.localStorage)?void 0:r.length))?o:0);i++){let t=I(i);if(t&&t.startsWith(e)){let e=b(t);if(e)try{JSON.parse(e).expiry<Date.now()&&k(t)}catch(e){k(t)}}}}catch(e){console.error("Error cleaning up expired nonces:",e)}})(a);let l=e(f(s,{afterRequest:async(e,t)=>{if(e.path!==J&&e.path!==M)return;let{nonce:n,executionId:r}=await (async(e,t)=>{try{let n=t.headers.get(L),r=await t.clone().json().then(e=>(null==e?void 0:e.executionId)||null).catch(()=>null);return r||(r=V(e)),{nonce:n,executionId:B(r)}}catch(e){return{nonce:null,executionId:null}}})(e,t);n&&r&&((e,t,n,r=N)=>{try{let o=K(e,r),i={value:t,expiry:Date.now()+1e3*(n?172800:10800),isStart:n};y(o,JSON.stringify(i))}catch(e){console.error("Error setting flow nonce:",e)}})(r,n,e.path===J,a)},beforeRequest:e=>{if(e.path===M){let t=V(e);if(t){let n=((e,t=N)=>{try{let n=K(e,t),r=b(n);if(!r)return null;let o=JSON.parse(r);return o.expiry<Date.now()?(((e,t=N)=>{try{let n=K(e,t);k(n)}catch(e){console.error("Error removing flow nonce:",e)}})(e,t),null):o.value}catch(e){return console.error("Error getting flow nonce:",e),null}})(t,a);n&&(e.headers=e.headers||{},e.headers[L]=n)}}return e}}));if(null==(o=l.flow)?void 0:o.next){let e=Promise.resolve(),t=l.flow.next.bind(l.flow);l.flow.next=async(...n)=>{let r,o=e;e=new Promise(e=>{r=e}),await o;try{return await t(...n)}finally{r()}}}return l},e=>t=>{let n=e(f(t,{afterRequest:async(e,t)=>{if(w(e,t))return void k(Z);let n=await v(t);(null==n?void 0:n.sessionExpiration)&&y(Z,String(n.sessionExpiration))}}));return(0,i.wrapWith)(n,["logout","logoutAll","oidc.logout"],X)},e=>t=>{let n,a;var{autoRefresh:s}=t,l=(0,r.__rest)(t,["autoRefresh"]);let d=!!s,c="object"==typeof s&&(null==s?void 0:s.customActivityTracking);if(!d||u&&window.descopeBridge)return Object.assign(e(l),{markUserActive:()=>{S("markUserActive() called but has no effect")}});let{clearAllTimers:p,setTimer:g}=(n=[],{clearAllTimers:()=>{for(;n.length;)clearTimeout(n.pop())},setTimer:(e,t)=>{n.push(setTimeout(e,t))}}),h,m,y=null,b=!1,k=!1;c&&(O("Activity-based refresh enabled"),a=!0,y={hadActivity:()=>a,reset:()=>{a=!1},markActive:()=>{a=!0}}),u&&document.addEventListener("visibilitychange",()=>{"visible"===document.visibilityState&&h&&new Date>h&&(O("Expiration time passed, refreshing session"),I.refresh(x()||m))});let I=e(f(l,{afterRequest:async(e,t)=>{let{sessionJwt:n,refreshJwt:r,sessionExpiration:i,nextRefreshSeconds:a}=await v(t);if(w(e,t))O("Session invalidated, canceling all timers"),p();else if(n||i){var s,l;let e;if(!(h=((e,t)=>{if(t)return new Date(1e3*t);O("Could not extract expiration time from session token, trying to decode the token");try{let t=(0,o.jwtDecode)(e);if(t.exp)return new Date(1e3*t.exp)}catch(e){return null}})(n,i)))return void O("Could not extract expiration time from session token");m=r,b=a>0;let t=(s=h,(l=a)>0?(e=1e3*l,O(`Using provided nextRefreshSeconds: ${l}s`)):e=(s?s.getTime()-(new Date).getTime():0)-2e4,e>0x7fffffff&&(O(`Timeout is too large (${e}ms), setting it to 2147483647ms`),e=0x7fffffff),e);if(p(),t<=2e4)return void O("Session is too close to expiration, not setting refresh timer");let d=new Date(Date.now()+t).toLocaleTimeString("en-US",{hour12:!1});O(`Setting refresh timer for ${d}. (${t}ms)`),y&&(y.reset(),k=!1),g(()=>{if(u&&"hidden"===document.visibilityState)O("Skipping refresh due to timer - document is hidden");else{if(y&&b&&!y.hadActivity())return O("Skipping refresh due to timer - user is idle"),void(k=!0);O("Refreshing session due to timer"),I.refresh(x()||r)}},t)}}}));return Object.assign((0,i.wrapWith)(I,["logout","logoutAll","oidc.logout"],e=>async(...t)=>{let n=await e(...t);return O("Clearing all timers"),p(),n}),{markUserActive:y?()=>{O("markUserActive() called"),b||O("markUserActive() called but server does not have inactivity timeout configured (no nextRefreshSeconds)"),y.markActive(),k&&(O("User became active after skipped refresh, triggering refresh"),k=!1,p(),I.refresh(x()||m))}:()=>{S("markUserActive() called but customActivityTracking is not enabled â this call has no effect")}})},e=>t=>{var{storeLastAuthenticatedUser:n=!0,keepLastAuthenticatedUserAfterLogout:o=!1}=t,a=(0,r.__rest)(t,["storeLastAuthenticatedUser","keepLastAuthenticatedUserAfterLogout"]);if(!n)return Object.assign(e(a),{getLastUserLoginId:W,getLastUserDisplayName:z});let s=e(f(a,{afterRequest:async(e,t)=>{var n;let{userInfo:r,lastAuth:o}=await (async e=>{if(!(null==e?void 0:e.ok))return{userInfo:void 0,lastAuth:void 0};let t=await (null==e?void 0:e.clone().json()),n=h((null==t?void 0:t.authInfo)||t||{});return{userInfo:(null==n?void 0:n.user)||((null==n?void 0:n.hasOwnProperty("userId"))?n:void 0),lastAuth:t.lastAuth}})(t),i=null==(n=null==r?void 0:r.loginIds)?void 0:n[0],a=null==r?void 0:r.name;i?(y(F,i),y(H,a)):(null==o?void 0:o.loginId)&&y(F,o.loginId)}})),l=(0,i.wrapWith)(s,["flow.start"],G);return Object.assign(l=(0,i.wrapWith)(l,["logout","logoutAll"],e=>async(...t)=>{let n=await e(...t);return o||(k(F),k(H)),n}),{getLastUserLoginId:W,getLastUserDisplayName:z})},e=>t=>{let n,o;var{persistTokens:s,sessionTokenViaCookie:l,refreshTokenViaCookie:d,storagePrefix:c,refreshCookieName:p}
1=t,g=(0,r.__rest)(t,["persistTokens","sessionTokenViaCookie","refreshTokenViaCookie","storagePrefix","refreshCookieName"]);if(!s||!u)return e(Object.assign({refreshCookieName:p},g));let h=e(f(Object.assign({refreshCookieName:p},g),{beforeRequest:e=>{let t=Object.assign(e,{token:e.token||x(c,d)});if(!p){let e=function(e=""){return b(`${e}${j}`)}(c);e&&(t.headers=Object.assign(Object.assign({},t.headers||{}),{"x-descope-refresh-cookie-name":e}))}let n=function(e=""){return b(`${e}DTD`)||""}(c);return n&&(t.headers=Object.assign(Object.assign({},t.headers||{}),{"x-descope-trusted-device-token":n})),t},afterRequest:async(e,t)=>{if(w(e,t))O("Session invalidated, clearing persisted tokens"),P(c,l,d,n);else{let e=await v(t);e.cookieName?y(`${c||""}${j}`,e.cookieName):e.refreshJwt&&k(`${c||""}${j}`);let r=((e={},t=!1,n="",r=!1)=>{var o,i,s,l;let u,{sessionJwt:d,refreshJwt:c,trustedDeviceJwt:p}=e;if(c)if(r){k(`${n}DSR`);let t=r.sameSite||"Strict",a=null==(o=r.secure)||o,s=null!=(i=r.domain)?i:e.cookieDomain,l=U(r);a&&"https:"!==window.location.protocol&&S("Refresh token cookie is configured with secure=true but the page is not using HTTPS. The cookie will not be set. To fix this, pass refreshTokenViaCookie: { secure: process.env['NODE_ENV'] !== 'development' }");let d=Object.assign(Object.assign({},e),{cookieSameSite:t,cookieSecure:a,cookieDomain:s});_(l,c,d);let p=T(s);u=Object.assign(Object.assign({},u),{refresh:{path:d.cookiePath,domain:p?s:void 0}})}else{let e=U(r);a.default.remove(e),y(`${n}DSR`,c)}if(d)if(t){let n=t.sameSite||"Strict",r=null==(s=t.secure)||s,o=null!=(l=t.domain)?l:e.cookieDomain,i=R(t);r&&"https:"!==window.location.protocol&&S("Session token cookie is configured with secure=true but the page is not using HTTPS. The cookie will not be set. To fix this, pass sessionTokenViaCookie: { secure: process.env['NODE_ENV'] !== 'development' }");let a=Object.assign(Object.assign({},e),{cookieSameSite:n,cookieSecure:r,cookieDomain:o});_(i,d,a);let c=T(o);u=Object.assign(Object.assign({},u),{session:{path:a.cookiePath,domain:c?o:void 0}})}else y(`${n}DS`,d);return e.idToken&&y(`${n}DSI`,e.idToken),p&&y(`${n}DTD`,p),u})(e,l,c,d);r&&(n=r)}}}));return Object.assign((0,i.wrapWith)(h,["logout","logoutAll","oidc.logout"],(o=()=>n,e=>async(...t)=>{let n=await e(...t);return P(c,l,d,null==o?void 0:o()),n})),{getRefreshToken:()=>x(c,d),getSessionToken:()=>E(c,l),getIdToken:()=>C(c)})})(e=>{var t,n,r;let o,a,s=(0,i.default)(e),l=(n=e.projectId,r=e.oidcConfig,o=async()=>{let e,t;return e&&t||({client:e,stateUserKey:t}=await eh(s,n,r)),{client:e,stateUserKey:t}},{loginWithRedirect:async(e={},t=!1)=>{var n;let{client:r}=await o(),i=await r.createSigninRequest(e),{url:a}=i;return t||(await (null==(n=s.httpClient.hooks)?void 0:n.afterRequest
1({},new Response(JSON.stringify(i)))),window.location.href=a),{ok:!0,data:i}},finishLogin:a=async(e="")=>{var t;let n,{client:r,stateUserKey:i}=await o(),a=await r.processSigninResponse(e||window.location.href);return await (null==(t=s.httpClient.hooks)?void 0:t.afterRequest({},new Response(JSON.stringify(a)))),y(i,JSON.stringify({id_token:a.id_token,session_state:a.session_state,profile:a.profile})),(n=new URL(window.location.href)).searchParams.delete("code"),n.searchParams.delete("state"),window.history.replaceState({},document.title,n.toString()),a},finishLoginIfNeed:async(e="")=>{if(window.location.search.includes("code")&&window.location.search.includes("state"))return await a(e)},refreshToken:async e=>{var t;let n,{client:r,stateUserKey:i}=await o(),a=(n=b(i))?JSON.parse(n):null;if(!a)throw Error("User not found in storage to refresh token");let l=e;if(!l){let e={};s.httpClient.hooks.beforeRequest(e),l=e.token}let u=await r.useRefreshToken({state:{refresh_token:l,session_state:a.session_state,profile:a.profile}});return await (null==(t=s.httpClient.hooks)?void 0:t.afterRequest
1({},new Response(JSON.stringify(u)))),u},logout:async(e,t=!1)=>{let{client:n,stateUserKey:r}=await o();e||(e={}),e.id_token_hint=e.id_token_hint||C(),e.post_logout_redirect_uri=e.post_logout_redirect_uri||window.location.href;let i=await n.createSignoutRequest(e),{url:a}=i;return k(r),t||window.location.replace(a),i}});return Object.assign(Object.assign({},s),{refresh:async(t,n)=>{var r;if(u&&window.descopeBridge)return O(`Refresh called in native flow: ${Error().stack}`),Promise.resolve({ok:!1,error:{errorCode:"J171000",errorDescription:"Refresh is not supported in native flows via the web SDK"}});if(e.oidcConfig)try{return await l.refreshToken(t),Promise.resolve({ok:!0})}catch(e){return Promise.resolve({ok:!1,error:{errorCode:"J161001",errorDescription:e.toString()}})}if(n&&!b(Z)&&!b(F)&&!b("DSLI_DISABLED"))return Promise.resolve({ok:!0});let o=E(),i=x(),a="";if(e.getExternalToken)try{a=await (null==(r=e.getExternalToken)?void 0:r.call(e))}catch(e){O("Error getting external token while refreshing",e)}return s.refresh(t,{dcs:o?"t":"f",dcr:i?"t":"f"},a,n)},logout:async t=>{if(e.oidcConfig)try{return await l.logout({id_token_hint:t}),Promise.resolve({ok:!0})}catch(e){return Promise.resolve({ok:!1,error:{errorCode:"J161000",errorDescription:e.toString()}})}return s.logout(t)},flow:Object.assign(Object.assign({},s.flow),{start:async(...e)=>{let t=await er(),n=Object.assign(Object.assign({location:window.location.href},e[1]),{deviceInfo:{webAuthnSupport:t},startOptionsVersion:1});return e[1]=n,s.flow.start(...e)}}),webauthn:eu(s),fedcm:(t=e.projectId,{onetap:{requestExchangeCode(e){ec(s,e)},requestAuthentication(e){ec(s,e)}},async oneTap(e,t,n,r,o){await ep(s,{provider:e,oneTapConfig:t,loginOptions:n,onSkipped:r,onDismissed:o})},async launch(e){var n;let r={identity:{context:e||"signin",providers:[{configURL:s.httpClient.buildUrl(t+ed),clientId:t}]}},o=await (null==(n=navigator.credentials)?void 0:n.get(r));return s.refresh(o.token)},isSupported:()=>u&&"IdentityCredential"in window,async isLoggedIn(e){var n;let r=s.httpClient.buildUrl(t+ed);try{let o=await (null==(n=navigator.credentials)?void 0:n.get({identity:{context:e||"signin",providers:[{configURL:r,clientId:t}]}}));return!!o&&!!o.token}catch(e){return!1}}}),oidc:l})});e.s(["createSdk",0,ef])},90571,e=>{"use strict";var t=function(){return(t=Object.assign||function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var o in t=arguments[n])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)};"function"==typeof SuppressedError&&SuppressedError,e.s(["__assign",()=>t,"__awaiter",0,function(e,t,n,r){return new(n||(n=Promise))(function(o,i){function a(e){try{l(r.next(e))}catch(e){i(e)}}function s(e){try{l(r.throw(e))}catch(e){i(e)}}function l(e){var t;e.done?o(e.value):((t=e.value)instanceof n?t:new n(function(e){e(t)})).then(a,s)}l((r=r.apply(e,t||[])).next())})},"__classPrivateFieldGet",0,function(e,t,n,r){if("a"===n&&!r)throw TypeError("Private accessor was defined without a getter");if("function"==typeof t?e!==t||!r:!t.has(e))throw TypeError("Cannot read private member from an object whose class did not declare it");return"m"===n?r:"a"===n?r.call(e):r?r.value:t.get(e)},"__classPrivateFieldSet",0,function(e,t,n,r,o){if("m"===r)throw TypeError("Private method is not writable");if("a"===r&&!o)throw TypeError("Private accessor was defined without a setter");if("function"==typeof t?e!==t||!o:!t.has(e))throw TypeError("Cannot write private member to an object whose class did not declare it");return"a"===r?o.call(e,n):o?o.value=n:t.set(e,n),n},"__rest",0,function(e,t){var n={};for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&0>t.indexOf(r)&&(n[r]=e[r]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols)for(var o=0,r=Object.getOwnPropertySymbols(e);o<r.length;o++)0>t.indexOf(r[o])&&Object.prototype.propertyIsEnumerable.call(e,r[o])&&(n[r[o]]=e[r[o]]);return n},"__spreadArray",0,function(e,t,n){if(n||2==arguments.length)for(var r,o=0,i=t.length;o<i;o++)!r&&o in t||(r||(r=Array.prototype.slice.call(t,0,o)),r[o]=t[o]);return e.concat(r||Array.prototype.slice.call(t))}])}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.